auth0 4.1.0 → 4.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/dist/cjs/auth/oauth.d.ts +83 -2
- package/dist/cjs/auth/oauth.js +33 -0
- package/dist/cjs/auth/oauth.js.map +1 -1
- package/dist/cjs/version.d.ts +1 -1
- package/dist/cjs/version.js +1 -1
- package/dist/esm/auth/oauth.d.ts +83 -2
- package/dist/esm/auth/oauth.js +34 -1
- package/dist/esm/auth/oauth.js.map +1 -1
- package/dist/esm/version.d.ts +1 -1
- package/dist/esm/version.js +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -44,7 +44,7 @@ const auth0 = new AuthenticationClient({
|
|
|
44
44
|
});
|
|
45
45
|
```
|
|
46
46
|
|
|
47
|
-
See [more examples](
|
|
47
|
+
See [more examples](https://github.com/auth0/node-auth0/blob/master/EXAMPLES.md#authentication-client).
|
|
48
48
|
|
|
49
49
|
#### Management API Client
|
|
50
50
|
|
|
@@ -73,7 +73,7 @@ var management = new ManagementClient({
|
|
|
73
73
|
});
|
|
74
74
|
```
|
|
75
75
|
|
|
76
|
-
See [more examples](
|
|
76
|
+
See [more examples](https://github.com/auth0/node-auth0/blob/master/EXAMPLES.md#management-client).
|
|
77
77
|
|
|
78
78
|
## API Reference
|
|
79
79
|
|
package/dist/cjs/auth/oauth.d.ts
CHANGED
|
@@ -7,7 +7,7 @@ export interface TokenSet {
|
|
|
7
7
|
*/
|
|
8
8
|
access_token: string;
|
|
9
9
|
/**
|
|
10
|
-
* The refresh token,
|
|
10
|
+
* The refresh token, available with the `offline_access` scope.
|
|
11
11
|
*/
|
|
12
12
|
refresh_token?: string;
|
|
13
13
|
/**
|
|
@@ -19,7 +19,7 @@ export interface TokenSet {
|
|
|
19
19
|
*/
|
|
20
20
|
token_type: 'Bearer';
|
|
21
21
|
/**
|
|
22
|
-
* The duration in secs that
|
|
22
|
+
* The duration in secs that the access token is valid.
|
|
23
23
|
*/
|
|
24
24
|
expires_in: number;
|
|
25
25
|
}
|
|
@@ -77,6 +77,67 @@ export interface ClientCredentialsGrantRequest extends ClientCredentials {
|
|
|
77
77
|
*/
|
|
78
78
|
audience: string;
|
|
79
79
|
}
|
|
80
|
+
export interface PushedAuthorizationRequest extends ClientCredentials {
|
|
81
|
+
/**
|
|
82
|
+
* URI to redirect to.
|
|
83
|
+
*/
|
|
84
|
+
redirect_uri: string;
|
|
85
|
+
/**
|
|
86
|
+
* The response_type the client expects.
|
|
87
|
+
*/
|
|
88
|
+
response_type: string;
|
|
89
|
+
/**
|
|
90
|
+
* The response_mode to use.
|
|
91
|
+
*/
|
|
92
|
+
response_mode?: string;
|
|
93
|
+
/**
|
|
94
|
+
* The nonce.
|
|
95
|
+
*/
|
|
96
|
+
nonce?: string;
|
|
97
|
+
/**
|
|
98
|
+
* State value to be passed back on successful authorization.
|
|
99
|
+
*/
|
|
100
|
+
state?: string;
|
|
101
|
+
/**
|
|
102
|
+
* Name of the connection.
|
|
103
|
+
*/
|
|
104
|
+
connection?: string;
|
|
105
|
+
/**
|
|
106
|
+
* Scopes to request. Multiple scopes must be separated by a space character.
|
|
107
|
+
*/
|
|
108
|
+
scope?: string;
|
|
109
|
+
/**
|
|
110
|
+
* The unique identifier of the target API you want to access.
|
|
111
|
+
*/
|
|
112
|
+
audience?: string;
|
|
113
|
+
/**
|
|
114
|
+
* The organization to log the user in to.
|
|
115
|
+
*/
|
|
116
|
+
organization?: string;
|
|
117
|
+
/**
|
|
118
|
+
* The id of an invitation to accept.
|
|
119
|
+
*/
|
|
120
|
+
invitation?: string;
|
|
121
|
+
/**
|
|
122
|
+
* A Base64-encoded SHA-256 hash of the {@link AuthorizationCodeGrantWithPKCERequest.code_verifier} used for the Authorization Code Flow with PKCE.
|
|
123
|
+
*/
|
|
124
|
+
code_challenge?: string;
|
|
125
|
+
/**
|
|
126
|
+
* Allow for any custom property to be sent to Auth0
|
|
127
|
+
*/
|
|
128
|
+
[key: string]: any;
|
|
129
|
+
}
|
|
130
|
+
export interface PushedAuthorizationResponse {
|
|
131
|
+
/**
|
|
132
|
+
* The request URI corresponding to the authorization request posted.
|
|
133
|
+
* This URI is a single-use reference to the respective request data in the subsequent authorization request.
|
|
134
|
+
*/
|
|
135
|
+
request_uri: string;
|
|
136
|
+
/**
|
|
137
|
+
* This URI is a single-use reference to the respective request data in the subsequent authorization request.
|
|
138
|
+
*/
|
|
139
|
+
expires_in: number;
|
|
140
|
+
}
|
|
80
141
|
export interface PasswordGrantRequest extends ClientCredentials {
|
|
81
142
|
/**
|
|
82
143
|
* The unique identifier of the target API you want to access.
|
|
@@ -224,6 +285,26 @@ export declare class OAuth extends BaseAuthAPI {
|
|
|
224
285
|
clientCredentialsGrant(bodyParameters: ClientCredentialsGrantRequest, options?: {
|
|
225
286
|
initOverrides?: InitOverride;
|
|
226
287
|
}): Promise<JSONApiResponse<TokenSet>>;
|
|
288
|
+
/**
|
|
289
|
+
* This is the OAuth 2.0 extension that allows to initiate an OAuth flow from the backchannel instead of by building a URL.
|
|
290
|
+
*
|
|
291
|
+
*
|
|
292
|
+
* See: https://www.rfc-editor.org/rfc/rfc9126.html
|
|
293
|
+
*
|
|
294
|
+
* @example
|
|
295
|
+
* ```js
|
|
296
|
+
* const auth0 = new AuthenticationApi({
|
|
297
|
+
* domain: 'my-domain.auth0.com',
|
|
298
|
+
* clientId: 'myClientId',
|
|
299
|
+
* clientSecret: 'myClientSecret'
|
|
300
|
+
* });
|
|
301
|
+
*
|
|
302
|
+
* await auth0.oauth.pushedAuthorization({ response_type: 'id_token', redirect_uri: 'http://localhost' });
|
|
303
|
+
* ```
|
|
304
|
+
*/
|
|
305
|
+
pushedAuthorization(bodyParameters: PushedAuthorizationRequest, options?: {
|
|
306
|
+
initOverrides?: InitOverride;
|
|
307
|
+
}): Promise<JSONApiResponse<PushedAuthorizationResponse>>;
|
|
227
308
|
/**
|
|
228
309
|
* This information is typically received from a highly trusted public client like a SPA*.
|
|
229
310
|
* (<strong>*Note:</string> For single-page applications and native/mobile apps, we recommend using web flows instead.)
|
package/dist/cjs/auth/oauth.js
CHANGED
|
@@ -82,6 +82,39 @@ class OAuth extends base_auth_api_js_1.BaseAuthAPI {
|
|
|
82
82
|
(0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['audience']);
|
|
83
83
|
return (0, base_auth_api_js_1.grant)('client_credentials', await this.addClientAuthentication(bodyParameters), options, this.clientId, this.idTokenValidator, this.request.bind(this));
|
|
84
84
|
}
|
|
85
|
+
/**
|
|
86
|
+
* This is the OAuth 2.0 extension that allows to initiate an OAuth flow from the backchannel instead of by building a URL.
|
|
87
|
+
*
|
|
88
|
+
*
|
|
89
|
+
* See: https://www.rfc-editor.org/rfc/rfc9126.html
|
|
90
|
+
*
|
|
91
|
+
* @example
|
|
92
|
+
* ```js
|
|
93
|
+
* const auth0 = new AuthenticationApi({
|
|
94
|
+
* domain: 'my-domain.auth0.com',
|
|
95
|
+
* clientId: 'myClientId',
|
|
96
|
+
* clientSecret: 'myClientSecret'
|
|
97
|
+
* });
|
|
98
|
+
*
|
|
99
|
+
* await auth0.oauth.pushedAuthorization({ response_type: 'id_token', redirect_uri: 'http://localhost' });
|
|
100
|
+
* ```
|
|
101
|
+
*/
|
|
102
|
+
async pushedAuthorization(bodyParameters, options = {}) {
|
|
103
|
+
(0, runtime_js_1.validateRequiredRequestParams)(bodyParameters, ['client_id', 'response_type', 'redirect_uri']);
|
|
104
|
+
const bodyParametersWithClientAuthentication = await this.addClientAuthentication(bodyParameters);
|
|
105
|
+
const response = await this.request({
|
|
106
|
+
path: '/oauth/par',
|
|
107
|
+
method: 'POST',
|
|
108
|
+
headers: {
|
|
109
|
+
'Content-Type': 'application/x-www-form-urlencoded',
|
|
110
|
+
},
|
|
111
|
+
body: new URLSearchParams({
|
|
112
|
+
client_id: this.clientId,
|
|
113
|
+
...bodyParametersWithClientAuthentication,
|
|
114
|
+
}),
|
|
115
|
+
}, options.initOverrides);
|
|
116
|
+
return runtime_js_1.JSONApiResponse.fromResponse(response);
|
|
117
|
+
}
|
|
85
118
|
/**
|
|
86
119
|
* This information is typically received from a highly trusted public client like a SPA*.
|
|
87
120
|
* (<strong>*Note:</string> For single-page applications and native/mobile apps, we recommend using web flows instead.)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":";;;AAAA,kDAK2B;AAC3B,yDAAqF;AACrF,mEAAmF;
|
|
1
|
+
{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":";;;AAAA,kDAK2B;AAC3B,yDAAqF;AACrF,mEAAmF;AA0PnF;;GAEG;AACH,MAAa,KAAM,SAAQ,8BAAW;IAEpC,YAAY,OAAoC;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,wCAAgB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,8BAA8B,CAClC,cAAqD,EACrD,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzE,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,mBAAmB,CACvB,cAA0C,EAC1C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;QAE9F,MAAM,sCAAsC,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC/E,cAAc,CACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,GAAG,sCAAsC;aAC1C,CAAC;SACH,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,aAAa,CACjB,cAAoC,EACpC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,OAAO,IAAA,wBAAK,EACV,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,UAAU,EACtF,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CACrB,cAAwC,EACxC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAEjE,OAAO,IAAA,wBAAK,EACV,eAAe,EACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,kBAAkB,CACtB,cAAyC,EACzC,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;SAC1F,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;CACF;AAnRD,sBAmRC"}
|
package/dist/cjs/version.d.ts
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
export declare const version = "4.
|
|
1
|
+
export declare const version = "4.2.0";
|
package/dist/cjs/version.js
CHANGED
package/dist/esm/auth/oauth.d.ts
CHANGED
|
@@ -7,7 +7,7 @@ export interface TokenSet {
|
|
|
7
7
|
*/
|
|
8
8
|
access_token: string;
|
|
9
9
|
/**
|
|
10
|
-
* The refresh token,
|
|
10
|
+
* The refresh token, available with the `offline_access` scope.
|
|
11
11
|
*/
|
|
12
12
|
refresh_token?: string;
|
|
13
13
|
/**
|
|
@@ -19,7 +19,7 @@ export interface TokenSet {
|
|
|
19
19
|
*/
|
|
20
20
|
token_type: 'Bearer';
|
|
21
21
|
/**
|
|
22
|
-
* The duration in secs that
|
|
22
|
+
* The duration in secs that the access token is valid.
|
|
23
23
|
*/
|
|
24
24
|
expires_in: number;
|
|
25
25
|
}
|
|
@@ -77,6 +77,67 @@ export interface ClientCredentialsGrantRequest extends ClientCredentials {
|
|
|
77
77
|
*/
|
|
78
78
|
audience: string;
|
|
79
79
|
}
|
|
80
|
+
export interface PushedAuthorizationRequest extends ClientCredentials {
|
|
81
|
+
/**
|
|
82
|
+
* URI to redirect to.
|
|
83
|
+
*/
|
|
84
|
+
redirect_uri: string;
|
|
85
|
+
/**
|
|
86
|
+
* The response_type the client expects.
|
|
87
|
+
*/
|
|
88
|
+
response_type: string;
|
|
89
|
+
/**
|
|
90
|
+
* The response_mode to use.
|
|
91
|
+
*/
|
|
92
|
+
response_mode?: string;
|
|
93
|
+
/**
|
|
94
|
+
* The nonce.
|
|
95
|
+
*/
|
|
96
|
+
nonce?: string;
|
|
97
|
+
/**
|
|
98
|
+
* State value to be passed back on successful authorization.
|
|
99
|
+
*/
|
|
100
|
+
state?: string;
|
|
101
|
+
/**
|
|
102
|
+
* Name of the connection.
|
|
103
|
+
*/
|
|
104
|
+
connection?: string;
|
|
105
|
+
/**
|
|
106
|
+
* Scopes to request. Multiple scopes must be separated by a space character.
|
|
107
|
+
*/
|
|
108
|
+
scope?: string;
|
|
109
|
+
/**
|
|
110
|
+
* The unique identifier of the target API you want to access.
|
|
111
|
+
*/
|
|
112
|
+
audience?: string;
|
|
113
|
+
/**
|
|
114
|
+
* The organization to log the user in to.
|
|
115
|
+
*/
|
|
116
|
+
organization?: string;
|
|
117
|
+
/**
|
|
118
|
+
* The id of an invitation to accept.
|
|
119
|
+
*/
|
|
120
|
+
invitation?: string;
|
|
121
|
+
/**
|
|
122
|
+
* A Base64-encoded SHA-256 hash of the {@link AuthorizationCodeGrantWithPKCERequest.code_verifier} used for the Authorization Code Flow with PKCE.
|
|
123
|
+
*/
|
|
124
|
+
code_challenge?: string;
|
|
125
|
+
/**
|
|
126
|
+
* Allow for any custom property to be sent to Auth0
|
|
127
|
+
*/
|
|
128
|
+
[key: string]: any;
|
|
129
|
+
}
|
|
130
|
+
export interface PushedAuthorizationResponse {
|
|
131
|
+
/**
|
|
132
|
+
* The request URI corresponding to the authorization request posted.
|
|
133
|
+
* This URI is a single-use reference to the respective request data in the subsequent authorization request.
|
|
134
|
+
*/
|
|
135
|
+
request_uri: string;
|
|
136
|
+
/**
|
|
137
|
+
* This URI is a single-use reference to the respective request data in the subsequent authorization request.
|
|
138
|
+
*/
|
|
139
|
+
expires_in: number;
|
|
140
|
+
}
|
|
80
141
|
export interface PasswordGrantRequest extends ClientCredentials {
|
|
81
142
|
/**
|
|
82
143
|
* The unique identifier of the target API you want to access.
|
|
@@ -224,6 +285,26 @@ export declare class OAuth extends BaseAuthAPI {
|
|
|
224
285
|
clientCredentialsGrant(bodyParameters: ClientCredentialsGrantRequest, options?: {
|
|
225
286
|
initOverrides?: InitOverride;
|
|
226
287
|
}): Promise<JSONApiResponse<TokenSet>>;
|
|
288
|
+
/**
|
|
289
|
+
* This is the OAuth 2.0 extension that allows to initiate an OAuth flow from the backchannel instead of by building a URL.
|
|
290
|
+
*
|
|
291
|
+
*
|
|
292
|
+
* See: https://www.rfc-editor.org/rfc/rfc9126.html
|
|
293
|
+
*
|
|
294
|
+
* @example
|
|
295
|
+
* ```js
|
|
296
|
+
* const auth0 = new AuthenticationApi({
|
|
297
|
+
* domain: 'my-domain.auth0.com',
|
|
298
|
+
* clientId: 'myClientId',
|
|
299
|
+
* clientSecret: 'myClientSecret'
|
|
300
|
+
* });
|
|
301
|
+
*
|
|
302
|
+
* await auth0.oauth.pushedAuthorization({ response_type: 'id_token', redirect_uri: 'http://localhost' });
|
|
303
|
+
* ```
|
|
304
|
+
*/
|
|
305
|
+
pushedAuthorization(bodyParameters: PushedAuthorizationRequest, options?: {
|
|
306
|
+
initOverrides?: InitOverride;
|
|
307
|
+
}): Promise<JSONApiResponse<PushedAuthorizationResponse>>;
|
|
227
308
|
/**
|
|
228
309
|
* This information is typically received from a highly trusted public client like a SPA*.
|
|
229
310
|
* (<strong>*Note:</string> For single-page applications and native/mobile apps, we recommend using web flows instead.)
|
package/dist/esm/auth/oauth.js
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { VoidApiResponse, validateRequiredRequestParams, } from '../lib/runtime.js';
|
|
1
|
+
import { JSONApiResponse, VoidApiResponse, validateRequiredRequestParams, } from '../lib/runtime.js';
|
|
2
2
|
import { BaseAuthAPI, grant } from './base-auth-api.js';
|
|
3
3
|
import { IDTokenValidator } from './id-token-validator.js';
|
|
4
4
|
/**
|
|
@@ -79,6 +79,39 @@ export class OAuth extends BaseAuthAPI {
|
|
|
79
79
|
validateRequiredRequestParams(bodyParameters, ['audience']);
|
|
80
80
|
return grant('client_credentials', await this.addClientAuthentication(bodyParameters), options, this.clientId, this.idTokenValidator, this.request.bind(this));
|
|
81
81
|
}
|
|
82
|
+
/**
|
|
83
|
+
* This is the OAuth 2.0 extension that allows to initiate an OAuth flow from the backchannel instead of by building a URL.
|
|
84
|
+
*
|
|
85
|
+
*
|
|
86
|
+
* See: https://www.rfc-editor.org/rfc/rfc9126.html
|
|
87
|
+
*
|
|
88
|
+
* @example
|
|
89
|
+
* ```js
|
|
90
|
+
* const auth0 = new AuthenticationApi({
|
|
91
|
+
* domain: 'my-domain.auth0.com',
|
|
92
|
+
* clientId: 'myClientId',
|
|
93
|
+
* clientSecret: 'myClientSecret'
|
|
94
|
+
* });
|
|
95
|
+
*
|
|
96
|
+
* await auth0.oauth.pushedAuthorization({ response_type: 'id_token', redirect_uri: 'http://localhost' });
|
|
97
|
+
* ```
|
|
98
|
+
*/
|
|
99
|
+
async pushedAuthorization(bodyParameters, options = {}) {
|
|
100
|
+
validateRequiredRequestParams(bodyParameters, ['client_id', 'response_type', 'redirect_uri']);
|
|
101
|
+
const bodyParametersWithClientAuthentication = await this.addClientAuthentication(bodyParameters);
|
|
102
|
+
const response = await this.request({
|
|
103
|
+
path: '/oauth/par',
|
|
104
|
+
method: 'POST',
|
|
105
|
+
headers: {
|
|
106
|
+
'Content-Type': 'application/x-www-form-urlencoded',
|
|
107
|
+
},
|
|
108
|
+
body: new URLSearchParams({
|
|
109
|
+
client_id: this.clientId,
|
|
110
|
+
...bodyParametersWithClientAuthentication,
|
|
111
|
+
}),
|
|
112
|
+
}, options.initOverrides);
|
|
113
|
+
return JSONApiResponse.fromResponse(response);
|
|
114
|
+
}
|
|
82
115
|
/**
|
|
83
116
|
* This information is typically received from a highly trusted public client like a SPA*.
|
|
84
117
|
* (<strong>*Note:</string> For single-page applications and native/mobile apps, we recommend using web flows instead.)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,eAAe,EACf,eAAe,EACf,6BAA6B,GAC9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAA+B,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAA0B,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA0PnF;;GAEG;AACH,MAAM,OAAO,KAAM,SAAQ,WAAW;IAEpC,YAAY,OAAoC;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAAyC,EAAE;QAE3C,6BAA6B,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD,OAAO,KAAK,CACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,8BAA8B,CAClC,cAAqD,EACrD,UAAyC,EAAE;QAE3C,6BAA6B,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzE,OAAO,KAAK,CACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAA4C,EAAE;QAE9C,6BAA6B,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAE5D,OAAO,KAAK,CACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,mBAAmB,CACvB,cAA0C,EAC1C,UAA4C,EAAE;QAE9C,6BAA6B,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;QAE9F,MAAM,sCAAsC,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC/E,cAAc,CACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,GAAG,sCAAsC;aAC1C,CAAC;SACH,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,aAAa,CACjB,cAAoC,EACpC,UAAwB,EAAE;QAE1B,6BAA6B,CAAC,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,OAAO,KAAK,CACV,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,UAAU,EACtF,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CACrB,cAAwC,EACxC,UAAwB,EAAE;QAE1B,6BAA6B,CAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAEjE,OAAO,KAAK,CACV,eAAe,EACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,kBAAkB,CACtB,cAAyC,EACzC,UAA4C,EAAE;QAE9C,6BAA6B,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;SAC1F,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;CACF"}
|
package/dist/esm/version.d.ts
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
export declare const version = "4.
|
|
1
|
+
export declare const version = "4.2.0";
|
package/dist/esm/version.js
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export const version = '4.
|
|
1
|
+
export const version = '4.2.0';
|
|
2
2
|
//# sourceMappingURL=version.js.map
|