auth0 4.17.0 → 4.18.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/auth/index.d.ts +4 -2
- package/dist/cjs/auth/index.js +2 -0
- package/dist/cjs/auth/index.js.map +1 -1
- package/dist/cjs/auth/oauth.d.ts +9 -2
- package/dist/cjs/auth/oauth.js.map +1 -1
- package/dist/cjs/auth/tokenExchange.d.ts +178 -0
- package/dist/cjs/auth/tokenExchange.js +91 -0
- package/dist/cjs/auth/tokenExchange.js.map +1 -0
- package/dist/cjs/management/__generated/index.d.ts +2 -1
- package/dist/cjs/management/__generated/index.js +1 -0
- package/dist/cjs/management/__generated/index.js.map +1 -1
- package/dist/cjs/management/__generated/managers/clients-manager.js +0 -4
- package/dist/cjs/management/__generated/managers/clients-manager.js.map +1 -1
- package/dist/cjs/management/__generated/managers/index.d.ts +1 -0
- package/dist/cjs/management/__generated/managers/index.js +1 -0
- package/dist/cjs/management/__generated/managers/index.js.map +1 -1
- package/dist/cjs/management/__generated/managers/token-exchange-profiles-manager.d.ts +56 -0
- package/dist/cjs/management/__generated/managers/token-exchange-profiles-manager.js +133 -0
- package/dist/cjs/management/__generated/managers/token-exchange-profiles-manager.js.map +1 -0
- package/dist/cjs/management/__generated/models/index.d.ts +150 -6
- package/dist/cjs/management/__generated/models/index.js +11 -5
- package/dist/cjs/management/__generated/models/index.js.map +1 -1
- package/dist/cjs/version.d.ts +1 -1
- package/dist/cjs/version.js +1 -1
- package/dist/esm/auth/index.d.ts +4 -2
- package/dist/esm/auth/index.js +2 -0
- package/dist/esm/auth/index.js.map +1 -1
- package/dist/esm/auth/oauth.d.ts +9 -2
- package/dist/esm/auth/oauth.js.map +1 -1
- package/dist/esm/auth/tokenExchange.d.ts +178 -0
- package/dist/esm/auth/tokenExchange.js +87 -0
- package/dist/esm/auth/tokenExchange.js.map +1 -0
- package/dist/esm/management/__generated/index.d.ts +2 -1
- package/dist/esm/management/__generated/index.js +2 -1
- package/dist/esm/management/__generated/index.js.map +1 -1
- package/dist/esm/management/__generated/managers/clients-manager.js +0 -4
- package/dist/esm/management/__generated/managers/clients-manager.js.map +1 -1
- package/dist/esm/management/__generated/managers/index.d.ts +1 -0
- package/dist/esm/management/__generated/managers/index.js +1 -0
- package/dist/esm/management/__generated/managers/index.js.map +1 -1
- package/dist/esm/management/__generated/managers/token-exchange-profiles-manager.d.ts +56 -0
- package/dist/esm/management/__generated/managers/token-exchange-profiles-manager.js +106 -0
- package/dist/esm/management/__generated/managers/token-exchange-profiles-manager.js.map +1 -0
- package/dist/esm/management/__generated/models/index.d.ts +150 -6
- package/dist/esm/management/__generated/models/index.js +6 -0
- package/dist/esm/management/__generated/models/index.js.map +1 -1
- package/dist/esm/version.d.ts +1 -1
- package/dist/esm/version.js +1 -1
- package/package.json +1 -1
package/dist/cjs/auth/index.d.ts
CHANGED
|
@@ -1,8 +1,9 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import { IBackchannel } from './backchannel.js';
|
|
2
2
|
import { AuthenticationClientOptions } from './base-auth-api.js';
|
|
3
3
|
import { Database } from './database.js';
|
|
4
4
|
import { OAuth } from './oauth.js';
|
|
5
5
|
import { Passwordless } from './passwordless.js';
|
|
6
|
+
import { ICustomTokenExchange } from './tokenExchange.js';
|
|
6
7
|
export * from './database.js';
|
|
7
8
|
export * from './oauth.js';
|
|
8
9
|
export * from './passwordless.js';
|
|
@@ -12,6 +13,7 @@ export declare class AuthenticationClient {
|
|
|
12
13
|
database: Database;
|
|
13
14
|
oauth: OAuth;
|
|
14
15
|
passwordless: Passwordless;
|
|
15
|
-
backchannel:
|
|
16
|
+
backchannel: IBackchannel;
|
|
17
|
+
tokenExchange: ICustomTokenExchange;
|
|
16
18
|
constructor(options: AuthenticationClientOptions);
|
|
17
19
|
}
|
package/dist/cjs/auth/index.js
CHANGED
|
@@ -19,6 +19,7 @@ const backchannel_js_1 = require("./backchannel.js");
|
|
|
19
19
|
const database_js_1 = require("./database.js");
|
|
20
20
|
const oauth_js_1 = require("./oauth.js");
|
|
21
21
|
const passwordless_js_1 = require("./passwordless.js");
|
|
22
|
+
const tokenExchange_js_1 = require("./tokenExchange.js");
|
|
22
23
|
__exportStar(require("./database.js"), exports);
|
|
23
24
|
__exportStar(require("./oauth.js"), exports);
|
|
24
25
|
__exportStar(require("./passwordless.js"), exports);
|
|
@@ -32,6 +33,7 @@ class AuthenticationClient {
|
|
|
32
33
|
this.oauth = new oauth_js_1.OAuth(options);
|
|
33
34
|
this.passwordless = new passwordless_js_1.Passwordless(options);
|
|
34
35
|
this.backchannel = new backchannel_js_1.Backchannel(options);
|
|
36
|
+
this.tokenExchange = new tokenExchange_js_1.CustomTokenExchange(options);
|
|
35
37
|
}
|
|
36
38
|
}
|
|
37
39
|
exports.AuthenticationClient = AuthenticationClient;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,qDAA6D;AAE7D,+CAAyC;AACzC,yCAAmC;AACnC,uDAAiD;AACjD,yDAA+E;AAE/E,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,iEAAwF;AAAvD,8HAAA,qBAAqB,OAAA;AACtD,uDAA+E;AAAtE,gHAAA,YAAY,OAAA;AAErB,MAAa,oBAAoB;IAO/B,YAAY,OAAoC;QAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAK,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,8BAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,4BAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,IAAI,sCAAmB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;CACF;AAdD,oDAcC"}
|
package/dist/cjs/auth/oauth.d.ts
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import { InitOverride, JSONApiResponse, VoidApiResponse } from '../lib/runtime.js';
|
|
2
2
|
import { BaseAuthAPI, AuthenticationClientOptions } from './base-auth-api.js';
|
|
3
|
-
import { IDTokenValidateOptions } from './id-token-validator.js';
|
|
3
|
+
import { IDTokenValidateOptions, IDTokenValidator } from './id-token-validator.js';
|
|
4
4
|
export interface TokenSet {
|
|
5
5
|
/**
|
|
6
6
|
* The access token.
|
|
@@ -71,11 +71,18 @@ export interface AuthorizationCodeGrantWithPKCERequest extends AuthorizationCode
|
|
|
71
71
|
*/
|
|
72
72
|
code_verifier: string;
|
|
73
73
|
}
|
|
74
|
+
/**
|
|
75
|
+
* Represents a request for a client credentials grant in the OAuth 2.0 framework, specific to Auth0 implementation.
|
|
76
|
+
*
|
|
77
|
+
* @property audience - The unique identifier of the target API you want to access.
|
|
78
|
+
* @property organization - The identifier of the organization for which the request is being made.
|
|
79
|
+
*/
|
|
74
80
|
export interface ClientCredentialsGrantRequest extends ClientCredentials {
|
|
75
81
|
/**
|
|
76
82
|
* The unique identifier of the target API you want to access.
|
|
77
83
|
*/
|
|
78
84
|
audience: string;
|
|
85
|
+
organization?: string;
|
|
79
86
|
}
|
|
80
87
|
export interface PushedAuthorizationRequest extends ClientCredentials {
|
|
81
88
|
/**
|
|
@@ -228,7 +235,7 @@ export interface TokenExchangeGrantRequest {
|
|
|
228
235
|
* OAuth 2.0 flows.
|
|
229
236
|
*/
|
|
230
237
|
export declare class OAuth extends BaseAuthAPI {
|
|
231
|
-
|
|
238
|
+
readonly idTokenValidator: IDTokenValidator;
|
|
232
239
|
constructor(options: AuthenticationClientOptions);
|
|
233
240
|
/**
|
|
234
241
|
* This is the flow that regular web apps use to access an API.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":";;;AAAA,kDAK2B;AAC3B,yDAAqF;AACrF,mEAAmF;AACnF,0CAAyC;
|
|
1
|
+
{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/auth/oauth.ts"],"names":[],"mappings":";;;AAAA,kDAK2B;AAC3B,yDAAqF;AACrF,mEAAmF;AACnF,0CAAyC;AA2QzC;;GAEG;AACH,MAAa,KAAM,SAAQ,8BAAW;IAEpC,YAAY,OAAoC;QAC9C,KAAK,CAAC;YACJ,GAAG,OAAO;YACV,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,qBAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;SAC7E,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,wCAAgB,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAExD,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,8BAA8B,CAClC,cAAqD,EACrD,UAAyC,EAAE;QAE3C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzE,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,sBAAsB,CAC1B,cAA6C,EAC7C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAA,wBAAK,EACV,oBAAoB,EACpB,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,mBAAmB,CACvB,cAA0C,EAC1C,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;QAE9F,MAAM,sCAAsC,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC/E,cAAc,CACf,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,GAAG,sCAAsC;aAC1C,CAAC;SACH,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,KAAK,CAAC,aAAa,CACjB,cAAoC,EACpC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAExE,OAAO,IAAA,wBAAK,EACV,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,UAAU,EACtF,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CACrB,cAAwC,EACxC,UAAwB,EAAE;QAE1B,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAEjE,OAAO,IAAA,wBAAK,EACV,eAAe,EACf,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAClD,OAAO,EACP,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,kBAAkB,CACtB,cAAyC,EACzC,UAA4C,EAAE;QAE9C,IAAA,0CAA6B,EAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;SAC1F,EACD,OAAO,CAAC,aAAa,CACtB,CAAC;QAEF,OAAO,4BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;CACF;AAtRD,sBAsRC"}
|
|
@@ -0,0 +1,178 @@
|
|
|
1
|
+
import { BaseAuthAPI } from './base-auth-api.js';
|
|
2
|
+
/**
|
|
3
|
+
* Represents the configuration options required for initiating a Custom Token Exchange request
|
|
4
|
+
* following RFC 8693 specifications.
|
|
5
|
+
*
|
|
6
|
+
* @see {@link https://www.rfc-editor.org/rfc/rfc8693 | RFC 8693: OAuth 2.0 Token Exchange}
|
|
7
|
+
*/
|
|
8
|
+
export type CustomTokenExchangeOptions = {
|
|
9
|
+
/**
|
|
10
|
+
* The type identifier for the subject token being exchanged
|
|
11
|
+
*
|
|
12
|
+
* @pattern
|
|
13
|
+
* - Must be a namespaced URI under your organization's control
|
|
14
|
+
* - Forbidden patterns:
|
|
15
|
+
* - `^urn:ietf:params:oauth:*` (IETF reserved)
|
|
16
|
+
* - `^https:\/\/auth0\.com/*` (Auth0 reserved)
|
|
17
|
+
* - `^urn:auth0:*` (Auth0 reserved)
|
|
18
|
+
*
|
|
19
|
+
* @example
|
|
20
|
+
* "urn:acme:legacy-system-token"
|
|
21
|
+
* "https://api.yourcompany.com/token-type/v1"
|
|
22
|
+
*/
|
|
23
|
+
subject_token_type: string;
|
|
24
|
+
/**
|
|
25
|
+
* The opaque token value being exchanged for Auth0 tokens
|
|
26
|
+
*
|
|
27
|
+
* @security
|
|
28
|
+
* - Must be validated in Auth0 Actions using strong cryptographic verification
|
|
29
|
+
* - Implement replay attack protection
|
|
30
|
+
* - Recommended validation libraries: `jose`, `jsonwebtoken`
|
|
31
|
+
*
|
|
32
|
+
* @example
|
|
33
|
+
* "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
|
|
34
|
+
*/
|
|
35
|
+
subject_token: string;
|
|
36
|
+
/**
|
|
37
|
+
* The target audience for the requested Auth0 token
|
|
38
|
+
*
|
|
39
|
+
* @remarks
|
|
40
|
+
* Must match exactly with an API identifier configured in your Auth0 tenant
|
|
41
|
+
*
|
|
42
|
+
* @example
|
|
43
|
+
* "https://api.your-service.com/v1"
|
|
44
|
+
*/
|
|
45
|
+
audience: string;
|
|
46
|
+
/**
|
|
47
|
+
* Space-separated list of OAuth 2.0 scopes being requested
|
|
48
|
+
*
|
|
49
|
+
* @remarks
|
|
50
|
+
* Subject to API authorization policies configured in Auth0
|
|
51
|
+
*
|
|
52
|
+
* @example
|
|
53
|
+
* "openid profile email read:data write:data"
|
|
54
|
+
*/
|
|
55
|
+
scope?: string;
|
|
56
|
+
/**
|
|
57
|
+
* Additional custom parameters for Auth0 Action processing
|
|
58
|
+
*
|
|
59
|
+
* @remarks
|
|
60
|
+
* Accessible in Action code via `event.request.body`
|
|
61
|
+
*
|
|
62
|
+
* @example
|
|
63
|
+
* ```typescript
|
|
64
|
+
* {
|
|
65
|
+
* custom_parameter: "session_context",
|
|
66
|
+
* device_fingerprint: "a3d8f7...",
|
|
67
|
+
* }
|
|
68
|
+
* ```
|
|
69
|
+
*/
|
|
70
|
+
[key: string]: unknown;
|
|
71
|
+
};
|
|
72
|
+
/**
|
|
73
|
+
* Interface defining Custom Token Exchange operations
|
|
74
|
+
*
|
|
75
|
+
* @see {@link https://auth0.com/docs/authenticate/protocols/custom-token-exchange | Auth0 Custom Token Exchange Docs}
|
|
76
|
+
*/
|
|
77
|
+
export interface ICustomTokenExchange {
|
|
78
|
+
/**
|
|
79
|
+
* Executes RFC 8693-compliant token exchange flow
|
|
80
|
+
*
|
|
81
|
+
* @throws {Auth0Error} For structured error responses
|
|
82
|
+
* @throws {Error} For generic errors with these codes:
|
|
83
|
+
* - `invalid_request`: Invalid parameters
|
|
84
|
+
* - `consent_required`: Enable "Allow Skipping User Consent" in API settings
|
|
85
|
+
* - `too_many_attempts`: Suspicious IP throttling triggered
|
|
86
|
+
*
|
|
87
|
+
* @example
|
|
88
|
+
* ```typescript
|
|
89
|
+
* // External IdP migration scenario
|
|
90
|
+
* const tokens = await auth0.customTokenExchange.exchangeToken({
|
|
91
|
+
* subject_token_type: 'urn:external-idp:legacy',
|
|
92
|
+
* subject_token: externalIdPToken,
|
|
93
|
+
* audience: 'https://api.your-service.com',
|
|
94
|
+
* scope: 'openid profile'
|
|
95
|
+
* });
|
|
96
|
+
* ```
|
|
97
|
+
*/
|
|
98
|
+
exchangeToken(options: CustomTokenExchangeOptions): Promise<TokenResponse>;
|
|
99
|
+
}
|
|
100
|
+
/**
|
|
101
|
+
* Implements Auth0's Custom Token Exchange functionality with security best practices
|
|
102
|
+
*
|
|
103
|
+
* @security
|
|
104
|
+
* - **HTTPS Enforcement**: All requests require TLS encryption
|
|
105
|
+
* - **Credential Protection**: Client secrets never exposed in browser contexts
|
|
106
|
+
* - **Input Validation**: Strict namespace enforcement for token types
|
|
107
|
+
*
|
|
108
|
+
* @example
|
|
109
|
+
* ```typescript
|
|
110
|
+
* // Secure token validation in Auth0 Action
|
|
111
|
+
* exports.onExecuteCustomTokenExchange = async (event, api) => {
|
|
112
|
+
* const { jws } = require('jose');
|
|
113
|
+
* const { createRemoteJWKSet } = require('jose/jwks');
|
|
114
|
+
*
|
|
115
|
+
* const JWKS = createRemoteJWKSet(new URL('https://external-idp.com/.well-known/jwks.json'));
|
|
116
|
+
*
|
|
117
|
+
* try {
|
|
118
|
+
* const { payload } = await jws.verify(event.transaction.subject_token, JWKS);
|
|
119
|
+
* api.authentication.setUserById(payload.sub);
|
|
120
|
+
* } catch (error) {
|
|
121
|
+
* api.access.rejectInvalidSubjectToken('Invalid token signature');
|
|
122
|
+
* }
|
|
123
|
+
* };
|
|
124
|
+
* ```
|
|
125
|
+
*/
|
|
126
|
+
export declare class CustomTokenExchange extends BaseAuthAPI implements ICustomTokenExchange {
|
|
127
|
+
/**
|
|
128
|
+
* Executes token exchange flow with security validations
|
|
129
|
+
*
|
|
130
|
+
* @param options - Exchange configuration parameters
|
|
131
|
+
* @returns Auth0-issued tokens with requested claims
|
|
132
|
+
*
|
|
133
|
+
* @throws {Error} When:
|
|
134
|
+
* - `subject_token_type` uses prohibited namespace
|
|
135
|
+
* - Network failures occur
|
|
136
|
+
* - Auth0 returns error responses (4xx/5xx)
|
|
137
|
+
*/
|
|
138
|
+
exchangeToken(options: CustomTokenExchangeOptions): Promise<TokenResponse>;
|
|
139
|
+
/**
|
|
140
|
+
* Enforces namespace ownership requirements for token types
|
|
141
|
+
*
|
|
142
|
+
* @param tokenType - Proposed subject_token_type value
|
|
143
|
+
* @throws {Error} When reserved namespace pattern detected
|
|
144
|
+
*
|
|
145
|
+
* @privateRemarks
|
|
146
|
+
* Implements RFC 8693 Section 4.1 requirements for token type URIs
|
|
147
|
+
*
|
|
148
|
+
* @see {@link https://www.rfc-editor.org/rfc/rfc8693#section-4.1 | RFC 8693 Section 4.1}
|
|
149
|
+
*/
|
|
150
|
+
private validateTokenType;
|
|
151
|
+
}
|
|
152
|
+
/**
|
|
153
|
+
* Standardized token response structure for Auth0 authentication flows
|
|
154
|
+
*
|
|
155
|
+
* @remarks
|
|
156
|
+
* **Token Lifetime Management**:
|
|
157
|
+
* - Cache tokens according to `expires_in` value
|
|
158
|
+
* - Rotate refresh tokens using `offline_access` scope
|
|
159
|
+
* - Revoke compromised tokens immediately
|
|
160
|
+
*
|
|
161
|
+
* @security
|
|
162
|
+
* - Store tokens in secure, encrypted storage
|
|
163
|
+
* - Never expose in client-side code or logs
|
|
164
|
+
*/
|
|
165
|
+
export type TokenResponse = {
|
|
166
|
+
/** Bearer token for API authorization */
|
|
167
|
+
access_token: string;
|
|
168
|
+
/** Refresh token (requires `offline_access` scope) */
|
|
169
|
+
refresh_token?: string;
|
|
170
|
+
/** JWT containing user identity claims */
|
|
171
|
+
id_token: string;
|
|
172
|
+
/** Typically "Bearer" */
|
|
173
|
+
token_type?: string;
|
|
174
|
+
/** Token validity in seconds (default: 86400) */
|
|
175
|
+
expires_in: number;
|
|
176
|
+
/** Granted permissions space */
|
|
177
|
+
scope: string;
|
|
178
|
+
};
|
|
@@ -0,0 +1,91 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.CustomTokenExchange = void 0;
|
|
4
|
+
const models_js_1 = require("../lib/models.js");
|
|
5
|
+
const base_auth_api_js_1 = require("./base-auth-api.js");
|
|
6
|
+
/** RFC 8693-defined grant type for token exchange */
|
|
7
|
+
const TOKEN_EXCHANGE_GRANT_TYPE = 'urn:ietf:params:oauth:grant-type:token-exchange';
|
|
8
|
+
/** Auth0 token endpoint path */
|
|
9
|
+
const TOKEN_URL = '/oauth/token';
|
|
10
|
+
/**
|
|
11
|
+
* Implements Auth0's Custom Token Exchange functionality with security best practices
|
|
12
|
+
*
|
|
13
|
+
* @security
|
|
14
|
+
* - **HTTPS Enforcement**: All requests require TLS encryption
|
|
15
|
+
* - **Credential Protection**: Client secrets never exposed in browser contexts
|
|
16
|
+
* - **Input Validation**: Strict namespace enforcement for token types
|
|
17
|
+
*
|
|
18
|
+
* @example
|
|
19
|
+
* ```typescript
|
|
20
|
+
* // Secure token validation in Auth0 Action
|
|
21
|
+
* exports.onExecuteCustomTokenExchange = async (event, api) => {
|
|
22
|
+
* const { jws } = require('jose');
|
|
23
|
+
* const { createRemoteJWKSet } = require('jose/jwks');
|
|
24
|
+
*
|
|
25
|
+
* const JWKS = createRemoteJWKSet(new URL('https://external-idp.com/.well-known/jwks.json'));
|
|
26
|
+
*
|
|
27
|
+
* try {
|
|
28
|
+
* const { payload } = await jws.verify(event.transaction.subject_token, JWKS);
|
|
29
|
+
* api.authentication.setUserById(payload.sub);
|
|
30
|
+
* } catch (error) {
|
|
31
|
+
* api.access.rejectInvalidSubjectToken('Invalid token signature');
|
|
32
|
+
* }
|
|
33
|
+
* };
|
|
34
|
+
* ```
|
|
35
|
+
*/
|
|
36
|
+
class CustomTokenExchange extends base_auth_api_js_1.BaseAuthAPI {
|
|
37
|
+
/**
|
|
38
|
+
* Executes token exchange flow with security validations
|
|
39
|
+
*
|
|
40
|
+
* @param options - Exchange configuration parameters
|
|
41
|
+
* @returns Auth0-issued tokens with requested claims
|
|
42
|
+
*
|
|
43
|
+
* @throws {Error} When:
|
|
44
|
+
* - `subject_token_type` uses prohibited namespace
|
|
45
|
+
* - Network failures occur
|
|
46
|
+
* - Auth0 returns error responses (4xx/5xx)
|
|
47
|
+
*/
|
|
48
|
+
async exchangeToken(options) {
|
|
49
|
+
this.validateTokenType(options.subject_token_type);
|
|
50
|
+
const body = {
|
|
51
|
+
...options,
|
|
52
|
+
grant_type: TOKEN_EXCHANGE_GRANT_TYPE,
|
|
53
|
+
client_id: this.clientId,
|
|
54
|
+
};
|
|
55
|
+
await this.addClientAuthentication(body);
|
|
56
|
+
const response = await this.request({
|
|
57
|
+
path: TOKEN_URL,
|
|
58
|
+
method: 'POST',
|
|
59
|
+
headers: {
|
|
60
|
+
'Content-Type': 'application/x-www-form-urlencoded',
|
|
61
|
+
},
|
|
62
|
+
body: new URLSearchParams(body),
|
|
63
|
+
}, {});
|
|
64
|
+
const r = await models_js_1.JSONApiResponse.fromResponse(response);
|
|
65
|
+
return r.data;
|
|
66
|
+
}
|
|
67
|
+
/**
|
|
68
|
+
* Enforces namespace ownership requirements for token types
|
|
69
|
+
*
|
|
70
|
+
* @param tokenType - Proposed subject_token_type value
|
|
71
|
+
* @throws {Error} When reserved namespace pattern detected
|
|
72
|
+
*
|
|
73
|
+
* @privateRemarks
|
|
74
|
+
* Implements RFC 8693 Section 4.1 requirements for token type URIs
|
|
75
|
+
*
|
|
76
|
+
* @see {@link https://www.rfc-editor.org/rfc/rfc8693#section-4.1 | RFC 8693 Section 4.1}
|
|
77
|
+
*/
|
|
78
|
+
validateTokenType(tokenType) {
|
|
79
|
+
const reservedPatterns = [
|
|
80
|
+
/^urn:ietf:params:oauth:/i,
|
|
81
|
+
/^https:\/\/auth0\.com\//i,
|
|
82
|
+
/^urn:auth0:/i,
|
|
83
|
+
];
|
|
84
|
+
if (reservedPatterns.some((pattern) => pattern.test(tokenType))) {
|
|
85
|
+
throw new Error(`Invalid subject_token_type '${tokenType}'. ` +
|
|
86
|
+
`Reserved namespaces are prohibited. Use URIs under your organization's control.`);
|
|
87
|
+
}
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
exports.CustomTokenExchange = CustomTokenExchange;
|
|
91
|
+
//# sourceMappingURL=tokenExchange.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"tokenExchange.js","sourceRoot":"","sources":["../../../src/auth/tokenExchange.ts"],"names":[],"mappings":";;;AAAA,gDAAmD;AACnD,yDAAiD;AAyHjD,qDAAqD;AACrD,MAAM,yBAAyB,GAAG,iDAAiD,CAAC;AACpF,gCAAgC;AAChC,MAAM,SAAS,GAAG,cAAc,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAa,mBAAoB,SAAQ,8BAAW;IAClD;;;;;;;;;;OAUG;IACH,KAAK,CAAC,aAAa,CAAC,OAAmC;QACrD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAmC;YAC3C,GAAG,OAAO;YACV,UAAU,EAAE,yBAAyB;YACrC,SAAS,EAAE,IAAI,CAAC,QAAQ;SACzB,CAAC;QAEF,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAA8B,CAAC;SAC1D,EACD,EAAE,CACH,CAAC;QAEF,MAAM,CAAC,GAAmC,MAAM,2BAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvF,OAAO,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACK,iBAAiB,CAAC,SAAiB;QACzC,MAAM,gBAAgB,GAAG;YACvB,0BAA0B;YAC1B,0BAA0B;YAC1B,cAAc;SACf,CAAC;QAEF,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE;YAC/D,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,KAAK;gBAC3C,iFAAiF,CACpF,CAAC;SACH;IACH,CAAC;CACF;AAhED,kDAgEC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
export * from './managers/index.js';
|
|
2
2
|
export * from './models/index.js';
|
|
3
|
-
import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, UserBlocksManager, UsersManager, UsersByEmailManager } from './managers/index.js';
|
|
3
|
+
import { ActionsManager, AnomalyManager, AttackProtectionManager, BlacklistsManager, BrandingManager, ClientGrantsManager, ClientsManager, ConnectionsManager, CustomDomainsManager, DeviceCredentialsManager, EmailTemplatesManager, EmailsManager, FlowsManager, FormsManager, GrantsManager, GuardianManager, HooksManager, JobsManager, KeysManager, LogStreamsManager, LogsManager, OrganizationsManager, PromptsManager, RefreshTokensManager, ResourceServersManager, RolesManager, RulesManager, RulesConfigsManager, SelfServiceProfilesManager, SessionsManager, StatsManager, TenantsManager, TicketsManager, TokenExchangeProfilesManager, UserBlocksManager, UsersManager, UsersByEmailManager } from './managers/index.js';
|
|
4
4
|
import { Configuration } from '../../lib/runtime.js';
|
|
5
5
|
export declare abstract class ManagementClientBase {
|
|
6
6
|
protected configuration: Configuration;
|
|
@@ -37,6 +37,7 @@ export declare abstract class ManagementClientBase {
|
|
|
37
37
|
readonly stats: StatsManager;
|
|
38
38
|
readonly tenants: TenantsManager;
|
|
39
39
|
readonly tickets: TicketsManager;
|
|
40
|
+
readonly tokenExchangeProfiles: TokenExchangeProfilesManager;
|
|
40
41
|
readonly userBlocks: UserBlocksManager;
|
|
41
42
|
readonly users: UsersManager;
|
|
42
43
|
readonly usersByEmail: UsersByEmailManager;
|
|
@@ -54,6 +54,7 @@ class ManagementClientBase {
|
|
|
54
54
|
this.stats = new index_js_1.StatsManager(this.configuration);
|
|
55
55
|
this.tenants = new index_js_1.TenantsManager(this.configuration);
|
|
56
56
|
this.tickets = new index_js_1.TicketsManager(this.configuration);
|
|
57
|
+
this.tokenExchangeProfiles = new index_js_1.TokenExchangeProfilesManager(this.configuration);
|
|
57
58
|
this.userBlocks = new index_js_1.UserBlocksManager(this.configuration);
|
|
58
59
|
this.users = new index_js_1.UsersManager(this.configuration);
|
|
59
60
|
this.usersByEmail = new index_js_1.UsersByEmailManager(this.configuration);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/management/__generated/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,oDAAkC;AAElC,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/management/__generated/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,oDAAkC;AAElC,kDAsC6B;AAI7B,MAAsB,oBAAoB;IAuCxC,YAAsB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QAtClC,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,qBAAgB,GAAG,IAAI,kCAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnE,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,gBAAW,GAAG,IAAI,6BAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,sBAAiB,GAAG,IAAI,mCAAwB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrE,mBAAc,GAAG,IAAI,gCAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/D,WAAM,GAAG,IAAI,wBAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,WAAM,GAAG,IAAI,wBAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,SAAI,GAAG,IAAI,sBAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,kBAAa,GAAG,IAAI,+BAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7D,oBAAe,GAAG,IAAI,iCAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjE,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,wBAAmB,GAAG,IAAI,qCAA0B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,aAAQ,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,YAAO,GAAG,IAAI,yBAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,0BAAqB,GAAG,IAAI,uCAA4B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7E,eAAU,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,UAAK,GAAG,IAAI,uBAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,iBAAY,GAAG,IAAI,8BAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEtB,CAAC;CACvD;AAxCD,oDAwCC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"clients-manager.js","sourceRoot":"","sources":["../../../../../src/management/__generated/managers/clients-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iEAAmD;AAuBnD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,MAAa,cAAe,SAAQ,OAAO;IACzC;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,iBAA2C,EAC3C,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,QAAQ;SACjB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAyD,EACzD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,QAAQ;SACjB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAiDD,KAAK,CAAC,MAAM,CACV,oBAAuC,EAAE,EACzC,aAA4B;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;YAClE;gBACE,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,WAAW;gBAChB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,
|
|
1
|
+
{"version":3,"file":"clients-manager.js","sourceRoot":"","sources":["../../../../../src/management/__generated/managers/clients-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iEAAmD;AAuBnD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;AAE5B;;GAEG;AACH,MAAa,cAAe,SAAQ,OAAO;IACzC;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,iBAA2C,EAC3C,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,QAAQ;SACjB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAyD,EACzD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,QAAQ;SACjB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAiDD,KAAK,CAAC,MAAM,CACV,oBAAuC,EAAE,EACzC,aAA4B;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;YAClE;gBACE,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,WAAW;gBAChB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,UAAU;gBACf,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,GAAG;gBACR,MAAM,EAAE,EAAE;aACX;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,eAAe;SACvB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,KAAK,CAAC,GAAG,CACP,iBAAwC,EACxC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;YAClE;gBACE,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,EAAE;aACX;YACD;gBACE,GAAG,EAAE,gBAAgB;gBACrB,MAAM,EAAE,EAAE;aACX;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,eAAe;SACvB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAClB,iBAAwC,EACxC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kCAAkC,CAAC,OAAO,CAC9C,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,KAAK;SACd,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CACjB,iBAAsD,EACtD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,KAAK;SACd,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,MAAM,CACV,iBAA0C,EAC1C,cAA4B,EAC5B,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAClC,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAiE,EACjE,cAAqD,EACrD,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzF,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kDAAkD;iBACrD,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;iBAC/E,OAAO,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,MAAM,CACV,cAA4B,EAC5B,aAA4B;QAE5B,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,iBAAkD,EAClD,cAAsC,EACtC,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,kCAAkC,CAAC,OAAO,CAC9C,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,cAAc;SACrB,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,kBAAkB,CACtB,iBAA0C,EAC1C,aAA4B;QAE5B,OAAO,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC;YACE,IAAI,EAAE,oCAAoC,CAAC,OAAO,CAChD,aAAa,EACb,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACxD;YACD,MAAM,EAAE,MAAM;SACf,EACD,aAAa,CACd,CAAC;QAEF,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;CACF;AAldD,wCAkdC"}
|
|
@@ -31,6 +31,7 @@ export * from './sessions-manager.js';
|
|
|
31
31
|
export * from './stats-manager.js';
|
|
32
32
|
export * from './tenants-manager.js';
|
|
33
33
|
export * from './tickets-manager.js';
|
|
34
|
+
export * from './token-exchange-profiles-manager.js';
|
|
34
35
|
export * from './user-blocks-manager.js';
|
|
35
36
|
export * from './users-manager.js';
|
|
36
37
|
export * from './users-by-email-manager.js';
|
|
@@ -47,6 +47,7 @@ __exportStar(require("./sessions-manager.js"), exports);
|
|
|
47
47
|
__exportStar(require("./stats-manager.js"), exports);
|
|
48
48
|
__exportStar(require("./tenants-manager.js"), exports);
|
|
49
49
|
__exportStar(require("./tickets-manager.js"), exports);
|
|
50
|
+
__exportStar(require("./token-exchange-profiles-manager.js"), exports);
|
|
50
51
|
__exportStar(require("./user-blocks-manager.js"), exports);
|
|
51
52
|
__exportStar(require("./users-manager.js"), exports);
|
|
52
53
|
__exportStar(require("./users-by-email-manager.js"), exports);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/management/__generated/managers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,uDAAqC;AACrC,iEAA+C;AAC/C,0DAAwC;AACxC,wDAAsC;AACtC,6DAA2C;AAC3C,uDAAqC;AACrC,2DAAyC;AACzC,8DAA4C;AAC5C,kEAAgD;AAChD,+DAA6C;AAC7C,sDAAoC;AACpC,qDAAmC;AACnC,qDAAmC;AACnC,sDAAoC;AACpC,wDAAsC;AACtC,qDAAmC;AACnC,oDAAkC;AAClC,oDAAkC;AAClC,2DAAyC;AACzC,oDAAkC;AAClC,6DAA2C;AAC3C,uDAAqC;AACrC,8DAA4C;AAC5C,gEAA8C;AAC9C,qDAAmC;AACnC,qDAAmC;AACnC,6DAA2C;AAC3C,qEAAmD;AACnD,wDAAsC;AACtC,qDAAmC;AACnC,uDAAqC;AACrC,uDAAqC;AACrC,2DAAyC;AACzC,qDAAmC;AACnC,8DAA4C"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/management/__generated/managers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,uDAAqC;AACrC,iEAA+C;AAC/C,0DAAwC;AACxC,wDAAsC;AACtC,6DAA2C;AAC3C,uDAAqC;AACrC,2DAAyC;AACzC,8DAA4C;AAC5C,kEAAgD;AAChD,+DAA6C;AAC7C,sDAAoC;AACpC,qDAAmC;AACnC,qDAAmC;AACnC,sDAAoC;AACpC,wDAAsC;AACtC,qDAAmC;AACnC,oDAAkC;AAClC,oDAAkC;AAClC,2DAAyC;AACzC,oDAAkC;AAClC,6DAA2C;AAC3C,uDAAqC;AACrC,8DAA4C;AAC5C,gEAA8C;AAC9C,qDAAmC;AACnC,qDAAmC;AACnC,6DAA2C;AAC3C,qEAAmD;AACnD,wDAAsC;AACtC,qDAAmC;AACnC,uDAAqC;AACrC,uDAAqC;AACrC,uEAAqD;AACrD,2DAAyC;AACzC,qDAAmC;AACnC,8DAA4C"}
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
import * as runtime from '../../../lib/runtime.js';
|
|
2
|
+
import type { InitOverride, ApiResponse } from '../../../lib/runtime.js';
|
|
3
|
+
import type { GetTokenExchangeProfiles200Response, GetTokenExchangeProfilesById200Response, PatchTokenExchangeProfilesByIdRequest, PostTokenExchangeProfilesRequest, DeleteTokenExchangeProfilesByIdRequest, GetTokenExchangeProfilesRequest, GetTokenExchangeProfilesByIdRequest, PatchTokenExchangeProfilesByIdOperationRequest } from '../models/index.js';
|
|
4
|
+
declare const BaseAPI: typeof runtime.BaseAPI;
|
|
5
|
+
/**
|
|
6
|
+
*
|
|
7
|
+
*/
|
|
8
|
+
export declare class TokenExchangeProfilesManager extends BaseAPI {
|
|
9
|
+
/**
|
|
10
|
+
* Delete a Token Exchange Profile within your tenant.
|
|
11
|
+
* Delete a token exchange profile
|
|
12
|
+
*
|
|
13
|
+
* @throws {RequiredError}
|
|
14
|
+
*/
|
|
15
|
+
delete(requestParameters: DeleteTokenExchangeProfilesByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
|
|
16
|
+
/**
|
|
17
|
+
* Retrieve a list of all Token Exchange Profiles available in your tenant.
|
|
18
|
+
*
|
|
19
|
+
* This endpoint supports Checkpoint pagination. To search by checkpoint, use the following parameters:
|
|
20
|
+
* <ul>
|
|
21
|
+
* <li><code>from</code>: Optional id from which to start selection.</li>
|
|
22
|
+
* <li><code>take</code>: The total amount of entries to retrieve when using the from parameter. Defaults to 50.</li>
|
|
23
|
+
* </ul>
|
|
24
|
+
*
|
|
25
|
+
* <b>Note</b>: The first time you call this endpoint using checkpoint pagination, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no pages are remaining.
|
|
26
|
+
* Get token exchange profiles
|
|
27
|
+
*
|
|
28
|
+
* @throws {RequiredError}
|
|
29
|
+
*/
|
|
30
|
+
getAll(requestParameters?: GetTokenExchangeProfilesRequest, initOverrides?: InitOverride): Promise<ApiResponse<GetTokenExchangeProfiles200Response>>;
|
|
31
|
+
/**
|
|
32
|
+
* Retrieve details about a single Token Exchange Profile specified by ID.
|
|
33
|
+
*
|
|
34
|
+
* Get a token exchange profile
|
|
35
|
+
*
|
|
36
|
+
* @throws {RequiredError}
|
|
37
|
+
*/
|
|
38
|
+
get(requestParameters: GetTokenExchangeProfilesByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<GetTokenExchangeProfilesById200Response>>;
|
|
39
|
+
/**
|
|
40
|
+
* Update a Token Exchange Profile within your tenant.
|
|
41
|
+
*
|
|
42
|
+
* Update an existing token exchange profile
|
|
43
|
+
*
|
|
44
|
+
* @throws {RequiredError}
|
|
45
|
+
*/
|
|
46
|
+
update(requestParameters: PatchTokenExchangeProfilesByIdOperationRequest, bodyParameters: PatchTokenExchangeProfilesByIdRequest, initOverrides?: InitOverride): Promise<ApiResponse<void>>;
|
|
47
|
+
/**
|
|
48
|
+
* Create a new Token Exchange Profile within your tenant.
|
|
49
|
+
*
|
|
50
|
+
* Create a token exchange profile
|
|
51
|
+
*
|
|
52
|
+
* @throws {RequiredError}
|
|
53
|
+
*/
|
|
54
|
+
create(bodyParameters: PostTokenExchangeProfilesRequest, initOverrides?: InitOverride): Promise<ApiResponse<GetTokenExchangeProfilesById200Response>>;
|
|
55
|
+
}
|
|
56
|
+
export {};
|