authhero 0.152.0 → 0.153.0

package/dist/authhero.d.ts

@@ -8595,6 +8595,8 @@ export declare const codeInsertSchema: z.ZodObject<{
 		"S256"
 	]>>;
 	redirect_uri: z.ZodOptional<z.ZodString>;
+	nonce: z.ZodOptional<z.ZodString>;
+	state: z.ZodOptional<z.ZodString>;
 	expires_at: z.ZodString;
 	used_at: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodOptional<z.ZodString>;
@@ -8605,6 +8607,8 @@ export declare const codeInsertSchema: z.ZodObject<{
 	expires_at: string;
 	user_id?: string | undefined;
 	redirect_uri?: string | undefined;
+	state?: string | undefined;
+	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
 	connection_id?: string | undefined;
@@ -8617,6 +8621,8 @@ export declare const codeInsertSchema: z.ZodObject<{
 	expires_at: string;
 	user_id?: string | undefined;
 	redirect_uri?: string | undefined;
+	state?: string | undefined;
+	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
 	connection_id?: string | undefined;
@@ -8644,6 +8650,8 @@ export declare const codeSchema: z.ZodObject<{
 		"S256"
 	]>>;
 	redirect_uri: z.ZodOptional<z.ZodString>;
+	nonce: z.ZodOptional<z.ZodString>;
+	state: z.ZodOptional<z.ZodString>;
 	expires_at: z.ZodString;
 	used_at: z.ZodOptional<z.ZodString>;
 	user_id: z.ZodOptional<z.ZodString>;
@@ -8655,6 +8663,8 @@ export declare const codeSchema: z.ZodObject<{
 	expires_at: string;
 	user_id?: string | undefined;
 	redirect_uri?: string | undefined;
+	state?: string | undefined;
+	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
 	connection_id?: string | undefined;
@@ -8668,6 +8678,8 @@ export declare const codeSchema: z.ZodObject<{
 	expires_at: string;
 	user_id?: string | undefined;
 	redirect_uri?: string | undefined;
+	state?: string | undefined;
+	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
 	connection_id?: string | undefined;

package/dist/authhero.mjs

@@ -1855,6 +1855,12 @@ const k1 = o.enum([
   redirect_uri: o.string().optional().openapi({
     description: "The redirect URI associated with the code"
   }),
+  nonce: o.string().optional().openapi({
+    description: "The nonce value used for security in OIDC flows"
+  }),
+  state: o.string().optional().openapi({
+    description: "The state parameter used for CSRF protection in OAuth flows"
+  }),
   expires_at: o.string(),
   used_at: o.string().optional(),
   user_id: o.string().optional()
@@ -5983,7 +5989,9 @@ async function Fh(t, e) {
       ).toISOString(),
       code_challenge: e.authParams.code_challenge,
       code_challenge_method: e.authParams.code_challenge_method,
-      redirect_uri: e.authParams.redirect_uri
+      redirect_uri: e.authParams.redirect_uri,
+      state: e.authParams.state,
+      nonce: e.authParams.nonce
     })).code_id,
     state: e.authParams.state
   };
@@ -6073,7 +6081,9 @@ async function Zt(t, e) {
       login_id: e.loginSession.id,
       expires_at: new Date(Date.now() + m_).toISOString(),
       code_verifier: [b, v].join("|"),
-      redirect_uri: n.redirect_uri
+      redirect_uri: n.redirect_uri,
+      state: n.state,
+      nonce: n.nonce
     });
     return t.json({
       login_ticket: E.code_id,
@@ -19845,6 +19855,9 @@ async function pb(t, e) {
     loginSession: i,
     authParams: {
       ...i.authParams,
+      // Use the state and nonce from the code as it might differ if it's a silent auth login
+      state: r.state,
+      nonce: r.nonce,
       // Ensure WEB_MESSAGE is explicitly passed, as createAuthResponse relies on it
       response_mode: an.WEB_MESSAGE,
       // Pass through other relevant authParams from the loginSession or original request if necessary

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "authhero",
-  "version": "0.152.0",
+  "version": "0.153.0",
   "files": [
     "dist"
   ],
@@ -49,7 +49,7 @@
     "libphonenumber-js": "^1.12.8",
     "nanoid": "^5.0.8",
     "oslo": "^1.2.1",
-    "@authhero/adapter-interfaces": "^0.69.0"
+    "@authhero/adapter-interfaces": "^0.70.0"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^0.19.2",