authhero 0.211.1 → 0.212.0

package/dist/authhero.d.ts

@@ -8697,121 +8697,116 @@ declare const LegacyClientSchema: z.ZodObject<{
 		response_mode?: AuthorizationResponseMode | undefined;
 		enabled_clients?: string[] | undefined;
 	}>, "many">;
-	id: z.ZodString;
+	disable_sign_ups: z.ZodBoolean;
+	email_validation: z.ZodString;
+	client_id: z.ZodString;
 	name: z.ZodString;
+	description: z.ZodOptional<z.ZodString>;
+	global: z.ZodDefault<z.ZodBoolean>;
+	client_secret: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+	app_type: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
+		"native",
+		"spa",
+		"regular_web",
+		"non_interactive",
+		"resource_server",
+		"express_configuration",
+		"rms",
+		"box",
+		"cloudbees",
+		"concur",
+		"dropbox",
+		"mscrm",
+		"echosign",
+		"egnyte",
+		"newrelic",
+		"office365",
+		"salesforce",
+		"sentry",
+		"sharepoint",
+		"slack",
+		"springcm",
+		"zendesk",
+		"zoom",
+		"sso_integration",
+		"oag"
+	]>>>;
+	logo_uri: z.ZodOptional<z.ZodString>;
+	is_first_party: z.ZodDefault<z.ZodBoolean>;
+	oidc_conformant: z.ZodDefault<z.ZodBoolean>;
 	callbacks: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
 	allowed_origins: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
 	web_origins: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
-	allowed_logout_urls: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+	client_aliases: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
 	allowed_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
-	addons: z.ZodOptional<z.ZodDefault<z.ZodObject<{
-		samlp: z.ZodOptional<z.ZodObject<{
-			audience: z.ZodOptional<z.ZodString>;
-			recipient: z.ZodOptional<z.ZodString>;
-			createUpnClaim: z.ZodOptional<z.ZodBoolean>;
-			mapUnknownClaimsAsIs: z.ZodOptional<z.ZodBoolean>;
-			passthroughClaimsWithNoMapping: z.ZodOptional<z.ZodBoolean>;
-			mapIdentities: z.ZodOptional<z.ZodBoolean>;
-			signatureAlgorithm: z.ZodOptional<z.ZodString>;
-			digestAlgorithm: z.ZodOptional<z.ZodString>;
-			issuer: z.ZodOptional<z.ZodString>;
-			destination: z.ZodOptional<z.ZodString>;
-			lifetimeInSeconds: z.ZodOptional<z.ZodNumber>;
-			signResponse: z.ZodOptional<z.ZodBoolean>;
-			nameIdentifierFormat: z.ZodOptional<z.ZodString>;
-			nameIdentifierProbes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-			authnContextClassRef: z.ZodOptional<z.ZodString>;
-			mappings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-		}, "strip", z.ZodTypeAny, {
-			audience?: string | undefined;
-			recipient?: string | undefined;
-			createUpnClaim?: boolean | undefined;
-			mapUnknownClaimsAsIs?: boolean | undefined;
-			passthroughClaimsWithNoMapping?: boolean | undefined;
-			mapIdentities?: boolean | undefined;
-			signatureAlgorithm?: string | undefined;
-			digestAlgorithm?: string | undefined;
-			issuer?: string | undefined;
-			destination?: string | undefined;
-			lifetimeInSeconds?: number | undefined;
-			signResponse?: boolean | undefined;
-			nameIdentifierFormat?: string | undefined;
-			nameIdentifierProbes?: string[] | undefined;
-			authnContextClassRef?: string | undefined;
-			mappings?: Record<string, string> | undefined;
-		}, {
-			audience?: string | undefined;
-			recipient?: string | undefined;
-			createUpnClaim?: boolean | undefined;
-			mapUnknownClaimsAsIs?: boolean | undefined;
-			passthroughClaimsWithNoMapping?: boolean | undefined;
-			mapIdentities?: boolean | undefined;
-			signatureAlgorithm?: string | undefined;
-			digestAlgorithm?: string | undefined;
-			issuer?: string | undefined;
-			destination?: string | undefined;
-			lifetimeInSeconds?: number | undefined;
-			signResponse?: boolean | undefined;
-			nameIdentifierFormat?: string | undefined;
-			nameIdentifierProbes?: string[] | undefined;
-			authnContextClassRef?: string | undefined;
-			mappings?: Record<string, string> | undefined;
-		}>>;
-	}, "strip", z.ZodTypeAny, {
-		samlp?: {
-			audience?: string | undefined;
-			recipient?: string | undefined;
-			createUpnClaim?: boolean | undefined;
-			mapUnknownClaimsAsIs?: boolean | undefined;
-			passthroughClaimsWithNoMapping?: boolean | undefined;
-			mapIdentities?: boolean | undefined;
-			signatureAlgorithm?: string | undefined;
-			digestAlgorithm?: string | undefined;
-			issuer?: string | undefined;
-			destination?: string | undefined;
-			lifetimeInSeconds?: number | undefined;
-			signResponse?: boolean | undefined;
-			nameIdentifierFormat?: string | undefined;
-			nameIdentifierProbes?: string[] | undefined;
-			authnContextClassRef?: string | undefined;
-			mappings?: Record<string, string> | undefined;
-		} | undefined;
-	}, {
-		samlp?: {
-			audience?: string | undefined;
-			recipient?: string | undefined;
-			createUpnClaim?: boolean | undefined;
-			mapUnknownClaimsAsIs?: boolean | undefined;
-			passthroughClaimsWithNoMapping?: boolean | undefined;
-			mapIdentities?: boolean | undefined;
-			signatureAlgorithm?: string | undefined;
-			digestAlgorithm?: string | undefined;
-			issuer?: string | undefined;
-			destination?: string | undefined;
-			lifetimeInSeconds?: number | undefined;
-			signResponse?: boolean | undefined;
-			nameIdentifierFormat?: string | undefined;
-			nameIdentifierProbes?: string[] | undefined;
-			authnContextClassRef?: string | undefined;
-			mappings?: Record<string, string> | undefined;
-		} | undefined;
-	}>>>;
-	email_validation: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
-		"enabled",
-		"disabled",
-		"enforced"
+	allowed_logout_urls: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+	session_transfer: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	oidc_logout: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString, "many">>>;
+	jwt_configuration: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	signing_keys: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodAny>, "many">>>;
+	encryption_key: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	sso: z.ZodDefault<z.ZodBoolean>;
+	sso_disabled: z.ZodDefault<z.ZodBoolean>;
+	cross_origin_authentication: z.ZodDefault<z.ZodBoolean>;
+	cross_origin_loc: z.ZodOptional<z.ZodString>;
+	custom_login_page_on: z.ZodDefault<z.ZodBoolean>;
+	custom_login_page: z.ZodOptional<z.ZodString>;
+	custom_login_page_preview: z.ZodOptional<z.ZodString>;
+	form_template: z.ZodOptional<z.ZodString>;
+	addons: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	token_endpoint_auth_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
+		"none",
+		"client_secret_post",
+		"client_secret_basic"
 	]>>>;
-	client_secret: z.ZodOptional<z.ZodDefault<z.ZodString>>;
-	disable_sign_ups: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-	client_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-	created_at: z.ZodEffects<z.ZodString, string, string>;
-	updated_at: z.ZodEffects<z.ZodString, string, string>;
+	client_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>>;
+	mobile: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	initiate_login_uri: z.ZodOptional<z.ZodString>;
+	native_social_login: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	refresh_token: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	default_organization: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	organization_usage: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
+		"deny",
+		"allow",
+		"require"
+	]>>>;
+	organization_require_behavior: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
+		"no_prompt",
+		"pre_login_prompt",
+		"post_login_prompt"
+	]>>>;
+	client_authentication_methods: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	require_pushed_authorization_requests: z.ZodDefault<z.ZodBoolean>;
+	require_proof_of_possession: z.ZodDefault<z.ZodBoolean>;
+	signed_request_object: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	compliance_level: z.ZodOptional<z.ZodEnum<[
+		"none",
+		"fapi1_adv_pkj_par",
+		"fapi1_adv_mtls_par",
+		"fapi2_sp_pkj_mtls",
+		"fapi2_sp_mtls_mtls"
+	]>>;
+	par_request_expiry: z.ZodOptional<z.ZodNumber>;
+	token_quota: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	created_at: z.ZodString;
+	updated_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
 	created_at: string;
 	updated_at: string;
 	name: string;
-	id: string;
+	email_validation: string;
 	disable_sign_ups: boolean;
+	client_id: string;
+	global: boolean;
+	is_first_party: boolean;
+	oidc_conformant: boolean;
+	sso: boolean;
+	sso_disabled: boolean;
+	cross_origin_authentication: boolean;
+	custom_login_page_on: boolean;
+	require_pushed_authorization_requests: boolean;
+	require_proof_of_possession: boolean;
 	tenant: {
 		created_at: string;
 		updated_at: string;
@@ -8856,39 +8851,48 @@ declare const LegacyClientSchema: z.ZodObject<{
 		response_mode?: AuthorizationResponseMode | undefined;
 		enabled_clients?: string[] | undefined;
 	}[];
+	description?: string | undefined;
+	refresh_token?: Record<string, any> | undefined;
 	callbacks?: string[] | undefined;
 	allowed_origins?: string[] | undefined;
 	web_origins?: string[] | undefined;
 	allowed_logout_urls?: string[] | undefined;
 	allowed_clients?: string[] | undefined;
-	addons?: {
-		samlp?: {
-			audience?: string | undefined;
-			recipient?: string | undefined;
-			createUpnClaim?: boolean | undefined;
-			mapUnknownClaimsAsIs?: boolean | undefined;
-			passthroughClaimsWithNoMapping?: boolean | undefined;
-			mapIdentities?: boolean | undefined;
-			signatureAlgorithm?: string | undefined;
-			digestAlgorithm?: string | undefined;
-			issuer?: string | undefined;
-			destination?: string | undefined;
-			lifetimeInSeconds?: number | undefined;
-			signResponse?: boolean | undefined;
-			nameIdentifierFormat?: string | undefined;
-			nameIdentifierProbes?: string[] | undefined;
-			authnContextClassRef?: string | undefined;
-			mappings?: Record<string, string> | undefined;
-		} | undefined;
-	} | undefined;
-	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
+	addons?: Record<string, any> | undefined;
 	client_secret?: string | undefined;
 	client_metadata?: Record<string, string> | undefined;
+	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
+	logo_uri?: string | undefined;
+	client_aliases?: string[] | undefined;
+	session_transfer?: Record<string, any> | undefined;
+	oidc_logout?: Record<string, any> | undefined;
+	grant_types?: string[] | undefined;
+	jwt_configuration?: Record<string, any> | undefined;
+	signing_keys?: Record<string, any>[] | undefined;
+	encryption_key?: Record<string, any> | undefined;
+	cross_origin_loc?: string | undefined;
+	custom_login_page?: string | undefined;
+	custom_login_page_preview?: string | undefined;
+	form_template?: string | undefined;
+	token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | undefined;
+	mobile?: Record<string, any> | undefined;
+	initiate_login_uri?: string | undefined;
+	native_social_login?: Record<string, any> | undefined;
+	default_organization?: Record<string, any> | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
+	organization_require_behavior?: "no_prompt" | "pre_login_prompt" | "post_login_prompt" | undefined;
+	client_authentication_methods?: Record<string, any> | undefined;
+	signed_request_object?: Record<string, any> | undefined;
+	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
+	par_request_expiry?: number | undefined;
+	token_quota?: Record<string, any> | undefined;
 }, {
 	created_at: string;
 	updated_at: string;
 	name: string;
-	id: string;
+	email_validation: string;
+	disable_sign_ups: boolean;
+	client_id: string;
 	tenant: {
 		created_at: string;
 		updated_at: string;
@@ -8933,35 +8937,50 @@ declare const LegacyClientSchema: z.ZodObject<{
 		response_mode?: AuthorizationResponseMode | undefined;
 		enabled_clients?: string[] | undefined;
 	}[];
+	description?: string | undefined;
+	refresh_token?: Record<string, any> | undefined;
 	callbacks?: string[] | undefined;
 	allowed_origins?: string[] | undefined;
 	web_origins?: string[] | undefined;
 	allowed_logout_urls?: string[] | undefined;
 	allowed_clients?: string[] | undefined;
-	addons?: {
-		samlp?: {
-			audience?: string | undefined;
-			recipient?: string | undefined;
-			createUpnClaim?: boolean | undefined;
-			mapUnknownClaimsAsIs?: boolean | undefined;
-			passthroughClaimsWithNoMapping?: boolean | undefined;
-			mapIdentities?: boolean | undefined;
-			signatureAlgorithm?: string | undefined;
-			digestAlgorithm?: string | undefined;
-			issuer?: string | undefined;
-			destination?: string | undefined;
-			lifetimeInSeconds?: number | undefined;
-			signResponse?: boolean | undefined;
-			nameIdentifierFormat?: string | undefined;
-			nameIdentifierProbes?: string[] | undefined;
-			authnContextClassRef?: string | undefined;
-			mappings?: Record<string, string> | undefined;
-		} | undefined;
-	} | undefined;
-	email_validation?: "enabled" | "disabled" | "enforced" | undefined;
+	addons?: Record<string, any> | undefined;
 	client_secret?: string | undefined;
-	disable_sign_ups?: boolean | undefined;
 	client_metadata?: Record<string, string> | undefined;
+	global?: boolean | undefined;
+	app_type?: "native" | "spa" | "regular_web" | "non_interactive" | "resource_server" | "express_configuration" | "rms" | "box" | "cloudbees" | "concur" | "dropbox" | "mscrm" | "echosign" | "egnyte" | "newrelic" | "office365" | "salesforce" | "sentry" | "sharepoint" | "slack" | "springcm" | "zendesk" | "zoom" | "sso_integration" | "oag" | undefined;
+	logo_uri?: string | undefined;
+	is_first_party?: boolean | undefined;
+	oidc_conformant?: boolean | undefined;
+	client_aliases?: string[] | undefined;
+	session_transfer?: Record<string, any> | undefined;
+	oidc_logout?: Record<string, any> | undefined;
+	grant_types?: string[] | undefined;
+	jwt_configuration?: Record<string, any> | undefined;
+	signing_keys?: Record<string, any>[] | undefined;
+	encryption_key?: Record<string, any> | undefined;
+	sso?: boolean | undefined;
+	sso_disabled?: boolean | undefined;
+	cross_origin_authentication?: boolean | undefined;
+	cross_origin_loc?: string | undefined;
+	custom_login_page_on?: boolean | undefined;
+	custom_login_page?: string | undefined;
+	custom_login_page_preview?: string | undefined;
+	form_template?: string | undefined;
+	token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | undefined;
+	mobile?: Record<string, any> | undefined;
+	initiate_login_uri?: string | undefined;
+	native_social_login?: Record<string, any> | undefined;
+	default_organization?: Record<string, any> | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
+	organization_require_behavior?: "no_prompt" | "pre_login_prompt" | "post_login_prompt" | undefined;
+	client_authentication_methods?: Record<string, any> | undefined;
+	require_pushed_authorization_requests?: boolean | undefined;
+	require_proof_of_possession?: boolean | undefined;
+	signed_request_object?: Record<string, any> | undefined;
+	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
+	par_request_expiry?: number | undefined;
+	token_quota?: Record<string, any> | undefined;
 }>;
 export type LegacyClient = z.infer<typeof LegacyClientSchema>;
 export declare const codeTypeSchema: z.ZodEnum<[
@@ -19171,6 +19190,7 @@ export declare function init(config: AuthHeroConfig): {
 						callbacks?: string[] | undefined;
 						id?: string | undefined;
 						disable_sign_ups?: boolean | undefined;
+						email_validation?: "disabled" | "enabled" | "enforced" | undefined;
 						allowed_origins?: string[] | undefined;
 						web_origins?: string[] | undefined;
 						allowed_logout_urls?: string[] | undefined;
@@ -19195,7 +19215,6 @@ export declare function init(config: AuthHeroConfig): {
 								mappings?: Record<string, string> | undefined;
 							} | undefined;
 						} | undefined;
-						email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 						client_secret?: string | undefined;
 						client_metadata?: Record<string, string> | undefined;
 					};
@@ -19256,6 +19275,7 @@ export declare function init(config: AuthHeroConfig): {
 						id: string;
 						callbacks?: string[] | undefined;
 						disable_sign_ups?: boolean | undefined;
+						email_validation?: "disabled" | "enabled" | "enforced" | undefined;
 						allowed_origins?: string[] | undefined;
 						web_origins?: string[] | undefined;
 						allowed_logout_urls?: string[] | undefined;
@@ -19280,7 +19300,6 @@ export declare function init(config: AuthHeroConfig): {
 								mappings?: Record<string, string> | undefined;
 							} | undefined;
 						} | undefined;
-						email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 						client_secret?: string | undefined;
 						client_metadata?: Record<string, string> | undefined;
 					};
@@ -19292,6 +19311,7 @@ export declare function init(config: AuthHeroConfig): {
 					updated_at: string;
 					disable_sign_ups: boolean;
 					callbacks?: string[] | undefined;
+					email_validation?: "disabled" | "enabled" | "enforced" | undefined;
 					allowed_origins?: string[] | undefined;
 					web_origins?: string[] | undefined;
 					allowed_logout_urls?: string[] | undefined;
@@ -19318,7 +19338,6 @@ export declare function init(config: AuthHeroConfig): {
 							} | undefined;
 						} | undefined;
 					} | undefined;
-					email_validation?: "enabled" | "disabled" | "enforced" | undefined;
 					client_secret?: string | undefined;
 					client_metadata?: {
 						[x: string]: string;