authhero 4.111.0 → 4.113.0

package/dist/authhero.d.ts

@@ -11703,6 +11703,7 @@ export declare const connectionOptionsSchema: z.ZodObject<{
 	twilio_token: z.ZodOptional<z.ZodString>;
 	icon_url: z.ZodOptional<z.ZodString>;
 	domain_aliases: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+	callback_url: z.ZodOptional<z.ZodString>;
 	passwordPolicy: z.ZodOptional<z.ZodEnum<[
 		"none",
 		"low",
@@ -12130,6 +12131,7 @@ export declare const connectionOptionsSchema: z.ZodObject<{
 	twilio_token?: string | undefined;
 	icon_url?: string | undefined;
 	domain_aliases?: string[] | undefined;
+	callback_url?: string | undefined;
 	passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 	password_complexity_options?: {
 		min_length?: number | undefined;
@@ -12234,6 +12236,7 @@ export declare const connectionOptionsSchema: z.ZodObject<{
 	twilio_token?: string | undefined;
 	icon_url?: string | undefined;
 	domain_aliases?: string[] | undefined;
+	callback_url?: string | undefined;
 	passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 	password_complexity_options?: {
 		min_length?: number | undefined;
@@ -12338,6 +12341,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
 		twilio_token: z.ZodOptional<z.ZodString>;
 		icon_url: z.ZodOptional<z.ZodString>;
 		domain_aliases: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		callback_url: z.ZodOptional<z.ZodString>;
 		passwordPolicy: z.ZodOptional<z.ZodEnum<[
 			"none",
 			"low",
@@ -12765,6 +12769,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
 		twilio_token?: string | undefined;
 		icon_url?: string | undefined;
 		domain_aliases?: string[] | undefined;
+		callback_url?: string | undefined;
 		passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 		password_complexity_options?: {
 			min_length?: number | undefined;
@@ -12869,6 +12874,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
 		twilio_token?: string | undefined;
 		icon_url?: string | undefined;
 		domain_aliases?: string[] | undefined;
+		callback_url?: string | undefined;
 		passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 		password_complexity_options?: {
 			min_length?: number | undefined;
@@ -12973,6 +12979,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
 		twilio_token?: string | undefined;
 		icon_url?: string | undefined;
 		domain_aliases?: string[] | undefined;
+		callback_url?: string | undefined;
 		passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 		password_complexity_options?: {
 			min_length?: number | undefined;
@@ -13086,6 +13093,7 @@ export declare const connectionInsertSchema: z.ZodObject<{
 		twilio_token?: string | undefined;
 		icon_url?: string | undefined;
 		domain_aliases?: string[] | undefined;
+		callback_url?: string | undefined;
 		passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 		password_complexity_options?: {
 			min_length?: number | undefined;
@@ -13219,6 +13227,7 @@ export declare const connectionSchema: z.ZodObject<{
 		twilio_token: z.ZodOptional<z.ZodString>;
 		icon_url: z.ZodOptional<z.ZodString>;
 		domain_aliases: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+		callback_url: z.ZodOptional<z.ZodString>;
 		passwordPolicy: z.ZodOptional<z.ZodEnum<[
 			"none",
 			"low",
@@ -13646,6 +13655,7 @@ export declare const connectionSchema: z.ZodObject<{
 		twilio_token?: string | undefined;
 		icon_url?: string | undefined;
 		domain_aliases?: string[] | undefined;
+		callback_url?: string | undefined;
 		passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 		password_complexity_options?: {
 			min_length?: number | undefined;
@@ -13750,6 +13760,7 @@ export declare const connectionSchema: z.ZodObject<{
 		twilio_token?: string | undefined;
 		icon_url?: string | undefined;
 		domain_aliases?: string[] | undefined;
+		callback_url?: string | undefined;
 		passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 		password_complexity_options?: {
 			min_length?: number | undefined;
@@ -13854,6 +13865,7 @@ export declare const connectionSchema: z.ZodObject<{
 		twilio_token?: string | undefined;
 		icon_url?: string | undefined;
 		domain_aliases?: string[] | undefined;
+		callback_url?: string | undefined;
 		passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 		password_complexity_options?: {
 			min_length?: number | undefined;
@@ -13969,6 +13981,7 @@ export declare const connectionSchema: z.ZodObject<{
 		twilio_token?: string | undefined;
 		icon_url?: string | undefined;
 		domain_aliases?: string[] | undefined;
+		callback_url?: string | undefined;
 		passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 		password_complexity_options?: {
 			min_length?: number | undefined;
@@ -50127,6 +50140,7 @@ export declare const Strategy: {
 	readonly SAMLP: "samlp";
 	readonly WAAD: "waad";
 	readonly ADFS: "adfs";
+	readonly AUTH0: "auth0";
 };
 export declare const StrategyType: {
 	readonly DATABASE: "database";
@@ -52190,6 +52204,7 @@ declare const enrichedClientSchema: z.ZodObject<{
 			twilio_token: z.ZodOptional<z.ZodString>;
 			icon_url: z.ZodOptional<z.ZodString>;
 			domain_aliases: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+			callback_url: z.ZodOptional<z.ZodString>;
 			passwordPolicy: z.ZodOptional<z.ZodEnum<[
 				"none",
 				"low",
@@ -52617,6 +52632,7 @@ declare const enrichedClientSchema: z.ZodObject<{
 			twilio_token?: string | undefined;
 			icon_url?: string | undefined;
 			domain_aliases?: string[] | undefined;
+			callback_url?: string | undefined;
 			passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 			password_complexity_options?: {
 				min_length?: number | undefined;
@@ -52721,6 +52737,7 @@ declare const enrichedClientSchema: z.ZodObject<{
 			twilio_token?: string | undefined;
 			icon_url?: string | undefined;
 			domain_aliases?: string[] | undefined;
+			callback_url?: string | undefined;
 			passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 			password_complexity_options?: {
 				min_length?: number | undefined;
@@ -52825,6 +52842,7 @@ declare const enrichedClientSchema: z.ZodObject<{
 			twilio_token?: string | undefined;
 			icon_url?: string | undefined;
 			domain_aliases?: string[] | undefined;
+			callback_url?: string | undefined;
 			passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 			password_complexity_options?: {
 				min_length?: number | undefined;
@@ -52940,6 +52958,7 @@ declare const enrichedClientSchema: z.ZodObject<{
 			twilio_token?: string | undefined;
 			icon_url?: string | undefined;
 			domain_aliases?: string[] | undefined;
+			callback_url?: string | undefined;
 			passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 			password_complexity_options?: {
 				min_length?: number | undefined;
@@ -53382,6 +53401,7 @@ declare const enrichedClientSchema: z.ZodObject<{
 			twilio_token?: string | undefined;
 			icon_url?: string | undefined;
 			domain_aliases?: string[] | undefined;
+			callback_url?: string | undefined;
 			passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
 			password_complexity_options?: {
 				min_length?: number | undefined;
@@ -54154,6 +54174,21 @@ export type UserLinkingModeResolver = (params: {
 	client_id?: string;
 }) => UserLinkingMode | Promise<UserLinkingMode>;
 export type UserLinkingModeOption = UserLinkingMode | UserLinkingModeResolver;
+/**
+ * Resolver for the per-tenant username/password provider value.
+ *
+ * The native database provider has historically been written as `"auth2"`.
+ * Returning `"auth0"` for selected tenants lets you migrate them onto the
+ * `"auth0"` provider value (matching what the legacy Auth0 import format
+ * used) one tenant at a time. Reads always accept both values, so existing
+ * `auth2|*` rows keep resolving during and after the cutover.
+ *
+ * TRANSITIONAL: this resolver and the dual-read fallback can be removed
+ * once every tenant has been migrated to a single value.
+ */
+export type UsernamePasswordProviderResolver = (params: {
+	tenant_id: string;
+}) => "auth0" | "auth2" | Promise<"auth0" | "auth2">;
 export interface AuthHeroConfig {
 	dataAdapter: DataAdapters;
 	/**
@@ -54357,6 +54392,18 @@ export interface AuthHeroConfig {
 	 * @default "builtin"
 	 */
 	userLinkingMode?: UserLinkingModeOption;
+	/**
+	 * Per-tenant override for the username/password provider value used on
+	 * NEW user rows. Returning `"auth0"` for a tenant migrates new signups,
+	 * password resets, etc. onto the `auth0|*` user_id format. Existing
+	 * `auth2|*` rows keep working — reads accept either value.
+	 *
+	 * Omit to keep the legacy `"auth2"` value for every tenant.
+	 *
+	 * TRANSITIONAL: this hook and the dual-read fallback in the password
+	 * flows can be removed once all tenants have been backfilled.
+	 */
+	usernamePasswordProvider?: UsernamePasswordProviderResolver;
 }
 export type UserInfo = {
 	sub: string;
@@ -54418,6 +54465,7 @@ export type Bindings = {
 	webhookInvoker?: WebhookInvoker;
 	outbox?: OutboxConfig;
 	userLinkingMode?: UserLinkingModeOption;
+	usernamePasswordProvider?: UsernamePasswordProviderResolver;
 	/**
 	 * Allow outbound fetches (jwks_uri, request_uri) to localhost / private IP
 	 * ranges and over plain http. Intended for tests and local development;
@@ -54741,6 +54789,30 @@ export interface InMemoryCacheConfig {
  * Create an in-memory cache adapter
  */
 export declare function createInMemoryCache(config?: InMemoryCacheConfig): CacheAdapter;
+export declare const mailgunCredentialsSchema: z.ZodObject<{
+	api_key: z.ZodString;
+	domain: z.ZodString;
+	region: z.ZodOptional<z.ZodNullable<z.ZodEnum<[
+		"eu"
+	]>>>;
+}, "strip", z.ZodTypeAny, {
+	api_key: string;
+	domain: string;
+	region?: "eu" | null | undefined;
+}, {
+	api_key: string;
+	domain: string;
+	region?: "eu" | null | undefined;
+}>;
+export type MailgunCredentials = z.infer<typeof mailgunCredentialsSchema>;
+export interface MailgunEmailServiceOptions {
+	fetchImpl?: typeof fetch;
+}
+export declare class MailgunEmailService implements EmailServiceAdapter {
+	private readonly fetchImpl;
+	constructor(options?: MailgunEmailServiceOptions);
+	send(params: EmailServiceSendParams): Promise<void>;
+}
 /**
  * Register a background promise tied to the current request.
  *
@@ -61956,6 +62028,7 @@ export declare function init(config: AuthHeroConfig): {
 						twilio_token?: string | undefined | undefined;
 						icon_url?: string | undefined | undefined;
 						domain_aliases?: string[] | undefined | undefined;
+						callback_url?: string | undefined | undefined;
 						passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined | undefined;
 						password_complexity_options?: {
 							min_length?: number | undefined | undefined;
@@ -62079,6 +62152,7 @@ export declare function init(config: AuthHeroConfig): {
 							twilio_token?: string | undefined | undefined;
 							icon_url?: string | undefined | undefined;
 							domain_aliases?: string[] | undefined | undefined;
+							callback_url?: string | undefined | undefined;
 							passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined | undefined;
 							password_complexity_options?: {
 								min_length?: number | undefined | undefined;
@@ -62221,6 +62295,7 @@ export declare function init(config: AuthHeroConfig): {
 						twilio_token?: string | undefined | undefined;
 						icon_url?: string | undefined | undefined;
 						domain_aliases?: string[] | undefined | undefined;
+						callback_url?: string | undefined | undefined;
 						passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined | undefined;
 						password_complexity_options?: {
 							min_length?: number | undefined | undefined;
@@ -62391,6 +62466,7 @@ export declare function init(config: AuthHeroConfig): {
 						twilio_token?: string | undefined | undefined;
 						icon_url?: string | undefined | undefined;
 						domain_aliases?: string[] | undefined | undefined;
+						callback_url?: string | undefined | undefined;
 						passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined | undefined;
 						password_complexity_options?: {
 							min_length?: number | undefined | undefined;
@@ -62540,6 +62616,7 @@ export declare function init(config: AuthHeroConfig): {
 						twilio_token?: string | undefined | undefined;
 						icon_url?: string | undefined | undefined;
 						domain_aliases?: string[] | undefined | undefined;
+						callback_url?: string | undefined | undefined;
 						passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined | undefined;
 						password_complexity_options?: {
 							min_length?: number | undefined | undefined;
@@ -64774,6 +64851,7 @@ export declare function init(config: AuthHeroConfig): {
 								twilio_token?: string | undefined | undefined;
 								icon_url?: string | undefined | undefined;
 								domain_aliases?: string[] | undefined | undefined;
+								callback_url?: string | undefined | undefined;
 								passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined | undefined;
 								password_complexity_options?: {
 									min_length?: number | undefined | undefined;
@@ -64919,6 +64997,7 @@ export declare function init(config: AuthHeroConfig): {
 								twilio_token?: string | undefined | undefined;
 								icon_url?: string | undefined | undefined;
 								domain_aliases?: string[] | undefined | undefined;
+								callback_url?: string | undefined | undefined;
 								passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined | undefined;
 								password_complexity_options?: {
 									min_length?: number | undefined | undefined;
@@ -66200,13 +66279,13 @@ export declare function init(config: AuthHeroConfig): {
 					};
 				};
 				output: {
-					name: string;
-					enabled: boolean;
-					credentials: {
+					name?: string | undefined;
+					credentials?: {
 						[x: string]: import("hono/utils/types").JSONValue;
-					};
-					default_from_address?: string | undefined | undefined;
-					settings?: {} | undefined | undefined;
+					} | undefined;
+					settings?: {} | undefined;
+					enabled?: boolean | undefined;
+					default_from_address?: string | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -66215,6 +66294,23 @@ export declare function init(config: AuthHeroConfig): {
 	} & {
 		"/": {
 			$post: {
+				input: {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				} & {
+					json: {
+						name: string;
+						credentials: Record<string, unknown>;
+						settings?: {} | undefined;
+						enabled?: boolean | undefined;
+						default_from_address?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 409;
+			} | {
 				input: {
 					header: {
 						"tenant-id"?: string | undefined;
@@ -66270,6 +66366,28 @@ export declare function init(config: AuthHeroConfig): {
 				status: 200;
 			};
 		};
+	} & {
+		"/": {
+			$delete: {
+				input: {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 204;
+			} | {
+				input: {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 404;
+			};
+		};
 	}, "/emails/provider"> & import("hono/types").MergeSchemaPath<{
 		"/": {
 			$get: {
@@ -66279,13 +66397,13 @@ export declare function init(config: AuthHeroConfig): {
 					};
 				};
 				output: {
-					name: string;
-					enabled: boolean;
-					credentials: {
+					name?: string | undefined;
+					credentials?: {
 						[x: string]: import("hono/utils/types").JSONValue;
-					};
-					default_from_address?: string | undefined | undefined;
-					settings?: {} | undefined | undefined;
+					} | undefined;
+					settings?: {} | undefined;
+					enabled?: boolean | undefined;
+					default_from_address?: string | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -66294,6 +66412,23 @@ export declare function init(config: AuthHeroConfig): {
 	} & {
 		"/": {
 			$post: {
+				input: {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				} & {
+					json: {
+						name: string;
+						credentials: Record<string, unknown>;
+						settings?: {} | undefined;
+						enabled?: boolean | undefined;
+						default_from_address?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 409;
+			} | {
 				input: {
 					header: {
 						"tenant-id"?: string | undefined;
@@ -66349,6 +66484,28 @@ export declare function init(config: AuthHeroConfig): {
 				status: 200;
 			};
 		};
+	} & {
+		"/": {
+			$delete: {
+				input: {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 204;
+			} | {
+				input: {
+					header: {
+						"tenant-id"?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 404;
+			};
+		};
 	}, "/email/providers"> & import("hono/types").MergeSchemaPath<{
 		"/": {
 			$get: {
@@ -67594,6 +67751,118 @@ export declare function init(config: AuthHeroConfig): {
 				status: 500;
 			};
 		};
+	}, "/login/callback"> & import("hono/types").MergeSchemaPath<{
+		"/": {
+			$get: {
+				input: {
+					query: {
+						state: string;
+						code?: string | undefined;
+						scope?: string | undefined;
+						error?: string | undefined;
+						error_description?: string | undefined;
+						error_code?: string | undefined;
+						hd?: string | undefined;
+						error_reason?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 302;
+			} | {
+				input: {
+					query: {
+						state: string;
+						code?: string | undefined;
+						scope?: string | undefined;
+						error?: string | undefined;
+						error_description?: string | undefined;
+						error_code?: string | undefined;
+						hd?: string | undefined;
+						error_reason?: string | undefined;
+					};
+				};
+				output: {
+					message: string;
+				};
+				outputFormat: "json";
+				status: 400;
+			} | {
+				input: {
+					query: {
+						state: string;
+						code?: string | undefined;
+						scope?: string | undefined;
+						error?: string | undefined;
+						error_description?: string | undefined;
+						error_code?: string | undefined;
+						hd?: string | undefined;
+						error_reason?: string | undefined;
+					};
+				};
+				output: {
+					message: string;
+				};
+				outputFormat: "json";
+				status: 500;
+			};
+		};
+	} & {
+		"/": {
+			$post: {
+				input: {
+					form: {
+						state: string;
+						code?: string | undefined;
+						scope?: string | undefined;
+						error?: string | undefined;
+						error_description?: string | undefined;
+						error_code?: string | undefined;
+						hd?: string | undefined;
+						error_reason?: string | undefined;
+					};
+				};
+				output: {};
+				outputFormat: string;
+				status: 302;
+			} | {
+				input: {
+					form: {
+						state: string;
+						code?: string | undefined;
+						scope?: string | undefined;
+						error?: string | undefined;
+						error_description?: string | undefined;
+						error_code?: string | undefined;
+						hd?: string | undefined;
+						error_reason?: string | undefined;
+					};
+				};
+				output: {
+					message: string;
+				};
+				outputFormat: "json";
+				status: 400;
+			} | {
+				input: {
+					form: {
+						state: string;
+						code?: string | undefined;
+						scope?: string | undefined;
+						error?: string | undefined;
+						error_description?: string | undefined;
+						error_code?: string | undefined;
+						hd?: string | undefined;
+						error_reason?: string | undefined;
+					};
+				};
+				output: {
+					message: string;
+				};
+				outputFormat: "json";
+				status: 500;
+			};
+		};
 	}, "/callback"> & import("hono/types").MergeSchemaPath<{
 		"/": {
 			$get: {