authhero 4.112.0 → 4.113.0

package/dist/authhero.d.ts

@@ -50140,6 +50140,7 @@ export declare const Strategy: {
 	readonly SAMLP: "samlp";
 	readonly WAAD: "waad";
 	readonly ADFS: "adfs";
+	readonly AUTH0: "auth0";
 };
 export declare const StrategyType: {
 	readonly DATABASE: "database";
@@ -54173,6 +54174,21 @@ export type UserLinkingModeResolver = (params: {
 	client_id?: string;
 }) => UserLinkingMode | Promise<UserLinkingMode>;
 export type UserLinkingModeOption = UserLinkingMode | UserLinkingModeResolver;
+/**
+ * Resolver for the per-tenant username/password provider value.
+ *
+ * The native database provider has historically been written as `"auth2"`.
+ * Returning `"auth0"` for selected tenants lets you migrate them onto the
+ * `"auth0"` provider value (matching what the legacy Auth0 import format
+ * used) one tenant at a time. Reads always accept both values, so existing
+ * `auth2|*` rows keep resolving during and after the cutover.
+ *
+ * TRANSITIONAL: this resolver and the dual-read fallback can be removed
+ * once every tenant has been migrated to a single value.
+ */
+export type UsernamePasswordProviderResolver = (params: {
+	tenant_id: string;
+}) => "auth0" | "auth2" | Promise<"auth0" | "auth2">;
 export interface AuthHeroConfig {
 	dataAdapter: DataAdapters;
 	/**
@@ -54376,6 +54392,18 @@ export interface AuthHeroConfig {
 	 * @default "builtin"
 	 */
 	userLinkingMode?: UserLinkingModeOption;
+	/**
+	 * Per-tenant override for the username/password provider value used on
+	 * NEW user rows. Returning `"auth0"` for a tenant migrates new signups,
+	 * password resets, etc. onto the `auth0|*` user_id format. Existing
+	 * `auth2|*` rows keep working — reads accept either value.
+	 *
+	 * Omit to keep the legacy `"auth2"` value for every tenant.
+	 *
+	 * TRANSITIONAL: this hook and the dual-read fallback in the password
+	 * flows can be removed once all tenants have been backfilled.
+	 */
+	usernamePasswordProvider?: UsernamePasswordProviderResolver;
 }
 export type UserInfo = {
 	sub: string;
@@ -54437,6 +54465,7 @@ export type Bindings = {
 	webhookInvoker?: WebhookInvoker;
 	outbox?: OutboxConfig;
 	userLinkingMode?: UserLinkingModeOption;
+	usernamePasswordProvider?: UsernamePasswordProviderResolver;
 	/**
 	 * Allow outbound fetches (jwks_uri, request_uri) to localhost / private IP
 	 * ranges and over plain http. Intended for tests and local development;
@@ -66250,13 +66279,13 @@ export declare function init(config: AuthHeroConfig): {
 					};
 				};
 				output: {
-					name: string;
-					enabled: boolean;
-					credentials: {
+					name?: string | undefined;
+					credentials?: {
 						[x: string]: import("hono/utils/types").JSONValue;
-					};
-					default_from_address?: string | undefined | undefined;
-					settings?: {} | undefined | undefined;
+					} | undefined;
+					settings?: {} | undefined;
+					enabled?: boolean | undefined;
+					default_from_address?: string | undefined;
 				};
 				outputFormat: "json";
 				status: 200;
@@ -66368,13 +66397,13 @@ export declare function init(config: AuthHeroConfig): {
 					};
 				};
 				output: {
-					name: string;
-					enabled: boolean;
-					credentials: {
+					name?: string | undefined;
+					credentials?: {
 						[x: string]: import("hono/utils/types").JSONValue;
-					};
-					default_from_address?: string | undefined | undefined;
-					settings?: {} | undefined | undefined;
+					} | undefined;
+					settings?: {} | undefined;
+					enabled?: boolean | undefined;
+					default_from_address?: string | undefined;
 				};
 				outputFormat: "json";
 				status: 200;