authhero 5.15.0 → 5.17.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. package/dist/assets/u/js/client.js +1 -1
  2. package/dist/assets/u/widget/index.esm.js +1 -1
  3. package/dist/authhero.cjs +117 -117
  4. package/dist/authhero.d.ts +319 -223
  5. package/dist/authhero.mjs +10088 -9959
  6. package/dist/client.js +1 -1
  7. package/dist/stats.html +1 -1
  8. package/dist/tsconfig.types.tsbuildinfo +1 -1
  9. package/dist/types/authentication-flows/passwordless.d.ts +3 -3
  10. package/dist/types/client/client-bundle.d.ts +1 -1
  11. package/dist/types/helpers/dcr/metadata-mapping.d.ts +1 -1
  12. package/dist/types/index.d.ts +244 -197
  13. package/dist/types/middlewares/authentication.d.ts +17 -0
  14. package/dist/types/routes/auth-api/index.d.ts +25 -25
  15. package/dist/types/routes/auth-api/passwordless.d.ts +16 -16
  16. package/dist/types/routes/auth-api/register/index.d.ts +2 -2
  17. package/dist/types/routes/auth-api/revoke.d.ts +6 -6
  18. package/dist/types/routes/auth-api/well-known.d.ts +1 -1
  19. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  20. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  21. package/dist/types/routes/management-api/clients.d.ts +7 -7
  22. package/dist/types/routes/management-api/connections.d.ts +1 -1
  23. package/dist/types/routes/management-api/custom-domains.d.ts +52 -6
  24. package/dist/types/routes/management-api/email-templates.d.ts +14 -14
  25. package/dist/types/routes/management-api/failed-events.d.ts +1 -1
  26. package/dist/types/routes/management-api/forms.d.ts +119 -119
  27. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  28. package/dist/types/routes/management-api/index.d.ts +212 -166
  29. package/dist/types/routes/management-api/logs.d.ts +3 -3
  30. package/dist/types/routes/management-api/organizations.d.ts +2 -2
  31. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  32. package/dist/types/routes/management-api/users.d.ts +2 -2
  33. package/dist/types/routes/universal-login/common.d.ts +2 -2
  34. package/dist/types/routes/universal-login/flow-api.d.ts +12 -12
  35. package/dist/types/routes/universal-login/u2-index.d.ts +6 -6
  36. package/dist/types/routes/universal-login/u2-routes.d.ts +6 -6
  37. package/dist/types/state-machines/login-session.d.ts +1 -1
  38. package/dist/types/types/AuthHeroConfig.d.ts +33 -0
  39. package/dist/types/types/IdToken.d.ts +1 -1
  40. package/dist/types/types/Variables.d.ts +1 -0
  41. package/dist/types/utils/jwks.d.ts +2 -2
  42. package/package.json +6 -6
package/dist/types/middlewares/authentication.d.ts CHANGED
@@ -13,9 +13,26 @@ export declare const MANAGEMENT_API_AUDIENCE = "urn:authhero:management";
13
13
  * token's `aud` includes the management API audience. It must be enabled
14
14
  * for the management API and left off for everything else (the `/userinfo`
15
15
  * endpoint, for example, takes any access token issued by this tenant).
16
+ *
17
+ * `relaxManagementAudience` downgrades that audience check from a hard
18
+ * rejection to a `console.warn`, letting tokens issued for other audiences
19
+ * still pass. TRANSITIONAL: use only while migrating clients to request
20
+ * the management audience; flip back off once warnings stop appearing.
21
+ *
22
+ * `additionalManagementAudiences` extends the set of accepted audiences
23
+ * beyond the built-in `urn:authhero:management`. The resolver receives the
24
+ * token's `tenant_id` and returns the list of audiences accepted for that
25
+ * token, so a per-tenant identifier (e.g.
26
+ * `https://${tenant_id}.token.example.com/v2/api/`) can be constructed at
27
+ * request time alongside any global legacy identifiers.
16
28
  */
29
+ export type ManagementAudienceResolver = (params: {
30
+ tenant_id?: string;
31
+ }) => string[] | Promise<string[]>;
17
32
  export interface AuthMiddlewareOptions {
18
33
  requireManagementAudience?: boolean;
34
+ relaxManagementAudience?: boolean;
35
+ additionalManagementAudiences?: ManagementAudienceResolver;
19
36
  }
20
37
  export declare function createAuthMiddleware(app: OpenAPIHono<{
21
38
  Bindings: Bindings;
package/dist/types/routes/auth-api/index.d.ts CHANGED
@@ -288,7 +288,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
288
288
  scope?: string | undefined;
289
289
  grant_types?: string[] | undefined;
290
290
  response_types?: string[] | undefined;
291
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
291
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
292
292
  jwks_uri?: string | undefined;
293
293
  jwks?: Record<string, unknown> | undefined;
294
294
  software_id?: string | undefined;
@@ -377,7 +377,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
377
377
  scope?: string | undefined;
378
378
  grant_types?: string[] | undefined;
379
379
  response_types?: string[] | undefined;
380
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
380
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
381
381
  jwks_uri?: string | undefined;
382
382
  jwks?: Record<string, unknown> | undefined;
383
383
  software_id?: string | undefined;
@@ -723,19 +723,19 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
723
723
  email: string;
724
724
  send: "code" | "link";
725
725
  authParams: {
726
- act_as?: string | undefined;
726
+ state?: string | undefined;
727
727
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
728
728
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
729
- redirect_uri?: string | undefined;
730
- audience?: string | undefined;
731
- organization?: string | undefined;
732
- state?: string | undefined;
733
- nonce?: string | undefined;
734
729
  scope?: string | undefined;
730
+ username?: string | undefined;
731
+ audience?: string | undefined;
735
732
  prompt?: string | undefined;
736
- code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
737
733
  code_challenge?: string | undefined;
738
- username?: string | undefined;
734
+ code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
735
+ redirect_uri?: string | undefined;
736
+ nonce?: string | undefined;
737
+ act_as?: string | undefined;
738
+ organization?: string | undefined;
739
739
  ui_locales?: string | undefined;
740
740
  max_age?: number | undefined;
741
741
  acr_values?: string | undefined;
@@ -759,19 +759,19 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
759
759
  phone_number: string;
760
760
  send: "code" | "link";
761
761
  authParams: {
762
- act_as?: string | undefined;
762
+ state?: string | undefined;
763
763
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
764
764
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
765
- redirect_uri?: string | undefined;
766
- audience?: string | undefined;
767
- organization?: string | undefined;
768
- state?: string | undefined;
769
- nonce?: string | undefined;
770
765
  scope?: string | undefined;
766
+ username?: string | undefined;
767
+ audience?: string | undefined;
771
768
  prompt?: string | undefined;
772
- code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
773
769
  code_challenge?: string | undefined;
774
- username?: string | undefined;
770
+ code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
771
+ redirect_uri?: string | undefined;
772
+ nonce?: string | undefined;
773
+ act_as?: string | undefined;
774
+ organization?: string | undefined;
775
775
  ui_locales?: string | undefined;
776
776
  max_age?: number | undefined;
777
777
  acr_values?: string | undefined;
@@ -903,14 +903,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
903
903
  input: {
904
904
  form: {
905
905
  token: string;
906
- token_type_hint?: "refresh_token" | "access_token" | undefined;
906
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
907
907
  client_id?: string | undefined;
908
908
  client_secret?: string | undefined;
909
909
  };
910
910
  } & {
911
911
  json: {
912
912
  token: string;
913
- token_type_hint?: "refresh_token" | "access_token" | undefined;
913
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
914
914
  client_id?: string | undefined;
915
915
  client_secret?: string | undefined;
916
916
  };
@@ -922,14 +922,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
922
922
  input: {
923
923
  form: {
924
924
  token: string;
925
- token_type_hint?: "refresh_token" | "access_token" | undefined;
925
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
926
926
  client_id?: string | undefined;
927
927
  client_secret?: string | undefined;
928
928
  };
929
929
  } & {
930
930
  json: {
931
931
  token: string;
932
- token_type_hint?: "refresh_token" | "access_token" | undefined;
932
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
933
933
  client_id?: string | undefined;
934
934
  client_secret?: string | undefined;
935
935
  };
@@ -944,14 +944,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
944
944
  input: {
945
945
  form: {
946
946
  token: string;
947
- token_type_hint?: "refresh_token" | "access_token" | undefined;
947
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
948
948
  client_id?: string | undefined;
949
949
  client_secret?: string | undefined;
950
950
  };
951
951
  } & {
952
952
  json: {
953
953
  token: string;
954
- token_type_hint?: "refresh_token" | "access_token" | undefined;
954
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
955
955
  client_id?: string | undefined;
956
956
  client_secret?: string | undefined;
957
957
  };
@@ -1378,7 +1378,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1378
1378
  keys: {
1379
1379
  alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
1380
1380
  kid: string;
1381
- kty: "RSA" | "EC" | "oct";
1381
+ kty: "EC" | "RSA" | "oct";
1382
1382
  use?: "sig" | "enc" | undefined;
1383
1383
  n?: string | undefined;
1384
1384
  e?: string | undefined;
package/dist/types/routes/auth-api/passwordless.d.ts CHANGED
@@ -14,19 +14,19 @@ export declare const passwordlessRoutes: OpenAPIHono<{
14
14
  email: string;
15
15
  send: "code" | "link";
16
16
  authParams: {
17
- act_as?: string | undefined;
17
+ state?: string | undefined;
18
18
  response_type?: AuthorizationResponseType | undefined;
19
19
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
20
- redirect_uri?: string | undefined;
21
- audience?: string | undefined;
22
- organization?: string | undefined;
23
- state?: string | undefined;
24
- nonce?: string | undefined;
25
20
  scope?: string | undefined;
21
+ username?: string | undefined;
22
+ audience?: string | undefined;
26
23
  prompt?: string | undefined;
27
- code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
28
24
  code_challenge?: string | undefined;
29
- username?: string | undefined;
25
+ code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
26
+ redirect_uri?: string | undefined;
27
+ nonce?: string | undefined;
28
+ act_as?: string | undefined;
29
+ organization?: string | undefined;
30
30
  ui_locales?: string | undefined;
31
31
  max_age?: number | undefined;
32
32
  acr_values?: string | undefined;
@@ -50,19 +50,19 @@ export declare const passwordlessRoutes: OpenAPIHono<{
50
50
  phone_number: string;
51
51
  send: "code" | "link";
52
52
  authParams: {
53
- act_as?: string | undefined;
53
+ state?: string | undefined;
54
54
  response_type?: AuthorizationResponseType | undefined;
55
55
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
56
- redirect_uri?: string | undefined;
57
- audience?: string | undefined;
58
- organization?: string | undefined;
59
- state?: string | undefined;
60
- nonce?: string | undefined;
61
56
  scope?: string | undefined;
57
+ username?: string | undefined;
58
+ audience?: string | undefined;
62
59
  prompt?: string | undefined;
63
- code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
64
60
  code_challenge?: string | undefined;
65
- username?: string | undefined;
61
+ code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
62
+ redirect_uri?: string | undefined;
63
+ nonce?: string | undefined;
64
+ act_as?: string | undefined;
65
+ organization?: string | undefined;
66
66
  ui_locales?: string | undefined;
67
67
  max_age?: number | undefined;
68
68
  acr_values?: string | undefined;
package/dist/types/routes/auth-api/register/index.d.ts CHANGED
@@ -18,7 +18,7 @@ export declare const registerRoutes: OpenAPIHono<{
18
18
  scope?: string | undefined;
19
19
  grant_types?: string[] | undefined;
20
20
  response_types?: string[] | undefined;
21
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
21
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
22
22
  jwks_uri?: string | undefined;
23
23
  jwks?: Record<string, unknown> | undefined;
24
24
  software_id?: string | undefined;
@@ -107,7 +107,7 @@ export declare const registerRoutes: OpenAPIHono<{
107
107
  scope?: string | undefined;
108
108
  grant_types?: string[] | undefined;
109
109
  response_types?: string[] | undefined;
110
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
110
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
111
111
  jwks_uri?: string | undefined;
112
112
  jwks?: Record<string, unknown> | undefined;
113
113
  software_id?: string | undefined;
package/dist/types/routes/auth-api/revoke.d.ts CHANGED
@@ -9,14 +9,14 @@ export declare const revokeRoutes: OpenAPIHono<{
9
9
  input: {
10
10
  form: {
11
11
  token: string;
12
- token_type_hint?: "refresh_token" | "access_token" | undefined;
12
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
13
13
  client_id?: string | undefined;
14
14
  client_secret?: string | undefined;
15
15
  };
16
16
  } & {
17
17
  json: {
18
18
  token: string;
19
- token_type_hint?: "refresh_token" | "access_token" | undefined;
19
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
20
20
  client_id?: string | undefined;
21
21
  client_secret?: string | undefined;
22
22
  };
@@ -28,14 +28,14 @@ export declare const revokeRoutes: OpenAPIHono<{
28
28
  input: {
29
29
  form: {
30
30
  token: string;
31
- token_type_hint?: "refresh_token" | "access_token" | undefined;
31
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
32
32
  client_id?: string | undefined;
33
33
  client_secret?: string | undefined;
34
34
  };
35
35
  } & {
36
36
  json: {
37
37
  token: string;
38
- token_type_hint?: "refresh_token" | "access_token" | undefined;
38
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
39
39
  client_id?: string | undefined;
40
40
  client_secret?: string | undefined;
41
41
  };
@@ -50,14 +50,14 @@ export declare const revokeRoutes: OpenAPIHono<{
50
50
  input: {
51
51
  form: {
52
52
  token: string;
53
- token_type_hint?: "refresh_token" | "access_token" | undefined;
53
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
54
54
  client_id?: string | undefined;
55
55
  client_secret?: string | undefined;
56
56
  };
57
57
  } & {
58
58
  json: {
59
59
  token: string;
60
- token_type_hint?: "refresh_token" | "access_token" | undefined;
60
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
61
61
  client_id?: string | undefined;
62
62
  client_secret?: string | undefined;
63
63
  };
package/dist/types/routes/auth-api/well-known.d.ts CHANGED
@@ -10,7 +10,7 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<{
10
10
  keys: {
11
11
  alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
12
12
  kid: string;
13
- kty: "RSA" | "EC" | "oct";
13
+ kty: "EC" | "RSA" | "oct";
14
14
  use?: "sig" | "enc" | undefined;
15
15
  n?: string | undefined;
16
16
  e?: string | undefined;
package/dist/types/routes/management-api/action-executions.d.ts CHANGED
@@ -31,7 +31,7 @@ export declare const actionExecutionsRoutes: OpenAPIHono<{
31
31
  output: {
32
32
  id: string;
33
33
  trigger_id: string;
34
- status: "pending" | "unspecified" | "final" | "partial" | "canceled" | "suspended";
34
+ status: "unspecified" | "pending" | "final" | "partial" | "canceled" | "suspended";
35
35
  results: {
36
36
  action_name: string;
37
37
  error: {
package/dist/types/routes/management-api/authentication-methods.d.ts CHANGED
@@ -37,7 +37,7 @@ export declare const authenticationMethodsRoutes: OpenAPIHono<{
37
37
  };
38
38
  } & {
39
39
  json: {
40
- type: "email" | "phone" | "push" | "passkey" | "totp" | "webauthn-roaming" | "webauthn-platform";
40
+ type: "push" | "email" | "passkey" | "webauthn-roaming" | "webauthn-platform" | "phone" | "totp";
41
41
  phone_number?: string | undefined;
42
42
  totp_secret?: string | undefined;
43
43
  credential_id?: string | undefined;
package/dist/types/routes/management-api/clients.d.ts CHANGED
@@ -72,7 +72,7 @@ export declare const clientRoutes: OpenAPIHono<{
72
72
  addons?: {
73
73
  [x: string]: any;
74
74
  } | undefined;
75
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
75
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
76
76
  client_metadata?: {
77
77
  [x: string]: string;
78
78
  } | undefined;
@@ -168,7 +168,7 @@ export declare const clientRoutes: OpenAPIHono<{
168
168
  addons?: {
169
169
  [x: string]: any;
170
170
  } | undefined;
171
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
171
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
172
172
  client_metadata?: {
173
173
  [x: string]: string;
174
174
  } | undefined;
@@ -279,7 +279,7 @@ export declare const clientRoutes: OpenAPIHono<{
279
279
  addons?: {
280
280
  [x: string]: any;
281
281
  } | undefined;
282
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
282
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
283
283
  client_metadata?: {
284
284
  [x: string]: string;
285
285
  } | undefined;
@@ -389,7 +389,7 @@ export declare const clientRoutes: OpenAPIHono<{
389
389
  custom_login_page_preview?: string | undefined;
390
390
  form_template?: string | undefined;
391
391
  addons?: Record<string, any> | undefined;
392
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
392
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
393
393
  client_metadata?: Record<string, string> | undefined;
394
394
  hide_sign_up_disabled_error?: boolean | undefined;
395
395
  mobile?: Record<string, any> | undefined;
@@ -469,7 +469,7 @@ export declare const clientRoutes: OpenAPIHono<{
469
469
  addons?: {
470
470
  [x: string]: any;
471
471
  } | undefined;
472
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
472
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
473
473
  client_metadata?: {
474
474
  [x: string]: string;
475
475
  } | undefined;
@@ -558,7 +558,7 @@ export declare const clientRoutes: OpenAPIHono<{
558
558
  custom_login_page_preview?: string | undefined;
559
559
  form_template?: string | undefined;
560
560
  addons?: Record<string, any> | undefined;
561
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
561
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
562
562
  client_metadata?: Record<string, string> | undefined;
563
563
  hide_sign_up_disabled_error?: boolean | undefined;
564
564
  mobile?: Record<string, any> | undefined;
@@ -638,7 +638,7 @@ export declare const clientRoutes: OpenAPIHono<{
638
638
  addons?: {
639
639
  [x: string]: any;
640
640
  } | undefined;
641
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
641
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
642
642
  client_metadata?: {
643
643
  [x: string]: string;
644
644
  } | undefined;
package/dist/types/routes/management-api/connections.d.ts CHANGED
@@ -852,7 +852,7 @@ export declare const connectionRoutes: OpenAPIHono<{
852
852
  };
853
853
  } | {
854
854
  mode: "inline";
855
- status: "success" | "error";
855
+ status: "error" | "success";
856
856
  connection_id: string;
857
857
  connection_name: string;
858
858
  strategy: string;
package/dist/types/routes/management-api/custom-domains.d.ts CHANGED
@@ -28,7 +28,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
28
28
  type: "auth0_managed_certs" | "self_managed_certs";
29
29
  custom_domain_id: string;
30
30
  primary: boolean;
31
- status: "pending" | "disabled" | "pending_verification" | "ready";
31
+ status: "disabled" | "pending" | "pending_verification" | "ready";
32
32
  verification_method?: "txt" | undefined;
33
33
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
34
34
  domain_metadata?: {
@@ -69,7 +69,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
69
69
  type: "auth0_managed_certs" | "self_managed_certs";
70
70
  custom_domain_id: string;
71
71
  primary: boolean;
72
- status: "pending" | "disabled" | "pending_verification" | "ready";
72
+ status: "disabled" | "pending" | "pending_verification" | "ready";
73
73
  verification_method?: "txt" | undefined;
74
74
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
75
75
  domain_metadata?: {
@@ -130,7 +130,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
130
130
  domain_metadata?: Record<string, string> | undefined;
131
131
  custom_domain_id?: string | undefined;
132
132
  primary?: boolean | undefined;
133
- status?: "pending" | "disabled" | "pending_verification" | "ready" | undefined;
133
+ status?: "disabled" | "pending" | "pending_verification" | "ready" | undefined;
134
134
  origin_domain_name?: string | undefined;
135
135
  verification?: {
136
136
  methods: ({
@@ -151,7 +151,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
151
151
  type: "auth0_managed_certs" | "self_managed_certs";
152
152
  custom_domain_id: string;
153
153
  primary: boolean;
154
- status: "pending" | "disabled" | "pending_verification" | "ready";
154
+ status: "disabled" | "pending" | "pending_verification" | "ready";
155
155
  verification_method?: "txt" | undefined;
156
156
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
157
157
  domain_metadata?: {
@@ -198,7 +198,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
198
198
  type: "auth0_managed_certs" | "self_managed_certs";
199
199
  custom_domain_id: string;
200
200
  primary: boolean;
201
- status: "pending" | "disabled" | "pending_verification" | "ready";
201
+ status: "disabled" | "pending" | "pending_verification" | "ready";
202
202
  verification_method?: "txt" | undefined;
203
203
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
204
204
  domain_metadata?: {
@@ -222,6 +222,52 @@ export declare const customDomainRoutes: OpenAPIHono<{
222
222
  status: 201;
223
223
  };
224
224
  };
225
+ } & {
226
+ "/:id/certificate": {
227
+ $put: {
228
+ input: {
229
+ param: {
230
+ id: string;
231
+ };
232
+ } & {
233
+ header: {
234
+ "tenant-id"?: string | undefined;
235
+ };
236
+ } & {
237
+ json: {
238
+ certificate: string;
239
+ private_key: string;
240
+ };
241
+ };
242
+ output: {
243
+ domain: string;
244
+ type: "auth0_managed_certs" | "self_managed_certs";
245
+ custom_domain_id: string;
246
+ primary: boolean;
247
+ status: "disabled" | "pending" | "pending_verification" | "ready";
248
+ verification_method?: "txt" | undefined;
249
+ custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
250
+ domain_metadata?: {
251
+ [x: string]: string;
252
+ } | undefined;
253
+ origin_domain_name?: string | undefined;
254
+ verification?: {
255
+ methods: ({
256
+ name: "txt";
257
+ record: string;
258
+ domain: string;
259
+ } | {
260
+ name: "http";
261
+ http_body: string;
262
+ http_url: string;
263
+ })[];
264
+ } | undefined;
265
+ tls_policy?: string | undefined;
266
+ };
267
+ outputFormat: "json";
268
+ status: 200;
269
+ };
270
+ };
225
271
  } & {
226
272
  "/:id/verify": {
227
273
  $post: {
@@ -239,7 +285,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
239
285
  type: "auth0_managed_certs" | "self_managed_certs";
240
286
  custom_domain_id: string;
241
287
  primary: boolean;
242
- status: "pending" | "disabled" | "pending_verification" | "ready";
288
+ status: "disabled" | "pending" | "pending_verification" | "ready";
243
289
  verification_method?: "txt" | undefined;
244
290
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
245
291
  domain_metadata?: {
package/dist/types/routes/management-api/email-templates.d.ts CHANGED
@@ -12,7 +12,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
12
12
  };
13
13
  } & {
14
14
  json: {
15
- template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
15
+ template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
16
16
  body: string;
17
17
  from: string;
18
18
  subject: string;
@@ -33,7 +33,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
33
33
  };
34
34
  } & {
35
35
  json: {
36
- template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
36
+ template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
37
37
  body: string;
38
38
  from: string;
39
39
  subject: string;
@@ -45,7 +45,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
45
45
  };
46
46
  };
47
47
  output: {
48
- template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
48
+ template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
49
49
  body: string;
50
50
  from: string;
51
51
  subject: string;
@@ -64,7 +64,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
64
64
  $get: {
65
65
  input: {
66
66
  param: {
67
- templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
67
+ templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
68
68
  };
69
69
  } & {
70
70
  header: {
@@ -77,7 +77,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
77
77
  } | {
78
78
  input: {
79
79
  param: {
80
- templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
80
+ templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
81
81
  };
82
82
  } & {
83
83
  header: {
@@ -85,7 +85,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
85
85
  };
86
86
  };
87
87
  output: {
88
- template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
88
+ template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
89
89
  body: string;
90
90
  from: string;
91
91
  subject: string;
@@ -104,7 +104,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
104
104
  $put: {
105
105
  input: {
106
106
  param: {
107
- templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
107
+ templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
108
108
  };
109
109
  } & {
110
110
  header: {
@@ -112,7 +112,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
112
112
  };
113
113
  } & {
114
114
  json: {
115
- template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
115
+ template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
116
116
  body: string;
117
117
  from: string;
118
118
  subject: string;
@@ -124,7 +124,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
124
124
  };
125
125
  };
126
126
  output: {
127
- template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
127
+ template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
128
128
  body: string;
129
129
  from: string;
130
130
  subject: string;
@@ -143,7 +143,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
143
143
  $patch: {
144
144
  input: {
145
145
  param: {
146
- templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
146
+ templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
147
147
  };
148
148
  } & {
149
149
  header: {
@@ -151,7 +151,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
151
151
  };
152
152
  } & {
153
153
  json: {
154
- template?: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
154
+ template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
155
155
  body?: string | undefined;
156
156
  from?: string | undefined;
157
157
  subject?: string | undefined;
@@ -168,7 +168,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
168
168
  } | {
169
169
  input: {
170
170
  param: {
171
- templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
171
+ templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
172
172
  };
173
173
  } & {
174
174
  header: {
@@ -176,7 +176,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
176
176
  };
177
177
  } & {
178
178
  json: {
179
- template?: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
179
+ template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
180
180
  body?: string | undefined;
181
181
  from?: string | undefined;
182
182
  subject?: string | undefined;
@@ -188,7 +188,7 @@ export declare const emailTemplatesRoutes: OpenAPIHono<{
188
188
  };
189
189
  };
190
190
  output: {
191
- template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
191
+ template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
192
192
  body: string;
193
193
  from: string;
194
194
  subject: string;