authhero 5.21.0 → 6.0.0

package/dist/types/authentication-flows/common.d.ts

@@ -11,7 +11,7 @@ import { GrantType } from "@authhero/adapter-interfaces";
 export interface AuthTokenClient {
     client_id: string;
     tenant: {
-        audience: string;
+        audience?: string;
         default_audience?: string;
         allow_organization_name_in_authentication_api?: boolean;
     };

package/dist/types/authentication-flows/passwordless.d.ts

@@ -129,14 +129,14 @@ export declare function passwordlessGrantUser(ctx: Context<{
         tenant: {
             created_at: string;
             updated_at: string;
-            audience: string;
             friendly_name: string;
-            sender_email: string;
-            sender_name: string;
             id: string;
+            audience?: string | undefined;
             picture_url?: string | undefined;
             support_email?: string | undefined;
             support_url?: string | undefined;
+            sender_email?: string | undefined;
+            sender_name?: string | undefined;
             session_lifetime?: number | undefined;
             idle_session_lifetime?: number | undefined;
             ephemeral_session_lifetime?: number | undefined;
@@ -457,7 +457,7 @@ export declare function passwordlessGrantUser(ctx: Context<{
         custom_login_page_preview?: string | undefined;
         form_template?: string | undefined;
         addons?: Record<string, any> | undefined;
-        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
+        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
         client_metadata?: Record<string, string> | undefined;
         hide_sign_up_disabled_error?: boolean | undefined;
         mobile?: Record<string, any> | undefined;
@@ -540,8 +540,8 @@ export declare function passwordlessGrantUser(ctx: Context<{
         } | undefined;
         authenticated_at?: string | undefined;
     };
-    connectionType: "sms" | "email" | "username";
-    authConnection: "sms" | "email" | "username";
+    connectionType: "username" | "sms" | "email";
+    authConnection: "username" | "sms" | "email";
     session_id: string | undefined;
     authParams: {
         client_id: string;

package/dist/types/helpers/client.d.ts

@@ -133,13 +133,13 @@ export declare const enrichedClientSchema: z.ZodObject<{
     tenant: z.ZodObject<{
         created_at: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string, string | null>>;
         updated_at: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string, string | null>>;
-        audience: z.ZodString;
+        audience: z.ZodOptional<z.ZodString>;
         friendly_name: z.ZodString;
         picture_url: z.ZodOptional<z.ZodString>;
         support_email: z.ZodOptional<z.ZodString>;
         support_url: z.ZodOptional<z.ZodString>;
-        sender_email: z.ZodString;
-        sender_name: z.ZodString;
+        sender_email: z.ZodOptional<z.ZodString>;
+        sender_name: z.ZodOptional<z.ZodString>;
         session_lifetime: z.ZodOptional<z.ZodNumber>;
         idle_session_lifetime: z.ZodOptional<z.ZodNumber>;
         ephemeral_session_lifetime: z.ZodOptional<z.ZodNumber>;

package/dist/types/helpers/dcr/metadata-mapping.d.ts

@@ -23,11 +23,11 @@ export declare const dcrRequestSchema: z.ZodObject<{
     grant_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
     response_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
     token_endpoint_auth_method: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        private_key_jwt: "private_key_jwt";
         client_secret_post: "client_secret_post";
         client_secret_basic: "client_secret_basic";
-        none: "none";
         client_secret_jwt: "client_secret_jwt";
-        private_key_jwt: "private_key_jwt";
     }>>;
     jwks_uri: z.ZodOptional<z.ZodString>;
     jwks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;

package/dist/types/helpers/logging.d.ts

@@ -5,6 +5,13 @@ export type LogParams = {
     type: LogType;
     description?: string;
     userId?: string;
+    /**
+     * Human-readable identifier for the subject user (email / phone / name).
+     * Populates the legacy `user_name` field and the audit event's `actor.email`
+     * when `ctx.var.username` is not set — useful for failure logs where the
+     * route handler couldn't authenticate but the caller has resolved the user.
+     */
+    username?: string;
     /**
      * Identifier of the actor when it differs from the subject `userId`
      * (e.g. impersonation). When set, audit events attribute `actor.id` to