authhero 8.15.0 → 8.16.0

package/dist/types/utils/username-password-provider.d.ts

@@ -6,15 +6,15 @@ import { EnrichedClient } from "../helpers/client";
  * TRANSITIONAL helpers for the auth2 → auth0 provider migration.
  *
  * Historically every native database user has been stored with
- * `provider = "auth2"` and `user_id = "auth2|<id>"`. We're moving onto the
- * `"auth0"` provider value, one tenant at a time, by setting
- * `init({ usernamePasswordProvider })` to return `"auth0"` for the
- * migrated tenants.
+ * `provider = "auth2"` and `user_id = "auth2|<id>"`. New rows are now
+ * written with the `"auth0"` provider value everywhere; the
+ * `init({ usernamePasswordProvider })` resolver only exists to pin a
+ * tenant back onto `"auth2"` during a staged cutover.
  *
  * Two surfaces are exposed:
  *
  * - {@link resolveUsernamePasswordProvider} — used at WRITE sites to pick
- *   the value to stamp on a new row. Defaults to `"auth2"`.
+ *   the value to stamp on a new row. Defaults to `"auth0"`.
  * - {@link isUsernamePasswordProvider} / {@link getUsernamePasswordUser} /
  *   {@link getPrimaryUsernamePasswordUser} — used at READ sites to match
  *   existing rows under EITHER value, so a tenant can have a mix of
@@ -25,7 +25,21 @@ import { EnrichedClient } from "../helpers/client";
  */
 declare const LEGACY_PROVIDER = "auth2";
 declare const TARGET_PROVIDER = "auth0";
+/**
+ * True when a connection's `strategy` field marks it as a native database
+ * (username/password) connection. Legacy tenants persist the provider
+ * literal ("auth2") in the strategy field instead of the canonical Auth0
+ * strategy name, and either provider literal must never leak into new
+ * user rows as the provider — write sites go through
+ * {@link resolveUsernamePasswordProvider} instead.
+ */
+export declare function isDatabaseConnectionStrategy(strategy: string | undefined | null): boolean;
 export type UsernamePasswordProviderValue = typeof LEGACY_PROVIDER | typeof TARGET_PROVIDER;
+/**
+ * Both native database provider values, legacy first — for read sites
+ * that need to enumerate rather than predicate-match.
+ */
+export declare const USERNAME_PASSWORD_PROVIDERS: readonly UsernamePasswordProviderValue[];
 export declare function resolveUsernamePasswordProvider(env: Bindings, tenant_id: string): Promise<UsernamePasswordProviderValue>;
 export declare function isUsernamePasswordProvider(provider: string | undefined | null): boolean;
 interface DualReadParams {

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "8.15.0",
+  "version": "8.16.0",
   "files": [
     "dist"
   ],
@@ -63,8 +63,8 @@
     "vite": "^8.0.14",
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^4.1.7",
-    "@authhero/kysely-adapter": "11.13.0",
-    "@authhero/widget": "0.34.6"
+    "@authhero/kysely-adapter": "11.13.1",
+    "@authhero/widget": "0.34.7"
   },
   "dependencies": {
     "@peculiar/x509": "^1.14.0",
@@ -82,8 +82,8 @@
     "qrcode": "^1.5.4",
     "sanitize-html": "^2.17.4",
     "xstate": "^5.31.1",
-    "@authhero/adapter-interfaces": "3.6.0",
-    "@authhero/proxy": "0.8.2",
+    "@authhero/adapter-interfaces": "3.7.0",
+    "@authhero/proxy": "0.8.3",
     "@authhero/saml": "0.4.2"
   },
   "peerDependencies": {