authhero 8.15.0 → 8.17.0

package/dist/types/types/AuthHeroConfig.d.ts

@@ -161,11 +161,11 @@ export type UserLinkingModeOption = UserLinkingMode | UserLinkingModeResolver;
 /**
  * Resolver for the per-tenant username/password provider value.
  *
- * The native database provider has historically been written as `"auth2"`.
- * Returning `"auth0"` for selected tenants lets you migrate them onto the
- * `"auth0"` provider value (matching what the legacy Auth0 import format
- * used) one tenant at a time. Reads always accept both values, so existing
- * `auth2|*` rows keep resolving during and after the cutover.
+ * The native database provider has historically been written as `"auth2"`;
+ * new rows now default to `"auth0"`. Returning `"auth2"` for selected
+ * tenants pins them on the legacy value during a staged cutover. Reads
+ * always accept both values, so existing `auth2|*` rows keep resolving
+ * during and after the cutover.
  *
  * TRANSITIONAL: this resolver and the dual-read fallback can be removed
  * once every tenant has been migrated to a single value.
@@ -514,11 +514,12 @@ export interface AuthHeroConfig {
     userLinkingMode?: UserLinkingModeOption;
     /**
      * Per-tenant override for the username/password provider value used on
-     * NEW user rows. Returning `"auth0"` for a tenant migrates new signups,
-     * password resets, etc. onto the `auth0|*` user_id format. Existing
+     * NEW user rows. Omit to write `"auth0"` for every tenant — new signups,
+     * password resets, etc. use the `auth0|*` user_id format. Existing
      * `auth2|*` rows keep working — reads accept either value.
      *
-     * Omit to keep the legacy `"auth2"` value for every tenant.
+     * Returning `"auth2"` pins a tenant on the legacy value during a staged
+     * cutover.
      *
      * TRANSITIONAL: this hook and the dual-read fallback in the password
      * flows can be removed once all tenants have been backfilled.

package/dist/types/utils/username-password-provider.d.ts

@@ -6,15 +6,15 @@ import { EnrichedClient } from "../helpers/client";
  * TRANSITIONAL helpers for the auth2 → auth0 provider migration.
  *
  * Historically every native database user has been stored with
- * `provider = "auth2"` and `user_id = "auth2|<id>"`. We're moving onto the
- * `"auth0"` provider value, one tenant at a time, by setting
- * `init({ usernamePasswordProvider })` to return `"auth0"` for the
- * migrated tenants.
+ * `provider = "auth2"` and `user_id = "auth2|<id>"`. New rows are now
+ * written with the `"auth0"` provider value everywhere; the
+ * `init({ usernamePasswordProvider })` resolver only exists to pin a
+ * tenant back onto `"auth2"` during a staged cutover.
  *
  * Two surfaces are exposed:
  *
  * - {@link resolveUsernamePasswordProvider} — used at WRITE sites to pick
- *   the value to stamp on a new row. Defaults to `"auth2"`.
+ *   the value to stamp on a new row. Defaults to `"auth0"`.
  * - {@link isUsernamePasswordProvider} / {@link getUsernamePasswordUser} /
  *   {@link getPrimaryUsernamePasswordUser} — used at READ sites to match
  *   existing rows under EITHER value, so a tenant can have a mix of
@@ -25,7 +25,13 @@ import { EnrichedClient } from "../helpers/client";
  */
 declare const LEGACY_PROVIDER = "auth2";
 declare const TARGET_PROVIDER = "auth0";
+export { isDatabaseConnectionStrategy } from "@authhero/adapter-interfaces";
 export type UsernamePasswordProviderValue = typeof LEGACY_PROVIDER | typeof TARGET_PROVIDER;
+/**
+ * Both native database provider values, legacy first — for read sites
+ * that need to enumerate rather than predicate-match.
+ */
+export declare const USERNAME_PASSWORD_PROVIDERS: readonly UsernamePasswordProviderValue[];
 export declare function resolveUsernamePasswordProvider(env: Bindings, tenant_id: string): Promise<UsernamePasswordProviderValue>;
 export declare function isUsernamePasswordProvider(provider: string | undefined | null): boolean;
 interface DualReadParams {
@@ -64,4 +70,3 @@ export declare function getOrCreateUsernamePasswordUser(ctx: Context<{
     connection: string;
     ip?: string;
 }): Promise<User>;
-export {};

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "8.15.0",
+  "version": "8.17.0",
   "files": [
     "dist"
   ],
@@ -63,8 +63,8 @@
     "vite": "^8.0.14",
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^4.1.7",
-    "@authhero/kysely-adapter": "11.13.0",
-    "@authhero/widget": "0.34.6"
+    "@authhero/kysely-adapter": "11.14.0",
+    "@authhero/widget": "0.34.8"
   },
   "dependencies": {
     "@peculiar/x509": "^1.14.0",
@@ -82,8 +82,8 @@
     "qrcode": "^1.5.4",
     "sanitize-html": "^2.17.4",
     "xstate": "^5.31.1",
-    "@authhero/adapter-interfaces": "3.6.0",
-    "@authhero/proxy": "0.8.2",
+    "@authhero/adapter-interfaces": "3.8.0",
+    "@authhero/proxy": "0.8.4",
     "@authhero/saml": "0.4.2"
   },
   "peerDependencies": {