authhero 8.17.3 → 8.18.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/authhero.cjs +112 -112
- package/dist/authhero.d.ts +81 -14
- package/dist/authhero.mjs +10095 -9957
- package/dist/tsconfig.types.tsbuildinfo +1 -1
- package/dist/types/authentication-flows/passwordless.d.ts +1 -1
- package/dist/types/helpers/provision-tenant-clients.d.ts +65 -0
- package/dist/types/index.d.ts +15 -11
- package/dist/types/routes/auth-api/index.d.ts +10 -10
- package/dist/types/routes/management-api/clients.d.ts +2 -2
- package/dist/types/routes/management-api/connections.d.ts +5 -5
- package/dist/types/routes/management-api/index.d.ts +11 -9
- package/dist/types/routes/management-api/logs.d.ts +3 -3
- package/dist/types/routes/management-api/tenants.d.ts +1 -1
- package/dist/types/routes/management-api/users.d.ts +2 -0
- package/dist/types/routes/universal-login/common.d.ts +2 -2
- package/dist/types/types/IdToken.d.ts +1 -1
- package/package.json +2 -2
|
@@ -414,7 +414,7 @@ export declare function passwordlessGrantUser(ctx: Context<{
|
|
|
414
414
|
} | undefined;
|
|
415
415
|
} | undefined;
|
|
416
416
|
passkey_options?: {
|
|
417
|
-
challenge_ui?: "
|
|
417
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
418
418
|
local_enrollment_enabled?: boolean | undefined;
|
|
419
419
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
420
420
|
} | undefined;
|
|
@@ -0,0 +1,65 @@
|
|
|
1
|
+
import { Client, DataAdapters } from "@authhero/adapter-interfaces";
|
|
2
|
+
/**
|
|
3
|
+
* Whether a client can anchor interactive, user-facing flows (universal login,
|
|
4
|
+
* the DCR `/connect/start` consent bounce, etc.).
|
|
5
|
+
*
|
|
6
|
+
* A client is considered interactive unless it is explicitly machine-to-machine:
|
|
7
|
+
* `non_interactive`/`resource_server` app types, or a grant list that only
|
|
8
|
+
* allows `client_credentials`. Clients with no explicit `grant_types` are
|
|
9
|
+
* treated as interactive — that matches how a freshly created "Default App"
|
|
10
|
+
* (which relies on the authorize flow) behaves in AuthHero and Auth0.
|
|
11
|
+
*/
|
|
12
|
+
export declare function isInteractiveClient(client: Pick<Client, "app_type" | "grant_types">): boolean;
|
|
13
|
+
/** A single Management API scope entry (`{ value, description }`). */
|
|
14
|
+
export interface ManagementApiScope {
|
|
15
|
+
value: string;
|
|
16
|
+
description?: string;
|
|
17
|
+
}
|
|
18
|
+
export interface ProvisionDefaultClientsOptions {
|
|
19
|
+
/** Display name for an auto-created Default App. Defaults to "Default App". */
|
|
20
|
+
defaultAppName?: string;
|
|
21
|
+
/** Callback URLs for an auto-created Default App. */
|
|
22
|
+
callbacks?: string[];
|
|
23
|
+
/** Allowed logout URLs for an auto-created Default App. */
|
|
24
|
+
allowedLogoutUrls?: string[];
|
|
25
|
+
/** Allowed web origins for an auto-created Default App. */
|
|
26
|
+
webOrigins?: string[];
|
|
27
|
+
/**
|
|
28
|
+
* Also provision an M2M "API Explorer" client authorized against the
|
|
29
|
+
* Management API (Auth0 parity). Defaults to `true`. Requires
|
|
30
|
+
* `managementApiScopes` to seed the resource server when it is missing.
|
|
31
|
+
*/
|
|
32
|
+
createManagementClient?: boolean;
|
|
33
|
+
/** Management API identifier. Defaults to `urn:authhero:management`. */
|
|
34
|
+
managementApiIdentifier?: string;
|
|
35
|
+
/**
|
|
36
|
+
* Scopes used to seed the Management API resource server when it does not
|
|
37
|
+
* yet exist, and to authorize the M2M client's grant. When omitted, the
|
|
38
|
+
* resource server is assumed to already exist and the grant is created with
|
|
39
|
+
* no explicit scope.
|
|
40
|
+
*/
|
|
41
|
+
managementApiScopes?: ManagementApiScope[];
|
|
42
|
+
/** Emit progress logs (used by the seed script). */
|
|
43
|
+
debug?: boolean;
|
|
44
|
+
}
|
|
45
|
+
export interface ProvisionDefaultClientsResult {
|
|
46
|
+
/** The client the tenant's `default_client_id` now points at. */
|
|
47
|
+
defaultClientId: string;
|
|
48
|
+
/** The auto-provisioned M2M Management API client, if one was created/found. */
|
|
49
|
+
managementClientId?: string;
|
|
50
|
+
}
|
|
51
|
+
/**
|
|
52
|
+
* Ensures a tenant has a designated interactive default client and (optionally)
|
|
53
|
+
* an M2M Management API client, then points `tenant.default_client_id` at the
|
|
54
|
+
* former.
|
|
55
|
+
*
|
|
56
|
+
* Idempotent and import-safe:
|
|
57
|
+
* - Respects an already-set, still-valid `default_client_id`.
|
|
58
|
+
* - Reuses an existing interactive client instead of creating a duplicate.
|
|
59
|
+
* - Skips the M2M client when one already exists.
|
|
60
|
+
*
|
|
61
|
+
* Shared by every tenant-creation path (the seed/bootstrap script and the
|
|
62
|
+
* multi-tenancy provisioning hook) so new tenants come with a sensible anchor
|
|
63
|
+
* client by construction — see issue #1007.
|
|
64
|
+
*/
|
|
65
|
+
export declare function provisionDefaultClients(adapters: DataAdapters, tenantId: string, options?: ProvisionDefaultClientsOptions): Promise<ProvisionDefaultClientsResult>;
|
package/dist/types/index.d.ts
CHANGED
|
@@ -18,6 +18,8 @@ export { cleanupOutbox } from "./helpers/outbox-cleanup";
|
|
|
18
18
|
export type { OutboxCleanupParams } from "./helpers/outbox-cleanup";
|
|
19
19
|
export { createDefaultDestinations } from "./helpers/default-destinations";
|
|
20
20
|
export type { CreateDefaultDestinationsConfig } from "./helpers/default-destinations";
|
|
21
|
+
export { provisionDefaultClients, isInteractiveClient, } from "./helpers/provision-tenant-clients";
|
|
22
|
+
export type { ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ManagementApiScope, } from "./helpers/provision-tenant-clients";
|
|
21
23
|
export { runOutboxRelay } from "./helpers/run-outbox-relay";
|
|
22
24
|
export type { RunOutboxRelayConfig } from "./helpers/run-outbox-relay";
|
|
23
25
|
export { LogsDestination } from "./helpers/outbox-destinations/logs";
|
|
@@ -6879,7 +6881,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
6879
6881
|
};
|
|
6880
6882
|
};
|
|
6881
6883
|
output: {
|
|
6882
|
-
prompt: "status" | "organizations" | "signup" | "
|
|
6884
|
+
prompt: "status" | "organizations" | "signup" | "mfa" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
|
|
6883
6885
|
language: string;
|
|
6884
6886
|
}[];
|
|
6885
6887
|
outputFormat: "json";
|
|
@@ -6917,7 +6919,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
6917
6919
|
$get: {
|
|
6918
6920
|
input: {
|
|
6919
6921
|
param: {
|
|
6920
|
-
prompt: "status" | "organizations" | "signup" | "
|
|
6922
|
+
prompt: "status" | "organizations" | "signup" | "mfa" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
|
|
6921
6923
|
language: string;
|
|
6922
6924
|
};
|
|
6923
6925
|
} & {
|
|
@@ -6939,7 +6941,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
6939
6941
|
$put: {
|
|
6940
6942
|
input: {
|
|
6941
6943
|
param: {
|
|
6942
|
-
prompt: "status" | "organizations" | "signup" | "
|
|
6944
|
+
prompt: "status" | "organizations" | "signup" | "mfa" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
|
|
6943
6945
|
language: string;
|
|
6944
6946
|
};
|
|
6945
6947
|
} & {
|
|
@@ -6963,7 +6965,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
6963
6965
|
$delete: {
|
|
6964
6966
|
input: {
|
|
6965
6967
|
param: {
|
|
6966
|
-
prompt: "status" | "organizations" | "signup" | "
|
|
6968
|
+
prompt: "status" | "organizations" | "signup" | "mfa" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
|
|
6967
6969
|
language: string;
|
|
6968
6970
|
};
|
|
6969
6971
|
} & {
|
|
@@ -7861,7 +7863,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
7861
7863
|
tenant_id: string;
|
|
7862
7864
|
created_at: string;
|
|
7863
7865
|
updated_at: string;
|
|
7864
|
-
deploymentStatus: "
|
|
7866
|
+
deploymentStatus: "failed" | "deployed" | "not_required";
|
|
7865
7867
|
secrets?: {
|
|
7866
7868
|
[x: string]: string;
|
|
7867
7869
|
} | undefined;
|
|
@@ -7951,7 +7953,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
7951
7953
|
tenant_id: string;
|
|
7952
7954
|
created_at: string;
|
|
7953
7955
|
updated_at: string;
|
|
7954
|
-
deploymentStatus: "
|
|
7956
|
+
deploymentStatus: "failed" | "deployed" | "not_required";
|
|
7955
7957
|
secrets?: {
|
|
7956
7958
|
[x: string]: string;
|
|
7957
7959
|
} | undefined;
|
|
@@ -11558,6 +11560,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
11558
11560
|
permissions: {
|
|
11559
11561
|
permission_name: string;
|
|
11560
11562
|
resource_server_identifier: string;
|
|
11563
|
+
organization_id?: string | undefined;
|
|
11561
11564
|
}[];
|
|
11562
11565
|
};
|
|
11563
11566
|
};
|
|
@@ -11582,6 +11585,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
11582
11585
|
permissions: {
|
|
11583
11586
|
permission_name: string;
|
|
11584
11587
|
resource_server_identifier: string;
|
|
11588
|
+
organization_id?: string | undefined;
|
|
11585
11589
|
}[];
|
|
11586
11590
|
};
|
|
11587
11591
|
};
|
|
@@ -13217,7 +13221,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
13217
13221
|
output: {
|
|
13218
13222
|
id: string;
|
|
13219
13223
|
trigger_id: string;
|
|
13220
|
-
status: "
|
|
13224
|
+
status: "pending" | "unspecified" | "final" | "partial" | "canceled" | "suspended";
|
|
13221
13225
|
results: {
|
|
13222
13226
|
action_name: string;
|
|
13223
13227
|
error: {
|
|
@@ -13264,7 +13268,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
13264
13268
|
logs: {
|
|
13265
13269
|
action_name: string;
|
|
13266
13270
|
lines: {
|
|
13267
|
-
level: "error" | "log" | "
|
|
13271
|
+
level: "error" | "log" | "debug" | "info" | "warn";
|
|
13268
13272
|
message: string;
|
|
13269
13273
|
}[];
|
|
13270
13274
|
}[];
|
|
@@ -13931,7 +13935,7 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
13931
13935
|
args: import("hono/utils/types").JSONValue[];
|
|
13932
13936
|
}[];
|
|
13933
13937
|
logs: {
|
|
13934
|
-
level: "error" | "log" | "
|
|
13938
|
+
level: "error" | "log" | "debug" | "info" | "warn";
|
|
13935
13939
|
message: string;
|
|
13936
13940
|
}[];
|
|
13937
13941
|
error?: string | undefined;
|
|
@@ -14683,11 +14687,11 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
14683
14687
|
state?: string | undefined;
|
|
14684
14688
|
response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
|
|
14685
14689
|
response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
|
|
14686
|
-
prompt?: string | undefined;
|
|
14687
14690
|
act_as?: string | undefined;
|
|
14688
14691
|
redirect_uri?: string | undefined;
|
|
14689
14692
|
organization?: string | undefined;
|
|
14690
14693
|
nonce?: string | undefined;
|
|
14694
|
+
prompt?: string | undefined;
|
|
14691
14695
|
code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
|
|
14692
14696
|
code_challenge?: string | undefined;
|
|
14693
14697
|
ui_locales?: string | undefined;
|
|
@@ -14719,11 +14723,11 @@ export declare function init(config: AuthHeroConfig): {
|
|
|
14719
14723
|
state?: string | undefined;
|
|
14720
14724
|
response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
|
|
14721
14725
|
response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
|
|
14722
|
-
prompt?: string | undefined;
|
|
14723
14726
|
act_as?: string | undefined;
|
|
14724
14727
|
redirect_uri?: string | undefined;
|
|
14725
14728
|
organization?: string | undefined;
|
|
14726
14729
|
nonce?: string | undefined;
|
|
14730
|
+
prompt?: string | undefined;
|
|
14727
14731
|
code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
|
|
14728
14732
|
code_challenge?: string | undefined;
|
|
14729
14733
|
ui_locales?: string | undefined;
|
|
@@ -301,7 +301,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
301
301
|
scope?: string | undefined;
|
|
302
302
|
grant_types?: string[] | undefined;
|
|
303
303
|
response_types?: string[] | undefined;
|
|
304
|
-
token_endpoint_auth_method?: "none" | "
|
|
304
|
+
token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
|
|
305
305
|
jwks_uri?: string | undefined;
|
|
306
306
|
jwks?: Record<string, unknown> | undefined;
|
|
307
307
|
software_id?: string | undefined;
|
|
@@ -390,7 +390,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
390
390
|
scope?: string | undefined;
|
|
391
391
|
grant_types?: string[] | undefined;
|
|
392
392
|
response_types?: string[] | undefined;
|
|
393
|
-
token_endpoint_auth_method?: "none" | "
|
|
393
|
+
token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
|
|
394
394
|
jwks_uri?: string | undefined;
|
|
395
395
|
jwks?: Record<string, unknown> | undefined;
|
|
396
396
|
software_id?: string | undefined;
|
|
@@ -736,16 +736,16 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
736
736
|
email: string;
|
|
737
737
|
send: "code" | "link";
|
|
738
738
|
authParams: {
|
|
739
|
+
audience?: string | undefined;
|
|
740
|
+
scope?: string | undefined;
|
|
739
741
|
username?: string | undefined;
|
|
740
742
|
state?: string | undefined;
|
|
741
|
-
|
|
743
|
+
act_as?: string | undefined;
|
|
742
744
|
response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
|
|
743
745
|
response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
|
|
744
|
-
|
|
746
|
+
redirect_uri?: string | undefined;
|
|
745
747
|
organization?: string | undefined;
|
|
746
748
|
nonce?: string | undefined;
|
|
747
|
-
redirect_uri?: string | undefined;
|
|
748
|
-
act_as?: string | undefined;
|
|
749
749
|
prompt?: string | undefined;
|
|
750
750
|
code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
|
|
751
751
|
code_challenge?: string | undefined;
|
|
@@ -772,16 +772,16 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
772
772
|
phone_number: string;
|
|
773
773
|
send: "code" | "link";
|
|
774
774
|
authParams: {
|
|
775
|
+
audience?: string | undefined;
|
|
776
|
+
scope?: string | undefined;
|
|
775
777
|
username?: string | undefined;
|
|
776
778
|
state?: string | undefined;
|
|
777
|
-
|
|
779
|
+
act_as?: string | undefined;
|
|
778
780
|
response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
|
|
779
781
|
response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
|
|
780
|
-
|
|
782
|
+
redirect_uri?: string | undefined;
|
|
781
783
|
organization?: string | undefined;
|
|
782
784
|
nonce?: string | undefined;
|
|
783
|
-
redirect_uri?: string | undefined;
|
|
784
|
-
act_as?: string | undefined;
|
|
785
785
|
prompt?: string | undefined;
|
|
786
786
|
code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
|
|
787
787
|
code_challenge?: string | undefined;
|
|
@@ -807,7 +807,7 @@ export declare const clientRoutes: OpenAPIHono<{
|
|
|
807
807
|
} | undefined;
|
|
808
808
|
} | undefined;
|
|
809
809
|
passkey_options?: {
|
|
810
|
-
challenge_ui?: "
|
|
810
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
811
811
|
local_enrollment_enabled?: boolean | undefined;
|
|
812
812
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
813
813
|
} | undefined;
|
|
@@ -961,7 +961,7 @@ export declare const clientRoutes: OpenAPIHono<{
|
|
|
961
961
|
} | undefined;
|
|
962
962
|
} | undefined;
|
|
963
963
|
passkey_options?: {
|
|
964
|
-
challenge_ui?: "
|
|
964
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
965
965
|
local_enrollment_enabled?: boolean | undefined;
|
|
966
966
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
967
967
|
} | undefined;
|
|
@@ -129,7 +129,7 @@ export declare const connectionRoutes: OpenAPIHono<{
|
|
|
129
129
|
} | undefined;
|
|
130
130
|
} | undefined;
|
|
131
131
|
passkey_options?: {
|
|
132
|
-
challenge_ui?: "
|
|
132
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
133
133
|
local_enrollment_enabled?: boolean | undefined;
|
|
134
134
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
135
135
|
} | undefined;
|
|
@@ -263,7 +263,7 @@ export declare const connectionRoutes: OpenAPIHono<{
|
|
|
263
263
|
} | undefined;
|
|
264
264
|
} | undefined;
|
|
265
265
|
passkey_options?: {
|
|
266
|
-
challenge_ui?: "
|
|
266
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
267
267
|
local_enrollment_enabled?: boolean | undefined;
|
|
268
268
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
269
269
|
} | undefined;
|
|
@@ -412,7 +412,7 @@ export declare const connectionRoutes: OpenAPIHono<{
|
|
|
412
412
|
} | undefined;
|
|
413
413
|
} | undefined;
|
|
414
414
|
passkey_options?: {
|
|
415
|
-
challenge_ui?: "
|
|
415
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
416
416
|
local_enrollment_enabled?: boolean | undefined;
|
|
417
417
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
418
418
|
} | undefined;
|
|
@@ -591,7 +591,7 @@ export declare const connectionRoutes: OpenAPIHono<{
|
|
|
591
591
|
} | undefined;
|
|
592
592
|
} | undefined;
|
|
593
593
|
passkey_options?: {
|
|
594
|
-
challenge_ui?: "
|
|
594
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
595
595
|
local_enrollment_enabled?: boolean | undefined;
|
|
596
596
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
597
597
|
} | undefined;
|
|
@@ -749,7 +749,7 @@ export declare const connectionRoutes: OpenAPIHono<{
|
|
|
749
749
|
} | undefined;
|
|
750
750
|
} | undefined;
|
|
751
751
|
passkey_options?: {
|
|
752
|
-
challenge_ui?: "
|
|
752
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
753
753
|
local_enrollment_enabled?: boolean | undefined;
|
|
754
754
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
755
755
|
} | undefined;
|
|
@@ -6828,7 +6828,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
6828
6828
|
};
|
|
6829
6829
|
};
|
|
6830
6830
|
output: {
|
|
6831
|
-
prompt: "status" | "organizations" | "signup" | "
|
|
6831
|
+
prompt: "status" | "organizations" | "signup" | "mfa" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
|
|
6832
6832
|
language: string;
|
|
6833
6833
|
}[];
|
|
6834
6834
|
outputFormat: "json";
|
|
@@ -6866,7 +6866,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
6866
6866
|
$get: {
|
|
6867
6867
|
input: {
|
|
6868
6868
|
param: {
|
|
6869
|
-
prompt: "status" | "organizations" | "signup" | "
|
|
6869
|
+
prompt: "status" | "organizations" | "signup" | "mfa" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
|
|
6870
6870
|
language: string;
|
|
6871
6871
|
};
|
|
6872
6872
|
} & {
|
|
@@ -6888,7 +6888,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
6888
6888
|
$put: {
|
|
6889
6889
|
input: {
|
|
6890
6890
|
param: {
|
|
6891
|
-
prompt: "status" | "organizations" | "signup" | "
|
|
6891
|
+
prompt: "status" | "organizations" | "signup" | "mfa" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
|
|
6892
6892
|
language: string;
|
|
6893
6893
|
};
|
|
6894
6894
|
} & {
|
|
@@ -6912,7 +6912,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
6912
6912
|
$delete: {
|
|
6913
6913
|
input: {
|
|
6914
6914
|
param: {
|
|
6915
|
-
prompt: "status" | "organizations" | "signup" | "
|
|
6915
|
+
prompt: "status" | "organizations" | "signup" | "mfa" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
|
|
6916
6916
|
language: string;
|
|
6917
6917
|
};
|
|
6918
6918
|
} & {
|
|
@@ -7810,7 +7810,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
7810
7810
|
tenant_id: string;
|
|
7811
7811
|
created_at: string;
|
|
7812
7812
|
updated_at: string;
|
|
7813
|
-
deploymentStatus: "
|
|
7813
|
+
deploymentStatus: "failed" | "deployed" | "not_required";
|
|
7814
7814
|
secrets?: {
|
|
7815
7815
|
[x: string]: string;
|
|
7816
7816
|
} | undefined;
|
|
@@ -7900,7 +7900,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
7900
7900
|
tenant_id: string;
|
|
7901
7901
|
created_at: string;
|
|
7902
7902
|
updated_at: string;
|
|
7903
|
-
deploymentStatus: "
|
|
7903
|
+
deploymentStatus: "failed" | "deployed" | "not_required";
|
|
7904
7904
|
secrets?: {
|
|
7905
7905
|
[x: string]: string;
|
|
7906
7906
|
} | undefined;
|
|
@@ -11507,6 +11507,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
11507
11507
|
permissions: {
|
|
11508
11508
|
permission_name: string;
|
|
11509
11509
|
resource_server_identifier: string;
|
|
11510
|
+
organization_id?: string | undefined;
|
|
11510
11511
|
}[];
|
|
11511
11512
|
};
|
|
11512
11513
|
};
|
|
@@ -11531,6 +11532,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
11531
11532
|
permissions: {
|
|
11532
11533
|
permission_name: string;
|
|
11533
11534
|
resource_server_identifier: string;
|
|
11535
|
+
organization_id?: string | undefined;
|
|
11534
11536
|
}[];
|
|
11535
11537
|
};
|
|
11536
11538
|
};
|
|
@@ -13166,7 +13168,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
13166
13168
|
output: {
|
|
13167
13169
|
id: string;
|
|
13168
13170
|
trigger_id: string;
|
|
13169
|
-
status: "
|
|
13171
|
+
status: "pending" | "unspecified" | "final" | "partial" | "canceled" | "suspended";
|
|
13170
13172
|
results: {
|
|
13171
13173
|
action_name: string;
|
|
13172
13174
|
error: {
|
|
@@ -13213,7 +13215,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
13213
13215
|
logs: {
|
|
13214
13216
|
action_name: string;
|
|
13215
13217
|
lines: {
|
|
13216
|
-
level: "error" | "log" | "
|
|
13218
|
+
level: "error" | "log" | "debug" | "info" | "warn";
|
|
13217
13219
|
message: string;
|
|
13218
13220
|
}[];
|
|
13219
13221
|
}[];
|
|
@@ -13880,7 +13882,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
13880
13882
|
args: import("hono/utils/types").JSONValue[];
|
|
13881
13883
|
}[];
|
|
13882
13884
|
logs: {
|
|
13883
|
-
level: "error" | "log" | "
|
|
13885
|
+
level: "error" | "log" | "debug" | "info" | "warn";
|
|
13884
13886
|
message: string;
|
|
13885
13887
|
}[];
|
|
13886
13888
|
error?: string | undefined;
|
|
@@ -24,7 +24,7 @@ export declare const logRoutes: OpenAPIHono<{
|
|
|
24
24
|
};
|
|
25
25
|
};
|
|
26
26
|
output: {
|
|
27
|
-
type: "
|
|
27
|
+
type: "i" | "s" | "fc" | "fd" | "fn" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
|
|
28
28
|
date: string;
|
|
29
29
|
isMobile: boolean;
|
|
30
30
|
log_id: string;
|
|
@@ -63,7 +63,7 @@ export declare const logRoutes: OpenAPIHono<{
|
|
|
63
63
|
limit: number;
|
|
64
64
|
length: number;
|
|
65
65
|
logs: {
|
|
66
|
-
type: "
|
|
66
|
+
type: "i" | "s" | "fc" | "fd" | "fn" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
|
|
67
67
|
date: string;
|
|
68
68
|
isMobile: boolean;
|
|
69
69
|
log_id: string;
|
|
@@ -117,7 +117,7 @@ export declare const logRoutes: OpenAPIHono<{
|
|
|
117
117
|
};
|
|
118
118
|
};
|
|
119
119
|
output: {
|
|
120
|
-
type: "
|
|
120
|
+
type: "i" | "s" | "fc" | "fd" | "fn" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
|
|
121
121
|
date: string;
|
|
122
122
|
isMobile: boolean;
|
|
123
123
|
log_id: string;
|
|
@@ -210,7 +210,6 @@ export declare const tenantRoutes: OpenAPIHono<{
|
|
|
210
210
|
};
|
|
211
211
|
} & {
|
|
212
212
|
json: {
|
|
213
|
-
id?: string | undefined;
|
|
214
213
|
allowed_logout_urls?: string[] | undefined;
|
|
215
214
|
oidc_logout?: {
|
|
216
215
|
rp_logout_end_session_endpoint_discovery?: boolean | undefined;
|
|
@@ -386,6 +385,7 @@ export declare const tenantRoutes: OpenAPIHono<{
|
|
|
386
385
|
message?: string | undefined;
|
|
387
386
|
} | undefined;
|
|
388
387
|
} | undefined;
|
|
388
|
+
id?: string | undefined;
|
|
389
389
|
};
|
|
390
390
|
};
|
|
391
391
|
output: {
|
|
@@ -870,6 +870,7 @@ export declare const userRoutes: OpenAPIHono<{
|
|
|
870
870
|
permissions: {
|
|
871
871
|
permission_name: string;
|
|
872
872
|
resource_server_identifier: string;
|
|
873
|
+
organization_id?: string | undefined;
|
|
873
874
|
}[];
|
|
874
875
|
};
|
|
875
876
|
};
|
|
@@ -894,6 +895,7 @@ export declare const userRoutes: OpenAPIHono<{
|
|
|
894
895
|
permissions: {
|
|
895
896
|
permission_name: string;
|
|
896
897
|
resource_server_identifier: string;
|
|
898
|
+
organization_id?: string | undefined;
|
|
897
899
|
}[];
|
|
898
900
|
};
|
|
899
901
|
};
|
|
@@ -404,7 +404,7 @@ export declare function initJSXRoute(ctx: Context<{
|
|
|
404
404
|
} | undefined;
|
|
405
405
|
} | undefined;
|
|
406
406
|
passkey_options?: {
|
|
407
|
-
challenge_ui?: "
|
|
407
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
408
408
|
local_enrollment_enabled?: boolean | undefined;
|
|
409
409
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
410
410
|
} | undefined;
|
|
@@ -1125,7 +1125,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
|
|
|
1125
1125
|
} | undefined;
|
|
1126
1126
|
} | undefined;
|
|
1127
1127
|
passkey_options?: {
|
|
1128
|
-
challenge_ui?: "
|
|
1128
|
+
challenge_ui?: "button" | "both" | "autofill" | undefined;
|
|
1129
1129
|
local_enrollment_enabled?: boolean | undefined;
|
|
1130
1130
|
progressive_enrollment_enabled?: boolean | undefined;
|
|
1131
1131
|
} | undefined;
|
|
@@ -18,12 +18,12 @@ export declare const idTokenSchema: z.ZodObject<{
|
|
|
18
18
|
c_hash: z.ZodOptional<z.ZodString>;
|
|
19
19
|
}, z.core.$loose>;
|
|
20
20
|
export declare const userInfoSchema: z.ZodObject<{
|
|
21
|
+
sub: z.ZodString;
|
|
21
22
|
name: z.ZodOptional<z.ZodString>;
|
|
22
23
|
email: z.ZodOptional<z.ZodString>;
|
|
23
24
|
given_name: z.ZodOptional<z.ZodString>;
|
|
24
25
|
family_name: z.ZodOptional<z.ZodString>;
|
|
25
26
|
iss: z.ZodString;
|
|
26
|
-
sub: z.ZodString;
|
|
27
27
|
aud: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
|
|
28
28
|
exp: z.ZodNumber;
|
|
29
29
|
}, z.core.$loose>;
|
package/package.json
CHANGED
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"type": "git",
|
|
12
12
|
"url": "https://github.com/markusahlstrand/authhero"
|
|
13
13
|
},
|
|
14
|
-
"version": "8.
|
|
14
|
+
"version": "8.18.0",
|
|
15
15
|
"files": [
|
|
16
16
|
"dist"
|
|
17
17
|
],
|
|
@@ -63,7 +63,7 @@
|
|
|
63
63
|
"vite": "^8.0.14",
|
|
64
64
|
"vite-plugin-dts": "^4.5.4",
|
|
65
65
|
"vitest": "^4.1.7",
|
|
66
|
-
"@authhero/kysely-adapter": "11.14.
|
|
66
|
+
"@authhero/kysely-adapter": "11.14.2",
|
|
67
67
|
"@authhero/widget": "0.34.8"
|
|
68
68
|
},
|
|
69
69
|
"dependencies": {
|