authhero 8.25.2 → 8.26.1

package/dist/types/authentication-flows/passwordless.d.ts

@@ -414,7 +414,7 @@ export declare function passwordlessGrantUser(ctx: Context<{
                     } | undefined;
                 } | undefined;
                 passkey_options?: {
-                    challenge_ui?: "button" | "both" | "autofill" | undefined;
+                    challenge_ui?: "both" | "autofill" | "button" | undefined;
                     local_enrollment_enabled?: boolean | undefined;
                     progressive_enrollment_enabled?: boolean | undefined;
                 } | undefined;
@@ -466,7 +466,7 @@ export declare function passwordlessGrantUser(ctx: Context<{
         custom_login_page_preview?: string | undefined;
         form_template?: string | undefined;
         addons?: Record<string, any> | undefined;
-        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
         client_metadata?: Record<string, string> | undefined;
         hide_sign_up_disabled_error?: boolean | undefined;
         mobile?: Record<string, any> | undefined;
@@ -549,8 +549,8 @@ export declare function passwordlessGrantUser(ctx: Context<{
         } | undefined;
         authenticated_at?: string | undefined;
     };
-    connectionType: "username" | "sms" | "email";
-    authConnection: "username" | "sms" | "email";
+    connectionType: "username" | "email" | "sms";
+    authConnection: "username" | "email" | "sms";
     session_id: string | undefined;
     authParams: {
         client_id: string;

package/dist/types/helpers/codes-cleanup.d.ts

@@ -0,0 +1,28 @@
+import { CodesAdapter } from "@authhero/adapter-interfaces";
+export interface CodesCleanupParams {
+    /**
+     * Grace period, in days, to keep codes past their expiry. Defaults to 1.
+     *
+     * Codes are dead the moment they expire, so this is not a retention policy
+     * so much as a safety margin against clock skew — and it keeps recently
+     * expired codes around briefly for debugging a failed flow.
+     */
+    retentionDays?: number;
+}
+/**
+ * Delete codes that expired more than the retention window ago.
+ * Intended for use in a scheduled handler / cron job.
+ *
+ * Codes are short-lived by design but nothing else prunes them, so without a
+ * scheduled call to this the table grows without bound. See the Data Retention
+ * deployment guide for the full set of tables that need sweeping.
+ *
+ * @example
+ * ```ts
+ * // Cloudflare Workers scheduled handler
+ * async scheduled(_event, env) {
+ *   await cleanupCodes(dataAdapter.codes, { retentionDays: 1 });
+ * }
+ * ```
+ */
+export declare function cleanupCodes(codes: CodesAdapter, params?: CodesCleanupParams): Promise<number>;

package/dist/types/helpers/dcr/metadata-mapping.d.ts

@@ -24,10 +24,10 @@ export declare const dcrRequestSchema: z.ZodObject<{
     response_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
     token_endpoint_auth_method: z.ZodOptional<z.ZodEnum<{
         none: "none";
-        private_key_jwt: "private_key_jwt";
         client_secret_post: "client_secret_post";
         client_secret_basic: "client_secret_basic";
         client_secret_jwt: "client_secret_jwt";
+        private_key_jwt: "private_key_jwt";
     }>>;
     jwks_uri: z.ZodOptional<z.ZodString>;
     jwks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;