authhero 8.8.0 → 8.8.1

package/dist/types/authentication-flows/passwordless.d.ts

@@ -458,7 +458,7 @@ export declare function passwordlessGrantUser(ctx: Context<{
         custom_login_page_preview?: string | undefined;
         form_template?: string | undefined;
         addons?: Record<string, any> | undefined;
-        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
+        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
         client_metadata?: Record<string, string> | undefined;
         hide_sign_up_disabled_error?: boolean | undefined;
         mobile?: Record<string, any> | undefined;
@@ -541,8 +541,8 @@ export declare function passwordlessGrantUser(ctx: Context<{
         } | undefined;
         authenticated_at?: string | undefined;
     };
-    connectionType: "username" | "email" | "sms";
-    authConnection: "username" | "email" | "sms";
+    connectionType: "username" | "sms" | "email";
+    authConnection: "username" | "sms" | "email";
     session_id: string | undefined;
     authParams: {
         client_id: string;

package/dist/types/helpers/dcr/metadata-mapping.d.ts

@@ -23,11 +23,11 @@ export declare const dcrRequestSchema: z.ZodObject<{
     grant_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
     response_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
     token_endpoint_auth_method: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        private_key_jwt: "private_key_jwt";
         client_secret_post: "client_secret_post";
         client_secret_basic: "client_secret_basic";
-        none: "none";
         client_secret_jwt: "client_secret_jwt";
-        private_key_jwt: "private_key_jwt";
     }>>;
     jwks_uri: z.ZodOptional<z.ZodString>;
     jwks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;

package/dist/types/helpers/mutable-response.d.ts

@@ -13,15 +13,27 @@
  * (the body stream is passed through, not copied) and deterministic, so there is
  * nothing to detect.
  */
+/**
+ * True only for a live WebSocket upgrade — a `101 Switching Protocols` response
+ * that carries a non-null `webSocket` handle.
+ *
+ * The check must NOT be `"webSocket" in res`: the Cloudflare Workers runtime
+ * defines a `webSocket` property on *every* `Response` (it is `null` for an
+ * ordinary response), so the `in` operator is always true there and would
+ * misclassify every response as an upgrade. (In Node / the test runtime the
+ * property is absent, so the bug stays invisible to tests.) A real upgrade has
+ * a non-null handle, which is what we detect here.
+ */
+export declare function isWebSocketUpgrade(res: Response): boolean;
 /**
  * Return a response whose headers are mutable. A received response is re-wrapped
  * into a fresh `Response` (which has the mutable "response" header guard); an
  * already-mutable response is re-wrapped too, harmlessly, preserving every header
  * already set on it.
  *
- * A `101 Switching Protocols` upgrade is returned untouched: it carries a
- * `webSocket` handle that reconstruction would drop, breaking the upgrade. Its
- * headers stay immutable, so callers must not write to an upgrade response.
+ * A WebSocket upgrade is returned untouched: it carries a `webSocket` handle
+ * that reconstruction would drop, breaking the upgrade. Its headers stay
+ * immutable, so callers must not write to an upgrade response.
  */
 export declare function toMutableResponse(res: Response): Response;
 /**