authhero 9.1.1 → 9.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. package/dist/assets/u/widget/authhero-widget.esm.js +1 -1
  2. package/dist/assets/u/widget/index.esm.js +1 -1
  3. package/dist/assets/u/widget/p-e95c436f.entry.js +1 -0
  4. package/dist/authhero.cjs +143 -143
  5. package/dist/authhero.d.ts +277 -138
  6. package/dist/authhero.mjs +14434 -14771
  7. package/dist/tsconfig.types.tsbuildinfo +1 -1
  8. package/dist/types/authentication-flows/passwordless.d.ts +6 -6
  9. package/dist/types/helpers/action-executions-cleanup.d.ts +34 -0
  10. package/dist/types/helpers/dcr/metadata-mapping.d.ts +1 -1
  11. package/dist/types/helpers/run-retention.d.ts +4 -1
  12. package/dist/types/index.d.ts +238 -134
  13. package/dist/types/oauth2-client/client.d.ts +50 -0
  14. package/dist/types/oauth2-client/index.d.ts +3 -0
  15. package/dist/types/oauth2-client/providers.d.ts +49 -0
  16. package/dist/types/routes/auth-api/index.d.ts +32 -32
  17. package/dist/types/routes/auth-api/oidc-logout.d.ts +3 -3
  18. package/dist/types/routes/auth-api/passwordless.d.ts +12 -12
  19. package/dist/types/routes/auth-api/register/index.d.ts +2 -2
  20. package/dist/types/routes/auth-api/revoke.d.ts +6 -6
  21. package/dist/types/routes/auth-api/token.d.ts +10 -10
  22. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  23. package/dist/types/routes/management-api/branding.d.ts +3 -3
  24. package/dist/types/routes/management-api/clients.d.ts +14 -14
  25. package/dist/types/routes/management-api/connections.d.ts +15 -15
  26. package/dist/types/routes/management-api/failed-events.d.ts +1 -1
  27. package/dist/types/routes/management-api/forms.d.ts +154 -126
  28. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  29. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  30. package/dist/types/routes/management-api/hooks.d.ts +74 -0
  31. package/dist/types/routes/management-api/index.d.ts +189 -87
  32. package/dist/types/routes/management-api/logs.d.ts +4 -4
  33. package/dist/types/routes/management-api/organizations.d.ts +4 -4
  34. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  35. package/dist/types/routes/management-api/tenants.d.ts +29 -29
  36. package/dist/types/routes/management-api/users.d.ts +2 -2
  37. package/dist/types/routes/universal-login/common.d.ts +8 -8
  38. package/dist/types/routes/universal-login/continue.d.ts +2 -2
  39. package/dist/types/routes/universal-login/flow-api.d.ts +4 -4
  40. package/dist/types/routes/universal-login/identifier.d.ts +4 -4
  41. package/dist/types/routes/universal-login/impersonate.d.ts +2 -2
  42. package/dist/types/routes/universal-login/index.d.ts +8 -8
  43. package/dist/types/routes/universal-login/u2-index.d.ts +7 -7
  44. package/dist/types/routes/universal-login/u2-routes.d.ts +7 -7
  45. package/dist/types/strategies/internal-oauth2.d.ts +5 -5
  46. package/package.json +6 -7
  47. package/dist/assets/u/widget/p-c179b5da.entry.js +0 -1
@@ -0,0 +1,50 @@
1
+ import { generateCodeVerifier } from "../utils/crypto";
2
+ export { generateCodeVerifier };
3
+ export type CodeChallengeMethod = "S256" | "plain";
4
+ /** A high-entropy CSRF state value: 32 random bytes, base64url-encoded. */
5
+ export declare function generateState(): string;
6
+ export declare class OAuth2Tokens {
7
+ data: Record<string, unknown>;
8
+ constructor(data: Record<string, unknown>);
9
+ tokenType(): string;
10
+ accessToken(): string;
11
+ accessTokenExpiresInSeconds(): number;
12
+ accessTokenExpiresAt(): Date;
13
+ hasRefreshToken(): boolean;
14
+ refreshToken(): string;
15
+ hasScopes(): boolean;
16
+ scopes(): string[];
17
+ idToken(): string;
18
+ }
19
+ export declare class OAuth2RequestError extends Error {
20
+ code: string;
21
+ description: string | null;
22
+ uri: string | null;
23
+ state: string | null;
24
+ constructor(code: string, description: string | null, uri: string | null, state: string | null);
25
+ }
26
+ export declare class OAuth2FetchError extends Error {
27
+ constructor(cause: unknown);
28
+ }
29
+ export declare class UnexpectedResponseError extends Error {
30
+ status: number;
31
+ constructor(responseStatus: number);
32
+ }
33
+ export declare class UnexpectedErrorResponseBodyError extends Error {
34
+ status: number;
35
+ data: unknown;
36
+ constructor(status: number, data: unknown);
37
+ }
38
+ export declare function createOAuth2Request(endpoint: string, body: URLSearchParams): Request;
39
+ export declare function encodeBasicCredentials(username: string, password: string): string;
40
+ export declare function createOAuth2RequestError(result: Record<string, unknown>): OAuth2RequestError;
41
+ export declare function sendTokenRequest(request: Request): Promise<OAuth2Tokens>;
42
+ export declare class OAuth2Client {
43
+ clientId: string;
44
+ clientPassword: string | null;
45
+ redirectURI: string | null;
46
+ constructor(clientId: string, clientPassword: string | null, redirectURI: string | null);
47
+ createAuthorizationURL(authorizationEndpoint: string, state: string, scopes: string[]): URL;
48
+ createAuthorizationURLWithPKCE(authorizationEndpoint: string, state: string, codeChallengeMethod: CodeChallengeMethod, codeVerifier: string, scopes: string[]): Promise<URL>;
49
+ validateAuthorizationCode(tokenEndpoint: string, code: string, codeVerifier: string | null): Promise<OAuth2Tokens>;
50
+ }
@@ -0,0 +1,3 @@
1
+ export { OAuth2Client, OAuth2Tokens, OAuth2RequestError, OAuth2FetchError, UnexpectedResponseError, UnexpectedErrorResponseBodyError, generateState, generateCodeVerifier, } from "./client";
2
+ export type { CodeChallengeMethod } from "./client";
3
+ export { Apple, Facebook, GitHub, Google, MicrosoftEntraId } from "./providers";
@@ -0,0 +1,49 @@
1
+ import { OAuth2Tokens } from "./client";
2
+ export declare class Google {
3
+ private client;
4
+ constructor(clientId: string, clientSecret: string, redirectURI: string);
5
+ createAuthorizationURL(state: string, codeVerifier: string, scopes: string[]): Promise<URL>;
6
+ validateAuthorizationCode(code: string, codeVerifier: string): Promise<OAuth2Tokens>;
7
+ }
8
+ export declare class Facebook {
9
+ private clientId;
10
+ private clientSecret;
11
+ private redirectURI;
12
+ constructor(clientId: string, clientSecret: string, redirectURI: string);
13
+ createAuthorizationURL(state: string, scopes: string[]): URL;
14
+ validateAuthorizationCode(code: string): Promise<OAuth2Tokens>;
15
+ }
16
+ export declare class GitHub {
17
+ private clientId;
18
+ private clientSecret;
19
+ private redirectURI;
20
+ constructor(clientId: string, clientSecret: string, redirectURI: string | null);
21
+ createAuthorizationURL(state: string, scopes: string[]): URL;
22
+ validateAuthorizationCode(code: string): Promise<OAuth2Tokens>;
23
+ }
24
+ export declare class MicrosoftEntraId {
25
+ private authorizationEndpoint;
26
+ private tokenEndpoint;
27
+ private clientId;
28
+ private clientSecret;
29
+ private redirectURI;
30
+ constructor(tenant: string, clientId: string, clientSecret: string | null, redirectURI: string);
31
+ createAuthorizationURL(state: string, codeVerifier: string, scopes: string[]): Promise<URL>;
32
+ validateAuthorizationCode(code: string, codeVerifier: string): Promise<OAuth2Tokens>;
33
+ }
34
+ export declare class Apple {
35
+ private clientId;
36
+ private teamId;
37
+ private keyId;
38
+ private pkcs8PrivateKey;
39
+ private redirectURI;
40
+ constructor(clientId: string, teamId: string, keyId: string, pkcs8PrivateKey: Uint8Array<ArrayBuffer>, redirectURI: string);
41
+ createAuthorizationURL(state: string, scopes: string[]): URL;
42
+ validateAuthorizationCode(code: string): Promise<OAuth2Tokens>;
43
+ /**
44
+ * Apple's "client secret" is a short-lived ES256 JWT signed with the
45
+ * developer's private key (Sign in with Apple docs, "Creating a client
46
+ * secret").
47
+ */
48
+ private createClientSecret;
49
+ }
@@ -301,7 +301,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
301
301
  scope?: string | undefined;
302
302
  grant_types?: string[] | undefined;
303
303
  response_types?: string[] | undefined;
304
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
304
+ token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
305
305
  jwks_uri?: string | undefined;
306
306
  jwks?: Record<string, unknown> | undefined;
307
307
  software_id?: string | undefined;
@@ -390,7 +390,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
390
390
  scope?: string | undefined;
391
391
  grant_types?: string[] | undefined;
392
392
  response_types?: string[] | undefined;
393
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
393
+ token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
394
394
  jwks_uri?: string | undefined;
395
395
  jwks?: Record<string, unknown> | undefined;
396
396
  software_id?: string | undefined;
@@ -738,17 +738,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
738
738
  authParams: {
739
739
  username?: string | undefined;
740
740
  state?: string | undefined;
741
- act_as?: string | undefined;
741
+ audience?: string | undefined;
742
742
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
743
743
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
744
- redirect_uri?: string | undefined;
745
- audience?: string | undefined;
746
- organization?: string | undefined;
747
- nonce?: string | undefined;
748
744
  scope?: string | undefined;
749
- prompt?: string | undefined;
745
+ organization?: string | undefined;
746
+ redirect_uri?: string | undefined;
750
747
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
751
748
  code_challenge?: string | undefined;
749
+ nonce?: string | undefined;
750
+ act_as?: string | undefined;
751
+ prompt?: string | undefined;
752
752
  ui_locales?: string | undefined;
753
753
  max_age?: number | undefined;
754
754
  acr_values?: string | undefined;
@@ -774,17 +774,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
774
774
  authParams: {
775
775
  username?: string | undefined;
776
776
  state?: string | undefined;
777
- act_as?: string | undefined;
777
+ audience?: string | undefined;
778
778
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
779
779
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
780
- redirect_uri?: string | undefined;
781
- audience?: string | undefined;
782
- organization?: string | undefined;
783
- nonce?: string | undefined;
784
780
  scope?: string | undefined;
785
- prompt?: string | undefined;
781
+ organization?: string | undefined;
782
+ redirect_uri?: string | undefined;
786
783
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
787
784
  code_challenge?: string | undefined;
785
+ nonce?: string | undefined;
786
+ act_as?: string | undefined;
787
+ prompt?: string | undefined;
788
788
  ui_locales?: string | undefined;
789
789
  max_age?: number | undefined;
790
790
  acr_values?: string | undefined;
@@ -916,14 +916,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
916
916
  input: {
917
917
  form: {
918
918
  token: string;
919
- token_type_hint?: "access_token" | "refresh_token" | undefined;
919
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
920
920
  client_id?: string | undefined;
921
921
  client_secret?: string | undefined;
922
922
  };
923
923
  } & {
924
924
  json: {
925
925
  token: string;
926
- token_type_hint?: "access_token" | "refresh_token" | undefined;
926
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
927
927
  client_id?: string | undefined;
928
928
  client_secret?: string | undefined;
929
929
  };
@@ -935,14 +935,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
935
935
  input: {
936
936
  form: {
937
937
  token: string;
938
- token_type_hint?: "access_token" | "refresh_token" | undefined;
938
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
939
939
  client_id?: string | undefined;
940
940
  client_secret?: string | undefined;
941
941
  };
942
942
  } & {
943
943
  json: {
944
944
  token: string;
945
- token_type_hint?: "access_token" | "refresh_token" | undefined;
945
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
946
946
  client_id?: string | undefined;
947
947
  client_secret?: string | undefined;
948
948
  };
@@ -957,14 +957,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
957
957
  input: {
958
958
  form: {
959
959
  token: string;
960
- token_type_hint?: "access_token" | "refresh_token" | undefined;
960
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
961
961
  client_id?: string | undefined;
962
962
  client_secret?: string | undefined;
963
963
  };
964
964
  } & {
965
965
  json: {
966
966
  token: string;
967
- token_type_hint?: "access_token" | "refresh_token" | undefined;
967
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
968
968
  client_id?: string | undefined;
969
969
  client_secret?: string | undefined;
970
970
  };
@@ -1014,7 +1014,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1014
1014
  client_id: string;
1015
1015
  username: string;
1016
1016
  otp: string;
1017
- realm: "email" | "sms";
1017
+ realm: "sms" | "email";
1018
1018
  } | {
1019
1019
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1020
1020
  subject_token: string;
@@ -1061,7 +1061,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1061
1061
  client_id: string;
1062
1062
  username: string;
1063
1063
  otp: string;
1064
- realm: "email" | "sms";
1064
+ realm: "sms" | "email";
1065
1065
  } | {
1066
1066
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1067
1067
  subject_token: string;
@@ -1113,7 +1113,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1113
1113
  client_id: string;
1114
1114
  username: string;
1115
1115
  otp: string;
1116
- realm: "email" | "sms";
1116
+ realm: "sms" | "email";
1117
1117
  } | {
1118
1118
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1119
1119
  subject_token: string;
@@ -1160,7 +1160,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1160
1160
  client_id: string;
1161
1161
  username: string;
1162
1162
  otp: string;
1163
- realm: "email" | "sms";
1163
+ realm: "sms" | "email";
1164
1164
  } | {
1165
1165
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1166
1166
  subject_token: string;
@@ -1220,7 +1220,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1220
1220
  client_id: string;
1221
1221
  username: string;
1222
1222
  otp: string;
1223
- realm: "email" | "sms";
1223
+ realm: "sms" | "email";
1224
1224
  } | {
1225
1225
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1226
1226
  subject_token: string;
@@ -1267,7 +1267,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1267
1267
  client_id: string;
1268
1268
  username: string;
1269
1269
  otp: string;
1270
- realm: "email" | "sms";
1270
+ realm: "sms" | "email";
1271
1271
  } | {
1272
1272
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1273
1273
  subject_token: string;
@@ -1322,7 +1322,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1322
1322
  client_id: string;
1323
1323
  username: string;
1324
1324
  otp: string;
1325
- realm: "email" | "sms";
1325
+ realm: "sms" | "email";
1326
1326
  } | {
1327
1327
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1328
1328
  subject_token: string;
@@ -1369,7 +1369,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1369
1369
  client_id: string;
1370
1370
  username: string;
1371
1371
  otp: string;
1372
- realm: "email" | "sms";
1372
+ realm: "sms" | "email";
1373
1373
  } | {
1374
1374
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1375
1375
  subject_token: string;
@@ -1424,7 +1424,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1424
1424
  client_id: string;
1425
1425
  username: string;
1426
1426
  otp: string;
1427
- realm: "email" | "sms";
1427
+ realm: "sms" | "email";
1428
1428
  } | {
1429
1429
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1430
1430
  subject_token: string;
@@ -1471,7 +1471,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1471
1471
  client_id: string;
1472
1472
  username: string;
1473
1473
  otp: string;
1474
- realm: "email" | "sms";
1474
+ realm: "sms" | "email";
1475
1475
  } | {
1476
1476
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1477
1477
  subject_token: string;
@@ -1707,7 +1707,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1707
1707
  };
1708
1708
  output: {};
1709
1709
  outputFormat: string;
1710
- status: 302;
1710
+ status: 400;
1711
1711
  } | {
1712
1712
  input: {
1713
1713
  query: {
@@ -1721,7 +1721,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1721
1721
  };
1722
1722
  output: {};
1723
1723
  outputFormat: string;
1724
- status: 400;
1724
+ status: 302;
1725
1725
  };
1726
1726
  };
1727
1727
  }, "/oidc/logout"> & import("hono/types").MergeSchemaPath<{
@@ -18,7 +18,7 @@ export declare const oidcLogoutRoutes: OpenAPIHono<{
18
18
  };
19
19
  output: {};
20
20
  outputFormat: string;
21
- status: 302;
21
+ status: 200;
22
22
  } | {
23
23
  input: {
24
24
  query: {
@@ -32,7 +32,7 @@ export declare const oidcLogoutRoutes: OpenAPIHono<{
32
32
  };
33
33
  output: {};
34
34
  outputFormat: string;
35
- status: 200;
35
+ status: 400;
36
36
  } | {
37
37
  input: {
38
38
  query: {
@@ -46,7 +46,7 @@ export declare const oidcLogoutRoutes: OpenAPIHono<{
46
46
  };
47
47
  output: {};
48
48
  outputFormat: string;
49
- status: 400;
49
+ status: 302;
50
50
  };
51
51
  };
52
52
  }, "/">;
@@ -16,17 +16,17 @@ export declare const passwordlessRoutes: OpenAPIHono<{
16
16
  authParams: {
17
17
  username?: string | undefined;
18
18
  state?: string | undefined;
19
- act_as?: string | undefined;
19
+ audience?: string | undefined;
20
20
  response_type?: AuthorizationResponseType | undefined;
21
21
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
22
- redirect_uri?: string | undefined;
23
- audience?: string | undefined;
24
- organization?: string | undefined;
25
- nonce?: string | undefined;
26
22
  scope?: string | undefined;
27
- prompt?: string | undefined;
23
+ organization?: string | undefined;
24
+ redirect_uri?: string | undefined;
28
25
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
29
26
  code_challenge?: string | undefined;
27
+ nonce?: string | undefined;
28
+ act_as?: string | undefined;
29
+ prompt?: string | undefined;
30
30
  ui_locales?: string | undefined;
31
31
  max_age?: number | undefined;
32
32
  acr_values?: string | undefined;
@@ -52,17 +52,17 @@ export declare const passwordlessRoutes: OpenAPIHono<{
52
52
  authParams: {
53
53
  username?: string | undefined;
54
54
  state?: string | undefined;
55
- act_as?: string | undefined;
55
+ audience?: string | undefined;
56
56
  response_type?: AuthorizationResponseType | undefined;
57
57
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
58
- redirect_uri?: string | undefined;
59
- audience?: string | undefined;
60
- organization?: string | undefined;
61
- nonce?: string | undefined;
62
58
  scope?: string | undefined;
63
- prompt?: string | undefined;
59
+ organization?: string | undefined;
60
+ redirect_uri?: string | undefined;
64
61
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
65
62
  code_challenge?: string | undefined;
63
+ nonce?: string | undefined;
64
+ act_as?: string | undefined;
65
+ prompt?: string | undefined;
66
66
  ui_locales?: string | undefined;
67
67
  max_age?: number | undefined;
68
68
  acr_values?: string | undefined;
@@ -18,7 +18,7 @@ export declare const registerRoutes: OpenAPIHono<{
18
18
  scope?: string | undefined;
19
19
  grant_types?: string[] | undefined;
20
20
  response_types?: string[] | undefined;
21
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
21
+ token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
22
22
  jwks_uri?: string | undefined;
23
23
  jwks?: Record<string, unknown> | undefined;
24
24
  software_id?: string | undefined;
@@ -107,7 +107,7 @@ export declare const registerRoutes: OpenAPIHono<{
107
107
  scope?: string | undefined;
108
108
  grant_types?: string[] | undefined;
109
109
  response_types?: string[] | undefined;
110
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
110
+ token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
111
111
  jwks_uri?: string | undefined;
112
112
  jwks?: Record<string, unknown> | undefined;
113
113
  software_id?: string | undefined;
@@ -9,14 +9,14 @@ export declare const revokeRoutes: OpenAPIHono<{
9
9
  input: {
10
10
  form: {
11
11
  token: string;
12
- token_type_hint?: "access_token" | "refresh_token" | undefined;
12
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
13
13
  client_id?: string | undefined;
14
14
  client_secret?: string | undefined;
15
15
  };
16
16
  } & {
17
17
  json: {
18
18
  token: string;
19
- token_type_hint?: "access_token" | "refresh_token" | undefined;
19
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
20
20
  client_id?: string | undefined;
21
21
  client_secret?: string | undefined;
22
22
  };
@@ -28,14 +28,14 @@ export declare const revokeRoutes: OpenAPIHono<{
28
28
  input: {
29
29
  form: {
30
30
  token: string;
31
- token_type_hint?: "access_token" | "refresh_token" | undefined;
31
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
32
32
  client_id?: string | undefined;
33
33
  client_secret?: string | undefined;
34
34
  };
35
35
  } & {
36
36
  json: {
37
37
  token: string;
38
- token_type_hint?: "access_token" | "refresh_token" | undefined;
38
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
39
39
  client_id?: string | undefined;
40
40
  client_secret?: string | undefined;
41
41
  };
@@ -50,14 +50,14 @@ export declare const revokeRoutes: OpenAPIHono<{
50
50
  input: {
51
51
  form: {
52
52
  token: string;
53
- token_type_hint?: "access_token" | "refresh_token" | undefined;
53
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
54
54
  client_id?: string | undefined;
55
55
  client_secret?: string | undefined;
56
56
  };
57
57
  } & {
58
58
  json: {
59
59
  token: string;
60
- token_type_hint?: "access_token" | "refresh_token" | undefined;
60
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
61
61
  client_id?: string | undefined;
62
62
  client_secret?: string | undefined;
63
63
  };
@@ -40,7 +40,7 @@ export declare const tokenRoutes: OpenAPIHono<{
40
40
  client_id: string;
41
41
  username: string;
42
42
  otp: string;
43
- realm: "email" | "sms";
43
+ realm: "sms" | "email";
44
44
  } | {
45
45
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
46
46
  subject_token: string;
@@ -87,7 +87,7 @@ export declare const tokenRoutes: OpenAPIHono<{
87
87
  client_id: string;
88
88
  username: string;
89
89
  otp: string;
90
- realm: "email" | "sms";
90
+ realm: "sms" | "email";
91
91
  } | {
92
92
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
93
93
  subject_token: string;
@@ -139,7 +139,7 @@ export declare const tokenRoutes: OpenAPIHono<{
139
139
  client_id: string;
140
140
  username: string;
141
141
  otp: string;
142
- realm: "email" | "sms";
142
+ realm: "sms" | "email";
143
143
  } | {
144
144
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
145
145
  subject_token: string;
@@ -186,7 +186,7 @@ export declare const tokenRoutes: OpenAPIHono<{
186
186
  client_id: string;
187
187
  username: string;
188
188
  otp: string;
189
- realm: "email" | "sms";
189
+ realm: "sms" | "email";
190
190
  } | {
191
191
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
192
192
  subject_token: string;
@@ -246,7 +246,7 @@ export declare const tokenRoutes: OpenAPIHono<{
246
246
  client_id: string;
247
247
  username: string;
248
248
  otp: string;
249
- realm: "email" | "sms";
249
+ realm: "sms" | "email";
250
250
  } | {
251
251
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
252
252
  subject_token: string;
@@ -293,7 +293,7 @@ export declare const tokenRoutes: OpenAPIHono<{
293
293
  client_id: string;
294
294
  username: string;
295
295
  otp: string;
296
- realm: "email" | "sms";
296
+ realm: "sms" | "email";
297
297
  } | {
298
298
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
299
299
  subject_token: string;
@@ -348,7 +348,7 @@ export declare const tokenRoutes: OpenAPIHono<{
348
348
  client_id: string;
349
349
  username: string;
350
350
  otp: string;
351
- realm: "email" | "sms";
351
+ realm: "sms" | "email";
352
352
  } | {
353
353
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
354
354
  subject_token: string;
@@ -395,7 +395,7 @@ export declare const tokenRoutes: OpenAPIHono<{
395
395
  client_id: string;
396
396
  username: string;
397
397
  otp: string;
398
- realm: "email" | "sms";
398
+ realm: "sms" | "email";
399
399
  } | {
400
400
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
401
401
  subject_token: string;
@@ -450,7 +450,7 @@ export declare const tokenRoutes: OpenAPIHono<{
450
450
  client_id: string;
451
451
  username: string;
452
452
  otp: string;
453
- realm: "email" | "sms";
453
+ realm: "sms" | "email";
454
454
  } | {
455
455
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
456
456
  subject_token: string;
@@ -497,7 +497,7 @@ export declare const tokenRoutes: OpenAPIHono<{
497
497
  client_id: string;
498
498
  username: string;
499
499
  otp: string;
500
- realm: "email" | "sms";
500
+ realm: "sms" | "email";
501
501
  } | {
502
502
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
503
503
  subject_token: string;
@@ -37,7 +37,7 @@ export declare const authenticationMethodsRoutes: OpenAPIHono<{
37
37
  };
38
38
  } & {
39
39
  json: {
40
- type: "email" | "push" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
40
+ type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
41
41
  phone_number?: string | undefined;
42
42
  totp_secret?: string | undefined;
43
43
  credential_id?: string | undefined;
@@ -370,7 +370,7 @@ export declare const brandingRoutes: OpenAPIHono<{
370
370
  };
371
371
  output: {};
372
372
  outputFormat: string;
373
- status: 204;
373
+ status: 400;
374
374
  } | {
375
375
  input: {
376
376
  header: {
@@ -383,7 +383,7 @@ export declare const brandingRoutes: OpenAPIHono<{
383
383
  };
384
384
  output: {};
385
385
  outputFormat: string;
386
- status: 400;
386
+ status: 204;
387
387
  };
388
388
  };
389
389
  } & {
@@ -409,7 +409,7 @@ export declare const brandingRoutes: OpenAPIHono<{
409
409
  } & {
410
410
  json: {
411
411
  body?: string | undefined;
412
- screen?: "login" | "identifier" | "signup" | "password" | undefined;
412
+ screen?: "password" | "identifier" | "signup" | "login" | undefined;
413
413
  branding?: {
414
414
  colors?: {
415
415
  primary: string;