authhero 9.10.0 → 9.11.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/dist/assets/u/widget/index.esm.js +1 -1
  2. package/dist/authhero.cjs +146 -146
  3. package/dist/authhero.d.ts +494 -250
  4. package/dist/authhero.mjs +15108 -14199
  5. package/dist/tsconfig.types.tsbuildinfo +1 -1
  6. package/dist/types/helpers/dcr/metadata-mapping.d.ts +1 -1
  7. package/dist/types/helpers/reserved-claims.d.ts +19 -3
  8. package/dist/types/helpers/run-retention.d.ts +5 -0
  9. package/dist/types/helpers/users-import/map.d.ts +128 -0
  10. package/dist/types/helpers/users-import/process.d.ts +95 -0
  11. package/dist/types/helpers/users-import-cleanup.d.ts +26 -0
  12. package/dist/types/index.d.ts +369 -246
  13. package/dist/types/routes/auth-api/index.d.ts +9 -9
  14. package/dist/types/routes/auth-api/passwordless.d.ts +8 -8
  15. package/dist/types/routes/auth-api/well-known.d.ts +1 -1
  16. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  17. package/dist/types/routes/management-api/branding.d.ts +9 -9
  18. package/dist/types/routes/management-api/client-grants.d.ts +9 -9
  19. package/dist/types/routes/management-api/failed-events.d.ts +1 -1
  20. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  21. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  22. package/dist/types/routes/management-api/index.d.ts +333 -214
  23. package/dist/types/routes/management-api/jobs.d.ts +133 -0
  24. package/dist/types/routes/management-api/keys.d.ts +12 -12
  25. package/dist/types/routes/management-api/logs.d.ts +4 -4
  26. package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
  27. package/dist/types/routes/management-api/organizations.d.ts +1 -1
  28. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  29. package/dist/types/routes/management-api/tenant-export-import.d.ts +5 -5
  30. package/dist/types/routes/management-api/tenant-operations.d.ts +32 -8
  31. package/dist/types/routes/management-api/users.d.ts +12 -12
  32. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  33. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  34. package/dist/types/state-machines/login-session.d.ts +1 -1
  35. package/dist/types/types/AuthHeroConfig.d.ts +34 -0
  36. package/dist/types/types/Bindings.d.ts +3 -0
  37. package/dist/types/types/auth0/UserImport.d.ts +317 -0
  38. package/dist/types/utils/jwks.d.ts +2 -2
  39. package/package.json +6 -6
package/dist/types/routes/management-api/users.d.ts CHANGED
@@ -835,18 +835,21 @@ export declare const userRoutes: OpenAPIHono<{
835
835
  audience: string;
836
836
  scopes: string;
837
837
  }[];
838
+ organization?: string | undefined;
838
839
  revoked_at?: string | undefined;
839
840
  expires_at?: string | undefined;
840
- idle_expires_at?: string | undefined;
841
841
  session_id?: string | undefined;
842
- organization?: string | undefined;
843
842
  auth_connection?: string | undefined;
844
843
  auth_strategy?: {
845
844
  strategy: string;
846
845
  strategy_type: string;
847
846
  } | undefined;
847
+ idle_expires_at?: string | undefined;
848
848
  last_exchanged_at?: string | undefined;
849
849
  }[] | {
850
+ start: number;
851
+ limit: number;
852
+ length: number;
850
853
  tokens: {
851
854
  created_at: string;
852
855
  id: string;
@@ -866,23 +869,21 @@ export declare const userRoutes: OpenAPIHono<{
866
869
  audience: string;
867
870
  scopes: string;
868
871
  }[];
872
+ organization?: string | undefined;
869
873
  revoked_at?: string | undefined;
870
874
  expires_at?: string | undefined;
871
- idle_expires_at?: string | undefined;
872
875
  session_id?: string | undefined;
873
- organization?: string | undefined;
874
876
  auth_connection?: string | undefined;
875
877
  auth_strategy?: {
876
878
  strategy: string;
877
879
  strategy_type: string;
878
880
  } | undefined;
881
+ idle_expires_at?: string | undefined;
879
882
  last_exchanged_at?: string | undefined;
880
883
  }[];
884
+ total?: number | undefined;
881
885
  next?: string | undefined;
882
886
  } | {
883
- start: number;
884
- limit: number;
885
- length: number;
886
887
  tokens: {
887
888
  created_at: string;
888
889
  id: string;
@@ -902,19 +903,18 @@ export declare const userRoutes: OpenAPIHono<{
902
903
  audience: string;
903
904
  scopes: string;
904
905
  }[];
906
+ organization?: string | undefined;
905
907
  revoked_at?: string | undefined;
906
908
  expires_at?: string | undefined;
907
- idle_expires_at?: string | undefined;
908
909
  session_id?: string | undefined;
909
- organization?: string | undefined;
910
910
  auth_connection?: string | undefined;
911
911
  auth_strategy?: {
912
912
  strategy: string;
913
913
  strategy_type: string;
914
914
  } | undefined;
915
+ idle_expires_at?: string | undefined;
915
916
  last_exchanged_at?: string | undefined;
916
917
  }[];
917
- total?: number | undefined;
918
918
  next?: string | undefined;
919
919
  };
920
920
  outputFormat: "json";
@@ -963,7 +963,7 @@ export declare const userRoutes: OpenAPIHono<{
963
963
  };
964
964
  };
965
965
  output: {
966
- type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
966
+ type: "w" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "wn" | "wum";
967
967
  date: string;
968
968
  isMobile: boolean;
969
969
  log_id: string;
@@ -1002,7 +1002,7 @@ export declare const userRoutes: OpenAPIHono<{
1002
1002
  limit: number;
1003
1003
  length: number;
1004
1004
  logs: {
1005
- type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1005
+ type: "w" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "wn" | "wum";
1006
1006
  date: string;
1007
1007
  isMobile: boolean;
1008
1008
  log_id: string;
package/dist/types/routes/universal-login/u2-index.d.ts CHANGED
@@ -165,7 +165,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
165
165
  $get: {
166
166
  input: {
167
167
  param: {
168
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
168
+ screen: "impersonate" | "signup" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
169
169
  };
170
170
  } & {
171
171
  query: {
@@ -181,7 +181,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
181
181
  } | {
182
182
  input: {
183
183
  param: {
184
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
184
+ screen: "impersonate" | "signup" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
185
185
  };
186
186
  } & {
187
187
  query: {
@@ -197,7 +197,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
197
197
  } | {
198
198
  input: {
199
199
  param: {
200
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
200
+ screen: "impersonate" | "signup" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
201
201
  };
202
202
  } & {
203
203
  query: {
@@ -217,7 +217,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
217
217
  $post: {
218
218
  input: {
219
219
  param: {
220
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
220
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
221
221
  };
222
222
  } & {
223
223
  query: {
@@ -235,7 +235,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
235
235
  } | {
236
236
  input: {
237
237
  param: {
238
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
238
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
239
239
  };
240
240
  } & {
241
241
  query: {
package/dist/types/routes/universal-login/u2-routes.d.ts CHANGED
@@ -170,7 +170,7 @@ export declare const u2Routes: OpenAPIHono<{
170
170
  $get: {
171
171
  input: {
172
172
  param: {
173
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
173
+ screen: "impersonate" | "signup" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
174
174
  };
175
175
  } & {
176
176
  query: {
@@ -186,7 +186,7 @@ export declare const u2Routes: OpenAPIHono<{
186
186
  } | {
187
187
  input: {
188
188
  param: {
189
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
189
+ screen: "impersonate" | "signup" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
190
190
  };
191
191
  } & {
192
192
  query: {
@@ -202,7 +202,7 @@ export declare const u2Routes: OpenAPIHono<{
202
202
  } | {
203
203
  input: {
204
204
  param: {
205
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
205
+ screen: "impersonate" | "signup" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
206
206
  };
207
207
  } & {
208
208
  query: {
@@ -222,7 +222,7 @@ export declare const u2Routes: OpenAPIHono<{
222
222
  $post: {
223
223
  input: {
224
224
  param: {
225
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
225
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
226
226
  };
227
227
  } & {
228
228
  query: {
@@ -240,7 +240,7 @@ export declare const u2Routes: OpenAPIHono<{
240
240
  } | {
241
241
  input: {
242
242
  param: {
243
- screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
243
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
244
244
  };
245
245
  } & {
246
246
  query: {
package/dist/types/state-machines/login-session.d.ts CHANGED
@@ -140,7 +140,7 @@ export declare const loginSessionMachine: import("xstate").StateMachine<LoginSes
140
140
  } | {
141
141
  type: "setFailureReason";
142
142
  params: import("xstate").NonReducibleUnknown;
143
- }, never, never, "pending" | "failed" | "expired" | "authenticated" | "awaiting_email_verification" | "awaiting_mfa" | "awaiting_consent" | "awaiting_hook" | "awaiting_continuation" | "completed", string, import("xstate").NonReducibleUnknown, import("xstate").NonReducibleUnknown, import("xstate").EventObject, import("xstate").MetaObject, {
143
+ }, never, never, "pending" | "failed" | "completed" | "expired" | "authenticated" | "awaiting_email_verification" | "awaiting_mfa" | "awaiting_consent" | "awaiting_hook" | "awaiting_continuation", string, import("xstate").NonReducibleUnknown, import("xstate").NonReducibleUnknown, import("xstate").EventObject, import("xstate").MetaObject, {
144
144
  id: "loginSession";
145
145
  states: {
146
146
  readonly pending: {};
package/dist/types/types/AuthHeroConfig.d.ts CHANGED
@@ -484,6 +484,40 @@ export interface AuthHeroConfig {
484
484
  * satisfy this shape.
485
485
  */
486
486
  tenantOperationExecutor?: TenantOperationExecutorBinding;
487
+ /**
488
+ * Maximum accepted size of a bulk user-import file, in bytes
489
+ * (`POST /api/v2/jobs/users-imports`). Defaults to Auth0's documented
490
+ * 500 KB, so any Auth0-shaped client sees identical behaviour. Raise it
491
+ * only for a migration you control end to end — a larger file means more
492
+ * rows staged inside a single request.
493
+ */
494
+ usersImportMaxBytes?: number;
495
+ /**
496
+ * Maximum bulk user-import jobs a single tenant may have in flight.
497
+ * Defaults to Auth0's limit of 2; further submissions get a 429.
498
+ */
499
+ usersImportMaxConcurrentJobs?: number;
500
+ /**
501
+ * Let hooks write the `azp` claim, which the authorization server otherwise
502
+ * owns. Defaults to `false`, and should stay that way in a new deployment.
503
+ *
504
+ * `azp` is reserved because `middlewares/authentication.ts` reads it as the
505
+ * calling client's id, so a hook-supplied value lands in the request context
506
+ * where a registered client id is expected.
507
+ *
508
+ * The flag exists because reserving the name is not a no-op for a deployment
509
+ * that was already using it: the mint never emits `azp` itself, so a hook
510
+ * was the only thing writing it, and reserving it deletes the claim from
511
+ * every token rather than restoring a server-computed value. Turning this on
512
+ * keeps those tokens intact while the services reading `azp` are moved onto
513
+ * a claim the hook owns.
514
+ *
515
+ * **Transitional.** Enable it only where the hooks writing `azp` are
516
+ * first-party code, and turn it off once the migration is done.
517
+ *
518
+ * @default false
519
+ */
520
+ unsafeAllowAzpCustomClaim?: boolean;
487
521
  /**
488
522
  * Optional powered-by logo to display at the bottom left of the login widget.
489
523
  * This is only configurable in code, not stored in the database.
package/dist/types/types/Bindings.d.ts CHANGED
@@ -35,6 +35,9 @@ export type Bindings = {
35
35
  webhookInvoker?: WebhookInvoker;
36
36
  tenantUpgrade?: (tenantId: string) => Promise<void>;
37
37
  tenantOperationExecutor?: TenantOperationExecutorBinding;
38
+ usersImportMaxBytes?: number;
39
+ usersImportMaxConcurrentJobs?: number;
40
+ unsafeAllowAzpCustomClaim?: boolean;
38
41
  outbox?: OutboxConfig;
39
42
  userLinkingMode?: UserLinkingModeOption;
40
43
  usernamePasswordProvider?: UsernamePasswordProviderResolver;
package/dist/types/types/auth0/UserImport.d.ts ADDED
@@ -0,0 +1,317 @@
1
+ import { z } from "@hono/zod-openapi";
2
+ export declare function isSupportedBcryptHash(value: string): boolean;
3
+ /**
4
+ * Every algorithm Auth0 accepts in `custom_password_hash.algorithm`.
5
+ * AuthHero stores only bcrypt today — the rest are parsed so they can be
6
+ * reported as a precise per-row error instead of a whole-file rejection.
7
+ */
8
+ export declare const auth0PasswordHashAlgorithmSchema: z.ZodEnum<{
9
+ argon2: "argon2";
10
+ bcrypt: "bcrypt";
11
+ hmac: "hmac";
12
+ ldap: "ldap";
13
+ md4: "md4";
14
+ md5: "md5";
15
+ pbkdf2: "pbkdf2";
16
+ scrypt: "scrypt";
17
+ sha1: "sha1";
18
+ sha256: "sha256";
19
+ sha512: "sha512";
20
+ }>;
21
+ export type Auth0PasswordHashAlgorithm = z.infer<typeof auth0PasswordHashAlgorithmSchema>;
22
+ export declare const customPasswordHashSchema: z.ZodObject<{
23
+ algorithm: z.ZodEnum<{
24
+ argon2: "argon2";
25
+ bcrypt: "bcrypt";
26
+ hmac: "hmac";
27
+ ldap: "ldap";
28
+ md4: "md4";
29
+ md5: "md5";
30
+ pbkdf2: "pbkdf2";
31
+ scrypt: "scrypt";
32
+ sha1: "sha1";
33
+ sha256: "sha256";
34
+ sha512: "sha512";
35
+ }>;
36
+ hash: z.ZodObject<{
37
+ value: z.ZodString;
38
+ encoding: z.ZodOptional<z.ZodEnum<{
39
+ base64: "base64";
40
+ hex: "hex";
41
+ utf8: "utf8";
42
+ }>>;
43
+ digest: z.ZodOptional<z.ZodString>;
44
+ key: z.ZodOptional<z.ZodObject<{
45
+ value: z.ZodString;
46
+ encoding: z.ZodOptional<z.ZodEnum<{
47
+ base64: "base64";
48
+ hex: "hex";
49
+ utf8: "utf8";
50
+ }>>;
51
+ }, z.core.$strip>>;
52
+ }, z.core.$strip>;
53
+ salt: z.ZodOptional<z.ZodObject<{
54
+ value: z.ZodString;
55
+ encoding: z.ZodOptional<z.ZodEnum<{
56
+ base64: "base64";
57
+ hex: "hex";
58
+ utf8: "utf8";
59
+ }>>;
60
+ position: z.ZodOptional<z.ZodEnum<{
61
+ prefix: "prefix";
62
+ suffix: "suffix";
63
+ }>>;
64
+ }, z.core.$strip>>;
65
+ password: z.ZodOptional<z.ZodObject<{
66
+ encoding: z.ZodOptional<z.ZodEnum<{
67
+ utf8: "utf8";
68
+ ascii: "ascii";
69
+ utf16le: "utf16le";
70
+ ucs2: "ucs2";
71
+ latin1: "latin1";
72
+ binary: "binary";
73
+ }>>;
74
+ }, z.core.$strip>>;
75
+ keylen: z.ZodOptional<z.ZodNumber>;
76
+ cost: z.ZodOptional<z.ZodNumber>;
77
+ blockSize: z.ZodOptional<z.ZodNumber>;
78
+ parallelization: z.ZodOptional<z.ZodNumber>;
79
+ }, z.core.$strip>;
80
+ export type CustomPasswordHash = z.infer<typeof customPasswordHashSchema>;
81
+ /**
82
+ * One entry in the import file. `email` is required by Auth0 for database
83
+ * connections; `.passthrough()` keeps unrecognised keys so they can be
84
+ * echoed back verbatim by `GET /jobs/{id}/errors`.
85
+ */
86
+ export declare const userImportEntrySchema: z.ZodObject<{
87
+ user_id: z.ZodOptional<z.ZodString>;
88
+ email: z.ZodString;
89
+ email_verified: z.ZodOptional<z.ZodBoolean>;
90
+ username: z.ZodOptional<z.ZodString>;
91
+ blocked: z.ZodOptional<z.ZodBoolean>;
92
+ phone_number: z.ZodOptional<z.ZodString>;
93
+ phone_verified: z.ZodOptional<z.ZodBoolean>;
94
+ name: z.ZodOptional<z.ZodString>;
95
+ given_name: z.ZodOptional<z.ZodString>;
96
+ family_name: z.ZodOptional<z.ZodString>;
97
+ nickname: z.ZodOptional<z.ZodString>;
98
+ picture: z.ZodOptional<z.ZodString>;
99
+ app_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
100
+ user_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
101
+ mfa_factors: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
102
+ totp: z.ZodObject<{
103
+ secret: z.ZodString;
104
+ }, z.core.$strip>;
105
+ }, z.core.$strip>, z.ZodObject<{
106
+ phone: z.ZodObject<{
107
+ value: z.ZodString;
108
+ }, z.core.$strip>;
109
+ }, z.core.$strip>, z.ZodObject<{
110
+ email: z.ZodObject<{
111
+ value: z.ZodString;
112
+ }, z.core.$strip>;
113
+ }, z.core.$strip>]>>>;
114
+ password_hash: z.ZodOptional<z.ZodString>;
115
+ custom_password_hash: z.ZodOptional<z.ZodObject<{
116
+ algorithm: z.ZodEnum<{
117
+ argon2: "argon2";
118
+ bcrypt: "bcrypt";
119
+ hmac: "hmac";
120
+ ldap: "ldap";
121
+ md4: "md4";
122
+ md5: "md5";
123
+ pbkdf2: "pbkdf2";
124
+ scrypt: "scrypt";
125
+ sha1: "sha1";
126
+ sha256: "sha256";
127
+ sha512: "sha512";
128
+ }>;
129
+ hash: z.ZodObject<{
130
+ value: z.ZodString;
131
+ encoding: z.ZodOptional<z.ZodEnum<{
132
+ base64: "base64";
133
+ hex: "hex";
134
+ utf8: "utf8";
135
+ }>>;
136
+ digest: z.ZodOptional<z.ZodString>;
137
+ key: z.ZodOptional<z.ZodObject<{
138
+ value: z.ZodString;
139
+ encoding: z.ZodOptional<z.ZodEnum<{
140
+ base64: "base64";
141
+ hex: "hex";
142
+ utf8: "utf8";
143
+ }>>;
144
+ }, z.core.$strip>>;
145
+ }, z.core.$strip>;
146
+ salt: z.ZodOptional<z.ZodObject<{
147
+ value: z.ZodString;
148
+ encoding: z.ZodOptional<z.ZodEnum<{
149
+ base64: "base64";
150
+ hex: "hex";
151
+ utf8: "utf8";
152
+ }>>;
153
+ position: z.ZodOptional<z.ZodEnum<{
154
+ prefix: "prefix";
155
+ suffix: "suffix";
156
+ }>>;
157
+ }, z.core.$strip>>;
158
+ password: z.ZodOptional<z.ZodObject<{
159
+ encoding: z.ZodOptional<z.ZodEnum<{
160
+ utf8: "utf8";
161
+ ascii: "ascii";
162
+ utf16le: "utf16le";
163
+ ucs2: "ucs2";
164
+ latin1: "latin1";
165
+ binary: "binary";
166
+ }>>;
167
+ }, z.core.$strip>>;
168
+ keylen: z.ZodOptional<z.ZodNumber>;
169
+ cost: z.ZodOptional<z.ZodNumber>;
170
+ blockSize: z.ZodOptional<z.ZodNumber>;
171
+ parallelization: z.ZodOptional<z.ZodNumber>;
172
+ }, z.core.$strip>>;
173
+ }, z.core.$loose>;
174
+ export type UserImportEntry = z.infer<typeof userImportEntrySchema>;
175
+ /** The uploaded file: a JSON array of entries. */
176
+ export declare const userImportFileSchema: z.ZodArray<z.ZodObject<{
177
+ user_id: z.ZodOptional<z.ZodString>;
178
+ email: z.ZodString;
179
+ email_verified: z.ZodOptional<z.ZodBoolean>;
180
+ username: z.ZodOptional<z.ZodString>;
181
+ blocked: z.ZodOptional<z.ZodBoolean>;
182
+ phone_number: z.ZodOptional<z.ZodString>;
183
+ phone_verified: z.ZodOptional<z.ZodBoolean>;
184
+ name: z.ZodOptional<z.ZodString>;
185
+ given_name: z.ZodOptional<z.ZodString>;
186
+ family_name: z.ZodOptional<z.ZodString>;
187
+ nickname: z.ZodOptional<z.ZodString>;
188
+ picture: z.ZodOptional<z.ZodString>;
189
+ app_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
190
+ user_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
191
+ mfa_factors: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
192
+ totp: z.ZodObject<{
193
+ secret: z.ZodString;
194
+ }, z.core.$strip>;
195
+ }, z.core.$strip>, z.ZodObject<{
196
+ phone: z.ZodObject<{
197
+ value: z.ZodString;
198
+ }, z.core.$strip>;
199
+ }, z.core.$strip>, z.ZodObject<{
200
+ email: z.ZodObject<{
201
+ value: z.ZodString;
202
+ }, z.core.$strip>;
203
+ }, z.core.$strip>]>>>;
204
+ password_hash: z.ZodOptional<z.ZodString>;
205
+ custom_password_hash: z.ZodOptional<z.ZodObject<{
206
+ algorithm: z.ZodEnum<{
207
+ argon2: "argon2";
208
+ bcrypt: "bcrypt";
209
+ hmac: "hmac";
210
+ ldap: "ldap";
211
+ md4: "md4";
212
+ md5: "md5";
213
+ pbkdf2: "pbkdf2";
214
+ scrypt: "scrypt";
215
+ sha1: "sha1";
216
+ sha256: "sha256";
217
+ sha512: "sha512";
218
+ }>;
219
+ hash: z.ZodObject<{
220
+ value: z.ZodString;
221
+ encoding: z.ZodOptional<z.ZodEnum<{
222
+ base64: "base64";
223
+ hex: "hex";
224
+ utf8: "utf8";
225
+ }>>;
226
+ digest: z.ZodOptional<z.ZodString>;
227
+ key: z.ZodOptional<z.ZodObject<{
228
+ value: z.ZodString;
229
+ encoding: z.ZodOptional<z.ZodEnum<{
230
+ base64: "base64";
231
+ hex: "hex";
232
+ utf8: "utf8";
233
+ }>>;
234
+ }, z.core.$strip>>;
235
+ }, z.core.$strip>;
236
+ salt: z.ZodOptional<z.ZodObject<{
237
+ value: z.ZodString;
238
+ encoding: z.ZodOptional<z.ZodEnum<{
239
+ base64: "base64";
240
+ hex: "hex";
241
+ utf8: "utf8";
242
+ }>>;
243
+ position: z.ZodOptional<z.ZodEnum<{
244
+ prefix: "prefix";
245
+ suffix: "suffix";
246
+ }>>;
247
+ }, z.core.$strip>>;
248
+ password: z.ZodOptional<z.ZodObject<{
249
+ encoding: z.ZodOptional<z.ZodEnum<{
250
+ utf8: "utf8";
251
+ ascii: "ascii";
252
+ utf16le: "utf16le";
253
+ ucs2: "ucs2";
254
+ latin1: "latin1";
255
+ binary: "binary";
256
+ }>>;
257
+ }, z.core.$strip>>;
258
+ keylen: z.ZodOptional<z.ZodNumber>;
259
+ cost: z.ZodOptional<z.ZodNumber>;
260
+ blockSize: z.ZodOptional<z.ZodNumber>;
261
+ parallelization: z.ZodOptional<z.ZodNumber>;
262
+ }, z.core.$strip>>;
263
+ }, z.core.$loose>>;
264
+ /**
265
+ * Auth0 job statuses. AuthHero's internal operation statuses are mapped
266
+ * onto these at the API boundary — internal values never leak out.
267
+ */
268
+ export declare const jobStatusSchema: z.ZodEnum<{
269
+ pending: "pending";
270
+ failed: "failed";
271
+ completed: "completed";
272
+ }>;
273
+ export type JobStatus = z.infer<typeof jobStatusSchema>;
274
+ export declare const jobSummarySchema: z.ZodObject<{
275
+ failed: z.ZodDefault<z.ZodNumber>;
276
+ updated: z.ZodDefault<z.ZodNumber>;
277
+ inserted: z.ZodDefault<z.ZodNumber>;
278
+ total: z.ZodDefault<z.ZodNumber>;
279
+ }, z.core.$strip>;
280
+ export declare const jobSchema: z.ZodObject<{
281
+ id: z.ZodString;
282
+ type: z.ZodString;
283
+ status: z.ZodEnum<{
284
+ pending: "pending";
285
+ failed: "failed";
286
+ completed: "completed";
287
+ }>;
288
+ created_at: z.ZodOptional<z.ZodString>;
289
+ connection_id: z.ZodOptional<z.ZodString>;
290
+ external_id: z.ZodOptional<z.ZodString>;
291
+ percentage_done: z.ZodOptional<z.ZodNumber>;
292
+ time_left_seconds: z.ZodOptional<z.ZodNumber>;
293
+ status_details: z.ZodOptional<z.ZodString>;
294
+ summary: z.ZodOptional<z.ZodObject<{
295
+ failed: z.ZodDefault<z.ZodNumber>;
296
+ updated: z.ZodDefault<z.ZodNumber>;
297
+ inserted: z.ZodDefault<z.ZodNumber>;
298
+ total: z.ZodDefault<z.ZodNumber>;
299
+ }, z.core.$strip>>;
300
+ }, z.core.$strip>;
301
+ export type Job = z.infer<typeof jobSchema>;
302
+ export declare const jobErrorSchema: z.ZodObject<{
303
+ user: z.ZodRecord<z.ZodString, z.ZodUnknown>;
304
+ errors: z.ZodArray<z.ZodObject<{
305
+ code: z.ZodString;
306
+ message: z.ZodString;
307
+ path: z.ZodOptional<z.ZodString>;
308
+ }, z.core.$strip>>;
309
+ }, z.core.$strip>;
310
+ export declare const jobErrorsSchema: z.ZodArray<z.ZodObject<{
311
+ user: z.ZodRecord<z.ZodString, z.ZodUnknown>;
312
+ errors: z.ZodArray<z.ZodObject<{
313
+ code: z.ZodString;
314
+ message: z.ZodString;
315
+ path: z.ZodOptional<z.ZodString>;
316
+ }, z.core.$strip>>;
317
+ }, z.core.$strip>>;
package/dist/types/utils/jwks.d.ts CHANGED
@@ -8,7 +8,7 @@ import { SigningKeyModeOption } from "../types/AuthHeroConfig";
8
8
  */
9
9
  export declare function getJwksForPublication(data: DataAdapters, tenantId: string, modeOption: SigningKeyModeOption | undefined): Promise<{
10
10
  alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
11
- kty: "EC" | "RSA" | "oct";
11
+ kty: "RSA" | "EC" | "oct";
12
12
  kid?: string | undefined;
13
13
  use?: "sig" | "enc" | undefined;
14
14
  n?: string | undefined;
@@ -27,7 +27,7 @@ export declare function getJwksForPublication(data: DataAdapters, tenantId: stri
27
27
  */
28
28
  export declare function getJwksForVerification(data: DataAdapters, tenantId: string | undefined, modeOption: SigningKeyModeOption | undefined): Promise<{
29
29
  alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
30
- kty: "EC" | "RSA" | "oct";
30
+ kty: "RSA" | "EC" | "oct";
31
31
  kid?: string | undefined;
32
32
  use?: "sig" | "enc" | undefined;
33
33
  n?: string | undefined;