authhero 9.12.1 → 9.13.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (55) hide show
  1. package/dist/assets/u/widget/authhero-widget.esm.js +1 -1
  2. package/dist/assets/u/widget/p-1471c0f2.entry.js +1 -0
  3. package/dist/authhero.cjs +195 -144
  4. package/dist/authhero.d.ts +332 -84
  5. package/dist/authhero.mjs +22937 -22337
  6. package/dist/tsconfig.types.tsbuildinfo +1 -1
  7. package/dist/types/authentication-flows/common.d.ts +1 -0
  8. package/dist/types/authentication-flows/passwordless.d.ts +4 -4
  9. package/dist/types/helpers/reserved-claims.d.ts +2 -2
  10. package/dist/types/index.d.ts +260 -83
  11. package/dist/types/middlewares/apply-config.d.ts +8 -0
  12. package/dist/types/middlewares/client-info.d.ts +27 -1
  13. package/dist/types/routes/auth-api/authorize.d.ts +5 -0
  14. package/dist/types/routes/auth-api/index.d.ts +35 -30
  15. package/dist/types/routes/auth-api/passwordless.d.ts +12 -12
  16. package/dist/types/routes/auth-api/register/index.d.ts +2 -2
  17. package/dist/types/routes/auth-api/revoke.d.ts +6 -6
  18. package/dist/types/routes/auth-api/token.d.ts +10 -10
  19. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  20. package/dist/types/routes/management-api/actions.d.ts +1 -1
  21. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  22. package/dist/types/routes/management-api/branding.d.ts +5 -5
  23. package/dist/types/routes/management-api/clients.d.ts +8 -8
  24. package/dist/types/routes/management-api/connections.d.ts +137 -0
  25. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  26. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  27. package/dist/types/routes/management-api/index.d.ts +228 -56
  28. package/dist/types/routes/management-api/keys.d.ts +8 -8
  29. package/dist/types/routes/management-api/logs.d.ts +4 -4
  30. package/dist/types/routes/management-api/organizations.d.ts +4 -4
  31. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  32. package/dist/types/routes/management-api/resource-servers.d.ts +35 -0
  33. package/dist/types/routes/management-api/roles.d.ts +1 -1
  34. package/dist/types/routes/management-api/tenant-operations.d.ts +1 -1
  35. package/dist/types/routes/management-api/tenants.d.ts +5 -5
  36. package/dist/types/routes/management-api/users.d.ts +8 -8
  37. package/dist/types/routes/mcp/dispatch.d.ts +60 -0
  38. package/dist/types/routes/mcp/index.d.ts +21 -0
  39. package/dist/types/routes/mcp/protocol.d.ts +35 -0
  40. package/dist/types/routes/mcp/resource.d.ts +14 -0
  41. package/dist/types/routes/mcp/tools.d.ts +21 -0
  42. package/dist/types/routes/universal-login/common.d.ts +6 -6
  43. package/dist/types/routes/universal-login/embed.d.ts +102 -0
  44. package/dist/types/routes/universal-login/error-page.d.ts +8 -1
  45. package/dist/types/routes/universal-login/identifier.d.ts +2 -2
  46. package/dist/types/routes/universal-login/index.d.ts +2 -2
  47. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  48. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  49. package/dist/types/routes/universal-login/u2-widget-page.d.ts +9 -1
  50. package/dist/types/types/AuthHeroConfig.d.ts +35 -0
  51. package/dist/types/types/Bindings.d.ts +2 -1
  52. package/dist/types/types/Variables.d.ts +2 -0
  53. package/dist/types/utils/jwt.d.ts +8 -0
  54. package/package.json +4 -4
  55. package/dist/assets/u/widget/p-74f95441.entry.js +0 -1
package/dist/types/middlewares/apply-config.d.ts CHANGED
@@ -7,6 +7,14 @@ import { AuthHeroConfig, Bindings, Variables } from "../types";
7
7
  * Applied both in the outer `init()` app and in each sub-app's middleware
8
8
  * chain so that serving a sub-app (oauthApp, managementApp, ...) directly —
9
9
  * without routing through the outer app — still sees the config.
10
+ *
11
+ * `ctx.env` is replaced with a shallow copy before anything is written to it.
12
+ * On Cloudflare Workers the runtime hands every request in an isolate the SAME
13
+ * `env` object, and the routes store per-request state on it (`ctx.env.data =
14
+ * composeAuthData({ ctx, ... })`). Writing to the shared object let concurrent
15
+ * requests overwrite each other's adapter stack, so one request awaited
16
+ * another request's in-flight promises — which the runtime cancels as a hung
17
+ * Worker once the owning request ends.
10
18
  */
11
19
  export declare function applyConfigMiddleware(config: AuthHeroConfig): MiddlewareHandler<{
12
20
  Bindings: Bindings;
package/dist/types/middlewares/client-info.d.ts CHANGED
@@ -1,5 +1,31 @@
1
- import { MiddlewareHandler } from "hono";
1
+ import { Context, MiddlewareHandler } from "hono";
2
2
  import { Variables } from "../types/Variables";
3
+ /**
4
+ * Derive the client IP from the least forgeable header available.
5
+ *
6
+ * `X-Forwarded-For` arrives carrying whatever prefix the caller chose to send:
7
+ * `@authhero/proxy` appends the hop it verified to the end of the inbound
8
+ * chain and leaves the rest intact, so the leading entries are the client's
9
+ * own claim. Reading the first one handed a caller full control of
10
+ * `ctx.var.ip`, which keys the pre-login rate limiter (and its allowlist) and
11
+ * the passwordless IP check. Order of trust instead:
12
+ *
13
+ * 1. `CF-Connecting-IP`, unless it holds one of Cloudflare's own addresses.
14
+ * The edge overwrites it on ingress, so on a direct hit it is
15
+ * authoritative. When a Worker is reached worker-to-worker — our proxy's
16
+ * service binding to this app — the runtime replaces it with the loopback
17
+ * source, which is why a Cloudflare-owned value falls through instead of
18
+ * being laundered as a visitor.
19
+ * 2. `X-Real-IP`, which `@authhero/proxy` overwrites with the hop it verified.
20
+ * Only reachable when (1) is absent or Cloudflare-owned — off the edge, or
21
+ * behind our own proxy — so a caller on the edge cannot reach this branch
22
+ * by sending the header itself.
23
+ * 3. The *last* `X-Forwarded-For` entry: the hop appended by the nearest
24
+ * proxy, rather than the first, which anyone can set.
25
+ */
26
+ export declare function getClientIp(c: Context<{
27
+ Variables: Variables;
28
+ }>): string | undefined;
3
29
  /**
4
30
  * Middleware that extracts client information from the request and stores it in context variables
5
31
  */
package/dist/types/routes/auth-api/authorize.d.ts CHANGED
@@ -19,6 +19,7 @@ export declare const authorizeRoutes: OpenAPIHono<{
19
19
  response_mode?: AuthorizationResponseMode | undefined;
20
20
  response_type?: unknown;
21
21
  audience?: string | undefined;
22
+ resource?: string | undefined;
22
23
  connection?: string | undefined;
23
24
  nonce?: string | undefined;
24
25
  max_age?: string | undefined;
@@ -53,6 +54,7 @@ export declare const authorizeRoutes: OpenAPIHono<{
53
54
  response_mode?: AuthorizationResponseMode | undefined;
54
55
  response_type?: unknown;
55
56
  audience?: string | undefined;
57
+ resource?: string | undefined;
56
58
  connection?: string | undefined;
57
59
  nonce?: string | undefined;
58
60
  max_age?: string | undefined;
@@ -87,6 +89,7 @@ export declare const authorizeRoutes: OpenAPIHono<{
87
89
  response_mode?: AuthorizationResponseMode | undefined;
88
90
  response_type?: unknown;
89
91
  audience?: string | undefined;
92
+ resource?: string | undefined;
90
93
  connection?: string | undefined;
91
94
  nonce?: string | undefined;
92
95
  max_age?: string | undefined;
@@ -129,6 +132,7 @@ export declare const authorizeRoutes: OpenAPIHono<{
129
132
  response_mode?: AuthorizationResponseMode | undefined;
130
133
  response_type?: unknown;
131
134
  audience?: string | undefined;
135
+ resource?: string | undefined;
132
136
  connection?: string | undefined;
133
137
  nonce?: string | undefined;
134
138
  max_age?: string | undefined;
@@ -165,6 +169,7 @@ export declare const authorizeRoutes: OpenAPIHono<{
165
169
  response_mode?: AuthorizationResponseMode | undefined;
166
170
  response_type?: unknown;
167
171
  audience?: string | undefined;
172
+ resource?: string | undefined;
168
173
  connection?: string | undefined;
169
174
  nonce?: string | undefined;
170
175
  max_age?: string | undefined;
package/dist/types/routes/auth-api/index.d.ts CHANGED
@@ -301,7 +301,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
301
301
  scope?: string | undefined;
302
302
  grant_types?: string[] | undefined;
303
303
  response_types?: string[] | undefined;
304
- token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
304
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
305
305
  jwks_uri?: string | undefined;
306
306
  jwks?: Record<string, unknown> | undefined;
307
307
  software_id?: string | undefined;
@@ -390,7 +390,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
390
390
  scope?: string | undefined;
391
391
  grant_types?: string[] | undefined;
392
392
  response_types?: string[] | undefined;
393
- token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
393
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
394
394
  jwks_uri?: string | undefined;
395
395
  jwks?: Record<string, unknown> | undefined;
396
396
  software_id?: string | undefined;
@@ -484,6 +484,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
484
484
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
485
485
  response_type?: unknown;
486
486
  audience?: string | undefined;
487
+ resource?: string | undefined;
487
488
  connection?: string | undefined;
488
489
  nonce?: string | undefined;
489
490
  max_age?: string | undefined;
@@ -518,6 +519,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
518
519
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
519
520
  response_type?: unknown;
520
521
  audience?: string | undefined;
522
+ resource?: string | undefined;
521
523
  connection?: string | undefined;
522
524
  nonce?: string | undefined;
523
525
  max_age?: string | undefined;
@@ -552,6 +554,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
552
554
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
553
555
  response_type?: unknown;
554
556
  audience?: string | undefined;
557
+ resource?: string | undefined;
555
558
  connection?: string | undefined;
556
559
  nonce?: string | undefined;
557
560
  max_age?: string | undefined;
@@ -594,6 +597,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
594
597
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
595
598
  response_type?: unknown;
596
599
  audience?: string | undefined;
600
+ resource?: string | undefined;
597
601
  connection?: string | undefined;
598
602
  nonce?: string | undefined;
599
603
  max_age?: string | undefined;
@@ -630,6 +634,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
630
634
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
631
635
  response_type?: unknown;
632
636
  audience?: string | undefined;
637
+ resource?: string | undefined;
633
638
  connection?: string | undefined;
634
639
  nonce?: string | undefined;
635
640
  max_age?: string | undefined;
@@ -734,21 +739,21 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
734
739
  connection: "email";
735
740
  client_id: string;
736
741
  email: string;
737
- send: "code" | "link";
742
+ send: "link" | "code";
738
743
  authParams: {
739
744
  username?: string | undefined;
740
745
  state?: string | undefined;
746
+ redirect_uri?: string | undefined;
747
+ organization?: string | undefined;
741
748
  audience?: string | undefined;
749
+ act_as?: string | undefined;
742
750
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
743
751
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
752
+ nonce?: string | undefined;
744
753
  scope?: string | undefined;
745
- organization?: string | undefined;
746
- redirect_uri?: string | undefined;
754
+ prompt?: string | undefined;
747
755
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
748
756
  code_challenge?: string | undefined;
749
- nonce?: string | undefined;
750
- act_as?: string | undefined;
751
- prompt?: string | undefined;
752
757
  ui_locales?: string | undefined;
753
758
  max_age?: number | undefined;
754
759
  acr_values?: string | undefined;
@@ -770,21 +775,21 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
770
775
  client_id: string;
771
776
  connection: "sms";
772
777
  phone_number: string;
773
- send: "code" | "link";
778
+ send: "link" | "code";
774
779
  authParams: {
775
780
  username?: string | undefined;
776
781
  state?: string | undefined;
782
+ redirect_uri?: string | undefined;
783
+ organization?: string | undefined;
777
784
  audience?: string | undefined;
785
+ act_as?: string | undefined;
778
786
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
779
787
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
788
+ nonce?: string | undefined;
780
789
  scope?: string | undefined;
781
- organization?: string | undefined;
782
- redirect_uri?: string | undefined;
790
+ prompt?: string | undefined;
783
791
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
784
792
  code_challenge?: string | undefined;
785
- nonce?: string | undefined;
786
- act_as?: string | undefined;
787
- prompt?: string | undefined;
788
793
  ui_locales?: string | undefined;
789
794
  max_age?: number | undefined;
790
795
  acr_values?: string | undefined;
@@ -916,14 +921,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
916
921
  input: {
917
922
  form: {
918
923
  token: string;
919
- token_type_hint?: "access_token" | "refresh_token" | undefined;
924
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
920
925
  client_id?: string | undefined;
921
926
  client_secret?: string | undefined;
922
927
  };
923
928
  } & {
924
929
  json: {
925
930
  token: string;
926
- token_type_hint?: "access_token" | "refresh_token" | undefined;
931
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
927
932
  client_id?: string | undefined;
928
933
  client_secret?: string | undefined;
929
934
  };
@@ -935,14 +940,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
935
940
  input: {
936
941
  form: {
937
942
  token: string;
938
- token_type_hint?: "access_token" | "refresh_token" | undefined;
943
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
939
944
  client_id?: string | undefined;
940
945
  client_secret?: string | undefined;
941
946
  };
942
947
  } & {
943
948
  json: {
944
949
  token: string;
945
- token_type_hint?: "access_token" | "refresh_token" | undefined;
950
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
946
951
  client_id?: string | undefined;
947
952
  client_secret?: string | undefined;
948
953
  };
@@ -957,14 +962,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
957
962
  input: {
958
963
  form: {
959
964
  token: string;
960
- token_type_hint?: "access_token" | "refresh_token" | undefined;
965
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
961
966
  client_id?: string | undefined;
962
967
  client_secret?: string | undefined;
963
968
  };
964
969
  } & {
965
970
  json: {
966
971
  token: string;
967
- token_type_hint?: "access_token" | "refresh_token" | undefined;
972
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
968
973
  client_id?: string | undefined;
969
974
  client_secret?: string | undefined;
970
975
  };
@@ -1014,7 +1019,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1014
1019
  client_id: string;
1015
1020
  username: string;
1016
1021
  otp: string;
1017
- realm: "email" | "sms";
1022
+ realm: "sms" | "email";
1018
1023
  scope?: string | undefined;
1019
1024
  audience?: string | undefined;
1020
1025
  } | {
@@ -1063,7 +1068,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1063
1068
  client_id: string;
1064
1069
  username: string;
1065
1070
  otp: string;
1066
- realm: "email" | "sms";
1071
+ realm: "sms" | "email";
1067
1072
  scope?: string | undefined;
1068
1073
  audience?: string | undefined;
1069
1074
  } | {
@@ -1117,7 +1122,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1117
1122
  client_id: string;
1118
1123
  username: string;
1119
1124
  otp: string;
1120
- realm: "email" | "sms";
1125
+ realm: "sms" | "email";
1121
1126
  scope?: string | undefined;
1122
1127
  audience?: string | undefined;
1123
1128
  } | {
@@ -1166,7 +1171,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1166
1171
  client_id: string;
1167
1172
  username: string;
1168
1173
  otp: string;
1169
- realm: "email" | "sms";
1174
+ realm: "sms" | "email";
1170
1175
  scope?: string | undefined;
1171
1176
  audience?: string | undefined;
1172
1177
  } | {
@@ -1228,7 +1233,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1228
1233
  client_id: string;
1229
1234
  username: string;
1230
1235
  otp: string;
1231
- realm: "email" | "sms";
1236
+ realm: "sms" | "email";
1232
1237
  scope?: string | undefined;
1233
1238
  audience?: string | undefined;
1234
1239
  } | {
@@ -1277,7 +1282,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1277
1282
  client_id: string;
1278
1283
  username: string;
1279
1284
  otp: string;
1280
- realm: "email" | "sms";
1285
+ realm: "sms" | "email";
1281
1286
  scope?: string | undefined;
1282
1287
  audience?: string | undefined;
1283
1288
  } | {
@@ -1334,7 +1339,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1334
1339
  client_id: string;
1335
1340
  username: string;
1336
1341
  otp: string;
1337
- realm: "email" | "sms";
1342
+ realm: "sms" | "email";
1338
1343
  scope?: string | undefined;
1339
1344
  audience?: string | undefined;
1340
1345
  } | {
@@ -1383,7 +1388,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1383
1388
  client_id: string;
1384
1389
  username: string;
1385
1390
  otp: string;
1386
- realm: "email" | "sms";
1391
+ realm: "sms" | "email";
1387
1392
  scope?: string | undefined;
1388
1393
  audience?: string | undefined;
1389
1394
  } | {
@@ -1440,7 +1445,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1440
1445
  client_id: string;
1441
1446
  username: string;
1442
1447
  otp: string;
1443
- realm: "email" | "sms";
1448
+ realm: "sms" | "email";
1444
1449
  scope?: string | undefined;
1445
1450
  audience?: string | undefined;
1446
1451
  } | {
@@ -1489,7 +1494,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1489
1494
  client_id: string;
1490
1495
  username: string;
1491
1496
  otp: string;
1492
- realm: "email" | "sms";
1497
+ realm: "sms" | "email";
1493
1498
  scope?: string | undefined;
1494
1499
  audience?: string | undefined;
1495
1500
  } | {
package/dist/types/routes/auth-api/passwordless.d.ts CHANGED
@@ -16,17 +16,17 @@ export declare const passwordlessRoutes: OpenAPIHono<{
16
16
  authParams: {
17
17
  username?: string | undefined;
18
18
  state?: string | undefined;
19
- audience?: string | undefined;
19
+ act_as?: string | undefined;
20
20
  response_type?: AuthorizationResponseType | undefined;
21
21
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
22
- scope?: string | undefined;
23
- organization?: string | undefined;
24
22
  redirect_uri?: string | undefined;
25
- code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
26
- code_challenge?: string | undefined;
23
+ audience?: string | undefined;
24
+ organization?: string | undefined;
27
25
  nonce?: string | undefined;
28
- act_as?: string | undefined;
26
+ scope?: string | undefined;
29
27
  prompt?: string | undefined;
28
+ code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
29
+ code_challenge?: string | undefined;
30
30
  ui_locales?: string | undefined;
31
31
  max_age?: number | undefined;
32
32
  acr_values?: string | undefined;
@@ -52,17 +52,17 @@ export declare const passwordlessRoutes: OpenAPIHono<{
52
52
  authParams: {
53
53
  username?: string | undefined;
54
54
  state?: string | undefined;
55
- audience?: string | undefined;
55
+ act_as?: string | undefined;
56
56
  response_type?: AuthorizationResponseType | undefined;
57
57
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
58
- scope?: string | undefined;
59
- organization?: string | undefined;
60
58
  redirect_uri?: string | undefined;
61
- code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
62
- code_challenge?: string | undefined;
59
+ audience?: string | undefined;
60
+ organization?: string | undefined;
63
61
  nonce?: string | undefined;
64
- act_as?: string | undefined;
62
+ scope?: string | undefined;
65
63
  prompt?: string | undefined;
64
+ code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
65
+ code_challenge?: string | undefined;
66
66
  ui_locales?: string | undefined;
67
67
  max_age?: number | undefined;
68
68
  acr_values?: string | undefined;
package/dist/types/routes/auth-api/register/index.d.ts CHANGED
@@ -18,7 +18,7 @@ export declare const registerRoutes: OpenAPIHono<{
18
18
  scope?: string | undefined;
19
19
  grant_types?: string[] | undefined;
20
20
  response_types?: string[] | undefined;
21
- token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
21
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
22
22
  jwks_uri?: string | undefined;
23
23
  jwks?: Record<string, unknown> | undefined;
24
24
  software_id?: string | undefined;
@@ -107,7 +107,7 @@ export declare const registerRoutes: OpenAPIHono<{
107
107
  scope?: string | undefined;
108
108
  grant_types?: string[] | undefined;
109
109
  response_types?: string[] | undefined;
110
- token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
110
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
111
111
  jwks_uri?: string | undefined;
112
112
  jwks?: Record<string, unknown> | undefined;
113
113
  software_id?: string | undefined;
package/dist/types/routes/auth-api/revoke.d.ts CHANGED
@@ -9,14 +9,14 @@ export declare const revokeRoutes: OpenAPIHono<{
9
9
  input: {
10
10
  form: {
11
11
  token: string;
12
- token_type_hint?: "access_token" | "refresh_token" | undefined;
12
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
13
13
  client_id?: string | undefined;
14
14
  client_secret?: string | undefined;
15
15
  };
16
16
  } & {
17
17
  json: {
18
18
  token: string;
19
- token_type_hint?: "access_token" | "refresh_token" | undefined;
19
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
20
20
  client_id?: string | undefined;
21
21
  client_secret?: string | undefined;
22
22
  };
@@ -28,14 +28,14 @@ export declare const revokeRoutes: OpenAPIHono<{
28
28
  input: {
29
29
  form: {
30
30
  token: string;
31
- token_type_hint?: "access_token" | "refresh_token" | undefined;
31
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
32
32
  client_id?: string | undefined;
33
33
  client_secret?: string | undefined;
34
34
  };
35
35
  } & {
36
36
  json: {
37
37
  token: string;
38
- token_type_hint?: "access_token" | "refresh_token" | undefined;
38
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
39
39
  client_id?: string | undefined;
40
40
  client_secret?: string | undefined;
41
41
  };
@@ -50,14 +50,14 @@ export declare const revokeRoutes: OpenAPIHono<{
50
50
  input: {
51
51
  form: {
52
52
  token: string;
53
- token_type_hint?: "access_token" | "refresh_token" | undefined;
53
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
54
54
  client_id?: string | undefined;
55
55
  client_secret?: string | undefined;
56
56
  };
57
57
  } & {
58
58
  json: {
59
59
  token: string;
60
- token_type_hint?: "access_token" | "refresh_token" | undefined;
60
+ token_type_hint?: "refresh_token" | "access_token" | undefined;
61
61
  client_id?: string | undefined;
62
62
  client_secret?: string | undefined;
63
63
  };
package/dist/types/routes/auth-api/token.d.ts CHANGED
@@ -40,7 +40,7 @@ export declare const tokenRoutes: OpenAPIHono<{
40
40
  client_id: string;
41
41
  username: string;
42
42
  otp: string;
43
- realm: "email" | "sms";
43
+ realm: "sms" | "email";
44
44
  scope?: string | undefined;
45
45
  audience?: string | undefined;
46
46
  } | {
@@ -89,7 +89,7 @@ export declare const tokenRoutes: OpenAPIHono<{
89
89
  client_id: string;
90
90
  username: string;
91
91
  otp: string;
92
- realm: "email" | "sms";
92
+ realm: "sms" | "email";
93
93
  scope?: string | undefined;
94
94
  audience?: string | undefined;
95
95
  } | {
@@ -143,7 +143,7 @@ export declare const tokenRoutes: OpenAPIHono<{
143
143
  client_id: string;
144
144
  username: string;
145
145
  otp: string;
146
- realm: "email" | "sms";
146
+ realm: "sms" | "email";
147
147
  scope?: string | undefined;
148
148
  audience?: string | undefined;
149
149
  } | {
@@ -192,7 +192,7 @@ export declare const tokenRoutes: OpenAPIHono<{
192
192
  client_id: string;
193
193
  username: string;
194
194
  otp: string;
195
- realm: "email" | "sms";
195
+ realm: "sms" | "email";
196
196
  scope?: string | undefined;
197
197
  audience?: string | undefined;
198
198
  } | {
@@ -254,7 +254,7 @@ export declare const tokenRoutes: OpenAPIHono<{
254
254
  client_id: string;
255
255
  username: string;
256
256
  otp: string;
257
- realm: "email" | "sms";
257
+ realm: "sms" | "email";
258
258
  scope?: string | undefined;
259
259
  audience?: string | undefined;
260
260
  } | {
@@ -303,7 +303,7 @@ export declare const tokenRoutes: OpenAPIHono<{
303
303
  client_id: string;
304
304
  username: string;
305
305
  otp: string;
306
- realm: "email" | "sms";
306
+ realm: "sms" | "email";
307
307
  scope?: string | undefined;
308
308
  audience?: string | undefined;
309
309
  } | {
@@ -360,7 +360,7 @@ export declare const tokenRoutes: OpenAPIHono<{
360
360
  client_id: string;
361
361
  username: string;
362
362
  otp: string;
363
- realm: "email" | "sms";
363
+ realm: "sms" | "email";
364
364
  scope?: string | undefined;
365
365
  audience?: string | undefined;
366
366
  } | {
@@ -409,7 +409,7 @@ export declare const tokenRoutes: OpenAPIHono<{
409
409
  client_id: string;
410
410
  username: string;
411
411
  otp: string;
412
- realm: "email" | "sms";
412
+ realm: "sms" | "email";
413
413
  scope?: string | undefined;
414
414
  audience?: string | undefined;
415
415
  } | {
@@ -466,7 +466,7 @@ export declare const tokenRoutes: OpenAPIHono<{
466
466
  client_id: string;
467
467
  username: string;
468
468
  otp: string;
469
- realm: "email" | "sms";
469
+ realm: "sms" | "email";
470
470
  scope?: string | undefined;
471
471
  audience?: string | undefined;
472
472
  } | {
@@ -515,7 +515,7 @@ export declare const tokenRoutes: OpenAPIHono<{
515
515
  client_id: string;
516
516
  username: string;
517
517
  otp: string;
518
- realm: "email" | "sms";
518
+ realm: "sms" | "email";
519
519
  scope?: string | undefined;
520
520
  audience?: string | undefined;
521
521
  } | {
package/dist/types/routes/management-api/action-executions.d.ts CHANGED
@@ -78,7 +78,7 @@ export declare const actionExecutionsRoutes: OpenAPIHono<{
78
78
  logs: {
79
79
  action_name: string;
80
80
  lines: {
81
- level: "error" | "log" | "info" | "warn" | "debug";
81
+ level: "log" | "error" | "info" | "warn" | "debug";
82
82
  message: string;
83
83
  }[];
84
84
  }[];
package/dist/types/routes/management-api/actions.d.ts CHANGED
@@ -656,7 +656,7 @@ export declare const actionsRoutes: OpenAPIHono<{
656
656
  args: import("hono/utils/types").JSONValue[];
657
657
  }[];
658
658
  logs: {
659
- level: "error" | "log" | "info" | "warn" | "debug";
659
+ level: "log" | "error" | "info" | "warn" | "debug";
660
660
  message: string;
661
661
  }[];
662
662
  error?: string | undefined;
package/dist/types/routes/management-api/authentication-methods.d.ts CHANGED
@@ -37,7 +37,7 @@ export declare const authenticationMethodsRoutes: OpenAPIHono<{
37
37
  };
38
38
  } & {
39
39
  json: {
40
- type: "email" | "totp" | "phone" | "push" | "passkey" | "webauthn-roaming" | "webauthn-platform";
40
+ type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
41
41
  phone_number?: string | undefined;
42
42
  totp_secret?: string | undefined;
43
43
  credential_id?: string | undefined;
package/dist/types/routes/management-api/branding.d.ts CHANGED
@@ -78,7 +78,7 @@ export declare const brandingRoutes: OpenAPIHono<{
78
78
  background_color: string;
79
79
  background_image_url: string;
80
80
  page_layout: "center" | "left" | "right";
81
- logo_placement?: "widget" | "chip" | "none" | undefined;
81
+ logo_placement?: "none" | "widget" | "chip" | undefined;
82
82
  };
83
83
  widget: {
84
84
  header_text_alignment: "center" | "left" | "right";
@@ -168,7 +168,7 @@ export declare const brandingRoutes: OpenAPIHono<{
168
168
  background_color: string;
169
169
  background_image_url: string;
170
170
  page_layout: "center" | "left" | "right";
171
- logo_placement?: "widget" | "chip" | "none" | undefined;
171
+ logo_placement?: "none" | "widget" | "chip" | undefined;
172
172
  };
173
173
  widget: {
174
174
  header_text_alignment: "center" | "left" | "right";
@@ -247,7 +247,7 @@ export declare const brandingRoutes: OpenAPIHono<{
247
247
  background_color: string;
248
248
  background_image_url: string;
249
249
  page_layout: "center" | "left" | "right";
250
- logo_placement?: "widget" | "chip" | "none" | undefined;
250
+ logo_placement?: "none" | "widget" | "chip" | undefined;
251
251
  };
252
252
  widget: {
253
253
  header_text_alignment: "center" | "left" | "right";
@@ -409,7 +409,7 @@ export declare const brandingRoutes: OpenAPIHono<{
409
409
  } & {
410
410
  json: {
411
411
  body?: string | undefined;
412
- screen?: "password" | "login" | "identifier" | "signup" | undefined;
412
+ screen?: "identifier" | "signup" | "password" | "login" | undefined;
413
413
  branding?: {
414
414
  colors?: {
415
415
  primary: string;
@@ -495,7 +495,7 @@ export declare const brandingRoutes: OpenAPIHono<{
495
495
  background_color: string;
496
496
  background_image_url: string;
497
497
  page_layout: "center" | "left" | "right";
498
- logo_placement?: "widget" | "chip" | "none" | undefined;
498
+ logo_placement?: "none" | "widget" | "chip" | undefined;
499
499
  } | undefined;
500
500
  widget?: {
501
501
  header_text_alignment: "center" | "left" | "right";