authhero 9.13.0 → 9.14.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (46) hide show
  1. package/dist/authhero.cjs +138 -138
  2. package/dist/authhero.d.ts +146 -116
  3. package/dist/authhero.mjs +18761 -18695
  4. package/dist/tsconfig.types.tsbuildinfo +1 -1
  5. package/dist/types/authentication-flows/passwordless.d.ts +3 -3
  6. package/dist/types/emails/index.d.ts +8 -9
  7. package/dist/types/emails/render.d.ts +2 -6
  8. package/dist/types/helpers/connection.d.ts +2 -6
  9. package/dist/types/helpers/logging.d.ts +2 -5
  10. package/dist/types/helpers/reserved-claims.d.ts +4 -8
  11. package/dist/types/helpers/service-token.d.ts +2 -5
  12. package/dist/types/helpers/wait-until.d.ts +3 -1
  13. package/dist/types/index.d.ts +110 -110
  14. package/dist/types/middlewares/apply-config.d.ts +8 -0
  15. package/dist/types/middlewares/client-info.d.ts +27 -1
  16. package/dist/types/routes/auth-api/index.d.ts +43 -43
  17. package/dist/types/routes/auth-api/passwordless.d.ts +10 -10
  18. package/dist/types/routes/auth-api/register/index.d.ts +2 -2
  19. package/dist/types/routes/auth-api/revoke.d.ts +8 -8
  20. package/dist/types/routes/auth-api/token.d.ts +22 -22
  21. package/dist/types/routes/auth-api/well-known.d.ts +1 -1
  22. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  23. package/dist/types/routes/management-api/actions.d.ts +1 -1
  24. package/dist/types/routes/management-api/clients.d.ts +8 -8
  25. package/dist/types/routes/management-api/custom-domains.d.ts +6 -6
  26. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  27. package/dist/types/routes/management-api/failed-events.d.ts +1 -1
  28. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  29. package/dist/types/routes/management-api/index.d.ts +66 -66
  30. package/dist/types/routes/management-api/keys.d.ts +4 -4
  31. package/dist/types/routes/management-api/logs.d.ts +4 -4
  32. package/dist/types/routes/management-api/organizations.d.ts +2 -2
  33. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  34. package/dist/types/routes/management-api/roles.d.ts +1 -1
  35. package/dist/types/routes/management-api/tenants.d.ts +1 -1
  36. package/dist/types/routes/management-api/users.d.ts +11 -11
  37. package/dist/types/routes/proxy-control-plane/tenant-members.d.ts +9 -2
  38. package/dist/types/routes/proxy-control-plane/verify.d.ts +15 -0
  39. package/dist/types/routes/universal-login/flow-api.d.ts +4 -4
  40. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  41. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  42. package/dist/types/tenant-members/local-backend.d.ts +11 -3
  43. package/dist/types/types/RequestContext.d.ts +16 -0
  44. package/dist/types/types/index.d.ts +1 -0
  45. package/dist/types/utils/jwks.d.ts +2 -2
  46. package/package.json +5 -5
package/dist/types/middlewares/apply-config.d.ts CHANGED
@@ -7,6 +7,14 @@ import { AuthHeroConfig, Bindings, Variables } from "../types";
7
7
  * Applied both in the outer `init()` app and in each sub-app's middleware
8
8
  * chain so that serving a sub-app (oauthApp, managementApp, ...) directly —
9
9
  * without routing through the outer app — still sees the config.
10
+ *
11
+ * `ctx.env` is replaced with a shallow copy before anything is written to it.
12
+ * On Cloudflare Workers the runtime hands every request in an isolate the SAME
13
+ * `env` object, and the routes store per-request state on it (`ctx.env.data =
14
+ * composeAuthData({ ctx, ... })`). Writing to the shared object let concurrent
15
+ * requests overwrite each other's adapter stack, so one request awaited
16
+ * another request's in-flight promises — which the runtime cancels as a hung
17
+ * Worker once the owning request ends.
10
18
  */
11
19
  export declare function applyConfigMiddleware(config: AuthHeroConfig): MiddlewareHandler<{
12
20
  Bindings: Bindings;
package/dist/types/middlewares/client-info.d.ts CHANGED
@@ -1,5 +1,31 @@
1
- import { MiddlewareHandler } from "hono";
1
+ import { Context, MiddlewareHandler } from "hono";
2
2
  import { Variables } from "../types/Variables";
3
+ /**
4
+ * Derive the client IP from the least forgeable header available.
5
+ *
6
+ * `X-Forwarded-For` arrives carrying whatever prefix the caller chose to send:
7
+ * `@authhero/proxy` appends the hop it verified to the end of the inbound
8
+ * chain and leaves the rest intact, so the leading entries are the client's
9
+ * own claim. Reading the first one handed a caller full control of
10
+ * `ctx.var.ip`, which keys the pre-login rate limiter (and its allowlist) and
11
+ * the passwordless IP check. Order of trust instead:
12
+ *
13
+ * 1. `CF-Connecting-IP`, unless it holds one of Cloudflare's own addresses.
14
+ * The edge overwrites it on ingress, so on a direct hit it is
15
+ * authoritative. When a Worker is reached worker-to-worker — our proxy's
16
+ * service binding to this app — the runtime replaces it with the loopback
17
+ * source, which is why a Cloudflare-owned value falls through instead of
18
+ * being laundered as a visitor.
19
+ * 2. `X-Real-IP`, which `@authhero/proxy` overwrites with the hop it verified.
20
+ * Only reachable when (1) is absent or Cloudflare-owned — off the edge, or
21
+ * behind our own proxy — so a caller on the edge cannot reach this branch
22
+ * by sending the header itself.
23
+ * 3. The *last* `X-Forwarded-For` entry: the hop appended by the nearest
24
+ * proxy, rather than the first, which anyone can set.
25
+ */
26
+ export declare function getClientIp(c: Context<{
27
+ Variables: Variables;
28
+ }>): string | undefined;
3
29
  /**
4
30
  * Middleware that extracts client information from the request and stores it in context variables
5
31
  */
package/dist/types/routes/auth-api/index.d.ts CHANGED
@@ -301,7 +301,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
301
301
  scope?: string | undefined;
302
302
  grant_types?: string[] | undefined;
303
303
  response_types?: string[] | undefined;
304
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
304
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
305
305
  jwks_uri?: string | undefined;
306
306
  jwks?: Record<string, unknown> | undefined;
307
307
  software_id?: string | undefined;
@@ -390,7 +390,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
390
390
  scope?: string | undefined;
391
391
  grant_types?: string[] | undefined;
392
392
  response_types?: string[] | undefined;
393
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
393
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
394
394
  jwks_uri?: string | undefined;
395
395
  jwks?: Record<string, unknown> | undefined;
396
396
  software_id?: string | undefined;
@@ -741,16 +741,16 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
741
741
  email: string;
742
742
  send: "code" | "link";
743
743
  authParams: {
744
- username?: string | undefined;
744
+ scope?: string | undefined;
745
745
  state?: string | undefined;
746
- act_as?: string | undefined;
746
+ username?: string | undefined;
747
747
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
748
748
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
749
- redirect_uri?: string | undefined;
750
749
  audience?: string | undefined;
751
- organization?: string | undefined;
750
+ redirect_uri?: string | undefined;
752
751
  nonce?: string | undefined;
753
- scope?: string | undefined;
752
+ act_as?: string | undefined;
753
+ organization?: string | undefined;
754
754
  prompt?: string | undefined;
755
755
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
756
756
  code_challenge?: string | undefined;
@@ -777,16 +777,16 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
777
777
  phone_number: string;
778
778
  send: "code" | "link";
779
779
  authParams: {
780
- username?: string | undefined;
780
+ scope?: string | undefined;
781
781
  state?: string | undefined;
782
- act_as?: string | undefined;
782
+ username?: string | undefined;
783
783
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
784
784
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
785
- redirect_uri?: string | undefined;
786
785
  audience?: string | undefined;
787
- organization?: string | undefined;
786
+ redirect_uri?: string | undefined;
788
787
  nonce?: string | undefined;
789
- scope?: string | undefined;
788
+ act_as?: string | undefined;
789
+ organization?: string | undefined;
790
790
  prompt?: string | undefined;
791
791
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
792
792
  code_challenge?: string | undefined;
@@ -921,14 +921,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
921
921
  input: {
922
922
  form: {
923
923
  token: string;
924
- token_type_hint?: "refresh_token" | "access_token" | undefined;
924
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
925
925
  client_id?: string | undefined;
926
926
  client_secret?: string | undefined;
927
927
  };
928
928
  } & {
929
929
  json: {
930
930
  token: string;
931
- token_type_hint?: "refresh_token" | "access_token" | undefined;
931
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
932
932
  client_id?: string | undefined;
933
933
  client_secret?: string | undefined;
934
934
  };
@@ -940,14 +940,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
940
940
  input: {
941
941
  form: {
942
942
  token: string;
943
- token_type_hint?: "refresh_token" | "access_token" | undefined;
943
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
944
944
  client_id?: string | undefined;
945
945
  client_secret?: string | undefined;
946
946
  };
947
947
  } & {
948
948
  json: {
949
949
  token: string;
950
- token_type_hint?: "refresh_token" | "access_token" | undefined;
950
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
951
951
  client_id?: string | undefined;
952
952
  client_secret?: string | undefined;
953
953
  };
@@ -957,19 +957,19 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
957
957
  error_description?: string | undefined;
958
958
  };
959
959
  outputFormat: "json";
960
- status: 400;
960
+ status: 401;
961
961
  } | {
962
962
  input: {
963
963
  form: {
964
964
  token: string;
965
- token_type_hint?: "refresh_token" | "access_token" | undefined;
965
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
966
966
  client_id?: string | undefined;
967
967
  client_secret?: string | undefined;
968
968
  };
969
969
  } & {
970
970
  json: {
971
971
  token: string;
972
- token_type_hint?: "refresh_token" | "access_token" | undefined;
972
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
973
973
  client_id?: string | undefined;
974
974
  client_secret?: string | undefined;
975
975
  };
@@ -979,7 +979,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
979
979
  error_description?: string | undefined;
980
980
  };
981
981
  outputFormat: "json";
982
- status: 401;
982
+ status: 400;
983
983
  };
984
984
  };
985
985
  }, "/oauth/revoke"> & import("hono/types").MergeSchemaPath<{
@@ -1019,7 +1019,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1019
1019
  client_id: string;
1020
1020
  username: string;
1021
1021
  otp: string;
1022
- realm: "sms" | "email";
1022
+ realm: "email" | "sms";
1023
1023
  scope?: string | undefined;
1024
1024
  audience?: string | undefined;
1025
1025
  } | {
@@ -1068,7 +1068,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1068
1068
  client_id: string;
1069
1069
  username: string;
1070
1070
  otp: string;
1071
- realm: "sms" | "email";
1071
+ realm: "email" | "sms";
1072
1072
  scope?: string | undefined;
1073
1073
  audience?: string | undefined;
1074
1074
  } | {
@@ -1122,7 +1122,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1122
1122
  client_id: string;
1123
1123
  username: string;
1124
1124
  otp: string;
1125
- realm: "sms" | "email";
1125
+ realm: "email" | "sms";
1126
1126
  scope?: string | undefined;
1127
1127
  audience?: string | undefined;
1128
1128
  } | {
@@ -1171,7 +1171,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1171
1171
  client_id: string;
1172
1172
  username: string;
1173
1173
  otp: string;
1174
- realm: "sms" | "email";
1174
+ realm: "email" | "sms";
1175
1175
  scope?: string | undefined;
1176
1176
  audience?: string | undefined;
1177
1177
  } | {
@@ -1188,16 +1188,11 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1188
1188
  };
1189
1189
  };
1190
1190
  output: {
1191
- access_token: string;
1192
- token_type: string;
1193
- expires_in: number;
1194
- id_token?: string | undefined;
1195
- scope?: string | undefined;
1196
- state?: string | undefined;
1197
- refresh_token?: string | undefined;
1191
+ error: string;
1192
+ error_description?: string | undefined;
1198
1193
  };
1199
1194
  outputFormat: "json";
1200
- status: 200;
1195
+ status: 401;
1201
1196
  } | {
1202
1197
  input: {
1203
1198
  form: {
@@ -1233,7 +1228,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1233
1228
  client_id: string;
1234
1229
  username: string;
1235
1230
  otp: string;
1236
- realm: "sms" | "email";
1231
+ realm: "email" | "sms";
1237
1232
  scope?: string | undefined;
1238
1233
  audience?: string | undefined;
1239
1234
  } | {
@@ -1282,7 +1277,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1282
1277
  client_id: string;
1283
1278
  username: string;
1284
1279
  otp: string;
1285
- realm: "sms" | "email";
1280
+ realm: "email" | "sms";
1286
1281
  scope?: string | undefined;
1287
1282
  audience?: string | undefined;
1288
1283
  } | {
@@ -1299,11 +1294,16 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1299
1294
  };
1300
1295
  };
1301
1296
  output: {
1302
- error: string;
1303
- error_description?: string | undefined;
1297
+ access_token: string;
1298
+ token_type: string;
1299
+ expires_in: number;
1300
+ id_token?: string | undefined;
1301
+ scope?: string | undefined;
1302
+ state?: string | undefined;
1303
+ refresh_token?: string | undefined;
1304
1304
  };
1305
1305
  outputFormat: "json";
1306
- status: 400;
1306
+ status: 200;
1307
1307
  } | {
1308
1308
  input: {
1309
1309
  form: {
@@ -1339,7 +1339,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1339
1339
  client_id: string;
1340
1340
  username: string;
1341
1341
  otp: string;
1342
- realm: "sms" | "email";
1342
+ realm: "email" | "sms";
1343
1343
  scope?: string | undefined;
1344
1344
  audience?: string | undefined;
1345
1345
  } | {
@@ -1388,7 +1388,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1388
1388
  client_id: string;
1389
1389
  username: string;
1390
1390
  otp: string;
1391
- realm: "sms" | "email";
1391
+ realm: "email" | "sms";
1392
1392
  scope?: string | undefined;
1393
1393
  audience?: string | undefined;
1394
1394
  } | {
@@ -1409,7 +1409,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1409
1409
  error_description?: string | undefined;
1410
1410
  };
1411
1411
  outputFormat: "json";
1412
- status: 401;
1412
+ status: 400;
1413
1413
  } | {
1414
1414
  input: {
1415
1415
  form: {
@@ -1445,7 +1445,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1445
1445
  client_id: string;
1446
1446
  username: string;
1447
1447
  otp: string;
1448
- realm: "sms" | "email";
1448
+ realm: "email" | "sms";
1449
1449
  scope?: string | undefined;
1450
1450
  audience?: string | undefined;
1451
1451
  } | {
@@ -1494,7 +1494,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1494
1494
  client_id: string;
1495
1495
  username: string;
1496
1496
  otp: string;
1497
- realm: "sms" | "email";
1497
+ realm: "email" | "sms";
1498
1498
  scope?: string | undefined;
1499
1499
  audience?: string | undefined;
1500
1500
  } | {
@@ -1525,7 +1525,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1525
1525
  output: {
1526
1526
  keys: {
1527
1527
  alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
1528
- kty: "EC" | "RSA" | "oct";
1528
+ kty: "RSA" | "EC" | "oct";
1529
1529
  kid?: string | undefined;
1530
1530
  use?: "sig" | "enc" | undefined;
1531
1531
  n?: string | undefined;
package/dist/types/routes/auth-api/passwordless.d.ts CHANGED
@@ -14,16 +14,16 @@ export declare const passwordlessRoutes: OpenAPIHono<{
14
14
  email: string;
15
15
  send: "code" | "link";
16
16
  authParams: {
17
- username?: string | undefined;
17
+ scope?: string | undefined;
18
18
  state?: string | undefined;
19
- act_as?: string | undefined;
19
+ username?: string | undefined;
20
20
  response_type?: AuthorizationResponseType | undefined;
21
21
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
22
- redirect_uri?: string | undefined;
23
22
  audience?: string | undefined;
24
- organization?: string | undefined;
23
+ redirect_uri?: string | undefined;
25
24
  nonce?: string | undefined;
26
- scope?: string | undefined;
25
+ act_as?: string | undefined;
26
+ organization?: string | undefined;
27
27
  prompt?: string | undefined;
28
28
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
29
29
  code_challenge?: string | undefined;
@@ -50,16 +50,16 @@ export declare const passwordlessRoutes: OpenAPIHono<{
50
50
  phone_number: string;
51
51
  send: "code" | "link";
52
52
  authParams: {
53
- username?: string | undefined;
53
+ scope?: string | undefined;
54
54
  state?: string | undefined;
55
- act_as?: string | undefined;
55
+ username?: string | undefined;
56
56
  response_type?: AuthorizationResponseType | undefined;
57
57
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
58
- redirect_uri?: string | undefined;
59
58
  audience?: string | undefined;
60
- organization?: string | undefined;
59
+ redirect_uri?: string | undefined;
61
60
  nonce?: string | undefined;
62
- scope?: string | undefined;
61
+ act_as?: string | undefined;
62
+ organization?: string | undefined;
63
63
  prompt?: string | undefined;
64
64
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
65
65
  code_challenge?: string | undefined;
package/dist/types/routes/auth-api/register/index.d.ts CHANGED
@@ -18,7 +18,7 @@ export declare const registerRoutes: OpenAPIHono<{
18
18
  scope?: string | undefined;
19
19
  grant_types?: string[] | undefined;
20
20
  response_types?: string[] | undefined;
21
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
21
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
22
22
  jwks_uri?: string | undefined;
23
23
  jwks?: Record<string, unknown> | undefined;
24
24
  software_id?: string | undefined;
@@ -107,7 +107,7 @@ export declare const registerRoutes: OpenAPIHono<{
107
107
  scope?: string | undefined;
108
108
  grant_types?: string[] | undefined;
109
109
  response_types?: string[] | undefined;
110
- token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
110
+ token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
111
111
  jwks_uri?: string | undefined;
112
112
  jwks?: Record<string, unknown> | undefined;
113
113
  software_id?: string | undefined;
package/dist/types/routes/auth-api/revoke.d.ts CHANGED
@@ -9,14 +9,14 @@ export declare const revokeRoutes: OpenAPIHono<{
9
9
  input: {
10
10
  form: {
11
11
  token: string;
12
- token_type_hint?: "refresh_token" | "access_token" | undefined;
12
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
13
13
  client_id?: string | undefined;
14
14
  client_secret?: string | undefined;
15
15
  };
16
16
  } & {
17
17
  json: {
18
18
  token: string;
19
- token_type_hint?: "refresh_token" | "access_token" | undefined;
19
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
20
20
  client_id?: string | undefined;
21
21
  client_secret?: string | undefined;
22
22
  };
@@ -28,14 +28,14 @@ export declare const revokeRoutes: OpenAPIHono<{
28
28
  input: {
29
29
  form: {
30
30
  token: string;
31
- token_type_hint?: "refresh_token" | "access_token" | undefined;
31
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
32
32
  client_id?: string | undefined;
33
33
  client_secret?: string | undefined;
34
34
  };
35
35
  } & {
36
36
  json: {
37
37
  token: string;
38
- token_type_hint?: "refresh_token" | "access_token" | undefined;
38
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
39
39
  client_id?: string | undefined;
40
40
  client_secret?: string | undefined;
41
41
  };
@@ -45,19 +45,19 @@ export declare const revokeRoutes: OpenAPIHono<{
45
45
  error_description?: string | undefined;
46
46
  };
47
47
  outputFormat: "json";
48
- status: 400;
48
+ status: 401;
49
49
  } | {
50
50
  input: {
51
51
  form: {
52
52
  token: string;
53
- token_type_hint?: "refresh_token" | "access_token" | undefined;
53
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
54
54
  client_id?: string | undefined;
55
55
  client_secret?: string | undefined;
56
56
  };
57
57
  } & {
58
58
  json: {
59
59
  token: string;
60
- token_type_hint?: "refresh_token" | "access_token" | undefined;
60
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
61
61
  client_id?: string | undefined;
62
62
  client_secret?: string | undefined;
63
63
  };
@@ -67,7 +67,7 @@ export declare const revokeRoutes: OpenAPIHono<{
67
67
  error_description?: string | undefined;
68
68
  };
69
69
  outputFormat: "json";
70
- status: 401;
70
+ status: 400;
71
71
  };
72
72
  };
73
73
  }, "/">;
package/dist/types/routes/auth-api/token.d.ts CHANGED
@@ -40,7 +40,7 @@ export declare const tokenRoutes: OpenAPIHono<{
40
40
  client_id: string;
41
41
  username: string;
42
42
  otp: string;
43
- realm: "sms" | "email";
43
+ realm: "email" | "sms";
44
44
  scope?: string | undefined;
45
45
  audience?: string | undefined;
46
46
  } | {
@@ -89,7 +89,7 @@ export declare const tokenRoutes: OpenAPIHono<{
89
89
  client_id: string;
90
90
  username: string;
91
91
  otp: string;
92
- realm: "sms" | "email";
92
+ realm: "email" | "sms";
93
93
  scope?: string | undefined;
94
94
  audience?: string | undefined;
95
95
  } | {
@@ -143,7 +143,7 @@ export declare const tokenRoutes: OpenAPIHono<{
143
143
  client_id: string;
144
144
  username: string;
145
145
  otp: string;
146
- realm: "sms" | "email";
146
+ realm: "email" | "sms";
147
147
  scope?: string | undefined;
148
148
  audience?: string | undefined;
149
149
  } | {
@@ -192,7 +192,7 @@ export declare const tokenRoutes: OpenAPIHono<{
192
192
  client_id: string;
193
193
  username: string;
194
194
  otp: string;
195
- realm: "sms" | "email";
195
+ realm: "email" | "sms";
196
196
  scope?: string | undefined;
197
197
  audience?: string | undefined;
198
198
  } | {
@@ -209,16 +209,11 @@ export declare const tokenRoutes: OpenAPIHono<{
209
209
  };
210
210
  };
211
211
  output: {
212
- access_token: string;
213
- token_type: string;
214
- expires_in: number;
215
- id_token?: string | undefined;
216
- scope?: string | undefined;
217
- state?: string | undefined;
218
- refresh_token?: string | undefined;
212
+ error: string;
213
+ error_description?: string | undefined;
219
214
  };
220
215
  outputFormat: "json";
221
- status: 200;
216
+ status: 401;
222
217
  } | {
223
218
  input: {
224
219
  form: {
@@ -254,7 +249,7 @@ export declare const tokenRoutes: OpenAPIHono<{
254
249
  client_id: string;
255
250
  username: string;
256
251
  otp: string;
257
- realm: "sms" | "email";
252
+ realm: "email" | "sms";
258
253
  scope?: string | undefined;
259
254
  audience?: string | undefined;
260
255
  } | {
@@ -303,7 +298,7 @@ export declare const tokenRoutes: OpenAPIHono<{
303
298
  client_id: string;
304
299
  username: string;
305
300
  otp: string;
306
- realm: "sms" | "email";
301
+ realm: "email" | "sms";
307
302
  scope?: string | undefined;
308
303
  audience?: string | undefined;
309
304
  } | {
@@ -320,11 +315,16 @@ export declare const tokenRoutes: OpenAPIHono<{
320
315
  };
321
316
  };
322
317
  output: {
323
- error: string;
324
- error_description?: string | undefined;
318
+ access_token: string;
319
+ token_type: string;
320
+ expires_in: number;
321
+ id_token?: string | undefined;
322
+ scope?: string | undefined;
323
+ state?: string | undefined;
324
+ refresh_token?: string | undefined;
325
325
  };
326
326
  outputFormat: "json";
327
- status: 400;
327
+ status: 200;
328
328
  } | {
329
329
  input: {
330
330
  form: {
@@ -360,7 +360,7 @@ export declare const tokenRoutes: OpenAPIHono<{
360
360
  client_id: string;
361
361
  username: string;
362
362
  otp: string;
363
- realm: "sms" | "email";
363
+ realm: "email" | "sms";
364
364
  scope?: string | undefined;
365
365
  audience?: string | undefined;
366
366
  } | {
@@ -409,7 +409,7 @@ export declare const tokenRoutes: OpenAPIHono<{
409
409
  client_id: string;
410
410
  username: string;
411
411
  otp: string;
412
- realm: "sms" | "email";
412
+ realm: "email" | "sms";
413
413
  scope?: string | undefined;
414
414
  audience?: string | undefined;
415
415
  } | {
@@ -430,7 +430,7 @@ export declare const tokenRoutes: OpenAPIHono<{
430
430
  error_description?: string | undefined;
431
431
  };
432
432
  outputFormat: "json";
433
- status: 401;
433
+ status: 400;
434
434
  } | {
435
435
  input: {
436
436
  form: {
@@ -466,7 +466,7 @@ export declare const tokenRoutes: OpenAPIHono<{
466
466
  client_id: string;
467
467
  username: string;
468
468
  otp: string;
469
- realm: "sms" | "email";
469
+ realm: "email" | "sms";
470
470
  scope?: string | undefined;
471
471
  audience?: string | undefined;
472
472
  } | {
@@ -515,7 +515,7 @@ export declare const tokenRoutes: OpenAPIHono<{
515
515
  client_id: string;
516
516
  username: string;
517
517
  otp: string;
518
- realm: "sms" | "email";
518
+ realm: "email" | "sms";
519
519
  scope?: string | undefined;
520
520
  audience?: string | undefined;
521
521
  } | {
package/dist/types/routes/auth-api/well-known.d.ts CHANGED
@@ -9,7 +9,7 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<{
9
9
  output: {
10
10
  keys: {
11
11
  alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
12
- kty: "EC" | "RSA" | "oct";
12
+ kty: "RSA" | "EC" | "oct";
13
13
  kid?: string | undefined;
14
14
  use?: "sig" | "enc" | undefined;
15
15
  n?: string | undefined;
package/dist/types/routes/management-api/action-executions.d.ts CHANGED
@@ -78,7 +78,7 @@ export declare const actionExecutionsRoutes: OpenAPIHono<{
78
78
  logs: {
79
79
  action_name: string;
80
80
  lines: {
81
- level: "log" | "error" | "info" | "warn" | "debug";
81
+ level: "error" | "log" | "debug" | "info" | "warn";
82
82
  message: string;
83
83
  }[];
84
84
  }[];
package/dist/types/routes/management-api/actions.d.ts CHANGED
@@ -656,7 +656,7 @@ export declare const actionsRoutes: OpenAPIHono<{
656
656
  args: import("hono/utils/types").JSONValue[];
657
657
  }[];
658
658
  logs: {
659
- level: "log" | "error" | "info" | "warn" | "debug";
659
+ level: "error" | "log" | "debug" | "info" | "warn";
660
660
  message: string;
661
661
  }[];
662
662
  error?: string | undefined;