authhero 9.14.0 → 9.15.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (61) hide show
  1. package/dist/assets/u/widget/authhero-widget.esm.js +1 -1
  2. package/dist/assets/u/widget/index.esm.js +1 -1
  3. package/dist/assets/u/widget/{p-1471c0f2.entry.js → p-1eb7f287.entry.js} +1 -1
  4. package/dist/assets/u/widget/p-398d72df.entry.js +1 -0
  5. package/dist/authhero.cjs +144 -144
  6. package/dist/authhero.d.ts +280 -129
  7. package/dist/authhero.mjs +13812 -12841
  8. package/dist/tsconfig.types.tsbuildinfo +1 -1
  9. package/dist/types/authentication-flows/custom-token-exchange.d.ts +21 -0
  10. package/dist/types/authentication-flows/passwordless.d.ts +6 -3
  11. package/dist/types/authentication-flows/token-exchange.d.ts +19 -0
  12. package/dist/types/generated/locale-types.d.ts +2 -0
  13. package/dist/types/helpers/client-assertion-replay.d.ts +17 -0
  14. package/dist/types/helpers/client-keys.d.ts +9 -0
  15. package/dist/types/helpers/client.d.ts +3 -0
  16. package/dist/types/helpers/dcr/metadata-mapping.d.ts +1 -1
  17. package/dist/types/helpers/organization-branding.d.ts +18 -0
  18. package/dist/types/helpers/reserved-claims.d.ts +2 -2
  19. package/dist/types/index.d.ts +277 -129
  20. package/dist/types/routes/auth-api/index.d.ts +156 -46
  21. package/dist/types/routes/auth-api/passwordless.d.ts +12 -12
  22. package/dist/types/routes/auth-api/register/index.d.ts +2 -2
  23. package/dist/types/routes/auth-api/revoke.d.ts +8 -8
  24. package/dist/types/routes/auth-api/token.d.ts +132 -22
  25. package/dist/types/routes/auth-api/well-known.d.ts +2 -2
  26. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  27. package/dist/types/routes/management-api/actions.d.ts +3 -3
  28. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  29. package/dist/types/routes/management-api/client-grants.d.ts +9 -9
  30. package/dist/types/routes/management-api/clients.d.ts +32 -8
  31. package/dist/types/routes/management-api/custom-domains.d.ts +6 -6
  32. package/dist/types/routes/management-api/email-templates.d.ts +20 -20
  33. package/dist/types/routes/management-api/emails.d.ts +2 -2
  34. package/dist/types/routes/management-api/failed-events.d.ts +1 -1
  35. package/dist/types/routes/management-api/forms.d.ts +14 -0
  36. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  37. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  38. package/dist/types/routes/management-api/hooks.d.ts +4 -4
  39. package/dist/types/routes/management-api/index.d.ts +135 -97
  40. package/dist/types/routes/management-api/keys.d.ts +8 -8
  41. package/dist/types/routes/management-api/logs.d.ts +4 -4
  42. package/dist/types/routes/management-api/organizations.d.ts +7 -7
  43. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  44. package/dist/types/routes/management-api/roles.d.ts +1 -1
  45. package/dist/types/routes/management-api/tenants.d.ts +6 -6
  46. package/dist/types/routes/management-api/token-exchange-profiles.d.ts +321 -0
  47. package/dist/types/routes/management-api/users.d.ts +11 -11
  48. package/dist/types/routes/universal-login/common.d.ts +6 -0
  49. package/dist/types/routes/universal-login/flow-api.d.ts +8 -8
  50. package/dist/types/routes/universal-login/form-node.d.ts +4 -4
  51. package/dist/types/routes/universal-login/index.d.ts +4 -4
  52. package/dist/types/routes/universal-login/screens/login-otp.d.ts +17 -0
  53. package/dist/types/routes/universal-login/screens/types.d.ts +6 -0
  54. package/dist/types/routes/universal-login/u2-form-node.d.ts +2 -2
  55. package/dist/types/routes/universal-login/u2-index.d.ts +7 -7
  56. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  57. package/dist/types/state-machines/login-session.d.ts +1 -1
  58. package/dist/types/utils/jwks.d.ts +4 -4
  59. package/dist/types/utils/jws-verify.d.ts +46 -0
  60. package/package.json +6 -6
  61. package/dist/assets/u/widget/p-c2744f87.entry.js +0 -1
@@ -40,7 +40,7 @@ export declare const tokenRoutes: OpenAPIHono<{
40
40
  client_id: string;
41
41
  username: string;
42
42
  otp: string;
43
- realm: "email" | "sms";
43
+ realm: "sms" | "email";
44
44
  scope?: string | undefined;
45
45
  audience?: string | undefined;
46
46
  } | {
@@ -54,6 +54,17 @@ export declare const tokenRoutes: OpenAPIHono<{
54
54
  client_secret?: string | undefined;
55
55
  client_assertion?: string | undefined;
56
56
  client_assertion_type?: string | undefined;
57
+ } | {
58
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
59
+ subject_token: string;
60
+ subject_token_type: string;
61
+ audience?: string | undefined;
62
+ scope?: string | undefined;
63
+ organization?: string | undefined;
64
+ client_id?: string | undefined;
65
+ client_secret?: string | undefined;
66
+ client_assertion?: string | undefined;
67
+ client_assertion_type?: string | undefined;
57
68
  };
58
69
  } & {
59
70
  json: {
@@ -89,7 +100,7 @@ export declare const tokenRoutes: OpenAPIHono<{
89
100
  client_id: string;
90
101
  username: string;
91
102
  otp: string;
92
- realm: "email" | "sms";
103
+ realm: "sms" | "email";
93
104
  scope?: string | undefined;
94
105
  audience?: string | undefined;
95
106
  } | {
@@ -103,6 +114,17 @@ export declare const tokenRoutes: OpenAPIHono<{
103
114
  client_secret?: string | undefined;
104
115
  client_assertion?: string | undefined;
105
116
  client_assertion_type?: string | undefined;
117
+ } | {
118
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
119
+ subject_token: string;
120
+ subject_token_type: string;
121
+ audience?: string | undefined;
122
+ scope?: string | undefined;
123
+ organization?: string | undefined;
124
+ client_id?: string | undefined;
125
+ client_secret?: string | undefined;
126
+ client_assertion?: string | undefined;
127
+ client_assertion_type?: string | undefined;
106
128
  };
107
129
  };
108
130
  output: {};
@@ -143,7 +165,7 @@ export declare const tokenRoutes: OpenAPIHono<{
143
165
  client_id: string;
144
166
  username: string;
145
167
  otp: string;
146
- realm: "email" | "sms";
168
+ realm: "sms" | "email";
147
169
  scope?: string | undefined;
148
170
  audience?: string | undefined;
149
171
  } | {
@@ -157,6 +179,17 @@ export declare const tokenRoutes: OpenAPIHono<{
157
179
  client_secret?: string | undefined;
158
180
  client_assertion?: string | undefined;
159
181
  client_assertion_type?: string | undefined;
182
+ } | {
183
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
184
+ subject_token: string;
185
+ subject_token_type: string;
186
+ audience?: string | undefined;
187
+ scope?: string | undefined;
188
+ organization?: string | undefined;
189
+ client_id?: string | undefined;
190
+ client_secret?: string | undefined;
191
+ client_assertion?: string | undefined;
192
+ client_assertion_type?: string | undefined;
160
193
  };
161
194
  } & {
162
195
  json: {
@@ -192,7 +225,7 @@ export declare const tokenRoutes: OpenAPIHono<{
192
225
  client_id: string;
193
226
  username: string;
194
227
  otp: string;
195
- realm: "email" | "sms";
228
+ realm: "sms" | "email";
196
229
  scope?: string | undefined;
197
230
  audience?: string | undefined;
198
231
  } | {
@@ -206,14 +239,30 @@ export declare const tokenRoutes: OpenAPIHono<{
206
239
  client_secret?: string | undefined;
207
240
  client_assertion?: string | undefined;
208
241
  client_assertion_type?: string | undefined;
242
+ } | {
243
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
244
+ subject_token: string;
245
+ subject_token_type: string;
246
+ audience?: string | undefined;
247
+ scope?: string | undefined;
248
+ organization?: string | undefined;
249
+ client_id?: string | undefined;
250
+ client_secret?: string | undefined;
251
+ client_assertion?: string | undefined;
252
+ client_assertion_type?: string | undefined;
209
253
  };
210
254
  };
211
255
  output: {
212
- error: string;
213
- error_description?: string | undefined;
256
+ access_token: string;
257
+ token_type: string;
258
+ expires_in: number;
259
+ id_token?: string | undefined;
260
+ scope?: string | undefined;
261
+ state?: string | undefined;
262
+ refresh_token?: string | undefined;
214
263
  };
215
264
  outputFormat: "json";
216
- status: 401;
265
+ status: 200;
217
266
  } | {
218
267
  input: {
219
268
  form: {
@@ -249,7 +298,7 @@ export declare const tokenRoutes: OpenAPIHono<{
249
298
  client_id: string;
250
299
  username: string;
251
300
  otp: string;
252
- realm: "email" | "sms";
301
+ realm: "sms" | "email";
253
302
  scope?: string | undefined;
254
303
  audience?: string | undefined;
255
304
  } | {
@@ -263,6 +312,17 @@ export declare const tokenRoutes: OpenAPIHono<{
263
312
  client_secret?: string | undefined;
264
313
  client_assertion?: string | undefined;
265
314
  client_assertion_type?: string | undefined;
315
+ } | {
316
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
317
+ subject_token: string;
318
+ subject_token_type: string;
319
+ audience?: string | undefined;
320
+ scope?: string | undefined;
321
+ organization?: string | undefined;
322
+ client_id?: string | undefined;
323
+ client_secret?: string | undefined;
324
+ client_assertion?: string | undefined;
325
+ client_assertion_type?: string | undefined;
266
326
  };
267
327
  } & {
268
328
  json: {
@@ -298,7 +358,7 @@ export declare const tokenRoutes: OpenAPIHono<{
298
358
  client_id: string;
299
359
  username: string;
300
360
  otp: string;
301
- realm: "email" | "sms";
361
+ realm: "sms" | "email";
302
362
  scope?: string | undefined;
303
363
  audience?: string | undefined;
304
364
  } | {
@@ -312,19 +372,25 @@ export declare const tokenRoutes: OpenAPIHono<{
312
372
  client_secret?: string | undefined;
313
373
  client_assertion?: string | undefined;
314
374
  client_assertion_type?: string | undefined;
375
+ } | {
376
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
377
+ subject_token: string;
378
+ subject_token_type: string;
379
+ audience?: string | undefined;
380
+ scope?: string | undefined;
381
+ organization?: string | undefined;
382
+ client_id?: string | undefined;
383
+ client_secret?: string | undefined;
384
+ client_assertion?: string | undefined;
385
+ client_assertion_type?: string | undefined;
315
386
  };
316
387
  };
317
388
  output: {
318
- access_token: string;
319
- token_type: string;
320
- expires_in: number;
321
- id_token?: string | undefined;
322
- scope?: string | undefined;
323
- state?: string | undefined;
324
- refresh_token?: string | undefined;
389
+ error: string;
390
+ error_description?: string | undefined;
325
391
  };
326
392
  outputFormat: "json";
327
- status: 200;
393
+ status: 400;
328
394
  } | {
329
395
  input: {
330
396
  form: {
@@ -360,7 +426,7 @@ export declare const tokenRoutes: OpenAPIHono<{
360
426
  client_id: string;
361
427
  username: string;
362
428
  otp: string;
363
- realm: "email" | "sms";
429
+ realm: "sms" | "email";
364
430
  scope?: string | undefined;
365
431
  audience?: string | undefined;
366
432
  } | {
@@ -374,6 +440,17 @@ export declare const tokenRoutes: OpenAPIHono<{
374
440
  client_secret?: string | undefined;
375
441
  client_assertion?: string | undefined;
376
442
  client_assertion_type?: string | undefined;
443
+ } | {
444
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
445
+ subject_token: string;
446
+ subject_token_type: string;
447
+ audience?: string | undefined;
448
+ scope?: string | undefined;
449
+ organization?: string | undefined;
450
+ client_id?: string | undefined;
451
+ client_secret?: string | undefined;
452
+ client_assertion?: string | undefined;
453
+ client_assertion_type?: string | undefined;
377
454
  };
378
455
  } & {
379
456
  json: {
@@ -409,7 +486,7 @@ export declare const tokenRoutes: OpenAPIHono<{
409
486
  client_id: string;
410
487
  username: string;
411
488
  otp: string;
412
- realm: "email" | "sms";
489
+ realm: "sms" | "email";
413
490
  scope?: string | undefined;
414
491
  audience?: string | undefined;
415
492
  } | {
@@ -423,6 +500,17 @@ export declare const tokenRoutes: OpenAPIHono<{
423
500
  client_secret?: string | undefined;
424
501
  client_assertion?: string | undefined;
425
502
  client_assertion_type?: string | undefined;
503
+ } | {
504
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
505
+ subject_token: string;
506
+ subject_token_type: string;
507
+ audience?: string | undefined;
508
+ scope?: string | undefined;
509
+ organization?: string | undefined;
510
+ client_id?: string | undefined;
511
+ client_secret?: string | undefined;
512
+ client_assertion?: string | undefined;
513
+ client_assertion_type?: string | undefined;
426
514
  };
427
515
  };
428
516
  output: {
@@ -430,7 +518,7 @@ export declare const tokenRoutes: OpenAPIHono<{
430
518
  error_description?: string | undefined;
431
519
  };
432
520
  outputFormat: "json";
433
- status: 400;
521
+ status: 401;
434
522
  } | {
435
523
  input: {
436
524
  form: {
@@ -466,7 +554,7 @@ export declare const tokenRoutes: OpenAPIHono<{
466
554
  client_id: string;
467
555
  username: string;
468
556
  otp: string;
469
- realm: "email" | "sms";
557
+ realm: "sms" | "email";
470
558
  scope?: string | undefined;
471
559
  audience?: string | undefined;
472
560
  } | {
@@ -480,6 +568,17 @@ export declare const tokenRoutes: OpenAPIHono<{
480
568
  client_secret?: string | undefined;
481
569
  client_assertion?: string | undefined;
482
570
  client_assertion_type?: string | undefined;
571
+ } | {
572
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
573
+ subject_token: string;
574
+ subject_token_type: string;
575
+ audience?: string | undefined;
576
+ scope?: string | undefined;
577
+ organization?: string | undefined;
578
+ client_id?: string | undefined;
579
+ client_secret?: string | undefined;
580
+ client_assertion?: string | undefined;
581
+ client_assertion_type?: string | undefined;
483
582
  };
484
583
  } & {
485
584
  json: {
@@ -515,7 +614,7 @@ export declare const tokenRoutes: OpenAPIHono<{
515
614
  client_id: string;
516
615
  username: string;
517
616
  otp: string;
518
- realm: "email" | "sms";
617
+ realm: "sms" | "email";
519
618
  scope?: string | undefined;
520
619
  audience?: string | undefined;
521
620
  } | {
@@ -529,6 +628,17 @@ export declare const tokenRoutes: OpenAPIHono<{
529
628
  client_secret?: string | undefined;
530
629
  client_assertion?: string | undefined;
531
630
  client_assertion_type?: string | undefined;
631
+ } | {
632
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
633
+ subject_token: string;
634
+ subject_token_type: string;
635
+ audience?: string | undefined;
636
+ scope?: string | undefined;
637
+ organization?: string | undefined;
638
+ client_id?: string | undefined;
639
+ client_secret?: string | undefined;
640
+ client_assertion?: string | undefined;
641
+ client_assertion_type?: string | undefined;
532
642
  };
533
643
  };
534
644
  output: {
@@ -8,8 +8,8 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<{
8
8
  input: {};
9
9
  output: {
10
10
  keys: {
11
- alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
12
- kty: "RSA" | "EC" | "oct";
11
+ kty: "EC" | "RSA" | "oct";
12
+ alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
13
13
  kid?: string | undefined;
14
14
  use?: "sig" | "enc" | undefined;
15
15
  n?: string | undefined;
@@ -78,7 +78,7 @@ export declare const actionExecutionsRoutes: OpenAPIHono<{
78
78
  logs: {
79
79
  action_name: string;
80
80
  lines: {
81
- level: "error" | "log" | "debug" | "info" | "warn";
81
+ level: "error" | "info" | "log" | "warn" | "debug";
82
82
  message: string;
83
83
  }[];
84
84
  }[];
@@ -297,7 +297,7 @@ export declare const actionsRoutes: OpenAPIHono<{
297
297
  };
298
298
  output: {};
299
299
  outputFormat: string;
300
- status: 200;
300
+ status: 404;
301
301
  } | {
302
302
  input: {
303
303
  param: {
@@ -310,7 +310,7 @@ export declare const actionsRoutes: OpenAPIHono<{
310
310
  };
311
311
  output: {};
312
312
  outputFormat: string;
313
- status: 404;
313
+ status: 200;
314
314
  } | {
315
315
  input: {
316
316
  param: {
@@ -656,7 +656,7 @@ export declare const actionsRoutes: OpenAPIHono<{
656
656
  args: import("hono/utils/types").JSONValue[];
657
657
  }[];
658
658
  logs: {
659
- level: "error" | "log" | "debug" | "info" | "warn";
659
+ level: "error" | "info" | "log" | "warn" | "debug";
660
660
  message: string;
661
661
  }[];
662
662
  error?: string | undefined;
@@ -37,7 +37,7 @@ export declare const authenticationMethodsRoutes: OpenAPIHono<{
37
37
  };
38
38
  } & {
39
39
  json: {
40
- type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
40
+ type: "email" | "passkey" | "push" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
41
41
  phone_number?: string | undefined;
42
42
  totp_secret?: string | undefined;
43
43
  credential_id?: string | undefined;
@@ -16,7 +16,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
16
16
  audience?: string | undefined;
17
17
  client_id?: string | undefined;
18
18
  allow_any_organization?: string | undefined;
19
- subject_type?: "user" | "client" | undefined;
19
+ subject_type?: "client" | "user" | undefined;
20
20
  };
21
21
  } & {
22
22
  header: {
@@ -31,7 +31,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
31
31
  organization_usage?: "deny" | "allow" | "require" | undefined;
32
32
  allow_any_organization?: boolean | undefined;
33
33
  is_system?: boolean | undefined;
34
- subject_type?: "user" | "client" | undefined;
34
+ subject_type?: "client" | "user" | undefined;
35
35
  authorization_details_types?: string[] | undefined;
36
36
  created_at?: string | undefined;
37
37
  updated_at?: string | undefined;
@@ -47,7 +47,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
47
47
  organization_usage?: "deny" | "allow" | "require" | undefined;
48
48
  allow_any_organization?: boolean | undefined;
49
49
  is_system?: boolean | undefined;
50
- subject_type?: "user" | "client" | undefined;
50
+ subject_type?: "client" | "user" | undefined;
51
51
  authorization_details_types?: string[] | undefined;
52
52
  created_at?: string | undefined;
53
53
  updated_at?: string | undefined;
@@ -63,7 +63,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
63
63
  organization_usage?: "deny" | "allow" | "require" | undefined;
64
64
  allow_any_organization?: boolean | undefined;
65
65
  is_system?: boolean | undefined;
66
- subject_type?: "user" | "client" | undefined;
66
+ subject_type?: "client" | "user" | undefined;
67
67
  authorization_details_types?: string[] | undefined;
68
68
  created_at?: string | undefined;
69
69
  updated_at?: string | undefined;
@@ -94,7 +94,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
94
94
  organization_usage?: "deny" | "allow" | "require" | undefined;
95
95
  allow_any_organization?: boolean | undefined;
96
96
  is_system?: boolean | undefined;
97
- subject_type?: "user" | "client" | undefined;
97
+ subject_type?: "client" | "user" | undefined;
98
98
  authorization_details_types?: string[] | undefined;
99
99
  created_at?: string | undefined;
100
100
  updated_at?: string | undefined;
@@ -139,7 +139,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
139
139
  organization_usage?: "deny" | "allow" | "require" | undefined;
140
140
  allow_any_organization?: boolean | undefined;
141
141
  is_system?: boolean | undefined;
142
- subject_type?: "user" | "client" | undefined;
142
+ subject_type?: "client" | "user" | undefined;
143
143
  authorization_details_types?: string[] | undefined;
144
144
  };
145
145
  };
@@ -151,7 +151,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
151
151
  organization_usage?: "deny" | "allow" | "require" | undefined;
152
152
  allow_any_organization?: boolean | undefined;
153
153
  is_system?: boolean | undefined;
154
- subject_type?: "user" | "client" | undefined;
154
+ subject_type?: "client" | "user" | undefined;
155
155
  authorization_details_types?: string[] | undefined;
156
156
  created_at?: string | undefined;
157
157
  updated_at?: string | undefined;
@@ -175,7 +175,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
175
175
  organization_usage?: "deny" | "allow" | "require" | undefined;
176
176
  allow_any_organization?: boolean | undefined;
177
177
  is_system?: boolean | undefined;
178
- subject_type?: "user" | "client" | undefined;
178
+ subject_type?: "client" | "user" | undefined;
179
179
  authorization_details_types?: string[] | undefined;
180
180
  };
181
181
  };
@@ -187,7 +187,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
187
187
  organization_usage?: "deny" | "allow" | "require" | undefined;
188
188
  allow_any_organization?: boolean | undefined;
189
189
  is_system?: boolean | undefined;
190
- subject_type?: "user" | "client" | undefined;
190
+ subject_type?: "client" | "user" | undefined;
191
191
  authorization_details_types?: string[] | undefined;
192
192
  created_at?: string | undefined;
193
193
  updated_at?: string | undefined;
@@ -78,7 +78,7 @@ export declare const clientRoutes: OpenAPIHono<{
78
78
  addons?: {
79
79
  [x: string]: any;
80
80
  } | undefined;
81
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
81
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
82
82
  client_metadata?: {
83
83
  [x: string]: string;
84
84
  } | undefined;
@@ -120,6 +120,9 @@ export declare const clientRoutes: OpenAPIHono<{
120
120
  registration_metadata?: {
121
121
  [x: string]: any;
122
122
  } | undefined;
123
+ token_exchange?: {
124
+ allow_any_profile_of_type?: "custom_authentication"[] | undefined;
125
+ } | undefined;
123
126
  user_linking_mode?: "builtin" | "off" | undefined;
124
127
  }[] | {
125
128
  start: number;
@@ -180,7 +183,7 @@ export declare const clientRoutes: OpenAPIHono<{
180
183
  addons?: {
181
184
  [x: string]: any;
182
185
  } | undefined;
183
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
186
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
184
187
  client_metadata?: {
185
188
  [x: string]: string;
186
189
  } | undefined;
@@ -222,6 +225,9 @@ export declare const clientRoutes: OpenAPIHono<{
222
225
  registration_metadata?: {
223
226
  [x: string]: any;
224
227
  } | undefined;
228
+ token_exchange?: {
229
+ allow_any_profile_of_type?: "custom_authentication"[] | undefined;
230
+ } | undefined;
225
231
  user_linking_mode?: "builtin" | "off" | undefined;
226
232
  }[];
227
233
  total?: number | undefined;
@@ -282,7 +288,7 @@ export declare const clientRoutes: OpenAPIHono<{
282
288
  addons?: {
283
289
  [x: string]: any;
284
290
  } | undefined;
285
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
291
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
286
292
  client_metadata?: {
287
293
  [x: string]: string;
288
294
  } | undefined;
@@ -324,6 +330,9 @@ export declare const clientRoutes: OpenAPIHono<{
324
330
  registration_metadata?: {
325
331
  [x: string]: any;
326
332
  } | undefined;
333
+ token_exchange?: {
334
+ allow_any_profile_of_type?: "custom_authentication"[] | undefined;
335
+ } | undefined;
327
336
  user_linking_mode?: "builtin" | "off" | undefined;
328
337
  }[];
329
338
  next?: string | undefined;
@@ -399,7 +408,7 @@ export declare const clientRoutes: OpenAPIHono<{
399
408
  addons?: {
400
409
  [x: string]: any;
401
410
  } | undefined;
402
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
411
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
403
412
  client_metadata?: {
404
413
  [x: string]: string;
405
414
  } | undefined;
@@ -441,6 +450,9 @@ export declare const clientRoutes: OpenAPIHono<{
441
450
  registration_metadata?: {
442
451
  [x: string]: any;
443
452
  } | undefined;
453
+ token_exchange?: {
454
+ allow_any_profile_of_type?: "custom_authentication"[] | undefined;
455
+ } | undefined;
444
456
  user_linking_mode?: "builtin" | "off" | undefined;
445
457
  };
446
458
  outputFormat: "json";
@@ -517,7 +529,7 @@ export declare const clientRoutes: OpenAPIHono<{
517
529
  custom_login_page_preview?: string | undefined;
518
530
  form_template?: string | undefined;
519
531
  addons?: Record<string, any> | undefined;
520
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
532
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
521
533
  client_metadata?: Record<string, string> | undefined;
522
534
  hide_sign_up_disabled_error?: boolean | undefined;
523
535
  mobile?: Record<string, any> | undefined;
@@ -545,6 +557,9 @@ export declare const clientRoutes: OpenAPIHono<{
545
557
  owner_user_id?: string | undefined;
546
558
  registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
547
559
  registration_metadata?: Record<string, any> | undefined;
560
+ token_exchange?: {
561
+ allow_any_profile_of_type?: "custom_authentication"[] | undefined;
562
+ } | undefined;
548
563
  user_linking_mode?: "builtin" | "off" | undefined;
549
564
  };
550
565
  };
@@ -603,7 +618,7 @@ export declare const clientRoutes: OpenAPIHono<{
603
618
  addons?: {
604
619
  [x: string]: any;
605
620
  } | undefined;
606
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
621
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
607
622
  client_metadata?: {
608
623
  [x: string]: string;
609
624
  } | undefined;
@@ -645,6 +660,9 @@ export declare const clientRoutes: OpenAPIHono<{
645
660
  registration_metadata?: {
646
661
  [x: string]: any;
647
662
  } | undefined;
663
+ token_exchange?: {
664
+ allow_any_profile_of_type?: "custom_authentication"[] | undefined;
665
+ } | undefined;
648
666
  user_linking_mode?: "builtin" | "off" | undefined;
649
667
  };
650
668
  outputFormat: "json";
@@ -700,7 +718,7 @@ export declare const clientRoutes: OpenAPIHono<{
700
718
  custom_login_page_preview?: string | undefined;
701
719
  form_template?: string | undefined;
702
720
  addons?: Record<string, any> | undefined;
703
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
721
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
704
722
  client_metadata?: Record<string, string> | undefined;
705
723
  hide_sign_up_disabled_error?: boolean | undefined;
706
724
  mobile?: Record<string, any> | undefined;
@@ -728,6 +746,9 @@ export declare const clientRoutes: OpenAPIHono<{
728
746
  owner_user_id?: string | undefined;
729
747
  registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
730
748
  registration_metadata?: Record<string, any> | undefined;
749
+ token_exchange?: {
750
+ allow_any_profile_of_type?: "custom_authentication"[] | undefined;
751
+ } | undefined;
731
752
  user_linking_mode?: "builtin" | "off" | undefined;
732
753
  };
733
754
  };
@@ -786,7 +807,7 @@ export declare const clientRoutes: OpenAPIHono<{
786
807
  addons?: {
787
808
  [x: string]: any;
788
809
  } | undefined;
789
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
810
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
790
811
  client_metadata?: {
791
812
  [x: string]: string;
792
813
  } | undefined;
@@ -828,6 +849,9 @@ export declare const clientRoutes: OpenAPIHono<{
828
849
  registration_metadata?: {
829
850
  [x: string]: any;
830
851
  } | undefined;
852
+ token_exchange?: {
853
+ allow_any_profile_of_type?: "custom_authentication"[] | undefined;
854
+ } | undefined;
831
855
  user_linking_mode?: "builtin" | "off" | undefined;
832
856
  };
833
857
  outputFormat: "json";
@@ -28,7 +28,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
28
28
  type: "auth0_managed_certs" | "self_managed_certs";
29
29
  custom_domain_id: string;
30
30
  primary: boolean;
31
- status: "disabled" | "pending" | "ready" | "pending_verification";
31
+ status: "pending" | "ready" | "disabled" | "pending_verification";
32
32
  verification_method?: "txt" | undefined;
33
33
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
34
34
  domain_metadata?: {
@@ -69,7 +69,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
69
69
  type: "auth0_managed_certs" | "self_managed_certs";
70
70
  custom_domain_id: string;
71
71
  primary: boolean;
72
- status: "disabled" | "pending" | "ready" | "pending_verification";
72
+ status: "pending" | "ready" | "disabled" | "pending_verification";
73
73
  verification_method?: "txt" | undefined;
74
74
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
75
75
  domain_metadata?: {
@@ -133,7 +133,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
133
133
  type: "auth0_managed_certs" | "self_managed_certs";
134
134
  custom_domain_id: string;
135
135
  primary: boolean;
136
- status: "disabled" | "pending" | "ready" | "pending_verification";
136
+ status: "pending" | "ready" | "disabled" | "pending_verification";
137
137
  verification_method?: "txt" | undefined;
138
138
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
139
139
  domain_metadata?: {
@@ -180,7 +180,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
180
180
  type: "auth0_managed_certs" | "self_managed_certs";
181
181
  custom_domain_id: string;
182
182
  primary: boolean;
183
- status: "disabled" | "pending" | "ready" | "pending_verification";
183
+ status: "pending" | "ready" | "disabled" | "pending_verification";
184
184
  verification_method?: "txt" | undefined;
185
185
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
186
186
  domain_metadata?: {
@@ -226,7 +226,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
226
226
  type: "auth0_managed_certs" | "self_managed_certs";
227
227
  custom_domain_id: string;
228
228
  primary: boolean;
229
- status: "disabled" | "pending" | "ready" | "pending_verification";
229
+ status: "pending" | "ready" | "disabled" | "pending_verification";
230
230
  verification_method?: "txt" | undefined;
231
231
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
232
232
  domain_metadata?: {
@@ -267,7 +267,7 @@ export declare const customDomainRoutes: OpenAPIHono<{
267
267
  type: "auth0_managed_certs" | "self_managed_certs";
268
268
  custom_domain_id: string;
269
269
  primary: boolean;
270
- status: "disabled" | "pending" | "ready" | "pending_verification";
270
+ status: "pending" | "ready" | "disabled" | "pending_verification";
271
271
  verification_method?: "txt" | undefined;
272
272
  custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
273
273
  domain_metadata?: {