authhero 9.14.0 → 9.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/dist/assets/u/widget/authhero-widget.esm.js +1 -1
  2. package/dist/assets/u/widget/index.esm.js +1 -1
  3. package/dist/assets/u/widget/p-36898e2d.entry.js +1 -0
  4. package/dist/assets/u/widget/p-Che3Wd7J.js +1 -0
  5. package/dist/assets/u/widget/p-c6ec4c36.entry.js +1 -0
  6. package/dist/authhero.cjs +141 -141
  7. package/dist/authhero.d.ts +526 -243
  8. package/dist/authhero.mjs +14292 -13163
  9. package/dist/tsconfig.types.tsbuildinfo +1 -1
  10. package/dist/types/authentication-flows/custom-token-exchange.d.ts +21 -0
  11. package/dist/types/authentication-flows/passwordless.d.ts +3 -0
  12. package/dist/types/authentication-flows/token-exchange.d.ts +19 -0
  13. package/dist/types/generated/locale-types.d.ts +3 -0
  14. package/dist/types/helpers/client-assertion-replay.d.ts +17 -0
  15. package/dist/types/helpers/client-keys.d.ts +9 -0
  16. package/dist/types/helpers/client.d.ts +3 -0
  17. package/dist/types/helpers/dcr/metadata-mapping.d.ts +2 -2
  18. package/dist/types/helpers/organization-branding.d.ts +18 -0
  19. package/dist/types/helpers/reserved-claims.d.ts +2 -2
  20. package/dist/types/helpers/signing-certificate-authority.d.ts +99 -0
  21. package/dist/types/helpers/signing-keys.d.ts +7 -0
  22. package/dist/types/index.d.ts +399 -241
  23. package/dist/types/middlewares/reject-unknown-hosts.d.ts +13 -0
  24. package/dist/types/routes/auth-api/index.d.ts +140 -29
  25. package/dist/types/routes/auth-api/passwordless.d.ts +14 -14
  26. package/dist/types/routes/auth-api/revoke.d.ts +2 -2
  27. package/dist/types/routes/auth-api/token.d.ts +122 -12
  28. package/dist/types/routes/auth-api/well-known.d.ts +2 -1
  29. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  30. package/dist/types/routes/management-api/actions.d.ts +1 -1
  31. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  32. package/dist/types/routes/management-api/client-grants.d.ts +9 -9
  33. package/dist/types/routes/management-api/clients.d.ts +24 -0
  34. package/dist/types/routes/management-api/connections.d.ts +1 -1
  35. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  36. package/dist/types/routes/management-api/failed-events.d.ts +1 -1
  37. package/dist/types/routes/management-api/forms.d.ts +147 -126
  38. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  39. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  40. package/dist/types/routes/management-api/index.d.ts +258 -213
  41. package/dist/types/routes/management-api/keys.d.ts +8 -8
  42. package/dist/types/routes/management-api/logs.d.ts +4 -4
  43. package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
  44. package/dist/types/routes/management-api/organizations.d.ts +1 -1
  45. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  46. package/dist/types/routes/management-api/roles.d.ts +1 -1
  47. package/dist/types/routes/management-api/tenant-export-import.d.ts +5 -5
  48. package/dist/types/routes/management-api/tenant-operations.d.ts +1 -1
  49. package/dist/types/routes/management-api/tenants.d.ts +8 -8
  50. package/dist/types/routes/management-api/token-exchange-profiles.d.ts +327 -0
  51. package/dist/types/routes/management-api/users.d.ts +21 -21
  52. package/dist/types/routes/universal-login/common.d.ts +8 -2
  53. package/dist/types/routes/universal-login/flow-api.d.ts +8 -8
  54. package/dist/types/routes/universal-login/screens/login-otp.d.ts +17 -0
  55. package/dist/types/routes/universal-login/screens/types.d.ts +6 -0
  56. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  57. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  58. package/dist/types/state-machines/login-session.d.ts +1 -1
  59. package/dist/types/types/AuthHeroConfig.d.ts +38 -0
  60. package/dist/types/types/Bindings.d.ts +3 -0
  61. package/dist/types/utils/encryption.d.ts +20 -0
  62. package/dist/types/utils/jwks.d.ts +6 -3
  63. package/dist/types/utils/jws-verify.d.ts +46 -0
  64. package/package.json +6 -6
  65. package/dist/assets/u/widget/p-1471c0f2.entry.js +0 -1
  66. package/dist/assets/u/widget/p-c2744f87.entry.js +0 -1
@@ -0,0 +1,13 @@
1
+ import { MiddlewareHandler } from "hono";
2
+ import { Bindings, Variables } from "../types";
3
+ /**
4
+ * Opt-in (`init({ rejectUnknownHosts: true })`). Without it, discovery and
5
+ * JWKS on a host this deployment doesn't own fall back to the control-plane
6
+ * keys and apex metadata, so anyone could point a domain at the worker and
7
+ * serve AuthHero discovery from it. Mounted on every `/.well-known/*` route,
8
+ * including the MCP protected-resource metadata.
9
+ */
10
+ export declare const rejectUnknownHostsMiddleware: MiddlewareHandler<{
11
+ Bindings: Bindings;
12
+ Variables: Variables;
13
+ }>;
@@ -741,20 +741,20 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
741
741
  email: string;
742
742
  send: "code" | "link";
743
743
  authParams: {
744
- scope?: string | undefined;
745
- state?: string | undefined;
746
- username?: string | undefined;
747
744
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
748
745
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
746
+ scope?: string | undefined;
747
+ username?: string | undefined;
749
748
  audience?: string | undefined;
750
- redirect_uri?: string | undefined;
751
- nonce?: string | undefined;
752
- act_as?: string | undefined;
753
749
  organization?: string | undefined;
750
+ state?: string | undefined;
751
+ redirect_uri?: string | undefined;
754
752
  prompt?: string | undefined;
753
+ ui_locales?: string | undefined;
754
+ act_as?: string | undefined;
755
+ nonce?: string | undefined;
755
756
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
756
757
  code_challenge?: string | undefined;
757
- ui_locales?: string | undefined;
758
758
  max_age?: number | undefined;
759
759
  acr_values?: string | undefined;
760
760
  claims?: {
@@ -777,20 +777,20 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
777
777
  phone_number: string;
778
778
  send: "code" | "link";
779
779
  authParams: {
780
- scope?: string | undefined;
781
- state?: string | undefined;
782
- username?: string | undefined;
783
780
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
784
781
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
782
+ scope?: string | undefined;
783
+ username?: string | undefined;
785
784
  audience?: string | undefined;
786
- redirect_uri?: string | undefined;
787
- nonce?: string | undefined;
788
- act_as?: string | undefined;
789
785
  organization?: string | undefined;
786
+ state?: string | undefined;
787
+ redirect_uri?: string | undefined;
790
788
  prompt?: string | undefined;
789
+ ui_locales?: string | undefined;
790
+ act_as?: string | undefined;
791
+ nonce?: string | undefined;
791
792
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
792
793
  code_challenge?: string | undefined;
793
- ui_locales?: string | undefined;
794
794
  max_age?: number | undefined;
795
795
  acr_values?: string | undefined;
796
796
  claims?: {
@@ -957,7 +957,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
957
957
  error_description?: string | undefined;
958
958
  };
959
959
  outputFormat: "json";
960
- status: 401;
960
+ status: 400;
961
961
  } | {
962
962
  input: {
963
963
  form: {
@@ -979,7 +979,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
979
979
  error_description?: string | undefined;
980
980
  };
981
981
  outputFormat: "json";
982
- status: 400;
982
+ status: 401;
983
983
  };
984
984
  };
985
985
  }, "/oauth/revoke"> & import("hono/types").MergeSchemaPath<{
@@ -1033,6 +1033,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1033
1033
  client_secret?: string | undefined;
1034
1034
  client_assertion?: string | undefined;
1035
1035
  client_assertion_type?: string | undefined;
1036
+ } | {
1037
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1038
+ subject_token: string;
1039
+ subject_token_type: string;
1040
+ audience?: string | undefined;
1041
+ scope?: string | undefined;
1042
+ organization?: string | undefined;
1043
+ client_id?: string | undefined;
1044
+ client_secret?: string | undefined;
1045
+ client_assertion?: string | undefined;
1046
+ client_assertion_type?: string | undefined;
1036
1047
  };
1037
1048
  } & {
1038
1049
  json: {
@@ -1082,6 +1093,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1082
1093
  client_secret?: string | undefined;
1083
1094
  client_assertion?: string | undefined;
1084
1095
  client_assertion_type?: string | undefined;
1096
+ } | {
1097
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1098
+ subject_token: string;
1099
+ subject_token_type: string;
1100
+ audience?: string | undefined;
1101
+ scope?: string | undefined;
1102
+ organization?: string | undefined;
1103
+ client_id?: string | undefined;
1104
+ client_secret?: string | undefined;
1105
+ client_assertion?: string | undefined;
1106
+ client_assertion_type?: string | undefined;
1085
1107
  };
1086
1108
  };
1087
1109
  output: {};
@@ -1136,6 +1158,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1136
1158
  client_secret?: string | undefined;
1137
1159
  client_assertion?: string | undefined;
1138
1160
  client_assertion_type?: string | undefined;
1161
+ } | {
1162
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1163
+ subject_token: string;
1164
+ subject_token_type: string;
1165
+ audience?: string | undefined;
1166
+ scope?: string | undefined;
1167
+ organization?: string | undefined;
1168
+ client_id?: string | undefined;
1169
+ client_secret?: string | undefined;
1170
+ client_assertion?: string | undefined;
1171
+ client_assertion_type?: string | undefined;
1139
1172
  };
1140
1173
  } & {
1141
1174
  json: {
@@ -1185,14 +1218,30 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1185
1218
  client_secret?: string | undefined;
1186
1219
  client_assertion?: string | undefined;
1187
1220
  client_assertion_type?: string | undefined;
1221
+ } | {
1222
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1223
+ subject_token: string;
1224
+ subject_token_type: string;
1225
+ audience?: string | undefined;
1226
+ scope?: string | undefined;
1227
+ organization?: string | undefined;
1228
+ client_id?: string | undefined;
1229
+ client_secret?: string | undefined;
1230
+ client_assertion?: string | undefined;
1231
+ client_assertion_type?: string | undefined;
1188
1232
  };
1189
1233
  };
1190
1234
  output: {
1191
- error: string;
1192
- error_description?: string | undefined;
1235
+ access_token: string;
1236
+ token_type: string;
1237
+ expires_in: number;
1238
+ id_token?: string | undefined;
1239
+ scope?: string | undefined;
1240
+ state?: string | undefined;
1241
+ refresh_token?: string | undefined;
1193
1242
  };
1194
1243
  outputFormat: "json";
1195
- status: 401;
1244
+ status: 200;
1196
1245
  } | {
1197
1246
  input: {
1198
1247
  form: {
@@ -1242,6 +1291,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1242
1291
  client_secret?: string | undefined;
1243
1292
  client_assertion?: string | undefined;
1244
1293
  client_assertion_type?: string | undefined;
1294
+ } | {
1295
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1296
+ subject_token: string;
1297
+ subject_token_type: string;
1298
+ audience?: string | undefined;
1299
+ scope?: string | undefined;
1300
+ organization?: string | undefined;
1301
+ client_id?: string | undefined;
1302
+ client_secret?: string | undefined;
1303
+ client_assertion?: string | undefined;
1304
+ client_assertion_type?: string | undefined;
1245
1305
  };
1246
1306
  } & {
1247
1307
  json: {
@@ -1291,19 +1351,25 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1291
1351
  client_secret?: string | undefined;
1292
1352
  client_assertion?: string | undefined;
1293
1353
  client_assertion_type?: string | undefined;
1354
+ } | {
1355
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1356
+ subject_token: string;
1357
+ subject_token_type: string;
1358
+ audience?: string | undefined;
1359
+ scope?: string | undefined;
1360
+ organization?: string | undefined;
1361
+ client_id?: string | undefined;
1362
+ client_secret?: string | undefined;
1363
+ client_assertion?: string | undefined;
1364
+ client_assertion_type?: string | undefined;
1294
1365
  };
1295
1366
  };
1296
1367
  output: {
1297
- access_token: string;
1298
- token_type: string;
1299
- expires_in: number;
1300
- id_token?: string | undefined;
1301
- scope?: string | undefined;
1302
- state?: string | undefined;
1303
- refresh_token?: string | undefined;
1368
+ error: string;
1369
+ error_description?: string | undefined;
1304
1370
  };
1305
1371
  outputFormat: "json";
1306
- status: 200;
1372
+ status: 400;
1307
1373
  } | {
1308
1374
  input: {
1309
1375
  form: {
@@ -1353,6 +1419,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1353
1419
  client_secret?: string | undefined;
1354
1420
  client_assertion?: string | undefined;
1355
1421
  client_assertion_type?: string | undefined;
1422
+ } | {
1423
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1424
+ subject_token: string;
1425
+ subject_token_type: string;
1426
+ audience?: string | undefined;
1427
+ scope?: string | undefined;
1428
+ organization?: string | undefined;
1429
+ client_id?: string | undefined;
1430
+ client_secret?: string | undefined;
1431
+ client_assertion?: string | undefined;
1432
+ client_assertion_type?: string | undefined;
1356
1433
  };
1357
1434
  } & {
1358
1435
  json: {
@@ -1402,6 +1479,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1402
1479
  client_secret?: string | undefined;
1403
1480
  client_assertion?: string | undefined;
1404
1481
  client_assertion_type?: string | undefined;
1482
+ } | {
1483
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1484
+ subject_token: string;
1485
+ subject_token_type: string;
1486
+ audience?: string | undefined;
1487
+ scope?: string | undefined;
1488
+ organization?: string | undefined;
1489
+ client_id?: string | undefined;
1490
+ client_secret?: string | undefined;
1491
+ client_assertion?: string | undefined;
1492
+ client_assertion_type?: string | undefined;
1405
1493
  };
1406
1494
  };
1407
1495
  output: {
@@ -1409,7 +1497,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1409
1497
  error_description?: string | undefined;
1410
1498
  };
1411
1499
  outputFormat: "json";
1412
- status: 400;
1500
+ status: 401;
1413
1501
  } | {
1414
1502
  input: {
1415
1503
  form: {
@@ -1459,6 +1547,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1459
1547
  client_secret?: string | undefined;
1460
1548
  client_assertion?: string | undefined;
1461
1549
  client_assertion_type?: string | undefined;
1550
+ } | {
1551
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1552
+ subject_token: string;
1553
+ subject_token_type: string;
1554
+ audience?: string | undefined;
1555
+ scope?: string | undefined;
1556
+ organization?: string | undefined;
1557
+ client_id?: string | undefined;
1558
+ client_secret?: string | undefined;
1559
+ client_assertion?: string | undefined;
1560
+ client_assertion_type?: string | undefined;
1462
1561
  };
1463
1562
  } & {
1464
1563
  json: {
@@ -1508,6 +1607,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1508
1607
  client_secret?: string | undefined;
1509
1608
  client_assertion?: string | undefined;
1510
1609
  client_assertion_type?: string | undefined;
1610
+ } | {
1611
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1612
+ subject_token: string;
1613
+ subject_token_type: string;
1614
+ audience?: string | undefined;
1615
+ scope?: string | undefined;
1616
+ organization?: string | undefined;
1617
+ client_id?: string | undefined;
1618
+ client_secret?: string | undefined;
1619
+ client_assertion?: string | undefined;
1620
+ client_assertion_type?: string | undefined;
1511
1621
  };
1512
1622
  };
1513
1623
  output: {
@@ -1524,8 +1634,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1524
1634
  input: {};
1525
1635
  output: {
1526
1636
  keys: {
1527
- alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
1528
1637
  kty: "RSA" | "EC" | "oct";
1638
+ alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
1529
1639
  kid?: string | undefined;
1530
1640
  use?: "sig" | "enc" | undefined;
1531
1641
  n?: string | undefined;
@@ -1534,6 +1644,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1534
1644
  x?: string | undefined;
1535
1645
  y?: string | undefined;
1536
1646
  x5t?: string | undefined;
1647
+ "x5t#S256"?: string | undefined;
1537
1648
  x5c?: string[] | undefined;
1538
1649
  }[];
1539
1650
  };
@@ -14,20 +14,20 @@ export declare const passwordlessRoutes: OpenAPIHono<{
14
14
  email: string;
15
15
  send: "code" | "link";
16
16
  authParams: {
17
- scope?: string | undefined;
18
- state?: string | undefined;
19
- username?: string | undefined;
20
17
  response_type?: AuthorizationResponseType | undefined;
21
18
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
19
+ scope?: string | undefined;
20
+ username?: string | undefined;
22
21
  audience?: string | undefined;
23
- redirect_uri?: string | undefined;
24
- nonce?: string | undefined;
25
- act_as?: string | undefined;
26
22
  organization?: string | undefined;
23
+ state?: string | undefined;
24
+ redirect_uri?: string | undefined;
27
25
  prompt?: string | undefined;
26
+ ui_locales?: string | undefined;
27
+ act_as?: string | undefined;
28
+ nonce?: string | undefined;
28
29
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
29
30
  code_challenge?: string | undefined;
30
- ui_locales?: string | undefined;
31
31
  max_age?: number | undefined;
32
32
  acr_values?: string | undefined;
33
33
  claims?: {
@@ -50,20 +50,20 @@ export declare const passwordlessRoutes: OpenAPIHono<{
50
50
  phone_number: string;
51
51
  send: "code" | "link";
52
52
  authParams: {
53
- scope?: string | undefined;
54
- state?: string | undefined;
55
- username?: string | undefined;
56
53
  response_type?: AuthorizationResponseType | undefined;
57
54
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
55
+ scope?: string | undefined;
56
+ username?: string | undefined;
58
57
  audience?: string | undefined;
59
- redirect_uri?: string | undefined;
60
- nonce?: string | undefined;
61
- act_as?: string | undefined;
62
58
  organization?: string | undefined;
59
+ state?: string | undefined;
60
+ redirect_uri?: string | undefined;
63
61
  prompt?: string | undefined;
62
+ ui_locales?: string | undefined;
63
+ act_as?: string | undefined;
64
+ nonce?: string | undefined;
64
65
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
65
66
  code_challenge?: string | undefined;
66
- ui_locales?: string | undefined;
67
67
  max_age?: number | undefined;
68
68
  acr_values?: string | undefined;
69
69
  claims?: {
@@ -45,7 +45,7 @@ export declare const revokeRoutes: OpenAPIHono<{
45
45
  error_description?: string | undefined;
46
46
  };
47
47
  outputFormat: "json";
48
- status: 401;
48
+ status: 400;
49
49
  } | {
50
50
  input: {
51
51
  form: {
@@ -67,7 +67,7 @@ export declare const revokeRoutes: OpenAPIHono<{
67
67
  error_description?: string | undefined;
68
68
  };
69
69
  outputFormat: "json";
70
- status: 400;
70
+ status: 401;
71
71
  };
72
72
  };
73
73
  }, "/">;
@@ -54,6 +54,17 @@ export declare const tokenRoutes: OpenAPIHono<{
54
54
  client_secret?: string | undefined;
55
55
  client_assertion?: string | undefined;
56
56
  client_assertion_type?: string | undefined;
57
+ } | {
58
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
59
+ subject_token: string;
60
+ subject_token_type: string;
61
+ audience?: string | undefined;
62
+ scope?: string | undefined;
63
+ organization?: string | undefined;
64
+ client_id?: string | undefined;
65
+ client_secret?: string | undefined;
66
+ client_assertion?: string | undefined;
67
+ client_assertion_type?: string | undefined;
57
68
  };
58
69
  } & {
59
70
  json: {
@@ -103,6 +114,17 @@ export declare const tokenRoutes: OpenAPIHono<{
103
114
  client_secret?: string | undefined;
104
115
  client_assertion?: string | undefined;
105
116
  client_assertion_type?: string | undefined;
117
+ } | {
118
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
119
+ subject_token: string;
120
+ subject_token_type: string;
121
+ audience?: string | undefined;
122
+ scope?: string | undefined;
123
+ organization?: string | undefined;
124
+ client_id?: string | undefined;
125
+ client_secret?: string | undefined;
126
+ client_assertion?: string | undefined;
127
+ client_assertion_type?: string | undefined;
106
128
  };
107
129
  };
108
130
  output: {};
@@ -157,6 +179,17 @@ export declare const tokenRoutes: OpenAPIHono<{
157
179
  client_secret?: string | undefined;
158
180
  client_assertion?: string | undefined;
159
181
  client_assertion_type?: string | undefined;
182
+ } | {
183
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
184
+ subject_token: string;
185
+ subject_token_type: string;
186
+ audience?: string | undefined;
187
+ scope?: string | undefined;
188
+ organization?: string | undefined;
189
+ client_id?: string | undefined;
190
+ client_secret?: string | undefined;
191
+ client_assertion?: string | undefined;
192
+ client_assertion_type?: string | undefined;
160
193
  };
161
194
  } & {
162
195
  json: {
@@ -206,14 +239,30 @@ export declare const tokenRoutes: OpenAPIHono<{
206
239
  client_secret?: string | undefined;
207
240
  client_assertion?: string | undefined;
208
241
  client_assertion_type?: string | undefined;
242
+ } | {
243
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
244
+ subject_token: string;
245
+ subject_token_type: string;
246
+ audience?: string | undefined;
247
+ scope?: string | undefined;
248
+ organization?: string | undefined;
249
+ client_id?: string | undefined;
250
+ client_secret?: string | undefined;
251
+ client_assertion?: string | undefined;
252
+ client_assertion_type?: string | undefined;
209
253
  };
210
254
  };
211
255
  output: {
212
- error: string;
213
- error_description?: string | undefined;
256
+ access_token: string;
257
+ token_type: string;
258
+ expires_in: number;
259
+ id_token?: string | undefined;
260
+ scope?: string | undefined;
261
+ state?: string | undefined;
262
+ refresh_token?: string | undefined;
214
263
  };
215
264
  outputFormat: "json";
216
- status: 401;
265
+ status: 200;
217
266
  } | {
218
267
  input: {
219
268
  form: {
@@ -263,6 +312,17 @@ export declare const tokenRoutes: OpenAPIHono<{
263
312
  client_secret?: string | undefined;
264
313
  client_assertion?: string | undefined;
265
314
  client_assertion_type?: string | undefined;
315
+ } | {
316
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
317
+ subject_token: string;
318
+ subject_token_type: string;
319
+ audience?: string | undefined;
320
+ scope?: string | undefined;
321
+ organization?: string | undefined;
322
+ client_id?: string | undefined;
323
+ client_secret?: string | undefined;
324
+ client_assertion?: string | undefined;
325
+ client_assertion_type?: string | undefined;
266
326
  };
267
327
  } & {
268
328
  json: {
@@ -312,19 +372,25 @@ export declare const tokenRoutes: OpenAPIHono<{
312
372
  client_secret?: string | undefined;
313
373
  client_assertion?: string | undefined;
314
374
  client_assertion_type?: string | undefined;
375
+ } | {
376
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
377
+ subject_token: string;
378
+ subject_token_type: string;
379
+ audience?: string | undefined;
380
+ scope?: string | undefined;
381
+ organization?: string | undefined;
382
+ client_id?: string | undefined;
383
+ client_secret?: string | undefined;
384
+ client_assertion?: string | undefined;
385
+ client_assertion_type?: string | undefined;
315
386
  };
316
387
  };
317
388
  output: {
318
- access_token: string;
319
- token_type: string;
320
- expires_in: number;
321
- id_token?: string | undefined;
322
- scope?: string | undefined;
323
- state?: string | undefined;
324
- refresh_token?: string | undefined;
389
+ error: string;
390
+ error_description?: string | undefined;
325
391
  };
326
392
  outputFormat: "json";
327
- status: 200;
393
+ status: 400;
328
394
  } | {
329
395
  input: {
330
396
  form: {
@@ -374,6 +440,17 @@ export declare const tokenRoutes: OpenAPIHono<{
374
440
  client_secret?: string | undefined;
375
441
  client_assertion?: string | undefined;
376
442
  client_assertion_type?: string | undefined;
443
+ } | {
444
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
445
+ subject_token: string;
446
+ subject_token_type: string;
447
+ audience?: string | undefined;
448
+ scope?: string | undefined;
449
+ organization?: string | undefined;
450
+ client_id?: string | undefined;
451
+ client_secret?: string | undefined;
452
+ client_assertion?: string | undefined;
453
+ client_assertion_type?: string | undefined;
377
454
  };
378
455
  } & {
379
456
  json: {
@@ -423,6 +500,17 @@ export declare const tokenRoutes: OpenAPIHono<{
423
500
  client_secret?: string | undefined;
424
501
  client_assertion?: string | undefined;
425
502
  client_assertion_type?: string | undefined;
503
+ } | {
504
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
505
+ subject_token: string;
506
+ subject_token_type: string;
507
+ audience?: string | undefined;
508
+ scope?: string | undefined;
509
+ organization?: string | undefined;
510
+ client_id?: string | undefined;
511
+ client_secret?: string | undefined;
512
+ client_assertion?: string | undefined;
513
+ client_assertion_type?: string | undefined;
426
514
  };
427
515
  };
428
516
  output: {
@@ -430,7 +518,7 @@ export declare const tokenRoutes: OpenAPIHono<{
430
518
  error_description?: string | undefined;
431
519
  };
432
520
  outputFormat: "json";
433
- status: 400;
521
+ status: 401;
434
522
  } | {
435
523
  input: {
436
524
  form: {
@@ -480,6 +568,17 @@ export declare const tokenRoutes: OpenAPIHono<{
480
568
  client_secret?: string | undefined;
481
569
  client_assertion?: string | undefined;
482
570
  client_assertion_type?: string | undefined;
571
+ } | {
572
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
573
+ subject_token: string;
574
+ subject_token_type: string;
575
+ audience?: string | undefined;
576
+ scope?: string | undefined;
577
+ organization?: string | undefined;
578
+ client_id?: string | undefined;
579
+ client_secret?: string | undefined;
580
+ client_assertion?: string | undefined;
581
+ client_assertion_type?: string | undefined;
483
582
  };
484
583
  } & {
485
584
  json: {
@@ -529,6 +628,17 @@ export declare const tokenRoutes: OpenAPIHono<{
529
628
  client_secret?: string | undefined;
530
629
  client_assertion?: string | undefined;
531
630
  client_assertion_type?: string | undefined;
631
+ } | {
632
+ grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
633
+ subject_token: string;
634
+ subject_token_type: string;
635
+ audience?: string | undefined;
636
+ scope?: string | undefined;
637
+ organization?: string | undefined;
638
+ client_id?: string | undefined;
639
+ client_secret?: string | undefined;
640
+ client_assertion?: string | undefined;
641
+ client_assertion_type?: string | undefined;
532
642
  };
533
643
  };
534
644
  output: {
@@ -8,8 +8,8 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<{
8
8
  input: {};
9
9
  output: {
10
10
  keys: {
11
- alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
12
11
  kty: "RSA" | "EC" | "oct";
12
+ alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
13
13
  kid?: string | undefined;
14
14
  use?: "sig" | "enc" | undefined;
15
15
  n?: string | undefined;
@@ -18,6 +18,7 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<{
18
18
  x?: string | undefined;
19
19
  y?: string | undefined;
20
20
  x5t?: string | undefined;
21
+ "x5t#S256"?: string | undefined;
21
22
  x5c?: string[] | undefined;
22
23
  }[];
23
24
  };
@@ -78,7 +78,7 @@ export declare const actionExecutionsRoutes: OpenAPIHono<{
78
78
  logs: {
79
79
  action_name: string;
80
80
  lines: {
81
- level: "error" | "log" | "debug" | "info" | "warn";
81
+ level: "error" | "log" | "info" | "warn" | "debug";
82
82
  message: string;
83
83
  }[];
84
84
  }[];
@@ -656,7 +656,7 @@ export declare const actionsRoutes: OpenAPIHono<{
656
656
  args: import("hono/utils/types").JSONValue[];
657
657
  }[];
658
658
  logs: {
659
- level: "error" | "log" | "debug" | "info" | "warn";
659
+ level: "error" | "log" | "info" | "warn" | "debug";
660
660
  message: string;
661
661
  }[];
662
662
  error?: string | undefined;
@@ -37,7 +37,7 @@ export declare const authenticationMethodsRoutes: OpenAPIHono<{
37
37
  };
38
38
  } & {
39
39
  json: {
40
- type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
40
+ type: "email" | "push" | "passkey" | "phone" | "webauthn-roaming" | "webauthn-platform" | "totp";
41
41
  phone_number?: string | undefined;
42
42
  totp_secret?: string | undefined;
43
43
  credential_id?: string | undefined;