authhero 9.14.0 → 9.16.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/assets/u/widget/authhero-widget.esm.js +1 -1
- package/dist/assets/u/widget/index.esm.js +1 -1
- package/dist/assets/u/widget/p-36898e2d.entry.js +1 -0
- package/dist/assets/u/widget/p-Che3Wd7J.js +1 -0
- package/dist/assets/u/widget/p-c6ec4c36.entry.js +1 -0
- package/dist/authhero.cjs +141 -141
- package/dist/authhero.d.ts +526 -243
- package/dist/authhero.mjs +14292 -13163
- package/dist/tsconfig.types.tsbuildinfo +1 -1
- package/dist/types/authentication-flows/custom-token-exchange.d.ts +21 -0
- package/dist/types/authentication-flows/passwordless.d.ts +3 -0
- package/dist/types/authentication-flows/token-exchange.d.ts +19 -0
- package/dist/types/generated/locale-types.d.ts +3 -0
- package/dist/types/helpers/client-assertion-replay.d.ts +17 -0
- package/dist/types/helpers/client-keys.d.ts +9 -0
- package/dist/types/helpers/client.d.ts +3 -0
- package/dist/types/helpers/dcr/metadata-mapping.d.ts +2 -2
- package/dist/types/helpers/organization-branding.d.ts +18 -0
- package/dist/types/helpers/reserved-claims.d.ts +2 -2
- package/dist/types/helpers/signing-certificate-authority.d.ts +99 -0
- package/dist/types/helpers/signing-keys.d.ts +7 -0
- package/dist/types/index.d.ts +399 -241
- package/dist/types/middlewares/reject-unknown-hosts.d.ts +13 -0
- package/dist/types/routes/auth-api/index.d.ts +140 -29
- package/dist/types/routes/auth-api/passwordless.d.ts +14 -14
- package/dist/types/routes/auth-api/revoke.d.ts +2 -2
- package/dist/types/routes/auth-api/token.d.ts +122 -12
- package/dist/types/routes/auth-api/well-known.d.ts +2 -1
- package/dist/types/routes/management-api/action-executions.d.ts +1 -1
- package/dist/types/routes/management-api/actions.d.ts +1 -1
- package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
- package/dist/types/routes/management-api/client-grants.d.ts +9 -9
- package/dist/types/routes/management-api/clients.d.ts +24 -0
- package/dist/types/routes/management-api/connections.d.ts +1 -1
- package/dist/types/routes/management-api/email-templates.d.ts +18 -18
- package/dist/types/routes/management-api/failed-events.d.ts +1 -1
- package/dist/types/routes/management-api/forms.d.ts +147 -126
- package/dist/types/routes/management-api/guardian.d.ts +5 -5
- package/dist/types/routes/management-api/helpers.d.ts +1 -1
- package/dist/types/routes/management-api/index.d.ts +258 -213
- package/dist/types/routes/management-api/keys.d.ts +8 -8
- package/dist/types/routes/management-api/logs.d.ts +4 -4
- package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
- package/dist/types/routes/management-api/organizations.d.ts +1 -1
- package/dist/types/routes/management-api/prompts.d.ts +4 -4
- package/dist/types/routes/management-api/roles.d.ts +1 -1
- package/dist/types/routes/management-api/tenant-export-import.d.ts +5 -5
- package/dist/types/routes/management-api/tenant-operations.d.ts +1 -1
- package/dist/types/routes/management-api/tenants.d.ts +8 -8
- package/dist/types/routes/management-api/token-exchange-profiles.d.ts +327 -0
- package/dist/types/routes/management-api/users.d.ts +21 -21
- package/dist/types/routes/universal-login/common.d.ts +8 -2
- package/dist/types/routes/universal-login/flow-api.d.ts +8 -8
- package/dist/types/routes/universal-login/screens/login-otp.d.ts +17 -0
- package/dist/types/routes/universal-login/screens/types.d.ts +6 -0
- package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
- package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
- package/dist/types/state-machines/login-session.d.ts +1 -1
- package/dist/types/types/AuthHeroConfig.d.ts +38 -0
- package/dist/types/types/Bindings.d.ts +3 -0
- package/dist/types/utils/encryption.d.ts +20 -0
- package/dist/types/utils/jwks.d.ts +6 -3
- package/dist/types/utils/jws-verify.d.ts +46 -0
- package/package.json +6 -6
- package/dist/assets/u/widget/p-1471c0f2.entry.js +0 -1
- package/dist/assets/u/widget/p-c2744f87.entry.js +0 -1
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import { MiddlewareHandler } from "hono";
|
|
2
|
+
import { Bindings, Variables } from "../types";
|
|
3
|
+
/**
|
|
4
|
+
* Opt-in (`init({ rejectUnknownHosts: true })`). Without it, discovery and
|
|
5
|
+
* JWKS on a host this deployment doesn't own fall back to the control-plane
|
|
6
|
+
* keys and apex metadata, so anyone could point a domain at the worker and
|
|
7
|
+
* serve AuthHero discovery from it. Mounted on every `/.well-known/*` route,
|
|
8
|
+
* including the MCP protected-resource metadata.
|
|
9
|
+
*/
|
|
10
|
+
export declare const rejectUnknownHostsMiddleware: MiddlewareHandler<{
|
|
11
|
+
Bindings: Bindings;
|
|
12
|
+
Variables: Variables;
|
|
13
|
+
}>;
|
|
@@ -741,20 +741,20 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
741
741
|
email: string;
|
|
742
742
|
send: "code" | "link";
|
|
743
743
|
authParams: {
|
|
744
|
-
scope?: string | undefined;
|
|
745
|
-
state?: string | undefined;
|
|
746
|
-
username?: string | undefined;
|
|
747
744
|
response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
|
|
748
745
|
response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
|
|
746
|
+
scope?: string | undefined;
|
|
747
|
+
username?: string | undefined;
|
|
749
748
|
audience?: string | undefined;
|
|
750
|
-
redirect_uri?: string | undefined;
|
|
751
|
-
nonce?: string | undefined;
|
|
752
|
-
act_as?: string | undefined;
|
|
753
749
|
organization?: string | undefined;
|
|
750
|
+
state?: string | undefined;
|
|
751
|
+
redirect_uri?: string | undefined;
|
|
754
752
|
prompt?: string | undefined;
|
|
753
|
+
ui_locales?: string | undefined;
|
|
754
|
+
act_as?: string | undefined;
|
|
755
|
+
nonce?: string | undefined;
|
|
755
756
|
code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
|
|
756
757
|
code_challenge?: string | undefined;
|
|
757
|
-
ui_locales?: string | undefined;
|
|
758
758
|
max_age?: number | undefined;
|
|
759
759
|
acr_values?: string | undefined;
|
|
760
760
|
claims?: {
|
|
@@ -777,20 +777,20 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
777
777
|
phone_number: string;
|
|
778
778
|
send: "code" | "link";
|
|
779
779
|
authParams: {
|
|
780
|
-
scope?: string | undefined;
|
|
781
|
-
state?: string | undefined;
|
|
782
|
-
username?: string | undefined;
|
|
783
780
|
response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
|
|
784
781
|
response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
|
|
782
|
+
scope?: string | undefined;
|
|
783
|
+
username?: string | undefined;
|
|
785
784
|
audience?: string | undefined;
|
|
786
|
-
redirect_uri?: string | undefined;
|
|
787
|
-
nonce?: string | undefined;
|
|
788
|
-
act_as?: string | undefined;
|
|
789
785
|
organization?: string | undefined;
|
|
786
|
+
state?: string | undefined;
|
|
787
|
+
redirect_uri?: string | undefined;
|
|
790
788
|
prompt?: string | undefined;
|
|
789
|
+
ui_locales?: string | undefined;
|
|
790
|
+
act_as?: string | undefined;
|
|
791
|
+
nonce?: string | undefined;
|
|
791
792
|
code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
|
|
792
793
|
code_challenge?: string | undefined;
|
|
793
|
-
ui_locales?: string | undefined;
|
|
794
794
|
max_age?: number | undefined;
|
|
795
795
|
acr_values?: string | undefined;
|
|
796
796
|
claims?: {
|
|
@@ -957,7 +957,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
957
957
|
error_description?: string | undefined;
|
|
958
958
|
};
|
|
959
959
|
outputFormat: "json";
|
|
960
|
-
status:
|
|
960
|
+
status: 400;
|
|
961
961
|
} | {
|
|
962
962
|
input: {
|
|
963
963
|
form: {
|
|
@@ -979,7 +979,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
979
979
|
error_description?: string | undefined;
|
|
980
980
|
};
|
|
981
981
|
outputFormat: "json";
|
|
982
|
-
status:
|
|
982
|
+
status: 401;
|
|
983
983
|
};
|
|
984
984
|
};
|
|
985
985
|
}, "/oauth/revoke"> & import("hono/types").MergeSchemaPath<{
|
|
@@ -1033,6 +1033,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1033
1033
|
client_secret?: string | undefined;
|
|
1034
1034
|
client_assertion?: string | undefined;
|
|
1035
1035
|
client_assertion_type?: string | undefined;
|
|
1036
|
+
} | {
|
|
1037
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1038
|
+
subject_token: string;
|
|
1039
|
+
subject_token_type: string;
|
|
1040
|
+
audience?: string | undefined;
|
|
1041
|
+
scope?: string | undefined;
|
|
1042
|
+
organization?: string | undefined;
|
|
1043
|
+
client_id?: string | undefined;
|
|
1044
|
+
client_secret?: string | undefined;
|
|
1045
|
+
client_assertion?: string | undefined;
|
|
1046
|
+
client_assertion_type?: string | undefined;
|
|
1036
1047
|
};
|
|
1037
1048
|
} & {
|
|
1038
1049
|
json: {
|
|
@@ -1082,6 +1093,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1082
1093
|
client_secret?: string | undefined;
|
|
1083
1094
|
client_assertion?: string | undefined;
|
|
1084
1095
|
client_assertion_type?: string | undefined;
|
|
1096
|
+
} | {
|
|
1097
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1098
|
+
subject_token: string;
|
|
1099
|
+
subject_token_type: string;
|
|
1100
|
+
audience?: string | undefined;
|
|
1101
|
+
scope?: string | undefined;
|
|
1102
|
+
organization?: string | undefined;
|
|
1103
|
+
client_id?: string | undefined;
|
|
1104
|
+
client_secret?: string | undefined;
|
|
1105
|
+
client_assertion?: string | undefined;
|
|
1106
|
+
client_assertion_type?: string | undefined;
|
|
1085
1107
|
};
|
|
1086
1108
|
};
|
|
1087
1109
|
output: {};
|
|
@@ -1136,6 +1158,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1136
1158
|
client_secret?: string | undefined;
|
|
1137
1159
|
client_assertion?: string | undefined;
|
|
1138
1160
|
client_assertion_type?: string | undefined;
|
|
1161
|
+
} | {
|
|
1162
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1163
|
+
subject_token: string;
|
|
1164
|
+
subject_token_type: string;
|
|
1165
|
+
audience?: string | undefined;
|
|
1166
|
+
scope?: string | undefined;
|
|
1167
|
+
organization?: string | undefined;
|
|
1168
|
+
client_id?: string | undefined;
|
|
1169
|
+
client_secret?: string | undefined;
|
|
1170
|
+
client_assertion?: string | undefined;
|
|
1171
|
+
client_assertion_type?: string | undefined;
|
|
1139
1172
|
};
|
|
1140
1173
|
} & {
|
|
1141
1174
|
json: {
|
|
@@ -1185,14 +1218,30 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1185
1218
|
client_secret?: string | undefined;
|
|
1186
1219
|
client_assertion?: string | undefined;
|
|
1187
1220
|
client_assertion_type?: string | undefined;
|
|
1221
|
+
} | {
|
|
1222
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1223
|
+
subject_token: string;
|
|
1224
|
+
subject_token_type: string;
|
|
1225
|
+
audience?: string | undefined;
|
|
1226
|
+
scope?: string | undefined;
|
|
1227
|
+
organization?: string | undefined;
|
|
1228
|
+
client_id?: string | undefined;
|
|
1229
|
+
client_secret?: string | undefined;
|
|
1230
|
+
client_assertion?: string | undefined;
|
|
1231
|
+
client_assertion_type?: string | undefined;
|
|
1188
1232
|
};
|
|
1189
1233
|
};
|
|
1190
1234
|
output: {
|
|
1191
|
-
|
|
1192
|
-
|
|
1235
|
+
access_token: string;
|
|
1236
|
+
token_type: string;
|
|
1237
|
+
expires_in: number;
|
|
1238
|
+
id_token?: string | undefined;
|
|
1239
|
+
scope?: string | undefined;
|
|
1240
|
+
state?: string | undefined;
|
|
1241
|
+
refresh_token?: string | undefined;
|
|
1193
1242
|
};
|
|
1194
1243
|
outputFormat: "json";
|
|
1195
|
-
status:
|
|
1244
|
+
status: 200;
|
|
1196
1245
|
} | {
|
|
1197
1246
|
input: {
|
|
1198
1247
|
form: {
|
|
@@ -1242,6 +1291,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1242
1291
|
client_secret?: string | undefined;
|
|
1243
1292
|
client_assertion?: string | undefined;
|
|
1244
1293
|
client_assertion_type?: string | undefined;
|
|
1294
|
+
} | {
|
|
1295
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1296
|
+
subject_token: string;
|
|
1297
|
+
subject_token_type: string;
|
|
1298
|
+
audience?: string | undefined;
|
|
1299
|
+
scope?: string | undefined;
|
|
1300
|
+
organization?: string | undefined;
|
|
1301
|
+
client_id?: string | undefined;
|
|
1302
|
+
client_secret?: string | undefined;
|
|
1303
|
+
client_assertion?: string | undefined;
|
|
1304
|
+
client_assertion_type?: string | undefined;
|
|
1245
1305
|
};
|
|
1246
1306
|
} & {
|
|
1247
1307
|
json: {
|
|
@@ -1291,19 +1351,25 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1291
1351
|
client_secret?: string | undefined;
|
|
1292
1352
|
client_assertion?: string | undefined;
|
|
1293
1353
|
client_assertion_type?: string | undefined;
|
|
1354
|
+
} | {
|
|
1355
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1356
|
+
subject_token: string;
|
|
1357
|
+
subject_token_type: string;
|
|
1358
|
+
audience?: string | undefined;
|
|
1359
|
+
scope?: string | undefined;
|
|
1360
|
+
organization?: string | undefined;
|
|
1361
|
+
client_id?: string | undefined;
|
|
1362
|
+
client_secret?: string | undefined;
|
|
1363
|
+
client_assertion?: string | undefined;
|
|
1364
|
+
client_assertion_type?: string | undefined;
|
|
1294
1365
|
};
|
|
1295
1366
|
};
|
|
1296
1367
|
output: {
|
|
1297
|
-
|
|
1298
|
-
|
|
1299
|
-
expires_in: number;
|
|
1300
|
-
id_token?: string | undefined;
|
|
1301
|
-
scope?: string | undefined;
|
|
1302
|
-
state?: string | undefined;
|
|
1303
|
-
refresh_token?: string | undefined;
|
|
1368
|
+
error: string;
|
|
1369
|
+
error_description?: string | undefined;
|
|
1304
1370
|
};
|
|
1305
1371
|
outputFormat: "json";
|
|
1306
|
-
status:
|
|
1372
|
+
status: 400;
|
|
1307
1373
|
} | {
|
|
1308
1374
|
input: {
|
|
1309
1375
|
form: {
|
|
@@ -1353,6 +1419,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1353
1419
|
client_secret?: string | undefined;
|
|
1354
1420
|
client_assertion?: string | undefined;
|
|
1355
1421
|
client_assertion_type?: string | undefined;
|
|
1422
|
+
} | {
|
|
1423
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1424
|
+
subject_token: string;
|
|
1425
|
+
subject_token_type: string;
|
|
1426
|
+
audience?: string | undefined;
|
|
1427
|
+
scope?: string | undefined;
|
|
1428
|
+
organization?: string | undefined;
|
|
1429
|
+
client_id?: string | undefined;
|
|
1430
|
+
client_secret?: string | undefined;
|
|
1431
|
+
client_assertion?: string | undefined;
|
|
1432
|
+
client_assertion_type?: string | undefined;
|
|
1356
1433
|
};
|
|
1357
1434
|
} & {
|
|
1358
1435
|
json: {
|
|
@@ -1402,6 +1479,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1402
1479
|
client_secret?: string | undefined;
|
|
1403
1480
|
client_assertion?: string | undefined;
|
|
1404
1481
|
client_assertion_type?: string | undefined;
|
|
1482
|
+
} | {
|
|
1483
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1484
|
+
subject_token: string;
|
|
1485
|
+
subject_token_type: string;
|
|
1486
|
+
audience?: string | undefined;
|
|
1487
|
+
scope?: string | undefined;
|
|
1488
|
+
organization?: string | undefined;
|
|
1489
|
+
client_id?: string | undefined;
|
|
1490
|
+
client_secret?: string | undefined;
|
|
1491
|
+
client_assertion?: string | undefined;
|
|
1492
|
+
client_assertion_type?: string | undefined;
|
|
1405
1493
|
};
|
|
1406
1494
|
};
|
|
1407
1495
|
output: {
|
|
@@ -1409,7 +1497,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1409
1497
|
error_description?: string | undefined;
|
|
1410
1498
|
};
|
|
1411
1499
|
outputFormat: "json";
|
|
1412
|
-
status:
|
|
1500
|
+
status: 401;
|
|
1413
1501
|
} | {
|
|
1414
1502
|
input: {
|
|
1415
1503
|
form: {
|
|
@@ -1459,6 +1547,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1459
1547
|
client_secret?: string | undefined;
|
|
1460
1548
|
client_assertion?: string | undefined;
|
|
1461
1549
|
client_assertion_type?: string | undefined;
|
|
1550
|
+
} | {
|
|
1551
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1552
|
+
subject_token: string;
|
|
1553
|
+
subject_token_type: string;
|
|
1554
|
+
audience?: string | undefined;
|
|
1555
|
+
scope?: string | undefined;
|
|
1556
|
+
organization?: string | undefined;
|
|
1557
|
+
client_id?: string | undefined;
|
|
1558
|
+
client_secret?: string | undefined;
|
|
1559
|
+
client_assertion?: string | undefined;
|
|
1560
|
+
client_assertion_type?: string | undefined;
|
|
1462
1561
|
};
|
|
1463
1562
|
} & {
|
|
1464
1563
|
json: {
|
|
@@ -1508,6 +1607,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1508
1607
|
client_secret?: string | undefined;
|
|
1509
1608
|
client_assertion?: string | undefined;
|
|
1510
1609
|
client_assertion_type?: string | undefined;
|
|
1610
|
+
} | {
|
|
1611
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
1612
|
+
subject_token: string;
|
|
1613
|
+
subject_token_type: string;
|
|
1614
|
+
audience?: string | undefined;
|
|
1615
|
+
scope?: string | undefined;
|
|
1616
|
+
organization?: string | undefined;
|
|
1617
|
+
client_id?: string | undefined;
|
|
1618
|
+
client_secret?: string | undefined;
|
|
1619
|
+
client_assertion?: string | undefined;
|
|
1620
|
+
client_assertion_type?: string | undefined;
|
|
1511
1621
|
};
|
|
1512
1622
|
};
|
|
1513
1623
|
output: {
|
|
@@ -1524,8 +1634,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1524
1634
|
input: {};
|
|
1525
1635
|
output: {
|
|
1526
1636
|
keys: {
|
|
1527
|
-
alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
|
|
1528
1637
|
kty: "RSA" | "EC" | "oct";
|
|
1638
|
+
alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
|
|
1529
1639
|
kid?: string | undefined;
|
|
1530
1640
|
use?: "sig" | "enc" | undefined;
|
|
1531
1641
|
n?: string | undefined;
|
|
@@ -1534,6 +1644,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
1534
1644
|
x?: string | undefined;
|
|
1535
1645
|
y?: string | undefined;
|
|
1536
1646
|
x5t?: string | undefined;
|
|
1647
|
+
"x5t#S256"?: string | undefined;
|
|
1537
1648
|
x5c?: string[] | undefined;
|
|
1538
1649
|
}[];
|
|
1539
1650
|
};
|
|
@@ -14,20 +14,20 @@ export declare const passwordlessRoutes: OpenAPIHono<{
|
|
|
14
14
|
email: string;
|
|
15
15
|
send: "code" | "link";
|
|
16
16
|
authParams: {
|
|
17
|
-
scope?: string | undefined;
|
|
18
|
-
state?: string | undefined;
|
|
19
|
-
username?: string | undefined;
|
|
20
17
|
response_type?: AuthorizationResponseType | undefined;
|
|
21
18
|
response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
|
|
19
|
+
scope?: string | undefined;
|
|
20
|
+
username?: string | undefined;
|
|
22
21
|
audience?: string | undefined;
|
|
23
|
-
redirect_uri?: string | undefined;
|
|
24
|
-
nonce?: string | undefined;
|
|
25
|
-
act_as?: string | undefined;
|
|
26
22
|
organization?: string | undefined;
|
|
23
|
+
state?: string | undefined;
|
|
24
|
+
redirect_uri?: string | undefined;
|
|
27
25
|
prompt?: string | undefined;
|
|
26
|
+
ui_locales?: string | undefined;
|
|
27
|
+
act_as?: string | undefined;
|
|
28
|
+
nonce?: string | undefined;
|
|
28
29
|
code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
|
|
29
30
|
code_challenge?: string | undefined;
|
|
30
|
-
ui_locales?: string | undefined;
|
|
31
31
|
max_age?: number | undefined;
|
|
32
32
|
acr_values?: string | undefined;
|
|
33
33
|
claims?: {
|
|
@@ -50,20 +50,20 @@ export declare const passwordlessRoutes: OpenAPIHono<{
|
|
|
50
50
|
phone_number: string;
|
|
51
51
|
send: "code" | "link";
|
|
52
52
|
authParams: {
|
|
53
|
-
scope?: string | undefined;
|
|
54
|
-
state?: string | undefined;
|
|
55
|
-
username?: string | undefined;
|
|
56
53
|
response_type?: AuthorizationResponseType | undefined;
|
|
57
54
|
response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
|
|
55
|
+
scope?: string | undefined;
|
|
56
|
+
username?: string | undefined;
|
|
58
57
|
audience?: string | undefined;
|
|
59
|
-
redirect_uri?: string | undefined;
|
|
60
|
-
nonce?: string | undefined;
|
|
61
|
-
act_as?: string | undefined;
|
|
62
58
|
organization?: string | undefined;
|
|
59
|
+
state?: string | undefined;
|
|
60
|
+
redirect_uri?: string | undefined;
|
|
63
61
|
prompt?: string | undefined;
|
|
62
|
+
ui_locales?: string | undefined;
|
|
63
|
+
act_as?: string | undefined;
|
|
64
|
+
nonce?: string | undefined;
|
|
64
65
|
code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
|
|
65
66
|
code_challenge?: string | undefined;
|
|
66
|
-
ui_locales?: string | undefined;
|
|
67
67
|
max_age?: number | undefined;
|
|
68
68
|
acr_values?: string | undefined;
|
|
69
69
|
claims?: {
|
|
@@ -45,7 +45,7 @@ export declare const revokeRoutes: OpenAPIHono<{
|
|
|
45
45
|
error_description?: string | undefined;
|
|
46
46
|
};
|
|
47
47
|
outputFormat: "json";
|
|
48
|
-
status:
|
|
48
|
+
status: 400;
|
|
49
49
|
} | {
|
|
50
50
|
input: {
|
|
51
51
|
form: {
|
|
@@ -67,7 +67,7 @@ export declare const revokeRoutes: OpenAPIHono<{
|
|
|
67
67
|
error_description?: string | undefined;
|
|
68
68
|
};
|
|
69
69
|
outputFormat: "json";
|
|
70
|
-
status:
|
|
70
|
+
status: 401;
|
|
71
71
|
};
|
|
72
72
|
};
|
|
73
73
|
}, "/">;
|
|
@@ -54,6 +54,17 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
54
54
|
client_secret?: string | undefined;
|
|
55
55
|
client_assertion?: string | undefined;
|
|
56
56
|
client_assertion_type?: string | undefined;
|
|
57
|
+
} | {
|
|
58
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
59
|
+
subject_token: string;
|
|
60
|
+
subject_token_type: string;
|
|
61
|
+
audience?: string | undefined;
|
|
62
|
+
scope?: string | undefined;
|
|
63
|
+
organization?: string | undefined;
|
|
64
|
+
client_id?: string | undefined;
|
|
65
|
+
client_secret?: string | undefined;
|
|
66
|
+
client_assertion?: string | undefined;
|
|
67
|
+
client_assertion_type?: string | undefined;
|
|
57
68
|
};
|
|
58
69
|
} & {
|
|
59
70
|
json: {
|
|
@@ -103,6 +114,17 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
103
114
|
client_secret?: string | undefined;
|
|
104
115
|
client_assertion?: string | undefined;
|
|
105
116
|
client_assertion_type?: string | undefined;
|
|
117
|
+
} | {
|
|
118
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
119
|
+
subject_token: string;
|
|
120
|
+
subject_token_type: string;
|
|
121
|
+
audience?: string | undefined;
|
|
122
|
+
scope?: string | undefined;
|
|
123
|
+
organization?: string | undefined;
|
|
124
|
+
client_id?: string | undefined;
|
|
125
|
+
client_secret?: string | undefined;
|
|
126
|
+
client_assertion?: string | undefined;
|
|
127
|
+
client_assertion_type?: string | undefined;
|
|
106
128
|
};
|
|
107
129
|
};
|
|
108
130
|
output: {};
|
|
@@ -157,6 +179,17 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
157
179
|
client_secret?: string | undefined;
|
|
158
180
|
client_assertion?: string | undefined;
|
|
159
181
|
client_assertion_type?: string | undefined;
|
|
182
|
+
} | {
|
|
183
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
184
|
+
subject_token: string;
|
|
185
|
+
subject_token_type: string;
|
|
186
|
+
audience?: string | undefined;
|
|
187
|
+
scope?: string | undefined;
|
|
188
|
+
organization?: string | undefined;
|
|
189
|
+
client_id?: string | undefined;
|
|
190
|
+
client_secret?: string | undefined;
|
|
191
|
+
client_assertion?: string | undefined;
|
|
192
|
+
client_assertion_type?: string | undefined;
|
|
160
193
|
};
|
|
161
194
|
} & {
|
|
162
195
|
json: {
|
|
@@ -206,14 +239,30 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
206
239
|
client_secret?: string | undefined;
|
|
207
240
|
client_assertion?: string | undefined;
|
|
208
241
|
client_assertion_type?: string | undefined;
|
|
242
|
+
} | {
|
|
243
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
244
|
+
subject_token: string;
|
|
245
|
+
subject_token_type: string;
|
|
246
|
+
audience?: string | undefined;
|
|
247
|
+
scope?: string | undefined;
|
|
248
|
+
organization?: string | undefined;
|
|
249
|
+
client_id?: string | undefined;
|
|
250
|
+
client_secret?: string | undefined;
|
|
251
|
+
client_assertion?: string | undefined;
|
|
252
|
+
client_assertion_type?: string | undefined;
|
|
209
253
|
};
|
|
210
254
|
};
|
|
211
255
|
output: {
|
|
212
|
-
|
|
213
|
-
|
|
256
|
+
access_token: string;
|
|
257
|
+
token_type: string;
|
|
258
|
+
expires_in: number;
|
|
259
|
+
id_token?: string | undefined;
|
|
260
|
+
scope?: string | undefined;
|
|
261
|
+
state?: string | undefined;
|
|
262
|
+
refresh_token?: string | undefined;
|
|
214
263
|
};
|
|
215
264
|
outputFormat: "json";
|
|
216
|
-
status:
|
|
265
|
+
status: 200;
|
|
217
266
|
} | {
|
|
218
267
|
input: {
|
|
219
268
|
form: {
|
|
@@ -263,6 +312,17 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
263
312
|
client_secret?: string | undefined;
|
|
264
313
|
client_assertion?: string | undefined;
|
|
265
314
|
client_assertion_type?: string | undefined;
|
|
315
|
+
} | {
|
|
316
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
317
|
+
subject_token: string;
|
|
318
|
+
subject_token_type: string;
|
|
319
|
+
audience?: string | undefined;
|
|
320
|
+
scope?: string | undefined;
|
|
321
|
+
organization?: string | undefined;
|
|
322
|
+
client_id?: string | undefined;
|
|
323
|
+
client_secret?: string | undefined;
|
|
324
|
+
client_assertion?: string | undefined;
|
|
325
|
+
client_assertion_type?: string | undefined;
|
|
266
326
|
};
|
|
267
327
|
} & {
|
|
268
328
|
json: {
|
|
@@ -312,19 +372,25 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
312
372
|
client_secret?: string | undefined;
|
|
313
373
|
client_assertion?: string | undefined;
|
|
314
374
|
client_assertion_type?: string | undefined;
|
|
375
|
+
} | {
|
|
376
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
377
|
+
subject_token: string;
|
|
378
|
+
subject_token_type: string;
|
|
379
|
+
audience?: string | undefined;
|
|
380
|
+
scope?: string | undefined;
|
|
381
|
+
organization?: string | undefined;
|
|
382
|
+
client_id?: string | undefined;
|
|
383
|
+
client_secret?: string | undefined;
|
|
384
|
+
client_assertion?: string | undefined;
|
|
385
|
+
client_assertion_type?: string | undefined;
|
|
315
386
|
};
|
|
316
387
|
};
|
|
317
388
|
output: {
|
|
318
|
-
|
|
319
|
-
|
|
320
|
-
expires_in: number;
|
|
321
|
-
id_token?: string | undefined;
|
|
322
|
-
scope?: string | undefined;
|
|
323
|
-
state?: string | undefined;
|
|
324
|
-
refresh_token?: string | undefined;
|
|
389
|
+
error: string;
|
|
390
|
+
error_description?: string | undefined;
|
|
325
391
|
};
|
|
326
392
|
outputFormat: "json";
|
|
327
|
-
status:
|
|
393
|
+
status: 400;
|
|
328
394
|
} | {
|
|
329
395
|
input: {
|
|
330
396
|
form: {
|
|
@@ -374,6 +440,17 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
374
440
|
client_secret?: string | undefined;
|
|
375
441
|
client_assertion?: string | undefined;
|
|
376
442
|
client_assertion_type?: string | undefined;
|
|
443
|
+
} | {
|
|
444
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
445
|
+
subject_token: string;
|
|
446
|
+
subject_token_type: string;
|
|
447
|
+
audience?: string | undefined;
|
|
448
|
+
scope?: string | undefined;
|
|
449
|
+
organization?: string | undefined;
|
|
450
|
+
client_id?: string | undefined;
|
|
451
|
+
client_secret?: string | undefined;
|
|
452
|
+
client_assertion?: string | undefined;
|
|
453
|
+
client_assertion_type?: string | undefined;
|
|
377
454
|
};
|
|
378
455
|
} & {
|
|
379
456
|
json: {
|
|
@@ -423,6 +500,17 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
423
500
|
client_secret?: string | undefined;
|
|
424
501
|
client_assertion?: string | undefined;
|
|
425
502
|
client_assertion_type?: string | undefined;
|
|
503
|
+
} | {
|
|
504
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
505
|
+
subject_token: string;
|
|
506
|
+
subject_token_type: string;
|
|
507
|
+
audience?: string | undefined;
|
|
508
|
+
scope?: string | undefined;
|
|
509
|
+
organization?: string | undefined;
|
|
510
|
+
client_id?: string | undefined;
|
|
511
|
+
client_secret?: string | undefined;
|
|
512
|
+
client_assertion?: string | undefined;
|
|
513
|
+
client_assertion_type?: string | undefined;
|
|
426
514
|
};
|
|
427
515
|
};
|
|
428
516
|
output: {
|
|
@@ -430,7 +518,7 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
430
518
|
error_description?: string | undefined;
|
|
431
519
|
};
|
|
432
520
|
outputFormat: "json";
|
|
433
|
-
status:
|
|
521
|
+
status: 401;
|
|
434
522
|
} | {
|
|
435
523
|
input: {
|
|
436
524
|
form: {
|
|
@@ -480,6 +568,17 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
480
568
|
client_secret?: string | undefined;
|
|
481
569
|
client_assertion?: string | undefined;
|
|
482
570
|
client_assertion_type?: string | undefined;
|
|
571
|
+
} | {
|
|
572
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
573
|
+
subject_token: string;
|
|
574
|
+
subject_token_type: string;
|
|
575
|
+
audience?: string | undefined;
|
|
576
|
+
scope?: string | undefined;
|
|
577
|
+
organization?: string | undefined;
|
|
578
|
+
client_id?: string | undefined;
|
|
579
|
+
client_secret?: string | undefined;
|
|
580
|
+
client_assertion?: string | undefined;
|
|
581
|
+
client_assertion_type?: string | undefined;
|
|
483
582
|
};
|
|
484
583
|
} & {
|
|
485
584
|
json: {
|
|
@@ -529,6 +628,17 @@ export declare const tokenRoutes: OpenAPIHono<{
|
|
|
529
628
|
client_secret?: string | undefined;
|
|
530
629
|
client_assertion?: string | undefined;
|
|
531
630
|
client_assertion_type?: string | undefined;
|
|
631
|
+
} | {
|
|
632
|
+
grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
|
|
633
|
+
subject_token: string;
|
|
634
|
+
subject_token_type: string;
|
|
635
|
+
audience?: string | undefined;
|
|
636
|
+
scope?: string | undefined;
|
|
637
|
+
organization?: string | undefined;
|
|
638
|
+
client_id?: string | undefined;
|
|
639
|
+
client_secret?: string | undefined;
|
|
640
|
+
client_assertion?: string | undefined;
|
|
641
|
+
client_assertion_type?: string | undefined;
|
|
532
642
|
};
|
|
533
643
|
};
|
|
534
644
|
output: {
|
|
@@ -8,8 +8,8 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<{
|
|
|
8
8
|
input: {};
|
|
9
9
|
output: {
|
|
10
10
|
keys: {
|
|
11
|
-
alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
|
|
12
11
|
kty: "RSA" | "EC" | "oct";
|
|
12
|
+
alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
|
|
13
13
|
kid?: string | undefined;
|
|
14
14
|
use?: "sig" | "enc" | undefined;
|
|
15
15
|
n?: string | undefined;
|
|
@@ -18,6 +18,7 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<{
|
|
|
18
18
|
x?: string | undefined;
|
|
19
19
|
y?: string | undefined;
|
|
20
20
|
x5t?: string | undefined;
|
|
21
|
+
"x5t#S256"?: string | undefined;
|
|
21
22
|
x5c?: string[] | undefined;
|
|
22
23
|
}[];
|
|
23
24
|
};
|
|
@@ -656,7 +656,7 @@ export declare const actionsRoutes: OpenAPIHono<{
|
|
|
656
656
|
args: import("hono/utils/types").JSONValue[];
|
|
657
657
|
}[];
|
|
658
658
|
logs: {
|
|
659
|
-
level: "error" | "log" | "
|
|
659
|
+
level: "error" | "log" | "info" | "warn" | "debug";
|
|
660
660
|
message: string;
|
|
661
661
|
}[];
|
|
662
662
|
error?: string | undefined;
|
|
@@ -37,7 +37,7 @@ export declare const authenticationMethodsRoutes: OpenAPIHono<{
|
|
|
37
37
|
};
|
|
38
38
|
} & {
|
|
39
39
|
json: {
|
|
40
|
-
type: "
|
|
40
|
+
type: "email" | "push" | "passkey" | "phone" | "webauthn-roaming" | "webauthn-platform" | "totp";
|
|
41
41
|
phone_number?: string | undefined;
|
|
42
42
|
totp_secret?: string | undefined;
|
|
43
43
|
credential_id?: string | undefined;
|