authhero 9.14.0 → 9.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/dist/assets/u/widget/authhero-widget.esm.js +1 -1
  2. package/dist/assets/u/widget/index.esm.js +1 -1
  3. package/dist/assets/u/widget/p-36898e2d.entry.js +1 -0
  4. package/dist/assets/u/widget/p-Che3Wd7J.js +1 -0
  5. package/dist/assets/u/widget/p-c6ec4c36.entry.js +1 -0
  6. package/dist/authhero.cjs +141 -141
  7. package/dist/authhero.d.ts +526 -243
  8. package/dist/authhero.mjs +14292 -13163
  9. package/dist/tsconfig.types.tsbuildinfo +1 -1
  10. package/dist/types/authentication-flows/custom-token-exchange.d.ts +21 -0
  11. package/dist/types/authentication-flows/passwordless.d.ts +3 -0
  12. package/dist/types/authentication-flows/token-exchange.d.ts +19 -0
  13. package/dist/types/generated/locale-types.d.ts +3 -0
  14. package/dist/types/helpers/client-assertion-replay.d.ts +17 -0
  15. package/dist/types/helpers/client-keys.d.ts +9 -0
  16. package/dist/types/helpers/client.d.ts +3 -0
  17. package/dist/types/helpers/dcr/metadata-mapping.d.ts +2 -2
  18. package/dist/types/helpers/organization-branding.d.ts +18 -0
  19. package/dist/types/helpers/reserved-claims.d.ts +2 -2
  20. package/dist/types/helpers/signing-certificate-authority.d.ts +99 -0
  21. package/dist/types/helpers/signing-keys.d.ts +7 -0
  22. package/dist/types/index.d.ts +399 -241
  23. package/dist/types/middlewares/reject-unknown-hosts.d.ts +13 -0
  24. package/dist/types/routes/auth-api/index.d.ts +140 -29
  25. package/dist/types/routes/auth-api/passwordless.d.ts +14 -14
  26. package/dist/types/routes/auth-api/revoke.d.ts +2 -2
  27. package/dist/types/routes/auth-api/token.d.ts +122 -12
  28. package/dist/types/routes/auth-api/well-known.d.ts +2 -1
  29. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  30. package/dist/types/routes/management-api/actions.d.ts +1 -1
  31. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  32. package/dist/types/routes/management-api/client-grants.d.ts +9 -9
  33. package/dist/types/routes/management-api/clients.d.ts +24 -0
  34. package/dist/types/routes/management-api/connections.d.ts +1 -1
  35. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  36. package/dist/types/routes/management-api/failed-events.d.ts +1 -1
  37. package/dist/types/routes/management-api/forms.d.ts +147 -126
  38. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  39. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  40. package/dist/types/routes/management-api/index.d.ts +258 -213
  41. package/dist/types/routes/management-api/keys.d.ts +8 -8
  42. package/dist/types/routes/management-api/logs.d.ts +4 -4
  43. package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
  44. package/dist/types/routes/management-api/organizations.d.ts +1 -1
  45. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  46. package/dist/types/routes/management-api/roles.d.ts +1 -1
  47. package/dist/types/routes/management-api/tenant-export-import.d.ts +5 -5
  48. package/dist/types/routes/management-api/tenant-operations.d.ts +1 -1
  49. package/dist/types/routes/management-api/tenants.d.ts +8 -8
  50. package/dist/types/routes/management-api/token-exchange-profiles.d.ts +327 -0
  51. package/dist/types/routes/management-api/users.d.ts +21 -21
  52. package/dist/types/routes/universal-login/common.d.ts +8 -2
  53. package/dist/types/routes/universal-login/flow-api.d.ts +8 -8
  54. package/dist/types/routes/universal-login/screens/login-otp.d.ts +17 -0
  55. package/dist/types/routes/universal-login/screens/types.d.ts +6 -0
  56. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  57. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  58. package/dist/types/state-machines/login-session.d.ts +1 -1
  59. package/dist/types/types/AuthHeroConfig.d.ts +38 -0
  60. package/dist/types/types/Bindings.d.ts +3 -0
  61. package/dist/types/utils/encryption.d.ts +20 -0
  62. package/dist/types/utils/jwks.d.ts +6 -3
  63. package/dist/types/utils/jws-verify.d.ts +46 -0
  64. package/package.json +6 -6
  65. package/dist/assets/u/widget/p-1471c0f2.entry.js +0 -1
  66. package/dist/assets/u/widget/p-c2744f87.entry.js +0 -1
@@ -17,12 +17,11 @@ export declare const keyRoutes: OpenAPIHono<{
17
17
  };
18
18
  output: {
19
19
  kid: string;
20
- type: "jwt_signing" | "saml_encryption";
21
20
  cert: string;
22
21
  fingerprint: string;
23
22
  thumbprint: string;
23
+ type: "jwt_signing" | "saml_encryption";
24
24
  tenant_id?: string | undefined;
25
- connection?: string | undefined;
26
25
  current?: boolean | undefined;
27
26
  next?: boolean | undefined;
28
27
  previous?: boolean | undefined;
@@ -30,6 +29,7 @@ export declare const keyRoutes: OpenAPIHono<{
30
29
  current_until?: string | undefined;
31
30
  revoked?: boolean | undefined;
32
31
  revoked_at?: string | undefined;
32
+ connection?: string | undefined;
33
33
  expires_at?: string | undefined;
34
34
  expired?: boolean | undefined;
35
35
  inherited?: boolean | undefined;
@@ -56,12 +56,11 @@ export declare const keyRoutes: OpenAPIHono<{
56
56
  };
57
57
  output: {
58
58
  kid: string;
59
- type: "jwt_signing" | "saml_encryption";
60
59
  cert: string;
61
60
  fingerprint: string;
62
61
  thumbprint: string;
62
+ type: "jwt_signing" | "saml_encryption";
63
63
  tenant_id?: string | undefined;
64
- connection?: string | undefined;
65
64
  current?: boolean | undefined;
66
65
  next?: boolean | undefined;
67
66
  previous?: boolean | undefined;
@@ -69,6 +68,7 @@ export declare const keyRoutes: OpenAPIHono<{
69
68
  current_until?: string | undefined;
70
69
  revoked?: boolean | undefined;
71
70
  revoked_at?: string | undefined;
71
+ connection?: string | undefined;
72
72
  expires_at?: string | undefined;
73
73
  expired?: boolean | undefined;
74
74
  inherited?: boolean | undefined;
@@ -94,12 +94,11 @@ export declare const keyRoutes: OpenAPIHono<{
94
94
  };
95
95
  output: {
96
96
  kid: string;
97
- type: "jwt_signing" | "saml_encryption";
98
97
  cert: string;
99
98
  fingerprint: string;
100
99
  thumbprint: string;
100
+ type: "jwt_signing" | "saml_encryption";
101
101
  tenant_id?: string | undefined;
102
- connection?: string | undefined;
103
102
  current?: boolean | undefined;
104
103
  next?: boolean | undefined;
105
104
  previous?: boolean | undefined;
@@ -107,6 +106,7 @@ export declare const keyRoutes: OpenAPIHono<{
107
106
  current_until?: string | undefined;
108
107
  revoked?: boolean | undefined;
109
108
  revoked_at?: string | undefined;
109
+ connection?: string | undefined;
110
110
  expires_at?: string | undefined;
111
111
  expired?: boolean | undefined;
112
112
  inherited?: boolean | undefined;
@@ -134,12 +134,11 @@ export declare const keyRoutes: OpenAPIHono<{
134
134
  };
135
135
  output: {
136
136
  kid: string;
137
- type: "jwt_signing" | "saml_encryption";
138
137
  cert: string;
139
138
  fingerprint: string;
140
139
  thumbprint: string;
140
+ type: "jwt_signing" | "saml_encryption";
141
141
  tenant_id?: string | undefined;
142
- connection?: string | undefined;
143
142
  current?: boolean | undefined;
144
143
  next?: boolean | undefined;
145
144
  previous?: boolean | undefined;
@@ -147,6 +146,7 @@ export declare const keyRoutes: OpenAPIHono<{
147
146
  current_until?: string | undefined;
148
147
  revoked?: boolean | undefined;
149
148
  revoked_at?: string | undefined;
149
+ connection?: string | undefined;
150
150
  expires_at?: string | undefined;
151
151
  expired?: boolean | undefined;
152
152
  inherited?: boolean | undefined;
@@ -24,7 +24,7 @@ export declare const logRoutes: OpenAPIHono<{
24
24
  };
25
25
  };
26
26
  output: {
27
- type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
27
+ type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
28
28
  date: string;
29
29
  isMobile: boolean;
30
30
  log_id: string;
@@ -63,7 +63,7 @@ export declare const logRoutes: OpenAPIHono<{
63
63
  limit: number;
64
64
  length: number;
65
65
  logs: {
66
- type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
66
+ type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
67
67
  date: string;
68
68
  isMobile: boolean;
69
69
  log_id: string;
@@ -102,7 +102,7 @@ export declare const logRoutes: OpenAPIHono<{
102
102
  next?: string | undefined;
103
103
  } | {
104
104
  logs: {
105
- type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
105
+ type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
106
106
  date: string;
107
107
  isMobile: boolean;
108
108
  log_id: string;
@@ -156,7 +156,7 @@ export declare const logRoutes: OpenAPIHono<{
156
156
  };
157
157
  };
158
158
  output: {
159
- type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
159
+ type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
160
160
  date: string;
161
161
  isMobile: boolean;
162
162
  log_id: string;
@@ -15,7 +15,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
15
15
  created_at: string;
16
16
  updated_at: string;
17
17
  name: string;
18
- provider: "auth0" | "oidc" | "okta" | "cognito";
18
+ provider: "auth0" | "cognito" | "okta" | "oidc";
19
19
  connection: string;
20
20
  enabled: boolean;
21
21
  credentials: {
@@ -47,7 +47,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
47
47
  created_at: string;
48
48
  updated_at: string;
49
49
  name: string;
50
- provider: "auth0" | "oidc" | "okta" | "cognito";
50
+ provider: "auth0" | "cognito" | "okta" | "oidc";
51
51
  connection: string;
52
52
  enabled: boolean;
53
53
  credentials: {
@@ -73,7 +73,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
73
73
  } & {
74
74
  json: {
75
75
  name: string;
76
- provider: "auth0" | "oidc" | "okta" | "cognito";
76
+ provider: "auth0" | "cognito" | "okta" | "oidc";
77
77
  connection: string;
78
78
  credentials: {
79
79
  domain: string;
@@ -90,7 +90,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
90
90
  created_at: string;
91
91
  updated_at: string;
92
92
  name: string;
93
- provider: "auth0" | "oidc" | "okta" | "cognito";
93
+ provider: "auth0" | "cognito" | "okta" | "oidc";
94
94
  connection: string;
95
95
  enabled: boolean;
96
96
  credentials: {
@@ -121,7 +121,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
121
121
  json: {
122
122
  id?: string | undefined;
123
123
  name?: string | undefined;
124
- provider?: "auth0" | "oidc" | "okta" | "cognito" | undefined;
124
+ provider?: "auth0" | "cognito" | "okta" | "oidc" | undefined;
125
125
  connection?: string | undefined;
126
126
  enabled?: boolean | undefined;
127
127
  credentials?: {
@@ -137,7 +137,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
137
137
  created_at: string;
138
138
  updated_at: string;
139
139
  name: string;
140
- provider: "auth0" | "oidc" | "okta" | "cognito";
140
+ provider: "auth0" | "cognito" | "okta" | "oidc";
141
141
  connection: string;
142
142
  enabled: boolean;
143
143
  credentials: {
@@ -737,9 +737,9 @@ export declare const organizationRoutes: OpenAPIHono<{
737
737
  };
738
738
  id?: string | undefined;
739
739
  roles?: string[] | undefined;
740
- connection_id?: string | undefined;
741
740
  app_metadata?: Record<string, any> | undefined;
742
741
  user_metadata?: Record<string, any> | undefined;
742
+ connection_id?: string | undefined;
743
743
  ttl_sec?: number | undefined;
744
744
  send_invitation_email?: boolean | undefined;
745
745
  };
@@ -52,7 +52,7 @@ export declare const promptsRoutes: OpenAPIHono<{
52
52
  };
53
53
  };
54
54
  output: {
55
- prompt: "status" | "signup" | "mfa" | "organizations" | "invitation" | "common" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
55
+ prompt: "signup" | "status" | "mfa" | "organizations" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
56
56
  language: string;
57
57
  }[];
58
58
  outputFormat: "json";
@@ -90,7 +90,7 @@ export declare const promptsRoutes: OpenAPIHono<{
90
90
  $get: {
91
91
  input: {
92
92
  param: {
93
- prompt: "status" | "signup" | "mfa" | "organizations" | "invitation" | "common" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
93
+ prompt: "signup" | "status" | "mfa" | "organizations" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
94
94
  language: string;
95
95
  };
96
96
  } & {
@@ -112,7 +112,7 @@ export declare const promptsRoutes: OpenAPIHono<{
112
112
  $put: {
113
113
  input: {
114
114
  param: {
115
- prompt: "status" | "signup" | "mfa" | "organizations" | "invitation" | "common" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
115
+ prompt: "signup" | "status" | "mfa" | "organizations" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
116
116
  language: string;
117
117
  };
118
118
  } & {
@@ -136,7 +136,7 @@ export declare const promptsRoutes: OpenAPIHono<{
136
136
  $delete: {
137
137
  input: {
138
138
  param: {
139
- prompt: "status" | "signup" | "mfa" | "organizations" | "invitation" | "common" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
139
+ prompt: "signup" | "status" | "mfa" | "organizations" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
140
140
  language: string;
141
141
  };
142
142
  } & {
@@ -220,8 +220,8 @@ export declare const roleRoutes: OpenAPIHono<{
220
220
  };
221
221
  } & {
222
222
  query: {
223
- page?: string | undefined;
224
223
  from?: string | undefined;
224
+ page?: string | undefined;
225
225
  include_totals?: string | undefined;
226
226
  per_page?: string | undefined;
227
227
  take?: string | undefined;
@@ -8,8 +8,8 @@ export declare const tenantExportImportRoutes: OpenAPIHono<{
8
8
  $get: {
9
9
  input: {
10
10
  query: {
11
- include_password_hashes?: "true" | "false" | undefined;
12
- gzip?: "true" | "false" | undefined;
11
+ include_password_hashes?: "false" | "true" | undefined;
12
+ gzip?: "false" | "true" | undefined;
13
13
  };
14
14
  } & {
15
15
  header: {
@@ -22,8 +22,8 @@ export declare const tenantExportImportRoutes: OpenAPIHono<{
22
22
  } | {
23
23
  input: {
24
24
  query: {
25
- include_password_hashes?: "true" | "false" | undefined;
26
- gzip?: "true" | "false" | undefined;
25
+ include_password_hashes?: "false" | "true" | undefined;
26
+ gzip?: "false" | "true" | undefined;
27
27
  };
28
28
  } & {
29
29
  header: {
@@ -42,7 +42,7 @@ export declare const tenantExportImportRoutes: OpenAPIHono<{
42
42
  $post: {
43
43
  input: {
44
44
  query: {
45
- include_password_hashes?: "true" | "false" | undefined;
45
+ include_password_hashes?: "false" | "true" | undefined;
46
46
  };
47
47
  } & {
48
48
  header: {
@@ -26,7 +26,7 @@ export declare const operationRoutes: OpenAPIHono<{
26
26
  events: {
27
27
  operation_id: string;
28
28
  step: string;
29
- outcome: "failed" | "succeeded" | "started" | "retried" | "skipped" | "reconciled";
29
+ outcome: "failed" | "succeeded" | "skipped" | "started" | "retried" | "reconciled";
30
30
  attempt: number;
31
31
  id: string;
32
32
  created_at: string;
@@ -211,11 +211,9 @@ export declare const tenantRoutes: OpenAPIHono<{
211
211
  } & {
212
212
  json: {
213
213
  id?: string | undefined;
214
- allowed_logout_urls?: string[] | undefined;
215
- oidc_logout?: {
216
- rp_logout_end_session_endpoint_discovery?: boolean | undefined;
217
- } | undefined;
218
- default_organization?: string | undefined;
214
+ mtls?: {
215
+ enable_endpoint_aliases?: boolean | undefined;
216
+ } | null | undefined;
219
217
  audience?: string | undefined;
220
218
  friendly_name?: string | undefined;
221
219
  picture_url?: string | undefined;
@@ -230,6 +228,7 @@ export declare const tenantRoutes: OpenAPIHono<{
230
228
  session_cookie?: {
231
229
  mode?: "persistent" | "non-persistent" | undefined;
232
230
  } | undefined;
231
+ allowed_logout_urls?: string[] | undefined;
233
232
  default_redirection_uri?: string | undefined;
234
233
  default_client_id?: string | undefined;
235
234
  enabled_locales?: string[] | undefined;
@@ -303,15 +302,16 @@ export declare const tenantRoutes: OpenAPIHono<{
303
302
  } | undefined;
304
303
  } | null | undefined;
305
304
  default_audience?: string | undefined;
305
+ default_organization?: string | undefined;
306
306
  sessions?: {
307
307
  oidc_logout_prompt_enabled?: boolean | undefined;
308
308
  } | undefined;
309
+ oidc_logout?: {
310
+ rp_logout_end_session_endpoint_discovery?: boolean | undefined;
311
+ } | undefined;
309
312
  allow_organization_name_in_authentication_api?: boolean | undefined;
310
313
  customize_mfa_in_postlogin_action?: boolean | undefined;
311
314
  acr_values_supported?: string[] | undefined;
312
- mtls?: {
313
- enable_endpoint_aliases?: boolean | undefined;
314
- } | null | undefined;
315
315
  pushed_authorization_requests_supported?: boolean | undefined;
316
316
  authorization_response_iss_parameter_supported?: boolean | undefined;
317
317
  deployment_type?: "shared" | "wfp" | undefined;