npm - authhero - Versions diffs - 9.14.0 → 9.16.0 - Mend

authhero 9.14.0 → 9.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (66) hide show

package/dist/types/routes/management-api/token-exchange-profiles.d.ts ADDED Viewed

@@ -0,0 +1,327 @@
+import { OpenAPIHono } from "@hono/zod-openapi";
+import { Bindings, Variables } from "../../types";
+export declare const tokenExchangeProfilesRoutes: OpenAPIHono<{
+    Bindings: Bindings;
+    Variables: Variables;
+}, {
+    "/": {
+        $get: {
+            input: {
+                query: {
+                    from?: string | undefined;
+                    take?: unknown;
+                };
+            } & {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            };
+            output: {
+                token_exchange_profiles: {
+                    name: string;
+                    subject_token_type: string;
+                    type: "custom_authentication";
+                    id: string;
+                    created_at: string;
+                    updated_at: string;
+                    action_id?: string | undefined;
+                    jwt_verification?: {
+                        issuer: string;
+                        max_lifetime_seconds: number;
+                        require_jti: boolean;
+                        user_mapping: {
+                            type: "connection";
+                            connection: string;
+                            create_if_not_exists: boolean;
+                            trust_email_verified: boolean;
+                        } | {
+                            type: "user_id";
+                        };
+                        jwks?: {
+                            keys: {
+                                kty: "RSA" | "EC" | "oct";
+                                alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
+                                kid?: string | undefined;
+                                use?: "sig" | "enc" | undefined;
+                                n?: string | undefined;
+                                e?: string | undefined;
+                                crv?: string | undefined;
+                                x?: string | undefined;
+                                y?: string | undefined;
+                                x5t?: string | undefined;
+                                "x5t#S256"?: string | undefined;
+                                x5c?: string[] | undefined;
+                            }[];
+                        } | undefined;
+                        jwks_uri?: string | undefined;
+                        audience?: string[] | undefined;
+                        algorithms?: ("RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512")[] | undefined;
+                    } | undefined;
+                }[];
+                next?: string | undefined;
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+} & {
+    "/:id": {
+        $get: {
+            input: {
+                param: {
+                    id: string;
+                };
+            } & {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            };
+            output: {
+                name: string;
+                subject_token_type: string;
+                type: "custom_authentication";
+                id: string;
+                created_at: string;
+                updated_at: string;
+                action_id?: string | undefined;
+                jwt_verification?: {
+                    issuer: string;
+                    max_lifetime_seconds: number;
+                    require_jti: boolean;
+                    user_mapping: {
+                        type: "connection";
+                        connection: string;
+                        create_if_not_exists: boolean;
+                        trust_email_verified: boolean;
+                    } | {
+                        type: "user_id";
+                    };
+                    jwks?: {
+                        keys: {
+                            kty: "RSA" | "EC" | "oct";
+                            alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
+                            kid?: string | undefined;
+                            use?: "sig" | "enc" | undefined;
+                            n?: string | undefined;
+                            e?: string | undefined;
+                            crv?: string | undefined;
+                            x?: string | undefined;
+                            y?: string | undefined;
+                            x5t?: string | undefined;
+                            "x5t#S256"?: string | undefined;
+                            x5c?: string[] | undefined;
+                        }[];
+                    } | undefined;
+                    jwks_uri?: string | undefined;
+                    audience?: string[] | undefined;
+                    algorithms?: ("RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512")[] | undefined;
+                } | undefined;
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+} & {
+    "/": {
+        $post: {
+            input: {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            } & {
+                json: {
+                    name: string;
+                    subject_token_type: string;
+                    type: "custom_authentication";
+                    action_id?: string | undefined;
+                    jwt_verification?: {
+                        issuer: string;
+                        user_mapping: {
+                            type: "connection";
+                            connection: string;
+                            create_if_not_exists?: boolean | undefined;
+                            trust_email_verified?: boolean | undefined;
+                        } | {
+                            type: "user_id";
+                        };
+                        jwks?: {
+                            keys: {
+                                kty: "RSA" | "EC" | "oct";
+                                alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
+                                kid?: string | undefined;
+                                use?: "sig" | "enc" | undefined;
+                                n?: string | undefined;
+                                e?: string | undefined;
+                                crv?: string | undefined;
+                                x?: string | undefined;
+                                y?: string | undefined;
+                                x5t?: string | undefined;
+                                "x5t#S256"?: string | undefined;
+                                x5c?: string[] | undefined;
+                            }[];
+                        } | undefined;
+                        jwks_uri?: string | undefined;
+                        audience?: string[] | undefined;
+                        algorithms?: ("RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512")[] | undefined;
+                        max_lifetime_seconds?: number | undefined;
+                        require_jti?: boolean | undefined;
+                    } | undefined;
+                };
+            };
+            output: {
+                name: string;
+                subject_token_type: string;
+                type: "custom_authentication";
+                id: string;
+                created_at: string;
+                updated_at: string;
+                action_id?: string | undefined;
+                jwt_verification?: {
+                    issuer: string;
+                    max_lifetime_seconds: number;
+                    require_jti: boolean;
+                    user_mapping: {
+                        type: "connection";
+                        connection: string;
+                        create_if_not_exists: boolean;
+                        trust_email_verified: boolean;
+                    } | {
+                        type: "user_id";
+                    };
+                    jwks?: {
+                        keys: {
+                            kty: "RSA" | "EC" | "oct";
+                            alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
+                            kid?: string | undefined;
+                            use?: "sig" | "enc" | undefined;
+                            n?: string | undefined;
+                            e?: string | undefined;
+                            crv?: string | undefined;
+                            x?: string | undefined;
+                            y?: string | undefined;
+                            x5t?: string | undefined;
+                            "x5t#S256"?: string | undefined;
+                            x5c?: string[] | undefined;
+                        }[];
+                    } | undefined;
+                    jwks_uri?: string | undefined;
+                    audience?: string[] | undefined;
+                    algorithms?: ("RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512")[] | undefined;
+                } | undefined;
+            };
+            outputFormat: "json";
+            status: 201;
+        };
+    };
+} & {
+    "/:id": {
+        $patch: {
+            input: {
+                param: {
+                    id: string;
+                };
+            } & {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            } & {
+                json: {
+                    name?: string | undefined;
+                    subject_token_type?: string | undefined;
+                    jwt_verification?: {
+                        issuer: string;
+                        user_mapping: {
+                            type: "connection";
+                            connection: string;
+                            create_if_not_exists?: boolean | undefined;
+                            trust_email_verified?: boolean | undefined;
+                        } | {
+                            type: "user_id";
+                        };
+                        jwks?: {
+                            keys: {
+                                kty: "RSA" | "EC" | "oct";
+                                alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
+                                kid?: string | undefined;
+                                use?: "sig" | "enc" | undefined;
+                                n?: string | undefined;
+                                e?: string | undefined;
+                                crv?: string | undefined;
+                                x?: string | undefined;
+                                y?: string | undefined;
+                                x5t?: string | undefined;
+                                "x5t#S256"?: string | undefined;
+                                x5c?: string[] | undefined;
+                            }[];
+                        } | undefined;
+                        jwks_uri?: string | undefined;
+                        audience?: string[] | undefined;
+                        algorithms?: ("RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512")[] | undefined;
+                        max_lifetime_seconds?: number | undefined;
+                        require_jti?: boolean | undefined;
+                    } | undefined;
+                };
+            };
+            output: {
+                name: string;
+                subject_token_type: string;
+                type: "custom_authentication";
+                id: string;
+                created_at: string;
+                updated_at: string;
+                action_id?: string | undefined;
+                jwt_verification?: {
+                    issuer: string;
+                    max_lifetime_seconds: number;
+                    require_jti: boolean;
+                    user_mapping: {
+                        type: "connection";
+                        connection: string;
+                        create_if_not_exists: boolean;
+                        trust_email_verified: boolean;
+                    } | {
+                        type: "user_id";
+                    };
+                    jwks?: {
+                        keys: {
+                            kty: "RSA" | "EC" | "oct";
+                            alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
+                            kid?: string | undefined;
+                            use?: "sig" | "enc" | undefined;
+                            n?: string | undefined;
+                            e?: string | undefined;
+                            crv?: string | undefined;
+                            x?: string | undefined;
+                            y?: string | undefined;
+                            x5t?: string | undefined;
+                            "x5t#S256"?: string | undefined;
+                            x5c?: string[] | undefined;
+                        }[];
+                    } | undefined;
+                    jwks_uri?: string | undefined;
+                    audience?: string[] | undefined;
+                    algorithms?: ("RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512")[] | undefined;
+                } | undefined;
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+} & {
+    "/:id": {
+        $delete: {
+            input: {
+                param: {
+                    id: string;
+                };
+            } & {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            };
+            output: {};
+            outputFormat: string;
+            status: 204;
+        };
+    };
+}, "/">;

package/dist/types/routes/management-api/users.d.ts CHANGED Viewed

@@ -817,12 +817,11 @@ export declare const userRoutes: OpenAPIHono<{
                 };
             };
             output: {
-                user_id: string;
                 id: string;
                 created_at: string;
                 client_id: string;
+                user_id: string;
                 rotating: boolean;
-                login_id: string;
                 device: {
                     initial_user_agent: string;
                     initial_ip: string;
@@ -831,32 +830,29 @@ export declare const userRoutes: OpenAPIHono<{
                     last_ip: string;
                     last_asn: string;
                 };
+                login_id: string;
                 resource_servers: {
                     audience: string;
                     scopes: string;
                 }[];
+                revoked_at?: string | undefined;
                 expires_at?: string | undefined;
+                idle_expires_at?: string | undefined;
                 session_id?: string | undefined;
+                organization?: string | undefined;
                 auth_connection?: string | undefined;
                 auth_strategy?: {
                     strategy: string;
                     strategy_type: string;
                 } | undefined;
-                revoked_at?: string | undefined;
-                organization?: string | undefined;
-                idle_expires_at?: string | undefined;
                 last_exchanged_at?: string | undefined;
             }[] | {
-                start: number;
-                limit: number;
-                length: number;
                 tokens: {
-                    user_id: string;
                     id: string;
                     created_at: string;
                     client_id: string;
+                    user_id: string;
                     rotating: boolean;
-                    login_id: string;
                     device: {
                         initial_user_agent: string;
                         initial_ip: string;
@@ -865,32 +861,34 @@ export declare const userRoutes: OpenAPIHono<{
                         last_ip: string;
                         last_asn: string;
                     };
+                    login_id: string;
                     resource_servers: {
                         audience: string;
                         scopes: string;
                     }[];
+                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
+                    idle_expires_at?: string | undefined;
                     session_id?: string | undefined;
+                    organization?: string | undefined;
                     auth_connection?: string | undefined;
                     auth_strategy?: {
                         strategy: string;
                         strategy_type: string;
                     } | undefined;
-                    revoked_at?: string | undefined;
-                    organization?: string | undefined;
-                    idle_expires_at?: string | undefined;
                     last_exchanged_at?: string | undefined;
                 }[];
-                total?: number | undefined;
                 next?: string | undefined;
             } | {
+                start: number;
+                limit: number;
+                length: number;
                 tokens: {
-                    user_id: string;
                     id: string;
                     created_at: string;
                     client_id: string;
+                    user_id: string;
                     rotating: boolean;
-                    login_id: string;
                     device: {
                         initial_user_agent: string;
                         initial_ip: string;
@@ -899,22 +897,24 @@ export declare const userRoutes: OpenAPIHono<{
                         last_ip: string;
                         last_asn: string;
                     };
+                    login_id: string;
                     resource_servers: {
                         audience: string;
                         scopes: string;
                     }[];
+                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
+                    idle_expires_at?: string | undefined;
                     session_id?: string | undefined;
+                    organization?: string | undefined;
                     auth_connection?: string | undefined;
                     auth_strategy?: {
                         strategy: string;
                         strategy_type: string;
                     } | undefined;
-                    revoked_at?: string | undefined;
-                    organization?: string | undefined;
-                    idle_expires_at?: string | undefined;
                     last_exchanged_at?: string | undefined;
                 }[];
+                total?: number | undefined;
                 next?: string | undefined;
             };
             outputFormat: "json";
@@ -963,7 +963,7 @@ export declare const userRoutes: OpenAPIHono<{
                 };
             };
             output: {
-                type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                 date: string;
                 isMobile: boolean;
                 log_id: string;
@@ -1002,7 +1002,7 @@ export declare const userRoutes: OpenAPIHono<{
                 limit: number;
                 length: number;
                 logs: {
-                    type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;

package/dist/types/routes/universal-login/common.d.ts CHANGED Viewed

@@ -460,7 +460,7 @@ export declare function initJSXRoute(ctx: Context<{
         custom_login_page_preview?: string | undefined;
         form_template?: string | undefined;
         addons?: Record<string, any> | undefined;
-        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
+        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
         client_metadata?: Record<string, string> | undefined;
         hide_sign_up_disabled_error?: boolean | undefined;
         mobile?: Record<string, any> | undefined;
@@ -486,6 +486,9 @@ export declare function initJSXRoute(ctx: Context<{
         owner_user_id?: string | undefined;
         registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
         registration_metadata?: Record<string, any> | undefined;
+        token_exchange?: {
+            allow_any_profile_of_type?: "custom_authentication"[] | undefined;
+        } | undefined;
         user_linking_mode?: "builtin" | "off" | undefined;
     };
     tenant: {
@@ -1193,7 +1196,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
         custom_login_page_preview?: string | undefined;
         form_template?: string | undefined;
         addons?: Record<string, any> | undefined;
-        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
+        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
         client_metadata?: Record<string, string> | undefined;
         hide_sign_up_disabled_error?: boolean | undefined;
         mobile?: Record<string, any> | undefined;
@@ -1219,6 +1222,9 @@ export declare function initJSXRouteWithSession(ctx: Context<{
         owner_user_id?: string | undefined;
         registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
         registration_metadata?: Record<string, any> | undefined;
+        token_exchange?: {
+            allow_any_profile_of_type?: "custom_authentication"[] | undefined;
+        } | undefined;
         user_linking_mode?: "builtin" | "off" | undefined;
     };
     user: {

package/dist/types/routes/universal-login/flow-api.d.ts CHANGED Viewed

@@ -43,7 +43,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                         hint?: string | undefined;
                         messages?: {
                             text: string;
-                            type: "success" | "error" | "info" | "warning";
+                            type: "error" | "success" | "info" | "warning";
                             id?: number | undefined;
                         }[] | undefined;
                     }[];
@@ -51,7 +51,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                     description?: string | undefined;
                     messages?: {
                         text: string;
-                        type: "success" | "error" | "info" | "warning";
+                        type: "error" | "success" | "info" | "warning";
                         id?: number | undefined;
                     }[] | undefined;
                     links?: {
@@ -123,7 +123,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                         hint?: string | undefined;
                         messages?: {
                             text: string;
-                            type: "success" | "error" | "info" | "warning";
+                            type: "error" | "success" | "info" | "warning";
                             id?: number | undefined;
                         }[] | undefined;
                     }[];
@@ -131,7 +131,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                     description?: string | undefined;
                     messages?: {
                         text: string;
-                        type: "success" | "error" | "info" | "warning";
+                        type: "error" | "success" | "info" | "warning";
                         id?: number | undefined;
                     }[] | undefined;
                     links?: {
@@ -220,7 +220,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                         hint?: string | undefined;
                         messages?: {
                             text: string;
-                            type: "success" | "error" | "info" | "warning";
+                            type: "error" | "success" | "info" | "warning";
                             id?: number | undefined;
                         }[] | undefined;
                     }[];
@@ -228,7 +228,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                     description?: string | undefined;
                     messages?: {
                         text: string;
-                        type: "success" | "error" | "info" | "warning";
+                        type: "error" | "success" | "info" | "warning";
                         id?: number | undefined;
                     }[] | undefined;
                     links?: {
@@ -335,7 +335,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                         hint?: string | undefined;
                         messages?: {
                             text: string;
-                            type: "success" | "error" | "info" | "warning";
+                            type: "error" | "success" | "info" | "warning";
                             id?: number | undefined;
                         }[] | undefined;
                     }[];
@@ -343,7 +343,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                     description?: string | undefined;
                     messages?: {
                         text: string;
-                        type: "success" | "error" | "info" | "warning";
+                        type: "error" | "success" | "info" | "warning";
                         id?: number | undefined;
                     }[] | undefined;
                     links?: {

package/dist/types/routes/universal-login/screens/login-otp.d.ts ADDED Viewed

@@ -0,0 +1,17 @@
+import type { Context } from "hono";
+import type { LoginSession } from "@authhero/adapter-interfaces";
+import type { EnrichedClient } from "../../../helpers/client";
+import type { Bindings, Variables } from "../../../types";
+/**
+ * Create a one-time code bound to the login session and deliver it to the
+ * user, either as a code or (for magic-link email connections) as a link.
+ */
+export declare function sendLoginOtp(ctx: Context<{
+    Bindings: Bindings;
+    Variables: Variables;
+}>, { client, loginSession, to, magicLink, }: {
+    client: EnrichedClient;
+    loginSession: LoginSession;
+    to: string;
+    magicLink: boolean;
+}): Promise<void>;

package/dist/types/routes/universal-login/screens/types.d.ts CHANGED Viewed

@@ -165,6 +165,12 @@ export interface ScreenDefinition {
  * Returns "/u2/login" for password-first or "/u2/login/identifier" for identifier-first.
  */
 export declare function getLoginPath(context: ScreenContext): Promise<string>;
+/**
+ * Whether the login flow starts on the identifier screen. On the combined
+ * password-first login page the user picks password or code up front, so the
+ * "or" switch between the two challenge screens is only offered here.
+ */
+export declare function isIdentifierFirstLogin(context: ScreenContext): Promise<boolean>;
 /**
  * Resolve the "Last used" connection hint for the identifier/login screens.
  *