authhero 9.16.0 → 9.18.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/authhero.cjs +141 -141
- package/dist/authhero.d.ts +159 -146
- package/dist/authhero.mjs +11527 -11490
- package/dist/tsconfig.types.tsbuildinfo +1 -1
- package/dist/types/authentication-flows/passwordless.d.ts +3 -3
- package/dist/types/helpers/reserved-claims.d.ts +2 -2
- package/dist/types/helpers/scopes-permissions.d.ts +51 -12
- package/dist/types/index.d.ts +159 -146
- package/dist/types/middlewares/authentication.d.ts +1 -0
- package/dist/types/routes/auth-api/index.d.ts +21 -21
- package/dist/types/routes/auth-api/passwordless.d.ts +18 -18
- package/dist/types/routes/auth-api/register/index.d.ts +2 -2
- package/dist/types/routes/auth-api/well-known.d.ts +1 -1
- package/dist/types/routes/management-api/action-executions.d.ts +1 -1
- package/dist/types/routes/management-api/actions.d.ts +1 -1
- package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
- package/dist/types/routes/management-api/branding.d.ts +1 -1
- package/dist/types/routes/management-api/client-grants.d.ts +9 -9
- package/dist/types/routes/management-api/clients.d.ts +8 -8
- package/dist/types/routes/management-api/custom-domains.d.ts +6 -6
- package/dist/types/routes/management-api/email-templates.d.ts +18 -18
- package/dist/types/routes/management-api/failed-events.d.ts +1 -1
- package/dist/types/routes/management-api/guardian.d.ts +5 -5
- package/dist/types/routes/management-api/index.d.ts +139 -126
- package/dist/types/routes/management-api/keys.d.ts +8 -8
- package/dist/types/routes/management-api/logs.d.ts +4 -4
- package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
- package/dist/types/routes/management-api/organizations.d.ts +3 -3
- package/dist/types/routes/management-api/prompts.d.ts +4 -4
- package/dist/types/routes/management-api/roles.d.ts +14 -1
- package/dist/types/routes/management-api/tenant-operations.d.ts +5 -5
- package/dist/types/routes/management-api/tenants.d.ts +4 -4
- package/dist/types/routes/management-api/token-exchange-profiles.d.ts +6 -6
- package/dist/types/routes/management-api/users.d.ts +42 -42
- package/dist/types/routes/universal-login/common.d.ts +2 -2
- package/dist/types/routes/universal-login/flow-api.d.ts +4 -4
- package/dist/types/routes/universal-login/screens/connect-authz.d.ts +16 -0
- package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
- package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
- package/dist/types/utils/jwks.d.ts +2 -2
- package/package.json +2 -2
|
@@ -817,11 +817,15 @@ export declare const userRoutes: OpenAPIHono<{
|
|
|
817
817
|
};
|
|
818
818
|
};
|
|
819
819
|
output: {
|
|
820
|
-
id: string;
|
|
821
|
-
created_at: string;
|
|
822
|
-
client_id: string;
|
|
823
820
|
user_id: string;
|
|
824
|
-
|
|
821
|
+
client_id: string;
|
|
822
|
+
created_at: string;
|
|
823
|
+
id: string;
|
|
824
|
+
resource_servers: {
|
|
825
|
+
audience: string;
|
|
826
|
+
scopes: string;
|
|
827
|
+
}[];
|
|
828
|
+
login_id: string;
|
|
825
829
|
device: {
|
|
826
830
|
initial_user_agent: string;
|
|
827
831
|
initial_ip: string;
|
|
@@ -830,29 +834,32 @@ export declare const userRoutes: OpenAPIHono<{
|
|
|
830
834
|
last_ip: string;
|
|
831
835
|
last_asn: string;
|
|
832
836
|
};
|
|
833
|
-
|
|
834
|
-
resource_servers: {
|
|
835
|
-
audience: string;
|
|
836
|
-
scopes: string;
|
|
837
|
-
}[];
|
|
838
|
-
revoked_at?: string | undefined;
|
|
837
|
+
rotating: boolean;
|
|
839
838
|
expires_at?: string | undefined;
|
|
840
|
-
idle_expires_at?: string | undefined;
|
|
841
|
-
session_id?: string | undefined;
|
|
842
839
|
organization?: string | undefined;
|
|
840
|
+
session_id?: string | undefined;
|
|
843
841
|
auth_connection?: string | undefined;
|
|
844
842
|
auth_strategy?: {
|
|
845
843
|
strategy: string;
|
|
846
844
|
strategy_type: string;
|
|
847
845
|
} | undefined;
|
|
846
|
+
revoked_at?: string | undefined;
|
|
847
|
+
idle_expires_at?: string | undefined;
|
|
848
848
|
last_exchanged_at?: string | undefined;
|
|
849
849
|
}[] | {
|
|
850
|
+
start: number;
|
|
851
|
+
limit: number;
|
|
852
|
+
length: number;
|
|
850
853
|
tokens: {
|
|
851
|
-
id: string;
|
|
852
|
-
created_at: string;
|
|
853
|
-
client_id: string;
|
|
854
854
|
user_id: string;
|
|
855
|
-
|
|
855
|
+
client_id: string;
|
|
856
|
+
created_at: string;
|
|
857
|
+
id: string;
|
|
858
|
+
resource_servers: {
|
|
859
|
+
audience: string;
|
|
860
|
+
scopes: string;
|
|
861
|
+
}[];
|
|
862
|
+
login_id: string;
|
|
856
863
|
device: {
|
|
857
864
|
initial_user_agent: string;
|
|
858
865
|
initial_ip: string;
|
|
@@ -861,34 +868,32 @@ export declare const userRoutes: OpenAPIHono<{
|
|
|
861
868
|
last_ip: string;
|
|
862
869
|
last_asn: string;
|
|
863
870
|
};
|
|
864
|
-
|
|
865
|
-
resource_servers: {
|
|
866
|
-
audience: string;
|
|
867
|
-
scopes: string;
|
|
868
|
-
}[];
|
|
869
|
-
revoked_at?: string | undefined;
|
|
871
|
+
rotating: boolean;
|
|
870
872
|
expires_at?: string | undefined;
|
|
871
|
-
idle_expires_at?: string | undefined;
|
|
872
|
-
session_id?: string | undefined;
|
|
873
873
|
organization?: string | undefined;
|
|
874
|
+
session_id?: string | undefined;
|
|
874
875
|
auth_connection?: string | undefined;
|
|
875
876
|
auth_strategy?: {
|
|
876
877
|
strategy: string;
|
|
877
878
|
strategy_type: string;
|
|
878
879
|
} | undefined;
|
|
880
|
+
revoked_at?: string | undefined;
|
|
881
|
+
idle_expires_at?: string | undefined;
|
|
879
882
|
last_exchanged_at?: string | undefined;
|
|
880
883
|
}[];
|
|
884
|
+
total?: number | undefined;
|
|
881
885
|
next?: string | undefined;
|
|
882
886
|
} | {
|
|
883
|
-
start: number;
|
|
884
|
-
limit: number;
|
|
885
|
-
length: number;
|
|
886
887
|
tokens: {
|
|
887
|
-
id: string;
|
|
888
|
-
created_at: string;
|
|
889
|
-
client_id: string;
|
|
890
888
|
user_id: string;
|
|
891
|
-
|
|
889
|
+
client_id: string;
|
|
890
|
+
created_at: string;
|
|
891
|
+
id: string;
|
|
892
|
+
resource_servers: {
|
|
893
|
+
audience: string;
|
|
894
|
+
scopes: string;
|
|
895
|
+
}[];
|
|
896
|
+
login_id: string;
|
|
892
897
|
device: {
|
|
893
898
|
initial_user_agent: string;
|
|
894
899
|
initial_ip: string;
|
|
@@ -897,24 +902,19 @@ export declare const userRoutes: OpenAPIHono<{
|
|
|
897
902
|
last_ip: string;
|
|
898
903
|
last_asn: string;
|
|
899
904
|
};
|
|
900
|
-
|
|
901
|
-
resource_servers: {
|
|
902
|
-
audience: string;
|
|
903
|
-
scopes: string;
|
|
904
|
-
}[];
|
|
905
|
-
revoked_at?: string | undefined;
|
|
905
|
+
rotating: boolean;
|
|
906
906
|
expires_at?: string | undefined;
|
|
907
|
-
idle_expires_at?: string | undefined;
|
|
908
|
-
session_id?: string | undefined;
|
|
909
907
|
organization?: string | undefined;
|
|
908
|
+
session_id?: string | undefined;
|
|
910
909
|
auth_connection?: string | undefined;
|
|
911
910
|
auth_strategy?: {
|
|
912
911
|
strategy: string;
|
|
913
912
|
strategy_type: string;
|
|
914
913
|
} | undefined;
|
|
914
|
+
revoked_at?: string | undefined;
|
|
915
|
+
idle_expires_at?: string | undefined;
|
|
915
916
|
last_exchanged_at?: string | undefined;
|
|
916
917
|
}[];
|
|
917
|
-
total?: number | undefined;
|
|
918
918
|
next?: string | undefined;
|
|
919
919
|
};
|
|
920
920
|
outputFormat: "json";
|
|
@@ -963,7 +963,7 @@ export declare const userRoutes: OpenAPIHono<{
|
|
|
963
963
|
};
|
|
964
964
|
};
|
|
965
965
|
output: {
|
|
966
|
-
type: "
|
|
966
|
+
type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
|
|
967
967
|
date: string;
|
|
968
968
|
isMobile: boolean;
|
|
969
969
|
log_id: string;
|
|
@@ -1002,7 +1002,7 @@ export declare const userRoutes: OpenAPIHono<{
|
|
|
1002
1002
|
limit: number;
|
|
1003
1003
|
length: number;
|
|
1004
1004
|
logs: {
|
|
1005
|
-
type: "
|
|
1005
|
+
type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
|
|
1006
1006
|
date: string;
|
|
1007
1007
|
isMobile: boolean;
|
|
1008
1008
|
log_id: string;
|
|
@@ -460,7 +460,7 @@ export declare function initJSXRoute(ctx: Context<{
|
|
|
460
460
|
custom_login_page_preview?: string | undefined;
|
|
461
461
|
form_template?: string | undefined;
|
|
462
462
|
addons?: Record<string, any> | undefined;
|
|
463
|
-
token_endpoint_auth_method?: "
|
|
463
|
+
token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
|
|
464
464
|
client_metadata?: Record<string, string> | undefined;
|
|
465
465
|
hide_sign_up_disabled_error?: boolean | undefined;
|
|
466
466
|
mobile?: Record<string, any> | undefined;
|
|
@@ -1196,7 +1196,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
|
|
|
1196
1196
|
custom_login_page_preview?: string | undefined;
|
|
1197
1197
|
form_template?: string | undefined;
|
|
1198
1198
|
addons?: Record<string, any> | undefined;
|
|
1199
|
-
token_endpoint_auth_method?: "
|
|
1199
|
+
token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
|
|
1200
1200
|
client_metadata?: Record<string, string> | undefined;
|
|
1201
1201
|
hide_sign_up_disabled_error?: boolean | undefined;
|
|
1202
1202
|
mobile?: Record<string, any> | undefined;
|
|
@@ -27,7 +27,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
|
|
|
27
27
|
output: {
|
|
28
28
|
screen: {
|
|
29
29
|
action: string;
|
|
30
|
-
method: "
|
|
30
|
+
method: "POST" | "GET";
|
|
31
31
|
components: {
|
|
32
32
|
id: string;
|
|
33
33
|
type: string;
|
|
@@ -107,7 +107,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
|
|
|
107
107
|
output: {
|
|
108
108
|
screen: {
|
|
109
109
|
action: string;
|
|
110
|
-
method: "
|
|
110
|
+
method: "POST" | "GET";
|
|
111
111
|
components: {
|
|
112
112
|
id: string;
|
|
113
113
|
type: string;
|
|
@@ -204,7 +204,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
|
|
|
204
204
|
output: {
|
|
205
205
|
screen: {
|
|
206
206
|
action: string;
|
|
207
|
-
method: "
|
|
207
|
+
method: "POST" | "GET";
|
|
208
208
|
components: {
|
|
209
209
|
id: string;
|
|
210
210
|
type: string;
|
|
@@ -319,7 +319,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
|
|
|
319
319
|
output: {
|
|
320
320
|
screen: {
|
|
321
321
|
action: string;
|
|
322
|
-
method: "
|
|
322
|
+
method: "POST" | "GET";
|
|
323
323
|
components: {
|
|
324
324
|
id: string;
|
|
325
325
|
type: string;
|
|
@@ -21,6 +21,20 @@ export declare const DCR_REGISTER_PERMISSION = "create:clients";
|
|
|
21
21
|
* Management API audience so unrelated API permissions can't satisfy it.
|
|
22
22
|
*/
|
|
23
23
|
export declare function userHasGlobalOrgAdmin(context: ScreenContext, userId: string): Promise<boolean>;
|
|
24
|
+
/**
|
|
25
|
+
* True when the user holds the global `access:all_organizations` permission
|
|
26
|
+
* (directly or through a role, Management API audience). Such a user may open
|
|
27
|
+
* any control-plane org without being a member, but is NOT a tenant admin:
|
|
28
|
+
* registering a DCR client still needs `create:clients`, which for these
|
|
29
|
+
* users can come from their global roles (#1437).
|
|
30
|
+
*/
|
|
31
|
+
export declare function userHasAccessAllOrganizations(context: ScreenContext, userId: string): Promise<boolean>;
|
|
32
|
+
/**
|
|
33
|
+
* True when the user holds `create:clients` at global scope (Management API
|
|
34
|
+
* audience). For a user with `access:all_organizations` this lets them
|
|
35
|
+
* register on any child tenant without an org-scoped role.
|
|
36
|
+
*/
|
|
37
|
+
export declare function userCanRegisterGlobally(context: ScreenContext, userId: string): Promise<boolean>;
|
|
24
38
|
/**
|
|
25
39
|
* True when the user holds the DCR register permission on the given
|
|
26
40
|
* control-plane organization (scoped to the Management API audience).
|
|
@@ -33,6 +47,8 @@ export declare function userCanRegisterOnOrg(context: ScreenContext, userId: str
|
|
|
33
47
|
*
|
|
34
48
|
* Access is granted when either:
|
|
35
49
|
* - the user holds the global `admin:organizations` escape hatch, or
|
|
50
|
+
* - the user holds global `access:all_organizations` AND `create:clients`
|
|
51
|
+
* (globally or on that org), with no membership needed, or
|
|
36
52
|
* - the user is a member of the control-plane org whose `name` equals the
|
|
37
53
|
* target tenant id AND holds `create:clients` on their role for that org.
|
|
38
54
|
*
|
|
@@ -165,7 +165,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
165
165
|
$get: {
|
|
166
166
|
input: {
|
|
167
167
|
param: {
|
|
168
|
-
screen: "impersonate" | "signup" | "
|
|
168
|
+
screen: "login" | "impersonate" | "signup" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
169
169
|
};
|
|
170
170
|
} & {
|
|
171
171
|
query: {
|
|
@@ -181,7 +181,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
181
181
|
} | {
|
|
182
182
|
input: {
|
|
183
183
|
param: {
|
|
184
|
-
screen: "impersonate" | "signup" | "
|
|
184
|
+
screen: "login" | "impersonate" | "signup" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
185
185
|
};
|
|
186
186
|
} & {
|
|
187
187
|
query: {
|
|
@@ -197,7 +197,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
197
197
|
} | {
|
|
198
198
|
input: {
|
|
199
199
|
param: {
|
|
200
|
-
screen: "impersonate" | "signup" | "
|
|
200
|
+
screen: "login" | "impersonate" | "signup" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
201
201
|
};
|
|
202
202
|
} & {
|
|
203
203
|
query: {
|
|
@@ -217,7 +217,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
217
217
|
$post: {
|
|
218
218
|
input: {
|
|
219
219
|
param: {
|
|
220
|
-
screen: "
|
|
220
|
+
screen: "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
221
221
|
};
|
|
222
222
|
} & {
|
|
223
223
|
query: {
|
|
@@ -235,7 +235,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
|
|
|
235
235
|
} | {
|
|
236
236
|
input: {
|
|
237
237
|
param: {
|
|
238
|
-
screen: "
|
|
238
|
+
screen: "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
239
239
|
};
|
|
240
240
|
} & {
|
|
241
241
|
query: {
|
|
@@ -170,7 +170,7 @@ export declare const u2Routes: OpenAPIHono<{
|
|
|
170
170
|
$get: {
|
|
171
171
|
input: {
|
|
172
172
|
param: {
|
|
173
|
-
screen: "impersonate" | "signup" | "
|
|
173
|
+
screen: "login" | "impersonate" | "signup" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
174
174
|
};
|
|
175
175
|
} & {
|
|
176
176
|
query: {
|
|
@@ -186,7 +186,7 @@ export declare const u2Routes: OpenAPIHono<{
|
|
|
186
186
|
} | {
|
|
187
187
|
input: {
|
|
188
188
|
param: {
|
|
189
|
-
screen: "impersonate" | "signup" | "
|
|
189
|
+
screen: "login" | "impersonate" | "signup" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
190
190
|
};
|
|
191
191
|
} & {
|
|
192
192
|
query: {
|
|
@@ -202,7 +202,7 @@ export declare const u2Routes: OpenAPIHono<{
|
|
|
202
202
|
} | {
|
|
203
203
|
input: {
|
|
204
204
|
param: {
|
|
205
|
-
screen: "impersonate" | "signup" | "
|
|
205
|
+
screen: "login" | "impersonate" | "signup" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
206
206
|
};
|
|
207
207
|
} & {
|
|
208
208
|
query: {
|
|
@@ -222,7 +222,7 @@ export declare const u2Routes: OpenAPIHono<{
|
|
|
222
222
|
$post: {
|
|
223
223
|
input: {
|
|
224
224
|
param: {
|
|
225
|
-
screen: "
|
|
225
|
+
screen: "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
226
226
|
};
|
|
227
227
|
} & {
|
|
228
228
|
query: {
|
|
@@ -240,7 +240,7 @@ export declare const u2Routes: OpenAPIHono<{
|
|
|
240
240
|
} | {
|
|
241
241
|
input: {
|
|
242
242
|
param: {
|
|
243
|
-
screen: "
|
|
243
|
+
screen: "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
|
|
244
244
|
};
|
|
245
245
|
} & {
|
|
246
246
|
query: {
|
|
@@ -8,7 +8,7 @@ import { CertificateIssuer } from "../helpers/signing-certificate-authority";
|
|
|
8
8
|
* still verify during the per-tenant key rollout.
|
|
9
9
|
*/
|
|
10
10
|
export declare function getJwksForPublication(data: DataAdapters, tenantId: string, modeOption: SigningKeyModeOption | undefined, certificateIssuer?: CertificateIssuer): Promise<{
|
|
11
|
-
kty: "
|
|
11
|
+
kty: "EC" | "RSA" | "oct";
|
|
12
12
|
alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
|
|
13
13
|
kid?: string | undefined;
|
|
14
14
|
use?: "sig" | "enc" | undefined;
|
|
@@ -28,7 +28,7 @@ export declare function getJwksForPublication(data: DataAdapters, tenantId: stri
|
|
|
28
28
|
* subdomain), only control-plane-signed tokens are accepted.
|
|
29
29
|
*/
|
|
30
30
|
export declare function getJwksForVerification(data: DataAdapters, tenantId: string | undefined, modeOption: SigningKeyModeOption | undefined): Promise<{
|
|
31
|
-
kty: "
|
|
31
|
+
kty: "EC" | "RSA" | "oct";
|
|
32
32
|
alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
|
|
33
33
|
kid?: string | undefined;
|
|
34
34
|
use?: "sig" | "enc" | undefined;
|
package/package.json
CHANGED
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"type": "git",
|
|
12
12
|
"url": "https://github.com/markusahlstrand/authhero"
|
|
13
13
|
},
|
|
14
|
-
"version": "9.
|
|
14
|
+
"version": "9.18.0",
|
|
15
15
|
"files": [
|
|
16
16
|
"dist"
|
|
17
17
|
],
|
|
@@ -63,7 +63,7 @@
|
|
|
63
63
|
"vite": "^8.0.14",
|
|
64
64
|
"vite-plugin-dts": "^4.5.4",
|
|
65
65
|
"vitest": "^4.1.7",
|
|
66
|
-
"@authhero/kysely-adapter": "12.
|
|
66
|
+
"@authhero/kysely-adapter": "12.11.0",
|
|
67
67
|
"@authhero/widget": "0.40.0"
|
|
68
68
|
},
|
|
69
69
|
"dependencies": {
|