authhero 9.2.0 → 9.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. package/dist/assets/u/widget/index.esm.js +1 -1
  2. package/dist/authhero.cjs +143 -143
  3. package/dist/authhero.d.ts +305 -231
  4. package/dist/authhero.mjs +13637 -14012
  5. package/dist/tsconfig.types.tsbuildinfo +1 -1
  6. package/dist/types/authentication-flows/passwordless.d.ts +6 -6
  7. package/dist/types/helpers/dcr/metadata-mapping.d.ts +2 -2
  8. package/dist/types/index.d.ts +305 -231
  9. package/dist/types/oauth2-client/client.d.ts +50 -0
  10. package/dist/types/oauth2-client/index.d.ts +3 -0
  11. package/dist/types/oauth2-client/providers.d.ts +49 -0
  12. package/dist/types/routes/auth-api/index.d.ts +29 -29
  13. package/dist/types/routes/auth-api/oidc-logout.d.ts +3 -3
  14. package/dist/types/routes/auth-api/passwordless.d.ts +14 -14
  15. package/dist/types/routes/auth-api/register/index.d.ts +2 -2
  16. package/dist/types/routes/auth-api/token.d.ts +10 -10
  17. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  18. package/dist/types/routes/management-api/actions.d.ts +1 -1
  19. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  20. package/dist/types/routes/management-api/branding.d.ts +3 -3
  21. package/dist/types/routes/management-api/client-grants.d.ts +9 -9
  22. package/dist/types/routes/management-api/clients.d.ts +14 -14
  23. package/dist/types/routes/management-api/connections.d.ts +16 -16
  24. package/dist/types/routes/management-api/custom-domains.d.ts +6 -6
  25. package/dist/types/routes/management-api/failed-events.d.ts +1 -1
  26. package/dist/types/routes/management-api/forms.d.ts +126 -126
  27. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  28. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  29. package/dist/types/routes/management-api/hooks.d.ts +74 -0
  30. package/dist/types/routes/management-api/index.d.ts +261 -187
  31. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  32. package/dist/types/routes/management-api/tenants.d.ts +28 -28
  33. package/dist/types/routes/universal-login/common.d.ts +8 -8
  34. package/dist/types/routes/universal-login/continue.d.ts +2 -2
  35. package/dist/types/routes/universal-login/flow-api.d.ts +8 -8
  36. package/dist/types/routes/universal-login/identifier.d.ts +4 -4
  37. package/dist/types/routes/universal-login/impersonate.d.ts +2 -2
  38. package/dist/types/routes/universal-login/index.d.ts +8 -8
  39. package/dist/types/routes/universal-login/u2-index.d.ts +7 -7
  40. package/dist/types/routes/universal-login/u2-routes.d.ts +7 -7
  41. package/dist/types/strategies/internal-oauth2.d.ts +5 -5
  42. package/package.json +6 -7
@@ -0,0 +1,50 @@
1
+ import { generateCodeVerifier } from "../utils/crypto";
2
+ export { generateCodeVerifier };
3
+ export type CodeChallengeMethod = "S256" | "plain";
4
+ /** A high-entropy CSRF state value: 32 random bytes, base64url-encoded. */
5
+ export declare function generateState(): string;
6
+ export declare class OAuth2Tokens {
7
+ data: Record<string, unknown>;
8
+ constructor(data: Record<string, unknown>);
9
+ tokenType(): string;
10
+ accessToken(): string;
11
+ accessTokenExpiresInSeconds(): number;
12
+ accessTokenExpiresAt(): Date;
13
+ hasRefreshToken(): boolean;
14
+ refreshToken(): string;
15
+ hasScopes(): boolean;
16
+ scopes(): string[];
17
+ idToken(): string;
18
+ }
19
+ export declare class OAuth2RequestError extends Error {
20
+ code: string;
21
+ description: string | null;
22
+ uri: string | null;
23
+ state: string | null;
24
+ constructor(code: string, description: string | null, uri: string | null, state: string | null);
25
+ }
26
+ export declare class OAuth2FetchError extends Error {
27
+ constructor(cause: unknown);
28
+ }
29
+ export declare class UnexpectedResponseError extends Error {
30
+ status: number;
31
+ constructor(responseStatus: number);
32
+ }
33
+ export declare class UnexpectedErrorResponseBodyError extends Error {
34
+ status: number;
35
+ data: unknown;
36
+ constructor(status: number, data: unknown);
37
+ }
38
+ export declare function createOAuth2Request(endpoint: string, body: URLSearchParams): Request;
39
+ export declare function encodeBasicCredentials(username: string, password: string): string;
40
+ export declare function createOAuth2RequestError(result: Record<string, unknown>): OAuth2RequestError;
41
+ export declare function sendTokenRequest(request: Request): Promise<OAuth2Tokens>;
42
+ export declare class OAuth2Client {
43
+ clientId: string;
44
+ clientPassword: string | null;
45
+ redirectURI: string | null;
46
+ constructor(clientId: string, clientPassword: string | null, redirectURI: string | null);
47
+ createAuthorizationURL(authorizationEndpoint: string, state: string, scopes: string[]): URL;
48
+ createAuthorizationURLWithPKCE(authorizationEndpoint: string, state: string, codeChallengeMethod: CodeChallengeMethod, codeVerifier: string, scopes: string[]): Promise<URL>;
49
+ validateAuthorizationCode(tokenEndpoint: string, code: string, codeVerifier: string | null): Promise<OAuth2Tokens>;
50
+ }
@@ -0,0 +1,3 @@
1
+ export { OAuth2Client, OAuth2Tokens, OAuth2RequestError, OAuth2FetchError, UnexpectedResponseError, UnexpectedErrorResponseBodyError, generateState, generateCodeVerifier, } from "./client";
2
+ export type { CodeChallengeMethod } from "./client";
3
+ export { Apple, Facebook, GitHub, Google, MicrosoftEntraId } from "./providers";
@@ -0,0 +1,49 @@
1
+ import { OAuth2Tokens } from "./client";
2
+ export declare class Google {
3
+ private client;
4
+ constructor(clientId: string, clientSecret: string, redirectURI: string);
5
+ createAuthorizationURL(state: string, codeVerifier: string, scopes: string[]): Promise<URL>;
6
+ validateAuthorizationCode(code: string, codeVerifier: string): Promise<OAuth2Tokens>;
7
+ }
8
+ export declare class Facebook {
9
+ private clientId;
10
+ private clientSecret;
11
+ private redirectURI;
12
+ constructor(clientId: string, clientSecret: string, redirectURI: string);
13
+ createAuthorizationURL(state: string, scopes: string[]): URL;
14
+ validateAuthorizationCode(code: string): Promise<OAuth2Tokens>;
15
+ }
16
+ export declare class GitHub {
17
+ private clientId;
18
+ private clientSecret;
19
+ private redirectURI;
20
+ constructor(clientId: string, clientSecret: string, redirectURI: string | null);
21
+ createAuthorizationURL(state: string, scopes: string[]): URL;
22
+ validateAuthorizationCode(code: string): Promise<OAuth2Tokens>;
23
+ }
24
+ export declare class MicrosoftEntraId {
25
+ private authorizationEndpoint;
26
+ private tokenEndpoint;
27
+ private clientId;
28
+ private clientSecret;
29
+ private redirectURI;
30
+ constructor(tenant: string, clientId: string, clientSecret: string | null, redirectURI: string);
31
+ createAuthorizationURL(state: string, codeVerifier: string, scopes: string[]): Promise<URL>;
32
+ validateAuthorizationCode(code: string, codeVerifier: string): Promise<OAuth2Tokens>;
33
+ }
34
+ export declare class Apple {
35
+ private clientId;
36
+ private teamId;
37
+ private keyId;
38
+ private pkcs8PrivateKey;
39
+ private redirectURI;
40
+ constructor(clientId: string, teamId: string, keyId: string, pkcs8PrivateKey: Uint8Array<ArrayBuffer>, redirectURI: string);
41
+ createAuthorizationURL(state: string, scopes: string[]): URL;
42
+ validateAuthorizationCode(code: string): Promise<OAuth2Tokens>;
43
+ /**
44
+ * Apple's "client secret" is a short-lived ES256 JWT signed with the
45
+ * developer's private key (Sign in with Apple docs, "Creating a client
46
+ * secret").
47
+ */
48
+ private createClientSecret;
49
+ }
@@ -301,7 +301,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
301
301
  scope?: string | undefined;
302
302
  grant_types?: string[] | undefined;
303
303
  response_types?: string[] | undefined;
304
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
304
+ token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
305
305
  jwks_uri?: string | undefined;
306
306
  jwks?: Record<string, unknown> | undefined;
307
307
  software_id?: string | undefined;
@@ -390,7 +390,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
390
390
  scope?: string | undefined;
391
391
  grant_types?: string[] | undefined;
392
392
  response_types?: string[] | undefined;
393
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
393
+ token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
394
394
  jwks_uri?: string | undefined;
395
395
  jwks?: Record<string, unknown> | undefined;
396
396
  software_id?: string | undefined;
@@ -736,19 +736,19 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
736
736
  email: string;
737
737
  send: "code" | "link";
738
738
  authParams: {
739
- response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
740
- response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
741
- scope?: string | undefined;
742
739
  username?: string | undefined;
743
740
  state?: string | undefined;
744
741
  audience?: string | undefined;
745
- act_as?: string | undefined;
746
- redirect_uri?: string | undefined;
742
+ response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
743
+ response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
744
+ scope?: string | undefined;
747
745
  organization?: string | undefined;
748
- nonce?: string | undefined;
749
- prompt?: string | undefined;
746
+ redirect_uri?: string | undefined;
750
747
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
751
748
  code_challenge?: string | undefined;
749
+ nonce?: string | undefined;
750
+ act_as?: string | undefined;
751
+ prompt?: string | undefined;
752
752
  ui_locales?: string | undefined;
753
753
  max_age?: number | undefined;
754
754
  acr_values?: string | undefined;
@@ -772,19 +772,19 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
772
772
  phone_number: string;
773
773
  send: "code" | "link";
774
774
  authParams: {
775
- response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
776
- response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
777
- scope?: string | undefined;
778
775
  username?: string | undefined;
779
776
  state?: string | undefined;
780
777
  audience?: string | undefined;
781
- act_as?: string | undefined;
782
- redirect_uri?: string | undefined;
778
+ response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
779
+ response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
780
+ scope?: string | undefined;
783
781
  organization?: string | undefined;
784
- nonce?: string | undefined;
785
- prompt?: string | undefined;
782
+ redirect_uri?: string | undefined;
786
783
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
787
784
  code_challenge?: string | undefined;
785
+ nonce?: string | undefined;
786
+ act_as?: string | undefined;
787
+ prompt?: string | undefined;
788
788
  ui_locales?: string | undefined;
789
789
  max_age?: number | undefined;
790
790
  acr_values?: string | undefined;
@@ -1014,7 +1014,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1014
1014
  client_id: string;
1015
1015
  username: string;
1016
1016
  otp: string;
1017
- realm: "email" | "sms";
1017
+ realm: "sms" | "email";
1018
1018
  } | {
1019
1019
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1020
1020
  subject_token: string;
@@ -1061,7 +1061,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1061
1061
  client_id: string;
1062
1062
  username: string;
1063
1063
  otp: string;
1064
- realm: "email" | "sms";
1064
+ realm: "sms" | "email";
1065
1065
  } | {
1066
1066
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1067
1067
  subject_token: string;
@@ -1113,7 +1113,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1113
1113
  client_id: string;
1114
1114
  username: string;
1115
1115
  otp: string;
1116
- realm: "email" | "sms";
1116
+ realm: "sms" | "email";
1117
1117
  } | {
1118
1118
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1119
1119
  subject_token: string;
@@ -1160,7 +1160,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1160
1160
  client_id: string;
1161
1161
  username: string;
1162
1162
  otp: string;
1163
- realm: "email" | "sms";
1163
+ realm: "sms" | "email";
1164
1164
  } | {
1165
1165
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1166
1166
  subject_token: string;
@@ -1220,7 +1220,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1220
1220
  client_id: string;
1221
1221
  username: string;
1222
1222
  otp: string;
1223
- realm: "email" | "sms";
1223
+ realm: "sms" | "email";
1224
1224
  } | {
1225
1225
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1226
1226
  subject_token: string;
@@ -1267,7 +1267,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1267
1267
  client_id: string;
1268
1268
  username: string;
1269
1269
  otp: string;
1270
- realm: "email" | "sms";
1270
+ realm: "sms" | "email";
1271
1271
  } | {
1272
1272
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1273
1273
  subject_token: string;
@@ -1322,7 +1322,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1322
1322
  client_id: string;
1323
1323
  username: string;
1324
1324
  otp: string;
1325
- realm: "email" | "sms";
1325
+ realm: "sms" | "email";
1326
1326
  } | {
1327
1327
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1328
1328
  subject_token: string;
@@ -1369,7 +1369,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1369
1369
  client_id: string;
1370
1370
  username: string;
1371
1371
  otp: string;
1372
- realm: "email" | "sms";
1372
+ realm: "sms" | "email";
1373
1373
  } | {
1374
1374
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1375
1375
  subject_token: string;
@@ -1424,7 +1424,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1424
1424
  client_id: string;
1425
1425
  username: string;
1426
1426
  otp: string;
1427
- realm: "email" | "sms";
1427
+ realm: "sms" | "email";
1428
1428
  } | {
1429
1429
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1430
1430
  subject_token: string;
@@ -1471,7 +1471,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1471
1471
  client_id: string;
1472
1472
  username: string;
1473
1473
  otp: string;
1474
- realm: "email" | "sms";
1474
+ realm: "sms" | "email";
1475
1475
  } | {
1476
1476
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1477
1477
  subject_token: string;
@@ -1693,7 +1693,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1693
1693
  };
1694
1694
  output: {};
1695
1695
  outputFormat: string;
1696
- status: 302;
1696
+ status: 200;
1697
1697
  } | {
1698
1698
  input: {
1699
1699
  query: {
@@ -1707,7 +1707,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1707
1707
  };
1708
1708
  output: {};
1709
1709
  outputFormat: string;
1710
- status: 200;
1710
+ status: 400;
1711
1711
  } | {
1712
1712
  input: {
1713
1713
  query: {
@@ -1721,7 +1721,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1721
1721
  };
1722
1722
  output: {};
1723
1723
  outputFormat: string;
1724
- status: 400;
1724
+ status: 302;
1725
1725
  };
1726
1726
  };
1727
1727
  }, "/oidc/logout"> & import("hono/types").MergeSchemaPath<{
@@ -18,7 +18,7 @@ export declare const oidcLogoutRoutes: OpenAPIHono<{
18
18
  };
19
19
  output: {};
20
20
  outputFormat: string;
21
- status: 302;
21
+ status: 200;
22
22
  } | {
23
23
  input: {
24
24
  query: {
@@ -32,7 +32,7 @@ export declare const oidcLogoutRoutes: OpenAPIHono<{
32
32
  };
33
33
  output: {};
34
34
  outputFormat: string;
35
- status: 200;
35
+ status: 400;
36
36
  } | {
37
37
  input: {
38
38
  query: {
@@ -46,7 +46,7 @@ export declare const oidcLogoutRoutes: OpenAPIHono<{
46
46
  };
47
47
  output: {};
48
48
  outputFormat: string;
49
- status: 400;
49
+ status: 302;
50
50
  };
51
51
  };
52
52
  }, "/">;
@@ -14,19 +14,19 @@ export declare const passwordlessRoutes: OpenAPIHono<{
14
14
  email: string;
15
15
  send: "code" | "link";
16
16
  authParams: {
17
- response_type?: AuthorizationResponseType | undefined;
18
- response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
19
- scope?: string | undefined;
20
17
  username?: string | undefined;
21
18
  state?: string | undefined;
22
19
  audience?: string | undefined;
23
- act_as?: string | undefined;
24
- redirect_uri?: string | undefined;
20
+ response_type?: AuthorizationResponseType | undefined;
21
+ response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
22
+ scope?: string | undefined;
25
23
  organization?: string | undefined;
26
- nonce?: string | undefined;
27
- prompt?: string | undefined;
24
+ redirect_uri?: string | undefined;
28
25
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
29
26
  code_challenge?: string | undefined;
27
+ nonce?: string | undefined;
28
+ act_as?: string | undefined;
29
+ prompt?: string | undefined;
30
30
  ui_locales?: string | undefined;
31
31
  max_age?: number | undefined;
32
32
  acr_values?: string | undefined;
@@ -50,19 +50,19 @@ export declare const passwordlessRoutes: OpenAPIHono<{
50
50
  phone_number: string;
51
51
  send: "code" | "link";
52
52
  authParams: {
53
- response_type?: AuthorizationResponseType | undefined;
54
- response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
55
- scope?: string | undefined;
56
53
  username?: string | undefined;
57
54
  state?: string | undefined;
58
55
  audience?: string | undefined;
59
- act_as?: string | undefined;
60
- redirect_uri?: string | undefined;
56
+ response_type?: AuthorizationResponseType | undefined;
57
+ response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
58
+ scope?: string | undefined;
61
59
  organization?: string | undefined;
62
- nonce?: string | undefined;
63
- prompt?: string | undefined;
60
+ redirect_uri?: string | undefined;
64
61
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
65
62
  code_challenge?: string | undefined;
63
+ nonce?: string | undefined;
64
+ act_as?: string | undefined;
65
+ prompt?: string | undefined;
66
66
  ui_locales?: string | undefined;
67
67
  max_age?: number | undefined;
68
68
  acr_values?: string | undefined;
@@ -18,7 +18,7 @@ export declare const registerRoutes: OpenAPIHono<{
18
18
  scope?: string | undefined;
19
19
  grant_types?: string[] | undefined;
20
20
  response_types?: string[] | undefined;
21
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
21
+ token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
22
22
  jwks_uri?: string | undefined;
23
23
  jwks?: Record<string, unknown> | undefined;
24
24
  software_id?: string | undefined;
@@ -107,7 +107,7 @@ export declare const registerRoutes: OpenAPIHono<{
107
107
  scope?: string | undefined;
108
108
  grant_types?: string[] | undefined;
109
109
  response_types?: string[] | undefined;
110
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
110
+ token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
111
111
  jwks_uri?: string | undefined;
112
112
  jwks?: Record<string, unknown> | undefined;
113
113
  software_id?: string | undefined;
@@ -40,7 +40,7 @@ export declare const tokenRoutes: OpenAPIHono<{
40
40
  client_id: string;
41
41
  username: string;
42
42
  otp: string;
43
- realm: "email" | "sms";
43
+ realm: "sms" | "email";
44
44
  } | {
45
45
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
46
46
  subject_token: string;
@@ -87,7 +87,7 @@ export declare const tokenRoutes: OpenAPIHono<{
87
87
  client_id: string;
88
88
  username: string;
89
89
  otp: string;
90
- realm: "email" | "sms";
90
+ realm: "sms" | "email";
91
91
  } | {
92
92
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
93
93
  subject_token: string;
@@ -139,7 +139,7 @@ export declare const tokenRoutes: OpenAPIHono<{
139
139
  client_id: string;
140
140
  username: string;
141
141
  otp: string;
142
- realm: "email" | "sms";
142
+ realm: "sms" | "email";
143
143
  } | {
144
144
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
145
145
  subject_token: string;
@@ -186,7 +186,7 @@ export declare const tokenRoutes: OpenAPIHono<{
186
186
  client_id: string;
187
187
  username: string;
188
188
  otp: string;
189
- realm: "email" | "sms";
189
+ realm: "sms" | "email";
190
190
  } | {
191
191
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
192
192
  subject_token: string;
@@ -246,7 +246,7 @@ export declare const tokenRoutes: OpenAPIHono<{
246
246
  client_id: string;
247
247
  username: string;
248
248
  otp: string;
249
- realm: "email" | "sms";
249
+ realm: "sms" | "email";
250
250
  } | {
251
251
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
252
252
  subject_token: string;
@@ -293,7 +293,7 @@ export declare const tokenRoutes: OpenAPIHono<{
293
293
  client_id: string;
294
294
  username: string;
295
295
  otp: string;
296
- realm: "email" | "sms";
296
+ realm: "sms" | "email";
297
297
  } | {
298
298
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
299
299
  subject_token: string;
@@ -348,7 +348,7 @@ export declare const tokenRoutes: OpenAPIHono<{
348
348
  client_id: string;
349
349
  username: string;
350
350
  otp: string;
351
- realm: "email" | "sms";
351
+ realm: "sms" | "email";
352
352
  } | {
353
353
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
354
354
  subject_token: string;
@@ -395,7 +395,7 @@ export declare const tokenRoutes: OpenAPIHono<{
395
395
  client_id: string;
396
396
  username: string;
397
397
  otp: string;
398
- realm: "email" | "sms";
398
+ realm: "sms" | "email";
399
399
  } | {
400
400
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
401
401
  subject_token: string;
@@ -450,7 +450,7 @@ export declare const tokenRoutes: OpenAPIHono<{
450
450
  client_id: string;
451
451
  username: string;
452
452
  otp: string;
453
- realm: "email" | "sms";
453
+ realm: "sms" | "email";
454
454
  } | {
455
455
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
456
456
  subject_token: string;
@@ -497,7 +497,7 @@ export declare const tokenRoutes: OpenAPIHono<{
497
497
  client_id: string;
498
498
  username: string;
499
499
  otp: string;
500
- realm: "email" | "sms";
500
+ realm: "sms" | "email";
501
501
  } | {
502
502
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
503
503
  subject_token: string;
@@ -78,7 +78,7 @@ export declare const actionExecutionsRoutes: OpenAPIHono<{
78
78
  logs: {
79
79
  action_name: string;
80
80
  lines: {
81
- level: "error" | "info" | "log" | "warn" | "debug";
81
+ level: "error" | "log" | "info" | "warn" | "debug";
82
82
  message: string;
83
83
  }[];
84
84
  }[];
@@ -663,7 +663,7 @@ export declare const actionsRoutes: OpenAPIHono<{
663
663
  args: import("hono/utils/types").JSONValue[];
664
664
  }[];
665
665
  logs: {
666
- level: "error" | "info" | "log" | "warn" | "debug";
666
+ level: "error" | "log" | "info" | "warn" | "debug";
667
667
  message: string;
668
668
  }[];
669
669
  error?: string | undefined;
@@ -37,7 +37,7 @@ export declare const authenticationMethodsRoutes: OpenAPIHono<{
37
37
  };
38
38
  } & {
39
39
  json: {
40
- type: "email" | "passkey" | "push" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
40
+ type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
41
41
  phone_number?: string | undefined;
42
42
  totp_secret?: string | undefined;
43
43
  credential_id?: string | undefined;
@@ -370,7 +370,7 @@ export declare const brandingRoutes: OpenAPIHono<{
370
370
  };
371
371
  output: {};
372
372
  outputFormat: string;
373
- status: 204;
373
+ status: 400;
374
374
  } | {
375
375
  input: {
376
376
  header: {
@@ -383,7 +383,7 @@ export declare const brandingRoutes: OpenAPIHono<{
383
383
  };
384
384
  output: {};
385
385
  outputFormat: string;
386
- status: 400;
386
+ status: 204;
387
387
  };
388
388
  };
389
389
  } & {
@@ -409,7 +409,7 @@ export declare const brandingRoutes: OpenAPIHono<{
409
409
  } & {
410
410
  json: {
411
411
  body?: string | undefined;
412
- screen?: "identifier" | "signup" | "password" | "login" | undefined;
412
+ screen?: "password" | "identifier" | "signup" | "login" | undefined;
413
413
  branding?: {
414
414
  colors?: {
415
415
  primary: string;
@@ -16,7 +16,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
16
16
  audience?: string | undefined;
17
17
  client_id?: string | undefined;
18
18
  allow_any_organization?: string | undefined;
19
- subject_type?: "client" | "user" | undefined;
19
+ subject_type?: "user" | "client" | undefined;
20
20
  };
21
21
  } & {
22
22
  header: {
@@ -31,7 +31,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
31
31
  organization_usage?: "deny" | "allow" | "require" | undefined;
32
32
  allow_any_organization?: boolean | undefined;
33
33
  is_system?: boolean | undefined;
34
- subject_type?: "client" | "user" | undefined;
34
+ subject_type?: "user" | "client" | undefined;
35
35
  authorization_details_types?: string[] | undefined;
36
36
  created_at?: string | undefined;
37
37
  updated_at?: string | undefined;
@@ -47,7 +47,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
47
47
  organization_usage?: "deny" | "allow" | "require" | undefined;
48
48
  allow_any_organization?: boolean | undefined;
49
49
  is_system?: boolean | undefined;
50
- subject_type?: "client" | "user" | undefined;
50
+ subject_type?: "user" | "client" | undefined;
51
51
  authorization_details_types?: string[] | undefined;
52
52
  created_at?: string | undefined;
53
53
  updated_at?: string | undefined;
@@ -63,7 +63,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
63
63
  organization_usage?: "deny" | "allow" | "require" | undefined;
64
64
  allow_any_organization?: boolean | undefined;
65
65
  is_system?: boolean | undefined;
66
- subject_type?: "client" | "user" | undefined;
66
+ subject_type?: "user" | "client" | undefined;
67
67
  authorization_details_types?: string[] | undefined;
68
68
  created_at?: string | undefined;
69
69
  updated_at?: string | undefined;
@@ -94,7 +94,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
94
94
  organization_usage?: "deny" | "allow" | "require" | undefined;
95
95
  allow_any_organization?: boolean | undefined;
96
96
  is_system?: boolean | undefined;
97
- subject_type?: "client" | "user" | undefined;
97
+ subject_type?: "user" | "client" | undefined;
98
98
  authorization_details_types?: string[] | undefined;
99
99
  created_at?: string | undefined;
100
100
  updated_at?: string | undefined;
@@ -139,7 +139,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
139
139
  organization_usage?: "deny" | "allow" | "require" | undefined;
140
140
  allow_any_organization?: boolean | undefined;
141
141
  is_system?: boolean | undefined;
142
- subject_type?: "client" | "user" | undefined;
142
+ subject_type?: "user" | "client" | undefined;
143
143
  authorization_details_types?: string[] | undefined;
144
144
  };
145
145
  };
@@ -151,7 +151,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
151
151
  organization_usage?: "deny" | "allow" | "require" | undefined;
152
152
  allow_any_organization?: boolean | undefined;
153
153
  is_system?: boolean | undefined;
154
- subject_type?: "client" | "user" | undefined;
154
+ subject_type?: "user" | "client" | undefined;
155
155
  authorization_details_types?: string[] | undefined;
156
156
  created_at?: string | undefined;
157
157
  updated_at?: string | undefined;
@@ -175,7 +175,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
175
175
  organization_usage?: "deny" | "allow" | "require" | undefined;
176
176
  allow_any_organization?: boolean | undefined;
177
177
  is_system?: boolean | undefined;
178
- subject_type?: "client" | "user" | undefined;
178
+ subject_type?: "user" | "client" | undefined;
179
179
  authorization_details_types?: string[] | undefined;
180
180
  };
181
181
  };
@@ -187,7 +187,7 @@ export declare const clientGrantRoutes: OpenAPIHono<{
187
187
  organization_usage?: "deny" | "allow" | "require" | undefined;
188
188
  allow_any_organization?: boolean | undefined;
189
189
  is_system?: boolean | undefined;
190
- subject_type?: "client" | "user" | undefined;
190
+ subject_type?: "user" | "client" | undefined;
191
191
  authorization_details_types?: string[] | undefined;
192
192
  created_at?: string | undefined;
193
193
  updated_at?: string | undefined;