authhero 9.24.0 → 9.25.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (77) hide show
  1. package/dist/assets/u/widget/index.esm.js +1 -1
  2. package/dist/authhero.cjs +116 -116
  3. package/dist/authhero.d.ts +470 -178
  4. package/dist/authhero.mjs +36356 -35927
  5. package/dist/tsconfig.types.tsbuildinfo +1 -1
  6. package/dist/types/authentication-flows/password.d.ts +6 -0
  7. package/dist/types/authentication-flows/passwordless.d.ts +7 -3
  8. package/dist/types/generated/locale-types.d.ts +1 -0
  9. package/dist/types/helpers/audit-target-types.d.ts +26 -0
  10. package/dist/types/helpers/client.d.ts +12 -0
  11. package/dist/types/helpers/reserved-claims.d.ts +2 -2
  12. package/dist/types/helpers/session-notice.d.ts +17 -0
  13. package/dist/types/index.d.ts +455 -178
  14. package/dist/types/routes/auth-api/account.d.ts +2 -2
  15. package/dist/types/routes/auth-api/index.d.ts +26 -26
  16. package/dist/types/routes/auth-api/logout.d.ts +2 -2
  17. package/dist/types/routes/auth-api/oidc-logout.d.ts +3 -3
  18. package/dist/types/routes/auth-api/passwordless.d.ts +8 -8
  19. package/dist/types/routes/auth-api/token.d.ts +10 -10
  20. package/dist/types/routes/auth-api/well-known.d.ts +1 -1
  21. package/dist/types/routes/management-api/action-executions.d.ts +2 -2
  22. package/dist/types/routes/management-api/action-triggers.d.ts +8 -2
  23. package/dist/types/routes/management-api/actions.d.ts +45 -12
  24. package/dist/types/routes/management-api/branding.d.ts +14 -2
  25. package/dist/types/routes/management-api/clients.d.ts +8 -2
  26. package/dist/types/routes/management-api/connections.d.ts +30 -6
  27. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  28. package/dist/types/routes/management-api/emails.d.ts +18 -0
  29. package/dist/types/routes/management-api/failed-events.d.ts +27 -2
  30. package/dist/types/routes/management-api/flows.d.ts +8 -8
  31. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  32. package/dist/types/routes/management-api/helpers.d.ts +25 -3
  33. package/dist/types/routes/management-api/hooks.d.ts +105 -0
  34. package/dist/types/routes/management-api/index.d.ts +406 -129
  35. package/dist/types/routes/management-api/keys.d.ts +12 -12
  36. package/dist/types/routes/management-api/log-streams.d.ts +6 -6
  37. package/dist/types/routes/management-api/logs.d.ts +4 -4
  38. package/dist/types/routes/management-api/organizations.d.ts +4 -4
  39. package/dist/types/routes/management-api/prompts.d.ts +12 -6
  40. package/dist/types/routes/management-api/resource-servers.d.ts +44 -20
  41. package/dist/types/routes/management-api/tenants.d.ts +4 -0
  42. package/dist/types/routes/management-api/token-exchange-profiles.d.ts +6 -6
  43. package/dist/types/routes/management-api/users.d.ts +18 -18
  44. package/dist/types/routes/saml/index.d.ts +6 -6
  45. package/dist/types/routes/saml/samlp.d.ts +6 -6
  46. package/dist/types/routes/universal-login/common.d.ts +18 -2
  47. package/dist/types/routes/universal-login/continue.d.ts +2 -2
  48. package/dist/types/routes/universal-login/identifier.d.ts +4 -4
  49. package/dist/types/routes/universal-login/impersonate.d.ts +4 -4
  50. package/dist/types/routes/universal-login/index.d.ts +10 -10
  51. package/dist/types/routes/universal-login/screens/account-mfa-phone-enrollment.d.ts +0 -5
  52. package/dist/types/routes/universal-login/screens/account-mfa-totp-enrollment.d.ts +0 -5
  53. package/dist/types/routes/universal-login/screens/account-passkeys.d.ts +0 -5
  54. package/dist/types/routes/universal-login/screens/connect-tenant-select.d.ts +0 -10
  55. package/dist/types/routes/universal-login/screens/identifier.d.ts +0 -5
  56. package/dist/types/routes/universal-login/screens/login-partials.d.ts +8 -0
  57. package/dist/types/routes/universal-login/screens/login.d.ts +0 -8
  58. package/dist/types/routes/universal-login/screens/mfa-login-options.d.ts +0 -5
  59. package/dist/types/routes/universal-login/screens/mfa-phone-challenge.d.ts +0 -5
  60. package/dist/types/routes/universal-login/screens/mfa-phone-enrollment.d.ts +0 -5
  61. package/dist/types/routes/universal-login/screens/mfa-totp-challenge.d.ts +0 -5
  62. package/dist/types/routes/universal-login/screens/mfa-totp-enrollment.d.ts +0 -5
  63. package/dist/types/routes/universal-login/screens/passkey-challenge.d.ts +0 -14
  64. package/dist/types/routes/universal-login/screens/passkey-enrollment-nudge.d.ts +0 -15
  65. package/dist/types/routes/universal-login/screens/passkey-enrollment.d.ts +0 -9
  66. package/dist/types/routes/universal-login/screens/reset-password-code.d.ts +0 -9
  67. package/dist/types/routes/universal-login/screens/reset-password.d.ts +2 -6
  68. package/dist/types/routes/universal-login/u2-index.d.ts +7 -7
  69. package/dist/types/routes/universal-login/u2-routes.d.ts +7 -7
  70. package/dist/types/state-machines/index.d.ts +3 -1
  71. package/dist/types/state-machines/login-session-data.d.ts +19 -0
  72. package/dist/types/state-machines/login-session.d.ts +67 -3
  73. package/dist/types/state-machines/password-reset.d.ts +46 -0
  74. package/dist/types/types/Variables.d.ts +3 -0
  75. package/dist/types/utils/jwks.d.ts +2 -2
  76. package/dist/types/utils/jwt.d.ts +2 -0
  77. package/package.json +6 -6
@@ -26,8 +26,8 @@ export declare const userRoutes: OpenAPIHono<{
26
26
  output: {
27
27
  created_at: string;
28
28
  updated_at: string;
29
- connection: string;
30
29
  user_id: string;
30
+ connection: string;
31
31
  email_verified: boolean;
32
32
  provider: string;
33
33
  is_social: boolean;
@@ -97,8 +97,8 @@ export declare const userRoutes: OpenAPIHono<{
97
97
  users: {
98
98
  created_at: string;
99
99
  updated_at: string;
100
- connection: string;
101
100
  user_id: string;
101
+ connection: string;
102
102
  email_verified: boolean;
103
103
  provider: string;
104
104
  is_social: boolean;
@@ -168,8 +168,8 @@ export declare const userRoutes: OpenAPIHono<{
168
168
  users: {
169
169
  created_at: string;
170
170
  updated_at: string;
171
- connection: string;
172
171
  user_id: string;
172
+ connection: string;
173
173
  email_verified: boolean;
174
174
  provider: string;
175
175
  is_social: boolean;
@@ -254,8 +254,8 @@ export declare const userRoutes: OpenAPIHono<{
254
254
  output: {
255
255
  created_at: string;
256
256
  updated_at: string;
257
- connection: string;
258
257
  user_id: string;
258
+ connection: string;
259
259
  email_verified: boolean;
260
260
  provider: string;
261
261
  is_social: boolean;
@@ -394,8 +394,8 @@ export declare const userRoutes: OpenAPIHono<{
394
394
  output: {
395
395
  created_at: string;
396
396
  updated_at: string;
397
- connection: string;
398
397
  user_id: string;
398
+ connection: string;
399
399
  email_verified: boolean;
400
400
  provider: string;
401
401
  is_social: boolean;
@@ -589,8 +589,8 @@ export declare const userRoutes: OpenAPIHono<{
589
589
  output: {
590
590
  created_at: string;
591
591
  updated_at: string;
592
- connection: string;
593
592
  user_id: string;
593
+ connection: string;
594
594
  email_verified: boolean;
595
595
  provider: string;
596
596
  is_social: boolean;
@@ -854,10 +854,10 @@ export declare const userRoutes: OpenAPIHono<{
854
854
  };
855
855
  };
856
856
  output: {
857
- client_id: string;
858
- id: string;
859
857
  user_id: string;
858
+ id: string;
860
859
  created_at: string;
860
+ client_id: string;
861
861
  rotating: boolean;
862
862
  device: {
863
863
  initial_user_agent: string;
@@ -880,18 +880,18 @@ export declare const userRoutes: OpenAPIHono<{
880
880
  strategy_type: string;
881
881
  } | undefined;
882
882
  revoked_at?: string | undefined;
883
- idle_expires_at?: string | undefined;
884
883
  organization?: string | undefined;
884
+ idle_expires_at?: string | undefined;
885
885
  last_exchanged_at?: string | undefined;
886
886
  }[] | {
887
887
  start: number;
888
888
  limit: number;
889
889
  length: number;
890
890
  tokens: {
891
- client_id: string;
892
- id: string;
893
891
  user_id: string;
892
+ id: string;
894
893
  created_at: string;
894
+ client_id: string;
895
895
  rotating: boolean;
896
896
  device: {
897
897
  initial_user_agent: string;
@@ -914,18 +914,18 @@ export declare const userRoutes: OpenAPIHono<{
914
914
  strategy_type: string;
915
915
  } | undefined;
916
916
  revoked_at?: string | undefined;
917
- idle_expires_at?: string | undefined;
918
917
  organization?: string | undefined;
918
+ idle_expires_at?: string | undefined;
919
919
  last_exchanged_at?: string | undefined;
920
920
  }[];
921
921
  total?: number | undefined;
922
922
  next?: string | undefined;
923
923
  } | {
924
924
  tokens: {
925
- client_id: string;
926
- id: string;
927
925
  user_id: string;
926
+ id: string;
928
927
  created_at: string;
928
+ client_id: string;
929
929
  rotating: boolean;
930
930
  device: {
931
931
  initial_user_agent: string;
@@ -948,8 +948,8 @@ export declare const userRoutes: OpenAPIHono<{
948
948
  strategy_type: string;
949
949
  } | undefined;
950
950
  revoked_at?: string | undefined;
951
- idle_expires_at?: string | undefined;
952
951
  organization?: string | undefined;
952
+ idle_expires_at?: string | undefined;
953
953
  last_exchanged_at?: string | undefined;
954
954
  }[];
955
955
  next?: string | undefined;
@@ -1000,7 +1000,7 @@ export declare const userRoutes: OpenAPIHono<{
1000
1000
  };
1001
1001
  };
1002
1002
  output: {
1003
- type: "fn" | "i" | "f" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1003
+ type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1004
1004
  date: string;
1005
1005
  isMobile: boolean;
1006
1006
  log_id: string;
@@ -1036,7 +1036,7 @@ export declare const userRoutes: OpenAPIHono<{
1036
1036
  } | undefined;
1037
1037
  }[] | {
1038
1038
  logs: {
1039
- type: "fn" | "i" | "f" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1039
+ type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1040
1040
  date: string;
1041
1041
  isMobile: boolean;
1042
1042
  log_id: string;
@@ -1077,7 +1077,7 @@ export declare const userRoutes: OpenAPIHono<{
1077
1077
  limit: number;
1078
1078
  length: number;
1079
1079
  logs: {
1080
- type: "fn" | "i" | "f" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1080
+ type: "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1081
1081
  date: string;
1082
1082
  isMobile: boolean;
1083
1083
  log_id: string;
@@ -78,7 +78,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
78
78
  };
79
79
  output: {};
80
80
  outputFormat: string;
81
- status: 400;
81
+ status: 200;
82
82
  } | {
83
83
  input: {
84
84
  param: {
@@ -94,7 +94,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
94
94
  };
95
95
  output: {};
96
96
  outputFormat: string;
97
- status: 200;
97
+ status: 302;
98
98
  } | {
99
99
  input: {
100
100
  param: {
@@ -110,7 +110,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
110
110
  };
111
111
  output: {};
112
112
  outputFormat: string;
113
- status: 302;
113
+ status: 400;
114
114
  };
115
115
  };
116
116
  } & {
@@ -128,7 +128,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
128
128
  };
129
129
  output: {};
130
130
  outputFormat: string;
131
- status: 400;
131
+ status: 200;
132
132
  } | {
133
133
  input: {
134
134
  param: {
@@ -142,7 +142,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
142
142
  };
143
143
  output: {};
144
144
  outputFormat: string;
145
- status: 200;
145
+ status: 302;
146
146
  } | {
147
147
  input: {
148
148
  param: {
@@ -156,7 +156,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
156
156
  };
157
157
  output: {};
158
158
  outputFormat: string;
159
- status: 302;
159
+ status: 400;
160
160
  };
161
161
  };
162
162
  }, "/">, "/">;
@@ -78,7 +78,7 @@ export declare const samlpRoutes: OpenAPIHono<{
78
78
  };
79
79
  output: {};
80
80
  outputFormat: string;
81
- status: 400;
81
+ status: 200;
82
82
  } | {
83
83
  input: {
84
84
  param: {
@@ -94,7 +94,7 @@ export declare const samlpRoutes: OpenAPIHono<{
94
94
  };
95
95
  output: {};
96
96
  outputFormat: string;
97
- status: 200;
97
+ status: 302;
98
98
  } | {
99
99
  input: {
100
100
  param: {
@@ -110,7 +110,7 @@ export declare const samlpRoutes: OpenAPIHono<{
110
110
  };
111
111
  output: {};
112
112
  outputFormat: string;
113
- status: 302;
113
+ status: 400;
114
114
  };
115
115
  };
116
116
  } & {
@@ -128,7 +128,7 @@ export declare const samlpRoutes: OpenAPIHono<{
128
128
  };
129
129
  output: {};
130
130
  outputFormat: string;
131
- status: 400;
131
+ status: 200;
132
132
  } | {
133
133
  input: {
134
134
  param: {
@@ -142,7 +142,7 @@ export declare const samlpRoutes: OpenAPIHono<{
142
142
  };
143
143
  output: {};
144
144
  outputFormat: string;
145
- status: 200;
145
+ status: 302;
146
146
  } | {
147
147
  input: {
148
148
  param: {
@@ -156,7 +156,7 @@ export declare const samlpRoutes: OpenAPIHono<{
156
156
  };
157
157
  output: {};
158
158
  outputFormat: string;
159
- status: 302;
159
+ status: 400;
160
160
  };
161
161
  };
162
162
  }, "/">;
@@ -100,6 +100,9 @@ export declare function initJSXRoute(ctx: Context<{
100
100
  url: string;
101
101
  } | undefined;
102
102
  dark_mode?: "dark" | "light" | "auto" | undefined;
103
+ scope?: "shared" | "local" | "platform" | undefined;
104
+ override?: "none" | "secrets" | "fields" | undefined;
105
+ enforce?: boolean | undefined;
103
106
  } | null;
104
107
  client: {
105
108
  created_at: string;
@@ -121,6 +124,7 @@ export declare function initJSXRoute(ctx: Context<{
121
124
  updated_at: string;
122
125
  friendly_name: string;
123
126
  id: string;
127
+ parent_tenant_id?: string | null | undefined;
124
128
  audience?: string | undefined;
125
129
  picture_url?: string | undefined;
126
130
  support_email?: string | undefined;
@@ -371,7 +375,7 @@ export declare function initJSXRoute(ctx: Context<{
371
375
  } | undefined;
372
376
  unique?: boolean | undefined;
373
377
  profile_required?: boolean | undefined;
374
- verification_method?: "code" | "link" | undefined;
378
+ verification_method?: "link" | "code" | undefined;
375
379
  } | undefined;
376
380
  username?: {
377
381
  identifier?: {
@@ -421,6 +425,9 @@ export declare function initJSXRoute(ctx: Context<{
421
425
  } | undefined;
422
426
  set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
423
427
  };
428
+ scope?: "shared" | "local" | "platform" | undefined;
429
+ override?: "none" | "secrets" | "fields" | undefined;
430
+ enforce?: boolean | undefined;
424
431
  id?: string | undefined;
425
432
  display_name?: string | undefined;
426
433
  enabled_clients?: string[] | undefined;
@@ -496,6 +503,7 @@ export declare function initJSXRoute(ctx: Context<{
496
503
  updated_at: string;
497
504
  friendly_name: string;
498
505
  id: string;
506
+ parent_tenant_id?: string | null | undefined;
499
507
  audience?: string | undefined;
500
508
  picture_url?: string | undefined;
501
509
  support_email?: string | undefined;
@@ -836,6 +844,9 @@ export declare function initJSXRouteWithSession(ctx: Context<{
836
844
  url: string;
837
845
  } | undefined;
838
846
  dark_mode?: "dark" | "light" | "auto" | undefined;
847
+ scope?: "shared" | "local" | "platform" | undefined;
848
+ override?: "none" | "secrets" | "fields" | undefined;
849
+ enforce?: boolean | undefined;
839
850
  } | null;
840
851
  client: {
841
852
  created_at: string;
@@ -857,6 +868,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
857
868
  updated_at: string;
858
869
  friendly_name: string;
859
870
  id: string;
871
+ parent_tenant_id?: string | null | undefined;
860
872
  audience?: string | undefined;
861
873
  picture_url?: string | undefined;
862
874
  support_email?: string | undefined;
@@ -1107,7 +1119,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1107
1119
  } | undefined;
1108
1120
  unique?: boolean | undefined;
1109
1121
  profile_required?: boolean | undefined;
1110
- verification_method?: "code" | "link" | undefined;
1122
+ verification_method?: "link" | "code" | undefined;
1111
1123
  } | undefined;
1112
1124
  username?: {
1113
1125
  identifier?: {
@@ -1157,6 +1169,9 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1157
1169
  } | undefined;
1158
1170
  set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
1159
1171
  };
1172
+ scope?: "shared" | "local" | "platform" | undefined;
1173
+ override?: "none" | "secrets" | "fields" | undefined;
1174
+ enforce?: boolean | undefined;
1160
1175
  id?: string | undefined;
1161
1176
  display_name?: string | undefined;
1162
1177
  enabled_clients?: string[] | undefined;
@@ -1301,6 +1316,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1301
1316
  updated_at: string;
1302
1317
  friendly_name: string;
1303
1318
  id: string;
1319
+ parent_tenant_id?: string | null | undefined;
1304
1320
  audience?: string | undefined;
1305
1321
  picture_url?: string | undefined;
1306
1322
  support_email?: string | undefined;
@@ -13,7 +13,7 @@ export declare const continueRoutes: OpenAPIHono<{
13
13
  };
14
14
  output: {};
15
15
  outputFormat: string;
16
- status: 400;
16
+ status: 302;
17
17
  } | {
18
18
  input: {
19
19
  query: {
@@ -22,7 +22,7 @@ export declare const continueRoutes: OpenAPIHono<{
22
22
  };
23
23
  output: {};
24
24
  outputFormat: string;
25
- status: 302;
25
+ status: 400;
26
26
  } | {
27
27
  input: {
28
28
  query: {
@@ -30,12 +30,12 @@ export declare const identifierRoutes: OpenAPIHono<{
30
30
  } & {
31
31
  form: {
32
32
  username: string;
33
- login_selection?: "code" | "password" | undefined;
33
+ login_selection?: "password" | "code" | undefined;
34
34
  };
35
35
  };
36
36
  output: {};
37
37
  outputFormat: string;
38
- status: 400;
38
+ status: 302;
39
39
  } | {
40
40
  input: {
41
41
  query: {
@@ -44,12 +44,12 @@ export declare const identifierRoutes: OpenAPIHono<{
44
44
  } & {
45
45
  form: {
46
46
  username: string;
47
- login_selection?: "code" | "password" | undefined;
47
+ login_selection?: "password" | "code" | undefined;
48
48
  };
49
49
  };
50
50
  output: {};
51
51
  outputFormat: string;
52
- status: 302;
52
+ status: 400;
53
53
  };
54
54
  };
55
55
  }, "/">;
@@ -13,7 +13,7 @@ export declare const impersonateRoutes: OpenAPIHono<{
13
13
  };
14
14
  output: {};
15
15
  outputFormat: string;
16
- status: 400;
16
+ status: 200;
17
17
  } | {
18
18
  input: {
19
19
  query: {
@@ -22,7 +22,7 @@ export declare const impersonateRoutes: OpenAPIHono<{
22
22
  };
23
23
  output: {};
24
24
  outputFormat: string;
25
- status: 200;
25
+ status: 400;
26
26
  };
27
27
  };
28
28
  } & {
@@ -52,7 +52,7 @@ export declare const impersonateRoutes: OpenAPIHono<{
52
52
  };
53
53
  output: {};
54
54
  outputFormat: string;
55
- status: 400;
55
+ status: 302;
56
56
  } | {
57
57
  input: {
58
58
  query: {
@@ -65,7 +65,7 @@ export declare const impersonateRoutes: OpenAPIHono<{
65
65
  };
66
66
  output: {};
67
67
  outputFormat: string;
68
- status: 302;
68
+ status: 400;
69
69
  };
70
70
  };
71
71
  }, "/">;
@@ -27,7 +27,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
27
27
  };
28
28
  output: {};
29
29
  outputFormat: string;
30
- status: 400;
30
+ status: 302;
31
31
  } | {
32
32
  input: {
33
33
  query: {
@@ -36,7 +36,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
36
36
  };
37
37
  output: {};
38
38
  outputFormat: string;
39
- status: 302;
39
+ status: 400;
40
40
  } | {
41
41
  input: {
42
42
  query: {
@@ -126,7 +126,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
126
126
  };
127
127
  output: {};
128
128
  outputFormat: string;
129
- status: 400;
129
+ status: 200;
130
130
  } | {
131
131
  input: {
132
132
  query: {
@@ -135,7 +135,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
135
135
  };
136
136
  output: {};
137
137
  outputFormat: string;
138
- status: 200;
138
+ status: 400;
139
139
  };
140
140
  };
141
141
  } & {
@@ -165,7 +165,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
165
165
  };
166
166
  output: {};
167
167
  outputFormat: string;
168
- status: 400;
168
+ status: 302;
169
169
  } | {
170
170
  input: {
171
171
  query: {
@@ -178,7 +178,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
178
178
  };
179
179
  output: {};
180
180
  outputFormat: string;
181
- status: 302;
181
+ status: 400;
182
182
  };
183
183
  };
184
184
  }, "/impersonate"> & import("hono/types").MergeSchemaPath<{
@@ -515,12 +515,12 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
515
515
  } & {
516
516
  form: {
517
517
  username: string;
518
- login_selection?: "code" | "password" | undefined;
518
+ login_selection?: "password" | "code" | undefined;
519
519
  };
520
520
  };
521
521
  output: {};
522
522
  outputFormat: string;
523
- status: 400;
523
+ status: 302;
524
524
  } | {
525
525
  input: {
526
526
  query: {
@@ -529,12 +529,12 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
529
529
  } & {
530
530
  form: {
531
531
  username: string;
532
- login_selection?: "code" | "password" | undefined;
532
+ login_selection?: "password" | "code" | undefined;
533
533
  };
534
534
  };
535
535
  output: {};
536
536
  outputFormat: string;
537
- status: 302;
537
+ status: 400;
538
538
  };
539
539
  };
540
540
  }, "/login/identifier"> & import("hono/types").MergeSchemaPath<{
@@ -1,8 +1,3 @@
1
- /**
2
- * Account MFA Phone Enrollment screen - enroll SMS MFA from account settings
3
- *
4
- * Corresponds to: /u2/account/security/phone-enrollment
5
- */
6
1
  import type { ScreenDefinition } from "./types";
7
2
  /**
8
3
  * Screen definition for account MFA phone enrollment
@@ -1,8 +1,3 @@
1
- /**
2
- * Account MFA TOTP Enrollment screen - enroll authenticator app from account settings
3
- *
4
- * Corresponds to: /u2/account/security/totp-enrollment
5
- */
6
1
  import type { ScreenDefinition } from "./types";
7
2
  /**
8
3
  * Screen definition for account MFA TOTP enrollment
@@ -1,8 +1,3 @@
1
- /**
2
- * Account Passkeys screen - manage passkey credentials
3
- *
4
- * Corresponds to: /u2/account/passkeys
5
- */
6
1
  import type { ScreenDefinition } from "./types";
7
2
  /**
8
3
  * Screen definition for the account-passkeys screen
@@ -1,13 +1,3 @@
1
- /**
2
- * Connect Tenant Select screen — control-plane-only step in the consent flow.
3
- *
4
- * When `/connect/start` is hit on the multi-tenancy control plane, the user
5
- * picks which child tenant the IAT should be minted on. Each child tenant is
6
- * represented by an organization on the control plane whose `name` matches
7
- * the child tenant id (see @authhero/multi-tenancy provisioning hooks).
8
- *
9
- * Corresponds to: /u2/connect/select-tenant
10
- */
11
1
  import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
12
2
  export declare function connectTenantSelectScreen(context: ScreenContext): Promise<ScreenResult>;
13
3
  export declare const connectTenantSelectScreenDefinition: ScreenDefinition;
@@ -1,8 +1,3 @@
1
- /**
2
- * Identifier screen - the first screen in the login flow
3
- *
4
- * Corresponds to: /u/login/identifier
5
- */
6
1
  import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
7
2
  /**
8
3
  * Create the identifier screen
@@ -0,0 +1,8 @@
1
+ /**
2
+ * Prompt partials on the login screens. Auth0 keys partials by prompt and
3
+ * screen; each login screen reads the one stored under its own prompt name
4
+ * (`login-id`, `login-password`, `login`), like the signup screen does.
5
+ */
6
+ import type { UiScreen } from "@authhero/adapter-interfaces";
7
+ import type { ScreenContext } from "./types";
8
+ export declare function getLoginPartials(context: ScreenContext, prompt: "login-id" | "login-password" | "login"): Promise<UiScreen["partials"]>;
@@ -1,11 +1,3 @@
1
- /**
2
- * Login screen - combined identifier + password screen (Identifier + Password flow)
3
- *
4
- * This screen shows email/username input, password input, and social login buttons
5
- * all on a single page. Used when identifier_first is set to false.
6
- *
7
- * Corresponds to: /u2/login
8
- */
9
1
  import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
10
2
  /**
11
3
  * Create the login screen (combined identifier + password)
@@ -1,8 +1,3 @@
1
- /**
2
- * MFA Login Options screen - factor selection when multiple MFA methods are available
3
- *
4
- * Corresponds to: /u2/mfa/login-options
5
- */
6
1
  import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
7
2
  interface MfaOption {
8
3
  id: string;
@@ -1,8 +1,3 @@
1
- /**
2
- * MFA Phone Challenge screen - for verifying SMS MFA code
3
- *
4
- * Corresponds to: /u2/mfa/phone-challenge
5
- */
6
1
  import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
7
2
  /**
8
3
  * Create the mfa-phone-challenge screen