authhero 9.25.0 → 9.27.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/dist/assets/u/widget/authhero-widget.esm.js +1 -1
  2. package/dist/assets/u/widget/index.esm.js +1 -1
  3. package/dist/assets/u/widget/{p-210f06bf.entry.js → p-ce8560f6.entry.js} +1 -1
  4. package/dist/authhero.cjs +157 -157
  5. package/dist/authhero.d.ts +914 -264
  6. package/dist/authhero.mjs +27723 -25733
  7. package/dist/tsconfig.types.tsbuildinfo +1 -1
  8. package/dist/types/adapters/createEncryptedDataAdapter.d.ts +2 -1
  9. package/dist/types/adapters/index.d.ts +1 -1
  10. package/dist/types/authentication-flows/device-code.d.ts +11 -0
  11. package/dist/types/authentication-flows/passwordless.d.ts +9 -5
  12. package/dist/types/errors/management-api-error.d.ts +113 -0
  13. package/dist/types/generated/locale-types.d.ts +16 -0
  14. package/dist/types/helpers/client.d.ts +8 -0
  15. package/dist/types/helpers/codes-cleanup.d.ts +1 -1
  16. package/dist/types/helpers/control-plane-caller.d.ts +15 -0
  17. package/dist/types/helpers/device-flow.d.ts +25 -0
  18. package/dist/types/helpers/hook-events.d.ts +8 -4
  19. package/dist/types/helpers/hook-user-payload.d.ts +2 -0
  20. package/dist/types/helpers/logging.d.ts +2 -1
  21. package/dist/types/helpers/outbox-destinations/code-hooks.d.ts +8 -3
  22. package/dist/types/helpers/outbox-destinations/webhooks.d.ts +3 -0
  23. package/dist/types/helpers/platform-rows.d.ts +27 -0
  24. package/dist/types/helpers/request-data.d.ts +12 -0
  25. package/dist/types/helpers/reserved-claims.d.ts +2 -2
  26. package/dist/types/helpers/scopes-permissions.d.ts +1 -1
  27. package/dist/types/helpers/synced-rows.d.ts +1 -0
  28. package/dist/types/hooks/lifecycle-codehooks.d.ts +16 -0
  29. package/dist/types/hooks/user-deletion.d.ts +9 -0
  30. package/dist/types/index.d.ts +540 -256
  31. package/dist/types/routes/auth-api/account.d.ts +2 -2
  32. package/dist/types/routes/auth-api/device.d.ts +139 -0
  33. package/dist/types/routes/auth-api/index.d.ts +238 -37
  34. package/dist/types/routes/auth-api/passwordless.d.ts +14 -14
  35. package/dist/types/routes/auth-api/revoke.d.ts +8 -8
  36. package/dist/types/routes/auth-api/token.d.ts +82 -12
  37. package/dist/types/routes/auth-api/well-known.d.ts +3 -1
  38. package/dist/types/routes/management-api/action-executions.d.ts +2 -2
  39. package/dist/types/routes/management-api/action-triggers.d.ts +27 -2
  40. package/dist/types/routes/management-api/actions.d.ts +12 -12
  41. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  42. package/dist/types/routes/management-api/branding.d.ts +4 -4
  43. package/dist/types/routes/management-api/client-grants.d.ts +13 -0
  44. package/dist/types/routes/management-api/clients.d.ts +17 -4
  45. package/dist/types/routes/management-api/connections.d.ts +27 -14
  46. package/dist/types/routes/management-api/custom-domains.d.ts +6 -6
  47. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  48. package/dist/types/routes/management-api/emails.d.ts +6 -6
  49. package/dist/types/routes/management-api/failed-events.d.ts +2 -2
  50. package/dist/types/routes/management-api/flows.d.ts +8 -8
  51. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  52. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  53. package/dist/types/routes/management-api/hooks.d.ts +42 -42
  54. package/dist/types/routes/management-api/index.d.ts +288 -211
  55. package/dist/types/routes/management-api/keys.d.ts +16 -16
  56. package/dist/types/routes/management-api/log-streams.d.ts +6 -6
  57. package/dist/types/routes/management-api/logs.d.ts +4 -4
  58. package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
  59. package/dist/types/routes/management-api/organizations.d.ts +5 -5
  60. package/dist/types/routes/management-api/prompts.d.ts +8 -8
  61. package/dist/types/routes/management-api/resource-servers.d.ts +21 -8
  62. package/dist/types/routes/management-api/roles.d.ts +1 -1
  63. package/dist/types/routes/management-api/rollouts.d.ts +261 -0
  64. package/dist/types/routes/management-api/tenant-export-import.d.ts +5 -5
  65. package/dist/types/routes/management-api/tenant-members-requests.test.d.ts +1 -0
  66. package/dist/types/routes/management-api/tenant-members.d.ts +155 -1
  67. package/dist/types/routes/management-api/tenant-operations.d.ts +17 -10
  68. package/dist/types/routes/management-api/tenants.d.ts +39 -13
  69. package/dist/types/routes/management-api/token-exchange-profiles.d.ts +6 -6
  70. package/dist/types/routes/management-api/users.d.ts +20 -20
  71. package/dist/types/routes/proxy-control-plane/tenant-members.d.ts +11 -0
  72. package/dist/types/routes/scim/index.d.ts +1 -0
  73. package/dist/types/routes/universal-login/common.d.ts +26 -10
  74. package/dist/types/routes/universal-login/flow-api.d.ts +4 -4
  75. package/dist/types/routes/universal-login/identifier.d.ts +2 -2
  76. package/dist/types/routes/universal-login/index.d.ts +2 -2
  77. package/dist/types/routes/universal-login/screens/device-flow.d.ts +4 -0
  78. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  79. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  80. package/dist/types/state-machines/login-session.d.ts +6 -1
  81. package/dist/types/tenant-members/request-notifier.d.ts +9 -0
  82. package/dist/types/tenant-members/request-notify.test.d.ts +1 -0
  83. package/dist/types/tenant-members/requests.d.ts +79 -0
  84. package/dist/types/tenant-members/requests.test.d.ts +1 -0
  85. package/dist/types/tenant-members/wire.d.ts +10 -0
  86. package/dist/types/types/AuthHeroConfig.d.ts +47 -1
  87. package/dist/types/types/Bindings.d.ts +2 -1
  88. package/dist/types/types/Variables.d.ts +8 -1
  89. package/dist/types/utils/field-encryption.d.ts +7 -0
  90. package/dist/types/utils/jwks.d.ts +2 -2
  91. package/package.json +6 -6
@@ -11,7 +11,7 @@ export declare const accountRoutes: OpenAPIHono<{
11
11
  client_id: string;
12
12
  redirect_url?: string | undefined;
13
13
  login_hint?: string | undefined;
14
- screen_hint?: "account" | "change-email" | "change-phone" | "change-password" | undefined;
14
+ screen_hint?: "change-email" | "account" | "change-phone" | "change-password" | undefined;
15
15
  };
16
16
  };
17
17
  output: {};
@@ -23,7 +23,7 @@ export declare const accountRoutes: OpenAPIHono<{
23
23
  client_id: string;
24
24
  redirect_url?: string | undefined;
25
25
  login_hint?: string | undefined;
26
- screen_hint?: "account" | "change-email" | "change-phone" | "change-password" | undefined;
26
+ screen_hint?: "change-email" | "account" | "change-phone" | "change-password" | undefined;
27
27
  };
28
28
  };
29
29
  output: {
@@ -0,0 +1,139 @@
1
+ import { OpenAPIHono } from "@hono/zod-openapi";
2
+ import type { Bindings, Variables } from "../../types";
3
+ export declare const deviceCodeRoutes: OpenAPIHono<{
4
+ Bindings: Bindings;
5
+ Variables: Variables;
6
+ }, {
7
+ "/": {
8
+ $post: {
9
+ input: {
10
+ form: {
11
+ client_id?: string | undefined;
12
+ client_secret?: string | undefined;
13
+ scope?: string | undefined;
14
+ audience?: string | undefined;
15
+ include_qr_code?: boolean | "false" | "true" | undefined;
16
+ };
17
+ } & {
18
+ json: {
19
+ client_id?: string | undefined;
20
+ client_secret?: string | undefined;
21
+ scope?: string | undefined;
22
+ audience?: string | undefined;
23
+ include_qr_code?: boolean | "false" | "true" | undefined;
24
+ };
25
+ };
26
+ output: {
27
+ error: string;
28
+ error_description?: string | undefined;
29
+ };
30
+ outputFormat: "json";
31
+ status: 401;
32
+ } | {
33
+ input: {
34
+ form: {
35
+ client_id?: string | undefined;
36
+ client_secret?: string | undefined;
37
+ scope?: string | undefined;
38
+ audience?: string | undefined;
39
+ include_qr_code?: boolean | "false" | "true" | undefined;
40
+ };
41
+ } & {
42
+ json: {
43
+ client_id?: string | undefined;
44
+ client_secret?: string | undefined;
45
+ scope?: string | undefined;
46
+ audience?: string | undefined;
47
+ include_qr_code?: boolean | "false" | "true" | undefined;
48
+ };
49
+ };
50
+ output: {
51
+ device_code: string;
52
+ user_code: string;
53
+ verification_uri: string;
54
+ verification_uri_complete: string;
55
+ expires_in: number;
56
+ interval: number;
57
+ qr_code?: string | undefined;
58
+ };
59
+ outputFormat: "json";
60
+ status: 200;
61
+ } | {
62
+ input: {
63
+ form: {
64
+ client_id?: string | undefined;
65
+ client_secret?: string | undefined;
66
+ scope?: string | undefined;
67
+ audience?: string | undefined;
68
+ include_qr_code?: boolean | "false" | "true" | undefined;
69
+ };
70
+ } & {
71
+ json: {
72
+ client_id?: string | undefined;
73
+ client_secret?: string | undefined;
74
+ scope?: string | undefined;
75
+ audience?: string | undefined;
76
+ include_qr_code?: boolean | "false" | "true" | undefined;
77
+ };
78
+ };
79
+ output: {
80
+ error: string;
81
+ error_description?: string | undefined;
82
+ };
83
+ outputFormat: "json";
84
+ status: 400;
85
+ } | {
86
+ input: {
87
+ form: {
88
+ client_id?: string | undefined;
89
+ client_secret?: string | undefined;
90
+ scope?: string | undefined;
91
+ audience?: string | undefined;
92
+ include_qr_code?: boolean | "false" | "true" | undefined;
93
+ };
94
+ } & {
95
+ json: {
96
+ client_id?: string | undefined;
97
+ client_secret?: string | undefined;
98
+ scope?: string | undefined;
99
+ audience?: string | undefined;
100
+ include_qr_code?: boolean | "false" | "true" | undefined;
101
+ };
102
+ };
103
+ output: {
104
+ error: string;
105
+ error_description?: string | undefined;
106
+ };
107
+ outputFormat: "json";
108
+ status: 429;
109
+ };
110
+ };
111
+ }, "/">;
112
+ export declare const activateRoutes: OpenAPIHono<{
113
+ Bindings: Bindings;
114
+ Variables: Variables;
115
+ }, {
116
+ "/": {
117
+ $get: {
118
+ input: {
119
+ query: {
120
+ user_code?: string | undefined;
121
+ tenant_id?: string | undefined;
122
+ };
123
+ };
124
+ output: {};
125
+ outputFormat: string;
126
+ status: 302;
127
+ } | {
128
+ input: {
129
+ query: {
130
+ user_code?: string | undefined;
131
+ tenant_id?: string | undefined;
132
+ };
133
+ };
134
+ output: {};
135
+ outputFormat: string;
136
+ status: 400;
137
+ };
138
+ };
139
+ }, "/">;
@@ -447,7 +447,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
447
447
  client_id: string;
448
448
  redirect_url?: string | undefined;
449
449
  login_hint?: string | undefined;
450
- screen_hint?: "account" | "change-email" | "change-phone" | "change-password" | undefined;
450
+ screen_hint?: "change-email" | "account" | "change-phone" | "change-password" | undefined;
451
451
  };
452
452
  };
453
453
  output: {};
@@ -459,7 +459,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
459
459
  client_id: string;
460
460
  redirect_url?: string | undefined;
461
461
  login_hint?: string | undefined;
462
- screen_hint?: "account" | "change-email" | "change-phone" | "change-password" | undefined;
462
+ screen_hint?: "change-email" | "account" | "change-phone" | "change-password" | undefined;
463
463
  };
464
464
  };
465
465
  output: {
@@ -739,22 +739,22 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
739
739
  connection: "email";
740
740
  client_id: string;
741
741
  email: string;
742
- send: "link" | "code";
742
+ send: "code" | "link";
743
743
  authParams: {
744
- state?: string | undefined;
745
744
  username?: string | undefined;
746
745
  scope?: string | undefined;
747
- audience?: string | undefined;
748
- redirect_uri?: string | undefined;
749
- act_as?: string | undefined;
750
746
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
751
747
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
748
+ audience?: string | undefined;
752
749
  organization?: string | undefined;
753
- nonce?: string | undefined;
750
+ state?: string | undefined;
751
+ redirect_uri?: string | undefined;
754
752
  prompt?: string | undefined;
753
+ ui_locales?: string | undefined;
754
+ act_as?: string | undefined;
755
+ nonce?: string | undefined;
755
756
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
756
757
  code_challenge?: string | undefined;
757
- ui_locales?: string | undefined;
758
758
  max_age?: number | undefined;
759
759
  acr_values?: string | undefined;
760
760
  claims?: {
@@ -775,22 +775,22 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
775
775
  client_id: string;
776
776
  connection: "sms";
777
777
  phone_number: string;
778
- send: "link" | "code";
778
+ send: "code" | "link";
779
779
  authParams: {
780
- state?: string | undefined;
781
780
  username?: string | undefined;
782
781
  scope?: string | undefined;
783
- audience?: string | undefined;
784
- redirect_uri?: string | undefined;
785
- act_as?: string | undefined;
786
782
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
787
783
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
784
+ audience?: string | undefined;
788
785
  organization?: string | undefined;
789
- nonce?: string | undefined;
786
+ state?: string | undefined;
787
+ redirect_uri?: string | undefined;
790
788
  prompt?: string | undefined;
789
+ ui_locales?: string | undefined;
790
+ act_as?: string | undefined;
791
+ nonce?: string | undefined;
791
792
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
792
793
  code_challenge?: string | undefined;
793
- ui_locales?: string | undefined;
794
794
  max_age?: number | undefined;
795
795
  acr_values?: string | undefined;
796
796
  claims?: {
@@ -921,14 +921,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
921
921
  input: {
922
922
  form: {
923
923
  token: string;
924
- token_type_hint?: "refresh_token" | "access_token" | undefined;
924
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
925
925
  client_id?: string | undefined;
926
926
  client_secret?: string | undefined;
927
927
  };
928
928
  } & {
929
929
  json: {
930
930
  token: string;
931
- token_type_hint?: "refresh_token" | "access_token" | undefined;
931
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
932
932
  client_id?: string | undefined;
933
933
  client_secret?: string | undefined;
934
934
  };
@@ -940,14 +940,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
940
940
  input: {
941
941
  form: {
942
942
  token: string;
943
- token_type_hint?: "refresh_token" | "access_token" | undefined;
943
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
944
944
  client_id?: string | undefined;
945
945
  client_secret?: string | undefined;
946
946
  };
947
947
  } & {
948
948
  json: {
949
949
  token: string;
950
- token_type_hint?: "refresh_token" | "access_token" | undefined;
950
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
951
951
  client_id?: string | undefined;
952
952
  client_secret?: string | undefined;
953
953
  };
@@ -957,19 +957,19 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
957
957
  error_description?: string | undefined;
958
958
  };
959
959
  outputFormat: "json";
960
- status: 400;
960
+ status: 401;
961
961
  } | {
962
962
  input: {
963
963
  form: {
964
964
  token: string;
965
- token_type_hint?: "refresh_token" | "access_token" | undefined;
965
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
966
966
  client_id?: string | undefined;
967
967
  client_secret?: string | undefined;
968
968
  };
969
969
  } & {
970
970
  json: {
971
971
  token: string;
972
- token_type_hint?: "refresh_token" | "access_token" | undefined;
972
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
973
973
  client_id?: string | undefined;
974
974
  client_secret?: string | undefined;
975
975
  };
@@ -979,14 +979,150 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
979
979
  error_description?: string | undefined;
980
980
  };
981
981
  outputFormat: "json";
982
- status: 401;
982
+ status: 400;
983
983
  };
984
984
  };
985
985
  }, "/oauth/revoke"> & import("hono/types").MergeSchemaPath<{
986
+ "/": {
987
+ $get: {
988
+ input: {
989
+ query: {
990
+ user_code?: string | undefined;
991
+ tenant_id?: string | undefined;
992
+ };
993
+ };
994
+ output: {};
995
+ outputFormat: string;
996
+ status: 302;
997
+ } | {
998
+ input: {
999
+ query: {
1000
+ user_code?: string | undefined;
1001
+ tenant_id?: string | undefined;
1002
+ };
1003
+ };
1004
+ output: {};
1005
+ outputFormat: string;
1006
+ status: 400;
1007
+ };
1008
+ };
1009
+ }, "/activate"> & import("hono/types").MergeSchemaPath<{
1010
+ "/": {
1011
+ $post: {
1012
+ input: {
1013
+ form: {
1014
+ client_id?: string | undefined;
1015
+ client_secret?: string | undefined;
1016
+ scope?: string | undefined;
1017
+ audience?: string | undefined;
1018
+ include_qr_code?: boolean | "false" | "true" | undefined;
1019
+ };
1020
+ } & {
1021
+ json: {
1022
+ client_id?: string | undefined;
1023
+ client_secret?: string | undefined;
1024
+ scope?: string | undefined;
1025
+ audience?: string | undefined;
1026
+ include_qr_code?: boolean | "false" | "true" | undefined;
1027
+ };
1028
+ };
1029
+ output: {
1030
+ error: string;
1031
+ error_description?: string | undefined;
1032
+ };
1033
+ outputFormat: "json";
1034
+ status: 401;
1035
+ } | {
1036
+ input: {
1037
+ form: {
1038
+ client_id?: string | undefined;
1039
+ client_secret?: string | undefined;
1040
+ scope?: string | undefined;
1041
+ audience?: string | undefined;
1042
+ include_qr_code?: boolean | "false" | "true" | undefined;
1043
+ };
1044
+ } & {
1045
+ json: {
1046
+ client_id?: string | undefined;
1047
+ client_secret?: string | undefined;
1048
+ scope?: string | undefined;
1049
+ audience?: string | undefined;
1050
+ include_qr_code?: boolean | "false" | "true" | undefined;
1051
+ };
1052
+ };
1053
+ output: {
1054
+ device_code: string;
1055
+ user_code: string;
1056
+ verification_uri: string;
1057
+ verification_uri_complete: string;
1058
+ expires_in: number;
1059
+ interval: number;
1060
+ qr_code?: string | undefined;
1061
+ };
1062
+ outputFormat: "json";
1063
+ status: 200;
1064
+ } | {
1065
+ input: {
1066
+ form: {
1067
+ client_id?: string | undefined;
1068
+ client_secret?: string | undefined;
1069
+ scope?: string | undefined;
1070
+ audience?: string | undefined;
1071
+ include_qr_code?: boolean | "false" | "true" | undefined;
1072
+ };
1073
+ } & {
1074
+ json: {
1075
+ client_id?: string | undefined;
1076
+ client_secret?: string | undefined;
1077
+ scope?: string | undefined;
1078
+ audience?: string | undefined;
1079
+ include_qr_code?: boolean | "false" | "true" | undefined;
1080
+ };
1081
+ };
1082
+ output: {
1083
+ error: string;
1084
+ error_description?: string | undefined;
1085
+ };
1086
+ outputFormat: "json";
1087
+ status: 400;
1088
+ } | {
1089
+ input: {
1090
+ form: {
1091
+ client_id?: string | undefined;
1092
+ client_secret?: string | undefined;
1093
+ scope?: string | undefined;
1094
+ audience?: string | undefined;
1095
+ include_qr_code?: boolean | "false" | "true" | undefined;
1096
+ };
1097
+ } & {
1098
+ json: {
1099
+ client_id?: string | undefined;
1100
+ client_secret?: string | undefined;
1101
+ scope?: string | undefined;
1102
+ audience?: string | undefined;
1103
+ include_qr_code?: boolean | "false" | "true" | undefined;
1104
+ };
1105
+ };
1106
+ output: {
1107
+ error: string;
1108
+ error_description?: string | undefined;
1109
+ };
1110
+ outputFormat: "json";
1111
+ status: 429;
1112
+ };
1113
+ };
1114
+ }, "/oauth/device/code"> & import("hono/types").MergeSchemaPath<{
986
1115
  "/": {
987
1116
  $post: {
988
1117
  input: {
989
1118
  form: {
1119
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1120
+ device_code: string;
1121
+ client_id?: string | undefined;
1122
+ client_secret?: string | undefined;
1123
+ client_assertion?: string | undefined;
1124
+ client_assertion_type?: string | undefined;
1125
+ } | {
990
1126
  grant_type: "client_credentials";
991
1127
  scope?: string | undefined;
992
1128
  audience?: string | undefined;
@@ -1047,6 +1183,13 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1047
1183
  };
1048
1184
  } & {
1049
1185
  json: {
1186
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1187
+ device_code: string;
1188
+ client_id?: string | undefined;
1189
+ client_secret?: string | undefined;
1190
+ client_assertion?: string | undefined;
1191
+ client_assertion_type?: string | undefined;
1192
+ } | {
1050
1193
  grant_type: "client_credentials";
1051
1194
  scope?: string | undefined;
1052
1195
  audience?: string | undefined;
@@ -1112,6 +1255,13 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1112
1255
  } | {
1113
1256
  input: {
1114
1257
  form: {
1258
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1259
+ device_code: string;
1260
+ client_id?: string | undefined;
1261
+ client_secret?: string | undefined;
1262
+ client_assertion?: string | undefined;
1263
+ client_assertion_type?: string | undefined;
1264
+ } | {
1115
1265
  grant_type: "client_credentials";
1116
1266
  scope?: string | undefined;
1117
1267
  audience?: string | undefined;
@@ -1172,6 +1322,13 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1172
1322
  };
1173
1323
  } & {
1174
1324
  json: {
1325
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1326
+ device_code: string;
1327
+ client_id?: string | undefined;
1328
+ client_secret?: string | undefined;
1329
+ client_assertion?: string | undefined;
1330
+ client_assertion_type?: string | undefined;
1331
+ } | {
1175
1332
  grant_type: "client_credentials";
1176
1333
  scope?: string | undefined;
1177
1334
  audience?: string | undefined;
@@ -1232,19 +1389,21 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1232
1389
  };
1233
1390
  };
1234
1391
  output: {
1235
- access_token: string;
1236
- token_type: string;
1237
- expires_in: number;
1238
- id_token?: string | undefined;
1239
- scope?: string | undefined;
1240
- state?: string | undefined;
1241
- refresh_token?: string | undefined;
1392
+ error: string;
1393
+ error_description?: string | undefined;
1242
1394
  };
1243
1395
  outputFormat: "json";
1244
- status: 200;
1396
+ status: 401;
1245
1397
  } | {
1246
1398
  input: {
1247
1399
  form: {
1400
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1401
+ device_code: string;
1402
+ client_id?: string | undefined;
1403
+ client_secret?: string | undefined;
1404
+ client_assertion?: string | undefined;
1405
+ client_assertion_type?: string | undefined;
1406
+ } | {
1248
1407
  grant_type: "client_credentials";
1249
1408
  scope?: string | undefined;
1250
1409
  audience?: string | undefined;
@@ -1305,6 +1464,13 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1305
1464
  };
1306
1465
  } & {
1307
1466
  json: {
1467
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1468
+ device_code: string;
1469
+ client_id?: string | undefined;
1470
+ client_secret?: string | undefined;
1471
+ client_assertion?: string | undefined;
1472
+ client_assertion_type?: string | undefined;
1473
+ } | {
1308
1474
  grant_type: "client_credentials";
1309
1475
  scope?: string | undefined;
1310
1476
  audience?: string | undefined;
@@ -1365,14 +1531,26 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1365
1531
  };
1366
1532
  };
1367
1533
  output: {
1368
- error: string;
1369
- error_description?: string | undefined;
1534
+ access_token: string;
1535
+ token_type: string;
1536
+ expires_in: number;
1537
+ id_token?: string | undefined;
1538
+ scope?: string | undefined;
1539
+ state?: string | undefined;
1540
+ refresh_token?: string | undefined;
1370
1541
  };
1371
1542
  outputFormat: "json";
1372
- status: 400;
1543
+ status: 200;
1373
1544
  } | {
1374
1545
  input: {
1375
1546
  form: {
1547
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1548
+ device_code: string;
1549
+ client_id?: string | undefined;
1550
+ client_secret?: string | undefined;
1551
+ client_assertion?: string | undefined;
1552
+ client_assertion_type?: string | undefined;
1553
+ } | {
1376
1554
  grant_type: "client_credentials";
1377
1555
  scope?: string | undefined;
1378
1556
  audience?: string | undefined;
@@ -1433,6 +1611,13 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1433
1611
  };
1434
1612
  } & {
1435
1613
  json: {
1614
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1615
+ device_code: string;
1616
+ client_id?: string | undefined;
1617
+ client_secret?: string | undefined;
1618
+ client_assertion?: string | undefined;
1619
+ client_assertion_type?: string | undefined;
1620
+ } | {
1436
1621
  grant_type: "client_credentials";
1437
1622
  scope?: string | undefined;
1438
1623
  audience?: string | undefined;
@@ -1497,10 +1682,17 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1497
1682
  error_description?: string | undefined;
1498
1683
  };
1499
1684
  outputFormat: "json";
1500
- status: 401;
1685
+ status: 400;
1501
1686
  } | {
1502
1687
  input: {
1503
1688
  form: {
1689
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1690
+ device_code: string;
1691
+ client_id?: string | undefined;
1692
+ client_secret?: string | undefined;
1693
+ client_assertion?: string | undefined;
1694
+ client_assertion_type?: string | undefined;
1695
+ } | {
1504
1696
  grant_type: "client_credentials";
1505
1697
  scope?: string | undefined;
1506
1698
  audience?: string | undefined;
@@ -1561,6 +1753,13 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1561
1753
  };
1562
1754
  } & {
1563
1755
  json: {
1756
+ grant_type: "urn:ietf:params:oauth:grant-type:device_code";
1757
+ device_code: string;
1758
+ client_id?: string | undefined;
1759
+ client_secret?: string | undefined;
1760
+ client_assertion?: string | undefined;
1761
+ client_assertion_type?: string | undefined;
1762
+ } | {
1564
1763
  grant_type: "client_credentials";
1565
1764
  scope?: string | undefined;
1566
1765
  audience?: string | undefined;
@@ -1635,7 +1834,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1635
1834
  output: {
1636
1835
  keys: {
1637
1836
  kty: "EC" | "RSA" | "oct";
1638
- alg?: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | undefined;
1837
+ alg?: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512" | undefined;
1639
1838
  kid?: string | undefined;
1640
1839
  use?: "sig" | "enc" | undefined;
1641
1840
  n?: string | undefined;
@@ -1674,6 +1873,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1674
1873
  request_uri_parameter_supported: boolean;
1675
1874
  request_parameter_supported: boolean;
1676
1875
  token_endpoint_auth_signing_alg_values_supported: string[];
1876
+ device_authorization_endpoint?: string | undefined;
1677
1877
  registration_endpoint?: string | undefined;
1678
1878
  end_session_endpoint?: string | undefined;
1679
1879
  grant_types_supported?: string[] | undefined;
@@ -1709,6 +1909,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1709
1909
  request_uri_parameter_supported: boolean;
1710
1910
  request_parameter_supported: boolean;
1711
1911
  token_endpoint_auth_signing_alg_values_supported: string[];
1912
+ device_authorization_endpoint?: string | undefined;
1712
1913
  registration_endpoint?: string | undefined;
1713
1914
  end_session_endpoint?: string | undefined;
1714
1915
  grant_types_supported?: string[] | undefined;