authhero 9.6.4 → 9.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (27) hide show
  1. package/dist/assets/u/widget/index.esm.js +1 -1
  2. package/dist/authhero.cjs +144 -144
  3. package/dist/authhero.d.ts +286 -66
  4. package/dist/authhero.mjs +13592 -13476
  5. package/dist/tsconfig.types.tsbuildinfo +1 -1
  6. package/dist/types/authentication-flows/common.d.ts +17 -1
  7. package/dist/types/authentication-flows/passwordless.d.ts +5 -5
  8. package/dist/types/helpers/revoke-user-refresh-tokens.d.ts +21 -0
  9. package/dist/types/index.d.ts +286 -66
  10. package/dist/types/routes/auth-api/index.d.ts +6 -6
  11. package/dist/types/routes/auth-api/passwordless.d.ts +6 -6
  12. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  13. package/dist/types/routes/management-api/clients.d.ts +6 -6
  14. package/dist/types/routes/management-api/connections.d.ts +15 -15
  15. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  16. package/dist/types/routes/management-api/index.d.ts +275 -55
  17. package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
  18. package/dist/types/routes/management-api/organizations.d.ts +5 -5
  19. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  20. package/dist/types/routes/management-api/refresh_tokens.d.ts +7 -0
  21. package/dist/types/routes/management-api/users.d.ts +146 -0
  22. package/dist/types/routes/universal-login/common.d.ts +6 -6
  23. package/dist/types/routes/universal-login/flow-api.d.ts +4 -4
  24. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  25. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  26. package/dist/types/utils/user-id.d.ts +19 -1
  27. package/package.json +6 -6
@@ -15,7 +15,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
15
15
  created_at: string;
16
16
  updated_at: string;
17
17
  name: string;
18
- provider: "auth0" | "oidc" | "okta" | "cognito";
18
+ provider: "auth0" | "cognito" | "okta" | "oidc";
19
19
  connection: string;
20
20
  enabled: boolean;
21
21
  credentials: {
@@ -47,7 +47,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
47
47
  created_at: string;
48
48
  updated_at: string;
49
49
  name: string;
50
- provider: "auth0" | "oidc" | "okta" | "cognito";
50
+ provider: "auth0" | "cognito" | "okta" | "oidc";
51
51
  connection: string;
52
52
  enabled: boolean;
53
53
  credentials: {
@@ -73,7 +73,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
73
73
  } & {
74
74
  json: {
75
75
  name: string;
76
- provider: "auth0" | "oidc" | "okta" | "cognito";
76
+ provider: "auth0" | "cognito" | "okta" | "oidc";
77
77
  connection: string;
78
78
  credentials: {
79
79
  domain: string;
@@ -90,7 +90,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
90
90
  created_at: string;
91
91
  updated_at: string;
92
92
  name: string;
93
- provider: "auth0" | "oidc" | "okta" | "cognito";
93
+ provider: "auth0" | "cognito" | "okta" | "oidc";
94
94
  connection: string;
95
95
  enabled: boolean;
96
96
  credentials: {
@@ -121,7 +121,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
121
121
  json: {
122
122
  id?: string | undefined;
123
123
  name?: string | undefined;
124
- provider?: "auth0" | "oidc" | "okta" | "cognito" | undefined;
124
+ provider?: "auth0" | "cognito" | "okta" | "oidc" | undefined;
125
125
  connection?: string | undefined;
126
126
  enabled?: boolean | undefined;
127
127
  credentials?: {
@@ -137,7 +137,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
137
137
  created_at: string;
138
138
  updated_at: string;
139
139
  name: string;
140
- provider: "auth0" | "oidc" | "okta" | "cognito";
140
+ provider: "auth0" | "cognito" | "okta" | "oidc";
141
141
  connection: string;
142
142
  enabled: boolean;
143
143
  credentials: {
@@ -729,19 +729,19 @@ export declare const organizationRoutes: OpenAPIHono<{
729
729
  } & {
730
730
  json: {
731
731
  client_id: string;
732
- invitee: {
733
- email?: string | undefined;
734
- };
735
732
  inviter: {
736
733
  name?: string | undefined;
737
734
  };
735
+ invitee: {
736
+ email?: string | undefined;
737
+ };
738
+ id?: string | undefined;
738
739
  app_metadata?: Record<string, any> | undefined;
739
740
  user_metadata?: Record<string, any> | undefined;
740
- id?: string | undefined;
741
741
  connection_id?: string | undefined;
742
742
  roles?: string[] | undefined;
743
- send_invitation_email?: boolean | undefined;
744
743
  ttl_sec?: number | undefined;
744
+ send_invitation_email?: boolean | undefined;
745
745
  };
746
746
  };
747
747
  output: {
@@ -52,7 +52,7 @@ export declare const promptsRoutes: OpenAPIHono<{
52
52
  };
53
53
  };
54
54
  output: {
55
- prompt: "status" | "organizations" | "signup" | "mfa" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
55
+ prompt: "status" | "organizations" | "signup" | "login" | "mfa" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
56
56
  language: string;
57
57
  }[];
58
58
  outputFormat: "json";
@@ -90,7 +90,7 @@ export declare const promptsRoutes: OpenAPIHono<{
90
90
  $get: {
91
91
  input: {
92
92
  param: {
93
- prompt: "status" | "organizations" | "signup" | "mfa" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
93
+ prompt: "status" | "organizations" | "signup" | "login" | "mfa" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
94
94
  language: string;
95
95
  };
96
96
  } & {
@@ -112,7 +112,7 @@ export declare const promptsRoutes: OpenAPIHono<{
112
112
  $put: {
113
113
  input: {
114
114
  param: {
115
- prompt: "status" | "organizations" | "signup" | "mfa" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
115
+ prompt: "status" | "organizations" | "signup" | "login" | "mfa" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
116
116
  language: string;
117
117
  };
118
118
  } & {
@@ -136,7 +136,7 @@ export declare const promptsRoutes: OpenAPIHono<{
136
136
  $delete: {
137
137
  input: {
138
138
  param: {
139
- prompt: "status" | "organizations" | "signup" | "mfa" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
139
+ prompt: "status" | "organizations" | "signup" | "login" | "mfa" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
140
140
  language: string;
141
141
  };
142
142
  } & {
@@ -33,6 +33,13 @@ export declare const refreshTokensRoutes: OpenAPIHono<{
33
33
  scopes: string;
34
34
  }[];
35
35
  rotating: boolean;
36
+ session_id?: string | undefined;
37
+ organization?: string | undefined;
38
+ auth_connection?: string | undefined;
39
+ auth_strategy?: {
40
+ strategy: string;
41
+ strategy_type: string;
42
+ } | undefined;
36
43
  expires_at?: string | undefined;
37
44
  idle_expires_at?: string | undefined;
38
45
  last_exchanged_at?: string | undefined;
@@ -792,6 +792,152 @@ export declare const userRoutes: OpenAPIHono<{
792
792
  status: 200;
793
793
  };
794
794
  };
795
+ } & {
796
+ "/:user_id/refresh-tokens": {
797
+ $get: {
798
+ input: {
799
+ param: {
800
+ user_id: string;
801
+ };
802
+ } & {
803
+ query: {
804
+ page?: string | undefined;
805
+ per_page?: string | undefined;
806
+ include_totals?: string | undefined;
807
+ from?: string | undefined;
808
+ take?: string | undefined;
809
+ sort?: string | undefined;
810
+ q?: string | undefined;
811
+ from_date?: unknown;
812
+ to_date?: unknown;
813
+ };
814
+ } & {
815
+ header: {
816
+ "tenant-id"?: string | undefined;
817
+ };
818
+ };
819
+ output: {
820
+ id: string;
821
+ created_at: string;
822
+ user_id: string;
823
+ client_id: string;
824
+ rotating: boolean;
825
+ device: {
826
+ initial_user_agent: string;
827
+ initial_ip: string;
828
+ initial_asn: string;
829
+ last_user_agent: string;
830
+ last_ip: string;
831
+ last_asn: string;
832
+ };
833
+ login_id: string;
834
+ resource_servers: {
835
+ audience: string;
836
+ scopes: string;
837
+ }[];
838
+ revoked_at?: string | undefined;
839
+ expires_at?: string | undefined;
840
+ idle_expires_at?: string | undefined;
841
+ session_id?: string | undefined;
842
+ organization?: string | undefined;
843
+ auth_connection?: string | undefined;
844
+ auth_strategy?: {
845
+ strategy: string;
846
+ strategy_type: string;
847
+ } | undefined;
848
+ last_exchanged_at?: string | undefined;
849
+ }[] | {
850
+ tokens: {
851
+ id: string;
852
+ created_at: string;
853
+ user_id: string;
854
+ client_id: string;
855
+ rotating: boolean;
856
+ device: {
857
+ initial_user_agent: string;
858
+ initial_ip: string;
859
+ initial_asn: string;
860
+ last_user_agent: string;
861
+ last_ip: string;
862
+ last_asn: string;
863
+ };
864
+ login_id: string;
865
+ resource_servers: {
866
+ audience: string;
867
+ scopes: string;
868
+ }[];
869
+ revoked_at?: string | undefined;
870
+ expires_at?: string | undefined;
871
+ idle_expires_at?: string | undefined;
872
+ session_id?: string | undefined;
873
+ organization?: string | undefined;
874
+ auth_connection?: string | undefined;
875
+ auth_strategy?: {
876
+ strategy: string;
877
+ strategy_type: string;
878
+ } | undefined;
879
+ last_exchanged_at?: string | undefined;
880
+ }[];
881
+ next?: string | undefined;
882
+ } | {
883
+ start: number;
884
+ limit: number;
885
+ length: number;
886
+ tokens: {
887
+ id: string;
888
+ created_at: string;
889
+ user_id: string;
890
+ client_id: string;
891
+ rotating: boolean;
892
+ device: {
893
+ initial_user_agent: string;
894
+ initial_ip: string;
895
+ initial_asn: string;
896
+ last_user_agent: string;
897
+ last_ip: string;
898
+ last_asn: string;
899
+ };
900
+ login_id: string;
901
+ resource_servers: {
902
+ audience: string;
903
+ scopes: string;
904
+ }[];
905
+ revoked_at?: string | undefined;
906
+ expires_at?: string | undefined;
907
+ idle_expires_at?: string | undefined;
908
+ session_id?: string | undefined;
909
+ organization?: string | undefined;
910
+ auth_connection?: string | undefined;
911
+ auth_strategy?: {
912
+ strategy: string;
913
+ strategy_type: string;
914
+ } | undefined;
915
+ last_exchanged_at?: string | undefined;
916
+ }[];
917
+ total?: number | undefined;
918
+ next?: string | undefined;
919
+ };
920
+ outputFormat: "json";
921
+ status: 200;
922
+ };
923
+ };
924
+ } & {
925
+ "/:user_id/refresh-tokens": {
926
+ $delete: {
927
+ input: {
928
+ param: {
929
+ user_id: string;
930
+ };
931
+ } & {
932
+ header: {
933
+ "tenant-id"?: string | undefined;
934
+ };
935
+ };
936
+ output: {};
937
+ outputFormat: string;
938
+ status: 204;
939
+ };
940
+ };
795
941
  } & {
796
942
  "/:user_id/logs": {
797
943
  $get: {
@@ -361,7 +361,7 @@ export declare function initJSXRoute(ctx: Context<{
361
361
  active?: boolean | undefined;
362
362
  } | undefined;
363
363
  signup?: {
364
- status?: "optional" | "required" | "disabled" | undefined;
364
+ status?: "required" | "optional" | "disabled" | undefined;
365
365
  verification?: {
366
366
  active?: boolean | undefined;
367
367
  } | undefined;
@@ -378,7 +378,7 @@ export declare function initJSXRoute(ctx: Context<{
378
378
  active?: boolean | undefined;
379
379
  } | undefined;
380
380
  signup?: {
381
- status?: "optional" | "required" | "disabled" | undefined;
381
+ status?: "required" | "optional" | "disabled" | undefined;
382
382
  } | undefined;
383
383
  validation?: {
384
384
  max_length?: number | undefined;
@@ -395,7 +395,7 @@ export declare function initJSXRoute(ctx: Context<{
395
395
  active?: boolean | undefined;
396
396
  } | undefined;
397
397
  signup?: {
398
- status?: "optional" | "required" | "disabled" | undefined;
398
+ status?: "required" | "optional" | "disabled" | undefined;
399
399
  } | undefined;
400
400
  } | undefined;
401
401
  } | undefined;
@@ -1094,7 +1094,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1094
1094
  active?: boolean | undefined;
1095
1095
  } | undefined;
1096
1096
  signup?: {
1097
- status?: "optional" | "required" | "disabled" | undefined;
1097
+ status?: "required" | "optional" | "disabled" | undefined;
1098
1098
  verification?: {
1099
1099
  active?: boolean | undefined;
1100
1100
  } | undefined;
@@ -1111,7 +1111,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1111
1111
  active?: boolean | undefined;
1112
1112
  } | undefined;
1113
1113
  signup?: {
1114
- status?: "optional" | "required" | "disabled" | undefined;
1114
+ status?: "required" | "optional" | "disabled" | undefined;
1115
1115
  } | undefined;
1116
1116
  validation?: {
1117
1117
  max_length?: number | undefined;
@@ -1128,7 +1128,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1128
1128
  active?: boolean | undefined;
1129
1129
  } | undefined;
1130
1130
  signup?: {
1131
- status?: "optional" | "required" | "disabled" | undefined;
1131
+ status?: "required" | "optional" | "disabled" | undefined;
1132
1132
  } | undefined;
1133
1133
  } | undefined;
1134
1134
  } | undefined;
@@ -27,7 +27,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
27
27
  output: {
28
28
  screen: {
29
29
  action: string;
30
- method: "POST" | "GET";
30
+ method: "GET" | "POST";
31
31
  components: {
32
32
  id: string;
33
33
  type: string;
@@ -107,7 +107,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
107
107
  output: {
108
108
  screen: {
109
109
  action: string;
110
- method: "POST" | "GET";
110
+ method: "GET" | "POST";
111
111
  components: {
112
112
  id: string;
113
113
  type: string;
@@ -204,7 +204,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
204
204
  output: {
205
205
  screen: {
206
206
  action: string;
207
- method: "POST" | "GET";
207
+ method: "GET" | "POST";
208
208
  components: {
209
209
  id: string;
210
210
  type: string;
@@ -319,7 +319,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
319
319
  output: {
320
320
  screen: {
321
321
  action: string;
322
- method: "POST" | "GET";
322
+ method: "GET" | "POST";
323
323
  components: {
324
324
  id: string;
325
325
  type: string;
@@ -165,7 +165,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
165
165
  $get: {
166
166
  input: {
167
167
  param: {
168
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
168
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
169
169
  };
170
170
  } & {
171
171
  query: {
@@ -181,7 +181,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
181
181
  } | {
182
182
  input: {
183
183
  param: {
184
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
184
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
185
185
  };
186
186
  } & {
187
187
  query: {
@@ -197,7 +197,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
197
197
  } | {
198
198
  input: {
199
199
  param: {
200
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
200
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
201
201
  };
202
202
  } & {
203
203
  query: {
@@ -217,7 +217,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
217
217
  $post: {
218
218
  input: {
219
219
  param: {
220
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
220
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
221
221
  };
222
222
  } & {
223
223
  query: {
@@ -235,7 +235,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
235
235
  } | {
236
236
  input: {
237
237
  param: {
238
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
238
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
239
239
  };
240
240
  } & {
241
241
  query: {
@@ -170,7 +170,7 @@ export declare const u2Routes: OpenAPIHono<{
170
170
  $get: {
171
171
  input: {
172
172
  param: {
173
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
173
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
174
174
  };
175
175
  } & {
176
176
  query: {
@@ -186,7 +186,7 @@ export declare const u2Routes: OpenAPIHono<{
186
186
  } | {
187
187
  input: {
188
188
  param: {
189
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
189
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
190
190
  };
191
191
  } & {
192
192
  query: {
@@ -202,7 +202,7 @@ export declare const u2Routes: OpenAPIHono<{
202
202
  } | {
203
203
  input: {
204
204
  param: {
205
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
205
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
206
206
  };
207
207
  } & {
208
208
  query: {
@@ -222,7 +222,7 @@ export declare const u2Routes: OpenAPIHono<{
222
222
  $post: {
223
223
  input: {
224
224
  param: {
225
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
225
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
226
226
  };
227
227
  } & {
228
228
  query: {
@@ -240,7 +240,7 @@ export declare const u2Routes: OpenAPIHono<{
240
240
  } | {
241
241
  input: {
242
242
  param: {
243
- screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
243
+ screen: "signup" | "login" | "impersonate" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
244
244
  };
245
245
  } & {
246
246
  query: {
@@ -1,2 +1,20 @@
1
1
  export declare function userIdGenerate(): string;
2
- export declare function userIdParse(userId: string): string | undefined;
2
+ /**
3
+ * The bare id inside an Auth0-style `provider|id` identifier — everything after
4
+ * the *first* pipe, which is how Auth0 reports `identities[].user_id`.
5
+ *
6
+ * Splits on the first pipe only: enterprise identifiers embed pipes of their
7
+ * own (`samlp|okta-connection|jane` is provider `samlp` plus bare id
8
+ * `okta-connection|jane`), and returning just `okta-connection` would report an
9
+ * id that resolves to no user.
10
+ */
11
+ export declare function userIdParse(userId: string): string;
12
+ /**
13
+ * Drop a leading `provider|` from a user_id, leaving anything else untouched.
14
+ *
15
+ * Callers that accept both shapes of the same identifier (Auth0's account-link
16
+ * body takes the bare id; some clients send the whole thing) need to normalize
17
+ * without guessing: unlike {@link userIdParse} this only removes the one prefix
18
+ * it is told about, so a bare id that happens to contain a pipe survives.
19
+ */
20
+ export declare function stripProviderPrefix(userId: string, provider: string): string;
package/package.json CHANGED
@@ -11,7 +11,7 @@
11
11
  "type": "git",
12
12
  "url": "https://github.com/markusahlstrand/authhero"
13
13
  },
14
- "version": "9.6.4",
14
+ "version": "9.7.0",
15
15
  "files": [
16
16
  "dist"
17
17
  ],
@@ -63,8 +63,8 @@
63
63
  "vite": "^8.0.14",
64
64
  "vite-plugin-dts": "^4.5.4",
65
65
  "vitest": "^4.1.7",
66
- "@authhero/kysely-adapter": "12.4.2",
67
- "@authhero/widget": "0.38.3"
66
+ "@authhero/kysely-adapter": "12.5.0",
67
+ "@authhero/widget": "0.38.4"
68
68
  },
69
69
  "dependencies": {
70
70
  "@peculiar/x509": "^1.14.0",
@@ -80,9 +80,9 @@
80
80
  "qrcode": "^1.5.4",
81
81
  "sanitize-html": "^2.17.4",
82
82
  "xstate": "^5.31.1",
83
- "@authhero/adapter-interfaces": "4.8.1",
84
- "@authhero/proxy": "0.10.7",
85
- "@authhero/saml": "0.5.6"
83
+ "@authhero/adapter-interfaces": "4.9.0",
84
+ "@authhero/proxy": "0.10.8",
85
+ "@authhero/saml": "0.5.7"
86
86
  },
87
87
  "peerDependencies": {
88
88
  "@authhero/widget": "^0.1.0",