authhero 9.7.0 → 9.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (34) hide show
  1. package/dist/authhero.cjs +144 -144
  2. package/dist/authhero.d.ts +334 -242
  3. package/dist/authhero.mjs +11866 -11658
  4. package/dist/tsconfig.types.tsbuildinfo +1 -1
  5. package/dist/types/authentication-flows/passwordless.d.ts +5 -5
  6. package/dist/types/constants.d.ts +2 -0
  7. package/dist/types/helpers/signing-keys.d.ts +11 -0
  8. package/dist/types/index.d.ts +324 -242
  9. package/dist/types/routes/auth-api/index.d.ts +21 -21
  10. package/dist/types/routes/auth-api/passwordless.d.ts +14 -14
  11. package/dist/types/routes/auth-api/revoke.d.ts +6 -6
  12. package/dist/types/routes/auth-api/well-known.d.ts +1 -1
  13. package/dist/types/routes/management-api/clients.d.ts +6 -6
  14. package/dist/types/routes/management-api/connections.d.ts +16 -16
  15. package/dist/types/routes/management-api/custom-domains.d.ts +6 -6
  16. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  17. package/dist/types/routes/management-api/forms.d.ts +126 -126
  18. package/dist/types/routes/management-api/index.d.ts +298 -216
  19. package/dist/types/routes/management-api/keys.d.ts +86 -4
  20. package/dist/types/routes/management-api/logs.d.ts +4 -4
  21. package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
  22. package/dist/types/routes/management-api/organizations.d.ts +2 -2
  23. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  24. package/dist/types/routes/management-api/roles.d.ts +1 -1
  25. package/dist/types/routes/management-api/tenant-export-import.d.ts +5 -5
  26. package/dist/types/routes/management-api/tenants.d.ts +4 -4
  27. package/dist/types/routes/management-api/users.d.ts +18 -18
  28. package/dist/types/routes/universal-login/common.d.ts +6 -6
  29. package/dist/types/routes/universal-login/flow-api.d.ts +12 -12
  30. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  31. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  32. package/dist/types/utils/encryption.d.ts +51 -0
  33. package/dist/types/utils/jwks.d.ts +2 -2
  34. package/package.json +3 -3
package/dist/types/authentication-flows/passwordless.d.ts CHANGED
@@ -372,7 +372,7 @@ export declare function passwordlessGrantUser(ctx: Context<{
372
372
  active?: boolean | undefined;
373
373
  } | undefined;
374
374
  signup?: {
375
- status?: "required" | "optional" | "disabled" | undefined;
375
+ status?: "optional" | "required" | "disabled" | undefined;
376
376
  verification?: {
377
377
  active?: boolean | undefined;
378
378
  } | undefined;
@@ -389,7 +389,7 @@ export declare function passwordlessGrantUser(ctx: Context<{
389
389
  active?: boolean | undefined;
390
390
  } | undefined;
391
391
  signup?: {
392
- status?: "required" | "optional" | "disabled" | undefined;
392
+ status?: "optional" | "required" | "disabled" | undefined;
393
393
  } | undefined;
394
394
  validation?: {
395
395
  max_length?: number | undefined;
@@ -406,7 +406,7 @@ export declare function passwordlessGrantUser(ctx: Context<{
406
406
  active?: boolean | undefined;
407
407
  } | undefined;
408
408
  signup?: {
409
- status?: "required" | "optional" | "disabled" | undefined;
409
+ status?: "optional" | "required" | "disabled" | undefined;
410
410
  } | undefined;
411
411
  } | undefined;
412
412
  } | undefined;
@@ -554,8 +554,8 @@ export declare function passwordlessGrantUser(ctx: Context<{
554
554
  } | undefined;
555
555
  authenticated_at?: string | undefined;
556
556
  };
557
- connectionType: "email" | "username" | "sms";
558
- authConnection: "email" | "username" | "sms";
557
+ connectionType: "username" | "email" | "sms";
558
+ authConnection: "username" | "email" | "sms";
559
559
  session_id: string | undefined;
560
560
  authParams: {
561
561
  client_id: string;
package/dist/types/constants.d.ts CHANGED
@@ -1,4 +1,6 @@
1
1
  export declare const USERNAME_PASSWORD_PROVIDER = "auth0";
2
+ export declare const JWT_CERT_VALIDITY_DAYS = 365;
3
+ export declare const SAML_CERT_VALIDITY_DAYS: number;
2
4
  export declare const JWKS_CACHE_TIMEOUT_IN_SECONDS: number;
3
5
  export declare const SILENT_AUTH_MAX_AGE_IN_SECONDS: number;
4
6
  export declare const UNIVERSAL_AUTH_SESSION_EXPIRES_IN_SECONDS: number;
package/dist/types/helpers/signing-keys.d.ts CHANGED
@@ -17,6 +17,17 @@ export interface ResolveSigningKeysOptions {
17
17
  export declare function resolveSigningKeys(keys: KeysAdapter, tenantId: string, modeOption: SigningKeyModeOption | undefined, opts: ResolveSigningKeysOptions): Promise<SigningKey[]>;
18
18
  /** A key is signable only if it carries private material, not just a cert. */
19
19
  export declare function isSignable(key: SigningKey): boolean;
20
+ /**
21
+ * A key with `current_since` in the future is *staged*: published so relying
22
+ * parties can pre-trust it, but not yet signing anything.
23
+ *
24
+ * This is what makes a zero-downtime rotation possible for a SAML service
25
+ * provider that pins the certificate out-of-band. The new certificate appears
26
+ * in the IdP metadata immediately, the operator gets it to the service
27
+ * provider, and only then does it start signing — the reverse order breaks
28
+ * every login in between.
29
+ */
30
+ export declare function isStaged(key: SigningKey, now?: Date): boolean;
20
31
  export interface EnsureSigningKeyOptions {
21
32
  /**
22
33
  * When set, the key is created tenant-scoped (`tenant_id` stamped) and the