authhero 9.8.0 → 9.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (28) hide show
  1. package/dist/authhero.cjs +139 -139
  2. package/dist/authhero.d.ts +84 -64
  3. package/dist/authhero.mjs +8107 -8052
  4. package/dist/tsconfig.types.tsbuildinfo +1 -1
  5. package/dist/types/authentication-flows/passwordless.d.ts +26 -3
  6. package/dist/types/helpers/revoke-session-refresh-tokens.d.ts +33 -0
  7. package/dist/types/index.d.ts +84 -64
  8. package/dist/types/routes/auth-api/index.d.ts +33 -13
  9. package/dist/types/routes/auth-api/passwordless.d.ts +6 -6
  10. package/dist/types/routes/auth-api/revoke.d.ts +6 -6
  11. package/dist/types/routes/auth-api/token.d.ts +20 -0
  12. package/dist/types/routes/auth-api/well-known.d.ts +1 -1
  13. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  14. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  15. package/dist/types/routes/management-api/index.d.ts +44 -44
  16. package/dist/types/routes/management-api/keys.d.ts +12 -12
  17. package/dist/types/routes/management-api/logs.d.ts +4 -4
  18. package/dist/types/routes/management-api/organizations.d.ts +5 -5
  19. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  20. package/dist/types/routes/management-api/tenants.d.ts +1 -1
  21. package/dist/types/routes/management-api/users.d.ts +14 -14
  22. package/dist/types/routes/universal-login/identifier.d.ts +2 -2
  23. package/dist/types/routes/universal-login/index.d.ts +2 -2
  24. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  25. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  26. package/dist/types/state-machines/login-session.d.ts +1 -1
  27. package/dist/types/utils/jwks.d.ts +2 -2
  28. package/package.json +6 -6
package/dist/types/routes/auth-api/index.d.ts CHANGED
@@ -736,15 +736,15 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
736
736
  email: string;
737
737
  send: "code" | "link";
738
738
  authParams: {
739
- scope?: string | undefined;
740
739
  username?: string | undefined;
740
+ scope?: string | undefined;
741
+ audience?: string | undefined;
742
+ state?: string | undefined;
741
743
  act_as?: string | undefined;
742
744
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
743
745
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
744
746
  redirect_uri?: string | undefined;
745
- audience?: string | undefined;
746
747
  organization?: string | undefined;
747
- state?: string | undefined;
748
748
  nonce?: string | undefined;
749
749
  prompt?: string | undefined;
750
750
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
@@ -772,15 +772,15 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
772
772
  phone_number: string;
773
773
  send: "code" | "link";
774
774
  authParams: {
775
- scope?: string | undefined;
776
775
  username?: string | undefined;
776
+ scope?: string | undefined;
777
+ audience?: string | undefined;
778
+ state?: string | undefined;
777
779
  act_as?: string | undefined;
778
780
  response_type?: import("@authhero/adapter-interfaces").AuthorizationResponseType | undefined;
779
781
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
780
782
  redirect_uri?: string | undefined;
781
- audience?: string | undefined;
782
783
  organization?: string | undefined;
783
- state?: string | undefined;
784
784
  nonce?: string | undefined;
785
785
  prompt?: string | undefined;
786
786
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
@@ -916,14 +916,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
916
916
  input: {
917
917
  form: {
918
918
  token: string;
919
- token_type_hint?: "refresh_token" | "access_token" | undefined;
919
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
920
920
  client_id?: string | undefined;
921
921
  client_secret?: string | undefined;
922
922
  };
923
923
  } & {
924
924
  json: {
925
925
  token: string;
926
- token_type_hint?: "refresh_token" | "access_token" | undefined;
926
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
927
927
  client_id?: string | undefined;
928
928
  client_secret?: string | undefined;
929
929
  };
@@ -935,14 +935,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
935
935
  input: {
936
936
  form: {
937
937
  token: string;
938
- token_type_hint?: "refresh_token" | "access_token" | undefined;
938
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
939
939
  client_id?: string | undefined;
940
940
  client_secret?: string | undefined;
941
941
  };
942
942
  } & {
943
943
  json: {
944
944
  token: string;
945
- token_type_hint?: "refresh_token" | "access_token" | undefined;
945
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
946
946
  client_id?: string | undefined;
947
947
  client_secret?: string | undefined;
948
948
  };
@@ -957,14 +957,14 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
957
957
  input: {
958
958
  form: {
959
959
  token: string;
960
- token_type_hint?: "refresh_token" | "access_token" | undefined;
960
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
961
961
  client_id?: string | undefined;
962
962
  client_secret?: string | undefined;
963
963
  };
964
964
  } & {
965
965
  json: {
966
966
  token: string;
967
- token_type_hint?: "refresh_token" | "access_token" | undefined;
967
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
968
968
  client_id?: string | undefined;
969
969
  client_secret?: string | undefined;
970
970
  };
@@ -1015,6 +1015,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1015
1015
  username: string;
1016
1016
  otp: string;
1017
1017
  realm: "email" | "sms";
1018
+ scope?: string | undefined;
1019
+ audience?: string | undefined;
1018
1020
  } | {
1019
1021
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1020
1022
  subject_token: string;
@@ -1062,6 +1064,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1062
1064
  username: string;
1063
1065
  otp: string;
1064
1066
  realm: "email" | "sms";
1067
+ scope?: string | undefined;
1068
+ audience?: string | undefined;
1065
1069
  } | {
1066
1070
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1067
1071
  subject_token: string;
@@ -1114,6 +1118,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1114
1118
  username: string;
1115
1119
  otp: string;
1116
1120
  realm: "email" | "sms";
1121
+ scope?: string | undefined;
1122
+ audience?: string | undefined;
1117
1123
  } | {
1118
1124
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1119
1125
  subject_token: string;
@@ -1161,6 +1167,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1161
1167
  username: string;
1162
1168
  otp: string;
1163
1169
  realm: "email" | "sms";
1170
+ scope?: string | undefined;
1171
+ audience?: string | undefined;
1164
1172
  } | {
1165
1173
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1166
1174
  subject_token: string;
@@ -1221,6 +1229,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1221
1229
  username: string;
1222
1230
  otp: string;
1223
1231
  realm: "email" | "sms";
1232
+ scope?: string | undefined;
1233
+ audience?: string | undefined;
1224
1234
  } | {
1225
1235
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1226
1236
  subject_token: string;
@@ -1268,6 +1278,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1268
1278
  username: string;
1269
1279
  otp: string;
1270
1280
  realm: "email" | "sms";
1281
+ scope?: string | undefined;
1282
+ audience?: string | undefined;
1271
1283
  } | {
1272
1284
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1273
1285
  subject_token: string;
@@ -1323,6 +1335,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1323
1335
  username: string;
1324
1336
  otp: string;
1325
1337
  realm: "email" | "sms";
1338
+ scope?: string | undefined;
1339
+ audience?: string | undefined;
1326
1340
  } | {
1327
1341
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1328
1342
  subject_token: string;
@@ -1370,6 +1384,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1370
1384
  username: string;
1371
1385
  otp: string;
1372
1386
  realm: "email" | "sms";
1387
+ scope?: string | undefined;
1388
+ audience?: string | undefined;
1373
1389
  } | {
1374
1390
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1375
1391
  subject_token: string;
@@ -1425,6 +1441,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1425
1441
  username: string;
1426
1442
  otp: string;
1427
1443
  realm: "email" | "sms";
1444
+ scope?: string | undefined;
1445
+ audience?: string | undefined;
1428
1446
  } | {
1429
1447
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1430
1448
  subject_token: string;
@@ -1472,6 +1490,8 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1472
1490
  username: string;
1473
1491
  otp: string;
1474
1492
  realm: "email" | "sms";
1493
+ scope?: string | undefined;
1494
+ audience?: string | undefined;
1475
1495
  } | {
1476
1496
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
1477
1497
  subject_token: string;
@@ -1500,7 +1520,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
1500
1520
  output: {
1501
1521
  keys: {
1502
1522
  alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
1503
- kty: "RSA" | "EC" | "oct";
1523
+ kty: "EC" | "RSA" | "oct";
1504
1524
  kid?: string | undefined;
1505
1525
  use?: "sig" | "enc" | undefined;
1506
1526
  n?: string | undefined;
package/dist/types/routes/auth-api/passwordless.d.ts CHANGED
@@ -14,15 +14,15 @@ export declare const passwordlessRoutes: OpenAPIHono<{
14
14
  email: string;
15
15
  send: "code" | "link";
16
16
  authParams: {
17
- scope?: string | undefined;
18
17
  username?: string | undefined;
18
+ scope?: string | undefined;
19
+ audience?: string | undefined;
20
+ state?: string | undefined;
19
21
  act_as?: string | undefined;
20
22
  response_type?: AuthorizationResponseType | undefined;
21
23
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
22
24
  redirect_uri?: string | undefined;
23
- audience?: string | undefined;
24
25
  organization?: string | undefined;
25
- state?: string | undefined;
26
26
  nonce?: string | undefined;
27
27
  prompt?: string | undefined;
28
28
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
@@ -50,15 +50,15 @@ export declare const passwordlessRoutes: OpenAPIHono<{
50
50
  phone_number: string;
51
51
  send: "code" | "link";
52
52
  authParams: {
53
- scope?: string | undefined;
54
53
  username?: string | undefined;
54
+ scope?: string | undefined;
55
+ audience?: string | undefined;
56
+ state?: string | undefined;
55
57
  act_as?: string | undefined;
56
58
  response_type?: AuthorizationResponseType | undefined;
57
59
  response_mode?: import("@authhero/adapter-interfaces").AuthorizationResponseMode | undefined;
58
60
  redirect_uri?: string | undefined;
59
- audience?: string | undefined;
60
61
  organization?: string | undefined;
61
- state?: string | undefined;
62
62
  nonce?: string | undefined;
63
63
  prompt?: string | undefined;
64
64
  code_challenge_method?: import("@authhero/adapter-interfaces").CodeChallengeMethod | undefined;
package/dist/types/routes/auth-api/revoke.d.ts CHANGED
@@ -9,14 +9,14 @@ export declare const revokeRoutes: OpenAPIHono<{
9
9
  input: {
10
10
  form: {
11
11
  token: string;
12
- token_type_hint?: "refresh_token" | "access_token" | undefined;
12
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
13
13
  client_id?: string | undefined;
14
14
  client_secret?: string | undefined;
15
15
  };
16
16
  } & {
17
17
  json: {
18
18
  token: string;
19
- token_type_hint?: "refresh_token" | "access_token" | undefined;
19
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
20
20
  client_id?: string | undefined;
21
21
  client_secret?: string | undefined;
22
22
  };
@@ -28,14 +28,14 @@ export declare const revokeRoutes: OpenAPIHono<{
28
28
  input: {
29
29
  form: {
30
30
  token: string;
31
- token_type_hint?: "refresh_token" | "access_token" | undefined;
31
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
32
32
  client_id?: string | undefined;
33
33
  client_secret?: string | undefined;
34
34
  };
35
35
  } & {
36
36
  json: {
37
37
  token: string;
38
- token_type_hint?: "refresh_token" | "access_token" | undefined;
38
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
39
39
  client_id?: string | undefined;
40
40
  client_secret?: string | undefined;
41
41
  };
@@ -50,14 +50,14 @@ export declare const revokeRoutes: OpenAPIHono<{
50
50
  input: {
51
51
  form: {
52
52
  token: string;
53
- token_type_hint?: "refresh_token" | "access_token" | undefined;
53
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
54
54
  client_id?: string | undefined;
55
55
  client_secret?: string | undefined;
56
56
  };
57
57
  } & {
58
58
  json: {
59
59
  token: string;
60
- token_type_hint?: "refresh_token" | "access_token" | undefined;
60
+ token_type_hint?: "access_token" | "refresh_token" | undefined;
61
61
  client_id?: string | undefined;
62
62
  client_secret?: string | undefined;
63
63
  };
package/dist/types/routes/auth-api/token.d.ts CHANGED
@@ -41,6 +41,8 @@ export declare const tokenRoutes: OpenAPIHono<{
41
41
  username: string;
42
42
  otp: string;
43
43
  realm: "email" | "sms";
44
+ scope?: string | undefined;
45
+ audience?: string | undefined;
44
46
  } | {
45
47
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
46
48
  subject_token: string;
@@ -88,6 +90,8 @@ export declare const tokenRoutes: OpenAPIHono<{
88
90
  username: string;
89
91
  otp: string;
90
92
  realm: "email" | "sms";
93
+ scope?: string | undefined;
94
+ audience?: string | undefined;
91
95
  } | {
92
96
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
93
97
  subject_token: string;
@@ -140,6 +144,8 @@ export declare const tokenRoutes: OpenAPIHono<{
140
144
  username: string;
141
145
  otp: string;
142
146
  realm: "email" | "sms";
147
+ scope?: string | undefined;
148
+ audience?: string | undefined;
143
149
  } | {
144
150
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
145
151
  subject_token: string;
@@ -187,6 +193,8 @@ export declare const tokenRoutes: OpenAPIHono<{
187
193
  username: string;
188
194
  otp: string;
189
195
  realm: "email" | "sms";
196
+ scope?: string | undefined;
197
+ audience?: string | undefined;
190
198
  } | {
191
199
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
192
200
  subject_token: string;
@@ -247,6 +255,8 @@ export declare const tokenRoutes: OpenAPIHono<{
247
255
  username: string;
248
256
  otp: string;
249
257
  realm: "email" | "sms";
258
+ scope?: string | undefined;
259
+ audience?: string | undefined;
250
260
  } | {
251
261
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
252
262
  subject_token: string;
@@ -294,6 +304,8 @@ export declare const tokenRoutes: OpenAPIHono<{
294
304
  username: string;
295
305
  otp: string;
296
306
  realm: "email" | "sms";
307
+ scope?: string | undefined;
308
+ audience?: string | undefined;
297
309
  } | {
298
310
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
299
311
  subject_token: string;
@@ -349,6 +361,8 @@ export declare const tokenRoutes: OpenAPIHono<{
349
361
  username: string;
350
362
  otp: string;
351
363
  realm: "email" | "sms";
364
+ scope?: string | undefined;
365
+ audience?: string | undefined;
352
366
  } | {
353
367
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
354
368
  subject_token: string;
@@ -396,6 +410,8 @@ export declare const tokenRoutes: OpenAPIHono<{
396
410
  username: string;
397
411
  otp: string;
398
412
  realm: "email" | "sms";
413
+ scope?: string | undefined;
414
+ audience?: string | undefined;
399
415
  } | {
400
416
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
401
417
  subject_token: string;
@@ -451,6 +467,8 @@ export declare const tokenRoutes: OpenAPIHono<{
451
467
  username: string;
452
468
  otp: string;
453
469
  realm: "email" | "sms";
470
+ scope?: string | undefined;
471
+ audience?: string | undefined;
454
472
  } | {
455
473
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
456
474
  subject_token: string;
@@ -498,6 +516,8 @@ export declare const tokenRoutes: OpenAPIHono<{
498
516
  username: string;
499
517
  otp: string;
500
518
  realm: "email" | "sms";
519
+ scope?: string | undefined;
520
+ audience?: string | undefined;
501
521
  } | {
502
522
  grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
503
523
  subject_token: string;
package/dist/types/routes/auth-api/well-known.d.ts CHANGED
@@ -9,7 +9,7 @@ export declare const wellKnownRoutes: import("hono/hono-base").HonoBase<{
9
9
  output: {
10
10
  keys: {
11
11
  alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
12
- kty: "RSA" | "EC" | "oct";
12
+ kty: "EC" | "RSA" | "oct";
13
13
  kid?: string | undefined;
14
14
  use?: "sig" | "enc" | undefined;
15
15
  n?: string | undefined;
package/dist/types/routes/management-api/guardian.d.ts CHANGED
@@ -12,7 +12,7 @@ export declare const guardianRoutes: OpenAPIHono<{
12
12
  };
13
13
  };
14
14
  output: {
15
- name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
15
+ name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
16
16
  enabled: boolean;
17
17
  trial_expired?: boolean | undefined;
18
18
  }[];
@@ -167,7 +167,7 @@ export declare const guardianRoutes: OpenAPIHono<{
167
167
  $get: {
168
168
  input: {
169
169
  param: {
170
- factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
170
+ factor_name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
171
171
  };
172
172
  } & {
173
173
  header: {
@@ -175,7 +175,7 @@ export declare const guardianRoutes: OpenAPIHono<{
175
175
  };
176
176
  };
177
177
  output: {
178
- name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
178
+ name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
179
179
  enabled: boolean;
180
180
  trial_expired?: boolean | undefined;
181
181
  };
@@ -188,7 +188,7 @@ export declare const guardianRoutes: OpenAPIHono<{
188
188
  $put: {
189
189
  input: {
190
190
  param: {
191
- factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
191
+ factor_name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
192
192
  };
193
193
  } & {
194
194
  header: {
@@ -200,7 +200,7 @@ export declare const guardianRoutes: OpenAPIHono<{
200
200
  };
201
201
  };
202
202
  output: {
203
- name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
203
+ name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
204
204
  enabled: boolean;
205
205
  trial_expired?: boolean | undefined;
206
206
  };
package/dist/types/routes/management-api/helpers.d.ts CHANGED
@@ -23,7 +23,7 @@ export declare function requireTenantId(ctx: {
23
23
  * `totalsSchema.extend({ roles: z.array(roleSchema) })` pattern repeated
24
24
  * across the management-api modules.
25
25
  */
26
- export declare function withTotals<T extends z.ZodRawShape>(items: T): z.ZodObject<(("length" | "start" | "limit" | "total" | "next") & keyof T extends never ? {
26
+ export declare function withTotals<T extends z.ZodRawShape>(items: T): z.ZodObject<(("length" | "next" | "start" | "limit" | "total") & keyof T extends never ? {
27
27
  start: z.ZodNumber;
28
28
  limit: z.ZodNumber;
29
29
  length: z.ZodNumber;