authhero 9.9.1 → 9.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. package/dist/assets/u/widget/index.esm.js +1 -1
  2. package/dist/authhero.cjs +145 -145
  3. package/dist/authhero.d.ts +585 -190
  4. package/dist/authhero.mjs +15529 -14313
  5. package/dist/tsconfig.types.tsbuildinfo +1 -1
  6. package/dist/types/authentication-flows/authorization-code.d.ts +2 -1
  7. package/dist/types/authentication-flows/client-credentials.d.ts +2 -1
  8. package/dist/types/authentication-flows/passwordless.d.ts +6 -5
  9. package/dist/types/authentication-flows/refresh-token.d.ts +2 -1
  10. package/dist/types/authentication-flows/token-exchange.d.ts +2 -1
  11. package/dist/types/helpers/client-assertion-replay.d.ts +21 -0
  12. package/dist/types/helpers/client-assertion.d.ts +24 -2
  13. package/dist/types/helpers/dcr/metadata-mapping.d.ts +1 -1
  14. package/dist/types/helpers/default-destinations.d.ts +7 -1
  15. package/dist/types/helpers/outbox-destinations/index.d.ts +1 -0
  16. package/dist/types/helpers/outbox-destinations/pipeline.d.ts +63 -0
  17. package/dist/types/helpers/outbox-relay.d.ts +3 -0
  18. package/dist/types/helpers/reserved-claims.d.ts +64 -0
  19. package/dist/types/helpers/run-outbox-relay.d.ts +8 -0
  20. package/dist/types/helpers/run-retention.d.ts +5 -0
  21. package/dist/types/helpers/users-import/map.d.ts +128 -0
  22. package/dist/types/helpers/users-import/process.d.ts +95 -0
  23. package/dist/types/helpers/users-import-cleanup.d.ts +26 -0
  24. package/dist/types/index.d.ts +321 -185
  25. package/dist/types/routes/auth-api/index.d.ts +44 -44
  26. package/dist/types/routes/auth-api/passwordless.d.ts +14 -14
  27. package/dist/types/routes/auth-api/register/index.d.ts +2 -2
  28. package/dist/types/routes/auth-api/token.d.ts +24 -24
  29. package/dist/types/routes/management-api/action-triggers.d.ts +0 -2
  30. package/dist/types/routes/management-api/actions.d.ts +0 -7
  31. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  32. package/dist/types/routes/management-api/branding.d.ts +1 -1
  33. package/dist/types/routes/management-api/client-grants.d.ts +9 -9
  34. package/dist/types/routes/management-api/clients.d.ts +8 -8
  35. package/dist/types/routes/management-api/connections.d.ts +1 -1
  36. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  37. package/dist/types/routes/management-api/failed-events.d.ts +22 -2
  38. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  39. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  40. package/dist/types/routes/management-api/index.d.ts +216 -86
  41. package/dist/types/routes/management-api/jobs.d.ts +133 -0
  42. package/dist/types/routes/management-api/keys.d.ts +16 -16
  43. package/dist/types/routes/management-api/logs.d.ts +4 -4
  44. package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
  45. package/dist/types/routes/management-api/organizations.d.ts +2 -2
  46. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  47. package/dist/types/routes/management-api/roles.d.ts +1 -1
  48. package/dist/types/routes/management-api/tenant-export-import.d.ts +5 -5
  49. package/dist/types/routes/management-api/tenant-operations.d.ts +33 -9
  50. package/dist/types/routes/management-api/tenants.d.ts +11 -11
  51. package/dist/types/routes/management-api/users.d.ts +24 -24
  52. package/dist/types/routes/universal-login/common.d.ts +2 -2
  53. package/dist/types/routes/universal-login/flow-api.d.ts +12 -12
  54. package/dist/types/routes/universal-login/identifier.d.ts +2 -2
  55. package/dist/types/routes/universal-login/index.d.ts +2 -2
  56. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  57. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  58. package/dist/types/state-machines/login-session.d.ts +1 -1
  59. package/dist/types/types/AuthHeroConfig.d.ts +40 -0
  60. package/dist/types/types/Bindings.d.ts +14 -0
  61. package/dist/types/types/OutboxMetrics.d.ts +47 -0
  62. package/dist/types/types/auth0/UserImport.d.ts +317 -0
  63. package/dist/types/types/index.d.ts +1 -0
  64. package/package.json +6 -6
@@ -0,0 +1,317 @@
1
+ import { z } from "@hono/zod-openapi";
2
+ export declare function isSupportedBcryptHash(value: string): boolean;
3
+ /**
4
+ * Every algorithm Auth0 accepts in `custom_password_hash.algorithm`.
5
+ * AuthHero stores only bcrypt today — the rest are parsed so they can be
6
+ * reported as a precise per-row error instead of a whole-file rejection.
7
+ */
8
+ export declare const auth0PasswordHashAlgorithmSchema: z.ZodEnum<{
9
+ argon2: "argon2";
10
+ bcrypt: "bcrypt";
11
+ hmac: "hmac";
12
+ ldap: "ldap";
13
+ md4: "md4";
14
+ md5: "md5";
15
+ pbkdf2: "pbkdf2";
16
+ scrypt: "scrypt";
17
+ sha1: "sha1";
18
+ sha256: "sha256";
19
+ sha512: "sha512";
20
+ }>;
21
+ export type Auth0PasswordHashAlgorithm = z.infer<typeof auth0PasswordHashAlgorithmSchema>;
22
+ export declare const customPasswordHashSchema: z.ZodObject<{
23
+ algorithm: z.ZodEnum<{
24
+ argon2: "argon2";
25
+ bcrypt: "bcrypt";
26
+ hmac: "hmac";
27
+ ldap: "ldap";
28
+ md4: "md4";
29
+ md5: "md5";
30
+ pbkdf2: "pbkdf2";
31
+ scrypt: "scrypt";
32
+ sha1: "sha1";
33
+ sha256: "sha256";
34
+ sha512: "sha512";
35
+ }>;
36
+ hash: z.ZodObject<{
37
+ value: z.ZodString;
38
+ encoding: z.ZodOptional<z.ZodEnum<{
39
+ base64: "base64";
40
+ hex: "hex";
41
+ utf8: "utf8";
42
+ }>>;
43
+ digest: z.ZodOptional<z.ZodString>;
44
+ key: z.ZodOptional<z.ZodObject<{
45
+ value: z.ZodString;
46
+ encoding: z.ZodOptional<z.ZodEnum<{
47
+ base64: "base64";
48
+ hex: "hex";
49
+ utf8: "utf8";
50
+ }>>;
51
+ }, z.core.$strip>>;
52
+ }, z.core.$strip>;
53
+ salt: z.ZodOptional<z.ZodObject<{
54
+ value: z.ZodString;
55
+ encoding: z.ZodOptional<z.ZodEnum<{
56
+ base64: "base64";
57
+ hex: "hex";
58
+ utf8: "utf8";
59
+ }>>;
60
+ position: z.ZodOptional<z.ZodEnum<{
61
+ prefix: "prefix";
62
+ suffix: "suffix";
63
+ }>>;
64
+ }, z.core.$strip>>;
65
+ password: z.ZodOptional<z.ZodObject<{
66
+ encoding: z.ZodOptional<z.ZodEnum<{
67
+ utf8: "utf8";
68
+ ascii: "ascii";
69
+ utf16le: "utf16le";
70
+ ucs2: "ucs2";
71
+ latin1: "latin1";
72
+ binary: "binary";
73
+ }>>;
74
+ }, z.core.$strip>>;
75
+ keylen: z.ZodOptional<z.ZodNumber>;
76
+ cost: z.ZodOptional<z.ZodNumber>;
77
+ blockSize: z.ZodOptional<z.ZodNumber>;
78
+ parallelization: z.ZodOptional<z.ZodNumber>;
79
+ }, z.core.$strip>;
80
+ export type CustomPasswordHash = z.infer<typeof customPasswordHashSchema>;
81
+ /**
82
+ * One entry in the import file. `email` is required by Auth0 for database
83
+ * connections; `.passthrough()` keeps unrecognised keys so they can be
84
+ * echoed back verbatim by `GET /jobs/{id}/errors`.
85
+ */
86
+ export declare const userImportEntrySchema: z.ZodObject<{
87
+ user_id: z.ZodOptional<z.ZodString>;
88
+ email: z.ZodString;
89
+ email_verified: z.ZodOptional<z.ZodBoolean>;
90
+ username: z.ZodOptional<z.ZodString>;
91
+ blocked: z.ZodOptional<z.ZodBoolean>;
92
+ phone_number: z.ZodOptional<z.ZodString>;
93
+ phone_verified: z.ZodOptional<z.ZodBoolean>;
94
+ name: z.ZodOptional<z.ZodString>;
95
+ given_name: z.ZodOptional<z.ZodString>;
96
+ family_name: z.ZodOptional<z.ZodString>;
97
+ nickname: z.ZodOptional<z.ZodString>;
98
+ picture: z.ZodOptional<z.ZodString>;
99
+ app_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
100
+ user_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
101
+ mfa_factors: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
102
+ totp: z.ZodObject<{
103
+ secret: z.ZodString;
104
+ }, z.core.$strip>;
105
+ }, z.core.$strip>, z.ZodObject<{
106
+ phone: z.ZodObject<{
107
+ value: z.ZodString;
108
+ }, z.core.$strip>;
109
+ }, z.core.$strip>, z.ZodObject<{
110
+ email: z.ZodObject<{
111
+ value: z.ZodString;
112
+ }, z.core.$strip>;
113
+ }, z.core.$strip>]>>>;
114
+ password_hash: z.ZodOptional<z.ZodString>;
115
+ custom_password_hash: z.ZodOptional<z.ZodObject<{
116
+ algorithm: z.ZodEnum<{
117
+ argon2: "argon2";
118
+ bcrypt: "bcrypt";
119
+ hmac: "hmac";
120
+ ldap: "ldap";
121
+ md4: "md4";
122
+ md5: "md5";
123
+ pbkdf2: "pbkdf2";
124
+ scrypt: "scrypt";
125
+ sha1: "sha1";
126
+ sha256: "sha256";
127
+ sha512: "sha512";
128
+ }>;
129
+ hash: z.ZodObject<{
130
+ value: z.ZodString;
131
+ encoding: z.ZodOptional<z.ZodEnum<{
132
+ base64: "base64";
133
+ hex: "hex";
134
+ utf8: "utf8";
135
+ }>>;
136
+ digest: z.ZodOptional<z.ZodString>;
137
+ key: z.ZodOptional<z.ZodObject<{
138
+ value: z.ZodString;
139
+ encoding: z.ZodOptional<z.ZodEnum<{
140
+ base64: "base64";
141
+ hex: "hex";
142
+ utf8: "utf8";
143
+ }>>;
144
+ }, z.core.$strip>>;
145
+ }, z.core.$strip>;
146
+ salt: z.ZodOptional<z.ZodObject<{
147
+ value: z.ZodString;
148
+ encoding: z.ZodOptional<z.ZodEnum<{
149
+ base64: "base64";
150
+ hex: "hex";
151
+ utf8: "utf8";
152
+ }>>;
153
+ position: z.ZodOptional<z.ZodEnum<{
154
+ prefix: "prefix";
155
+ suffix: "suffix";
156
+ }>>;
157
+ }, z.core.$strip>>;
158
+ password: z.ZodOptional<z.ZodObject<{
159
+ encoding: z.ZodOptional<z.ZodEnum<{
160
+ utf8: "utf8";
161
+ ascii: "ascii";
162
+ utf16le: "utf16le";
163
+ ucs2: "ucs2";
164
+ latin1: "latin1";
165
+ binary: "binary";
166
+ }>>;
167
+ }, z.core.$strip>>;
168
+ keylen: z.ZodOptional<z.ZodNumber>;
169
+ cost: z.ZodOptional<z.ZodNumber>;
170
+ blockSize: z.ZodOptional<z.ZodNumber>;
171
+ parallelization: z.ZodOptional<z.ZodNumber>;
172
+ }, z.core.$strip>>;
173
+ }, z.core.$loose>;
174
+ export type UserImportEntry = z.infer<typeof userImportEntrySchema>;
175
+ /** The uploaded file: a JSON array of entries. */
176
+ export declare const userImportFileSchema: z.ZodArray<z.ZodObject<{
177
+ user_id: z.ZodOptional<z.ZodString>;
178
+ email: z.ZodString;
179
+ email_verified: z.ZodOptional<z.ZodBoolean>;
180
+ username: z.ZodOptional<z.ZodString>;
181
+ blocked: z.ZodOptional<z.ZodBoolean>;
182
+ phone_number: z.ZodOptional<z.ZodString>;
183
+ phone_verified: z.ZodOptional<z.ZodBoolean>;
184
+ name: z.ZodOptional<z.ZodString>;
185
+ given_name: z.ZodOptional<z.ZodString>;
186
+ family_name: z.ZodOptional<z.ZodString>;
187
+ nickname: z.ZodOptional<z.ZodString>;
188
+ picture: z.ZodOptional<z.ZodString>;
189
+ app_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
190
+ user_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
191
+ mfa_factors: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
192
+ totp: z.ZodObject<{
193
+ secret: z.ZodString;
194
+ }, z.core.$strip>;
195
+ }, z.core.$strip>, z.ZodObject<{
196
+ phone: z.ZodObject<{
197
+ value: z.ZodString;
198
+ }, z.core.$strip>;
199
+ }, z.core.$strip>, z.ZodObject<{
200
+ email: z.ZodObject<{
201
+ value: z.ZodString;
202
+ }, z.core.$strip>;
203
+ }, z.core.$strip>]>>>;
204
+ password_hash: z.ZodOptional<z.ZodString>;
205
+ custom_password_hash: z.ZodOptional<z.ZodObject<{
206
+ algorithm: z.ZodEnum<{
207
+ argon2: "argon2";
208
+ bcrypt: "bcrypt";
209
+ hmac: "hmac";
210
+ ldap: "ldap";
211
+ md4: "md4";
212
+ md5: "md5";
213
+ pbkdf2: "pbkdf2";
214
+ scrypt: "scrypt";
215
+ sha1: "sha1";
216
+ sha256: "sha256";
217
+ sha512: "sha512";
218
+ }>;
219
+ hash: z.ZodObject<{
220
+ value: z.ZodString;
221
+ encoding: z.ZodOptional<z.ZodEnum<{
222
+ base64: "base64";
223
+ hex: "hex";
224
+ utf8: "utf8";
225
+ }>>;
226
+ digest: z.ZodOptional<z.ZodString>;
227
+ key: z.ZodOptional<z.ZodObject<{
228
+ value: z.ZodString;
229
+ encoding: z.ZodOptional<z.ZodEnum<{
230
+ base64: "base64";
231
+ hex: "hex";
232
+ utf8: "utf8";
233
+ }>>;
234
+ }, z.core.$strip>>;
235
+ }, z.core.$strip>;
236
+ salt: z.ZodOptional<z.ZodObject<{
237
+ value: z.ZodString;
238
+ encoding: z.ZodOptional<z.ZodEnum<{
239
+ base64: "base64";
240
+ hex: "hex";
241
+ utf8: "utf8";
242
+ }>>;
243
+ position: z.ZodOptional<z.ZodEnum<{
244
+ prefix: "prefix";
245
+ suffix: "suffix";
246
+ }>>;
247
+ }, z.core.$strip>>;
248
+ password: z.ZodOptional<z.ZodObject<{
249
+ encoding: z.ZodOptional<z.ZodEnum<{
250
+ utf8: "utf8";
251
+ ascii: "ascii";
252
+ utf16le: "utf16le";
253
+ ucs2: "ucs2";
254
+ latin1: "latin1";
255
+ binary: "binary";
256
+ }>>;
257
+ }, z.core.$strip>>;
258
+ keylen: z.ZodOptional<z.ZodNumber>;
259
+ cost: z.ZodOptional<z.ZodNumber>;
260
+ blockSize: z.ZodOptional<z.ZodNumber>;
261
+ parallelization: z.ZodOptional<z.ZodNumber>;
262
+ }, z.core.$strip>>;
263
+ }, z.core.$loose>>;
264
+ /**
265
+ * Auth0 job statuses. AuthHero's internal operation statuses are mapped
266
+ * onto these at the API boundary — internal values never leak out.
267
+ */
268
+ export declare const jobStatusSchema: z.ZodEnum<{
269
+ pending: "pending";
270
+ failed: "failed";
271
+ completed: "completed";
272
+ }>;
273
+ export type JobStatus = z.infer<typeof jobStatusSchema>;
274
+ export declare const jobSummarySchema: z.ZodObject<{
275
+ failed: z.ZodDefault<z.ZodNumber>;
276
+ updated: z.ZodDefault<z.ZodNumber>;
277
+ inserted: z.ZodDefault<z.ZodNumber>;
278
+ total: z.ZodDefault<z.ZodNumber>;
279
+ }, z.core.$strip>;
280
+ export declare const jobSchema: z.ZodObject<{
281
+ id: z.ZodString;
282
+ type: z.ZodString;
283
+ status: z.ZodEnum<{
284
+ pending: "pending";
285
+ failed: "failed";
286
+ completed: "completed";
287
+ }>;
288
+ created_at: z.ZodOptional<z.ZodString>;
289
+ connection_id: z.ZodOptional<z.ZodString>;
290
+ external_id: z.ZodOptional<z.ZodString>;
291
+ percentage_done: z.ZodOptional<z.ZodNumber>;
292
+ time_left_seconds: z.ZodOptional<z.ZodNumber>;
293
+ status_details: z.ZodOptional<z.ZodString>;
294
+ summary: z.ZodOptional<z.ZodObject<{
295
+ failed: z.ZodDefault<z.ZodNumber>;
296
+ updated: z.ZodDefault<z.ZodNumber>;
297
+ inserted: z.ZodDefault<z.ZodNumber>;
298
+ total: z.ZodDefault<z.ZodNumber>;
299
+ }, z.core.$strip>>;
300
+ }, z.core.$strip>;
301
+ export type Job = z.infer<typeof jobSchema>;
302
+ export declare const jobErrorSchema: z.ZodObject<{
303
+ user: z.ZodRecord<z.ZodString, z.ZodUnknown>;
304
+ errors: z.ZodArray<z.ZodObject<{
305
+ code: z.ZodString;
306
+ message: z.ZodString;
307
+ path: z.ZodOptional<z.ZodString>;
308
+ }, z.core.$strip>>;
309
+ }, z.core.$strip>;
310
+ export declare const jobErrorsSchema: z.ZodArray<z.ZodObject<{
311
+ user: z.ZodRecord<z.ZodString, z.ZodUnknown>;
312
+ errors: z.ZodArray<z.ZodObject<{
313
+ code: z.ZodString;
314
+ message: z.ZodString;
315
+ path: z.ZodOptional<z.ZodString>;
316
+ }, z.core.$strip>>;
317
+ }, z.core.$strip>>;
@@ -2,5 +2,6 @@ export * from "./Variables";
2
2
  export * from "./Bindings";
3
3
  export * from "./auth0";
4
4
  export * from "./AuthHeroConfig";
5
+ export * from "./OutboxMetrics";
5
6
  export * from "./GrantFlowResult";
6
7
  export * from "./Hooks";
package/package.json CHANGED
@@ -11,7 +11,7 @@
11
11
  "type": "git",
12
12
  "url": "https://github.com/markusahlstrand/authhero"
13
13
  },
14
- "version": "9.9.1",
14
+ "version": "9.11.0",
15
15
  "files": [
16
16
  "dist"
17
17
  ],
@@ -63,8 +63,8 @@
63
63
  "vite": "^8.0.14",
64
64
  "vite-plugin-dts": "^4.5.4",
65
65
  "vitest": "^4.1.7",
66
- "@authhero/kysely-adapter": "12.6.1",
67
- "@authhero/widget": "0.38.6"
66
+ "@authhero/kysely-adapter": "12.7.0",
67
+ "@authhero/widget": "0.38.8"
68
68
  },
69
69
  "dependencies": {
70
70
  "@peculiar/x509": "^1.14.0",
@@ -80,9 +80,9 @@
80
80
  "qrcode": "^1.5.4",
81
81
  "sanitize-html": "^2.17.4",
82
82
  "xstate": "^5.31.1",
83
- "@authhero/adapter-interfaces": "4.11.0",
84
- "@authhero/proxy": "0.10.10",
85
- "@authhero/saml": "0.5.9"
83
+ "@authhero/adapter-interfaces": "4.13.0",
84
+ "@authhero/proxy": "0.10.12",
85
+ "@authhero/saml": "0.5.11"
86
86
  },
87
87
  "peerDependencies": {
88
88
  "@authhero/widget": "^0.1.0",