better-auth 1.2.4-beta.1 → 1.2.4-beta.12

package/dist/plugins/oidc-provider/index.cjs

@@ -3,7 +3,7 @@
 const jose = require('jose');
 const zod = require('zod');
 const betterCall = require('better-call');
-const account = require('../../shared/better-auth.BzKRBwSF.cjs');
+const account = require('../../shared/better-auth.GVCiTzec.cjs');
 require('../../shared/better-auth.DiSjtgs9.cjs');
 const base64 = require('@better-auth/utils/base64');
 require('@better-auth/utils/hmac');
@@ -26,10 +26,10 @@ require('../../shared/better-auth.DdjqxOIu.cjs');
 require('../../shared/better-auth.C1hdVENX.cjs');
 require('../../shared/better-auth.ANpbi45u.cjs');
 require('@better-auth/utils/random');
-require('../../shared/better-auth.GgQnT00n.cjs');
+require('../../shared/better-auth.CHHC_PJT.cjs');
 require('../../shared/better-auth.Bg6iw3ig.cjs');
 require('../../shared/better-auth.BMYo0QR-.cjs');
-require('../../shared/better-auth.DhfiEsxl.cjs');
+require('../../shared/better-auth.C-R0J0n1.cjs');
 require('jose/errors');
 require('../../shared/better-auth.D3mtHEZg.cjs');
 require('@better-auth/utils/binary');
@@ -965,10 +965,33 @@ const oidcProvider = (options) => {
         {
           method: "POST",
           body: zod.z.object({
-            name: zod.z.string(),
-            icon: zod.z.string().optional(),
+            redirect_uris: zod.z.array(zod.z.string()),
+            token_endpoint_auth_method: zod.z.enum(["none", "client_secret_basic", "client_secret_post"]).default("client_secret_basic").optional(),
+            grant_types: zod.z.array(
+              zod.z.enum([
+                "authorization_code",
+                "implicit",
+                "password",
+                "client_credentials",
+                "refresh_token",
+                "urn:ietf:params:oauth:grant-type:jwt-bearer",
+                "urn:ietf:params:oauth:grant-type:saml2-bearer"
+              ])
+            ).default(["authorization_code"]).optional(),
+            response_types: zod.z.array(zod.z.enum(["code", "token"])).default(["code"]).optional(),
+            client_name: zod.z.string().optional(),
+            client_uri: zod.z.string().optional(),
+            logo_uri: zod.z.string().optional(),
+            scope: zod.z.string().optional(),
+            contacts: zod.z.array(zod.z.string()).optional(),
+            tos_uri: zod.z.string().optional(),
+            policy_uri: zod.z.string().optional(),
+            jwks_uri: zod.z.string().optional(),
+            jwks: zod.z.record(zod.z.any()).optional(),
             metadata: zod.z.record(zod.z.any()).optional(),
-            redirectURLs: zod.z.array(zod.z.string())
+            software_id: zod.z.string().optional(),
+            software_version: zod.z.string().optional(),
+            software_statement: zod.z.string().optional()
           })
         },
         async (ctx) => {
@@ -976,33 +999,82 @@ const oidcProvider = (options) => {
           const session = await account.getSessionFromCtx(ctx);
           if (!session && !options.allowDynamicClientRegistration) {
             throw new betterCall.APIError("UNAUTHORIZED", {
-              message: "Unauthorized"
+              error: "invalid_token",
+              error_description: "Authentication required for client registration"
             });
           }
+          if ((!body.grant_types || body.grant_types.includes("authorization_code") || body.grant_types.includes("implicit")) && (!body.redirect_uris || body.redirect_uris.length === 0)) {
+            throw new betterCall.APIError("BAD_REQUEST", {
+              error: "invalid_redirect_uri",
+              error_description: "Redirect URIs are required for authorization_code and implicit grant types"
+            });
+          }
+          if (body.grant_types && body.response_types) {
+            if (body.grant_types.includes("authorization_code") && !body.response_types.includes("code")) {
+              throw new betterCall.APIError("BAD_REQUEST", {
+                error: "invalid_client_metadata",
+                error_description: "When 'authorization_code' grant type is used, 'code' response type must be included"
+              });
+            }
+            if (body.grant_types.includes("implicit") && !body.response_types.includes("token")) {
+              throw new betterCall.APIError("BAD_REQUEST", {
+                error: "invalid_client_metadata",
+                error_description: "When 'implicit' grant type is used, 'token' response type must be included"
+              });
+            }
+          }
           const clientId = options.generateClientId?.() || random.generateRandomString(32, "a-z", "A-Z");
           const clientSecret = options.generateClientSecret?.() || random.generateRandomString(32, "a-z", "A-Z");
-          const client = await ctx.context.adapter.create({
+          await ctx.context.adapter.create({
             model: modelName.oauthClient,
             data: {
-              name: body.name,
-              icon: body.icon,
+              name: body.client_name,
+              icon: body.logo_uri,
               metadata: body.metadata ? JSON.stringify(body.metadata) : null,
               clientId,
               clientSecret,
-              redirectURLs: body.redirectURLs.join(","),
+              redirectURLs: body.redirect_uris.join(","),
               type: "web",
-              authenticationScheme: "client_secret",
+              authenticationScheme: body.token_endpoint_auth_method || "client_secret_basic",
               disabled: false,
               userId: session?.session.userId,
               createdAt: /* @__PURE__ */ new Date(),
               updatedAt: /* @__PURE__ */ new Date()
             }
           });
-          return ctx.json({
-            ...client,
-            redirectURLs: client.redirectURLs.split(","),
-            metadata: client.metadata ? JSON.parse(client.metadata) : null
-          });
+          return ctx.json(
+            {
+              client_id: clientId,
+              client_secret: clientSecret,
+              client_id_issued_at: Math.floor(Date.now() / 1e3),
+              client_secret_expires_at: 0,
+              // 0 means it doesn't expire
+              redirect_uris: body.redirect_uris,
+              token_endpoint_auth_method: body.token_endpoint_auth_method || "client_secret_basic",
+              grant_types: body.grant_types || ["authorization_code"],
+              response_types: body.response_types || ["code"],
+              client_name: body.client_name,
+              client_uri: body.client_uri,
+              logo_uri: body.logo_uri,
+              scope: body.scope,
+              contacts: body.contacts,
+              tos_uri: body.tos_uri,
+              policy_uri: body.policy_uri,
+              jwks_uri: body.jwks_uri,
+              jwks: body.jwks,
+              software_id: body.software_id,
+              software_version: body.software_version,
+              software_statement: body.software_statement,
+              metadata: body.metadata
+            },
+            {
+              status: 201,
+              headers: {
+                "Cache-Control": "no-store",
+                Pragma: "no-cache"
+              }
+            }
+          );
         }
       ),
       getOAuthClient: account.createAuthEndpoint(

package/dist/plugins/oidc-provider/index.d.cts

@@ -757,10 +757,23 @@ declare const oidcProvider: (options: OIDCOptions) => {
         registerOAuthApplication: {
             <C extends [{
                 body: {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 };
                 method?: "POST" | undefined;
                 query?: Record<string, any> | undefined;
@@ -777,25 +790,108 @@ declare const oidcProvider: (options: OIDCOptions) => {
                 returnHeaders: true;
             }] ? {
                 headers: Headers;
-                response: Client;
-            } : Client>;
+                response: {
+                    client_id: string;
+                    client_secret: string;
+                    client_id_issued_at: number;
+                    client_secret_expires_at: number;
+                    redirect_uris: string[];
+                    token_endpoint_auth_method: "none" | "client_secret_basic" | "client_secret_post";
+                    grant_types: string[];
+                    response_types: string[];
+                    client_name: string | undefined;
+                    client_uri: string | undefined;
+                    logo_uri: string | undefined;
+                    scope: string | undefined;
+                    contacts: string[] | undefined;
+                    tos_uri: string | undefined;
+                    policy_uri: string | undefined;
+                    jwks_uri: string | undefined;
+                    jwks: Record<string, any> | undefined;
+                    software_id: string | undefined;
+                    software_version: string | undefined;
+                    software_statement: string | undefined;
+                    metadata: Record<string, any> | undefined;
+                };
+            } : {
+                client_id: string;
+                client_secret: string;
+                client_id_issued_at: number;
+                client_secret_expires_at: number;
+                redirect_uris: string[];
+                token_endpoint_auth_method: "none" | "client_secret_basic" | "client_secret_post";
+                grant_types: string[];
+                response_types: string[];
+                client_name: string | undefined;
+                client_uri: string | undefined;
+                logo_uri: string | undefined;
+                scope: string | undefined;
+                contacts: string[] | undefined;
+                tos_uri: string | undefined;
+                policy_uri: string | undefined;
+                jwks_uri: string | undefined;
+                jwks: Record<string, any> | undefined;
+                software_id: string | undefined;
+                software_version: string | undefined;
+                software_statement: string | undefined;
+                metadata: Record<string, any> | undefined;
+            }>;
             options: {
                 method: "POST";
                 body: z.ZodObject<{
-                    name: z.ZodString;
-                    icon: z.ZodOptional<z.ZodString>;
+                    redirect_uris: z.ZodArray<z.ZodString, "many">;
+                    token_endpoint_auth_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<["none", "client_secret_basic", "client_secret_post"]>>>;
+                    grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "implicit", "password", "client_credentials", "refresh_token", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer"]>, "many">>>;
+                    response_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<["code", "token"]>, "many">>>;
+                    client_name: z.ZodOptional<z.ZodString>;
+                    client_uri: z.ZodOptional<z.ZodString>;
+                    logo_uri: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodString>;
+                    contacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                    tos_uri: z.ZodOptional<z.ZodString>;
+                    policy_uri: z.ZodOptional<z.ZodString>;
+                    jwks_uri: z.ZodOptional<z.ZodString>;
+                    jwks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
                     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-                    redirectURLs: z.ZodArray<z.ZodString, "many">;
+                    software_id: z.ZodOptional<z.ZodString>;
+                    software_version: z.ZodOptional<z.ZodString>;
+                    software_statement: z.ZodOptional<z.ZodString>;
                 }, "strip", z.ZodTypeAny, {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 }, {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 }>;
             } & {
                 use: any[];

package/dist/plugins/oidc-provider/index.d.mts

@@ -757,10 +757,23 @@ declare const oidcProvider: (options: OIDCOptions) => {
         registerOAuthApplication: {
             <C extends [{
                 body: {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 };
                 method?: "POST" | undefined;
                 query?: Record<string, any> | undefined;
@@ -777,25 +790,108 @@ declare const oidcProvider: (options: OIDCOptions) => {
                 returnHeaders: true;
             }] ? {
                 headers: Headers;
-                response: Client;
-            } : Client>;
+                response: {
+                    client_id: string;
+                    client_secret: string;
+                    client_id_issued_at: number;
+                    client_secret_expires_at: number;
+                    redirect_uris: string[];
+                    token_endpoint_auth_method: "none" | "client_secret_basic" | "client_secret_post";
+                    grant_types: string[];
+                    response_types: string[];
+                    client_name: string | undefined;
+                    client_uri: string | undefined;
+                    logo_uri: string | undefined;
+                    scope: string | undefined;
+                    contacts: string[] | undefined;
+                    tos_uri: string | undefined;
+                    policy_uri: string | undefined;
+                    jwks_uri: string | undefined;
+                    jwks: Record<string, any> | undefined;
+                    software_id: string | undefined;
+                    software_version: string | undefined;
+                    software_statement: string | undefined;
+                    metadata: Record<string, any> | undefined;
+                };
+            } : {
+                client_id: string;
+                client_secret: string;
+                client_id_issued_at: number;
+                client_secret_expires_at: number;
+                redirect_uris: string[];
+                token_endpoint_auth_method: "none" | "client_secret_basic" | "client_secret_post";
+                grant_types: string[];
+                response_types: string[];
+                client_name: string | undefined;
+                client_uri: string | undefined;
+                logo_uri: string | undefined;
+                scope: string | undefined;
+                contacts: string[] | undefined;
+                tos_uri: string | undefined;
+                policy_uri: string | undefined;
+                jwks_uri: string | undefined;
+                jwks: Record<string, any> | undefined;
+                software_id: string | undefined;
+                software_version: string | undefined;
+                software_statement: string | undefined;
+                metadata: Record<string, any> | undefined;
+            }>;
             options: {
                 method: "POST";
                 body: z.ZodObject<{
-                    name: z.ZodString;
-                    icon: z.ZodOptional<z.ZodString>;
+                    redirect_uris: z.ZodArray<z.ZodString, "many">;
+                    token_endpoint_auth_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<["none", "client_secret_basic", "client_secret_post"]>>>;
+                    grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "implicit", "password", "client_credentials", "refresh_token", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer"]>, "many">>>;
+                    response_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<["code", "token"]>, "many">>>;
+                    client_name: z.ZodOptional<z.ZodString>;
+                    client_uri: z.ZodOptional<z.ZodString>;
+                    logo_uri: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodString>;
+                    contacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                    tos_uri: z.ZodOptional<z.ZodString>;
+                    policy_uri: z.ZodOptional<z.ZodString>;
+                    jwks_uri: z.ZodOptional<z.ZodString>;
+                    jwks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
                     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-                    redirectURLs: z.ZodArray<z.ZodString, "many">;
+                    software_id: z.ZodOptional<z.ZodString>;
+                    software_version: z.ZodOptional<z.ZodString>;
+                    software_statement: z.ZodOptional<z.ZodString>;
                 }, "strip", z.ZodTypeAny, {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 }, {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 }>;
             } & {
                 use: any[];

package/dist/plugins/oidc-provider/index.d.ts

@@ -757,10 +757,23 @@ declare const oidcProvider: (options: OIDCOptions) => {
         registerOAuthApplication: {
             <C extends [{
                 body: {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 };
                 method?: "POST" | undefined;
                 query?: Record<string, any> | undefined;
@@ -777,25 +790,108 @@ declare const oidcProvider: (options: OIDCOptions) => {
                 returnHeaders: true;
             }] ? {
                 headers: Headers;
-                response: Client;
-            } : Client>;
+                response: {
+                    client_id: string;
+                    client_secret: string;
+                    client_id_issued_at: number;
+                    client_secret_expires_at: number;
+                    redirect_uris: string[];
+                    token_endpoint_auth_method: "none" | "client_secret_basic" | "client_secret_post";
+                    grant_types: string[];
+                    response_types: string[];
+                    client_name: string | undefined;
+                    client_uri: string | undefined;
+                    logo_uri: string | undefined;
+                    scope: string | undefined;
+                    contacts: string[] | undefined;
+                    tos_uri: string | undefined;
+                    policy_uri: string | undefined;
+                    jwks_uri: string | undefined;
+                    jwks: Record<string, any> | undefined;
+                    software_id: string | undefined;
+                    software_version: string | undefined;
+                    software_statement: string | undefined;
+                    metadata: Record<string, any> | undefined;
+                };
+            } : {
+                client_id: string;
+                client_secret: string;
+                client_id_issued_at: number;
+                client_secret_expires_at: number;
+                redirect_uris: string[];
+                token_endpoint_auth_method: "none" | "client_secret_basic" | "client_secret_post";
+                grant_types: string[];
+                response_types: string[];
+                client_name: string | undefined;
+                client_uri: string | undefined;
+                logo_uri: string | undefined;
+                scope: string | undefined;
+                contacts: string[] | undefined;
+                tos_uri: string | undefined;
+                policy_uri: string | undefined;
+                jwks_uri: string | undefined;
+                jwks: Record<string, any> | undefined;
+                software_id: string | undefined;
+                software_version: string | undefined;
+                software_statement: string | undefined;
+                metadata: Record<string, any> | undefined;
+            }>;
             options: {
                 method: "POST";
                 body: z.ZodObject<{
-                    name: z.ZodString;
-                    icon: z.ZodOptional<z.ZodString>;
+                    redirect_uris: z.ZodArray<z.ZodString, "many">;
+                    token_endpoint_auth_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<["none", "client_secret_basic", "client_secret_post"]>>>;
+                    grant_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "implicit", "password", "client_credentials", "refresh_token", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer"]>, "many">>>;
+                    response_types: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodEnum<["code", "token"]>, "many">>>;
+                    client_name: z.ZodOptional<z.ZodString>;
+                    client_uri: z.ZodOptional<z.ZodString>;
+                    logo_uri: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodString>;
+                    contacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                    tos_uri: z.ZodOptional<z.ZodString>;
+                    policy_uri: z.ZodOptional<z.ZodString>;
+                    jwks_uri: z.ZodOptional<z.ZodString>;
+                    jwks: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
                     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
-                    redirectURLs: z.ZodArray<z.ZodString, "many">;
+                    software_id: z.ZodOptional<z.ZodString>;
+                    software_version: z.ZodOptional<z.ZodString>;
+                    software_statement: z.ZodOptional<z.ZodString>;
                 }, "strip", z.ZodTypeAny, {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 }, {
-                    name: string;
-                    redirectURLs: string[];
+                    redirect_uris: string[];
                     metadata?: Record<string, any> | undefined;
-                    icon?: string | undefined;
+                    scope?: string | undefined;
+                    jwks?: Record<string, any> | undefined;
+                    jwks_uri?: string | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_post" | undefined;
+                    grant_types?: ("password" | "refresh_token" | "authorization_code" | "implicit" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[] | undefined;
+                    response_types?: ("code" | "token")[] | undefined;
+                    client_name?: string | undefined;
+                    client_uri?: string | undefined;
+                    logo_uri?: string | undefined;
+                    contacts?: string[] | undefined;
+                    tos_uri?: string | undefined;
+                    policy_uri?: string | undefined;
+                    software_id?: string | undefined;
+                    software_version?: string | undefined;
+                    software_statement?: string | undefined;
                 }>;
             } & {
                 use: any[];