binoauth 0.0.14 → 0.0.15

package/dist/generated/tenant/apis/ExternalAuthApi.d.ts

@@ -0,0 +1,114 @@
+/**
+ * BinoAuth Tenant API
+ *  A comprehensive multi-tenant authentication and authorization API supporting OAuth2, OpenID Connect, API keys, and multiple authentication methods.  ## Features  - **Multi-Tenant Architecture**: Isolated tenant-specific authentication - **OAuth2 & OpenID Connect**: Full OAuth2/OIDC implementation with PKCE support - **API Keys**: Long-lived keys for programmatic access - **Multiple Auth Methods**: Password, magic links, phone OTP, social login, MFA - **Session Management**: Secure session handling with Redis backing - **Comprehensive Security**: Rate limiting, audit logging, secure token handling  ## Authentication Methods  ### 1. Session-Based (Web Applications) - HTTP-only secure cookies - Automatic session management - CSRF protection  ### 2. API Keys (Programmatic Access) - Long-lived keys with scoped permissions - SHA-256 hashed storage - Usage tracking and analytics - **Header**: `X-API-Key: ak_live_...`  ### 3. OAuth2 Bearer Tokens - Short-lived JWT tokens - Full OAuth2/OIDC support - Refresh token capability - **Header**: `Authorization: Bearer ...`  ## Getting Started  ### For Web Applications 1. Use `/auth/login` for password authentication 2. Session cookies are automatically managed 3. Access protected endpoints directly  ### For Mobile Applications   1. Use OAuth2 authorization code flow with PKCE 2. Handle deep links for OAuth callbacks 3. Store and use refresh tokens for long-lived sessions  ### For Backend Services 1. Create API keys via `/api-keys` endpoint 2. Use API keys for direct authentication 3. Generate short-lived tokens when needed  ## Error Handling  All endpoints return structured error responses:  ```json {   \"detail\": \"Error description\",   \"error\": \"error_code\",    \"error_description\": \"Detailed error message\" } ```  ## Rate Limiting  API endpoints are rate limited to prevent abuse: - Authentication endpoints: 10 requests/minute - API key operations: 100 requests/hour   - General endpoints: 1000 requests/hour  ## Support  - Documentation: [API Documentation](https://docs.binoauth.com) - Support: support@binoauth.com - Status: [Status Page](https://status.binoauth.com)
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@binoauth.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+import type { LoginResponse, ProviderResponse, ProviderType } from '../models/index';
+export interface GetActiveProvidersApiV1AuthExternalActiveProvidersGetRequest {
+    returnTo: string;
+    redirectUri?: string;
+}
+export interface SocialCallbackApiV1AuthExternalCallbackProviderGetRequest {
+    provider: ProviderType;
+    code: string;
+    state: string;
+    link?: boolean;
+    error?: string | null;
+}
+/**
+ * ExternalAuthApi - interface
+ *
+ * @export
+ * @interface ExternalAuthApiInterface
+ */
+export interface ExternalAuthApiInterface {
+    /**
+     * Get list of configured and active social login providers.          This endpoint returns all social login providers that are currently     enabled and configured for the tenant, along with their authorization URLs.          **Use Case:**     Use this endpoint to dynamically display available social login options     in your application\'s login interface.          **Parameters:**     - `redirect_uri`: The path to redirect to after authentication (relative to tenant domain)     - `return_to`: The final destination URL after successful authentication          **Response:**     Returns an array of provider objects, each containing:     - Provider name and display information     - Authorization URL for initiating OAuth flow     - Supported scopes and capabilities          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/active-providers?redirect_uri=auth/callback&return_to=/dashboard\"     ```
+     * @summary Get Active Social Login Providers
+     * @param {string} returnTo
+     * @param {string} [redirectUri]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof ExternalAuthApiInterface
+     */
+    getActiveProvidersApiV1AuthExternalActiveProvidersGetRaw(requestParameters: GetActiveProvidersApiV1AuthExternalActiveProvidersGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ProviderResponse>>>;
+    /**
+     * Get list of configured and active social login providers.          This endpoint returns all social login providers that are currently     enabled and configured for the tenant, along with their authorization URLs.          **Use Case:**     Use this endpoint to dynamically display available social login options     in your application\'s login interface.          **Parameters:**     - `redirect_uri`: The path to redirect to after authentication (relative to tenant domain)     - `return_to`: The final destination URL after successful authentication          **Response:**     Returns an array of provider objects, each containing:     - Provider name and display information     - Authorization URL for initiating OAuth flow     - Supported scopes and capabilities          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/active-providers?redirect_uri=auth/callback&return_to=/dashboard\"     ```
+     * Get Active Social Login Providers
+     */
+    getActiveProvidersApiV1AuthExternalActiveProvidersGet(requestParameters: GetActiveProvidersApiV1AuthExternalActiveProvidersGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ProviderResponse>>;
+    /**
+     * Get complete list of all supported social login providers.          This endpoint returns all social login providers supported by the system,     regardless of whether they are configured or enabled for the current tenant.          **Use Case:**     Use this endpoint to:     - Display all available provider options in admin configuration     - Show providers that can be enabled for the tenant     - Get provider metadata and configuration requirements          **Response:**     Returns an array of all supported providers with:     - Provider identifiers and names     - Configuration requirements     - Capability information     - Setup instructions          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/providers\"     ```          **Difference from /active-providers:**     - `/providers`: All supported providers (for configuration)     - `/active-providers`: Only enabled providers (for login UI)
+     * @summary Get All Available Providers
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof ExternalAuthApiInterface
+     */
+    getProvidersApiV1AuthExternalProvidersGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Get complete list of all supported social login providers.          This endpoint returns all social login providers supported by the system,     regardless of whether they are configured or enabled for the current tenant.          **Use Case:**     Use this endpoint to:     - Display all available provider options in admin configuration     - Show providers that can be enabled for the tenant     - Get provider metadata and configuration requirements          **Response:**     Returns an array of all supported providers with:     - Provider identifiers and names     - Configuration requirements     - Capability information     - Setup instructions          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/providers\"     ```          **Difference from /active-providers:**     - `/providers`: All supported providers (for configuration)     - `/active-providers`: Only enabled providers (for login UI)
+     * Get All Available Providers
+     */
+    getProvidersApiV1AuthExternalProvidersGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Handle OAuth callback from external social login providers.          This endpoint processes the OAuth callback after a user has authenticated     with an external provider (Google, Facebook, GitHub, etc.).          **Supported Providers:**     - Google     - Facebook       - GitHub     - Microsoft     - Apple     - LinkedIn          **Flow:**     1. User clicks social login button     2. Redirected to provider\'s OAuth page     3. User grants permissions     4. Provider redirects back to this callback     5. User is authenticated or account is linked          **Parameters:**     - `provider`: The social login provider name     - `code`: Authorization code from the provider     - `state`: Security state parameter to prevent CSRF     - `link`: Optional flag to link account instead of login     - `error`: Error code if authentication failed          **Account Linking:**     If `link=true`, this will link the social account to an existing user     instead of logging them in directly.
+     * @summary Social Login Callback
+     * @param {ProviderType} provider
+     * @param {string} code
+     * @param {string} state
+     * @param {boolean} [link]
+     * @param {string} [error]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof ExternalAuthApiInterface
+     */
+    socialCallbackApiV1AuthExternalCallbackProviderGetRaw(requestParameters: SocialCallbackApiV1AuthExternalCallbackProviderGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginResponse>>;
+    /**
+     * Handle OAuth callback from external social login providers.          This endpoint processes the OAuth callback after a user has authenticated     with an external provider (Google, Facebook, GitHub, etc.).          **Supported Providers:**     - Google     - Facebook       - GitHub     - Microsoft     - Apple     - LinkedIn          **Flow:**     1. User clicks social login button     2. Redirected to provider\'s OAuth page     3. User grants permissions     4. Provider redirects back to this callback     5. User is authenticated or account is linked          **Parameters:**     - `provider`: The social login provider name     - `code`: Authorization code from the provider     - `state`: Security state parameter to prevent CSRF     - `link`: Optional flag to link account instead of login     - `error`: Error code if authentication failed          **Account Linking:**     If `link=true`, this will link the social account to an existing user     instead of logging them in directly.
+     * Social Login Callback
+     */
+    socialCallbackApiV1AuthExternalCallbackProviderGet(requestParameters: SocialCallbackApiV1AuthExternalCallbackProviderGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginResponse>;
+}
+/**
+ *
+ */
+export declare class ExternalAuthApi extends runtime.BaseAPI implements ExternalAuthApiInterface {
+    /**
+     * Get list of configured and active social login providers.          This endpoint returns all social login providers that are currently     enabled and configured for the tenant, along with their authorization URLs.          **Use Case:**     Use this endpoint to dynamically display available social login options     in your application\'s login interface.          **Parameters:**     - `redirect_uri`: The path to redirect to after authentication (relative to tenant domain)     - `return_to`: The final destination URL after successful authentication          **Response:**     Returns an array of provider objects, each containing:     - Provider name and display information     - Authorization URL for initiating OAuth flow     - Supported scopes and capabilities          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/active-providers?redirect_uri=auth/callback&return_to=/dashboard\"     ```
+     * Get Active Social Login Providers
+     */
+    getActiveProvidersApiV1AuthExternalActiveProvidersGetRaw(requestParameters: GetActiveProvidersApiV1AuthExternalActiveProvidersGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ProviderResponse>>>;
+    /**
+     * Get list of configured and active social login providers.          This endpoint returns all social login providers that are currently     enabled and configured for the tenant, along with their authorization URLs.          **Use Case:**     Use this endpoint to dynamically display available social login options     in your application\'s login interface.          **Parameters:**     - `redirect_uri`: The path to redirect to after authentication (relative to tenant domain)     - `return_to`: The final destination URL after successful authentication          **Response:**     Returns an array of provider objects, each containing:     - Provider name and display information     - Authorization URL for initiating OAuth flow     - Supported scopes and capabilities          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/active-providers?redirect_uri=auth/callback&return_to=/dashboard\"     ```
+     * Get Active Social Login Providers
+     */
+    getActiveProvidersApiV1AuthExternalActiveProvidersGet(requestParameters: GetActiveProvidersApiV1AuthExternalActiveProvidersGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ProviderResponse>>;
+    /**
+     * Get complete list of all supported social login providers.          This endpoint returns all social login providers supported by the system,     regardless of whether they are configured or enabled for the current tenant.          **Use Case:**     Use this endpoint to:     - Display all available provider options in admin configuration     - Show providers that can be enabled for the tenant     - Get provider metadata and configuration requirements          **Response:**     Returns an array of all supported providers with:     - Provider identifiers and names     - Configuration requirements     - Capability information     - Setup instructions          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/providers\"     ```          **Difference from /active-providers:**     - `/providers`: All supported providers (for configuration)     - `/active-providers`: Only enabled providers (for login UI)
+     * Get All Available Providers
+     */
+    getProvidersApiV1AuthExternalProvidersGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
+    /**
+     * Get complete list of all supported social login providers.          This endpoint returns all social login providers supported by the system,     regardless of whether they are configured or enabled for the current tenant.          **Use Case:**     Use this endpoint to:     - Display all available provider options in admin configuration     - Show providers that can be enabled for the tenant     - Get provider metadata and configuration requirements          **Response:**     Returns an array of all supported providers with:     - Provider identifiers and names     - Configuration requirements     - Capability information     - Setup instructions          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/providers\"     ```          **Difference from /active-providers:**     - `/providers`: All supported providers (for configuration)     - `/active-providers`: Only enabled providers (for login UI)
+     * Get All Available Providers
+     */
+    getProvidersApiV1AuthExternalProvidersGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
+    /**
+     * Handle OAuth callback from external social login providers.          This endpoint processes the OAuth callback after a user has authenticated     with an external provider (Google, Facebook, GitHub, etc.).          **Supported Providers:**     - Google     - Facebook       - GitHub     - Microsoft     - Apple     - LinkedIn          **Flow:**     1. User clicks social login button     2. Redirected to provider\'s OAuth page     3. User grants permissions     4. Provider redirects back to this callback     5. User is authenticated or account is linked          **Parameters:**     - `provider`: The social login provider name     - `code`: Authorization code from the provider     - `state`: Security state parameter to prevent CSRF     - `link`: Optional flag to link account instead of login     - `error`: Error code if authentication failed          **Account Linking:**     If `link=true`, this will link the social account to an existing user     instead of logging them in directly.
+     * Social Login Callback
+     */
+    socialCallbackApiV1AuthExternalCallbackProviderGetRaw(requestParameters: SocialCallbackApiV1AuthExternalCallbackProviderGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<LoginResponse>>;
+    /**
+     * Handle OAuth callback from external social login providers.          This endpoint processes the OAuth callback after a user has authenticated     with an external provider (Google, Facebook, GitHub, etc.).          **Supported Providers:**     - Google     - Facebook       - GitHub     - Microsoft     - Apple     - LinkedIn          **Flow:**     1. User clicks social login button     2. Redirected to provider\'s OAuth page     3. User grants permissions     4. Provider redirects back to this callback     5. User is authenticated or account is linked          **Parameters:**     - `provider`: The social login provider name     - `code`: Authorization code from the provider     - `state`: Security state parameter to prevent CSRF     - `link`: Optional flag to link account instead of login     - `error`: Error code if authentication failed          **Account Linking:**     If `link=true`, this will link the social account to an existing user     instead of logging them in directly.
+     * Social Login Callback
+     */
+    socialCallbackApiV1AuthExternalCallbackProviderGet(requestParameters: SocialCallbackApiV1AuthExternalCallbackProviderGetRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<LoginResponse>;
+}
+//# sourceMappingURL=ExternalAuthApi.d.ts.map

package/dist/generated/tenant/apis/ExternalAuthApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExternalAuthApi.d.ts","sourceRoot":"","sources":["../../../../src/generated/tenant/apis/ExternalAuthApi.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,OAAO,MAAM,YAAY,CAAC;AACtC,OAAO,KAAK,EAEV,aAAa,EACb,gBAAgB,EAChB,YAAY,EACb,MAAM,iBAAiB,CAAC;AAYzB,MAAM,WAAW,4DAA4D;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yDAAyD;IACtE,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACrC;;;;;;;;OAQG;IACH,wDAAwD,CAAC,iBAAiB,EAAE,4DAA4D,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAE7P;;;OAGG;IACH,qDAAqD,CAAC,iBAAiB,EAAE,4DAA4D,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAErO;;;;;;OAMG;IACH,4CAA4C,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAE5I;;;OAGG;IACH,yCAAyC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpH;;;;;;;;;;;OAWG;IACH,qDAAqD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAE7O;;;OAGG;IACH,kDAAkD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAExN;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,OAAO,CAAC,OAAQ,YAAW,wBAAwB;IAEpF;;;OAGG;IACG,wDAAwD,CAAC,iBAAiB,EAAE,4DAA4D,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAiClQ;;;OAGG;IACG,qDAAqD,CAAC,iBAAiB,EAAE,4DAA4D,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAK1O;;;OAGG;IACG,4CAA4C,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAsBjJ;;;OAGG;IACG,yCAAyC,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAKzH;;;OAGG;IACG,qDAAqD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAwDlP;;;OAGG;IACG,kDAAkD,CAAC,iBAAiB,EAAE,yDAAyD,EAAE,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;CAK7N"}

package/dist/generated/tenant/apis/ExternalAuthApi.js

@@ -0,0 +1,129 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * BinoAuth Tenant API
+ *  A comprehensive multi-tenant authentication and authorization API supporting OAuth2, OpenID Connect, API keys, and multiple authentication methods.  ## Features  - **Multi-Tenant Architecture**: Isolated tenant-specific authentication - **OAuth2 & OpenID Connect**: Full OAuth2/OIDC implementation with PKCE support - **API Keys**: Long-lived keys for programmatic access - **Multiple Auth Methods**: Password, magic links, phone OTP, social login, MFA - **Session Management**: Secure session handling with Redis backing - **Comprehensive Security**: Rate limiting, audit logging, secure token handling  ## Authentication Methods  ### 1. Session-Based (Web Applications) - HTTP-only secure cookies - Automatic session management - CSRF protection  ### 2. API Keys (Programmatic Access) - Long-lived keys with scoped permissions - SHA-256 hashed storage - Usage tracking and analytics - **Header**: `X-API-Key: ak_live_...`  ### 3. OAuth2 Bearer Tokens - Short-lived JWT tokens - Full OAuth2/OIDC support - Refresh token capability - **Header**: `Authorization: Bearer ...`  ## Getting Started  ### For Web Applications 1. Use `/auth/login` for password authentication 2. Session cookies are automatically managed 3. Access protected endpoints directly  ### For Mobile Applications   1. Use OAuth2 authorization code flow with PKCE 2. Handle deep links for OAuth callbacks 3. Store and use refresh tokens for long-lived sessions  ### For Backend Services 1. Create API keys via `/api-keys` endpoint 2. Use API keys for direct authentication 3. Generate short-lived tokens when needed  ## Error Handling  All endpoints return structured error responses:  ```json {   \"detail\": \"Error description\",   \"error\": \"error_code\",    \"error_description\": \"Detailed error message\" } ```  ## Rate Limiting  API endpoints are rate limited to prevent abuse: - Authentication endpoints: 10 requests/minute - API key operations: 100 requests/hour   - General endpoints: 1000 requests/hour  ## Support  - Documentation: [API Documentation](https://docs.binoauth.com) - Support: support@binoauth.com - Status: [Status Page](https://status.binoauth.com)
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@binoauth.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+import { HTTPValidationErrorFromJSON, HTTPValidationErrorToJSON, LoginResponseFromJSON, LoginResponseToJSON, ProviderResponseFromJSON, ProviderResponseToJSON, ProviderTypeFromJSON, ProviderTypeToJSON, } from '../models/index';
+/**
+ *
+ */
+export class ExternalAuthApi extends runtime.BaseAPI {
+    /**
+     * Get list of configured and active social login providers.          This endpoint returns all social login providers that are currently     enabled and configured for the tenant, along with their authorization URLs.          **Use Case:**     Use this endpoint to dynamically display available social login options     in your application\'s login interface.          **Parameters:**     - `redirect_uri`: The path to redirect to after authentication (relative to tenant domain)     - `return_to`: The final destination URL after successful authentication          **Response:**     Returns an array of provider objects, each containing:     - Provider name and display information     - Authorization URL for initiating OAuth flow     - Supported scopes and capabilities          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/active-providers?redirect_uri=auth/callback&return_to=/dashboard\"     ```
+     * Get Active Social Login Providers
+     */
+    async getActiveProvidersApiV1AuthExternalActiveProvidersGetRaw(requestParameters, initOverrides) {
+        if (requestParameters['returnTo'] == null) {
+            throw new runtime.RequiredError('returnTo', 'Required parameter "returnTo" was null or undefined when calling getActiveProvidersApiV1AuthExternalActiveProvidersGet().');
+        }
+        const queryParameters = {};
+        if (requestParameters['returnTo'] != null) {
+            queryParameters['return_to'] = requestParameters['returnTo'];
+        }
+        if (requestParameters['redirectUri'] != null) {
+            queryParameters['redirect_uri'] = requestParameters['redirectUri'];
+        }
+        const headerParameters = {};
+        let urlPath = `/api/v1/auth/external/active-providers`;
+        const response = await this.request({
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(ProviderResponseFromJSON));
+    }
+    /**
+     * Get list of configured and active social login providers.          This endpoint returns all social login providers that are currently     enabled and configured for the tenant, along with their authorization URLs.          **Use Case:**     Use this endpoint to dynamically display available social login options     in your application\'s login interface.          **Parameters:**     - `redirect_uri`: The path to redirect to after authentication (relative to tenant domain)     - `return_to`: The final destination URL after successful authentication          **Response:**     Returns an array of provider objects, each containing:     - Provider name and display information     - Authorization URL for initiating OAuth flow     - Supported scopes and capabilities          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/active-providers?redirect_uri=auth/callback&return_to=/dashboard\"     ```
+     * Get Active Social Login Providers
+     */
+    async getActiveProvidersApiV1AuthExternalActiveProvidersGet(requestParameters, initOverrides) {
+        const response = await this.getActiveProvidersApiV1AuthExternalActiveProvidersGetRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Get complete list of all supported social login providers.          This endpoint returns all social login providers supported by the system,     regardless of whether they are configured or enabled for the current tenant.          **Use Case:**     Use this endpoint to:     - Display all available provider options in admin configuration     - Show providers that can be enabled for the tenant     - Get provider metadata and configuration requirements          **Response:**     Returns an array of all supported providers with:     - Provider identifiers and names     - Configuration requirements     - Capability information     - Setup instructions          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/providers\"     ```          **Difference from /active-providers:**     - `/providers`: All supported providers (for configuration)     - `/active-providers`: Only enabled providers (for login UI)
+     * Get All Available Providers
+     */
+    async getProvidersApiV1AuthExternalProvidersGetRaw(initOverrides) {
+        const queryParameters = {};
+        const headerParameters = {};
+        let urlPath = `/api/v1/auth/external/providers`;
+        const response = await this.request({
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        if (this.isJsonMime(response.headers.get('content-type'))) {
+            return new runtime.JSONApiResponse(response);
+        }
+        else {
+            return new runtime.TextApiResponse(response);
+        }
+    }
+    /**
+     * Get complete list of all supported social login providers.          This endpoint returns all social login providers supported by the system,     regardless of whether they are configured or enabled for the current tenant.          **Use Case:**     Use this endpoint to:     - Display all available provider options in admin configuration     - Show providers that can be enabled for the tenant     - Get provider metadata and configuration requirements          **Response:**     Returns an array of all supported providers with:     - Provider identifiers and names     - Configuration requirements     - Capability information     - Setup instructions          **Example Usage:**     ```bash     curl \"/api/v1/auth/external/providers\"     ```          **Difference from /active-providers:**     - `/providers`: All supported providers (for configuration)     - `/active-providers`: Only enabled providers (for login UI)
+     * Get All Available Providers
+     */
+    async getProvidersApiV1AuthExternalProvidersGet(initOverrides) {
+        const response = await this.getProvidersApiV1AuthExternalProvidersGetRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Handle OAuth callback from external social login providers.          This endpoint processes the OAuth callback after a user has authenticated     with an external provider (Google, Facebook, GitHub, etc.).          **Supported Providers:**     - Google     - Facebook       - GitHub     - Microsoft     - Apple     - LinkedIn          **Flow:**     1. User clicks social login button     2. Redirected to provider\'s OAuth page     3. User grants permissions     4. Provider redirects back to this callback     5. User is authenticated or account is linked          **Parameters:**     - `provider`: The social login provider name     - `code`: Authorization code from the provider     - `state`: Security state parameter to prevent CSRF     - `link`: Optional flag to link account instead of login     - `error`: Error code if authentication failed          **Account Linking:**     If `link=true`, this will link the social account to an existing user     instead of logging them in directly.
+     * Social Login Callback
+     */
+    async socialCallbackApiV1AuthExternalCallbackProviderGetRaw(requestParameters, initOverrides) {
+        if (requestParameters['provider'] == null) {
+            throw new runtime.RequiredError('provider', 'Required parameter "provider" was null or undefined when calling socialCallbackApiV1AuthExternalCallbackProviderGet().');
+        }
+        if (requestParameters['code'] == null) {
+            throw new runtime.RequiredError('code', 'Required parameter "code" was null or undefined when calling socialCallbackApiV1AuthExternalCallbackProviderGet().');
+        }
+        if (requestParameters['state'] == null) {
+            throw new runtime.RequiredError('state', 'Required parameter "state" was null or undefined when calling socialCallbackApiV1AuthExternalCallbackProviderGet().');
+        }
+        const queryParameters = {};
+        if (requestParameters['code'] != null) {
+            queryParameters['code'] = requestParameters['code'];
+        }
+        if (requestParameters['state'] != null) {
+            queryParameters['state'] = requestParameters['state'];
+        }
+        if (requestParameters['link'] != null) {
+            queryParameters['link'] = requestParameters['link'];
+        }
+        if (requestParameters['error'] != null) {
+            queryParameters['error'] = requestParameters['error'];
+        }
+        const headerParameters = {};
+        let urlPath = `/api/v1/auth/external/callback/{provider}`;
+        urlPath = urlPath.replace(`{${"provider"}}`, encodeURIComponent(String(requestParameters['provider'])));
+        const response = await this.request({
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => LoginResponseFromJSON(jsonValue));
+    }
+    /**
+     * Handle OAuth callback from external social login providers.          This endpoint processes the OAuth callback after a user has authenticated     with an external provider (Google, Facebook, GitHub, etc.).          **Supported Providers:**     - Google     - Facebook       - GitHub     - Microsoft     - Apple     - LinkedIn          **Flow:**     1. User clicks social login button     2. Redirected to provider\'s OAuth page     3. User grants permissions     4. Provider redirects back to this callback     5. User is authenticated or account is linked          **Parameters:**     - `provider`: The social login provider name     - `code`: Authorization code from the provider     - `state`: Security state parameter to prevent CSRF     - `link`: Optional flag to link account instead of login     - `error`: Error code if authentication failed          **Account Linking:**     If `link=true`, this will link the social account to an existing user     instead of logging them in directly.
+     * Social Login Callback
+     */
+    async socialCallbackApiV1AuthExternalCallbackProviderGet(requestParameters, initOverrides) {
+        const response = await this.socialCallbackApiV1AuthExternalCallbackProviderGetRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+}
+//# sourceMappingURL=ExternalAuthApi.js.map

package/dist/generated/tenant/apis/ExternalAuthApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExternalAuthApi.js","sourceRoot":"","sources":["../../../../src/generated/tenant/apis/ExternalAuthApi.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,oBAAoB;AACpB;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,OAAO,MAAM,YAAY,CAAC;AAOtC,OAAO,EACH,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,GACrB,MAAM,iBAAiB,CAAC;AA4EzB;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,OAAO;IAEhD;;;OAGG;IACH,KAAK,CAAC,wDAAwD,CAAC,iBAA+E,EAAE,aAA0D;QACtM,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,UAAU,EACV,2HAA2H,CAC9H,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,eAAe,CAAC,WAAW,CAAC,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,iBAAiB,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3C,eAAe,CAAC,cAAc,CAAC,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,wCAAwC,CAAC;QAEvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACzG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qDAAqD,CAAC,iBAA+E,EAAE,aAA0D;QACnM,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wDAAwD,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACvH,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,4CAA4C,CAAC,aAA0D;QACzG,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,iCAAiC,CAAC;QAEhD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,eAAe,CAAM,QAAQ,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAQ,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,yCAAyC,CAAC,aAA0D;QACtG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4CAA4C,CAAC,aAAa,CAAC,CAAC;QACxF,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qDAAqD,CAAC,iBAA4E,EAAE,aAA0D;QAChM,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,UAAU,EACV,wHAAwH,CAC3H,CAAC;QACN,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,MAAM,EACN,oHAAoH,CACvH,CAAC;QACN,CAAC;QAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,OAAO,EACP,qHAAqH,CACxH,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACpC,eAAe,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,eAAe,CAAC,OAAO,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACpC,eAAe,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,eAAe,CAAC,OAAO,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,2CAA2C,CAAC;QAC1D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,UAAU,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAExG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;IAClG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kDAAkD,CAAC,iBAA4E,EAAE,aAA0D;QAC7L,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qDAAqD,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACpH,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;CAEJ"}