AuthenticationGrantType
Denotes the authorization flow to use
PasswordlessAuthenticationGrantType
Denotes the authorization flow to use
AuthenticationFactorMethod
The type of the factor
AuthenticationFactorKind
The kind of the factor
OidcProvider
The OIDC identity provider
BaseAuthenticationRequest
Attributes (3)
ClientCredentialsAuthenticationRequest
Represents an application authentication request
PasswordAuthenticationRequest
Represents an authentication password request
RefreshTokenAuthenticationRequest
Represents an authentication refresh request
LinkAuthenticationRequest
Represents an authentication magic link request
CodeAuthenticationRequest
Represents an authentication one-time-code request
FidoAuthenticationRequest
Represents an authentication passkey request
AuthenticatorAuthenticationRequest
Submit a TOTP code as a second factor against a pending MFA challenge
OidcAuthenticationRequest
Redeem a completed OIDC authorization that the callback stashed under a one-time id
AuthenticationRequest
AuthenticationToken
Represents an authentication token
AuthenticationTokenIssued
Issued-token arm of /auth/token response
MfaChallengeFactor
A factor the SPA may use to satisfy the MFA challenge
MfaRequiredResponse
MFA-required arm of /auth/token response
EnrollmentRequiredResponse
Returned by /auth/step-up/start when no enrolled factor satisfies the requirement. The SPA should drive the user through enrollment and retry the gated action afterwards.
StepUpStartResponse
AuthenticationTokenResponse
PublicKeyCredential
Represents a common shape of a PublicKeyCredential after the client serializes the id and rawId fields to base64 strings for transport
SimpleClientExtensionResults
Subset of the WebAuthn client extension results the service round-trips
FidoAuthenticatorAssertionResponse
Attributes (4)
PublicKeyCredentialWithAssertion
Extends PublicKeyCredential
AuthenticationRegistration
Attributes (4)
AuthenticationRegistrationVerification
Attributes (2)
BaseAuthenticationLoginStart
Attributes (2)
BaseAuthenticationLoginStartWithEmail
Extends BaseAuthenticationLoginStart
LinkAuthenticationLoginStart
Extends BaseAuthenticationLoginStartWithEmail
CodeAuthenticationLoginStart
Extends BaseAuthenticationLoginStartWithEmail
FidoAuthenticationLoginStart
Extends BaseAuthenticationLoginStartWithEmail
OidcAuthenticationLoginStart
Request to begin an OIDC sign-in flow
AuthenticationLoginStart
PublicKeyCredentialDescriptor
A credential the relying party expects the user to be able to present
BaseAuthenticationLoginStartResponse
Attributes (3)
CodeAuthenticationLoginStartResponse
Extends BaseAuthenticationLoginStartResponse
LinkAuthenticationLoginStartResponse
Extends BaseAuthenticationLoginStartResponse
FidoPublicKeyCredentialRequestOptions
Attributes (8)
FidoAuthenticationLoginStartResponse
WebAuthn assertion options for navigator.credentials.get
OidcAuthenticationLoginStartResponse
Response from /auth/login/oidc/start instructing the client to navigate to authorize_url
AuthenticationLoginStartResponse
FidoAuthenticatorTransport
The transport used by the authenticator
FidoAuthenticatorAttestationResponse
Serialized form of AuthenticatorAttestationResponse — produced by the browser at registration; all binary fields are base64-encoded for transport
PublicKeyCredentialWithAttestation
The credential the client posts back to complete registration
AuthenticationFactor
Attributes (4)
FactorChallengePhoneStart
Issue a phone SMS challenge during a pending MFA round
FactorChallengeFidoStart
Issue a WebAuthn assertion challenge during a pending MFA round
FactorChallengeEmailStart
Issue an email one-time-code challenge during a pending MFA round. Always a code: a magic link cannot complete an MFA round, since the code grant that redeems one takes code(min=6, max=10) and a link token is 43 characters
FactorChallengeStartRequest
FactorChallengePhoneStartResponse
Response for a phone SMS challenge
FactorChallengeFidoStartResponse
Response for a FIDO assertion challenge
FactorChallengeEmailStartResponse
Response for an email one-time-code challenge
FactorChallengeStartResponse
StepUpStartRequest
Mint a fresh MFA challenge for the current session so the SPA can satisfy a stepuprequired denial. Filters mirror StepUpRequirement from @maroonedsoftware/policies.
PlatformRole
A platform-wide role held on platform:main. admin grants every operation; listener grants the reads
AuthSession
Who the caller is, as the station sees them
PhoneFactorRegistration
Attributes (3)
PasswordFactorRegistration
Attributes (2)
EmailFactorRegistration
Attributes (3)
AuthenticatorFactorRegistration
Attributes (3)
FidoFactorRegistration
Attributes (2)
AuthenticationFactorRegistration
PhoneFactorRegistrationResponse
Attributes (4)
PasswordFactorRegistrationResponse
Attributes (2)
EmailFactorRegistrationResponse
Attributes (4)
AuthenticatorFactorRegistrationResponse
Attributes (7)
FidoFactorAttestation
The FIDO factor attestation information
FidoFactorRegistrationResponse
Attributes (5)
AuthenticationFactorRegistrationResponse
PhoneFactorRegistrationVerification
Attributes (4)
EmailFactorRegistrationVerification
Attributes (4)
AuthenticatorFactorRegistrationVerification
Attributes (4)
FidoFactorRegistrationVerification
Attributes (3)