wowsql-sdk 3.9.0 → 3.9.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dda55e2b1cbe73aabfaffa2aaadb6690c8a8978e89f712284cf9507a640004cf
-  data.tar.gz: c88299d7c4be38e8a121865f292d0cac3d489b5de358ea002d24afc6a6715fe6
+  metadata.gz: d95459a8c529ff5a62a4dc8c370041f1c77827bfc55069e562efeb5dcb9ba00a
+  data.tar.gz: 6f05ecb7c8da142eab17f92dd449fbc1761e3e4cb1c33c15028b6e00b8733762
 SHA512:
-  metadata.gz: f8d0524196573928f5c92b8cac0df6a0bd6789a9fa18d1cf4c16d87ffb76fb547d51365ca2dc8bca996469584497a249ae3be7fb3fdc1b06c50a2d4c083c8ee4
-  data.tar.gz: 1ee24eb2e9e535fdaa3ca6478ac77407e693a68914f26466b66eeb04ca92f2c561bb9a2154f9705d1eaa7ed793da1ea89e30b267a51f20a4bab91516b1e8c8a2
+  metadata.gz: 398dc67a4528c3699f110e5371395896734fb97eb6ef78aa9cef63ea810150e07a77980e63011af8c5c4b04a55551caf1688972c888f71be08e6a9f322723f83
+  data.tar.gz: 8c2e796cdcea0191470e0277201b91222f6fbe51d796698bbff6f50dd2a22a2371fef0e4fcc9d7dfaf07b4170f532d381560a431d1dec67a0d44267b1ee52b3b

data/CHANGELOG.md

@@ -5,6 +5,19 @@ All notable changes to the WowSQL Ruby SDK will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.9.2] - 2026-10-10
+
+### Added - Optional Turnstile captcha
+- Optional captcha token on signup, login, forgot password, OTP send, magic link, and resend verification
+- Existing calls without a token remain unchanged
+
+## [3.9.1] - 2026-10-07
+
+### Added - Phone OTP (SMS)
+- `sendOtp` / `verifyOtp` (and language equivalents) accept either **email** or **phone** (exactly one)
+- Existing email OTP call sites remain backward compatible
+
+
 ## [3.9.0] - 2026-08-20
 
 ### Added - Realtime
@@ -12,7 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `client.realtime.subscribe` for Postgres `INSERT` / `UPDATE` / `DELETE` (and `*`)
 - WebSocket auth: `wss://<project>/realtime/v1/websocket?apikey=<anon or service_role key>`
 - Auto-reconnect after disconnect; unsubscribe / disconnect clean local and server state
-- `client.realtime.channel(name)` — ephemeral broadcast (`send`) and presence (`track` / `presence_state`)
+- `client.realtime.channel(name)` — ephemeral broadcast (`send`) and presence (`track` / `presence_state`)
 - `websocket-client-simple` dependency
 
 ### Documentation

data/README.md

@@ -406,6 +406,22 @@ puts response.session.access_token
 puts response.session.refresh_token
 ```
 
+### CAPTCHA (Turnstile)
+
+Optional. Only required when Attack Protection → Turnstile is enabled. Existing calls without `captcha_token` are unchanged.
+
+```ruby
+# 1. GET /auth/v1/settings → captcha.site_key
+# 2. Render Cloudflare Turnstile with that site key
+# 3. Pass the token:
+auth.sign_up(email: "alice@example.com", password: "SecurePass123!", captcha_token: turnstile_token)
+auth.sign_in(email: "alice@example.com", password: "SecurePass123!", captcha_token: turnstile_token)
+auth.forgot_password(email: "alice@example.com", captcha_token: turnstile_token)
+auth.send_otp(email: "alice@example.com", captcha_token: turnstile_token)
+auth.send_magic_link(email: "alice@example.com", captcha_token: turnstile_token)
+auth.resend_verification(email: "alice@example.com", captcha_token: turnstile_token)
+```
+
 ### get_user
 
 ```ruby

data/lib/wowsql/auth.rb

@@ -126,10 +126,11 @@ module WOWSQL
     # @param full_name [String, nil] Optional full name
     # @param user_metadata [Hash, nil] Optional user metadata
     # @return [AuthResponse]
-    def sign_up(email:, password:, full_name: nil, user_metadata: nil)
+    def sign_up(email:, password:, full_name: nil, user_metadata: nil, captcha_token: nil)
       payload = { email: email, password: password }
       payload[:full_name] = full_name if full_name
       payload[:user_metadata] = user_metadata if user_metadata
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
 
       data = request('POST', '/signup', nil, payload)
       session = persist_session(data)
@@ -142,8 +143,9 @@ module WOWSQL
     # @param email [String] User email
     # @param password [String] User password
     # @return [AuthResponse]
-    def sign_in(email:, password:)
+    def sign_in(email:, password:, captcha_token: nil)
       payload = { email: email, password: password }
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/login', nil, payload)
       session = persist_session(data)
       AuthResponse.new(session: session, user: nil)
@@ -219,8 +221,9 @@ module WOWSQL
     #
     # @param email [String] User's email address
     # @return [Hash]
-    def forgot_password(email:)
+    def forgot_password(email:, captcha_token: nil)
       payload = { email: email }
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/forgot-password', nil, payload)
       {
         'success' => data['success'] != false,
@@ -242,41 +245,55 @@ module WOWSQL
       }
     end
 
-    # Send OTP code to user's email.
+    # Send OTP via email or phone (SMS). Provide exactly one of email or phone.
     #
-    # @param email [String] User's email address
+    # @param email [String, nil] User's email address
+    # @param phone [String, nil] E.164 phone number
     # @param purpose [String] 'login', 'signup', or 'password_reset'
     # @return [Hash]
-    def send_otp(email:, purpose: 'login')
+    def send_otp(email: nil, phone: nil, purpose: 'login', captcha_token: nil)
       unless %w[login signup password_reset].include?(purpose)
         raise WOWSQLError.new("Purpose must be 'login', 'signup', or 'password_reset'")
       end
+      if email.to_s.empty? == phone.to_s.empty?
+        raise WOWSQLError.new('Provide exactly one of email or phone')
+      end
+
+      payload = { purpose: purpose }
+      payload[:email] = email unless email.to_s.empty?
+      payload[:phone] = phone unless phone.to_s.empty?
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
 
-      payload = { email: email, purpose: purpose }
       data = request('POST', '/otp/send', nil, payload)
       {
         'success' => data['success'] != false,
-        'message' => data['message'] || 'If that email exists, an OTP code has been sent'
+        'message' => data['message'] || (phone.to_s.empty? ? 'If that email exists, an OTP code has been sent' : 'If that phone exists, an OTP code has been sent')
       }
     end
 
-    # Verify OTP and complete authentication.
+    # Verify OTP via email or phone. Provide exactly one of email or phone.
     #
-    # @param email [String] User's email address
-    # @param otp [String] 6-digit OTP code
+    # @param email [String, nil] User's email address
+    # @param phone [String, nil] E.164 phone number
+    # @param otp [String] OTP code
     # @param purpose [String] 'login', 'signup', or 'password_reset'
     # @param new_password [String, nil] Required for password_reset purpose
     # @return [AuthResponse, Hash]
-    def verify_otp(email:, otp:, purpose: 'login', new_password: nil)
+    def verify_otp(email: nil, phone: nil, otp:, purpose: 'login', new_password: nil)
       unless %w[login signup password_reset].include?(purpose)
         raise WOWSQLError.new("Purpose must be 'login', 'signup', or 'password_reset'")
       end
+      if email.to_s.empty? == phone.to_s.empty?
+        raise WOWSQLError.new('Provide exactly one of email or phone')
+      end
 
       if purpose == 'password_reset' && new_password.nil?
         raise WOWSQLError.new('new_password is required for password_reset purpose')
       end
 
-      payload = { email: email, otp: otp, purpose: purpose }
+      payload = { otp: otp, purpose: purpose }
+      payload[:email] = email unless email.to_s.empty?
+      payload[:phone] = phone unless phone.to_s.empty?
       payload[:new_password] = new_password if new_password
 
       data = request('POST', '/otp/verify', nil, payload)
@@ -298,12 +315,13 @@ module WOWSQL
     # @param email [String] User's email address
     # @param purpose [String] 'login', 'signup', or 'email_verification'
     # @return [Hash]
-    def send_magic_link(email:, purpose: 'login')
+    def send_magic_link(email:, purpose: 'login', captcha_token: nil)
       unless %w[login signup email_verification].include?(purpose)
         raise WOWSQLError.new("Purpose must be 'login', 'signup', or 'email_verification'")
       end
 
       payload = { email: email, purpose: purpose }
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/magic-link/send', nil, payload)
       {
         'success' => data['success'] != false,
@@ -329,8 +347,9 @@ module WOWSQL
     #
     # @param email [String] User's email address
     # @return [Hash]
-    def resend_verification(email:)
+    def resend_verification(email:, captcha_token: nil)
       payload = { email: email }
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/resend-verification', nil, payload)
       {
         'success' => data['success'] != false,

data/lib/wowsql/version.rb

@@ -1,4 +1,4 @@
 module WOWSQL
-  VERSION = "3.9.0"
+  VERSION = "3.9.2"
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: wowsql-sdk
 version: !ruby/object:Gem::Version
-  version: 3.9.0
+  version: 3.9.2
 platform: ruby
 authors:
 - WOWSQL Team