@arbidocs/client 0.5.20 → 0.5.22

package/README.md

@@ -309,3 +309,7 @@ The SDK stores the signing private key and session key in IndexedDB, encrypted w
 - **Browser**: Any modern browser (Chrome, Firefox, Safari, Edge)
 - **Node.js**: v18+ (needs `fetch`, `FormData`, `Blob` globals). Install `fake-indexeddb` for IndexedDB.
 - **TypeScript**: 5.0+ (optional — works with plain JS too)
+
+## Releases
+
+Release notes for every version are on [GitHub releases](https://github.com/arbicity/ARBI-frontend/releases).

package/dist/index.cjs

@@ -1763,6 +1763,45 @@ async function changePassword(params, deps) {
   return { wrappedIdentityKey: request.wrapped_identity_key };
 }
 
+// src/auth/disconnect-sso.ts
+var endpointClient = (client) => client;
+async function requestSsoDisconnectCode(newEmail, deps) {
+  const response = await endpointClient(deps.fetchClient).POST("/v1/user/sso-disconnect-code", {
+    body: { new_email: newEmail.trim().toLowerCase() }
+  });
+  if (response.error) throw new Error(passwordChangeErrorMessage(response.error));
+}
+async function disconnectSso(params, deps) {
+  const email = params.newEmail.trim().toLowerCase();
+  const identity = await unlockIdentityWithPassword(
+    params.email,
+    params.password,
+    deps.deploymentDomain
+  );
+  const current = await generateUserKeypairs(params.email, params.password, deps.deploymentDomain);
+  const replacement = await generateUserKeypairs(email, params.password, deps.deploymentDomain);
+  const timestamp = Math.floor(Date.now() / 1e3);
+  const newLoginKey = bytesToBase64(replacement.signingKeyPair.publicKey);
+  const wrappedIdentityKey = wrapIdentityKey(identity, replacement.signingKeyPair.secretKey);
+  const signature = signMessage(
+    `disconnect-sso|${params.userExtId}|${email}|${timestamp}|${newLoginKey}|${wrappedIdentityKey}`,
+    current.signingKeyPair.secretKey
+  );
+  const response = await endpointClient(deps.fetchClient).POST("/v1/user/disconnect-sso", {
+    body: {
+      new_email: email,
+      verification_code: params.code || void 0,
+      timestamp,
+      signature,
+      new_login_key: newLoginKey,
+      wrapped_identity_key: wrappedIdentityKey
+    }
+  });
+  if (response.error) throw new Error(passwordChangeErrorMessage(response.error));
+  await updateWrappedIdentityKey(wrappedIdentityKey);
+  return { email };
+}
+
 // src/client.ts
 var API_PREFIX = "/v1";
 var RETRYABLE_CODES = /* @__PURE__ */ new Set([
@@ -2229,6 +2268,7 @@ exports.decryptWithChatKey = decryptWithChatKey;
 exports.deriveDirectChatKey = deriveDirectChatKey;
 exports.deriveEncryptionKeypairFromSigning = deriveEncryptionKeypairFromSigning;
 exports.derivePublicKey = derivePublicKey;
+exports.disconnectSso = disconnectSso;
 exports.encodeCallKey = encodeCallKey;
 exports.encryptCallTitle = encryptCallTitle;
 exports.encryptFile = encryptFile;
@@ -2266,6 +2306,7 @@ exports.parseServerMessage = parseServerMessage;
 exports.passwordChangeErrorMessage = passwordChangeErrorMessage;
 exports.prewarmKeyPairs = prewarmKeyPairs;
 exports.readSessionClaims = readSessionClaims;
+exports.requestSsoDisconnectCode = requestSsoDisconnectCode;
 exports.saveSession = saveSession;
 exports.sealCallKey = sealCallKey;
 exports.sealCallKeyForPeers = sealCallKeyForPeers;