@aurabase/auth 0.7.1 → 0.7.2

package/dist/index.cjs

@@ -52,14 +52,34 @@ var AuthAdminService = class extends core.BaseService {
   }
   /**
    * Génère un lien à usage unique pour un utilisateur (`'magic'`, `'recovery'` ou `'invite'`) et renvoie `{ link, token }`.
-   * Accepte soit `generateLink(userId, type)` soit `generateLink({ userId, type })`.
+   * Accepte `generateLink(userId, type)` ou `generateLink({ userId, type })` ou `generateLink({ email, type })`.
    */
   async generateLink(userIdOrParams, type) {
     let resolvedUserId;
     let resolvedType;
+    let resolvedRedirectTo;
     if (typeof userIdOrParams === "object" && userIdOrParams !== null) {
       resolvedUserId = userIdOrParams.userId ?? userIdOrParams.user_id;
       resolvedType = userIdOrParams.type ?? type;
+      resolvedRedirectTo = userIdOrParams.redirectTo ?? userIdOrParams.redirect_to;
+      if (!resolvedUserId && userIdOrParams.email) {
+        const email = userIdOrParams.email.trim().toLowerCase();
+        const searchRes = await this.listUsers({ search: email, limit: 1 });
+        const usersList = Array.isArray(searchRes.data) ? searchRes.data : [];
+        if (usersList[0]?.id) {
+          resolvedUserId = usersList[0].id;
+        } else {
+          return {
+            data: null,
+            error: new core.AuraError(404, {
+              error: {
+                code: "USER_NOT_FOUND",
+                message: `No user found with email "${email}".`
+              }
+            })
+          };
+        }
+      }
     } else if (typeof userIdOrParams === "string") {
       resolvedUserId = userIdOrParams;
       resolvedType = type;
@@ -70,7 +90,7 @@ var AuthAdminService = class extends core.BaseService {
         error: new core.AuraError(400, {
           error: {
             code: "INVALID_ARGUMENT",
-            message: "userId must be a non-empty string (UUID). Usage: generateLink(userId, type) or generateLink({ userId, type })."
+            message: "userId or email is required. Usage: generateLink({ email, type }) or generateLink(userId, type)."
           }
         })
       };
@@ -86,7 +106,15 @@ var AuthAdminService = class extends core.BaseService {
         })
       };
     }
-    return this.request("POST", `${this.prefix}/users/${encodeURIComponent(resolvedUserId)}/generate-link`, { type: resolvedType });
+    const body = { type: resolvedType };
+    if (resolvedRedirectTo) {
+      body.redirect_to = resolvedRedirectTo;
+    }
+    return this.request(
+      "POST",
+      `${this.prefix}/users/${encodeURIComponent(resolvedUserId)}/generate-link`,
+      body
+    );
   }
   /**
    * Impersonation (AUTH-037) : jeton COURT (10 minutes au plus) pour agir en tant que l'utilisateur,
@@ -1507,14 +1535,28 @@ var AuthService = class extends core.BaseService {
         const code = typeof codeOrParams === "string" ? codeOrParams : codeOrParams.code;
         return this.regenerateRecoveryCodes(code);
       },
-      factors: (mfaToken) => this.request("POST", `${this.prefix}/mfa/factors`, { mfa_token: mfaToken }),
+      factors: (mfaToken) => this.request("POST", `${this.prefix}/mfa/factors`, {
+        mfa_token: mfaToken
+      }),
       sms: {
         setup: (phone) => this.request("POST", `${this.prefix}/mfa/sms/setup`, { phone }),
-        verifySetup: (code) => this.request("POST", `${this.prefix}/mfa/sms/setup/verify`, { code }),
-        send: (mfaToken) => this.request("POST", `${this.prefix}/mfa/sms/send`, {
-          mfa_token: mfaToken
-        }),
-        remove: (password) => this.request("DELETE", `${this.prefix}/mfa/sms`, { password })
+        verifySetup: (code) => this.request(
+          "POST",
+          `${this.prefix}/mfa/sms/setup/verify`,
+          { code }
+        ),
+        send: (mfaToken) => this.request(
+          "POST",
+          `${this.prefix}/mfa/sms/send`,
+          {
+            mfa_token: mfaToken
+          }
+        ),
+        remove: (password) => this.request(
+          "DELETE",
+          `${this.prefix}/mfa/sms`,
+          { password }
+        )
       },
       webauthn: {
         register: (params) => this.webauthnRegister(params),
@@ -1528,6 +1570,13 @@ var AuthService = class extends core.BaseService {
       }
     };
   }
+  /**
+   * API d'administration de l'authentification (alias vers `client.authAdmin`).
+   * Exige une clé `service_role` (côté serveur uniquement).
+   */
+  get admin() {
+    return this.client.authAdmin;
+  }
   webauthnIndisponible() {
     return {
       data: null,
@@ -1552,7 +1601,7 @@ var AuthService = class extends core.BaseService {
       `${this.prefix}/mfa/webauthn/register/start`,
       { friendly_name: params?.friendlyName }
     );
-    if (!debut.data) return debut;
+    if (!debut.data) return { data: null, error: debut.error };
     let cred;
     try {
       cred = await conteneur.create(creationOptionsFromJson(debut.data.options));
@@ -1560,10 +1609,14 @@ var AuthService = class extends core.BaseService {
       return this.webauthnAnnule(e);
     }
     if (!cred) return this.webauthnAnnule(new Error("no credential returned"));
-    return this.request("POST", `${this.prefix}/mfa/webauthn/register/finish`, {
-      credential: attestationToJson(cred),
-      friendly_name: params?.friendlyName
-    });
+    return this.request(
+      "POST",
+      `${this.prefix}/mfa/webauthn/register/finish`,
+      {
+        credential: attestationToJson(cred),
+        friendly_name: params?.friendlyName
+      }
+    );
   }
   /**
    * Relève un défi MFA (`mfaToken`, reçu d'un `signIn`) avec une passkey : options du serveur,
@@ -1577,7 +1630,7 @@ var AuthService = class extends core.BaseService {
       `${this.prefix}/mfa/webauthn/verify/start`,
       { mfa_token: params.mfaToken }
     );
-    if (!debut.data) return debut;
+    if (!debut.data) return { data: null, error: debut.error };
     let cred;
     try {
       cred = await conteneur.get(requestOptionsFromJson(debut.data.options));

package/dist/index.d.cts

@@ -72,12 +72,15 @@ declare class AuthAdminService extends BaseService {
     unbanUser(userId: string): Promise<AuraResponse<null>>;
     /**
      * Génère un lien à usage unique pour un utilisateur (`'magic'`, `'recovery'` ou `'invite'`) et renvoie `{ link, token }`.
-     * Accepte soit `generateLink(userId, type)` soit `generateLink({ userId, type })`.
+     * Accepte `generateLink(userId, type)` ou `generateLink({ userId, type })` ou `generateLink({ email, type })`.
      */
     generateLink(userIdOrParams: string | {
         userId?: string;
         user_id?: string;
+        email?: string;
         type: GenerateLinkType;
+        redirectTo?: string;
+        redirect_to?: string;
     }, type?: GenerateLinkType): Promise<AuraResponse<GenerateLinkResult>>;
     /**
      * Impersonation (AUTH-037) : jeton COURT (10 minutes au plus) pour agir en tant que l'utilisateur,
@@ -573,6 +576,11 @@ declare class AuthService extends BaseService {
             }>>;
         };
     };
+    /**
+     * API d'administration de l'authentification (alias vers `client.authAdmin`).
+     * Exige une clé `service_role` (côté serveur uniquement).
+     */
+    get admin(): AuthAdminService;
     private webauthnIndisponible;
     /**
      * Enrôle une passkey WebAuthn pour l'utilisateur connecté (cérémonie complète : options du serveur,

package/dist/index.d.ts

@@ -72,12 +72,15 @@ declare class AuthAdminService extends BaseService {
     unbanUser(userId: string): Promise<AuraResponse<null>>;
     /**
      * Génère un lien à usage unique pour un utilisateur (`'magic'`, `'recovery'` ou `'invite'`) et renvoie `{ link, token }`.
-     * Accepte soit `generateLink(userId, type)` soit `generateLink({ userId, type })`.
+     * Accepte `generateLink(userId, type)` ou `generateLink({ userId, type })` ou `generateLink({ email, type })`.
      */
     generateLink(userIdOrParams: string | {
         userId?: string;
         user_id?: string;
+        email?: string;
         type: GenerateLinkType;
+        redirectTo?: string;
+        redirect_to?: string;
     }, type?: GenerateLinkType): Promise<AuraResponse<GenerateLinkResult>>;
     /**
      * Impersonation (AUTH-037) : jeton COURT (10 minutes au plus) pour agir en tant que l'utilisateur,
@@ -573,6 +576,11 @@ declare class AuthService extends BaseService {
             }>>;
         };
     };
+    /**
+     * API d'administration de l'authentification (alias vers `client.authAdmin`).
+     * Exige une clé `service_role` (côté serveur uniquement).
+     */
+    get admin(): AuthAdminService;
     private webauthnIndisponible;
     /**
      * Enrôle une passkey WebAuthn pour l'utilisateur connecté (cérémonie complète : options du serveur,

package/dist/index.js

@@ -50,14 +50,34 @@ var AuthAdminService = class extends BaseService {
   }
   /**
    * Génère un lien à usage unique pour un utilisateur (`'magic'`, `'recovery'` ou `'invite'`) et renvoie `{ link, token }`.
-   * Accepte soit `generateLink(userId, type)` soit `generateLink({ userId, type })`.
+   * Accepte `generateLink(userId, type)` ou `generateLink({ userId, type })` ou `generateLink({ email, type })`.
    */
   async generateLink(userIdOrParams, type) {
     let resolvedUserId;
     let resolvedType;
+    let resolvedRedirectTo;
     if (typeof userIdOrParams === "object" && userIdOrParams !== null) {
       resolvedUserId = userIdOrParams.userId ?? userIdOrParams.user_id;
       resolvedType = userIdOrParams.type ?? type;
+      resolvedRedirectTo = userIdOrParams.redirectTo ?? userIdOrParams.redirect_to;
+      if (!resolvedUserId && userIdOrParams.email) {
+        const email = userIdOrParams.email.trim().toLowerCase();
+        const searchRes = await this.listUsers({ search: email, limit: 1 });
+        const usersList = Array.isArray(searchRes.data) ? searchRes.data : [];
+        if (usersList[0]?.id) {
+          resolvedUserId = usersList[0].id;
+        } else {
+          return {
+            data: null,
+            error: new AuraError(404, {
+              error: {
+                code: "USER_NOT_FOUND",
+                message: `No user found with email "${email}".`
+              }
+            })
+          };
+        }
+      }
     } else if (typeof userIdOrParams === "string") {
       resolvedUserId = userIdOrParams;
       resolvedType = type;
@@ -68,7 +88,7 @@ var AuthAdminService = class extends BaseService {
         error: new AuraError(400, {
           error: {
             code: "INVALID_ARGUMENT",
-            message: "userId must be a non-empty string (UUID). Usage: generateLink(userId, type) or generateLink({ userId, type })."
+            message: "userId or email is required. Usage: generateLink({ email, type }) or generateLink(userId, type)."
           }
         })
       };
@@ -84,7 +104,15 @@ var AuthAdminService = class extends BaseService {
         })
       };
     }
-    return this.request("POST", `${this.prefix}/users/${encodeURIComponent(resolvedUserId)}/generate-link`, { type: resolvedType });
+    const body = { type: resolvedType };
+    if (resolvedRedirectTo) {
+      body.redirect_to = resolvedRedirectTo;
+    }
+    return this.request(
+      "POST",
+      `${this.prefix}/users/${encodeURIComponent(resolvedUserId)}/generate-link`,
+      body
+    );
   }
   /**
    * Impersonation (AUTH-037) : jeton COURT (10 minutes au plus) pour agir en tant que l'utilisateur,
@@ -1505,14 +1533,28 @@ var AuthService = class extends BaseService {
         const code = typeof codeOrParams === "string" ? codeOrParams : codeOrParams.code;
         return this.regenerateRecoveryCodes(code);
       },
-      factors: (mfaToken) => this.request("POST", `${this.prefix}/mfa/factors`, { mfa_token: mfaToken }),
+      factors: (mfaToken) => this.request("POST", `${this.prefix}/mfa/factors`, {
+        mfa_token: mfaToken
+      }),
       sms: {
         setup: (phone) => this.request("POST", `${this.prefix}/mfa/sms/setup`, { phone }),
-        verifySetup: (code) => this.request("POST", `${this.prefix}/mfa/sms/setup/verify`, { code }),
-        send: (mfaToken) => this.request("POST", `${this.prefix}/mfa/sms/send`, {
-          mfa_token: mfaToken
-        }),
-        remove: (password) => this.request("DELETE", `${this.prefix}/mfa/sms`, { password })
+        verifySetup: (code) => this.request(
+          "POST",
+          `${this.prefix}/mfa/sms/setup/verify`,
+          { code }
+        ),
+        send: (mfaToken) => this.request(
+          "POST",
+          `${this.prefix}/mfa/sms/send`,
+          {
+            mfa_token: mfaToken
+          }
+        ),
+        remove: (password) => this.request(
+          "DELETE",
+          `${this.prefix}/mfa/sms`,
+          { password }
+        )
       },
       webauthn: {
         register: (params) => this.webauthnRegister(params),
@@ -1526,6 +1568,13 @@ var AuthService = class extends BaseService {
       }
     };
   }
+  /**
+   * API d'administration de l'authentification (alias vers `client.authAdmin`).
+   * Exige une clé `service_role` (côté serveur uniquement).
+   */
+  get admin() {
+    return this.client.authAdmin;
+  }
   webauthnIndisponible() {
     return {
       data: null,
@@ -1550,7 +1599,7 @@ var AuthService = class extends BaseService {
       `${this.prefix}/mfa/webauthn/register/start`,
       { friendly_name: params?.friendlyName }
     );
-    if (!debut.data) return debut;
+    if (!debut.data) return { data: null, error: debut.error };
     let cred;
     try {
       cred = await conteneur.create(creationOptionsFromJson(debut.data.options));
@@ -1558,10 +1607,14 @@ var AuthService = class extends BaseService {
       return this.webauthnAnnule(e);
     }
     if (!cred) return this.webauthnAnnule(new Error("no credential returned"));
-    return this.request("POST", `${this.prefix}/mfa/webauthn/register/finish`, {
-      credential: attestationToJson(cred),
-      friendly_name: params?.friendlyName
-    });
+    return this.request(
+      "POST",
+      `${this.prefix}/mfa/webauthn/register/finish`,
+      {
+        credential: attestationToJson(cred),
+        friendly_name: params?.friendlyName
+      }
+    );
   }
   /**
    * Relève un défi MFA (`mfaToken`, reçu d'un `signIn`) avec une passkey : options du serveur,
@@ -1575,7 +1628,7 @@ var AuthService = class extends BaseService {
       `${this.prefix}/mfa/webauthn/verify/start`,
       { mfa_token: params.mfaToken }
     );
-    if (!debut.data) return debut;
+    if (!debut.data) return { data: null, error: debut.error };
     let cred;
     try {
       cred = await conteneur.get(requestOptionsFromJson(debut.data.options));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aurabase/auth",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Service d'authentification du SDK Aurabase (sessions, OAuth/PKCE, MFA, magic link, OTP, admin)",
   "type": "module",
   "main": "dist/index.cjs",
@@ -46,7 +46,7 @@
     "authentication"
   ],
   "dependencies": {
-    "@aurabase/core": "0.7.1"
+    "@aurabase/core": "0.7.2"
   },
   "devDependencies": {
     "@types/node": "20.14.15",