@authyon/server 0.2.0-beta.16 → 0.2.0-beta.17

package/dist/bff.cjs

@@ -693,6 +693,16 @@ function createBffSession(options) {
       const tokens = await options.provider.verifyTwoFactor(input);
       return finishLogin(tokens, void 0, input.sessionPersistence);
     }),
+    /** Same guards as `verifyTwoFactor`; never creates a session or sets a cookie. */
+    resendTwoFactorEmail: handler("POST", async (request) => {
+      await assertSignedOut(request);
+      if (!options.provider.resendTwoFactorEmail) {
+        throw new BffSessionError("provider.unsupported_operation", 501);
+      }
+      const challengeToken = inputString(await readBffBody(request), "challengeToken");
+      await options.provider.resendTwoFactorEmail(challengeToken);
+      return http.response(null, { status: 204 });
+    }),
     session: handler(
       "GET",
       async (request) => http.response(publicSession(await manager.read(requiredSessionId(request))))
@@ -1013,6 +1023,13 @@ function createAuthyonBffProvider(options) {
         await http.request("/auth/2fa/verify", { method: "POST", headers, body: verification })
       );
     },
+    async resendTwoFactorEmail(challengeToken) {
+      await http.request("/auth/2fa/resend-email", {
+        method: "POST",
+        headers,
+        body: { challengeToken }
+      });
+    },
     async refresh(refreshToken) {
       return readTokens(
         await http.request("/auth/refresh", { method: "POST", headers, body: { refreshToken } })

package/dist/bff.d.cts

@@ -45,6 +45,11 @@ interface BffChallenge {
 interface BffAuthProvider {
     login(input: BffLoginInput): Promise<BffTokens | BffChallenge>;
     verifyTwoFactor(input: BffVerifyTwoFactorInput): Promise<BffTokens>;
+    /**
+     * Resends the e-mail code of an in-flight login challenge. Optional so existing
+     * custom providers keep compiling; without it the handler answers 501.
+     */
+    resendTwoFactorEmail?(challengeToken: string): Promise<void>;
     refresh(refreshToken: string): Promise<BffTokens>;
     logout(refreshToken: string): Promise<void>;
     switchOrganization(accessToken: string, slug: string): Promise<BffTokens>;
@@ -90,6 +95,8 @@ declare class BffSessionError extends Error {
 declare function createBffSession(options: BffSessionOptions): {
     login: (request: Request) => Promise<Response>;
     verifyTwoFactor: (request: Request) => Promise<Response>;
+    /** Same guards as `verifyTwoFactor`; never creates a session or sets a cookie. */
+    resendTwoFactorEmail: (request: Request) => Promise<Response>;
     session: (request: Request) => Promise<Response>;
     switchOrganization: (request: Request) => Promise<Response>;
     logout: (request: Request) => Promise<Response>;

package/dist/bff.d.ts

@@ -45,6 +45,11 @@ interface BffChallenge {
 interface BffAuthProvider {
     login(input: BffLoginInput): Promise<BffTokens | BffChallenge>;
     verifyTwoFactor(input: BffVerifyTwoFactorInput): Promise<BffTokens>;
+    /**
+     * Resends the e-mail code of an in-flight login challenge. Optional so existing
+     * custom providers keep compiling; without it the handler answers 501.
+     */
+    resendTwoFactorEmail?(challengeToken: string): Promise<void>;
     refresh(refreshToken: string): Promise<BffTokens>;
     logout(refreshToken: string): Promise<void>;
     switchOrganization(accessToken: string, slug: string): Promise<BffTokens>;
@@ -90,6 +95,8 @@ declare class BffSessionError extends Error {
 declare function createBffSession(options: BffSessionOptions): {
     login: (request: Request) => Promise<Response>;
     verifyTwoFactor: (request: Request) => Promise<Response>;
+    /** Same guards as `verifyTwoFactor`; never creates a session or sets a cookie. */
+    resendTwoFactorEmail: (request: Request) => Promise<Response>;
     session: (request: Request) => Promise<Response>;
     switchOrganization: (request: Request) => Promise<Response>;
     logout: (request: Request) => Promise<Response>;

package/dist/bff.js

@@ -533,6 +533,16 @@ function createBffSession(options) {
       const tokens = await options.provider.verifyTwoFactor(input);
       return finishLogin(tokens, void 0, input.sessionPersistence);
     }),
+    /** Same guards as `verifyTwoFactor`; never creates a session or sets a cookie. */
+    resendTwoFactorEmail: handler("POST", async (request) => {
+      await assertSignedOut(request);
+      if (!options.provider.resendTwoFactorEmail) {
+        throw new BffSessionError("provider.unsupported_operation", 501);
+      }
+      const challengeToken = inputString(await readBffBody(request), "challengeToken");
+      await options.provider.resendTwoFactorEmail(challengeToken);
+      return http.response(null, { status: 204 });
+    }),
     session: handler(
       "GET",
       async (request) => http.response(publicSession(await manager.read(requiredSessionId(request))))
@@ -648,6 +658,13 @@ function createAuthyonBffProvider(options) {
         await http.request("/auth/2fa/verify", { method: "POST", headers, body: verification })
       );
     },
+    async resendTwoFactorEmail(challengeToken) {
+      await http.request("/auth/2fa/resend-email", {
+        method: "POST",
+        headers,
+        body: { challengeToken }
+      });
+    },
     async refresh(refreshToken) {
       return readTokens(
         await http.request("/auth/refresh", { method: "POST", headers, body: { refreshToken } })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authyon/server",
-  "version": "0.2.0-beta.16",
+  "version": "0.2.0-beta.17",
   "description": "Authyon SDK for backends — server-to-server organization/member management and access-token verification.",
   "license": "MIT",
   "type": "module",