@baasix/sdk 0.1.21 → 0.2.0

package/README.md

@@ -199,19 +199,28 @@ await baasix.auth.sendMagicLink({
 
 // Verify (after user clicks link)
 const { user, token } = await baasix.auth.verifyMagicLink('verification-token');
+
+// Session type / tenant, so the tenant's web/mobile session limits apply
+await baasix.auth.verifyMagicLink(code, { authType: 'web', tenant_Id: 'tenant-uuid' });
 ```
 
 ### Password Reset
 
 ```typescript
-// Request reset
+// Request reset (link mode: emails a clickable reset URL)
 await baasix.auth.forgotPassword({
   email: 'user@example.com',
   redirectUrl: 'https://myapp.com/reset-password',
 });
 
-// Reset password
-await baasix.auth.resetPassword('reset-token', 'newpassword123');
+// Request reset (code mode: emails a short one-time code, no redirectUrl needed)
+await baasix.auth.forgotPassword({
+  email: 'user@example.com',
+  mode: 'code',
+});
+
+// Reset password with the token or emailed code
+await baasix.auth.resetPassword('reset-token-or-code', 'newpassword123');
 ```
 
 ### Change Password
@@ -1592,6 +1601,10 @@ try {
 }
 ```
 
+`error.message` is the server's reason, read from `error.message`, a top-level `message`, or a plain-string `error` (`{ "error": "Authentication required" }`), and falls back to the HTTP status text. `error.code` comes from `error.code` or a top-level `code`. `error.details` is set only when the server sends an array of details.
+
+A **401** with code `INVALID_SESSION` means the session is gone (logged out, expired, revoked or suspended user). With `autoRefresh` on, the SDK tries one token refresh and retries the request; if that fails, sign the user in again. A **503** `AUTH_UNAVAILABLE` is temporary — retry.
+
 ## TypeScript Support
 
 ### Shared Types from @baasix/types

package/dist/index.cjs

@@ -191,9 +191,11 @@ var HttpClient = class {
       errorData = await response.json();
     } catch {
     }
-    const message = errorData.error?.message || errorData.message || response.statusText || "Request failed";
-    const code = errorData.error?.code ?? errorData.code;
-    const details = errorData.details;
+    const errorObj = typeof errorData.error === "object" && errorData.error !== null ? errorData.error : void 0;
+    const message = errorObj?.message || errorData.message || (typeof errorData.error === "string" ? errorData.error : "") || response.statusText || "Request failed";
+    const code = errorObj?.code ?? errorData.code;
+    const rawDetails = errorObj?.details ?? errorData.details;
+    const details = Array.isArray(rawDetails) ? rawDetails : void 0;
     return new BaasixError(message, response.status, code, details);
   }
   /**
@@ -899,12 +901,15 @@ var AuthModule = class {
    * @example
    * ```typescript
    * const { user, token } = await baasix.auth.verifyMagicLink('verification-token');
+   *
+   * // Enforce the tenant's web/mobile session limits for this sign-in
+   * await baasix.auth.verifyMagicLink(code, { authType: 'web', tenant_Id });
    * ```
    */
-  async verifyMagicLink(token) {
+  async verifyMagicLink(token, opts) {
     const response = await this.client.get(
       `/auth/magiclink/${encodeURIComponent(token)}`,
-      { skipAuth: true }
+      { skipAuth: true, params: opts }
     );
     await this.storeTokens(response);
     this.emitAuthStateChange("SIGNED_IN", response.user);
@@ -915,10 +920,17 @@ var AuthModule = class {
    *
    * @example
    * ```typescript
+   * // Link mode (default): emails a clickable reset URL
    * await baasix.auth.forgotPassword({
    *   email: 'user@example.com',
    *   redirectUrl: 'https://myapp.com/reset-password'
    * });
+   *
+   * // Code mode: emails a short one-time code, no redirectUrl needed
+   * await baasix.auth.forgotPassword({
+   *   email: 'user@example.com',
+   *   mode: 'code'
+   * });
    * ```
    */
   async forgotPassword(options) {
@@ -926,17 +938,18 @@ var AuthModule = class {
       "/auth/password/reset",
       {
         email: options.email,
-        link: options.redirectUrl
+        link: options.redirectUrl,
+        mode: options.mode || "link"
       },
       { skipAuth: true }
     );
   }
   /**
-   * Reset password using a reset token
+   * Reset password using a reset token or emailed one-time code
    *
    * @example
    * ```typescript
-   * await baasix.auth.resetPassword('reset-token', 'newpassword123');
+   * await baasix.auth.resetPassword('reset-token-or-code', 'newpassword123');
    * ```
    */
   async resetPassword(token, newPassword) {