@baasix/sdk 0.1.22 → 0.2.0

package/README.md

@@ -199,6 +199,9 @@ await baasix.auth.sendMagicLink({
 
 // Verify (after user clicks link)
 const { user, token } = await baasix.auth.verifyMagicLink('verification-token');
+
+// Session type / tenant, so the tenant's web/mobile session limits apply
+await baasix.auth.verifyMagicLink(code, { authType: 'web', tenant_Id: 'tenant-uuid' });
 ```
 
 ### Password Reset
@@ -1598,6 +1601,10 @@ try {
 }
 ```
 
+`error.message` is the server's reason, read from `error.message`, a top-level `message`, or a plain-string `error` (`{ "error": "Authentication required" }`), and falls back to the HTTP status text. `error.code` comes from `error.code` or a top-level `code`. `error.details` is set only when the server sends an array of details.
+
+A **401** with code `INVALID_SESSION` means the session is gone (logged out, expired, revoked or suspended user). With `autoRefresh` on, the SDK tries one token refresh and retries the request; if that fails, sign the user in again. A **503** `AUTH_UNAVAILABLE` is temporary — retry.
+
 ## TypeScript Support
 
 ### Shared Types from @baasix/types

package/dist/index.cjs

@@ -191,9 +191,11 @@ var HttpClient = class {
       errorData = await response.json();
     } catch {
     }
-    const message = errorData.error?.message || errorData.message || response.statusText || "Request failed";
-    const code = errorData.error?.code ?? errorData.code;
-    const details = errorData.details;
+    const errorObj = typeof errorData.error === "object" && errorData.error !== null ? errorData.error : void 0;
+    const message = errorObj?.message || errorData.message || (typeof errorData.error === "string" ? errorData.error : "") || response.statusText || "Request failed";
+    const code = errorObj?.code ?? errorData.code;
+    const rawDetails = errorObj?.details ?? errorData.details;
+    const details = Array.isArray(rawDetails) ? rawDetails : void 0;
     return new BaasixError(message, response.status, code, details);
   }
   /**
@@ -899,12 +901,15 @@ var AuthModule = class {
    * @example
    * ```typescript
    * const { user, token } = await baasix.auth.verifyMagicLink('verification-token');
+   *
+   * // Enforce the tenant's web/mobile session limits for this sign-in
+   * await baasix.auth.verifyMagicLink(code, { authType: 'web', tenant_Id });
    * ```
    */
-  async verifyMagicLink(token) {
+  async verifyMagicLink(token, opts) {
     const response = await this.client.get(
       `/auth/magiclink/${encodeURIComponent(token)}`,
-      { skipAuth: true }
+      { skipAuth: true, params: opts }
     );
     await this.storeTokens(response);
     this.emitAuthStateChange("SIGNED_IN", response.user);