@baasix/sdk 0.1.22 → 0.2.1

package/dist/index.js

@@ -189,9 +189,11 @@ var HttpClient = class {
       errorData = await response.json();
     } catch {
     }
-    const message = errorData.error?.message || errorData.message || response.statusText || "Request failed";
-    const code = errorData.error?.code ?? errorData.code;
-    const details = errorData.details;
+    const errorObj = typeof errorData.error === "object" && errorData.error !== null ? errorData.error : void 0;
+    const message = errorObj?.message || errorData.message || (typeof errorData.error === "string" ? errorData.error : "") || response.statusText || "Request failed";
+    const code = errorObj?.code ?? errorData.code;
+    const rawDetails = errorObj?.details ?? errorData.details;
+    const details = rawDetails == null ? void 0 : Array.isArray(rawDetails) ? rawDetails : typeof rawDetails === "object" ? [rawDetails] : [{ message: String(rawDetails) }];
     return new BaasixError(message, response.status, code, details);
   }
   /**
@@ -897,12 +899,23 @@ var AuthModule = class {
    * @example
    * ```typescript
    * const { user, token } = await baasix.auth.verifyMagicLink('verification-token');
+   *
+   * // Enforce the tenant's web/mobile session limits for this sign-in
+   * await baasix.auth.verifyMagicLink(code, { authType: 'web', tenant_Id });
+   *
+   * // Emailed code + email: wrong codes are counted and the code is burned after 5
+   * await baasix.auth.verifyMagicLink(code, { email: 'user@example.com', authType: 'web' });
    * ```
    */
-  async verifyMagicLink(token) {
-    const response = await this.client.get(
-      `/auth/magiclink/${encodeURIComponent(token)}`,
+  async verifyMagicLink(token, opts) {
+    const { email, ...params } = opts || {};
+    const response = email ? await this.client.post(
+      "/auth/magiclink/verify",
+      { email, code: token, ...params },
       { skipAuth: true }
+    ) : await this.client.get(
+      `/auth/magiclink/${encodeURIComponent(token)}`,
+      { skipAuth: true, params }
     );
     await this.storeTokens(response);
     this.emitAuthStateChange("SIGNED_IN", response.user);
@@ -943,9 +956,20 @@ var AuthModule = class {
    * @example
    * ```typescript
    * await baasix.auth.resetPassword('reset-token-or-code', 'newpassword123');
+   *
+   * // Emailed code + email: wrong codes are counted and the code is burned after 5
+   * await baasix.auth.resetPassword('K7M2PQ9X', 'newpassword123', { email: 'user@example.com' });
    * ```
    */
-  async resetPassword(token, newPassword) {
+  async resetPassword(token, newPassword, opts) {
+    if (opts?.email) {
+      await this.client.post(
+        "/auth/password/reset/verify",
+        { email: opts.email, code: token, password: newPassword },
+        { skipAuth: true }
+      );
+      return;
+    }
     await this.client.post(
       `/auth/password/reset/${encodeURIComponent(token)}`,
       { password: newPassword },