@bagelink/auth 1.4.169 → 1.4.174

package/src/api.ts

@@ -1,25 +1,34 @@
 import type { AxiosInstance, InternalAxiosRequestConfig } from 'axios'
 import type {
-	User,
-	NewUser,
-	UpdatePasswordForm,
-	Token,
-	NewPassword,
-	UserCreate,
-	SanitizedUserOut,
-	SanitizedUserList,
+	RegisterRequest,
+	UpdateAccountRequest,
+	ChangePasswordRequest,
+	ResetPasswordRequest,
+	SendVerificationRequest,
+	AuthenticationAccount,
 	LoginResponse,
-	PasswordRecoveryResponse,
-	ResetPasswordResponse,
-	GetUserResponse,
-	UpdateUserResponse,
-	DeleteUserResponse,
-	GetUsersResponse,
-	CreateUserResponse,
+	RegisterResponse,
+	LogoutResponse,
 	GetMeResponse,
 	UpdateMeResponse,
-	UpdatePasswordResponse,
-	SignupResponse,
+	DeleteMeResponse,
+	GetAccountResponse,
+	UpdateAccountResponse,
+	DeleteAccountResponse,
+	ActivateAccountResponse,
+	DeactivateAccountResponse,
+	ChangePasswordResponse,
+	ForgotPasswordResponse,
+	ResetPasswordResponse,
+	VerifyResetTokenResponse,
+	SendVerificationResponse,
+	VerifyEmailResponse,
+	RefreshSessionResponse,
+	GetSessionsResponse,
+	DeleteSessionResponse,
+	DeleteAllSessionsResponse,
+	CleanupSessionsResponse,
+	GetMethodsResponse,
 } from './types'
 import { createAxiosInstance } from './utils'
 
@@ -33,98 +42,247 @@ export class AuthApi {
 
 	private setupInterceptors() {
 		this.api.interceptors.request.use((config: InternalAxiosRequestConfig) => {
-			const token = localStorage.getItem('access_token')
-			if (token !== null && config.headers) {
-				config.headers.Authorization = `Bearer ${token}`
+			const sessionToken = localStorage.getItem('session_token')
+			if (sessionToken !== null && config.headers) {
+				config.headers.Authorization = `Bearer ${sessionToken}`
 			}
 
+			// Handle password reset token from URL
 			const urlParams = new URLSearchParams(window.location.search)
 			const resetToken = urlParams.get('token')
-
 			if (resetToken !== null && config.headers) {
-				config.headers.Authorization = `Bearer ${resetToken}`
+				config.headers['X-Reset-Token'] = resetToken
 			}
+
 			return config
 		})
 	}
 
-	async login(username: string, password: string): Promise<LoginResponse> {
-		const { data } = await this.api.post<Token>('/auth/login', {
-			username: username.toLowerCase(),
-			password,
+	// ============================================
+	// Authentication Methods
+	// ============================================
+
+	/**
+	 * Get available authentication methods
+	 */
+	async getAuthMethods(): Promise<GetMethodsResponse> {
+		return this.api.get('/authentication/methods')
+	}
+
+	/**
+	 * Register a new account
+	 */
+	async register(data: RegisterRequest): Promise<RegisterResponse> {
+		const response = await this.api.post('/authentication/register', {
+			...data,
+			email: data.email.toLowerCase(),
 		})
-		localStorage.setItem('access_token', data.access_token)
-		return { data } as LoginResponse
+
+		// Store session token if provided
+		if (response.data.session_token) {
+			localStorage.setItem('session_token', response.data.session_token)
+		}
+
+		return response
 	}
 
-	logout() {
-		localStorage.removeItem('access_token')
-		window.location.reload()
+	/**
+	 * Login with password
+	 */
+	async login(email: string, password: string): Promise<LoginResponse> {
+		const response = await this.api.post('/authentication/login/password', {
+			email: email.toLowerCase(),
+			password,
+		})
+
+		// Store session token if provided
+		if (response.data.session_token) {
+			localStorage.setItem('session_token', response.data.session_token)
+		}
+
+		return response
 	}
 
-	async passwordRecovery(email?: string): Promise<PasswordRecoveryResponse> {
-		return this.api.post('/auth/password-recovery', { email })
+	/**
+	 * Logout and clear session
+	 */
+	async logout(): Promise<LogoutResponse> {
+		const response = await this.api.post('/authentication/logout', {})
+		localStorage.removeItem('session_token')
+		return response
 	}
 
-	async resetPassword(
-		newPassword: NewPassword['new_password']
-	): Promise<ResetPasswordResponse> {
-		return this.api.post('/auth/reset-password', { new_password: newPassword })
+	/**
+	 * Refresh current session
+	 */
+	async refreshSession(): Promise<RefreshSessionResponse> {
+		const response = await this.api.post('/authentication/refresh', {})
+
+		// Update session token if provided
+		if (response.data.session_token) {
+			localStorage.setItem('session_token', response.data.session_token)
+		}
+
+		return response
 	}
 
+	// ============================================
+	// Current User (Me) Methods
+	// ============================================
+
+	/**
+	 * Get current user account info
+	 */
 	async getCurrentUser(): Promise<GetMeResponse> {
-		return this.api.get<SanitizedUserOut>('/users/me')
+		return this.api.get('/authentication/me')
 	}
 
-	async signup(user: NewUser): Promise<SignupResponse> {
-		return this.api.post<SanitizedUserOut>('/users/signup', {
-			email: user.email.toLowerCase(),
-			password: user.password,
-			first_name: user.first_name,
-			last_name: user.last_name,
-		})
+	/**
+	 * Update current user profile
+	 */
+	async updateCurrentUser(data: UpdateAccountRequest): Promise<UpdateMeResponse> {
+		return this.api.patch('/authentication/me', data)
 	}
 
-	async updatePassword(
-		form: UpdatePasswordForm
-	): Promise<UpdatePasswordResponse> {
-		return this.api.patch('/users/me/password', {
-			current_password: form.current_password,
-			new_password: form.new_password,
-		})
+	/**
+	 * Delete current user account
+	 */
+	async deleteCurrentUser(): Promise<DeleteMeResponse> {
+		const response = await this.api.delete('/authentication/me')
+		localStorage.removeItem('session_token')
+		return response
 	}
 
-	async updateUserProfile(user: Partial<User>): Promise<UpdateMeResponse> {
-		return this.api.patch<SanitizedUserOut>('/users/me', user)
+	// ============================================
+	// Account Management (Admin)
+	// ============================================
+
+	/**
+	 * Get account information by ID
+	 */
+	async getAccount(accountId: string): Promise<GetAccountResponse> {
+		return this.api.get(`/authentication/account/${accountId}`)
 	}
 
-	async setUserStatus(
-		userId: string,
-		isActive: boolean
-	): Promise<UpdateUserResponse> {
-		return this.api.patch<SanitizedUserOut>(`/users/${userId}`, {
-			is_active: isActive,
+	/**
+	 * Update account by ID
+	 */
+	async updateAccount(
+		accountId: string,
+		data: UpdateAccountRequest
+	): Promise<UpdateAccountResponse> {
+		return this.api.patch(`/authentication/account/${accountId}`, data)
+	}
+
+	/**
+	 * Delete account by ID
+	 */
+	async deleteAccount(accountId: string): Promise<DeleteAccountResponse> {
+		return this.api.delete(`/authentication/account/${accountId}`)
+	}
+
+	/**
+	 * Activate account by ID
+	 */
+	async activateAccount(accountId: string): Promise<ActivateAccountResponse> {
+		return this.api.post(`/authentication/account/${accountId}/activate`, {})
+	}
+
+	/**
+	 * Deactivate account by ID
+	 */
+	async deactivateAccount(
+		accountId: string
+	): Promise<DeactivateAccountResponse> {
+		return this.api.post(`/authentication/account/${accountId}/deactivate`, {})
+	}
+
+	// ============================================
+	// Password Management
+	// ============================================
+
+	/**
+	 * Change password (requires current password)
+	 */
+	async changePassword(data: ChangePasswordRequest): Promise<ChangePasswordResponse> {
+		return this.api.post('/authentication/password/change', data)
+	}
+
+	/**
+	 * Initiate forgot password flow
+	 */
+	async forgotPassword(email: string): Promise<ForgotPasswordResponse> {
+		return this.api.post('/authentication/password/forgot', {
+			email: email.toLowerCase(),
 		})
 	}
 
-	async deleteUser(userId: string): Promise<DeleteUserResponse> {
-		return this.api.delete(`/users/${userId}`)
+	/**
+	 * Verify password reset token
+	 */
+	async verifyResetToken(token: string): Promise<VerifyResetTokenResponse> {
+		return this.api.get(`/authentication/password/verify-reset-token/${token}`)
 	}
 
-	async getUsers(
-		limit: number = 100,
-		skip?: number
-	): Promise<GetUsersResponse> {
-		return this.api.get<SanitizedUserList>('/users/', {
-			params: { skip, limit },
+	/**
+	 * Reset password with token
+	 */
+	async resetPassword(data: ResetPasswordRequest): Promise<ResetPasswordResponse> {
+		return this.api.post('/authentication/password/reset', data)
+	}
+
+	// ============================================
+	// Email Verification
+	// ============================================
+
+	/**
+	 * Send email verification
+	 */
+	async sendVerification(
+		data: SendVerificationRequest = {},
+		user?: AuthenticationAccount
+	): Promise<SendVerificationResponse> {
+		return this.api.post('/authentication/verify/send', data, {
+			params: user ? { user } : undefined,
 		})
 	}
 
-	async createUser(user: UserCreate): Promise<CreateUserResponse> {
-		return this.api.post<SanitizedUserOut>('/users/', user)
+	/**
+	 * Verify email with token
+	 */
+	async verifyEmail(token: string): Promise<VerifyEmailResponse> {
+		return this.api.post('/authentication/verify/email', { token })
+	}
+
+	// ============================================
+	// Session Management
+	// ============================================
+
+	/**
+	 * Get sessions for an account
+	 */
+	async getSessions(accountId: string): Promise<GetSessionsResponse> {
+		return this.api.get(`/authentication/sessions/${accountId}`)
+	}
+
+	/**
+	 * Revoke a specific session
+	 */
+	async revokeSession(sessionToken: string): Promise<DeleteSessionResponse> {
+		return this.api.delete(`/authentication/sessions/${sessionToken}`)
+	}
+
+	/**
+	 * Revoke all sessions for an account
+	 */
+	async revokeAllSessions(accountId: string): Promise<DeleteAllSessionsResponse> {
+		return this.api.delete(`/authentication/sessions/account/${accountId}`)
 	}
 
-	async getUser(userId: string): Promise<GetUserResponse> {
-		return this.api.get<SanitizedUserOut>(`/users/${userId}`)
+	/**
+	 * Cleanup expired sessions (admin)
+	 */
+	async cleanupSessions(): Promise<CleanupSessionsResponse> {
+		return this.api.post('/authentication/cleanup-sessions', {})
 	}
 }