@bagelink/auth 1.4.169 → 1.4.174

package/src/types.ts

@@ -1,39 +1,20 @@
 /* eslint-disable no-unused-vars */
 import type { AxiosResponse } from 'axios'
 
-export interface User {
-	id: string
-	email: string
-	first_name?: string
-	last_name?: string
-	is_superuser?: boolean
-	is_active?: boolean
-}
-
-export interface UserRegister {
-	email: string
-	password: string
-	first_name: string
-	last_name: string
-}
-
-export interface NewUser extends UserRegister {
-	confirmPassword: string
-}
-
-export interface UpdatePasswordForm {
-	current_password: string
-	new_password: string
-	confirmNewPassword: string
-}
+// ============================================
+// Auth State & Events
+// ============================================
 
 export enum AuthState {
 	LOGIN = 'login',
 	LOGOUT = 'logout',
 	SIGNUP = 'signup',
 	PASSWORD_RESET = 'password_reset',
+	PASSWORD_CHANGE = 'password_change',
 	PROFILE_UPDATE = 'profile_update',
 	AUTH_CHECK = 'auth_check',
+	EMAIL_VERIFIED = 'email_verified',
+	SESSION_REFRESH = 'session_refresh',
 }
 
 export type AuthEventHandler = () => void
@@ -42,75 +23,301 @@ export interface AuthEventMap {
 	[AuthState.LOGOUT]: AuthEventHandler
 	[AuthState.SIGNUP]: AuthEventHandler
 	[AuthState.PASSWORD_RESET]: AuthEventHandler
+	[AuthState.PASSWORD_CHANGE]: AuthEventHandler
 	[AuthState.PROFILE_UPDATE]: AuthEventHandler
 	[AuthState.AUTH_CHECK]: AuthEventHandler
+	[AuthState.EMAIL_VERIFIED]: AuthEventHandler
+	[AuthState.SESSION_REFRESH]: AuthEventHandler
 }
 
-// API Response Types
-export interface Token {
-	access_token: string
+// ============================================
+// Core Types
+// ============================================
+
+export type AuthenticationAccountType = 'person' | 'entity' | 'service'
+
+export type AuthenticationMethodType =
+	| 'password'
+	| 'email_token'
+	| 'sso'
+	| 'otp'
+
+export interface AuthenticationAccount {
+	created_at?: string
+	updated_at?: string
+	account_type?: AuthenticationAccountType
+	person_id?: string
+	entity_id?: string
+	display_name?: string
+	is_active?: boolean
+	is_verified?: boolean
+	account_metadata?: string
+	last_login_at?: string
+	failed_login_attempts?: number
+	locked_until?: string
+	id: string
 }
 
-export interface PasswordRecovery {
-	email: string
+export interface PersonInfo {
+	id: string
+	name: string
+	email?: string
+	roles: string[]
 }
 
-export interface NewPassword {
-	new_password: string
+export interface AuthMethodInfo {
+	id: string
+	type: string
+	identifier?: string
+	is_verified: boolean
+	last_used?: string
+	use_count: number
 }
 
-export interface UserUpdate {
-	email?: string
-	is_active?: boolean
-	is_superuser?: boolean
-	first_name?: string
-	last_name?: string
+export interface AccountInfo {
+	id: string
+	account_type: string
+	display_name: string
+	is_active: boolean
+	is_verified: boolean
+	last_login?: string
+	authentication_methods: AuthMethodInfo[]
+	person?: PersonInfo
+	entity?: EntityInfo
+}
+
+export interface EntityInfo {
+	id: string
+	name: string
+	type?: string
+	metadata?: Record<string, any>
 }
 
-export interface UserUpdateMe {
+export interface SessionInfo {
+	id: string
+	created_at: string
+	expires_at: string
+	ip_address?: string
+	user_agent?: string
+	is_current?: boolean
+}
+
+// ============================================
+// Unified User Type (Person or Entity)
+// ============================================
+
+/**
+ * Unified user representation that works for both person and entity accounts
+ * This is the primary interface for accessing user data in the application
+ */
+export interface User {
+	/** Unique identifier (person_id or entity_id) */
+	id: string
+	/** Account ID */
+	accountId: string
+	/** Display name */
+	name: string
+	/** Email address (from person or authentication methods) */
 	email?: string
+	/** Account type: 'person', 'entity', or 'service' */
+	type: AuthenticationAccountType
+	/** User roles (only for person accounts) */
+	roles?: string[]
+	/** Is the account active */
+	isActive: boolean
+	/** Is the account verified */
+	isVerified: boolean
+	/** Last login timestamp */
+	lastLogin?: string
+	/** Entity-specific info (only for entity accounts) */
+	entityType?: string
+	/** Additional metadata */
+	metadata?: Record<string, any>
+}
+
+// ============================================
+// Request Types
+// ============================================
+
+export interface RegisterRequest {
+	email: string
+	first_name: string
+	last_name: string
+	phone_number?: string
+	password?: string
+}
+
+export interface UpdateAccountRequest {
 	first_name?: string
 	last_name?: string
+	email?: string
+	phone_number?: string
+}
+
+export interface PasswordLoginRequest {
+	email: string
+	password: string
 }
 
-export interface UpdatePassword {
+export interface ChangePasswordRequest {
 	current_password: string
 	new_password: string
 }
 
-export interface UserCreate {
+export interface ForgotPasswordRequest {
 	email: string
-	password: string
-	first_name?: string
-	last_name?: string
-	is_active?: boolean
-	is_superuser?: boolean
 }
 
-export interface SanitizedUserOut {
-	email: string
-	is_active?: boolean
-	is_superuser?: boolean
-	first_name?: string
-	last_name?: string
-	id: string
+export interface ResetPasswordRequest {
+	token: string
+	new_password: string
+}
+
+export interface SendVerificationRequest {
+	email?: string
 }
 
-export interface SanitizedUserList {
-	data: SanitizedUserOut[]
-	count: number
-}
-
-// API Response Types
-export type LoginResponse = AxiosResponse<Token>
-export type PasswordRecoveryResponse = AxiosResponse
-export type ResetPasswordResponse = AxiosResponse
-export type GetUserResponse = AxiosResponse<SanitizedUserOut>
-export type UpdateUserResponse = AxiosResponse<SanitizedUserOut>
-export type DeleteUserResponse = AxiosResponse
-export type GetUsersResponse = AxiosResponse<SanitizedUserList>
-export type CreateUserResponse = AxiosResponse<SanitizedUserOut>
-export type GetMeResponse = AxiosResponse<SanitizedUserOut>
-export type UpdateMeResponse = AxiosResponse<SanitizedUserOut>
-export type UpdatePasswordResponse = AxiosResponse
-export type SignupResponse = AxiosResponse<SanitizedUserOut>
+export interface VerifyEmailRequest {
+	token: string
+}
+
+// Client-side helper types
+export interface NewUser extends RegisterRequest {
+	confirmPassword: string
+}
+
+export interface UpdatePasswordForm extends ChangePasswordRequest {
+	confirmNewPassword: string
+}
+
+// ============================================
+// Response Types
+// ============================================
+
+export interface MessageResponse {
+	message: string
+}
+
+export interface AuthStatusResponse {
+	status: string
+	methods: string[]
+}
+
+export interface AvailableMethodsResponse {
+	available_methods: { [key: string]: any }[]
+}
+
+export interface OTPMetadata {
+	nonce: string
+	verification_hash: string
+	timestamp: number
+	expires_in_minutes: number
+	autofill: { [key: string]: any }
+}
+
+export interface SSOMetadata {
+	provider: string
+	sso_user_info: { [key: string]: any }
+	can_create_account?: boolean
+}
+
+export interface AuthenticationResponse {
+	success: boolean
+	account_id?: string
+	session_token?: string
+	requires_verification?: boolean
+	verification_method?: AuthenticationMethodType
+	message?: string
+	metadata?: OTPMetadata | SSOMetadata | { [key: string]: any }
+}
+
+export interface SessionListResponse {
+	account_id: string
+	sessions: SessionInfo[]
+}
+
+// ============================================
+// Axios Response Types
+// ============================================
+
+export type LoginResponse = AxiosResponse<AuthenticationResponse>
+export type RegisterResponse = AxiosResponse<AuthenticationResponse>
+export type LogoutResponse = AxiosResponse<MessageResponse>
+export type GetMeResponse = AxiosResponse<AccountInfo>
+export type UpdateMeResponse = AxiosResponse<AccountInfo>
+export type DeleteMeResponse = AxiosResponse<MessageResponse>
+export type GetAccountResponse = AxiosResponse<AccountInfo>
+export type UpdateAccountResponse = AxiosResponse<AccountInfo>
+export type DeleteAccountResponse = AxiosResponse<MessageResponse>
+export type ActivateAccountResponse = AxiosResponse<AccountInfo>
+export type DeactivateAccountResponse = AxiosResponse<AccountInfo>
+export type ChangePasswordResponse = AxiosResponse<MessageResponse>
+export type ForgotPasswordResponse = AxiosResponse<MessageResponse>
+export type ResetPasswordResponse = AxiosResponse<MessageResponse>
+export type VerifyResetTokenResponse = AxiosResponse<MessageResponse>
+export type SendVerificationResponse = AxiosResponse<MessageResponse>
+export type VerifyEmailResponse = AxiosResponse<MessageResponse>
+export type RefreshSessionResponse = AxiosResponse<AuthenticationResponse>
+export type GetSessionsResponse = AxiosResponse<SessionListResponse>
+export type DeleteSessionResponse = AxiosResponse<MessageResponse>
+export type DeleteAllSessionsResponse = AxiosResponse<MessageResponse>
+export type CleanupSessionsResponse = AxiosResponse<MessageResponse>
+export type GetMethodsResponse = AxiosResponse<AvailableMethodsResponse>
+
+// ============================================
+// Helper Functions (exported for convenience)
+// ============================================
+
+/**
+ * Extract unified user from account info
+ */
+export function accountToUser(account: AccountInfo | null): User | null {
+	if (account === null) return null
+
+	// Person account - most common case
+	if (account.person !== undefined) {
+		return {
+			id: account.person.id,
+			accountId: account.id,
+			name: account.person.name,
+			email: account.person.email,
+			type: account.account_type as AuthenticationAccountType,
+			roles: account.person.roles,
+			isActive: account.is_active,
+			isVerified: account.is_verified,
+			lastLogin: account.last_login,
+		}
+	}
+
+	// Entity account
+	if (account.entity !== undefined) {
+		return {
+			id: account.entity.id,
+			accountId: account.id,
+			name: account.entity.name,
+			type: account.account_type as AuthenticationAccountType,
+			isActive: account.is_active,
+			isVerified: account.is_verified,
+			lastLogin: account.last_login,
+			entityType: account.entity.type,
+			metadata: account.entity.metadata,
+		}
+	}
+
+	// Fallback - use account info directly
+	// Extract email from authentication methods
+	const emailMethod = account.authentication_methods?.find(
+		m => m.type === 'password' || m.type === 'email_token',
+	)
+
+	return {
+		id: account.id,
+		accountId: account.id,
+		name: account.display_name,
+		email: emailMethod?.identifier,
+		type: account.account_type as AuthenticationAccountType,
+		isActive: account.is_active,
+		isVerified: account.is_verified,
+		lastLogin: account.last_login,
+	}
+}