@bagelink/auth 1.7.94 → 1.7.98

package/dist/index.mjs

@@ -63,9 +63,22 @@ function queryParams() {
 class AuthApi {
   constructor(baseURL = "") {
     __publicField(this, "api");
+    __publicField(this, "currentTenantId", null);
     this.api = createAxiosInstance(baseURL);
     this.setupInterceptors();
   }
+  /**
+   * Set the current tenant ID for multi-tenant requests
+   */
+  setTenantId(tenantId) {
+    this.currentTenantId = tenantId;
+  }
+  /**
+   * Get the current tenant ID
+   */
+  getTenantId() {
+    return this.currentTenantId;
+  }
   setupInterceptors() {
     this.api.interceptors.request.use((config) => {
       const urlParams = new URLSearchParams(window.location.search);
@@ -73,6 +86,9 @@ class AuthApi {
       if (resetToken !== null) {
         config.headers["X-Reset-Token"] = resetToken;
       }
+      if (this.currentTenantId !== null) {
+        config.headers["X-Tenant-ID"] = this.currentTenantId;
+      }
       return config;
     });
   }
@@ -83,13 +99,13 @@ class AuthApi {
    * Get available authentication methods
    */
   async getAuthMethods() {
-    return this.api.get("/authentication/methods");
+    return this.api.get("authentication/methods");
   }
   /**
    * Register a new account
    */
   async register(data) {
-    return this.api.post("/authentication/register", {
+    return this.api.post("authentication/register", {
       ...data,
       email: data.email.toLowerCase()
     });
@@ -98,7 +114,7 @@ class AuthApi {
    * Login with password
    */
   async login(email, password) {
-    return this.api.post("/authentication/login/password", {
+    return this.api.post("authentication/login/password", {
       email: email.toLowerCase(),
       password
     });
@@ -107,13 +123,13 @@ class AuthApi {
    * Logout and clear session
    */
   async logout() {
-    return this.api.post("/authentication/logout", {});
+    return this.api.post("authentication/logout", {});
   }
   /**
    * Refresh current session
    */
   async refreshSession() {
-    return this.api.post("/authentication/refresh", {});
+    return this.api.post("authentication/refresh", {});
   }
   // ============================================
   // SSO Authentication Methods
@@ -123,7 +139,7 @@ class AuthApi {
    * Returns authorization URL to redirect user to
    */
   async initiateSSO(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/initiate`, {
+    return this.api.post(`authentication/sso/${data.provider}/initiate`, {
       redirect_uri: data.redirect_uri,
       state: data.state
     });
@@ -132,7 +148,7 @@ class AuthApi {
    * Complete SSO login after callback from provider
    */
   async ssoCallback(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/callback`, {
+    return this.api.post(`authentication/sso/${data.provider}/callback`, {
       code: data.code,
       state: data.state
     });
@@ -141,7 +157,7 @@ class AuthApi {
    * Link an SSO provider to existing account
    */
   async linkSSOProvider(data) {
-    return this.api.post(`/authentication/sso/${data.provider}/link`, {
+    return this.api.post(`authentication/sso/${data.provider}/link`, {
       code: data.code,
       state: data.state
     });
@@ -150,7 +166,7 @@ class AuthApi {
    * Unlink an SSO provider from account
    */
   async unlinkSSOProvider(provider) {
-    return this.api.delete(`/authentication/sso/${provider}/unlink`);
+    return this.api.delete(`authentication/sso/${provider}/unlink`);
   }
   // ============================================
   // Current User (Me) Methods
@@ -159,19 +175,19 @@ class AuthApi {
    * Get current user account info
    */
   async getCurrentUser() {
-    return this.api.get("/authentication/me");
+    return this.api.get("authentication/me");
   }
   /**
    * Update current user profile
    */
   async updateCurrentUser(data) {
-    return this.api.patch("/authentication/me", data);
+    return this.api.patch("authentication/me", data);
   }
   /**
    * Delete current user account
    */
   async deleteCurrentUser() {
-    return this.api.delete("/authentication/me");
+    return this.api.delete("authentication/me");
   }
   // ============================================
   // Account Management (Admin)
@@ -180,31 +196,31 @@ class AuthApi {
    * Get account information by ID
    */
   async getAccount(accountId) {
-    return this.api.get(`/authentication/account/${accountId}`);
+    return this.api.get(`authentication/account/${accountId}`);
   }
   /**
    * Update account by ID
    */
   async updateAccount(accountId, data) {
-    return this.api.patch(`/authentication/account/${accountId}`, data);
+    return this.api.patch(`authentication/account/${accountId}`, data);
   }
   /**
    * Delete account by ID
    */
   async deleteAccount(accountId) {
-    return this.api.delete(`/authentication/account/${accountId}`);
+    return this.api.delete(`authentication/account/${accountId}`);
   }
   /**
    * Activate account by ID
    */
   async activateAccount(accountId) {
-    return this.api.post(`/authentication/account/${accountId}/activate`, {});
+    return this.api.post(`authentication/account/${accountId}/activate`, {});
   }
   /**
    * Deactivate account by ID
    */
   async deactivateAccount(accountId) {
-    return this.api.post(`/authentication/account/${accountId}/deactivate`, {});
+    return this.api.post(`authentication/account/${accountId}/deactivate`, {});
   }
   // ============================================
   // Password Management
@@ -213,13 +229,13 @@ class AuthApi {
    * Change password (requires current password)
    */
   async changePassword(data) {
-    return this.api.post("/authentication/password/change", data);
+    return this.api.post("authentication/password/change", data);
   }
   /**
    * Initiate forgot password flow
    */
   async forgotPassword(email) {
-    return this.api.post("/authentication/password/forgot", {
+    return this.api.post("authentication/password/forgot", {
       email: email.toLowerCase()
     });
   }
@@ -227,13 +243,13 @@ class AuthApi {
    * Verify password reset token
    */
   async verifyResetToken(token) {
-    return this.api.get(`/authentication/password/verify-reset-token/${token}`);
+    return this.api.get(`authentication/password/verify-reset-token/${token}`);
   }
   /**
    * Reset password with token
    */
   async resetPassword(data) {
-    return this.api.post("/authentication/password/reset", data);
+    return this.api.post("authentication/password/reset", data);
   }
   // ============================================
   // Email Verification
@@ -242,7 +258,7 @@ class AuthApi {
    * Send email verification
    */
   async sendVerification(data = {}, user) {
-    return this.api.post("/authentication/verify/send", data, {
+    return this.api.post("authentication/verify/send", data, {
       params: user ? { user } : void 0
     });
   }
@@ -250,7 +266,7 @@ class AuthApi {
    * Verify email with token
    */
   async verifyEmail(token) {
-    return this.api.post("/authentication/verify/email", { token });
+    return this.api.post("authentication/verify/email", { token });
   }
   // ============================================
   // Session Management
@@ -259,25 +275,34 @@ class AuthApi {
    * Get sessions for an account
    */
   async getSessions(accountId) {
-    return this.api.get(`/authentication/sessions/${accountId}`);
+    return this.api.get(`authentication/sessions/${accountId}`);
   }
   /**
    * Revoke a specific session
    */
   async revokeSession(sessionToken) {
-    return this.api.delete(`/authentication/sessions/${sessionToken}`);
+    return this.api.delete(`authentication/sessions/${sessionToken}`);
   }
   /**
    * Revoke all sessions for an account
    */
   async revokeAllSessions(accountId) {
-    return this.api.delete(`/authentication/sessions/account/${accountId}`);
+    return this.api.delete(`authentication/sessions/account/${accountId}`);
   }
   /**
    * Cleanup expired sessions (admin)
    */
   async cleanupSessions() {
-    return this.api.post("/authentication/cleanup-sessions", {});
+    return this.api.post("authentication/cleanup-sessions", {});
+  }
+  // ============================================
+  // Multi-Tenancy Methods
+  // ============================================
+  /**
+   * Get list of tenants the authenticated user belongs to
+   */
+  async getTenants() {
+    return this.api.get("tenants");
   }
 }
 const _hoisted_1$8 = { class: "txt20 bold mb-1" };
@@ -1900,35 +1925,24 @@ function accountToUser(account) {
   if (account === null) {
     return null;
   }
-  if (account.person !== void 0) {
+  const hasPersonLinked = account.person !== void 0 && account.person !== null;
+  if (hasPersonLinked) {
     return {
       id: account.person.id,
       accountId: account.id,
       name: account.person.name,
-      email: account.person.email,
+      email: account.person.email ?? void 0,
       type: account.account_type,
       roles: account.person.roles,
       isActive: account.is_active,
       isVerified: account.is_verified,
       person: account.person,
-      lastLogin: account.last_login
-    };
-  }
-  if (account.entity !== void 0) {
-    return {
-      id: account.entity.id,
-      accountId: account.id,
-      name: account.entity.name,
-      type: account.account_type,
-      isActive: account.is_active,
-      isVerified: account.is_verified,
-      lastLogin: account.last_login,
-      entityType: account.entity.type,
-      metadata: account.entity.metadata
+      lastLogin: account.last_login ?? void 0,
+      hasPersonLinked: true
     };
   }
   const emailMethod = account.authentication_methods.find(
-    (m) => m.type === "password" || m.type === "email_token"
+    (m) => m.type === "password" || m.type === "email_token" || m.type === "sso"
   );
   return {
     id: account.id,
@@ -1938,7 +1952,8 @@ function accountToUser(account) {
     type: account.account_type,
     isActive: account.is_active,
     isVerified: account.is_verified,
-    lastLogin: account.last_login
+    lastLogin: account.last_login ?? void 0,
+    hasPersonLinked: false
   };
 }
 const DEFAULT_REDIRECT_CONFIG = {
@@ -1963,6 +1978,8 @@ let redirectConfig = null;
 let autoRedirectRouter = null;
 let cachedAuthGuard = null;
 const accountInfo = ref(null);
+const tenants = ref([]);
+const currentTenant = ref(null);
 function getRedirectConfig() {
   if (!redirectConfig) {
     throw new Error("Redirect config not initialized. Did you call createAuth with redirect config?");
@@ -2133,15 +2150,11 @@ function useAuth() {
   };
   const getAccountType = () => {
     var _a;
-    return ((_a = user.value) == null ? void 0 : _a.type) ?? "person";
+    return ((_a = user.value) == null ? void 0 : _a.type) ?? "identity";
   };
   const isPersonAccount = () => {
     var _a;
-    return ((_a = user.value) == null ? void 0 : _a.type) === "person";
-  };
-  const isEntityAccount = () => {
-    var _a;
-    return ((_a = user.value) == null ? void 0 : _a.type) === "entity";
+    return ((_a = user.value) == null ? void 0 : _a.hasPersonLinked) === true;
   };
   async function logout() {
     const logoutPromise = api.logout();
@@ -2174,6 +2187,45 @@ function useAuth() {
       return false;
     }
   }
+  async function loadTenants() {
+    try {
+      const { data } = await api.getTenants();
+      tenants.value = data;
+      if (currentTenant.value === null && tenants.value.length > 0) {
+        const firstActiveTenant = tenants.value.find((t) => t.status === "active");
+        if (firstActiveTenant !== void 0) {
+          setTenant(firstActiveTenant.id);
+        }
+      }
+      return tenants.value;
+    } catch {
+      tenants.value = [];
+      return [];
+    }
+  }
+  function setTenant(tenantId) {
+    if (tenantId === null) {
+      currentTenant.value = null;
+      api.setTenantId(null);
+      return;
+    }
+    const tenant = tenants.value.find((t) => t.id === tenantId);
+    if (tenant !== void 0) {
+      currentTenant.value = tenant;
+      api.setTenantId(tenantId);
+    } else {
+      throw new Error(`Tenant with ID ${tenantId} not found`);
+    }
+  }
+  function switchTenant(tenantId) {
+    setTenant(tenantId);
+  }
+  function getTenants() {
+    return tenants.value;
+  }
+  function getCurrentTenant() {
+    return currentTenant.value;
+  }
   async function signup(newUser) {
     const hasPassword = newUser.password !== void 0 && newUser.password.length > 0;
     if (hasPassword && newUser.password !== newUser.confirmPassword) {
@@ -2288,6 +2340,9 @@ function useAuth() {
     accountInfo,
     // SSO Providers (ready to use!)
     sso,
+    // Multi-Tenancy State
+    tenants,
+    currentTenant,
     // Getters
     getFullName,
     getIsLoggedIn,
@@ -2295,7 +2350,8 @@ function useAuth() {
     getRoles,
     getAccountType,
     isPersonAccount,
-    isEntityAccount,
+    getTenants,
+    getCurrentTenant,
     // Authentication Actions
     login,
     logout,
@@ -2325,7 +2381,11 @@ function useAuth() {
     // Session Management
     getSessions,
     revokeSession,
-    revokeAllSessions
+    revokeAllSessions,
+    // Multi-Tenancy Actions
+    loadTenants,
+    setTenant,
+    switchTenant
   };
 }
 const useAuth$1 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({

package/dist/types.d.ts

@@ -22,7 +22,20 @@ export interface AuthEventMap {
     [AuthState.EMAIL_VERIFIED]: AuthEventHandler;
     [AuthState.SESSION_REFRESH]: AuthEventHandler;
 }
-export type AuthenticationAccountType = 'person' | 'entity' | 'service';
+export type AuthenticationAccountType = 'identity' | string;
+export type TenantStatus = 'active' | 'suspended' | 'archived';
+export interface TenantInfo {
+    id: string;
+    name: string;
+    slug: string;
+    parent_id: string | null;
+    settings: Record<string, any> | null;
+    status: TenantStatus;
+    suspended_at: string | null;
+    suspended_reason: string | null;
+    created_at: string;
+    updated_at: string;
+}
 export type AuthenticationMethodType = 'password' | 'email_token' | 'sso' | 'otp';
 export type SSOProvider = 'google' | 'microsoft' | 'github' | 'okta' | 'apple' | 'facebook';
 export interface AuthenticationAccount {
@@ -43,11 +56,11 @@ export interface AuthenticationAccount {
 export interface PersonInfo {
     id: string;
     name: string;
-    email?: string;
-    phone?: string;
-    roles: string[];
     first_name: string;
     last_name: string;
+    email?: string | null;
+    phone_number?: string | null;
+    roles: string[];
 }
 export interface AuthMethodInfo {
     id: string;
@@ -65,10 +78,9 @@ export interface AccountInfo {
     display_name: string;
     is_active: boolean;
     is_verified: boolean;
-    last_login?: string;
+    last_login?: string | null;
     authentication_methods: AuthMethodInfo[];
-    person?: PersonInfo;
-    entity?: EntityInfo;
+    person?: PersonInfo | null;
 }
 export interface EntityInfo {
     id: string;
@@ -85,21 +97,21 @@ export interface SessionInfo {
     is_current?: boolean;
 }
 /**
- * Unified user representation that works for both person and entity accounts
- * This is the primary interface for accessing user data in the application
+ * Unified user representation
+ * All accounts are "identity" accounts that may be linked to a person
  */
 export interface User {
-    /** Unique identifier (person_id or entity_id) */
+    /** Unique identifier (person_id if linked, otherwise identity_id) */
     id: string;
-    /** Account ID */
+    /** Identity/Account ID */
     accountId: string;
     /** Display name */
     name: string;
     /** Email address (from person or authentication methods) */
     email?: string;
-    /** Account type: 'person', 'entity', or 'service' */
+    /** Account type (always 'identity') */
     type: AuthenticationAccountType;
-    /** User roles (only for person accounts) */
+    /** User roles (only when linked to person) */
     roles?: string[];
     /** Is the account active */
     isActive: boolean;
@@ -107,12 +119,10 @@ export interface User {
     isVerified: boolean;
     /** Last login timestamp */
     lastLogin?: string;
-    /** Entity-specific info (only for entity accounts) */
-    entityType?: string;
-    /** Additional metadata */
-    metadata?: Record<string, any>;
-    /** Person-specific info (only for person accounts) */
+    /** Person info (if identity is linked to a person) */
     person?: PersonInfo;
+    /** Whether identity is linked to a person */
+    hasPersonLinked: boolean;
 }
 export interface RegisterRequest {
     email: string;
@@ -248,7 +258,9 @@ export type SSOInitiateResponse = AxiosResponse<{
 export type SSOCallbackResponse = AxiosResponse<AuthenticationResponse>;
 export type SSOLinkResponse = AxiosResponse<MessageResponse>;
 export type SSOUnlinkResponse = AxiosResponse<MessageResponse>;
+export type GetTenantsResponse = AxiosResponse<TenantInfo[]>;
 /**
  * Extract unified user from account info
+ * All accounts are identities that may be linked to a person
  */
 export declare function accountToUser(account: AccountInfo | null): User | null;

package/dist/useAuth.d.ts

@@ -1,5 +1,5 @@
 import { App, ObjectPlugin } from 'vue';
-import { AccountInfo, User, NewUser, UpdatePasswordForm, UpdateAccountRequest, AuthEventMap, SSOProvider, SSOInitiateRequest, SSOCallbackRequest, SSOLinkRequest, AuthState } from './types';
+import { AccountInfo, User, NewUser, UpdatePasswordForm, UpdateAccountRequest, AuthEventMap, SSOProvider, SSOInitiateRequest, SSOCallbackRequest, SSOLinkRequest, TenantInfo, AuthState } from './types';
 import { RedirectConfig, NormalizedRedirectConfig } from './types/redirect';
 interface InitParams {
     baseURL: string;
@@ -37,7 +37,7 @@ export declare function useAuth(): {
         display_name: string;
         is_active: boolean;
         is_verified: boolean;
-        last_login?: string | undefined;
+        last_login?: string | null | undefined;
         authentication_methods: {
             id: string;
             type: string;
@@ -51,25 +51,19 @@ export declare function useAuth(): {
         person?: {
             id: string;
             name: string;
-            email?: string | undefined;
-            phone?: string | undefined;
-            roles: string[];
             first_name: string;
             last_name: string;
-        } | undefined;
-        entity?: {
-            id: string;
-            name: string;
-            type?: string | undefined;
-            metadata?: Record<string, any> | undefined;
-        } | undefined;
+            email?: string | null | undefined;
+            phone_number?: string | null | undefined;
+            roles: string[];
+        } | null | undefined;
     } | null, AccountInfo | {
         id: string;
         account_type: string;
         display_name: string;
         is_active: boolean;
         is_verified: boolean;
-        last_login?: string | undefined;
+        last_login?: string | null | undefined;
         authentication_methods: {
             id: string;
             type: string;
@@ -83,27 +77,90 @@ export declare function useAuth(): {
         person?: {
             id: string;
             name: string;
-            email?: string | undefined;
-            phone?: string | undefined;
-            roles: string[];
             first_name: string;
             last_name: string;
-        } | undefined;
-        entity?: {
-            id: string;
-            name: string;
-            type?: string | undefined;
-            metadata?: Record<string, any> | undefined;
-        } | undefined;
+            email?: string | null | undefined;
+            phone_number?: string | null | undefined;
+            roles: string[];
+        } | null | undefined;
     } | null>;
     sso: import('./sso').SSOObject;
+    tenants: import('vue').Ref<{
+        id: string;
+        name: string;
+        slug: string;
+        parent_id: string | null;
+        settings: Record<string, any> | null;
+        status: import('./types').TenantStatus;
+        suspended_at: string | null;
+        suspended_reason: string | null;
+        created_at: string;
+        updated_at: string;
+    }[], TenantInfo[] | {
+        id: string;
+        name: string;
+        slug: string;
+        parent_id: string | null;
+        settings: Record<string, any> | null;
+        status: import('./types').TenantStatus;
+        suspended_at: string | null;
+        suspended_reason: string | null;
+        created_at: string;
+        updated_at: string;
+    }[]>;
+    currentTenant: import('vue').Ref<{
+        id: string;
+        name: string;
+        slug: string;
+        parent_id: string | null;
+        settings: Record<string, any> | null;
+        status: import('./types').TenantStatus;
+        suspended_at: string | null;
+        suspended_reason: string | null;
+        created_at: string;
+        updated_at: string;
+    } | null, TenantInfo | {
+        id: string;
+        name: string;
+        slug: string;
+        parent_id: string | null;
+        settings: Record<string, any> | null;
+        status: import('./types').TenantStatus;
+        suspended_at: string | null;
+        suspended_reason: string | null;
+        created_at: string;
+        updated_at: string;
+    } | null>;
     getFullName: () => string;
     getIsLoggedIn: () => boolean;
     getEmail: () => string;
     getRoles: () => string[];
-    getAccountType: () => import('./types').AuthenticationAccountType;
+    getAccountType: () => string;
     isPersonAccount: () => boolean;
-    isEntityAccount: () => boolean;
+    getTenants: () => {
+        id: string;
+        name: string;
+        slug: string;
+        parent_id: string | null;
+        settings: Record<string, any> | null;
+        status: import('./types').TenantStatus;
+        suspended_at: string | null;
+        suspended_reason: string | null;
+        created_at: string;
+        updated_at: string;
+    }[];
+    getCurrentTenant: () => {
+        id: string;
+        name: string;
+        slug: string;
+        parent_id: string | null;
+        settings: Record<string, any> | null;
+        status: import('./types').TenantStatus;
+        suspended_at: string | null;
+        suspended_reason: string | null;
+        created_at: string;
+        updated_at: string;
+    } | null;
     login: (credentials: {
         email: string;
         password: string;
@@ -130,5 +187,8 @@ export declare function useAuth(): {
     getSessions: (accountId?: string) => Promise<import('./types').GetSessionsResponse>;
     revokeSession: (sessionToken: string) => Promise<void>;
     revokeAllSessions: (accountId?: string) => Promise<void>;
+    loadTenants: () => Promise<TenantInfo[]>;
+    setTenant: (tenantId: string | null) => void;
+    switchTenant: (tenantId: string) => void;
 };
 export {};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bagelink/auth",
   "type": "module",
-  "version": "1.7.94",
+  "version": "1.7.98",
   "description": "Bagelink auth package",
   "author": {
     "name": "Bagel Studio",