@bagelink/auth 1.9.61 → 1.9.63

package/dist/api.d.ts

@@ -1,4 +1,4 @@
-import { RegisterRequest, UpdateAccountRequest, ChangePasswordRequest, ResetPasswordRequest, SendVerificationRequest, AuthenticationAccount, LoginResponse, RegisterResponse, LogoutResponse, GetMeResponse, UpdateMeResponse, DeleteMeResponse, GetAccountResponse, UpdateAccountResponse, DeleteAccountResponse, ActivateAccountResponse, DeactivateAccountResponse, ChangePasswordResponse, ForgotPasswordResponse, ResetPasswordResponse, VerifyResetTokenResponse, SendVerificationResponse, VerifyEmailResponse, RefreshSessionResponse, GetSessionsResponse, DeleteSessionResponse, DeleteAllSessionsResponse, CleanupSessionsResponse, GetMethodsResponse, SSOProvider, SSOInitiateRequest, SSOCallbackRequest, SSOLinkRequest, SSOInitiateResponse, SSOCallbackResponse, SSOLinkResponse, SSOUnlinkResponse, GetTenantsResponse } from './types';
+import { RegisterRequest, UpdateAccountRequest, ChangePasswordRequest, ForgotPasswordRequest, ResetPasswordRequest, SendVerificationRequest, VerifyEmailRequest, AuthenticationAccount, PasswordLoginRequest, EmailTokenSendRequest, EmailTokenVerifyRequest, OTPSendRequest, OTPVerifyRequest, SSOLoginRequest, LoginResponse, RegisterResponse, LogoutResponse, GetMeResponse, UpdateMeResponse, DeleteMeResponse, ChangePasswordResponse, ForgotPasswordResponse, ResetPasswordResponse, VerifyResetTokenResponse, SendVerificationResponse, VerifyEmailResponse, RefreshSessionResponse, GetSessionsResponse, DeleteSessionResponse, DeleteAllSessionsResponse, CleanupSessionsResponse, GetMethodsResponse, GetAuthStatusResponse, SendEmailTokenResponse, VerifyEmailTokenResponse, SendOTPResponse, VerifyOTPResponse, LegacySSOLoginResponse, SSOProvider, SSOInitiateRequest, SSOCallbackRequest, SSOLinkRequest, InitiateSSOResponse, CallbackSSOResponse, LinkSSOResponse, UnlinkSSOResponse, GetTenantsResponse } from './types';
 export declare class AuthApi {
     private api;
     private currentTenantId;
@@ -12,6 +12,10 @@ export declare class AuthApi {
      */
     getTenantId(): string | null;
     private setupInterceptors;
+    /**
+     * Get authentication status
+     */
+    getAuthStatus(): Promise<GetAuthStatusResponse>;
     /**
      * Get available authentication methods
      */
@@ -23,7 +27,27 @@ export declare class AuthApi {
     /**
      * Login with password
      */
-    login(email: string, password: string): Promise<LoginResponse>;
+    login(data: PasswordLoginRequest): Promise<LoginResponse>;
+    /**
+     * Send email token to user
+     */
+    sendEmailToken(data: EmailTokenSendRequest): Promise<SendEmailTokenResponse>;
+    /**
+     * Verify email token and login
+     */
+    verifyEmailToken(data: EmailTokenVerifyRequest): Promise<VerifyEmailTokenResponse>;
+    /**
+     * Send OTP code to phone number
+     */
+    sendOTP(data: OTPSendRequest): Promise<SendOTPResponse>;
+    /**
+     * Verify OTP code and login
+     */
+    verifyOTP(data: OTPVerifyRequest): Promise<VerifyOTPResponse>;
+    /**
+     * Login with SSO provider (legacy endpoint without PKCE)
+     */
+    loginWithSSO(provider: SSOProvider, data: SSOLoginRequest): Promise<LegacySSOLoginResponse>;
     /**
      * Logout and clear session
      */
@@ -36,19 +60,19 @@ export declare class AuthApi {
      * Initiate SSO login flow
      * Returns authorization URL to redirect user to
      */
-    initiateSSO(data: SSOInitiateRequest): Promise<SSOInitiateResponse>;
+    initiateSSO(provider: SSOProvider, data: SSOInitiateRequest): Promise<InitiateSSOResponse>;
     /**
      * Complete SSO login after callback from provider
      */
-    ssoCallback(data: SSOCallbackRequest): Promise<SSOCallbackResponse>;
+    ssoCallback(provider: SSOProvider, data: SSOCallbackRequest): Promise<CallbackSSOResponse>;
     /**
      * Link an SSO provider to existing account
      */
-    linkSSOProvider(data: SSOLinkRequest): Promise<SSOLinkResponse>;
+    linkSSOProvider(provider: SSOProvider, data: SSOLinkRequest): Promise<LinkSSOResponse>;
     /**
      * Unlink an SSO provider from account
      */
-    unlinkSSOProvider(provider: SSOProvider): Promise<SSOUnlinkResponse>;
+    unlinkSSOProvider(provider: SSOProvider): Promise<UnlinkSSOResponse>;
     /**
      * Get current user account info
      */
@@ -61,26 +85,6 @@ export declare class AuthApi {
      * Delete current user account
      */
     deleteCurrentUser(): Promise<DeleteMeResponse>;
-    /**
-     * Get account information by ID
-     */
-    getAccount(accountId: string): Promise<GetAccountResponse>;
-    /**
-     * Update account by ID
-     */
-    updateAccount(accountId: string, data: UpdateAccountRequest): Promise<UpdateAccountResponse>;
-    /**
-     * Delete account by ID
-     */
-    deleteAccount(accountId: string): Promise<DeleteAccountResponse>;
-    /**
-     * Activate account by ID
-     */
-    activateAccount(accountId: string): Promise<ActivateAccountResponse>;
-    /**
-     * Deactivate account by ID
-     */
-    deactivateAccount(accountId: string): Promise<DeactivateAccountResponse>;
     /**
      * Change password (requires current password)
      */
@@ -88,7 +92,7 @@ export declare class AuthApi {
     /**
      * Initiate forgot password flow
      */
-    forgotPassword(email: string): Promise<ForgotPasswordResponse>;
+    forgotPassword(data: ForgotPasswordRequest): Promise<ForgotPasswordResponse>;
     /**
      * Verify password reset token
      */
@@ -104,19 +108,19 @@ export declare class AuthApi {
     /**
      * Verify email with token
      */
-    verifyEmail(token: string): Promise<VerifyEmailResponse>;
+    verifyEmail(data: VerifyEmailRequest): Promise<VerifyEmailResponse>;
     /**
-     * Get sessions for an account
+     * Get active sessions for current identity
      */
-    getSessions(accountId: string): Promise<GetSessionsResponse>;
+    getSessions(): Promise<GetSessionsResponse>;
     /**
      * Revoke a specific session
      */
     revokeSession(sessionToken: string): Promise<DeleteSessionResponse>;
     /**
-     * Revoke all sessions for an account
+     * Revoke all sessions for current identity
      */
-    revokeAllSessions(accountId: string): Promise<DeleteAllSessionsResponse>;
+    revokeAllSessions(): Promise<DeleteAllSessionsResponse>;
     /**
      * Cleanup expired sessions (admin)
      */

package/dist/index.cjs

@@ -97,6 +97,12 @@ class AuthApi {
   // ============================================
   // Authentication Methods
   // ============================================
+  /**
+   * Get authentication status
+   */
+  async getAuthStatus() {
+    return this.api.get("authentication/status");
+  }
   /**
    * Get available authentication methods
    */
@@ -115,12 +121,42 @@ class AuthApi {
   /**
    * Login with password
    */
-  async login(email, password) {
+  async login(data) {
     return this.api.post("authentication/login/password", {
-      email: email.toLowerCase(),
-      password
+      ...data,
+      email: data.email.toLowerCase()
     });
   }
+  /**
+   * Send email token to user
+   */
+  async sendEmailToken(data) {
+    return this.api.post("authentication/login/email-token/send", data);
+  }
+  /**
+   * Verify email token and login
+   */
+  async verifyEmailToken(data) {
+    return this.api.post("authentication/login/email-token/verify", data);
+  }
+  /**
+   * Send OTP code to phone number
+   */
+  async sendOTP(data) {
+    return this.api.post("authentication/login/otp/send", data);
+  }
+  /**
+   * Verify OTP code and login
+   */
+  async verifyOTP(data) {
+    return this.api.post("authentication/login/otp/verify", data);
+  }
+  /**
+   * Login with SSO provider (legacy endpoint without PKCE)
+   */
+  async loginWithSSO(provider, data) {
+    return this.api.post(`authentication/login/sso/${provider}`, data);
+  }
   /**
    * Logout and clear session
    */
@@ -140,29 +176,20 @@ class AuthApi {
    * Initiate SSO login flow
    * Returns authorization URL to redirect user to
    */
-  async initiateSSO(data) {
-    return this.api.post(`authentication/sso/${data.provider}/initiate`, {
-      redirect_uri: data.redirect_uri,
-      state: data.state
-    });
+  async initiateSSO(provider, data) {
+    return this.api.post(`authentication/sso/${provider}/initiate`, data);
   }
   /**
    * Complete SSO login after callback from provider
    */
-  async ssoCallback(data) {
-    return this.api.post(`authentication/sso/${data.provider}/callback`, {
-      code: data.code,
-      state: data.state
-    });
+  async ssoCallback(provider, data) {
+    return this.api.post(`authentication/sso/${provider}/callback`, data);
   }
   /**
    * Link an SSO provider to existing account
    */
-  async linkSSOProvider(data) {
-    return this.api.post(`authentication/sso/${data.provider}/link`, {
-      code: data.code,
-      state: data.state
-    });
+  async linkSSOProvider(provider, data) {
+    return this.api.post(`authentication/sso/${provider}/link`, data);
   }
   /**
    * Unlink an SSO provider from account
@@ -192,39 +219,6 @@ class AuthApi {
     return this.api.delete("authentication/me");
   }
   // ============================================
-  // Account Management (Admin)
-  // ============================================
-  /**
-   * Get account information by ID
-   */
-  async getAccount(accountId) {
-    return this.api.get(`authentication/account/${accountId}`);
-  }
-  /**
-   * Update account by ID
-   */
-  async updateAccount(accountId, data) {
-    return this.api.patch(`authentication/account/${accountId}`, data);
-  }
-  /**
-   * Delete account by ID
-   */
-  async deleteAccount(accountId) {
-    return this.api.delete(`authentication/account/${accountId}`);
-  }
-  /**
-   * Activate account by ID
-   */
-  async activateAccount(accountId) {
-    return this.api.post(`authentication/account/${accountId}/activate`, {});
-  }
-  /**
-   * Deactivate account by ID
-   */
-  async deactivateAccount(accountId) {
-    return this.api.post(`authentication/account/${accountId}/deactivate`, {});
-  }
-  // ============================================
   // Password Management
   // ============================================
   /**
@@ -236,9 +230,10 @@ class AuthApi {
   /**
    * Initiate forgot password flow
    */
-  async forgotPassword(email) {
+  async forgotPassword(data) {
     return this.api.post("authentication/password/forgot", {
-      email: email.toLowerCase()
+      ...data,
+      email: data.email.toLowerCase()
     });
   }
   /**
@@ -267,17 +262,17 @@ class AuthApi {
   /**
    * Verify email with token
    */
-  async verifyEmail(token) {
-    return this.api.post("authentication/verify/email", { token });
+  async verifyEmail(data) {
+    return this.api.post("authentication/verify/email", data);
   }
   // ============================================
   // Session Management
   // ============================================
   /**
-   * Get sessions for an account
+   * Get active sessions for current identity
    */
-  async getSessions(accountId) {
-    return this.api.get(`authentication/sessions/${accountId}`);
+  async getSessions() {
+    return this.api.get("authentication/sessions");
   }
   /**
    * Revoke a specific session
@@ -286,10 +281,10 @@ class AuthApi {
     return this.api.delete(`authentication/sessions/${sessionToken}`);
   }
   /**
-   * Revoke all sessions for an account
+   * Revoke all sessions for current identity
    */
-  async revokeAllSessions(accountId) {
-    return this.api.delete(`authentication/sessions/account/${accountId}`);
+  async revokeAllSessions() {
+    return this.api.delete("authentication/sessions");
   }
   /**
    * Cleanup expired sessions (admin)
@@ -1638,8 +1633,7 @@ function createSSOProvider(config) {
         sessionStorage.setItem(getStateKey(), state);
         sessionStorage.setItem(`oauth_provider:${state}`, config.id);
       }
-      const authUrl = await auth.initiateSSO({
-        provider: config.id,
+      const authUrl = await auth.initiateSSO(config.id, {
         redirect_uri: redirectUri,
         state,
         scopes: options.scopes ?? config.defaultScopes,
@@ -1663,8 +1657,7 @@ function createSSOProvider(config) {
         sessionStorage.setItem(getStateKey(), state);
         sessionStorage.setItem(`oauth_provider:${state}`, config.id);
       }
-      const authUrl = await auth.initiateSSO({
-        provider: config.id,
+      const authUrl = await auth.initiateSSO(config.id, {
         redirect_uri: redirectUri,
         state,
         scopes: options.scopes ?? config.defaultScopes,
@@ -1676,15 +1669,14 @@ function createSSOProvider(config) {
         throw new PopupBlockedError();
       }
       const result = await waitForPopupCallback(popupWindow, config.id, timeout2);
-      return auth.loginWithSSO({
-        provider: config.id,
+      return auth.loginWithSSO(config.id, {
         code: result.code,
-        state: result.state
+        state: result.state ?? generateState()
       });
     },
     async callback(code, state) {
       const auth = getAuthApi();
-      if (typeof sessionStorage !== "undefined" && state !== void 0 && state !== "") {
+      if (typeof sessionStorage !== "undefined") {
         const storedState = sessionStorage.getItem(getStateKey());
         sessionStorage.removeItem(getStateKey());
         sessionStorage.removeItem(`oauth_provider:${state}`);
@@ -1692,15 +1684,14 @@ function createSSOProvider(config) {
           throw new StateMismatchError();
         }
       }
-      return auth.loginWithSSO({
-        provider: config.id,
+      return auth.loginWithSSO(config.id, {
         code,
-        state
+        state: state ?? generateState()
       });
     },
     async link(code, state) {
       const auth = getAuthApi();
-      if (typeof sessionStorage !== "undefined" && state !== void 0 && state !== "") {
+      if (typeof sessionStorage !== "undefined") {
         const storedState = sessionStorage.getItem(getStateKey());
         sessionStorage.removeItem(getStateKey());
         sessionStorage.removeItem(`oauth_provider:${state}`);
@@ -1708,10 +1699,9 @@ function createSSOProvider(config) {
           throw new StateMismatchError();
         }
       }
-      await auth.linkSSOProvider({
-        provider: config.id,
+      await auth.linkSSOProvider(config.id, {
         code,
-        state
+        state: state ?? generateState()
       });
     },
     async unlink() {
@@ -1722,8 +1712,7 @@ function createSSOProvider(config) {
       const auth = getAuthApi();
       const redirectUri = options.redirectUri ?? getDefaultRedirectUri();
       const state = options.state ?? generateState();
-      return auth.initiateSSO({
-        provider: config.id,
+      return auth.initiateSSO(config.id, {
         redirect_uri: redirectUri,
         state,
         scopes: options.scopes ?? config.defaultScopes,
@@ -1832,6 +1821,16 @@ const ssoProviders = {
       authDomain: "www.facebook.com",
       buttonText: "Continue with Facebook"
     }
+  }),
+  custom: createSSOProvider({
+    id: "custom",
+    name: "Custom",
+    color: "#000000",
+    icon: "custom",
+    defaultScopes: [],
+    metadata: {
+      buttonText: "Continue with Custom"
+    }
   })
 };
 const sso = {
@@ -1933,13 +1932,13 @@ function accountToUser(account) {
       id: account.person.id,
       accountId: account.id,
       name: account.person.name,
-      email: account.person.email ?? void 0,
+      email: account.person.email,
       type: account.account_type,
-      roles: account.person.roles,
+      roles: account.roles,
       isActive: account.is_active,
       isVerified: account.is_verified,
       person: account.person,
-      lastLogin: account.last_login ?? void 0,
+      lastLogin: account.last_login,
       hasPersonLinked: true
     };
   }
@@ -1952,9 +1951,10 @@ function accountToUser(account) {
     name: account.display_name,
     email: emailMethod == null ? void 0 : emailMethod.identifier,
     type: account.account_type,
+    roles: account.roles,
     isActive: account.is_active,
     isVerified: account.is_verified,
-    lastLogin: account.last_login ?? void 0,
+    lastLogin: account.last_login,
     hasPersonLinked: false
   };
 }
@@ -2112,20 +2112,20 @@ function useAuth() {
   const api = authApi;
   const emitter = eventEmitter;
   const authMethods = {
-    initiateSSO: async (params) => {
-      const { data } = await api.initiateSSO(params);
+    initiateSSO: async (provider, params) => {
+      const { data } = await api.initiateSSO(provider, params);
       return data.authorization_url;
     },
-    loginWithSSO: async (params) => {
-      const { data } = await api.ssoCallback(params);
+    loginWithSSO: async (provider, params) => {
+      const { data } = await api.ssoCallback(provider, params);
       if (data.success === true && data.requires_verification !== true) {
         await checkAuth();
       }
       emitter.emit(AuthState.LOGIN);
       return data;
     },
-    linkSSOProvider: async (params) => {
-      await api.linkSSOProvider(params);
+    linkSSOProvider: async (provider, params) => {
+      await api.linkSSOProvider(provider, params);
       await checkAuth();
     },
     unlinkSSOProvider: async (provider) => {
@@ -2169,10 +2169,7 @@ function useAuth() {
     emitter.emit(AuthState.LOGOUT);
   }
   async function login(credentials) {
-    const { data } = await api.login(
-      credentials.email.toLowerCase(),
-      credentials.password
-    );
+    const { data } = await api.login(credentials);
     if (data.success === true && data.requires_verification !== true) {
       await checkAuth();
     }
@@ -2255,7 +2252,7 @@ function useAuth() {
     return data;
   }
   async function forgotPassword(email) {
-    await api.forgotPassword(email);
+    await api.forgotPassword({ email });
   }
   async function verifyResetToken(token) {
     await api.verifyResetToken(token);
@@ -2279,15 +2276,6 @@ function useAuth() {
     accountInfo.value = data;
     emitter.emit(AuthState.PROFILE_UPDATE);
   }
-  async function activateAccount(accountId) {
-    await api.activateAccount(accountId);
-  }
-  async function deactivateAccount(accountId) {
-    await api.deactivateAccount(accountId);
-  }
-  async function deleteAccount(accountId) {
-    await api.deleteAccount(accountId);
-  }
   async function deleteCurrentUser() {
     await api.deleteCurrentUser();
     accountInfo.value = null;
@@ -2296,7 +2284,7 @@ function useAuth() {
     await api.sendVerification({ email });
   }
   async function verifyEmail(token) {
-    await api.verifyEmail(token);
+    await api.verifyEmail({ token });
     await checkAuth();
     emitter.emit(AuthState.EMAIL_VERIFIED);
   }
@@ -2304,39 +2292,29 @@ function useAuth() {
     await api.refreshSession();
     emitter.emit(AuthState.SESSION_REFRESH);
   }
-  async function getSessions(accountId) {
-    var _a;
-    const id = accountId ?? ((_a = user.value) == null ? void 0 : _a.accountId);
-    if (id === void 0 || id === "") {
-      throw new Error("No account ID available");
-    }
-    return api.getSessions(id);
+  async function getSessions() {
+    return api.getSessions();
   }
   async function revokeSession(sessionToken) {
     await api.revokeSession(sessionToken);
   }
-  async function revokeAllSessions(accountId) {
-    var _a;
-    const id = accountId ?? ((_a = user.value) == null ? void 0 : _a.accountId);
-    if (id === void 0 || id === "") {
-      throw new Error("No account ID available");
-    }
-    await api.revokeAllSessions(id);
+  async function revokeAllSessions() {
+    await api.revokeAllSessions();
   }
-  async function initiateSSO(params) {
-    const { data } = await api.initiateSSO(params);
+  async function initiateSSO(provider, params) {
+    const { data } = await api.initiateSSO(provider, params);
     return data.authorization_url;
   }
-  async function loginWithSSO(params) {
-    const { data } = await api.ssoCallback(params);
+  async function loginWithSSO(provider, params) {
+    const { data } = await api.ssoCallback(provider, params);
     if (data.success === true && data.requires_verification !== true) {
       await checkAuth();
     }
     emitter.emit(AuthState.LOGIN);
     return data;
   }
-  async function linkSSOProvider(params) {
-    await api.linkSSOProvider(params);
+  async function linkSSOProvider(provider, params) {
+    await api.linkSSOProvider(provider, params);
     await checkAuth();
   }
   async function unlinkSSOProvider(provider) {
@@ -2384,10 +2362,6 @@ function useAuth() {
     // Email Verification Actions
     sendVerification,
     verifyEmail,
-    // Admin Actions
-    activateAccount,
-    deactivateAccount,
-    deleteAccount,
     // Session Management
     getSessions,
     revokeSession,