@base44-preview/sdk 0.8.52-pr.298.d08e0ba → 0.8.52-pr.301.106bb9e

package/README.md

@@ -151,5 +151,3 @@ npm run create-docs
 cd docs
 mintlify dev
 ```
-
-See [experimental app-user MFA](MFA.md) for challenge handling and managed continuation.

package/dist/index.d.ts

@@ -18,4 +18,3 @@ export { Actor, type Conn } from "./actor.js";
 export type { ConnectorsModule, UserConnectorsModule, ConnectorApiRequest, ConnectorApiResponse, ConnectorApiResponsePhase, } from "./modules/connectors.types.js";
 export type { CustomIntegrationsModule, CustomIntegrationCallParams, CustomIntegrationCallResponse, } from "./modules/custom-integrations.types.js";
 export type { GetAccessTokenOptions, SaveAccessTokenOptions, RemoveAccessTokenOptions, GetLoginUrlOptions, } from "./utils/auth-utils.types.js";
-export type { MfaChallenge, MfaModule, MfaProof, LoginResult, MfaEnrollmentResult } from "./modules/mfa.js";

package/dist/modules/auth.js

@@ -1,4 +1,3 @@
-import { createMfaModule, prepareMfaPkce } from "./mfa.js";
 import { resetAnalyticsSessionContext } from "./analytics.js";
 function isInsideIframe() {
     if (typeof window === "undefined")
@@ -20,9 +19,9 @@ function loginViaPopup(url, redirectUrl, expectedOrigin) {
     const height = 600;
     const left = Math.round(window.screenX + (window.outerWidth - width) / 2);
     const top = Math.round(window.screenY + (window.outerHeight - height) / 2);
-    const popup = window.open("about:blank", "base44_auth", `width=${width},height=${height},left=${left},top=${top},resizable=yes,scrollbars=yes`);
+    const popup = window.open(url, "base44_auth", `width=${width},height=${height},left=${left},top=${top},resizable=yes,scrollbars=yes`);
     if (!popup) {
-        return Promise.resolve();
+        return;
     }
     const cleanup = () => {
         window.removeEventListener("message", onMessage);
@@ -53,7 +52,6 @@ function loginViaPopup(url, redirectUrl, expectedOrigin) {
             cleanup();
     }, 500);
     window.addEventListener("message", onMessage);
-    return url.then(value => { popup.location.href = value; }, error => { cleanup(); throw error; });
 }
 /**
  * Creates the auth module for the Base44 SDK.
@@ -84,8 +82,7 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
     // to the identity transitions below (`setToken`, `logout`) instead of to the
     // header a caller may have set on the instance directly.
     let hasAccessToken = Boolean(options.token);
-    const module = {
-        mfa: createMfaModule(axios, appId, token => module.setToken(token)),
+    return {
         hasToken() {
             return hasAccessToken;
         },
@@ -122,10 +119,9 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             window.location.href = loginUrl;
         },
         // Redirects the user to a provider's login page
-        async loginWithProvider(provider, fromUrl = "/") {
+        loginWithProvider(provider, fromUrl = "/") {
             // Build the full redirect URL
             const redirectUrl = new URL(fromUrl, window.location.origin).toString();
-            const mfaPkce = provider === "sso" ? Promise.resolve("") : prepareMfaPkce(appId).then(value => `&app_mfa_code_challenge=${value}`);
             const queryParams = `app_id=${appId}&from_url=${encodeURIComponent(redirectUrl)}`;
             // SSO uses a different URL structure with appId in the path
             let authPath;
@@ -141,11 +137,11 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             // When running inside an iframe, use a popup to avoid OAuth providers
             // blocking iframe navigation.
             if (isInsideIframe()) {
-                const popupLoginUrl = mfaPkce.then(pkce => `${loginUrl}${pkce}&popup_origin=${encodeURIComponent(window.location.origin)}`);
+                const popupLoginUrl = `${loginUrl}&popup_origin=${encodeURIComponent(window.location.origin)}`;
                 return loginViaPopup(popupLoginUrl, redirectUrl, window.location.origin);
             }
             // Default: full-page redirect
-            window.location.href = loginUrl + await mfaPkce;
+            window.location.href = loginUrl;
         },
         // Logout the current user
         logout(redirectUrl) {
@@ -211,8 +207,6 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
                     password,
                     ...(turnstileToken && { turnstile_token: turnstileToken }),
                 });
-                if (response.mfa_required)
-                    return response;
                 const { access_token, user } = response;
                 if (access_token) {
                     this.setToken(access_token);
@@ -284,5 +278,4 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             });
         },
     };
-    return module;
 }

package/dist/modules/auth.types.d.ts

@@ -1,4 +1,3 @@
-import type { LoginResult, MfaModule } from "./mfa.js";
 /**
  * An authenticated user.
  */
@@ -38,7 +37,6 @@ export interface User {
  * Response from login endpoints containing user information and access token.
  */
 export interface LoginResponse {
-    mfa_required?: false;
     /** JWT access token for authentication. */
     access_token: string;
     /** User information. */
@@ -119,8 +117,6 @@ export interface AuthModuleOptions {
  * The auth module is only available in user authentication mode (`base44.auth`).
  */
 export interface AuthModule {
-    /** Multi-factor enrollment and login for this app. */
-    mfa: MfaModule;
     /**
      * Gets the current authenticated user's information.
      *
@@ -223,7 +219,7 @@ export interface AuthModule {
      * ```
      *
      */
-    loginWithProvider(provider: string, fromUrl?: string): Promise<void>;
+    loginWithProvider(provider: string, fromUrl?: string): void;
     /**
      * Logs out the current user.
      *
@@ -306,7 +302,7 @@ export interface AuthModule {
      * );
      * ```
      */
-    loginViaEmailPassword(email: string, password: string, turnstileToken?: string): Promise<LoginResult>;
+    loginViaEmailPassword(email: string, password: string, turnstileToken?: string): Promise<LoginResponse>;
     /**
      * Checks if the current user is authenticated.
      *
@@ -431,7 +427,7 @@ export interface AuthModule {
      * );
      * ```
      */
-    verifyOtp(params: VerifyOtpParams): Promise<LoginResult>;
+    verifyOtp(params: VerifyOtpParams): Promise<any>;
     /**
      * Resends an OTP code to the user's email address.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/sdk",
-  "version": "0.8.52-pr.298.d08e0ba",
+  "version": "0.8.52-pr.301.106bb9e",
   "description": "JavaScript SDK for Base44 API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -10,7 +10,6 @@
   ],
   "scripts": {
     "build": "tsc",
-    "lint": "eslint src",
     "test": "npm run test:types && vitest run",
     "test:types": "tsc --noEmit -p tsconfig.type-tests.json",
     "test:unit": "vitest run tests/unit",
@@ -31,24 +30,6 @@
     "socket.io-client": "^4.8.3",
     "uuid": "^13.0.2"
   },
-  "devDependencies": {
-    "@types/hast": "^3.0.4",
-    "@types/node": "^25.0.1",
-    "@types/unist": "^3.0.3",
-    "@typescript-eslint/parser": "^8.51.0",
-    "@vitest/coverage-istanbul": "^4.1.9",
-    "@vitest/coverage-v8": "^4.1.9",
-    "@vitest/ui": "^4.1.9",
-    "dotenv": "^16.3.1",
-    "eslint": "^9.39.2",
-    "eslint-plugin-import": "^2.32.0",
-    "nock": "^13.4.0",
-    "typedoc": "^0.28.14",
-    "typedoc-plugin-markdown": "^4.9.0",
-    "typescript": "^5.3.2",
-    "typescript-eslint": "^8.51.0",
-    "vitest": "^4.1.9"
-  },
   "keywords": [
     "base44",
     "api",
@@ -58,10 +39,11 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/base44/javascript-sdk.git"
+    "url": "git+https://github.com/base44/javascript-sdk.git",
+    "directory": "packages/sdk"
   },
   "bugs": {
     "url": "https://github.com/base44/javascript-sdk/issues"
   },
-  "homepage": "https://github.com/base44/javascript-sdk#readme"
+  "homepage": "https://github.com/base44/javascript-sdk/tree/main/packages/sdk#readme"
 }

package/dist/modules/mfa.d.ts

@@ -1,52 +0,0 @@
-import type { AxiosInstance } from 'axios';
-import type { LoginResponse } from './auth.types.js';
-/** A restricted, short-lived login outcome. It is never an access token. */
-export interface MfaChallenge {
-    mfa_required: true;
-    next_step: 'enroll' | 'verify';
-    mfa_methods: ('totp' | 'sms')[];
-    mfa_session_token: string;
-    expires_in_seconds: number;
-    phone_hint?: string;
-    access_token?: never;
-    user?: never;
-}
-export type LoginResult = LoginResponse | MfaChallenge;
-export interface MfaEnrollmentResult extends LoginResponse {
-    backup_codes?: string[];
-}
-export interface MfaProof {
-    code: string;
-    method: 'totp' | 'sms';
-    remember_device?: boolean;
-}
-/** App-scoped MFA. Pass the challenge credential explicitly; do not set it as the SDK token. */
-export interface MfaModule {
-    getStatus(): Promise<{
-        mfa_enabled: boolean;
-        methods: ('totp' | 'sms')[];
-        backup_codes_remaining: number;
-        policy: 'off' | 'required';
-    }>;
-    /** Requires an app admin session; resets a user in this app only. */
-    resetForUser(appUserId: string): Promise<{
-        success: true;
-    }>;
-    /** Open managed settings with fresh primary authentication and factor verification. */
-    openSecurity(returnTo?: string): void;
-    setupTotp(challenge: MfaChallenge): Promise<{
-        secret: string;
-        secret_formatted: string;
-        qr_code: string;
-    }>;
-    sendSms(challenge: MfaChallenge, phoneNumber: string): Promise<unknown>;
-    enrollTotp(challenge: MfaChallenge, code: string, rememberDevice?: boolean): Promise<MfaEnrollmentResult>;
-    enrollSms(challenge: MfaChallenge, code: string, rememberDevice?: boolean): Promise<MfaEnrollmentResult>;
-    verify(challenge: MfaChallenge, proof: MfaProof): Promise<LoginResponse>;
-    verifyRecoveryCode(challenge: MfaChallenge, code: string, rememberDevice?: boolean): Promise<LoginResponse>;
-    resendSms(challenge: MfaChallenge): Promise<unknown>;
-    /** Open Base44's managed MFA flow on this app's origin. */
-    continueLogin(challenge: MfaChallenge, returnTo?: string): Promise<void>;
-}
-export declare function prepareMfaPkce(appId: string): Promise<string>;
-export declare function createMfaModule(axios: AxiosInstance, appId: string, setToken: (token: string) => void): MfaModule;

package/dist/modules/mfa.js

@@ -1,43 +0,0 @@
-export async function prepareMfaPkce(appId) {
-    const encode = (value) => btoa(String.fromCharCode(...value)).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
-    const verifier = encode(crypto.getRandomValues(new Uint8Array(32)));
-    sessionStorage.setItem(`app-mfa-pkce:${appId}`, verifier);
-    return encode(new Uint8Array(await crypto.subtle.digest('SHA-256', new TextEncoder().encode(verifier))));
-}
-export function createMfaModule(axios, appId, setToken) {
-    const post = async (challenge, path, payload = {}) => {
-        const response = await axios.post(`/apps/${appId}/auth/mfa${path}`, payload, {
-            headers: { Authorization: `Bearer ${challenge.mfa_session_token}` }, withCredentials: true,
-        });
-        const token = response.access_token;
-        if (token)
-            setToken(token);
-        return response;
-    };
-    return {
-        getStatus: () => axios.get(`/apps/${appId}/auth/mfa/status`),
-        resetForUser: appUserId => axios.post(`/apps/${appId}/auth/mfa/reset`, { app_user_id: appUserId }),
-        openSecurity(returnTo = '/') {
-            const target = new URL(returnTo, window.location.origin);
-            if (target.origin !== window.location.origin)
-                throw new Error('MFA must return to this app.');
-            window.location.href = `/auth/mfa?${new URLSearchParams({ security: '1', from_url: target.pathname + target.search + target.hash })}`;
-        },
-        setupTotp: challenge => post(challenge, '/totp/setup'),
-        sendSms: (challenge, phoneNumber) => post(challenge, '/sms/send-code', { phone_number: phoneNumber }),
-        enrollTotp: (challenge, code, rememberDevice = false) => post(challenge, '/totp/verify', { code, remember_device: rememberDevice }),
-        enrollSms: (challenge, code, rememberDevice = false) => post(challenge, '/sms/verify', { code, remember_device: rememberDevice }),
-        verify: (challenge, proof) => post(challenge, '/verify', proof),
-        verifyRecoveryCode: (challenge, code, rememberDevice = false) => post(challenge, '/verify-backup', { backup_code: code, remember_device: rememberDevice }),
-        resendSms: challenge => post(challenge, '/resend'),
-        async continueLogin(challenge, returnTo = '/') {
-            const target = new URL(returnTo, window.location.origin);
-            if (target.origin !== window.location.origin)
-                throw new Error('MFA must return to this app.');
-            const codeChallenge = await prepareMfaPkce(appId);
-            const handoff = await post(challenge, '/handoff', { code_challenge: codeChallenge });
-            const query = new URLSearchParams({ app_id: appId, mfa_code: handoff.code, from_url: target.pathname + target.search + target.hash });
-            window.location.href = `/auth/mfa?${query}`;
-        },
-    };
-}