@camstack/sdk 0.1.44 → 0.1.45

package/dist/index.js

@@ -1047,6 +1047,22 @@ class System {
   // ── Auth ──────────────────────────────────────────────────────────
   async login(username, password) {
     const result = await this._trpcClient.auth.login.mutate({ username, password });
+    if (typeof result === "object" && result !== null && "token" in result) {
+      const r = result;
+      const token = r.token;
+      if (typeof token === "string" && r.requiresTotp !== true) this.setToken(token);
+    }
+    return result;
+  }
+  /**
+   * Second leg of the 2FA login. The caller passes the challenge
+   * token returned by `login` (when `requiresTotp: true`) plus the
+   * 6-digit code from the user's authenticator app. On success the
+   * server mints the real session JWT, which we set as the active
+   * token on this client.
+   */
+  async loginVerifyTotp(challengeToken, code) {
+    const result = await this._trpcClient.auth.loginVerifyTotp.mutate({ challengeToken, code });
     if (typeof result === "object" && result !== null && "token" in result) {
       const token = result.token;
       if (typeof token === "string") this.setToken(token);