@canopy-io/node 0.3.11 → 0.4.0

package/dist/index.js

@@ -607,6 +607,41 @@ var Identities = class {
       `/api/v1/identities/${encodeURIComponent(id)}/permissions`
     );
   }
+  /**
+   * Every session the identity holds that is neither revoked nor expired,
+   * newest first: when and where it was signed in, when it expires, and the
+   * organization it is acting in. Read it back after a revoke to confirm,
+   * from your own side, that a sign-out took.
+   */
+  sessions(id) {
+    return this.client.request(
+      "GET",
+      `/api/v1/identities/${encodeURIComponent(id)}/sessions`
+    );
+  }
+  /**
+   * Ends one session and leaves the identity's others signed in. `sessionId`
+   * is the session's `id` from `sessions`: its current refresh token, which
+   * changes on every refresh, so read it shortly before revoking.
+   */
+  revokeSession(id, sessionId) {
+    return this.client.request(
+      "DELETE",
+      `/api/v1/identities/${encodeURIComponent(id)}/sessions/${encodeURIComponent(sessionId)}`
+    );
+  }
+  /**
+   * Ends every session the identity holds, so the next refresh on any device
+   * fails and the person signs in again. Access tokens already issued keep
+   * working until their short lifetime runs out. For a suspected compromise;
+   * `deactivate` also refuses the next sign-in.
+   */
+  revokeSessions(id) {
+    return this.client.request(
+      "POST",
+      `/api/v1/identities/${encodeURIComponent(id)}/sessions/revoke`
+    );
+  }
 };
 
 // src/schema.ts