@coreiam/auth 1.0.392-beta.8 → 1.0.392-beta.9

package/dist/core/index.d.ts

@@ -41,6 +41,7 @@ export interface RefreshSessionResult {
 }
 /** Maps gateway token claims → CoreIAMIdentity (same shape the Next.js middleware injects). */
 export declare function toIdentity(payload: JWTPayload): CoreIAMIdentity;
+export declare function retryAfterSeconds(body: unknown): number | undefined;
 /**
 export class CoreIAM {
   private apiKey: string = '';
@@ -143,6 +144,8 @@ export declare class CoreIAM {
     requestOtp(body: RequestOtpBody, incomingHeaders: Headers): Promise<Response>;
     verifyOtp(body: VerifyOtpBody, incomingHeaders: Headers): Promise<Response>;
     forgotPassword(email: string, incomingHeaders: Headers): Promise<Response>;
+    verifyEmail(body: VerifyEmailBody, incomingHeaders: Headers): Promise<Response>;
+    resendVerification(email: string, incomingHeaders: Headers): Promise<Response>;
     resetPassword(email: string, otp: string, newPassword: string, incomingHeaders: Headers): Promise<Response>;
     listSessions(incomingHeaders: Headers): Promise<Response>;
     revokeSession(sessionId: string, incomingHeaders: Headers): Promise<Response>;
@@ -157,6 +160,10 @@ export interface VerifyOtpBody {
     email: string;
     otp: string;
 }
+export interface VerifyEmailBody {
+    email: string;
+    otp: string;
+}
 export interface RequestResetBody {
     email: string;
 }

package/dist/core/index.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OAUTH_PROVIDERS = exports.CSRF_PROTECTED_PATHS = exports.CoreIAM = void 0;
 exports.toIdentity = toIdentity;
+exports.retryAfterSeconds = retryAfterSeconds;
 // src/core/index.ts
 const jose_1 = require("jose");
 /** Maps gateway token claims → CoreIAMIdentity (same shape the Next.js middleware injects). */
@@ -13,6 +14,17 @@ function toIdentity(payload) {
         roles: Array.isArray(payload.roles) ? payload.roles : [],
     };
 }
+function retryAfterSeconds(body) {
+    const msg = body?.message;
+    for (const m of Array.isArray(msg) ? msg : [msg]) {
+        if (typeof m === 'string') {
+            const match = m.match(/Try again in (\d+) seconds?/);
+            if (match)
+                return Number(match[1]);
+        }
+    }
+    return undefined;
+}
 /**
 export class CoreIAM {
   private apiKey: string = '';
@@ -424,6 +436,20 @@ class CoreIAM {
             body: JSON.stringify({ email }),
         }, incomingHeaders);
     }
+    async verifyEmail(body, incomingHeaders) {
+        return this.proxyWithCsrfProtection('/auth/verify-email', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(body),
+        }, incomingHeaders);
+    }
+    async resendVerification(email, incomingHeaders) {
+        return this.proxyWithCsrfProtection('/auth/resend-verification', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ email }),
+        }, incomingHeaders);
+    }
     async resetPassword(email, otp, newPassword, incomingHeaders) {
         return this.proxyWithCsrfProtection('/auth/reset-password', {
             method: 'POST',
@@ -456,7 +482,7 @@ class CoreIAM {
 exports.CoreIAM = CoreIAM;
 exports.CSRF_PROTECTED_PATHS = new Set([
     '/auth/login', '/auth/register', '/auth/discover-tenants',
-    '/auth/request-otp', '/auth/verify-otp', '/auth/mfa/login',
+    '/auth/request-otp', '/auth/verify-otp', '/auth/mfa/login', '/auth/verify-email', '/auth/resend-verification',
     '/auth/profile', '/auth/mfa/setup', '/auth/mfa/verify', '/auth/mfa/disable',
     '/auth/password',
     '/auth/request-reset', '/auth/reset-password',

package/dist/nextjs/actions.d.ts

@@ -1,7 +1,8 @@
-import { CoreIAMIdentity, RequestOtpBody, VerifyOtpBody } from '../core';
+import { CoreIAMIdentity, RequestOtpBody, VerifyOtpBody, VerifyEmailBody } from '../core';
 export interface AuthResult {
     ok: boolean;
     status: number;
+    retryAfter?: number;
     data: any;
 }
 export declare function getSession(): Promise<CoreIAMIdentity | null>;
@@ -15,6 +16,8 @@ export declare function verifyMfaActionSdk(token: string): Promise<AuthResult>;
 export declare function disableMfaActionSdk(): Promise<AuthResult>;
 export declare function requestOtpActionSdk(body: RequestOtpBody): Promise<AuthResult>;
 export declare function verifyOtpActionSdk(body: VerifyOtpBody): Promise<AuthResult>;
+export declare function verifyEmailActionSdk(body: VerifyEmailBody): Promise<AuthResult>;
+export declare function resendVerificationActionSdk(email: string): Promise<AuthResult>;
 export declare function forgotPasswordActionSdk(email: string): Promise<AuthResult>;
 export declare function resetPasswordActionSdk(email: string, otp: string, newPassword: string): Promise<AuthResult>;
 export declare function listSessionsActionSdk(): Promise<AuthResult>;

package/dist/nextjs/actions.js

@@ -105,6 +105,8 @@ exports.verifyMfaActionSdk = verifyMfaActionSdk;
 exports.disableMfaActionSdk = disableMfaActionSdk;
 exports.requestOtpActionSdk = requestOtpActionSdk;
 exports.verifyOtpActionSdk = verifyOtpActionSdk;
+exports.verifyEmailActionSdk = verifyEmailActionSdk;
+exports.resendVerificationActionSdk = resendVerificationActionSdk;
 exports.forgotPasswordActionSdk = forgotPasswordActionSdk;
 exports.resetPasswordActionSdk = resetPasswordActionSdk;
 exports.listSessionsActionSdk = listSessionsActionSdk;
@@ -324,7 +326,8 @@ async function requestOtpActionSdk(body) {
         // any Set-Cookie through the same sync as every other auth action keeps the
         // invariant above true if the backend ever starts setting one.
         await syncCookiesToNext(response);
-        return { ok: response.ok, status: response.status, data: await response.json().catch(() => ({})) };
+        const data = await response.json().catch(() => ({}));
+        return { ok: response.ok, status: response.status, data, retryAfter: (0, core_1.retryAfterSeconds)(data) };
     }
     catch (error) {
         return { ok: false, status: 500, data: { error: 'OTP request failed' } };
@@ -341,12 +344,40 @@ async function verifyOtpActionSdk(body) {
         // server action never established a browser session. Mirrors the
         // loginActionSdk / registerActionSdk pattern exactly.
         await syncCookiesToNext(response);
-        return { ok: response.ok, status: response.status, data: await response.json().catch(() => ({})) };
+        const data = await response.json().catch(() => ({}));
+        return { ok: response.ok, status: response.status, data, retryAfter: (0, core_1.retryAfterSeconds)(data) };
     }
     catch (error) {
         return { ok: false, status: 500, data: { error: 'OTP verification failed' } };
     }
 }
+// W5 (beta.9): signup email verification — register fires the verification
+// email (emailVerificationRequired: true); these close the loop so the SDK
+// surface matches the server's /auth/verify-email + resend-verification pair.
+async function verifyEmailActionSdk(body) {
+    const reqHeaders = await (0, headers_1.headers)();
+    try {
+        const response = await getIam().verifyEmail(body, reqHeaders);
+        await syncCookiesToNext(response);
+        const data = await response.json().catch(() => ({}));
+        return { ok: response.ok, status: response.status, data, retryAfter: (0, core_1.retryAfterSeconds)(data) };
+    }
+    catch (error) {
+        return { ok: false, status: 500, data: { error: 'Email verification failed' } };
+    }
+}
+async function resendVerificationActionSdk(email) {
+    const reqHeaders = await (0, headers_1.headers)();
+    try {
+        const response = await getIam().resendVerification(email, reqHeaders);
+        await syncCookiesToNext(response);
+        const data = await response.json().catch(() => ({}));
+        return { ok: response.ok, status: response.status, data, retryAfter: (0, core_1.retryAfterSeconds)(data) };
+    }
+    catch (error) {
+        return { ok: false, status: 500, data: { error: 'Verification resend failed' } };
+    }
+}
 async function forgotPasswordActionSdk(email) {
     const reqHeaders = await (0, headers_1.headers)();
     try {

package/dist/nextjs/provider.js

@@ -51,7 +51,7 @@
 // export function useAuth() {
 //   return useContext(AuthContext);
 // }
-// src/nextjs/provider.tsx
+// sdk/javascript/src/nextjs/provider.tsx
 'use client';
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CoreIAMProvider = CoreIAMProvider;

package/dist/react/provider.js

@@ -44,6 +44,7 @@ export function useAuth() {
 }
 
 */
+//sdk/javascript/src/react/provider.tsx
 'use client';
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CoreIAMProvider = CoreIAMProvider;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coreiam/auth",
-  "version": "1.0.392-beta.8",
+  "version": "1.0.392-beta.9",
   "main": "./dist/core/index.js",
   "types": "./dist/core/index.d.ts",
   "exports": {
@@ -56,7 +56,8 @@
   "author": "coreiam",
   "license": "MIT",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "beta"
   },
   "peerDependencies": {
     "express": "^4.0.0 || ^5.0.0",