@delopay/sdk 0.20.0 → 0.21.0

package/dist/index.cjs

@@ -1947,6 +1947,55 @@ var Users = class {
   async signOut() {
     return this.request("POST", "/user/signout");
   }
+  /**
+   * Paginated login history for the authenticated user — IP, User-Agent,
+   * country / city / lat-lon (when GeoIP is enabled in backend), success
+   * and failure events with their reasons. Strictly scoped to the JWT
+   * subject; a user can only see their own activity.
+   *
+   * `GET /user/me/login-activity`. Requires a logged-in JWT.
+   *
+   * The backend returns an empty page when a Delopay admin is impersonating
+   * a non-admin merchant, so the admin's metadata never renders inside the
+   * merchant dashboard.
+   */
+  async listLoginActivity(params) {
+    if (params === void 0) {
+      return this.request("GET", "/user/me/login-activity");
+    }
+    return this.request("GET", "/user/me/login-activity", {
+      query: params
+    });
+  }
+  /**
+   * List the authenticated user's currently-active dashboard sessions
+   * (one row per minted login JWT that hasn't been revoked or expired).
+   *
+   * The row matching the JWT making this call has `is_current: true`,
+   * which is what lets the dashboard render a "This device" tag.
+   *
+   * `GET /user/me/sessions`. Requires a logged-in JWT. Returns an empty
+   * list when a Delopay admin is impersonating a non-admin merchant
+   * (same guard as `listLoginActivity`).
+   */
+  async listActiveSessions() {
+    return this.request("GET", "/user/me/sessions");
+  }
+  /**
+   * Disconnect one of the authenticated user's sessions. The matching
+   * JWT is rejected on its next request — fast-path via Redis, fall back
+   * to the persistent `revoked_at` column.
+   *
+   * Idempotent: revoking an already-revoked or unknown id returns 404,
+   * which the caller can treat as success for retry purposes. Revoking
+   * a session id that belongs to a different user also returns 404 —
+   * the response intentionally doesn't leak whether the id exists.
+   *
+   * `POST /user/me/sessions/{sessionId}/revoke`.
+   */
+  async revokeSession(sessionId) {
+    return this.request("POST", `/user/me/sessions/${encodeURIComponent(sessionId)}/revoke`);
+  }
   async getDetails() {
     return this.request("GET", "/user");
   }