@delopay/sdk 0.3.0 → 0.3.1

package/dist/index.d.cts

@@ -2984,6 +2984,15 @@ declare class Users {
     changePassword(params: ChangePasswordRequest): Promise<UserResponse>;
     rotatePassword(params: ResetPasswordRequest): Promise<UserResponse>;
     forgotPassword(params: ForgotPasswordRequest): Promise<Record<string, unknown>>;
+    /**
+     * Reset a user's password using the single-purpose JWT delivered by the
+     * forgot-password email.
+     *
+     * The backend's `SinglePurposeJWTAuth` reads the token from the
+     * `Authorization: Bearer …` header, not from the request body, so the
+     * SDK lifts the `token` field out of `params` and sends it as the header.
+     * Callers still pass `{ password, token }` — the shape is unchanged.
+     */
     resetPassword(params: ResetPasswordRequest): Promise<Record<string, unknown>>;
     verifyEmail(params: Record<string, unknown>): Promise<AuthResponse>;
     sendVerificationEmail(params: ForgotPasswordRequest): Promise<Record<string, unknown>>;

package/dist/index.d.ts

@@ -2984,6 +2984,15 @@ declare class Users {
     changePassword(params: ChangePasswordRequest): Promise<UserResponse>;
     rotatePassword(params: ResetPasswordRequest): Promise<UserResponse>;
     forgotPassword(params: ForgotPasswordRequest): Promise<Record<string, unknown>>;
+    /**
+     * Reset a user's password using the single-purpose JWT delivered by the
+     * forgot-password email.
+     *
+     * The backend's `SinglePurposeJWTAuth` reads the token from the
+     * `Authorization: Bearer …` header, not from the request body, so the
+     * SDK lifts the `token` field out of `params` and sends it as the header.
+     * Callers still pass `{ password, token }` — the shape is unchanged.
+     */
     resetPassword(params: ResetPasswordRequest): Promise<Record<string, unknown>>;
     verifyEmail(params: Record<string, unknown>): Promise<AuthResponse>;
     sendVerificationEmail(params: ForgotPasswordRequest): Promise<Record<string, unknown>>;

package/dist/index.js

@@ -2029,8 +2029,21 @@ var Users = class {
   async forgotPassword(params) {
     return this.request("POST", "/user/forgot_password", { body: params });
   }
+  /**
+   * Reset a user's password using the single-purpose JWT delivered by the
+   * forgot-password email.
+   *
+   * The backend's `SinglePurposeJWTAuth` reads the token from the
+   * `Authorization: Bearer …` header, not from the request body, so the
+   * SDK lifts the `token` field out of `params` and sends it as the header.
+   * Callers still pass `{ password, token }` — the shape is unchanged.
+   */
   async resetPassword(params) {
-    return this.request("POST", "/user/reset_password", { body: params });
+    const { token, password } = params;
+    return this.request("POST", "/user/reset_password", {
+      body: { password },
+      headers: { Authorization: `Bearer ${token}` }
+    });
   }
   async verifyEmail(params) {
     return this.request("POST", "/user/verify_email", { body: params });