@didit-protocol/sdk-node 2.3.0 → 2.4.0

package/dist/index.d.cts

@@ -10129,6 +10129,14 @@ interface VerifyEmailResponse {
     organization?: OrganizationSummary;
     /** Minimal application shape returned inline by `POST /programmatic/verify-email/`. Persist the `api_key` immediately. */
     application?: ApplicationCredentialsSummary;
+    /** Present and `true` when the account already has an authenticator app or a passkey. The response then carries `temp_token` instead of tokens and application keys. */
+    "2fa_required"?: boolean;
+    /** Short-lived token for the second-factor step, sent only with `2fa_required`. It is not an access token. */
+    temp_token?: string;
+    /** With `2fa_required`: whether the account has an authenticator app. */
+    has_authenticator?: boolean;
+    /** With `2fa_required`: whether the account has a passkey. */
+    has_passkeys?: boolean;
 }
 interface WalletAddressEntry {
     uuid?: string;
@@ -10747,7 +10755,7 @@ declare class Account extends APIResource {
     /**
      * Verify Email and Issue Credentials
      *
-     * Step 2 of onboarding. Exchanges the 6-char code for a verified account, a default org+app, and a JWT pair. Persist the returned `api_key`.
+     * Step 2 of onboarding. Exchanges the 6-char code for a verified account, a default org+app, and a JWT pair. Persist the returned `api_key`. An account that already has an authenticator app or a passkey gets the same second-factor step as the login instead: `2fa_required: true` and a `temp_token`, with no tokens and no application keys.
      *
      * `POST /programmatic/verify-email/`
      */
@@ -13383,7 +13391,7 @@ interface DatabaseValidationValidateParams {
     landline?: string;
     /** Email address for identity-verification services. */
     email?: string;
-    /** ISO 3166-1 alpha-2 country of residence. Used by global identity-enrichment services (e.g. `glb_identity_enrichment`) to focus the lookup. */
+    /** ISO 3166-1 alpha-2 country of residence. It was used only by the retired global identity-enrichment service (`glb_identity_enrichment`), which Didit no longer offers. */
     country_of_residence?: string;
     /** What a `partial_match` does to `database_validation.status`. Defaults to `NO_ACTION` (status stays `Approved`, with a warning). */
     partial_match_action?: "DECLINE" | "NO_ACTION" | (string & {});
@@ -23281,7 +23289,7 @@ declare class TokenVerificationError extends DiditError {
     constructor(reason: TokenVerificationReason, message: string);
 }
 
-declare const VERSION = "2.3.0";
+declare const VERSION = "2.4.0";
 
 /**
  * The canonical JSON of a parsed webhook body: the text `X-Signature-V2` signs

package/dist/index.d.ts

@@ -10129,6 +10129,14 @@ interface VerifyEmailResponse {
     organization?: OrganizationSummary;
     /** Minimal application shape returned inline by `POST /programmatic/verify-email/`. Persist the `api_key` immediately. */
     application?: ApplicationCredentialsSummary;
+    /** Present and `true` when the account already has an authenticator app or a passkey. The response then carries `temp_token` instead of tokens and application keys. */
+    "2fa_required"?: boolean;
+    /** Short-lived token for the second-factor step, sent only with `2fa_required`. It is not an access token. */
+    temp_token?: string;
+    /** With `2fa_required`: whether the account has an authenticator app. */
+    has_authenticator?: boolean;
+    /** With `2fa_required`: whether the account has a passkey. */
+    has_passkeys?: boolean;
 }
 interface WalletAddressEntry {
     uuid?: string;
@@ -10747,7 +10755,7 @@ declare class Account extends APIResource {
     /**
      * Verify Email and Issue Credentials
      *
-     * Step 2 of onboarding. Exchanges the 6-char code for a verified account, a default org+app, and a JWT pair. Persist the returned `api_key`.
+     * Step 2 of onboarding. Exchanges the 6-char code for a verified account, a default org+app, and a JWT pair. Persist the returned `api_key`. An account that already has an authenticator app or a passkey gets the same second-factor step as the login instead: `2fa_required: true` and a `temp_token`, with no tokens and no application keys.
      *
      * `POST /programmatic/verify-email/`
      */
@@ -13383,7 +13391,7 @@ interface DatabaseValidationValidateParams {
     landline?: string;
     /** Email address for identity-verification services. */
     email?: string;
-    /** ISO 3166-1 alpha-2 country of residence. Used by global identity-enrichment services (e.g. `glb_identity_enrichment`) to focus the lookup. */
+    /** ISO 3166-1 alpha-2 country of residence. It was used only by the retired global identity-enrichment service (`glb_identity_enrichment`), which Didit no longer offers. */
     country_of_residence?: string;
     /** What a `partial_match` does to `database_validation.status`. Defaults to `NO_ACTION` (status stays `Approved`, with a warning). */
     partial_match_action?: "DECLINE" | "NO_ACTION" | (string & {});
@@ -23281,7 +23289,7 @@ declare class TokenVerificationError extends DiditError {
     constructor(reason: TokenVerificationReason, message: string);
 }
 
-declare const VERSION = "2.3.0";
+declare const VERSION = "2.4.0";
 
 /**
  * The canonical JSON of a parsed webhook body: the text `X-Signature-V2` signs

package/dist/index.js

@@ -278,7 +278,7 @@ function decodeDates(value, plan, named, depth = 0) {
 }
 
 // src/core/version.ts
-var VERSION = "2.3.0";
+var VERSION = "2.4.0";
 
 // src/core/runtime.ts
 function processLike() {
@@ -2042,7 +2042,7 @@ var Account = class extends APIResource {
   /**
    * Verify Email and Issue Credentials
    *
-   * Step 2 of onboarding. Exchanges the 6-char code for a verified account, a default org+app, and a JWT pair. Persist the returned `api_key`.
+   * Step 2 of onboarding. Exchanges the 6-char code for a verified account, a default org+app, and a JWT pair. Persist the returned `api_key`. An account that already has an authenticator app or a passkey gets the same second-factor step as the login instead: `2fa_required: true` and a `temp_token`, with no tokens and no application keys.
    *
    * `POST /programmatic/verify-email/`
    */