@eetr/eetr-auth-client 0.2.0 → 0.3.1

package/dist/index.d.ts

@@ -7,4 +7,6 @@ export { validateJwt, decodeJwtPayload } from "./jwt.js";
 export type { ValidateJwtOptions } from "./jwt.js";
 export { getAdminUser, createAdminUser, updateAdminUser, deleteAdminUser, } from "./admin.js";
 export type { AdminUserRecord, AdminClientConfig, CreateUserParams, UpdateUserParams, } from "./admin.js";
+export { listPasskeys, renamePasskey, removePasskey } from "./passkeys.js";
+export type { PasskeySummary, UserClientConfig } from "./passkeys.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EACL,UAAU,EACV,aAAa,EACb,eAAe,EACf,WAAW,GACZ,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACzD,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EACL,UAAU,EACV,aAAa,EACb,eAAe,EACf,WAAW,GACZ,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACzD,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC3E,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -3,4 +3,5 @@ export { OAuthError, exchangeToken, introspectToken, getUserInfo, } from "./api.
 export { TokenManager } from "./tokens.js";
 export { validateJwt, decodeJwtPayload } from "./jwt.js";
 export { getAdminUser, createAdminUser, updateAdminUser, deleteAdminUser, } from "./admin.js";
+export { listPasskeys, renamePasskey, removePasskey } from "./passkeys.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EACL,UAAU,EACV,aAAa,EACb,eAAe,EACf,WAAW,GACZ,MAAM,UAAU,CAAC;AASlB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGzD,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EACL,UAAU,EACV,aAAa,EACb,eAAe,EACf,WAAW,GACZ,MAAM,UAAU,CAAC;AASlB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGzD,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AAQpB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/passkeys.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Safe, display-only view of a passkey returned by the auth server. Mirrors the
+ * server-side `PasskeySummary` — never includes the public key, counter, or raw
+ * credential id.
+ */
+export interface PasskeySummary {
+    id: string;
+    name: string | null;
+    /** Backed up / synced across devices (e.g. iCloud Keychain, Google Password Manager). */
+    synced: boolean;
+    /** Single-device credential. */
+    deviceBound: boolean;
+    createdAt: string;
+    lastUsedAt: string | null;
+}
+/**
+ * Config for the passkey management endpoints. These are user-scoped: the access
+ * token must belong to the user whose passkeys are being managed.
+ *
+ * Note: only passkey *management* (list/rename/remove) is available here. Creating
+ * or authenticating with a passkey is a WebAuthn ceremony that requires a browser
+ * and cannot be driven by a server-side client.
+ */
+export interface UserClientConfig {
+    baseUrl: string;
+    accessToken: string;
+}
+/**
+ * List the authenticated user's passkeys.
+ */
+export declare function listPasskeys(config: UserClientConfig): Promise<PasskeySummary[]>;
+/**
+ * Rename one of the authenticated user's passkeys. Throws `OAuthError` with code
+ * `not_found` if the passkey does not exist or is not owned by the user.
+ */
+export declare function renamePasskey(id: string, name: string, config: UserClientConfig): Promise<void>;
+/**
+ * Remove one of the authenticated user's passkeys (server-side record only — this
+ * does not delete the credential from the device/authenticator). Throws `OAuthError`
+ * with code `not_found` if the passkey does not exist or is not owned by the user.
+ */
+export declare function removePasskey(id: string, config: UserClientConfig): Promise<void>;
+//# sourceMappingURL=passkeys.d.ts.map

package/dist/passkeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkeys.d.ts","sourceRoot":"","sources":["../src/passkeys.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,yFAAyF;IACzF,MAAM,EAAE,OAAO,CAAC;IAChB,gCAAgC;IAChC,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAqBD;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAStF;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQvF"}

package/dist/passkeys.js

@@ -0,0 +1,57 @@
+import { OAuthError } from "./api.js";
+function passkeysUrl(baseUrl, id) {
+    const trimmed = baseUrl.replace(/\/+$/, "");
+    if (id === undefined) {
+        return `${trimmed}/api/users/passkey`;
+    }
+    return `${trimmed}/api/users/passkey/${encodeURIComponent(id)}`;
+}
+async function parseError(res) {
+    const data = (await res.json().catch(() => ({})));
+    return new OAuthError(data.error ?? "server_error", data.error_description ?? `Passkey API request failed: ${res.status}`);
+}
+/**
+ * List the authenticated user's passkeys.
+ */
+export async function listPasskeys(config) {
+    const res = await fetch(passkeysUrl(config.baseUrl), {
+        headers: { Authorization: `Bearer ${config.accessToken}` },
+    });
+    if (!res.ok) {
+        throw await parseError(res);
+    }
+    const data = (await res.json());
+    return data.passkeys;
+}
+/**
+ * Rename one of the authenticated user's passkeys. Throws `OAuthError` with code
+ * `not_found` if the passkey does not exist or is not owned by the user.
+ */
+export async function renamePasskey(id, name, config) {
+    const res = await fetch(passkeysUrl(config.baseUrl, id), {
+        method: "PATCH",
+        headers: {
+            Authorization: `Bearer ${config.accessToken}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ name }),
+    });
+    if (!res.ok) {
+        throw await parseError(res);
+    }
+}
+/**
+ * Remove one of the authenticated user's passkeys (server-side record only — this
+ * does not delete the credential from the device/authenticator). Throws `OAuthError`
+ * with code `not_found` if the passkey does not exist or is not owned by the user.
+ */
+export async function removePasskey(id, config) {
+    const res = await fetch(passkeysUrl(config.baseUrl, id), {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${config.accessToken}` },
+    });
+    if (!res.ok) {
+        throw await parseError(res);
+    }
+}
+//# sourceMappingURL=passkeys.js.map

package/dist/passkeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkeys.js","sourceRoot":"","sources":["../src/passkeys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AA+BtC,SAAS,WAAW,CAAC,OAAe,EAAE,EAAW;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,GAAG,OAAO,oBAAoB,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,OAAO,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAa;IACrC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAG/C,CAAC;IACF,OAAO,IAAI,UAAU,CACnB,IAAI,CAAC,KAAK,IAAI,cAAc,EAC5B,IAAI,CAAC,iBAAiB,IAAI,+BAA+B,GAAG,CAAC,MAAM,EAAE,CACtE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAwB;IACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QACnD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;KAC3D,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmC,CAAC;IAClE,OAAO,IAAI,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAU,EACV,IAAY,EACZ,MAAwB;IAExB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE;QACvD,MAAM,EAAE,OAAO;QACf,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;YAC7C,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU,EAAE,MAAwB;IACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE;QACvD,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;KAC3D,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eetr/eetr-auth-client",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "TypeScript client library for eetr-auth OAuth 2.1 / OIDC server",
   "type": "module",
   "main": "./dist/index.js",