@fluxbase/sdk 0.0.1-rc.116 → 0.0.1-rc.118

package/dist/index.cjs

@@ -333,6 +333,7 @@ async function wrapAsyncVoid(operation) {
 
 // src/auth.ts
 var AUTH_STORAGE_KEY = "fluxbase.auth.session";
+var OAUTH_PROVIDER_KEY = "fluxbase.auth.oauth_provider";
 var AUTO_REFRESH_TICK_THRESHOLD = 10;
 var AUTO_REFRESH_TICK_MINIMUM = 1e3;
 var MAX_REFRESH_RETRIES = 3;
@@ -757,12 +758,15 @@ var FluxbaseAuth = class {
    * Send password reset email (Supabase-compatible)
    * Sends a password reset link to the provided email address
    * @param email - Email address to send reset link to
-   * @param options - Optional configuration including CAPTCHA token
+   * @param options - Optional configuration including redirect URL and CAPTCHA token
    * @returns Promise with OTP-style response
    */
   async sendPasswordReset(email, options) {
     return wrapAsync(async () => {
       const requestBody = { email };
+      if (options?.redirectTo) {
+        requestBody.redirect_to = options.redirectTo;
+      }
       if (options?.captchaToken) {
         requestBody.captcha_token = options.captchaToken;
       }
@@ -778,6 +782,7 @@ var FluxbaseAuth = class {
    */
   async resetPasswordForEmail(email, options) {
     return this.sendPasswordReset(email, {
+      redirectTo: options?.redirectTo,
       captchaToken: options?.captchaToken
     });
   }
@@ -910,13 +915,22 @@ var FluxbaseAuth = class {
    * Exchange OAuth authorization code for session
    * This is typically called in your OAuth callback handler
    * @param code - Authorization code from OAuth callback
+   * @param state - State parameter from OAuth callback (for CSRF protection)
    */
-  async exchangeCodeForSession(code) {
+  async exchangeCodeForSession(code, state) {
     return wrapAsync(async () => {
-      const response = await this.fetch.post(
-        "/api/v1/auth/oauth/callback",
-        { code }
+      const provider = this.storage?.getItem(OAUTH_PROVIDER_KEY);
+      if (!provider) {
+        throw new Error("No OAuth provider found. Call signInWithOAuth first.");
+      }
+      const params = new URLSearchParams({ code });
+      if (state) {
+        params.append("state", state);
+      }
+      const response = await this.fetch.get(
+        `/api/v1/auth/oauth/${provider}/callback?${params.toString()}`
       );
+      this.storage?.removeItem(OAUTH_PROVIDER_KEY);
       const session = {
         ...response,
         expires_at: Date.now() + response.expires_in * 1e3
@@ -939,6 +953,7 @@ var FluxbaseAuth = class {
       }
       const url = result.data.url;
       if (typeof window !== "undefined") {
+        this.storage?.setItem(OAUTH_PROVIDER_KEY, provider);
         window.location.href = url;
       } else {
         throw new Error(