@fluxbase/sdk 2026.1.22 → 2026.2.2-rc.1

package/dist/index.cjs

@@ -485,6 +485,12 @@ var FluxbaseAuth = class {
       if (credentials.captchaToken) {
         requestBody.captcha_token = credentials.captchaToken;
       }
+      if (credentials.challengeId) {
+        requestBody.challenge_id = credentials.challengeId;
+      }
+      if (credentials.deviceFingerprint) {
+        requestBody.device_fingerprint = credentials.deviceFingerprint;
+      }
       const response = await this.fetch.post("/api/v1/auth/signin", requestBody);
       if ("requires_2fa" in response && response.requires_2fa) {
         return response;
@@ -523,6 +529,12 @@ var FluxbaseAuth = class {
       if (credentials.captchaToken) {
         requestBody.captcha_token = credentials.captchaToken;
       }
+      if (credentials.challengeId) {
+        requestBody.challenge_id = credentials.challengeId;
+      }
+      if (credentials.deviceFingerprint) {
+        requestBody.device_fingerprint = credentials.deviceFingerprint;
+      }
       const response = await this.fetch.post(
         "/api/v1/auth/signup",
         requestBody
@@ -548,6 +560,65 @@ var FluxbaseAuth = class {
       return await this.fetch.get("/api/v1/auth/captcha/config");
     });
   }
+  /**
+   * Check if CAPTCHA is required for an authentication action (adaptive trust)
+   *
+   * This pre-flight check evaluates trust signals (known IP, device, previous CAPTCHA)
+   * to determine if CAPTCHA verification is needed. Use this before showing auth forms
+   * to provide a better user experience for trusted users.
+   *
+   * @param request - Check request with endpoint and optional trust signals
+   * @returns Promise with whether CAPTCHA is required and challenge tracking info
+   *
+   * @example
+   * ```typescript
+   * // Check if CAPTCHA is needed for login
+   * const { data, error } = await client.auth.checkCaptcha({
+   *   endpoint: 'login',
+   *   email: 'user@example.com'
+   * });
+   *
+   * if (data?.captcha_required) {
+   *   // Show CAPTCHA widget using data.provider and data.site_key
+   *   const captchaToken = await showCaptchaWidget(data.provider, data.site_key);
+   *
+   *   // Include challenge_id and captcha token in sign in
+   *   await client.auth.signIn({
+   *     email: 'user@example.com',
+   *     password: 'password',
+   *     captchaToken,
+   *     challengeId: data.challenge_id
+   *   });
+   * } else {
+   *   // No CAPTCHA needed - trusted user
+   *   await client.auth.signIn({
+   *     email: 'user@example.com',
+   *     password: 'password',
+   *     challengeId: data?.challenge_id // Still include challenge_id
+   *   });
+   * }
+   * ```
+   */
+  async checkCaptcha(request) {
+    return wrapAsync(async () => {
+      const requestBody = {
+        endpoint: request.endpoint
+      };
+      if (request.email) {
+        requestBody.email = request.email;
+      }
+      if (request.deviceFingerprint) {
+        requestBody.device_fingerprint = request.deviceFingerprint;
+      }
+      if (request.trustToken) {
+        requestBody.trust_token = request.trustToken;
+      }
+      return await this.fetch.post(
+        "/api/v1/auth/captcha/check",
+        requestBody
+      );
+    });
+  }
   /**
    * Get comprehensive authentication configuration from the server
    * Returns all public auth settings including signup status, OAuth providers,