@fonderie/client 0.21.0 → 0.23.0

package/brain/signatures.md

@@ -142,6 +142,8 @@ interface IUpdateProfileInput {
 new AuthClient(http: HttpClient, tokens: TokenStore): AuthClient
   .mfa: MfaClient
   .setAccessToken(token: string | undefined): void
+  .providers(): Promise<IApiResponse<IAuthProvidersResult>>
+  .unlinkOauth(provider: string): Promise<IApiResponse<null>>
   .register(input: IRegisterInput): Promise<IApiResponse<IRegisterResult>>
   .login(input: ILoginInput): Promise<IApiResponse<ILoginResult | IMfaRequiredResult>>
   .appleNative(input: IAppleNativeInput): Promise<IApiResponse<ILoginResult>>
@@ -1054,6 +1056,8 @@ interface IUserDTO {
     isEmailVerified: boolean;
     isPhoneVerified: boolean;
     mfaEnabled: boolean;
+    provider: string;
+    hasPassword: boolean;
     suspended: boolean;
     whitelist: boolean;
     ipWhitelist: string[];

package/dist/index.cjs

@@ -280,6 +280,35 @@ var AuthClient = class {
     if (!token) this.http.clearCache();
   }
   // ── Public ─────────────────────────────────────────────────────────────────
+  /**
+   * Which sign-in methods this deployment can actually honour.
+   *
+   * Public — the login screen needs it before anyone has signed in. Ask the
+   * server rather than shipping a build-time flag: the flag stores the same
+   * fact twice and lets the two disagree, and the symptom is a user clicking
+   * a provider the server cannot complete and landing on the provider's own
+   * error page, which the app cannot explain.
+   */
+  providers() {
+    return this.http.request({
+      method: "GET",
+      path: "/auth/providers"
+    });
+  }
+  /**
+   * Disconnect the OAuth provider linked to the signed-in account.
+   *
+   * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+   * removing the only credential is account deletion, not a settings toggle.
+   * Check `user.hasPassword` before offering the control so the user is asked
+   * to set a password first rather than shown an error they can't act on.
+   */
+  unlinkOauth(provider) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/auth/oauth/${encodeURIComponent(provider)}`
+    });
+  }
   register(input) {
     return this.http.request({
       method: "POST",