@fonderie/client 0.21.0 → 0.23.0

package/dist/index.d.cts

@@ -95,6 +95,8 @@ interface IUserDTO {
     isEmailVerified: boolean;
     isPhoneVerified: boolean;
     mfaEnabled: boolean;
+    provider: string;
+    hasPassword: boolean;
     suspended: boolean;
     whitelist: boolean;
     ipWhitelist: string[];
@@ -105,6 +107,10 @@ interface ITokens {
     access: string;
     refresh: string;
 }
+/** What GET /auth/providers answers: the sign-in methods this API can honour. */
+interface IAuthProvidersResult {
+    providers: string[];
+}
 interface IRegisterResult {
     tokens: ITokens;
     user: IUserDTO;
@@ -745,6 +751,25 @@ declare class AuthClient {
     readonly mfa: MfaClient;
     constructor(http: HttpClient, tokens: TokenStore);
     setAccessToken(token: string | undefined): void;
+    /**
+     * Which sign-in methods this deployment can actually honour.
+     *
+     * Public — the login screen needs it before anyone has signed in. Ask the
+     * server rather than shipping a build-time flag: the flag stores the same
+     * fact twice and lets the two disagree, and the symptom is a user clicking
+     * a provider the server cannot complete and landing on the provider's own
+     * error page, which the app cannot explain.
+     */
+    providers(): Promise<IApiResponse<IAuthProvidersResult>>;
+    /**
+     * Disconnect the OAuth provider linked to the signed-in account.
+     *
+     * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+     * removing the only credential is account deletion, not a settings toggle.
+     * Check `user.hasPassword` before offering the control so the user is asked
+     * to set a password first rather than shown an error they can't act on.
+     */
+    unlinkOauth(provider: string): Promise<IApiResponse<null>>;
     register(input: IRegisterInput): Promise<IApiResponse<IRegisterResult>>;
     login(input: ILoginInput): Promise<IApiResponse<ILoginResult | IMfaRequiredResult>>;
     appleNative(input: IAppleNativeInput): Promise<IApiResponse<ILoginResult>>;

package/dist/index.d.ts

@@ -95,6 +95,8 @@ interface IUserDTO {
     isEmailVerified: boolean;
     isPhoneVerified: boolean;
     mfaEnabled: boolean;
+    provider: string;
+    hasPassword: boolean;
     suspended: boolean;
     whitelist: boolean;
     ipWhitelist: string[];
@@ -105,6 +107,10 @@ interface ITokens {
     access: string;
     refresh: string;
 }
+/** What GET /auth/providers answers: the sign-in methods this API can honour. */
+interface IAuthProvidersResult {
+    providers: string[];
+}
 interface IRegisterResult {
     tokens: ITokens;
     user: IUserDTO;
@@ -745,6 +751,25 @@ declare class AuthClient {
     readonly mfa: MfaClient;
     constructor(http: HttpClient, tokens: TokenStore);
     setAccessToken(token: string | undefined): void;
+    /**
+     * Which sign-in methods this deployment can actually honour.
+     *
+     * Public — the login screen needs it before anyone has signed in. Ask the
+     * server rather than shipping a build-time flag: the flag stores the same
+     * fact twice and lets the two disagree, and the symptom is a user clicking
+     * a provider the server cannot complete and landing on the provider's own
+     * error page, which the app cannot explain.
+     */
+    providers(): Promise<IApiResponse<IAuthProvidersResult>>;
+    /**
+     * Disconnect the OAuth provider linked to the signed-in account.
+     *
+     * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+     * removing the only credential is account deletion, not a settings toggle.
+     * Check `user.hasPassword` before offering the control so the user is asked
+     * to set a password first rather than shown an error they can't act on.
+     */
+    unlinkOauth(provider: string): Promise<IApiResponse<null>>;
     register(input: IRegisterInput): Promise<IApiResponse<IRegisterResult>>;
     login(input: ILoginInput): Promise<IApiResponse<ILoginResult | IMfaRequiredResult>>;
     appleNative(input: IAppleNativeInput): Promise<IApiResponse<ILoginResult>>;

package/dist/index.js

@@ -242,6 +242,35 @@ var AuthClient = class {
     if (!token) this.http.clearCache();
   }
   // ── Public ─────────────────────────────────────────────────────────────────
+  /**
+   * Which sign-in methods this deployment can actually honour.
+   *
+   * Public — the login screen needs it before anyone has signed in. Ask the
+   * server rather than shipping a build-time flag: the flag stores the same
+   * fact twice and lets the two disagree, and the symptom is a user clicking
+   * a provider the server cannot complete and landing on the provider's own
+   * error page, which the app cannot explain.
+   */
+  providers() {
+    return this.http.request({
+      method: "GET",
+      path: "/auth/providers"
+    });
+  }
+  /**
+   * Disconnect the OAuth provider linked to the signed-in account.
+   *
+   * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+   * removing the only credential is account deletion, not a settings toggle.
+   * Check `user.hasPassword` before offering the control so the user is asked
+   * to set a password first rather than shown an error they can't act on.
+   */
+  unlinkOauth(provider) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/auth/oauth/${encodeURIComponent(provider)}`
+    });
+  }
   register(input) {
     return this.http.request({
       method: "POST",