@fonderie/client 0.22.0 → 0.23.0

package/brain/signatures.md

@@ -143,6 +143,7 @@ new AuthClient(http: HttpClient, tokens: TokenStore): AuthClient
   .mfa: MfaClient
   .setAccessToken(token: string | undefined): void
   .providers(): Promise<IApiResponse<IAuthProvidersResult>>
+  .unlinkOauth(provider: string): Promise<IApiResponse<null>>
   .register(input: IRegisterInput): Promise<IApiResponse<IRegisterResult>>
   .login(input: ILoginInput): Promise<IApiResponse<ILoginResult | IMfaRequiredResult>>
   .appleNative(input: IAppleNativeInput): Promise<IApiResponse<ILoginResult>>
@@ -1055,6 +1056,8 @@ interface IUserDTO {
     isEmailVerified: boolean;
     isPhoneVerified: boolean;
     mfaEnabled: boolean;
+    provider: string;
+    hasPassword: boolean;
     suspended: boolean;
     whitelist: boolean;
     ipWhitelist: string[];

package/dist/index.cjs

@@ -295,6 +295,20 @@ var AuthClient = class {
       path: "/auth/providers"
     });
   }
+  /**
+   * Disconnect the OAuth provider linked to the signed-in account.
+   *
+   * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+   * removing the only credential is account deletion, not a settings toggle.
+   * Check `user.hasPassword` before offering the control so the user is asked
+   * to set a password first rather than shown an error they can't act on.
+   */
+  unlinkOauth(provider) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/auth/oauth/${encodeURIComponent(provider)}`
+    });
+  }
   register(input) {
     return this.http.request({
       method: "POST",