@fonoster/identity-client 0.27.0 → 0.31.0

package/dist/index.d.ts

@@ -125,6 +125,14 @@ export declare class IdentityClient {
     }>;
     exchangeCredentials(request: ExchangeCredentialsRequest): Promise<ExchangeResponse>;
     exchangeRefreshToken(refreshToken: string): Promise<ExchangeResponse>;
+    /** Passwordless sign-in: the code emailed by `sendVerificationCode`, for tokens. */
+    exchangeVerificationCode(email: string, code: string): Promise<ExchangeResponse>;
+    /**
+     * Sign-out: revokes `refreshToken` and every token rotated from the same
+     * sign-in, so it can no longer be exchanged. Access tokens already issued
+     * stay valid until they expire.
+     */
+    revokeToken(refreshToken: string): Promise<void>;
     /**
      * Exchange a workspace API key (accessKeyId + accessKeySecret) for tokens.
      * Intended for unattended, server-to-server integrations that cannot perform

package/dist/index.js

@@ -136,6 +136,18 @@ class IdentityClient {
     exchangeRefreshToken(refreshToken) {
         return this.unary("exchangeRefreshToken", { refreshToken });
     }
+    /** Passwordless sign-in: the code emailed by `sendVerificationCode`, for tokens. */
+    exchangeVerificationCode(email, code) {
+        return this.unary("exchangeVerificationCode", { email, code });
+    }
+    /**
+     * Sign-out: revokes `refreshToken` and every token rotated from the same
+     * sign-in, so it can no longer be exchanged. Access tokens already issued
+     * stay valid until they expire.
+     */
+    async revokeToken(refreshToken) {
+        await this.unary("revokeToken", { token: refreshToken });
+    }
     /**
      * Exchange a workspace API key (accessKeyId + accessKeySecret) for tokens.
      * Intended for unattended, server-to-server integrations that cannot perform

package/package.json

@@ -1,17 +1,24 @@
 {
   "name": "@fonoster/identity-client",
-  "version": "0.27.0",
+  "version": "0.31.0",
   "description": "Lightweight client for the Fonoster Identity gRPC service",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/fonoster/fonoster.git"
+  },
+  "bugs": {
+    "url": "https://github.com/fonoster/fonoster/issues"
+  },
+  "homepage": "https://github.com/fonoster/fonoster#readme",
   "main": "dist/index",
   "types": "dist/index",
   "scripts": {
     "prebuild": "rimraf ./dist tsconfig.tsbuildinfo && node scripts/sync-proto.mjs",
-    "build": "tsc -p tsconfig.json",
-    "clean": "rimraf ./dist node_modules tsconfig.tsbuildinfo proto"
+    "build": "tsc -p tsconfig.json"
   },
   "dependencies": {
-    "@grpc/grpc-js": "~1.10.6",
+    "@grpc/grpc-js": "~1.14.6",
     "@grpc/proto-loader": "^0.7.15",
     "jsonwebtoken": "^9.0.2"
   },
@@ -28,5 +35,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "1191b34677b51a36000177887ff82303ef2693e1"
+  "gitHead": "f0a5102dddeea0f70f659234108805bc10690f2e"
 }

package/proto/identity.proto

@@ -56,6 +56,8 @@ service Identity {
   rpc ExchangeApiKey (ExchangeApiKeyRequest) returns (ExchangeApiKeyResponse) {}
   rpc ExchangeOauth2Code (ExchangeOauth2CodeRequest) returns (ExchangeOauth2CodeResponse) {}
   rpc ExchangeRefreshToken (ExchangeRefreshTokenRequest) returns (ExchangeRefreshTokenResponse) {}
+  // Trade an emailed sign-in code for tokens (passwordless sign-in)
+  rpc ExchangeVerificationCode (ExchangeVerificationCodeRequest) returns (ExchangeVerificationCodeResponse) {}
   rpc RevokeToken (RevokeTokenRequest) returns (RevokeTokenResponse) {}
 
   // Get the public key for verifying JWTs
@@ -78,14 +80,22 @@ message Workspace {
   int32 created_at = 5;
   int32 updated_at = 6;
   Owner owner = 7;
+  // A public region id (default, us-east-1) or a private region ref (rg_...). Immutable.
+  string region = 8;
 }
 
 message CreateWorkspaceRequest {
   string name = 1;
+  // A public region id, or one of the caller's private regions (id or rg_ ref). Empty means "default".
+  string region = 2;
 }
 
 message CreateWorkspaceResponse {
   string ref = 1;
+  string region = 2;
+  // Unused since PR-15 (regions are created at the user level, POST /api/regions); kept reserved.
+  string enrollment_token = 3;
+  string expires_at = 4;
 }
 
 message DeleteWorkspaceRequest {
@@ -113,6 +123,8 @@ message ListWorkspacesResponse {
 message UpdateWorkspaceRequest {
   string ref = 1;
   string name = 2;
+  // Accepted only when unchanged (the region is immutable).
+  string region = 3;
 }
 
 message UpdateWorkspaceResponse {
@@ -204,10 +216,12 @@ message User {
 
 message UpdateUserRequest {
   string ref = 1;
+  // A new password; current_password must be the account's password.
   string password = 2;
   string name = 3;
   string avatar = 4;
   string phone = 5;
+  string current_password = 6;
 }
 
 message UpdateUserResponse {
@@ -356,4 +370,15 @@ message RevokeTokenResponse {
 // Message with response with the public key
 message GetPublicKeyResponse {
   string public_key = 1;
-}
+}
+
+message ExchangeVerificationCodeRequest {
+  string email = 1;
+  string code = 2;
+}
+
+message ExchangeVerificationCodeResponse {
+  string id_token = 1;
+  string access_token = 2;
+  string refresh_token = 3;
+}