@geolonia/geonicdb-sdk 0.14.0 → 0.15.0

package/geonicdb.mjs

@@ -46,6 +46,7 @@ var RECONNECT_MAX_ATTEMPTS = 10;
 var RECONNECT_BASE_MS = 1e3;
 var RECONNECT_MAX_DELAY_MS = 3e4;
 var SUB_PROTOCOL = "access_token";
+var NGSI_LD_CORE_CONTEXT = "https://uri.etsi.org/ngsi-ld/v1/ngsi-ld-core-context.jsonld";
 var SDK_CACHE_MAX_ENTRIES_DEFAULT = 1e3;
 var SDK_POLL_INTERVAL_MS_DEFAULT = 5e3;
 var DPOP_IDB_NAME = "geonicdb-sdk";
@@ -287,6 +288,20 @@ var ConflictError = class extends GeonicDBError {
     this.name = "ConflictError";
   }
 };
+var PasswordResetRequiredError = class extends AuthenticationError {
+  constructor(message = "Password reset required: set a new password to complete login") {
+    super(message);
+    this.name = "PasswordResetRequiredError";
+    this.statusCode = 409;
+  }
+};
+var TemporaryPasswordExpiredError = class extends AuthenticationError {
+  constructor(message = "Temporary password expired: ask an administrator to re-issue it") {
+    super(message);
+    this.name = "TemporaryPasswordExpiredError";
+    this.statusCode = 403;
+  }
+};
 var ValidationError = class extends GeonicDBError {
   constructor(message = "Validation failed") {
     super(message, 422);
@@ -677,16 +692,24 @@ var _AuthManager = class _AuthManager {
       "Content-Type": "application/json"
     };
     if (this._tenant) headers["NGSILD-Tenant"] = this._tenant;
+    const loginBody = { email, password };
+    if (options?.newPassword !== void 0) loginBody.newPassword = options.newPassword;
     const res = await fetch(this._baseUrl + "/auth/login", {
       method: "POST",
       headers,
-      body: JSON.stringify({ email, password })
+      body: JSON.stringify(loginBody)
     });
     if (!res.ok) {
       const e = await res.json().catch(() => ({}));
-      throw new AuthenticationError(
-        e.detail || e.description || "Login failed: " + res.status
-      );
+      const message = e.detail || e.description || "Login failed: " + res.status;
+      const code = e.error || e.type || e.title || "";
+      if (res.status === 409 && code.includes("PasswordResetRequired")) {
+        throw new PasswordResetRequiredError(message);
+      }
+      if (res.status === 403 && code.includes("TemporaryPasswordExpired")) {
+        throw new TemporaryPasswordExpiredError(message);
+      }
+      throw new AuthenticationError(message);
     }
     const data = await res.json();
     this._anonymous = false;
@@ -1187,7 +1210,15 @@ var _AuthManager = class _AuthManager {
     }
     const url = this._baseUrl + path;
     const isDPoP = this._tokenType === "DPoP" && !!this._dpopKeyPair && token !== null;
-    const bodyStr = body !== void 0 ? JSON.stringify(body) : void 0;
+    const isEntityWrite = path.split("?")[0].startsWith("/ngsi-ld/v1/entities");
+    let effectiveBody = body;
+    if (isEntityWrite && effectiveBody !== null && typeof effectiveBody === "object" && !Array.isArray(effectiveBody) && !("@context" in effectiveBody)) {
+      effectiveBody = {
+        ...effectiveBody,
+        "@context": NGSI_LD_CORE_CONTEXT
+      };
+    }
+    const bodyStr = effectiveBody !== void 0 ? JSON.stringify(effectiveBody) : void 0;
     const doRequest = async (reqToken, dpopNonce) => {
       const reqIsDPoP = this._tokenType === "DPoP" && !!this._dpopKeyPair && reqToken !== null;
       const dpopProof = reqIsDPoP ? await createDPoPProof(
@@ -2086,7 +2117,9 @@ export {
   GeonicDBError,
   NetworkError,
   NotFoundError,
+  PasswordResetRequiredError,
   RateLimitError,
+  TemporaryPasswordExpiredError,
   ValidationError,
   buildPathWithParams,
   index_default as default