@getpara/user-management-client 2.0.0-dev.3 → 2.0.0-dev.7

package/dist/cjs/client.js

@@ -132,9 +132,13 @@ class Client {
       });
       return res.data;
     });
-    this.verifyTelegram = (authObject) => __async(this, null, function* () {
+    this.verifyTelegram = (_0) => __async(this, [_0], function* ({
+      authObject,
+      sessionLookupId
+    }) {
       return (yield this.baseRequest.post("/users/telegram/v2", {
-        authObject
+        authObject,
+        sessionLookupId
       })).data;
     });
     this.verifyOAuth = () => __async(this, null, function* () {
@@ -151,8 +155,16 @@ class Client {
       });
       return res.data;
     });
-    this.verifyNewAccount = (userId, body) => __async(this, null, function* () {
-      const res = yield this.baseRequest.post(`/users/${userId}/verify`, body);
+    this.verifyAccount = (userId, body) => __async(this, null, function* () {
+      const res = yield this.baseRequest.post(
+        `/users/${userId}/verify`,
+        body
+      );
+      return res.data;
+    });
+    // POST /users/send-login-code
+    this.sendLoginVerificationCode = (auth, isRecovery) => __async(this, null, function* () {
+      const res = yield this.baseRequest.post(`/users/send-login-code`, __spreadProps(__spreadValues({}, auth), { isRecovery }));
       return res.data;
     });
     this.getLinkedAccounts = (_0) => __async(this, [_0], function* ({
@@ -212,7 +224,10 @@ class Client {
       return res;
     });
     this.verifyExternalWallet = (userId, body) => __async(this, null, function* () {
-      const res = yield this.baseRequest.post(`/users/${userId}/external-wallets/verify/v2`, body);
+      const res = yield this.baseRequest.post(
+        `/users/${userId}/external-wallets/verify/v2`,
+        body
+      );
       return res.data;
     });
     // POST /users/:userId/biometrics/key
@@ -258,11 +273,26 @@ class Client {
       const res = yield this.baseRequest.post(`/touch?regenerate=${!!regenerate}`);
       return res.data;
     });
-    // GET /session/origin
+    // GET /sessions/:sessionLookupId/origin
     this.sessionOrigin = (sessionLookupId) => __async(this, null, function* () {
       const res = yield this.baseRequest.get(`/sessions/${sessionLookupId}/origin`);
       return res.data;
     });
+    // GET /sessions/:sessionLookupId/login-method
+    this.sessionLoginMethod = (sessionLookupId) => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(`/sessions/${sessionLookupId}/login-method`);
+      return res.data;
+    });
+    // GET /sessions/:sessionLookupId/auth-verified
+    this.sessionAuthVerified = (sessionLookupId) => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(`/sessions/${sessionLookupId}/auth-verified`);
+      return res.data;
+    });
+    // GET /sessions/:sessionLookupId/auth
+    this.sessionAuth = (sessionLookupId) => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(`/sessions/${sessionLookupId}/auth`);
+      return res.data;
+    });
     // POST /biometrics/verify
     this.verifyWebChallenge = (partnerId, body) => __async(this, null, function* () {
       const res = yield this.baseRequest.post(`/biometrics/verify`, body, {
@@ -425,6 +455,43 @@ class Client {
     this.trackReactSdkAnalytics = (opts) => __async(this, null, function* () {
       yield this.baseRequest.post("/partners/analytics/react-sdk", opts);
     });
+    // ENCLAVE METHODS
+    /**
+     * Get the enclave's public key for encryption
+     */
+    this.getEnclavePublicKey = () => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(
+        "/enclave/public-key"
+      );
+      return res.data;
+    });
+    /**
+     * Persist encrypted key shares to the enclave
+     * @param encryptedPayload JSON string containing the encrypted ECIES payload
+     */
+    this.persistEnclaveShares = (encryptedPayload) => __async(this, null, function* () {
+      const body = { encryptedPayload };
+      const res = yield this.baseRequest.post("/enclave/key-shares", body);
+      return res.data;
+    });
+    /**
+     * Retrieve encrypted key shares from the enclave
+     * @param encryptedPayload JSON string containing the encrypted ECIES query
+     */
+    this.retrieveEnclaveShares = (encryptedPayload) => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(
+        `/enclave/key-shares?encryptedPayload=${encodeURIComponent(encryptedPayload)}`
+      );
+      return res.data;
+    });
+    this.issueEnclaveJwt = (encryptedPayload) => __async(this, null, function* () {
+      const res = yield this.baseRequest.post(`/enclave/jwt/issue`, { encryptedPayload });
+      return res.data;
+    });
+    this.refreshEnclaveJwt = (encryptedPayload) => __async(this, null, function* () {
+      const res = yield this.baseRequest.post(`/enclave/jwt/refresh`, { encryptedPayload });
+      return res.data;
+    });
     const headers = __spreadValues(__spreadValues({}, apiKey && { [import_consts.API_KEY_HEADER_NAME]: apiKey }), partnerId && { [import_consts.PARTNER_ID_HEADER_NAME]: partnerId });
     const axiosConfig = {
       baseURL: userManagementHost,
@@ -600,8 +667,8 @@ class Client {
     });
   }
   getFarcasterAuthStatus() {
-    return __async(this, null, function* () {
-      const res = yield this.baseRequest.post(`/auth/farcaster/status/v2`);
+    return __async(this, arguments, function* ({ sessionLookupId } = {}) {
+      const res = yield this.baseRequest.post(`/auth/farcaster/status/v2`, { sessionLookupId });
       return res.data;
     });
   }
@@ -911,6 +978,17 @@ class Client {
       return res.data;
     });
   }
+  getSupportedAuthMethodsV2(auth) {
+    return __async(this, null, function* () {
+      const res = yield this.baseRequest.get(
+        "/users/supported-auth-methods/v2",
+        {
+          params: __spreadValues({}, auth)
+        }
+      );
+      return res.data;
+    });
+  }
   getPasswords(auth) {
     return __async(this, null, function* () {
       const res = yield this.baseRequest.get("/users/passwords", {
@@ -930,9 +1008,9 @@ class Client {
       return res;
     });
   }
-  getEncryptedWalletPrivateKey(passwordId) {
+  getEncryptedWalletPrivateKey(passwordId, sessionLookupId) {
     return __async(this, null, function* () {
-      const query = new URLSearchParams({ passwordId }).toString();
+      const query = new URLSearchParams({ passwordId, sessionLookupId }).toString();
       const res = yield this.baseRequest.get(`/encrypted-wallet-private-keys?${query}`);
       return res;
     });

package/dist/cjs/types/auth.js

@@ -22,6 +22,7 @@ __export(auth_exports, {
   EncryptorType: () => EncryptorType,
   KeyShareType: () => KeyShareType,
   LINKED_ACCOUNT_TYPES: () => LINKED_ACCOUNT_TYPES,
+  LegacyAuthMethod: () => LegacyAuthMethod,
   OAUTH_METHODS: () => OAUTH_METHODS,
   OAuthMethod: () => OAuthMethod,
   PasswordStatus: () => PasswordStatus,
@@ -95,8 +96,15 @@ const LINKED_ACCOUNT_TYPES = [
 var AuthMethod = /* @__PURE__ */ ((AuthMethod2) => {
   AuthMethod2["PASSWORD"] = "PASSWORD";
   AuthMethod2["PASSKEY"] = "PASSKEY";
+  AuthMethod2["PIN"] = "PIN";
+  AuthMethod2["SLO"] = "SLO";
   return AuthMethod2;
 })(AuthMethod || {});
+var LegacyAuthMethod = /* @__PURE__ */ ((LegacyAuthMethod2) => {
+  LegacyAuthMethod2["PASSWORD"] = "PASSWORD";
+  LegacyAuthMethod2["BIOMETRIC"] = "BIOMETRIC";
+  return LegacyAuthMethod2;
+})(LegacyAuthMethod || {});
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AUTH_TYPES,
@@ -104,6 +112,7 @@ var AuthMethod = /* @__PURE__ */ ((AuthMethod2) => {
   EncryptorType,
   KeyShareType,
   LINKED_ACCOUNT_TYPES,
+  LegacyAuthMethod,
   OAUTH_METHODS,
   OAuthMethod,
   PasswordStatus,

package/dist/esm/client.js

@@ -55,9 +55,13 @@ class Client {
       });
       return res.data;
     });
-    this.verifyTelegram = (authObject) => __async(this, null, function* () {
+    this.verifyTelegram = (_0) => __async(this, [_0], function* ({
+      authObject,
+      sessionLookupId
+    }) {
       return (yield this.baseRequest.post("/users/telegram/v2", {
-        authObject
+        authObject,
+        sessionLookupId
       })).data;
     });
     this.verifyOAuth = () => __async(this, null, function* () {
@@ -74,8 +78,16 @@ class Client {
       });
       return res.data;
     });
-    this.verifyNewAccount = (userId, body) => __async(this, null, function* () {
-      const res = yield this.baseRequest.post(`/users/${userId}/verify`, body);
+    this.verifyAccount = (userId, body) => __async(this, null, function* () {
+      const res = yield this.baseRequest.post(
+        `/users/${userId}/verify`,
+        body
+      );
+      return res.data;
+    });
+    // POST /users/send-login-code
+    this.sendLoginVerificationCode = (auth, isRecovery) => __async(this, null, function* () {
+      const res = yield this.baseRequest.post(`/users/send-login-code`, __spreadProps(__spreadValues({}, auth), { isRecovery }));
       return res.data;
     });
     this.getLinkedAccounts = (_0) => __async(this, [_0], function* ({
@@ -135,7 +147,10 @@ class Client {
       return res;
     });
     this.verifyExternalWallet = (userId, body) => __async(this, null, function* () {
-      const res = yield this.baseRequest.post(`/users/${userId}/external-wallets/verify/v2`, body);
+      const res = yield this.baseRequest.post(
+        `/users/${userId}/external-wallets/verify/v2`,
+        body
+      );
       return res.data;
     });
     // POST /users/:userId/biometrics/key
@@ -181,11 +196,26 @@ class Client {
       const res = yield this.baseRequest.post(`/touch?regenerate=${!!regenerate}`);
       return res.data;
     });
-    // GET /session/origin
+    // GET /sessions/:sessionLookupId/origin
     this.sessionOrigin = (sessionLookupId) => __async(this, null, function* () {
       const res = yield this.baseRequest.get(`/sessions/${sessionLookupId}/origin`);
       return res.data;
     });
+    // GET /sessions/:sessionLookupId/login-method
+    this.sessionLoginMethod = (sessionLookupId) => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(`/sessions/${sessionLookupId}/login-method`);
+      return res.data;
+    });
+    // GET /sessions/:sessionLookupId/auth-verified
+    this.sessionAuthVerified = (sessionLookupId) => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(`/sessions/${sessionLookupId}/auth-verified`);
+      return res.data;
+    });
+    // GET /sessions/:sessionLookupId/auth
+    this.sessionAuth = (sessionLookupId) => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(`/sessions/${sessionLookupId}/auth`);
+      return res.data;
+    });
     // POST /biometrics/verify
     this.verifyWebChallenge = (partnerId, body) => __async(this, null, function* () {
       const res = yield this.baseRequest.post(`/biometrics/verify`, body, {
@@ -348,6 +378,43 @@ class Client {
     this.trackReactSdkAnalytics = (opts) => __async(this, null, function* () {
       yield this.baseRequest.post("/partners/analytics/react-sdk", opts);
     });
+    // ENCLAVE METHODS
+    /**
+     * Get the enclave's public key for encryption
+     */
+    this.getEnclavePublicKey = () => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(
+        "/enclave/public-key"
+      );
+      return res.data;
+    });
+    /**
+     * Persist encrypted key shares to the enclave
+     * @param encryptedPayload JSON string containing the encrypted ECIES payload
+     */
+    this.persistEnclaveShares = (encryptedPayload) => __async(this, null, function* () {
+      const body = { encryptedPayload };
+      const res = yield this.baseRequest.post("/enclave/key-shares", body);
+      return res.data;
+    });
+    /**
+     * Retrieve encrypted key shares from the enclave
+     * @param encryptedPayload JSON string containing the encrypted ECIES query
+     */
+    this.retrieveEnclaveShares = (encryptedPayload) => __async(this, null, function* () {
+      const res = yield this.baseRequest.get(
+        `/enclave/key-shares?encryptedPayload=${encodeURIComponent(encryptedPayload)}`
+      );
+      return res.data;
+    });
+    this.issueEnclaveJwt = (encryptedPayload) => __async(this, null, function* () {
+      const res = yield this.baseRequest.post(`/enclave/jwt/issue`, { encryptedPayload });
+      return res.data;
+    });
+    this.refreshEnclaveJwt = (encryptedPayload) => __async(this, null, function* () {
+      const res = yield this.baseRequest.post(`/enclave/jwt/refresh`, { encryptedPayload });
+      return res.data;
+    });
     const headers = __spreadValues(__spreadValues({}, apiKey && { [API_KEY_HEADER_NAME]: apiKey }), partnerId && { [PARTNER_ID_HEADER_NAME]: partnerId });
     const axiosConfig = {
       baseURL: userManagementHost,
@@ -523,8 +590,8 @@ class Client {
     });
   }
   getFarcasterAuthStatus() {
-    return __async(this, null, function* () {
-      const res = yield this.baseRequest.post(`/auth/farcaster/status/v2`);
+    return __async(this, arguments, function* ({ sessionLookupId } = {}) {
+      const res = yield this.baseRequest.post(`/auth/farcaster/status/v2`, { sessionLookupId });
       return res.data;
     });
   }
@@ -834,6 +901,17 @@ class Client {
       return res.data;
     });
   }
+  getSupportedAuthMethodsV2(auth) {
+    return __async(this, null, function* () {
+      const res = yield this.baseRequest.get(
+        "/users/supported-auth-methods/v2",
+        {
+          params: __spreadValues({}, auth)
+        }
+      );
+      return res.data;
+    });
+  }
   getPasswords(auth) {
     return __async(this, null, function* () {
       const res = yield this.baseRequest.get("/users/passwords", {
@@ -853,9 +931,9 @@ class Client {
       return res;
     });
   }
-  getEncryptedWalletPrivateKey(passwordId) {
+  getEncryptedWalletPrivateKey(passwordId, sessionLookupId) {
     return __async(this, null, function* () {
-      const query = new URLSearchParams({ passwordId }).toString();
+      const query = new URLSearchParams({ passwordId, sessionLookupId }).toString();
       const res = yield this.baseRequest.get(`/encrypted-wallet-private-keys?${query}`);
       return res;
     });

package/dist/esm/types/auth.js

@@ -65,14 +65,22 @@ const LINKED_ACCOUNT_TYPES = [
 var AuthMethod = /* @__PURE__ */ ((AuthMethod2) => {
   AuthMethod2["PASSWORD"] = "PASSWORD";
   AuthMethod2["PASSKEY"] = "PASSKEY";
+  AuthMethod2["PIN"] = "PIN";
+  AuthMethod2["SLO"] = "SLO";
   return AuthMethod2;
 })(AuthMethod || {});
+var LegacyAuthMethod = /* @__PURE__ */ ((LegacyAuthMethod2) => {
+  LegacyAuthMethod2["PASSWORD"] = "PASSWORD";
+  LegacyAuthMethod2["BIOMETRIC"] = "BIOMETRIC";
+  return LegacyAuthMethod2;
+})(LegacyAuthMethod || {});
 export {
   AUTH_TYPES,
   AuthMethod,
   EncryptorType,
   KeyShareType,
   LINKED_ACCOUNT_TYPES,
+  LegacyAuthMethod,
   OAUTH_METHODS,
   OAuthMethod,
   PasswordStatus,

package/dist/types/client.d.ts

@@ -1,5 +1,5 @@
 import { AxiosResponse } from 'axios';
-import { AccountMetadata, Auth, AuthIdentifier, AuthMethod, BackupKitEmailProps, BiometricLocationHint, Chain, CurrentWalletIds, EncryptedKeyShare, EncryptorType, ExternalWalletInfo, LoginExternalWalletResponse, KeyShareType, Network, OnRampAsset, OnRampConfig, OnRampProvider, OnRampPurchase, OnRampPurchaseCreateParams, OnRampPurchaseUpdateParams, PasswordStatus, PregenIds, PrimaryAuth, PublicKeyStatus, PublicKeyType, ServerAuthStateSignup, SessionInfo, Setup2faResponse, SignUpOrLogInResponse, TelegramAuthResponse, TPregenIdentifierType, VerificationEmailProps, VerifiedAuth, VerifyFarcasterResponse, VerifyTelegramResponse, VerifyThirdPartyAuth, WalletEntity, WalletParams, TWalletScheme, TWalletType, VerifyExternalWalletParams, IssueJwtParams, IssueJwtResponse, LinkAccountParams, LinkedAccounts, ResendVerificationCodeParams } from './types/index.js';
+import { AccountMetadata, Auth, AuthIdentifier, AuthMethod, BackupKitEmailProps, BiometricLocationHint, Chain, CurrentWalletIds, EncryptedKeyShare, EncryptorType, ExternalWalletInfo, LoginExternalWalletResponse, KeyShareType, Network, OnRampAsset, OnRampConfig, OnRampProvider, OnRampPurchase, OnRampPurchaseCreateParams, OnRampPurchaseUpdateParams, PasswordStatus, PregenIds, PrimaryAuth, PublicKeyStatus, PublicKeyType, ServerAuthStateSignup, SessionInfo, Setup2faResponse, SignUpOrLogInResponse, TelegramAuthResponse, TPregenIdentifierType, VerificationEmailProps, VerifiedAuth, VerifyFarcasterResponse, VerifyTelegramResponse, VerifyThirdPartyAuth, WalletEntity, WalletParams, TWalletScheme, TWalletType, VerifyExternalWalletParams, IssueJwtParams, IssueJwtResponse, LinkAccountParams, LinkedAccounts, ResendVerificationCodeParams, LegacyAuthMethod, PrimaryAuthInfo, ServerAuthStateLogin, ServerAuthStateDone } from './types/index.js';
 interface ConfigOpts {
     useFetchAdapter?: boolean;
 }
@@ -18,6 +18,7 @@ interface createUserIdRes {
 }
 interface verifyBody {
     verificationCode: string;
+    sessionLookupId?: string;
 }
 interface getWebChallengeRes {
     challenge: string;
@@ -67,6 +68,7 @@ interface PasswordEntity {
     status: PasswordStatus;
     sigDerivedPublicKey: string;
     salt: string;
+    isPIN?: boolean;
 }
 interface createWalletBody {
     useTwoSigners?: boolean;
@@ -117,6 +119,7 @@ interface sessionPasswordBody {
     salt?: string;
     encryptedWalletPrivateKey?: string;
     encryptionKeyHash?: string;
+    isPIN?: boolean;
 }
 interface EncryptedWalletPrivateKey {
     id: string;
@@ -148,13 +151,19 @@ declare class Client {
      */
     createUser: (body: VerifiedAuth & VerificationEmailProps) => Promise<createUserIdRes>;
     checkUserExists: (auth: VerifiedAuth) => Promise<any>;
-    verifyTelegram: (authObject: TelegramAuthResponse) => Promise<VerifyTelegramResponse>;
+    verifyTelegram: ({ authObject, sessionLookupId, }: {
+        authObject: TelegramAuthResponse;
+        sessionLookupId?: string;
+    }) => Promise<VerifyTelegramResponse>;
     verifyOAuth: () => Promise<VerifyThirdPartyAuth | null>;
     loginExternalWallet: ({ externalWallet, shouldTrackUser, }: {
         externalWallet: ExternalWalletInfo;
         shouldTrackUser?: boolean;
     }) => Promise<LoginExternalWalletResponse>;
-    verifyNewAccount: (userId: string, body: verifyBody) => Promise<ServerAuthStateSignup>;
+    verifyAccount: (userId: string, body: verifyBody) => Promise<ServerAuthStateSignup | ServerAuthStateLogin | ServerAuthStateDone>;
+    sendLoginVerificationCode: (auth: PrimaryAuthInfo, isRecovery?: boolean) => Promise<{
+        userId: string;
+    }>;
     getLinkedAccounts: ({ userId, withMetadata, }: {
         userId: string;
         withMetadata?: boolean;
@@ -191,7 +200,7 @@ declare class Client {
      * @deprecated
      */
     verifyPhone: (userId: string, body: verifyBody) => Promise<any>;
-    verifyExternalWallet: (userId: string, body: VerifyExternalWalletParams) => Promise<ServerAuthStateSignup>;
+    verifyExternalWallet: (userId: string, body: VerifyExternalWalletParams) => Promise<ServerAuthStateSignup | ServerAuthStateLogin>;
     addSessionPublicKey: (userId: string, body: sessionPublicKeyBody) => Promise<any>;
     getSessionPublicKeys: (userId: string) => Promise<any>;
     getBiometricLocationHints: (auth: PrimaryAuth) => Promise<BiometricLocationHint[]>;
@@ -202,6 +211,21 @@ declare class Client {
     sessionOrigin: (sessionLookupId: string) => Promise<{
         origin?: string;
     }>;
+    sessionLoginMethod: (sessionLookupId: string) => Promise<{
+        loginMethod?: string;
+    }>;
+    sessionAuthVerified: (sessionLookupId: string) => Promise<{
+        authVerified?: boolean;
+    }>;
+    sessionAuth: (sessionLookupId: string) => Promise<{
+        userId: string;
+        authVerified?: boolean;
+        loginAuthMethods: {
+            methods: AuthMethod[];
+        };
+        auth: PrimaryAuth;
+        isNewUser: boolean;
+    }>;
     verifyWebChallenge: (partnerId: string, body: verifyWebChallengeBody) => Promise<any>;
     getSessionChallenge: (userId: string) => Promise<any>;
     verifySessionChallenge: (userId: string, body: verifySessionChallengeBody) => Promise<any>;
@@ -257,7 +281,9 @@ declare class Client {
     initializeFarcasterLogin({ appScheme }?: {
         appScheme?: string;
     }): Promise<any>;
-    getFarcasterAuthStatus(): Promise<VerifyFarcasterResponse>;
+    getFarcasterAuthStatus({ sessionLookupId }?: {
+        sessionLookupId?: string;
+    }): Promise<VerifyFarcasterResponse>;
     initializeRecoveryForPhone(phone: string, countryCode: string): Promise<AxiosResponse<any, any>>;
     finalizeRecovery(userId: string, walletId: string): Promise<AxiosResponse<any, any>>;
     recoverUserShares(userId: string, walletId: string): Promise<AxiosResponse<{
@@ -370,10 +396,16 @@ declare class Client {
     deletePendingTransaction(userId: string, pendingTransactionId: string): Promise<any>;
     addSessionPasswordPublicKey(userId: string, body: sessionPasswordBody): Promise<any>;
     patchSessionPassword: (partnerId: string, userId: string, passwordId: string, body: sessionPasswordBody) => Promise<any>;
-    getSupportedAuthMethods(auth: Auth): Promise<any>;
+    getSupportedAuthMethods(auth: Auth): Promise<{
+        supportedAuthMethods: LegacyAuthMethod[];
+    }>;
+    getSupportedAuthMethodsV2(auth: Auth): Promise<{
+        supportedAuthMethods: AuthMethod[];
+        hasPasswordWithoutPIN: boolean;
+    }>;
     getPasswords(auth: Auth): Promise<PasswordEntity[]>;
     verifyPasswordChallenge(partnerId: string, body: verifyPasswordChallengeBody): Promise<any>;
-    getEncryptedWalletPrivateKey(passwordId: string): Promise<{
+    getEncryptedWalletPrivateKey(passwordId: string, sessionLookupId: string): Promise<{
         data: {
             encryptedWalletPrivateKey: EncryptedWalletPrivateKey;
         };
@@ -400,5 +432,33 @@ declare class Client {
         props: object;
         reactSdkVersion: string;
     }) => Promise<void>;
+    /**
+     * Get the enclave's public key for encryption
+     */
+    getEnclavePublicKey: () => Promise<{
+        publicKey: string;
+        keyFingerprint: string;
+        generatedAt: string;
+    }>;
+    /**
+     * Persist encrypted key shares to the enclave
+     * @param encryptedPayload JSON string containing the encrypted ECIES payload
+     */
+    persistEnclaveShares: (encryptedPayload: string) => Promise<{
+        payload: any;
+    }>;
+    /**
+     * Retrieve encrypted key shares from the enclave
+     * @param encryptedPayload JSON string containing the encrypted ECIES query
+     */
+    retrieveEnclaveShares: (encryptedPayload: string) => Promise<{
+        payload: any;
+    }>;
+    issueEnclaveJwt: (encryptedPayload: string) => Promise<{
+        payload: string;
+    }>;
+    refreshEnclaveJwt: (encryptedPayload: string) => Promise<{
+        payload: string;
+    }>;
 }
 export default Client;

package/dist/types/types/auth.d.ts

@@ -117,7 +117,13 @@ export type TLinkedAccountType = (typeof LINKED_ACCOUNT_TYPES)[number] | 'EXTERN
 export type SupportedAccountLinks = (TLinkedAccountType | TExternalWallet)[];
 export declare enum AuthMethod {
     PASSWORD = "PASSWORD",
-    PASSKEY = "PASSKEY"
+    PASSKEY = "PASSKEY",
+    PIN = "PIN",
+    SLO = "SLO"
+}
+export declare enum LegacyAuthMethod {
+    PASSWORD = "PASSWORD",
+    BIOMETRIC = "BIOMETRIC"
 }
 export type BiometricLocationHint = {
     useragent?: string;
@@ -154,7 +160,14 @@ export type ServerAuthStateBase = AuthExtras & {
 export type ServerAuthStateVerify = ServerAuthStateBase & {
     stage: 'verify';
     signatureVerificationMessage?: string;
-};
+    isWalletSelectionNeeded?: boolean;
+} & ({
+    nextStage: 'login';
+    loginAuthMethods: AuthMethod[];
+} | {
+    nextStage: 'signup';
+    signupAuthMethods: AuthMethod[];
+});
 export type ServerAuthStateSignup = ServerAuthStateBase & {
     stage: 'signup';
     signupAuthMethods: AuthMethod[];
@@ -164,13 +177,22 @@ export type ServerAuthStateLogin = ServerAuthStateBase & {
     biometricHints?: BiometricLocationHint[];
     loginAuthMethods: AuthMethod[];
     isWalletSelectionNeeded?: boolean;
+    hasPasswordWithoutPIN?: boolean;
+    signatureVerificationMessage?: string;
+};
+export type ServerAuthStateDone = ServerAuthStateBase & {
+    stage: 'done';
+    authMethods: AuthMethod[];
+    isWalletSelectionNeeded?: boolean;
+    isNewUser: boolean;
 };
-export type VerifyThirdPartyAuth = ServerAuthStateSignup | ServerAuthStateLogin;
+export type VerifyThirdPartyAuth = ServerAuthStateSignup | ServerAuthStateLogin | ServerAuthStateDone;
 export type ExternalWalletInfo = {
+    partnerId: string;
     address: string;
     type: ExternalWalletType;
     provider?: string;
-    providerId?: TExternalWallet;
+    providerId?: string;
     addressBech32?: string;
     withFullParaAuth?: boolean;
     ensName?: string | null;
@@ -201,7 +223,7 @@ export type LoginExternalWalletResponse = ServerAuthStateLogin | (ServerAuthStat
 });
 export type VerifyTelegramResponse = VerifyThirdPartyAuth;
 export type VerifyFarcasterResponse = VerifyThirdPartyAuth | Record<string, never>;
-export type ServerAuthState = ServerAuthStateVerify | ServerAuthStateSignup | ServerAuthStateLogin;
+export type ServerAuthState = ServerAuthStateVerify | ServerAuthStateSignup | ServerAuthStateLogin | ServerAuthStateDone;
 export type SignUpOrLogInResponse = ServerAuthStateVerify | ServerAuthStateLogin;
 export type Setup2faResponse = {
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getpara/user-management-client",
-  "version": "2.0.0-dev.3",
+  "version": "2.0.0-dev.7",
   "dependencies": {
     "axios": "^1.8.4",
     "libphonenumber-js": "^1.11.7"
@@ -19,7 +19,7 @@
     "dist",
     "package.json"
   ],
-  "gitHead": "ffe34f7d8df2dd3c2327ca1f35bcc9764e0a68a2",
+  "gitHead": "225cd3693edaab4dac81df7285956d2616e5717f",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "scripts": {