@insforge/sdk 1.2.1-dev.0 → 1.2.1-dev.2

package/README.md

@@ -46,7 +46,8 @@ const insforge = createClient({
 const { data, error } = await insforge.auth.signUp({
   email: 'user@example.com',
   password: 'securePassword123',
-  name: 'John Doe' // optional
+  name: 'John Doe', // optional
+  redirectTo: 'http://localhost:3000/verify-email' // optional, for link-based verification
 });
 
 // Sign in with email/password
@@ -78,6 +79,47 @@ const { data: updatedProfile, error } = await insforge.auth.setProfile({
 await insforge.auth.signOut();
 ```
 
+### Email Verification And Password Reset
+
+```javascript
+// Resend a verification email
+await insforge.auth.resendVerificationEmail({
+  email: 'user@example.com',
+  redirectTo: 'http://localhost:3000/verify-email' // optional, for link-based verification
+});
+
+// Verify email with a 6-digit code
+await insforge.auth.verifyEmail({
+  email: 'user@example.com',
+  otp: '123456'
+});
+
+// Send password reset email
+await insforge.auth.sendResetPasswordEmail({
+  email: 'user@example.com',
+  redirectTo: 'http://localhost:3000/reset-password' // optional, for link-based reset
+});
+
+// Code-based reset flow: exchange the code, then reset the password
+const { data: resetToken } = await insforge.auth.exchangeResetPasswordToken({
+  email: 'user@example.com',
+  code: '123456'
+});
+
+if (resetToken) {
+  await insforge.auth.resetPassword({
+    newPassword: 'newSecurePassword123',
+    otp: resetToken.token
+  });
+}
+```
+
+For link-based verification and password reset, users click the emailed browser links:
+- `GET /api/auth/email/verify-link`
+- `GET /api/auth/email/reset-password-link`
+
+Those backend endpoints validate the token first, then redirect the browser to your `redirectTo` URL.
+
 ### Database Operations
 
 ```javascript
@@ -201,14 +243,14 @@ const insforge = createClient({
 The SDK is written in TypeScript and provides full type definitions:
 
 ```typescript
-import { createClient, InsForgeClient, User, Session } from '@insforge/sdk';
+import { createClient, InsForgeClient } from '@insforge/sdk';
 
 const insforge: InsForgeClient = createClient({
   baseUrl: 'http://localhost:7130'
 });
 
 // Type-safe API calls
-const response: { data: User | null; error: Error | null } =
+const response =
   await insforge.auth.getCurrentUser();
 ```
 

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { UserSchema, CreateUserRequest, CreateUserResponse, CreateSessionRequest, CreateSessionResponse, OAuthProvidersSchema, RefreshSessionResponse, GetProfileResponse, SendVerificationEmailRequest, VerifyEmailRequest, VerifyEmailResponse, SendResetPasswordEmailRequest, ExchangeResetPasswordTokenRequest, GetPublicAuthConfigResponse, StorageFileSchema, ListObjectsResponseSchema, ChatCompletionRequest, ImageGenerationRequest, EmbeddingsRequest, SubscribeResponse, SocketMessage, SendRawEmailRequest, SendEmailResponse } from '@insforge/shared-schemas';
+import { UserSchema, CreateUserRequest, CreateUserResponse, CreateSessionRequest, CreateSessionResponse, OAuthProvidersSchema, RefreshSessionResponse, GetProfileResponse, SendVerificationEmailRequest, VerifyEmailRequest, VerifyEmailResponse, SendResetPasswordEmailRequest, ExchangeResetPasswordTokenRequest, ExchangeResetPasswordTokenResponse, ResetPasswordResponse, GetPublicAuthConfigResponse, StorageFileSchema, ListObjectsResponseSchema, ChatCompletionRequest, ImageGenerationRequest, EmbeddingsRequest, SubscribeResponse, SocketMessage, SendRawEmailRequest, SendEmailResponse } from '@insforge/shared-schemas';
 export { AuthErrorResponse, CreateSessionRequest, CreateUserRequest, RealtimeErrorPayload, SendRawEmailRequest as SendEmailOptions, SendEmailResponse, SocketMessage, SubscribeResponse, UserSchema } from '@insforge/shared-schemas';
 import * as _supabase_postgrest_js from '@supabase/postgrest-js';
 
@@ -74,12 +74,24 @@ interface InsForgeConfig {
      * @default 500
      */
     retryDelay?: number;
+    /**
+     * Automatically refresh the access token when a request fails with 401 INVALID_TOKEN.
+     * When true, the SDK will attempt a token refresh and retry the original request.
+     * @default true
+     */
+    autoRefreshToken?: boolean;
 }
 interface AuthSession {
     user: UserSchema;
     accessToken: string;
     expiresAt?: Date;
 }
+interface AuthRefreshResponse {
+    user: UserSchema;
+    accessToken: string;
+    csrfToken?: string;
+    refreshToken?: string;
+}
 interface ApiError {
     error: string;
     message: string;
@@ -158,8 +170,51 @@ declare class Logger {
     logResponse(method: string, url: string, status: number, durationMs: number, body?: any): void;
 }
 
-interface RequestOptions extends RequestInit {
+/**
+ * Token Manager for InsForge SDK
+ *
+ * Memory-only token storage.
+ */
+
+declare class TokenManager {
+    private accessToken;
+    private user;
+    onTokenChange: (() => void) | null;
+    constructor();
+    /**
+     * Save session in memory
+     */
+    saveSession(session: AuthSession): void;
+    /**
+     * Get current session
+     */
+    getSession(): AuthSession | null;
+    /**
+     * Get access token
+     */
+    getAccessToken(): string | null;
+    /**
+     * Set access token
+     */
+    setAccessToken(token: string): void;
+    /**
+     * Get user
+     */
+    getUser(): UserSchema | null;
+    /**
+     * Set user
+     */
+    setUser(user: UserSchema): void;
+    /**
+     * Clear in-memory session
+     */
+    clearSession(): void;
+}
+
+type JsonRequestBody = Record<string, unknown> | unknown[] | null;
+interface RequestOptions extends Omit<RequestInit, 'body'> {
     params?: Record<string, string>;
+    body?: RequestInit['body'] | JsonRequestBody;
     /** Allow retrying non-idempotent requests (POST, PATCH). Off by default to prevent duplicate writes. */
     idempotent?: boolean;
 }
@@ -174,15 +229,21 @@ declare class HttpClient {
     private anonKey;
     private userToken;
     private logger;
+    private autoRefreshToken;
+    private isRefreshing;
+    private refreshPromise;
+    private tokenManager;
+    private refreshToken;
     private timeout;
     private retryCount;
     private retryDelay;
     /**
      * Creates a new HttpClient instance.
      * @param config - SDK configuration including baseUrl, timeout, retry settings, and fetch implementation.
+     * @param tokenManager - Token manager for session persistence.
      * @param logger - Optional logger instance for request/response debugging.
      */
-    constructor(config: InsForgeConfig, logger?: Logger);
+    constructor(config: InsForgeConfig, tokenManager?: TokenManager, logger?: Logger);
     /**
      * Builds a full URL from a path and optional query parameters.
      * Normalizes PostgREST select parameters for proper syntax.
@@ -206,6 +267,7 @@ declare class HttpClient {
      * @returns Parsed response data.
      * @throws {InsForgeError} On timeout, network failure, or HTTP error responses.
      */
+    private handleRequest;
     request<T>(method: string, path: string, options?: RequestOptions): Promise<T>;
     /** Performs a GET request. */
     get<T>(path: string, options?: RequestOptions): Promise<T>;
@@ -219,49 +281,10 @@ declare class HttpClient {
     delete<T>(path: string, options?: RequestOptions): Promise<T>;
     /** Sets or clears the user authentication token for subsequent requests. */
     setAuthToken(token: string | null): void;
+    setRefreshToken(token: string | null): void;
     /** Returns the current default headers including the authorization header if set. */
     getHeaders(): Record<string, string>;
-}
-
-/**
- * Token Manager for InsForge SDK
- *
- * Memory-only token storage.
- */
-
-declare class TokenManager {
-    private accessToken;
-    private user;
-    onTokenChange: (() => void) | null;
-    constructor();
-    /**
-     * Save session in memory
-     */
-    saveSession(session: AuthSession): void;
-    /**
-     * Get current session
-     */
-    getSession(): AuthSession | null;
-    /**
-     * Get access token
-     */
-    getAccessToken(): string | null;
-    /**
-     * Set access token
-     */
-    setAccessToken(token: string): void;
-    /**
-     * Get user
-     */
-    getUser(): UserSchema | null;
-    /**
-     * Set user
-     */
-    setUser(user: UserSchema): void;
-    /**
-     * Clear in-memory session
-     */
-    clearSession(): void;
+    handleTokenRefresh(): Promise<AuthRefreshResponse>;
 }
 
 /**
@@ -286,7 +309,7 @@ declare class Auth {
     private saveSessionFromResponse;
     /**
      * Detect and handle OAuth callback parameters in URL
-     * Supports PKCE flow (insforge_code) and legacy flow (access_token in URL)
+     * Supports PKCE flow (insforge_code)
      */
     private detectAuthCallback;
     signUp(request: CreateUserRequest): Promise<{
@@ -320,12 +343,7 @@ declare class Auth {
      * Called automatically on initialization when insforge_code is in URL
      */
     exchangeOAuthCode(code: string, codeVerifier?: string): Promise<{
-        data: {
-            accessToken: string;
-            refreshToken?: string;
-            user: UserSchema;
-            redirectTo?: string;
-        } | null;
+        data: CreateSessionResponse | null;
         error: InsForgeError | null;
     }>;
     /**
@@ -339,11 +357,7 @@ declare class Auth {
         provider: 'google';
         token: string;
     }): Promise<{
-        data: {
-            accessToken: string;
-            refreshToken?: string;
-            user: UserSchema;
-        } | null;
+        data: CreateSessionResponse | null;
         error: InsForgeError | null;
     }>;
     /**
@@ -385,14 +399,6 @@ declare class Auth {
         } | null;
         error: InsForgeError | null;
     }>;
-    /** @deprecated Use `resendVerificationEmail` instead */
-    sendVerificationEmail(request: SendVerificationEmailRequest): Promise<{
-        data: {
-            success: boolean;
-            message: string;
-        } | null;
-        error: InsForgeError | null;
-    }>;
     verifyEmail(request: VerifyEmailRequest): Promise<{
         data: VerifyEmailResponse | null;
         error: InsForgeError | null;
@@ -405,20 +411,14 @@ declare class Auth {
         error: InsForgeError | null;
     }>;
     exchangeResetPasswordToken(request: ExchangeResetPasswordTokenRequest): Promise<{
-        data: {
-            token: string;
-            expiresAt: string;
-        } | null;
+        data: ExchangeResetPasswordTokenResponse | null;
         error: InsForgeError | null;
     }>;
     resetPassword(request: {
         newPassword: string;
         otp: string;
     }): Promise<{
-        data: {
-            message: string;
-            redirectTo?: string;
-        } | null;
+        data: ResetPasswordResponse | null;
         error: InsForgeError | null;
     }>;
     getPublicAuthConfig(): Promise<{
@@ -792,7 +792,7 @@ declare class Functions {
      */
     invoke<T = any>(slug: string, options?: FunctionInvokeOptions): Promise<{
         data: T | null;
-        error: Error | null;
+        error: InsForgeError | null;
     }>;
 }
 
@@ -967,7 +967,7 @@ declare class Emails {
      */
     send(options: SendRawEmailRequest): Promise<{
         data: SendEmailResponse | null;
-        error: Error | null;
+        error: InsForgeError | null;
     }>;
 }
 

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { UserSchema, CreateUserRequest, CreateUserResponse, CreateSessionRequest, CreateSessionResponse, OAuthProvidersSchema, RefreshSessionResponse, GetProfileResponse, SendVerificationEmailRequest, VerifyEmailRequest, VerifyEmailResponse, SendResetPasswordEmailRequest, ExchangeResetPasswordTokenRequest, GetPublicAuthConfigResponse, StorageFileSchema, ListObjectsResponseSchema, ChatCompletionRequest, ImageGenerationRequest, EmbeddingsRequest, SubscribeResponse, SocketMessage, SendRawEmailRequest, SendEmailResponse } from '@insforge/shared-schemas';
+import { UserSchema, CreateUserRequest, CreateUserResponse, CreateSessionRequest, CreateSessionResponse, OAuthProvidersSchema, RefreshSessionResponse, GetProfileResponse, SendVerificationEmailRequest, VerifyEmailRequest, VerifyEmailResponse, SendResetPasswordEmailRequest, ExchangeResetPasswordTokenRequest, ExchangeResetPasswordTokenResponse, ResetPasswordResponse, GetPublicAuthConfigResponse, StorageFileSchema, ListObjectsResponseSchema, ChatCompletionRequest, ImageGenerationRequest, EmbeddingsRequest, SubscribeResponse, SocketMessage, SendRawEmailRequest, SendEmailResponse } from '@insforge/shared-schemas';
 export { AuthErrorResponse, CreateSessionRequest, CreateUserRequest, RealtimeErrorPayload, SendRawEmailRequest as SendEmailOptions, SendEmailResponse, SocketMessage, SubscribeResponse, UserSchema } from '@insforge/shared-schemas';
 import * as _supabase_postgrest_js from '@supabase/postgrest-js';
 
@@ -74,12 +74,24 @@ interface InsForgeConfig {
      * @default 500
      */
     retryDelay?: number;
+    /**
+     * Automatically refresh the access token when a request fails with 401 INVALID_TOKEN.
+     * When true, the SDK will attempt a token refresh and retry the original request.
+     * @default true
+     */
+    autoRefreshToken?: boolean;
 }
 interface AuthSession {
     user: UserSchema;
     accessToken: string;
     expiresAt?: Date;
 }
+interface AuthRefreshResponse {
+    user: UserSchema;
+    accessToken: string;
+    csrfToken?: string;
+    refreshToken?: string;
+}
 interface ApiError {
     error: string;
     message: string;
@@ -158,8 +170,51 @@ declare class Logger {
     logResponse(method: string, url: string, status: number, durationMs: number, body?: any): void;
 }
 
-interface RequestOptions extends RequestInit {
+/**
+ * Token Manager for InsForge SDK
+ *
+ * Memory-only token storage.
+ */
+
+declare class TokenManager {
+    private accessToken;
+    private user;
+    onTokenChange: (() => void) | null;
+    constructor();
+    /**
+     * Save session in memory
+     */
+    saveSession(session: AuthSession): void;
+    /**
+     * Get current session
+     */
+    getSession(): AuthSession | null;
+    /**
+     * Get access token
+     */
+    getAccessToken(): string | null;
+    /**
+     * Set access token
+     */
+    setAccessToken(token: string): void;
+    /**
+     * Get user
+     */
+    getUser(): UserSchema | null;
+    /**
+     * Set user
+     */
+    setUser(user: UserSchema): void;
+    /**
+     * Clear in-memory session
+     */
+    clearSession(): void;
+}
+
+type JsonRequestBody = Record<string, unknown> | unknown[] | null;
+interface RequestOptions extends Omit<RequestInit, 'body'> {
     params?: Record<string, string>;
+    body?: RequestInit['body'] | JsonRequestBody;
     /** Allow retrying non-idempotent requests (POST, PATCH). Off by default to prevent duplicate writes. */
     idempotent?: boolean;
 }
@@ -174,15 +229,21 @@ declare class HttpClient {
     private anonKey;
     private userToken;
     private logger;
+    private autoRefreshToken;
+    private isRefreshing;
+    private refreshPromise;
+    private tokenManager;
+    private refreshToken;
     private timeout;
     private retryCount;
     private retryDelay;
     /**
      * Creates a new HttpClient instance.
      * @param config - SDK configuration including baseUrl, timeout, retry settings, and fetch implementation.
+     * @param tokenManager - Token manager for session persistence.
      * @param logger - Optional logger instance for request/response debugging.
      */
-    constructor(config: InsForgeConfig, logger?: Logger);
+    constructor(config: InsForgeConfig, tokenManager?: TokenManager, logger?: Logger);
     /**
      * Builds a full URL from a path and optional query parameters.
      * Normalizes PostgREST select parameters for proper syntax.
@@ -206,6 +267,7 @@ declare class HttpClient {
      * @returns Parsed response data.
      * @throws {InsForgeError} On timeout, network failure, or HTTP error responses.
      */
+    private handleRequest;
     request<T>(method: string, path: string, options?: RequestOptions): Promise<T>;
     /** Performs a GET request. */
     get<T>(path: string, options?: RequestOptions): Promise<T>;
@@ -219,49 +281,10 @@ declare class HttpClient {
     delete<T>(path: string, options?: RequestOptions): Promise<T>;
     /** Sets or clears the user authentication token for subsequent requests. */
     setAuthToken(token: string | null): void;
+    setRefreshToken(token: string | null): void;
     /** Returns the current default headers including the authorization header if set. */
     getHeaders(): Record<string, string>;
-}
-
-/**
- * Token Manager for InsForge SDK
- *
- * Memory-only token storage.
- */
-
-declare class TokenManager {
-    private accessToken;
-    private user;
-    onTokenChange: (() => void) | null;
-    constructor();
-    /**
-     * Save session in memory
-     */
-    saveSession(session: AuthSession): void;
-    /**
-     * Get current session
-     */
-    getSession(): AuthSession | null;
-    /**
-     * Get access token
-     */
-    getAccessToken(): string | null;
-    /**
-     * Set access token
-     */
-    setAccessToken(token: string): void;
-    /**
-     * Get user
-     */
-    getUser(): UserSchema | null;
-    /**
-     * Set user
-     */
-    setUser(user: UserSchema): void;
-    /**
-     * Clear in-memory session
-     */
-    clearSession(): void;
+    handleTokenRefresh(): Promise<AuthRefreshResponse>;
 }
 
 /**
@@ -286,7 +309,7 @@ declare class Auth {
     private saveSessionFromResponse;
     /**
      * Detect and handle OAuth callback parameters in URL
-     * Supports PKCE flow (insforge_code) and legacy flow (access_token in URL)
+     * Supports PKCE flow (insforge_code)
      */
     private detectAuthCallback;
     signUp(request: CreateUserRequest): Promise<{
@@ -320,12 +343,7 @@ declare class Auth {
      * Called automatically on initialization when insforge_code is in URL
      */
     exchangeOAuthCode(code: string, codeVerifier?: string): Promise<{
-        data: {
-            accessToken: string;
-            refreshToken?: string;
-            user: UserSchema;
-            redirectTo?: string;
-        } | null;
+        data: CreateSessionResponse | null;
         error: InsForgeError | null;
     }>;
     /**
@@ -339,11 +357,7 @@ declare class Auth {
         provider: 'google';
         token: string;
     }): Promise<{
-        data: {
-            accessToken: string;
-            refreshToken?: string;
-            user: UserSchema;
-        } | null;
+        data: CreateSessionResponse | null;
         error: InsForgeError | null;
     }>;
     /**
@@ -385,14 +399,6 @@ declare class Auth {
         } | null;
         error: InsForgeError | null;
     }>;
-    /** @deprecated Use `resendVerificationEmail` instead */
-    sendVerificationEmail(request: SendVerificationEmailRequest): Promise<{
-        data: {
-            success: boolean;
-            message: string;
-        } | null;
-        error: InsForgeError | null;
-    }>;
     verifyEmail(request: VerifyEmailRequest): Promise<{
         data: VerifyEmailResponse | null;
         error: InsForgeError | null;
@@ -405,20 +411,14 @@ declare class Auth {
         error: InsForgeError | null;
     }>;
     exchangeResetPasswordToken(request: ExchangeResetPasswordTokenRequest): Promise<{
-        data: {
-            token: string;
-            expiresAt: string;
-        } | null;
+        data: ExchangeResetPasswordTokenResponse | null;
         error: InsForgeError | null;
     }>;
     resetPassword(request: {
         newPassword: string;
         otp: string;
     }): Promise<{
-        data: {
-            message: string;
-            redirectTo?: string;
-        } | null;
+        data: ResetPasswordResponse | null;
         error: InsForgeError | null;
     }>;
     getPublicAuthConfig(): Promise<{
@@ -792,7 +792,7 @@ declare class Functions {
      */
     invoke<T = any>(slug: string, options?: FunctionInvokeOptions): Promise<{
         data: T | null;
-        error: Error | null;
+        error: InsForgeError | null;
     }>;
 }
 
@@ -967,7 +967,7 @@ declare class Emails {
      */
     send(options: SendRawEmailRequest): Promise<{
         data: SendEmailResponse | null;
-        error: Error | null;
+        error: InsForgeError | null;
     }>;
 }