@insignia-education/api-sdk-js 0.15.10 → 0.15.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insignia-education/api-sdk-js",
-  "version": "0.15.10",
+  "version": "0.15.11",
   "description": "JavaScript SDK for the Insignia Education API",
   "main": "index.js",
   "type": "module",

package/src/api/v1/Auth.js

@@ -7,6 +7,7 @@ export default class Auth {
 
     loginOrRegister(email)      { return this.#client.get(`/auth/login-register-check?email=${encodeURIComponent(email)}`); }
     register(data)              { return this.#client.put('/auth/register', data); }
+    /** May resolve to { two_factor_required: true } — then call twoFactor({ pin }). */
     login(data)                 { return this.#client.post('/auth/login', data); }
     googleLogin(data)           { return this.#client.post('/auth/google', data); }
     refresh()                   { return this.#client.post('/auth/refresh'); }
@@ -18,5 +19,6 @@ export default class Auth {
     magicLinkVerify(data)       { return this.#client.post('/auth/magic-link/verify', data); }
     facebookLogin(data)         { return this.#client.post('/auth/facebook', data); }
     emailVerify(data)           { return this.#client.post('/auth/email-verify', data); }
+    /** Second login step when two_factor_required: exchange { pin } for a session. */
     twoFactor(data)             { return this.#client.post('/auth/2fa', data); }
 }

package/src/api/v1/TwoFactor.js

@@ -0,0 +1,20 @@
+/**
+ * TOTP two-factor management for the authenticated user.
+ * The login-time verification step lives on Auth.twoFactor().
+ */
+export default class TwoFactor {
+    #client;
+
+    constructor(client) {
+        this.#client = client;
+    }
+
+    /** { enabled: boolean } */
+    status()        { return this.#client.get('/2fa/status'); }
+    /** Provision a secret (2FA stays OFF). Returns { secret, otpauth_url } for the QR. */
+    setup()         { return this.#client.post('/2fa/setup'); }
+    /** Confirm a code and turn 2FA on. data: { pin } */
+    enable(data)    { return this.#client.post('/2fa/enable', data); }
+    /** Verify a code and turn 2FA off. data: { pin } */
+    disable(data)   { return this.#client.post('/2fa/disable', data); }
+}

package/src/api/v1/Users.js

@@ -63,22 +63,21 @@ export default class Users {
         };
     }
 
+    /** Read-only: points are granted/revoked by internal jobs, not over the API. */
     points(userId) {
         const base = `/users/${userId}/points`;
         const client = this.#client;
         return {
-            get:    (id = null) => id ? client.get(`${base}/${id}`) : client.get(base),
-            create: (data)      => client.put(base, data),
-            delete: (id)        => client.del(`${base}/${id}`),
+            get: (id = null) => id ? client.get(`${base}/${id}`) : client.get(base),
         };
     }
 
+    /** Read-only: money moves are created by internal jobs, not over the API. */
     moneyMoves(userId) {
         const base = `/users/${userId}/money-moves`;
         const client = this.#client;
         return {
-            get:    (id = null) => id ? client.get(`${base}/${id}`) : client.get(base),
-            create: (data)      => client.put(base, data),
+            get: (id = null) => id ? client.get(`${base}/${id}`) : client.get(base),
         };
     }
 

package/src/api/v1/index.js

@@ -26,6 +26,7 @@ import Surveys from './Surveys.js';
 import Taxes from './Taxes.js';
 import Teacher from './Teacher.js';
 import Telegram from './Telegram.js';
+import TwoFactor from './TwoFactor.js';
 import UserSessionTypes from './UserSessionTypes.js';
 import UserTypes from './UserTypes.js';
 import Users from './Users.js';
@@ -71,6 +72,7 @@ export default class InsigniaApiV1 extends InsigniaApi {
         this.taxes                = new Taxes(this);
         this.teacher              = new Teacher(this);
         this.telegram             = new Telegram(this);
+        this.twoFactor            = new TwoFactor(this);
         this.userSessionTypes     = new UserSessionTypes(this);
         this.userTypes            = new UserTypes(this);
         this.users                = new Users(this);