@meistrari/auth-core 1.17.1 → 1.18.0

package/dist/index.d.mts

@@ -3378,13 +3378,18 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
     }, FetchOptions["throw"] extends true ? true : true>>;
 } & {
     applications: {
-        listCandidateOrganizations: (applicationId: string) => Promise<{
-            data: {
-                organizations: FullOrganization[];
-                application?: Application | undefined;
-            };
+        getApplicationAuthContext: (applicationId: string) => Promise<{
+            data: ApplicationAuthContextResponse;
             error: null;
         } | {
+            data: null;
+            error: {
+                message?: string | undefined;
+                status: number;
+                statusText: string;
+            };
+        }>;
+        listCandidateOrganizations: (applicationId: string) => Promise<{
             data: {
                 organizations: FullOrganization[];
                 application?: Application | undefined;
@@ -3394,6 +3399,12 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
                 status: number;
                 statusText: string;
             };
+        } | {
+            data: {
+                organizations: FullOrganization[];
+                application?: Application | undefined;
+            };
+            error: null;
         }>;
         inviteUserToApplication: (options: InviteUserToApplicationOptions) => Promise<{
             data: null;
@@ -4551,6 +4562,13 @@ type ListCandidateOrganizationsResponse = {
     /** Organizations where the user is a member and the application is entitled. */
     organizations: FullOrganization[];
 };
+/**
+ * Public application context used to preserve continuity during auth redirects.
+ */
+type ApplicationAuthContextResponse = {
+    /** Minimal application identity shown in the hosted auth flow. */
+    application: Pick<Application, 'id' | 'name'>;
+};
 /**
  * Response returned when starting an authorization flow.
  */
@@ -4778,6 +4796,13 @@ declare class ApplicationService {
      * @param client - The API client for making application requests
      */
     constructor(client: APIClient);
+    /**
+     * Gets public display context for an application auth redirect.
+     *
+     * @param applicationId - The application ID to get public auth context for
+     * @returns The minimal application identity safe to show before login
+     */
+    getApplicationAuthContext(applicationId: string): Promise<ApplicationAuthContextResponse>;
     /**
      * Lists candidate organizations for a specific application.
      *
@@ -4876,7 +4901,7 @@ declare class ApplicationService {
      * @throws {RefreshTokenExpiredError} When the refresh token has expired or is invalid
      * @throws {ApplicationError} For other API errors
      */
-    refreshAccessToken(refreshToken: string): Promise<CompleteAuthorizationFlowResponse | null | undefined>;
+    refreshAccessToken(refreshToken: string): Promise<CompleteAuthorizationFlowResponse | null>;
     /**
      * Gets the current user and organization for a specific application.
      *
@@ -5629,4 +5654,4 @@ declare function validateToken(token: string, apiUrl: string): Promise<boolean>;
 declare function extractTokenPayload(token: string): JWTPayload;
 
 export { ApplicationError, AuthClient, AuthorizationFlowError, DeviceAccessDeniedError, DeviceAuthorizationPendingError, DeviceAuthorizationSlowDownError, DeviceCodeExpiredError, DeviceTransientServerError, EmailRequired, InvalidCallbackURL, InvalidSocialProvider, JWTPayload, JWTPayloadUser, JWTPayloadWorkspace, RefreshTokenExpiredError, Roles, UserNotLoggedInError, ac, createAPIClient, extractTokenPayload, invitationAdditionalFields, isTokenExpired, memberAdditionalFields, organizationAdditionalFields, rolesAccessControl, userAdditionalFields, validateToken };
-export type { APIClient, ApiKey, ApiKeyMetadata, ApiKeyWithoutSecret, Application, ApplicationInvitationResponse, BaseOrganization, CompleteAuthorizationFlowResponse, CreateApiKeyPayload, CreateApplicationInvitationResponse, CreateTeamPayload, DeviceAuthorizationActionResponse, DeviceAuthorizationContextResponse, DeviceAuthorizationResponse, DeviceContextApplication, FullOrganization, Invitation, InviteUserToApplicationOptions, InviteUserToOrganizationOptions, ListCandidateOrganizationsResponse, ListMembersOptions, Member, ExtendedOrganization as Organization, OrganizationSettings, RemoveUserFromOrganizationOptions, Role, Session, SignInWithEmailAndPasswordOptions, SignInWithSamlOptions, SocialSignInOptions, StartAuthorizationFlowResponse, Strict, Team, TeamMember, UpdateApiKeyPayload, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload, User, WhoAmIInclude, WhoAmIOptions, WhoAmIOrganization, WhoAmIResponse };
+export type { APIClient, ApiKey, ApiKeyMetadata, ApiKeyWithoutSecret, Application, ApplicationAuthContextResponse, ApplicationInvitationResponse, BaseOrganization, CompleteAuthorizationFlowResponse, CreateApiKeyPayload, CreateApplicationInvitationResponse, CreateTeamPayload, DeviceAuthorizationActionResponse, DeviceAuthorizationContextResponse, DeviceAuthorizationResponse, DeviceContextApplication, FullOrganization, Invitation, InviteUserToApplicationOptions, InviteUserToOrganizationOptions, ListCandidateOrganizationsResponse, ListMembersOptions, Member, ExtendedOrganization as Organization, OrganizationSettings, RemoveUserFromOrganizationOptions, Role, Session, SignInWithEmailAndPasswordOptions, SignInWithSamlOptions, SocialSignInOptions, StartAuthorizationFlowResponse, Strict, Team, TeamMember, UpdateApiKeyPayload, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload, User, WhoAmIInclude, WhoAmIOptions, WhoAmIOrganization, WhoAmIResponse };

package/dist/index.d.ts

@@ -3378,13 +3378,18 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
     }, FetchOptions["throw"] extends true ? true : true>>;
 } & {
     applications: {
-        listCandidateOrganizations: (applicationId: string) => Promise<{
-            data: {
-                organizations: FullOrganization[];
-                application?: Application | undefined;
-            };
+        getApplicationAuthContext: (applicationId: string) => Promise<{
+            data: ApplicationAuthContextResponse;
             error: null;
         } | {
+            data: null;
+            error: {
+                message?: string | undefined;
+                status: number;
+                statusText: string;
+            };
+        }>;
+        listCandidateOrganizations: (applicationId: string) => Promise<{
             data: {
                 organizations: FullOrganization[];
                 application?: Application | undefined;
@@ -3394,6 +3399,12 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
                 status: number;
                 statusText: string;
             };
+        } | {
+            data: {
+                organizations: FullOrganization[];
+                application?: Application | undefined;
+            };
+            error: null;
         }>;
         inviteUserToApplication: (options: InviteUserToApplicationOptions) => Promise<{
             data: null;
@@ -4551,6 +4562,13 @@ type ListCandidateOrganizationsResponse = {
     /** Organizations where the user is a member and the application is entitled. */
     organizations: FullOrganization[];
 };
+/**
+ * Public application context used to preserve continuity during auth redirects.
+ */
+type ApplicationAuthContextResponse = {
+    /** Minimal application identity shown in the hosted auth flow. */
+    application: Pick<Application, 'id' | 'name'>;
+};
 /**
  * Response returned when starting an authorization flow.
  */
@@ -4778,6 +4796,13 @@ declare class ApplicationService {
      * @param client - The API client for making application requests
      */
     constructor(client: APIClient);
+    /**
+     * Gets public display context for an application auth redirect.
+     *
+     * @param applicationId - The application ID to get public auth context for
+     * @returns The minimal application identity safe to show before login
+     */
+    getApplicationAuthContext(applicationId: string): Promise<ApplicationAuthContextResponse>;
     /**
      * Lists candidate organizations for a specific application.
      *
@@ -4876,7 +4901,7 @@ declare class ApplicationService {
      * @throws {RefreshTokenExpiredError} When the refresh token has expired or is invalid
      * @throws {ApplicationError} For other API errors
      */
-    refreshAccessToken(refreshToken: string): Promise<CompleteAuthorizationFlowResponse | null | undefined>;
+    refreshAccessToken(refreshToken: string): Promise<CompleteAuthorizationFlowResponse | null>;
     /**
      * Gets the current user and organization for a specific application.
      *
@@ -5629,4 +5654,4 @@ declare function validateToken(token: string, apiUrl: string): Promise<boolean>;
 declare function extractTokenPayload(token: string): JWTPayload;
 
 export { ApplicationError, AuthClient, AuthorizationFlowError, DeviceAccessDeniedError, DeviceAuthorizationPendingError, DeviceAuthorizationSlowDownError, DeviceCodeExpiredError, DeviceTransientServerError, EmailRequired, InvalidCallbackURL, InvalidSocialProvider, JWTPayload, JWTPayloadUser, JWTPayloadWorkspace, RefreshTokenExpiredError, Roles, UserNotLoggedInError, ac, createAPIClient, extractTokenPayload, invitationAdditionalFields, isTokenExpired, memberAdditionalFields, organizationAdditionalFields, rolesAccessControl, userAdditionalFields, validateToken };
-export type { APIClient, ApiKey, ApiKeyMetadata, ApiKeyWithoutSecret, Application, ApplicationInvitationResponse, BaseOrganization, CompleteAuthorizationFlowResponse, CreateApiKeyPayload, CreateApplicationInvitationResponse, CreateTeamPayload, DeviceAuthorizationActionResponse, DeviceAuthorizationContextResponse, DeviceAuthorizationResponse, DeviceContextApplication, FullOrganization, Invitation, InviteUserToApplicationOptions, InviteUserToOrganizationOptions, ListCandidateOrganizationsResponse, ListMembersOptions, Member, ExtendedOrganization as Organization, OrganizationSettings, RemoveUserFromOrganizationOptions, Role, Session, SignInWithEmailAndPasswordOptions, SignInWithSamlOptions, SocialSignInOptions, StartAuthorizationFlowResponse, Strict, Team, TeamMember, UpdateApiKeyPayload, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload, User, WhoAmIInclude, WhoAmIOptions, WhoAmIOrganization, WhoAmIResponse };
+export type { APIClient, ApiKey, ApiKeyMetadata, ApiKeyWithoutSecret, Application, ApplicationAuthContextResponse, ApplicationInvitationResponse, BaseOrganization, CompleteAuthorizationFlowResponse, CreateApiKeyPayload, CreateApplicationInvitationResponse, CreateTeamPayload, DeviceAuthorizationActionResponse, DeviceAuthorizationContextResponse, DeviceAuthorizationResponse, DeviceContextApplication, FullOrganization, Invitation, InviteUserToApplicationOptions, InviteUserToOrganizationOptions, ListCandidateOrganizationsResponse, ListMembersOptions, Member, ExtendedOrganization as Organization, OrganizationSettings, RemoveUserFromOrganizationOptions, Role, Session, SignInWithEmailAndPasswordOptions, SignInWithSamlOptions, SocialSignInOptions, StartAuthorizationFlowResponse, Strict, Team, TeamMember, UpdateApiKeyPayload, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload, User, WhoAmIInclude, WhoAmIOptions, WhoAmIOrganization, WhoAmIResponse };

package/dist/index.mjs

@@ -8,7 +8,7 @@ import { defaultStatements } from 'better-auth/plugins/organization/access';
 import { z } from 'zod';
 export { APIError } from 'better-auth';
 
-const version = "1.17.1";
+const version = "1.18.0";
 
 const statements = {
   ...defaultStatements,
@@ -92,6 +92,13 @@ function applicationsPluginClient() {
     getActions: ($fetch) => {
       return {
         applications: {
+          getApplicationAuthContext: async (applicationId) => {
+            return await $fetch("/applications/context", {
+              query: {
+                applicationId
+              }
+            });
+          },
           listCandidateOrganizations: async (applicationId) => {
             const response = await $fetch("/applications/candidate-organizations", {
               query: {
@@ -382,6 +389,19 @@ class ApplicationService {
   constructor(client) {
     this.client = client;
   }
+  /**
+   * Gets public display context for an application auth redirect.
+   *
+   * @param applicationId - The application ID to get public auth context for
+   * @returns The minimal application identity safe to show before login
+   */
+  async getApplicationAuthContext(applicationId) {
+    const response = await this.client.applications.getApplicationAuthContext(applicationId);
+    if (!response.data) {
+      throw new Error("No data returned from the API", { cause: response.error });
+    }
+    return response.data;
+  }
   /**
    * Lists candidate organizations for a specific application.
    *
@@ -553,7 +573,7 @@ class ApplicationService {
     } catch (error) {
       if (error instanceof ApplicationError)
         throw error;
-      handleRefreshError(error);
+      return handleRefreshError(error);
     }
   }
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-core",
-  "version": "1.17.1",
+  "version": "1.18.0",
   "type": "module",
   "exports": {
     ".": {