@meistrari/auth-core 1.39.2 → 1.40.0

package/dist/index.mjs

@@ -21,7 +21,7 @@ function isTokenExpired(token, expiresInMs) {
   return nowInSeconds > expirationTime;
 }
 
-const version = "1.39.2";
+const version = "1.40.0";
 
 function parsedEnumValues(schema) {
   return Object.fromEntries(
@@ -354,6 +354,62 @@ function applicationsPluginClient() {
   };
 }
 
+function customEndpointsPluginClient() {
+  return {
+    id: "custom-endpoints",
+    getActions: ($fetch) => ({
+      customEndpoints: {
+        organizations: {
+          apiKeys: async () => {
+            return await $fetch("/custom-endpoints/organizations/api-keys");
+          }
+        },
+        teams: {
+          members: async (teamId) => {
+            return await $fetch(`/custom-endpoints/teams/${teamId}/members`);
+          }
+        }
+      }
+    })
+  };
+}
+
+function handshakePluginClient() {
+  return {
+    id: "handshake",
+    getActions: ($fetch) => ({
+      handshake: {
+        noncePayload: async (nonce) => {
+          return await $fetch("/handshake/nonce-payload", {
+            query: { nonce }
+          });
+        }
+      }
+    })
+  };
+}
+
+function invitationSignupPluginClient() {
+  return {
+    id: "invitation-signup",
+    getActions: ($fetch) => ({
+      invitationSignup: {
+        status: async (invitationId) => {
+          return await $fetch("/invitation/signup-status", {
+            query: { invitationId }
+          });
+        },
+        setupPassword: async (invitationId, password) => {
+          return await $fetch("/invitation/setup-password", {
+            method: "POST",
+            body: { invitationId, password }
+          });
+        }
+      }
+    })
+  };
+}
+
 function sessionAssurancePluginClient() {
   return {
     id: "session-assurance",
@@ -382,18 +438,6 @@ function sessionAssurancePluginClient() {
   };
 }
 
-function customEndpointsPluginClient() {
-  return {
-    id: "custom-endpoints",
-    $InferServerPlugin: {}
-  };
-}
-function handshakePluginClient() {
-  return {
-    id: "handshake",
-    $InferServerPlugin: {}
-  };
-}
 function createAPIClient(apiUrl, fetchOptions = {}) {
   const serviceName = typeof process !== "undefined" ? process.env.SERVICE_NAME : "";
   const userAgent = `auth-sdk:core:${version}${serviceName ? `@${serviceName}` : ""}`;
@@ -410,6 +454,7 @@ function createAPIClient(apiUrl, fetchOptions = {}) {
       }),
       customEndpointsPluginClient(),
       handshakePluginClient(),
+      invitationSignupPluginClient(),
       ssoClient(),
       twoFactorClient(),
       jwtClient(),
@@ -1685,6 +1730,33 @@ class OrganizationService {
       member: response.member
     };
   }
+  /**
+   * Gets the pre-login signup status for an invitation.
+   *
+   * Public endpoint keyed by the invitation id from the emailed invite link.
+   * While the invitation is pending, the result includes the invited email
+   * and whether the invited user still needs to set up their account.
+   *
+   * @param id - The invitation ID from the invite link
+   * @returns The invitation status with account-setup information
+   */
+  async getInvitationSignupStatus(id) {
+    return await this.client.invitationSignup.status(id);
+  }
+  /**
+   * Creates a password for an invited user who has no account yet.
+   *
+   * Only available once per invitation, while the invitation is pending and
+   * the invited user has never signed in. The user is signed in as part of
+   * the call; the session cookie is set on the response.
+   *
+   * @param id - The invitation ID from the invite link
+   * @param password - The password to create (minimum 8 characters)
+   * @returns The session token and signed-in user
+   */
+  async setupInvitationPassword(id, password) {
+    return await this.client.invitationSignup.setupPassword(id, password);
+  }
   /**
    * Removes a user from the active organization.
    *
@@ -1851,6 +1923,7 @@ class SessionService {
    * @param options.provider - The social provider
    * @param options.callbackURL - URL to redirect to after successful authentication
    * @param options.errorCallbackURL - URL to redirect to on error
+   * @param options.loginHint - Email to preselect at the provider
    *
    * @throws {InvalidSocialProvider} When the provider is not 'google' or 'microsoft'
    * @throws {InvalidCallbackURL} When callback URLs are malformed
@@ -1858,7 +1931,8 @@ class SessionService {
   async signInWithSocialProvider({
     provider,
     callbackURL,
-    errorCallbackURL
+    errorCallbackURL,
+    loginHint
   }) {
     if (provider !== "google" && provider !== "microsoft") {
       throw new InvalidSocialProvider("Invalid social provider");
@@ -1873,7 +1947,8 @@ class SessionService {
     await this.client.signIn.social({
       provider,
       callbackURL,
-      errorCallbackURL: errorCallbackURL ?? `${this.apiUrl}/error?callbackURL=${appUrl}`
+      errorCallbackURL: errorCallbackURL ?? `${this.apiUrl}/error?callbackURL=${appUrl}`,
+      ...loginHint && { loginHint }
     });
   }
   /**
@@ -1971,11 +2046,7 @@ class SessionService {
    * @returns The JWT token for the nonce
    */
   async getNoncePayload(nonce) {
-    return await this.client.handshake.noncePayload({
-      query: {
-        nonce
-      }
-    });
+    return await this.client.handshake.noncePayload(nonce);
   }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-core",
-  "version": "1.39.2",
+  "version": "1.40.0",
   "type": "module",
   "exports": {
     ".": {
@@ -18,9 +18,9 @@
     "docs": "typedoc"
   },
   "dependencies": {
-    "@better-auth/api-key": "1.5.4",
-    "@better-auth/sso": "1.5.4",
-    "better-auth": "1.5.4",
+    "@better-auth/api-key": "1.6.26",
+    "@better-auth/sso": "1.6.26",
+    "better-auth": "1.6.26",
     "jose": "6.1.3",
     "zod": "4.3.6"
   },