@meistrari/auth-nuxt 3.9.1 → 3.10.0

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/auth-nuxt",
   "configKey": "telaAuth",
-  "version": "3.9.1",
+  "version": "3.10.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -100,6 +100,11 @@ const module$1 = defineNuxtModule({
       as: "useTelaSession",
       from: resolver.resolve("runtime/composables/session")
     });
+    addImports({
+      name: "useTelaSessionAssurance",
+      as: "useTelaSessionAssurance",
+      from: resolver.resolve("runtime/composables/session-assurance")
+    });
     addImports({
       name: "useTelaOrganization",
       as: "useTelaOrganization",

package/dist/runtime/composables/application/auth.d.ts

@@ -38,7 +38,13 @@ export declare function useTelaApplicationAuth(): {
     login: () => Promise<void>;
     logout: () => Promise<void>;
     initSession: () => Promise<void>;
+    /**
+     * @deprecated Use `useTelaOrganization().listOrganizations()` instead.
+     */
     getAvailableOrganizations: () => Promise<FullOrganization[]>;
+    /**
+     * @deprecated Use `useTelaOrganization().setActiveOrganization(organizationId)` instead.
+     */
     switchOrganization: (organizationId: string) => Promise<void>;
     refreshToken: () => Promise<void>;
     getToken: () => Promise<string | null | undefined>;

package/dist/runtime/composables/application/auth.js

@@ -49,6 +49,7 @@ export function useTelaApplicationAuth() {
   async function logout() {
     state.user.value = null;
     state.activeOrganization.value = null;
+    state.sessionAssurance.value = null;
     await $fetch("/auth/logout", { method: "POST" });
   }
   async function refreshToken() {
@@ -58,6 +59,7 @@ export function useTelaApplicationAuth() {
       });
       state.user.value = result.user;
       state.activeOrganization.value = result.organization;
+      state.sessionAssurance.value = result.assurance;
     } catch (error) {
       console.error("[Auth Refresh] Failed to refresh token:", error);
       throw new RefreshTokenExpiredError();
@@ -73,25 +75,10 @@ export function useTelaApplicationAuth() {
     }
   }
   async function getAvailableOrganizations() {
-    try {
-      return await useTelaOrganization().listOrganizations();
-    } catch (error) {
-      console.error("[Auth Orgs] Failed to list organizations:", error);
-      throw error;
-    }
+    return await useTelaOrganization().listOrganizations();
   }
   async function switchOrganization(organizationId) {
-    try {
-      const result = await $fetch("/auth/switch-organization", {
-        method: "POST",
-        body: { organizationId }
-      });
-      state.user.value = result.user;
-      state.activeOrganization.value = result.organization;
-    } catch (error) {
-      console.error("[Auth Switch Org] Failed to switch organization:", error);
-      throw error;
-    }
+    await useTelaOrganization().setActiveOrganization(organizationId);
   }
   async function getToken() {
     const shouldRefresh = accessTokenCookie.value ? willTokenExpireIn(accessTokenCookie.value, ONE_MINUTE * 2) : true;
@@ -101,7 +88,8 @@ export function useTelaApplicationAuth() {
     return accessTokenCookie.value;
   }
   return {
-    ...state,
+    user: state.user,
+    activeOrganization: state.activeOrganization,
     login,
     logout,
     /**

package/dist/runtime/composables/application/organization.d.ts

@@ -6,6 +6,7 @@ export interface UseTelaApplicationOrganizationReturn {
     getActiveOrganization: () => Promise<FullOrganization | undefined>;
     getAvailableOrganizations: () => Promise<FullOrganization[]>;
     listOrganizations: () => Promise<FullOrganization[]>;
+    setActiveOrganization: (id: string) => Promise<void>;
     listMembers: (options?: ListMembersOptions) => Promise<Member[]>;
     getActiveMember: () => Promise<Member>;
     inviteUserToOrganization: (options: InviteUserToOrganizationOptions) => Promise<Invitation>;

package/dist/runtime/composables/application/organization.js

@@ -2,7 +2,7 @@ import { useCookie, useRequestURL } from "#app";
 import { createNuxtAuthClient } from "../../shared.js";
 import { useApplicationSessionState, useOrganizationState } from "../state.js";
 export function useTelaOrganization() {
-  const { activeOrganization } = useApplicationSessionState();
+  const { activeOrganization, sessionAssurance, user } = useApplicationSessionState();
   const { activeMember } = useOrganizationState();
   const requestUrl = useRequestURL();
   const accessToken = useCookie("tela-access-token");
@@ -21,6 +21,15 @@ export function useTelaOrganization() {
   async function listOrganizations() {
     return await authClient.organization.listOrganizations();
   }
+  async function setActiveOrganization(id) {
+    const result = await $fetch("/auth/switch-organization", {
+      method: "POST",
+      body: { organizationId: id }
+    });
+    user.value = result.user;
+    activeOrganization.value = result.organization;
+    sessionAssurance.value = result.assurance;
+  }
   async function listMembers(options) {
     return await authClient.organization.listMembers(options);
   }
@@ -125,6 +134,7 @@ export function useTelaOrganization() {
     getActiveOrganization,
     getAvailableOrganizations,
     listOrganizations,
+    setActiveOrganization,
     listMembers,
     getActiveMember,
     inviteUserToOrganization,

package/dist/runtime/composables/session-assurance.d.ts

@@ -0,0 +1,13 @@
+import type { BeginOAuthStepUpParams, OAuthCompleteStepUpResponse, SendOtpResponse, SessionAssuranceResponse } from '@meistrari/auth-core';
+export interface UseTelaSessionAssuranceReturn {
+    get: () => Promise<SessionAssuranceResponse>;
+    stepUpWithPassword: (password: string) => Promise<SessionAssuranceResponse>;
+    sendOtp: () => Promise<SendOtpResponse>;
+    verifyOtp: (otp: string) => Promise<SessionAssuranceResponse>;
+    beginOAuthStepUp: (params: BeginOAuthStepUpParams) => Promise<{
+        stepUpToken: string;
+        callbackURL: string;
+    }>;
+    completeOAuthStepUp: (token: string) => Promise<OAuthCompleteStepUpResponse>;
+}
+export declare function useTelaSessionAssurance(): UseTelaSessionAssuranceReturn;

package/dist/runtime/composables/session-assurance.js

@@ -0,0 +1,35 @@
+import { useCookie, useRuntimeConfig } from "#app";
+import { createNuxtAuthClient } from "../shared.js";
+export function useTelaSessionAssurance() {
+  const { jwtCookieName, apiUrl } = useRuntimeConfig().public.telaAuth;
+  const tokenCookie = useCookie(jwtCookieName);
+  const authClient = createNuxtAuthClient(apiUrl, () => tokenCookie.value ?? null);
+  const callbackSessionClient = createNuxtAuthClient(apiUrl, () => null);
+  async function refreshTokenCookie(client = authClient) {
+    const { token } = await client.session.getToken();
+    tokenCookie.value = token;
+  }
+  async function stepUpWithPassword(password) {
+    const result = await authClient.sessionAssurance.stepUpWithPassword(password);
+    await refreshTokenCookie();
+    return result;
+  }
+  async function verifyOtp(otp) {
+    const result = await authClient.sessionAssurance.verifyOtp(otp);
+    await refreshTokenCookie();
+    return result;
+  }
+  async function completeOAuthStepUp(token) {
+    const result = await callbackSessionClient.sessionAssurance.completeOAuthStepUp(token);
+    await refreshTokenCookie(callbackSessionClient);
+    return result;
+  }
+  return {
+    get: () => authClient.sessionAssurance.get(),
+    stepUpWithPassword,
+    sendOtp: () => authClient.sessionAssurance.sendOtp(),
+    verifyOtp,
+    beginOAuthStepUp: (params) => authClient.sessionAssurance.beginOAuthStepUp(params),
+    completeOAuthStepUp
+  };
+}

package/dist/runtime/composables/state.d.ts

@@ -1,5 +1,5 @@
 import type { Ref } from 'vue';
-import type { FullOrganization, Session, User } from '@meistrari/auth-core';
+import type { FullOrganization, JWTPayload, Session, User } from '@meistrari/auth-core';
 /**
  * Shared state for session management.
  * This module provides access to session-related state without creating circular dependencies.
@@ -51,4 +51,5 @@ export declare function useOrganizationState(): {
 export declare function useApplicationSessionState(): {
     user: Ref<User | null>;
     activeOrganization: Ref<FullOrganization | null>;
+    sessionAssurance: Ref<JWTPayload['assurance'] | null>;
 };

package/dist/runtime/composables/state.js

@@ -18,8 +18,10 @@ export function useOrganizationState() {
 export function useApplicationSessionState() {
   const user = useState("user", () => null);
   const activeOrganization = useState("activeOrganization", () => null);
+  const sessionAssurance = useState("sessionAssurance", () => null);
   return {
     user,
-    activeOrganization
+    activeOrganization,
+    sessionAssurance
   };
 }

package/dist/runtime/plugins/application-token-refresh.js

@@ -43,18 +43,20 @@ export default defineNuxtPlugin({
       isRefreshing = true;
       try {
         if (import.meta.server) {
-          const { accessToken, refreshToken: refreshToken2, user: user2, organization: organization2 } = await authClient.application.refreshAccessToken(refreshTokenCookie.value ?? "");
+          const { accessToken, refreshToken: refreshToken2, user: user2, organization: organization2, assurance: assurance2 } = await authClient.application.refreshAccessToken(refreshTokenCookie.value ?? "");
           accessTokenCookie.value = accessToken;
           refreshTokenCookie.value = refreshToken2;
           state.user.value = user2;
           state.activeOrganization.value = organization2;
+          state.sessionAssurance.value = assurance2;
           return true;
         }
-        const { user, organization } = await $fetch("/auth/refresh", {
+        const { user, organization, assurance } = await $fetch("/auth/refresh", {
           method: "POST"
         });
         state.user.value = user;
         state.activeOrganization.value = organization;
+        state.sessionAssurance.value = assurance;
         return true;
       } catch {
         await sdkLogout();
@@ -75,6 +77,7 @@ export default defineNuxtPlugin({
       accessTokenCookie.value = null;
       state.user.value = null;
       state.activeOrganization.value = null;
+      state.sessionAssurance.value = null;
     }
     function scheduleWorkerTimeout(delayMs, callback) {
       if (refreshWorker) {
@@ -127,6 +130,7 @@ export default defineNuxtPlugin({
           });
           state.user.value = data.user;
           state.activeOrganization.value = data.organization;
+          state.sessionAssurance.value = data.assurance;
         } catch (error) {
           console.error("[Tela Auth SDK] Failed to get user and organization:", error.message);
           if (!refreshTokenCookie.value) {
@@ -134,11 +138,10 @@ export default defineNuxtPlugin({
             logout();
             return;
           }
-          const refreshTokenValue = refreshTokenCookie.value;
           try {
             await refreshToken();
           } catch (error2) {
-            console.error(`[Tela Auth SDK] Failed to refresh token ${refreshTokenValue}...:`, error2.message);
+            console.error("[Tela Auth SDK] Failed to refresh token:", error2.message);
             logout();
           }
         }
@@ -147,7 +150,7 @@ export default defineNuxtPlugin({
         try {
           await refreshToken();
         } catch (error) {
-          console.error(`[Tela Auth SDK] Failed to refresh token ${refreshTokenCookie.value}...:`, error.message);
+          console.error("[Tela Auth SDK] Failed to refresh token:", error.message);
           logout();
         }
       }
@@ -156,11 +159,12 @@ export default defineNuxtPlugin({
     if (import.meta.client) {
       if (!state.user.value && accessTokenCookie.value) {
         try {
-          const { user, organization } = await $fetch("/auth/whoami", {
+          const { user, organization, assurance } = await $fetch("/auth/whoami", {
             method: "GET"
           });
           state.user.value = user;
           state.activeOrganization.value = organization;
+          state.sessionAssurance.value = assurance;
         } catch (error) {
           console.error("[Tela Auth SDK] Failed to load user info on client startup:", error);
         }

package/dist/runtime/server/routes/auth/refresh.d.ts

@@ -1,4 +1,4 @@
-import type { FullOrganization, User } from '@meistrari/auth-core';
+import type { FullOrganization, JWTPayloadAssurance, User } from '@meistrari/auth-core';
 /**
  * Server route handler for token refresh
  *
@@ -14,5 +14,6 @@ declare const _default: import("h3").EventHandler<import("h3").EventHandlerReque
     success: boolean;
     user: User;
     organization: FullOrganization;
+    assurance: JWTPayloadAssurance;
 }>>;
 export default _default;

package/dist/runtime/server/routes/auth/refresh.js

@@ -18,7 +18,7 @@ export default defineEventHandler(async (event) => {
       () => null,
       () => refreshToken
     );
-    const { accessToken, refreshToken: newRefreshToken, user, organization } = await authClient.application.refreshAccessToken(refreshToken);
+    const { accessToken, refreshToken: newRefreshToken, user, organization, assurance } = await authClient.application.refreshAccessToken(refreshToken);
     setCookie(event, "tela-access-token", accessToken, {
       secure: !import.meta.dev,
       sameSite: "lax",
@@ -39,7 +39,8 @@ export default defineEventHandler(async (event) => {
     return {
       success: true,
       user,
-      organization
+      organization,
+      assurance
     };
   } catch (error) {
     console.error("[Auth Refresh] Token refresh error:", error);

package/dist/runtime/server/routes/auth/switch-organization.d.ts

@@ -1,4 +1,4 @@
-import type { FullOrganization, User } from '@meistrari/auth-core';
+import type { FullOrganization, JWTPayloadAssurance, User } from '@meistrari/auth-core';
 /**
  * Server route handler for switching organizations
  *
@@ -15,5 +15,6 @@ declare const _default: import("h3").EventHandler<import("h3").EventHandlerReque
     success: boolean;
     user: User;
     organization: FullOrganization;
+    assurance: JWTPayloadAssurance;
 }>>;
 export default _default;

package/dist/runtime/server/routes/auth/switch-organization.js

@@ -25,7 +25,7 @@ export default defineEventHandler(async (event) => {
       authConfig.apiUrl,
       () => accessToken
     );
-    const { accessToken: newAccessToken, refreshToken: newRefreshToken, user, organization } = await authClient.application.switchOrganization(body.organizationId, accessToken);
+    const { accessToken: newAccessToken, refreshToken: newRefreshToken, user, organization, assurance } = await authClient.application.switchOrganization(body.organizationId, accessToken);
     setCookie(event, "tela-access-token", newAccessToken, {
       secure: !import.meta.dev,
       sameSite: "lax",
@@ -46,7 +46,8 @@ export default defineEventHandler(async (event) => {
     return {
       success: true,
       user,
-      organization
+      organization,
+      assurance
     };
   } catch (error) {
     console.error("[Auth Switch Org] Failed to switch organization:", error);

package/dist/runtime/server/routes/auth/whoami.d.ts

@@ -1,4 +1,4 @@
-import type { FullOrganization, User } from '@meistrari/auth-core';
+import type { FullOrganization, JWTPayloadAssurance, User } from '@meistrari/auth-core';
 /**
  * Server route handler for retrieving the current user and active organization
  *
@@ -11,5 +11,6 @@ declare const _default: import("h3").EventHandler<import("h3").EventHandlerReque
     success: boolean;
     user: User;
     organization: FullOrganization;
+    assurance: JWTPayloadAssurance;
 }>>;
 export default _default;

package/dist/runtime/server/routes/auth/whoami.js

@@ -14,13 +14,14 @@ export default defineEventHandler(async (event) => {
     });
   }
   try {
-    const { user, organization } = await authClient.application.whoAmI(accessToken, {
+    const { user, organization, assurance } = await authClient.application.whoAmI(accessToken, {
       include: ["members", "teams", "invitations"]
     });
     return {
       success: true,
       user,
-      organization
+      organization,
+      assurance
     };
   } catch (error) {
     console.error("[Auth WhoAmI] Failed to get user and organization:", error);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-nuxt",
-  "version": "3.9.1",
+  "version": "3.10.0",
   "type": "module",
   "exports": {
     ".": {
@@ -36,7 +36,7 @@
     "docs": "nuxt-module-build prepare && typedoc"
   },
   "dependencies": {
-    "@meistrari/auth-core": "1.20.1",
+    "@meistrari/auth-core": "1.21.0",
     "jose": "6.1.3"
   },
   "peerDependencies": {