@nauth-toolkit/client 0.1.21 → 0.1.23

package/dist/angular/index.cjs

@@ -845,7 +845,9 @@ var _NAuthClient = class _NAuthClient {
    */
   async confirmForgotPassword(identifier, code, newPassword) {
     const payload = { identifier, code, newPassword };
-    return this.post(this.config.endpoints.confirmForgotPassword, payload);
+    const result = await this.post(this.config.endpoints.confirmForgotPassword, payload);
+    await this.clearAuthState(false);
+    return result;
   }
   /**
    * Request password change (must change on next login).
@@ -981,11 +983,9 @@ var _NAuthClient = class _NAuthClient {
       const base = this.config.baseUrl.replace(/\/$/, "");
       const startUrl = new URL(`${base}${startPath}`);
       const returnTo = options?.returnTo ?? this.config.redirects?.success ?? "/";
-      const action = options?.action ?? "login";
       startUrl.searchParams.set("returnTo", returnTo);
-      startUrl.searchParams.set("action", action);
-      if (options?.delivery === "cookies" || options?.delivery === "json") {
-        startUrl.searchParams.set("delivery", options.delivery);
+      if (options?.action === "link") {
+        startUrl.searchParams.set("action", "link");
       }
       if (typeof options?.appState === "string" && options.appState.trim() !== "") {
         startUrl.searchParams.set("appState", options.appState);
@@ -1196,7 +1196,9 @@ var _NAuthClient = class _NAuthClient {
       await this.setDeviceToken(response.deviceToken);
     }
     if (response.user) {
-      await this.setUser(response.user);
+      const user = response.user;
+      user.sessionAuthMethod = response.authMethod ?? null;
+      await this.setUser(user);
     }
     await this.clearChallenge();
   }
@@ -1268,6 +1270,15 @@ var _NAuthClient = class _NAuthClient {
         headers["Authorization"] = `Bearer ${accessToken}`;
       }
     }
+    if (this.config.tokenDelivery === "json") {
+      try {
+        const deviceToken = await this.config.storage.getItem(this.config.deviceTrust.storageKey);
+        if (deviceToken) {
+          headers[this.config.deviceTrust.headerName] = deviceToken;
+        }
+      } catch {
+      }
+    }
     if (this.config.tokenDelivery === "cookies" && hasWindow()) {
       const csrfToken = this.getCsrfToken();
       if (csrfToken) {
@@ -1516,6 +1527,22 @@ var AuthService = class {
   refresh() {
     return (0, import_rxjs2.from)(this.client.refreshTokens());
   }
+  /**
+   * Refresh tokens (promise-based).
+   *
+   * Returns a promise instead of an Observable, matching the core NAuthClient API.
+   * Useful for async/await patterns in guards and interceptors.
+   *
+   * @returns Promise of TokenResponse
+   *
+   * @example
+   * ```typescript
+   * const tokens = await auth.refreshTokensPromise();
+   * ```
+   */
+  refreshTokensPromise() {
+    return this.client.refreshTokens();
+  }
   // ============================================================================
   // Account Recovery (Forgot Password)
   // ============================================================================
@@ -1580,6 +1607,25 @@ var AuthService = class {
       })
     );
   }
+  /**
+   * Get current user profile (promise-based).
+   *
+   * Returns a promise instead of an Observable, matching the core NAuthClient API.
+   * Useful for async/await patterns in guards and interceptors.
+   *
+   * @returns Promise of current user profile
+   *
+   * @example
+   * ```typescript
+   * const user = await auth.getProfilePromise();
+   * ```
+   */
+  getProfilePromise() {
+    return this.client.getProfile().then((user) => {
+      this.currentUserSubject.next(user);
+      return user;
+    });
+  }
   /**
    * Update user profile.
    *
@@ -1674,6 +1720,23 @@ var AuthService = class {
   exchangeSocialRedirect(exchangeToken) {
     return (0, import_rxjs2.from)(this.client.exchangeSocialRedirect(exchangeToken).then((res) => this.updateChallengeState(res)));
   }
+  /**
+   * Exchange an exchangeToken (from redirect callback URL) into an AuthResponse (promise-based).
+   *
+   * Returns a promise instead of an Observable, matching the core NAuthClient API.
+   * Useful for async/await patterns in guards and interceptors.
+   *
+   * @param exchangeToken - One-time exchange token from the callback URL
+   * @returns Promise of AuthResponse
+   *
+   * @example
+   * ```typescript
+   * const response = await auth.exchangeSocialRedirectPromise(exchangeToken);
+   * ```
+   */
+  exchangeSocialRedirectPromise(exchangeToken) {
+    return this.client.exchangeSocialRedirect(exchangeToken).then((res) => this.updateChallengeState(res));
+  }
   /**
    * Verify native social token (mobile).
    *
@@ -1953,7 +2016,7 @@ var authInterceptor = /* @__PURE__ */ __name((req, next) => {
         if (config.debug) {
           console.warn("[nauth-interceptor] Starting refresh...");
         }
-        const refresh$ = tokenDelivery === "cookies" ? http.post(refreshUrl, {}, { withCredentials: true }) : (0, import_rxjs3.from)(authService.getClient().refreshTokens());
+        const refresh$ = tokenDelivery === "cookies" ? http.post(refreshUrl, {}, { withCredentials: true }) : (0, import_rxjs3.from)(authService.refreshTokensPromise());
         return refresh$.pipe(
           (0, import_rxjs3.switchMap)((response) => {
             if (config.debug) {
@@ -2080,9 +2143,18 @@ var socialRedirectCallbackGuard = /* @__PURE__ */ __name(async () => {
     return false;
   }
   if (!exchangeToken) {
-    return true;
+    try {
+      await auth.getProfilePromise();
+    } catch {
+      const errorUrl = config.redirects?.oauthError || "/login";
+      window.location.replace(errorUrl);
+      return false;
+    }
+    const successUrl2 = config.redirects?.success || "/";
+    window.location.replace(successUrl2);
+    return false;
   }
-  const response = await auth.getClient().exchangeSocialRedirect(exchangeToken);
+  const response = await auth.exchangeSocialRedirectPromise(exchangeToken);
   if (response.challengeName) {
     const challengeBase = config.redirects?.challengeBase || "/auth/challenge";
     const challengeRoute = response.challengeName.toLowerCase().replace(/_/g, "-");