@nauth-toolkit/client 0.1.86 → 0.1.88

package/dist/index.cjs

@@ -155,7 +155,6 @@ var defaultEndpoints = {
   getChallengeData: "/challenge/challenge-data",
   profile: "/profile",
   changePassword: "/change-password",
-  requestPasswordChange: "/request-password-change",
   forgotPassword: "/forgot-password",
   confirmForgotPassword: "/forgot-password/confirm",
   confirmAdminResetPassword: "/admin/reset-password/confirm",
@@ -166,7 +165,6 @@ var defaultEndpoints = {
   mfaRemove: "/mfa/method",
   mfaPreferred: "/mfa/preferred-method",
   mfaBackupCodes: "/mfa/backup-codes/generate",
-  mfaExemption: "/mfa/exemption",
   socialLinked: "/social/linked",
   socialLink: "/social/link",
   socialUnlink: "/social/unlink",
@@ -1066,7 +1064,7 @@ var NAuthClient = class {
    * Change user password.
    */
   async changePassword(oldPassword, newPassword) {
-    const payload = { currentPassword: oldPassword, newPassword };
+    const payload = { oldPassword, newPassword };
     await this.post(this.config.endpoints.changePassword, payload, true);
   }
   /**
@@ -1086,35 +1084,30 @@ var NAuthClient = class {
     return result;
   }
   /**
-   * Reset password with code or token (works for both admin-initiated and user-initiated resets).
+   * Reset password with verification code (works for both admin-initiated and user-initiated resets).
    *
-   * Accepts either:
-   * - code: Short numeric code from email/SMS (6-10 digits)
-   * - token: Long hex token from reset link (64 chars)
+   * NOTE:
+   * - Links (when provided by the backend email provider) include the same verification code as a query param
+   *   (e.g., `...?code=123456`) so consumer apps stay code-only and consistent.
    *
    * WHY: Generic method that works for both admin-initiated (adminResetPassword) and
    * user-initiated (forgotPassword) password resets. Uses same backend endpoint.
    *
    * @param identifier - User identifier (email, username, phone)
-   * @param codeOrToken - Verification code OR token from link (one required)
+   * @param code - Verification code from email/SMS (6-10 digits)
    * @param newPassword - New password
    * @returns Success response
    * @throws {NAuthClientError} When reset fails
    *
    * @example
    * ```typescript
-   * // With code from email
    * await client.resetPasswordWithCode('user@example.com', '123456', 'NewPass123!');
-   *
-   * // With token from link
-   * await client.resetPasswordWithCode('user@example.com', '64-char-token', 'NewPass123!');
    * ```
    */
-  async resetPasswordWithCode(identifier, codeOrToken, newPassword) {
-    const isToken = codeOrToken.length > 10;
+  async resetPasswordWithCode(identifier, code, newPassword) {
     const payload = {
       identifier,
-      ...isToken ? { token: codeOrToken } : { code: codeOrToken },
+      code,
       newPassword
     };
     const result = await this.post(
@@ -1125,13 +1118,15 @@ var NAuthClient = class {
     return result;
   }
   /**
-   * Request password change (must change on next login).
-   */
-  async requestPasswordChange() {
-    await this.post(this.config.endpoints.requestPasswordChange, {}, true);
-  }
-  /**
-   * Get MFA status.
+   * Get MFA status for current user.
+   *
+   * @returns Promise of MFA status
+   *
+   * @example
+   * ```typescript
+   * const status = await this.client.getMfaStatus();
+   * console.log('MFA enabled:', status.enabled);
+   * ```
    */
   async getMfaStatus() {
     return this.get(this.config.endpoints.mfaStatus, true);
@@ -1174,7 +1169,7 @@ var NAuthClient = class {
    * @returns Success message
    */
   async setPreferredMfaMethod(method) {
-    return this.post(this.config.endpoints.mfaPreferred, { method }, true);
+    return this.post(this.config.endpoints.mfaPreferred, { methodType: method }, true);
   }
   /**
    * Generate backup codes.
@@ -1184,14 +1179,10 @@ var NAuthClient = class {
     return result.codes;
   }
   /**
-   * Set MFA exemption (admin/test scenarios).
+   * ============================================================================
+   * Event System
+   * ============================================================================
    */
-  async setMfaExemption(exempt, reason) {
-    await this.post(this.config.endpoints.mfaExemption, { exempt, reason }, true);
-  }
-  // ============================================================================
-  // Event System
-  // ============================================================================
   /**
    * Subscribe to authentication events.
    *
@@ -1366,28 +1357,33 @@ var NAuthClient = class {
     return this.get(this.config.endpoints.isTrustedDevice, true);
   }
   /**
-   * Get paginated audit history for the current user.
+   * Get authentication audit history for current user.
    *
-   * Returns authentication and security events with full audit details including:
-   * - Event type (login, logout, MFA, etc.)
-   * - Event status (success, failure, suspicious)
-   * - Device information, location, risk factors
-   *
-   * @param params - Query parameters for filtering and pagination
-   * @returns Paginated audit history response
+   * @param params - Optional query parameters (page, limit, eventType, etc.)
+   * @returns Paginated audit history
    *
    * @example
    * ```typescript
    * const history = await client.getAuditHistory({
    *   page: 1,
    *   limit: 20,
-   *   eventType: 'LOGIN_SUCCESS'
+   *   eventTypes: ['LOGIN_SUCCESS'],
+   *   eventStatus: ['FAILURE'],
    * });
    * ```
    */
   async getAuditHistory(params) {
-    const entries = Object.entries(params ?? {}).map(([k, v]) => [k, String(v)]);
-    const query = entries.length > 0 ? `?${new URLSearchParams(entries).toString()}` : "";
+    const searchParams = new URLSearchParams();
+    for (const [key, rawValue] of Object.entries(params ?? {})) {
+      if (Array.isArray(rawValue)) {
+        for (const item of rawValue) {
+          searchParams.append(key, String(item));
+        }
+        continue;
+      }
+      searchParams.append(key, String(rawValue));
+    }
+    const query = searchParams.toString() ? `?${searchParams.toString()}` : "";
     const path = `${this.config.endpoints.auditHistory}${query}`;
     return this.get(path, true);
   }