@protobase/client 0.46.3 → 0.46.5

package/dist/account-profile.js

@@ -1,7 +1,7 @@
 import { authError } from "./auth-error.js";
 //#region src/account-profile.ts
 const isoDate = (value) => new Date(value).toISOString();
-/** The signed-in person's name, password and signed-in devices. Each call rejects with `AuthError`. */
+/** The signed-in person's name, address, password and signed-in devices. Each call rejects with `AuthError`. */
 const accountProfile = (client) => ({
 	updateName: async (name) => {
 		const { error } = await client.updateUser({ name });
@@ -16,6 +16,39 @@ const accountProfile = (client) => ({
 		});
 		if (error) throw authError(error, "Could not change your password");
 	},
+	/**
+	* Gives an account without a password, such as one that signs in with emailed codes or GitHub, its first one; every
+	* device stays signed in. One that has a password already is refused (`PASSWORD_ALREADY_SET`).
+	*/
+	setPassword: async (next) => {
+		const { error } = await client.$fetch("/account/set-password", {
+			method: "POST",
+			body: { newPassword: next }
+		});
+		if (error) throw authError(error, "Could not set your password");
+	},
+	/**
+	* Mails a code to `newEmail` that moves the account to it, when the server has mail (`status().changeEmail`). The answer
+	* is the same when another account has the address, which then gets no code.
+	*/
+	requestEmailChange: async (newEmail) => {
+		const { error } = await client.$fetch("/email-otp/request-email-change", {
+			method: "POST",
+			body: { newEmail }
+		});
+		if (error) throw authError(error, "Could not send the code");
+	},
+	/** Moves the account to `newEmail` with the code mailed there; this device stays signed in, with the new address. */
+	changeEmail: async (newEmail, code) => {
+		const { error } = await client.$fetch("/email-otp/change-email", {
+			method: "POST",
+			body: {
+				newEmail,
+				otp: code
+			}
+		});
+		if (error) throw authError(error, "Could not change your address");
+	},
 	/** The devices signed in now, with this one marked `current`. */
 	sessions: async () => {
 		const [list, own] = await Promise.all([client.listSessions(), client.getSession()]);

package/dist/auth-types.d.ts

@@ -31,7 +31,8 @@ export type SamlSignIn = {
 };
 /**
  * `needsAdmin` while no user exists yet; `signInMethods` the ways to sign in the server's policy leaves on;
- * `passwordReset` when the server can email reset links; `signUp` when anyone can make their own account (see
+ * `passwordReset` when the server can email reset links; `changeEmail` when it can email the code that confirms a new
+ * address (see `account.requestEmailChange`); `signUp` when anyone can make their own account (see
  * `sendSignUpCode`); `socialProviders` the ids of the sign-in providers, for example
  * `github`; `platformSignIn` the one of them the platform adds; `samlProviders` the app's SAML identity providers; `staffSignIn` the operator provider's name when its staff
  * can sign in as people; `organizations` when the app has them; `anonymous` when visitors may browse what the project's
@@ -43,6 +44,7 @@ export type SetupStatus = {
   needsAdmin: boolean;
   signInMethods: SignInMethod[];
   passwordReset: boolean;
+  changeEmail?: boolean;
   signUp?: boolean;
   socialProviders: string[];
   platformSignIn?: PlatformSignIn;

package/dist/auth.d.ts

@@ -53,6 +53,9 @@ export declare const createAuthSession: (options?: AuthSessionOptions) => {
   account: {
     updateName: (name: string) => Promise<void>;
     changePassword: (current: string, next: string, signOutOthers: boolean) => Promise<void>;
+    setPassword: (next: string) => Promise<void>;
+    requestEmailChange: (newEmail: string) => Promise<void>;
+    changeEmail: (newEmail: string, code: string) => Promise<void>;
     sessions: () => Promise<DeviceSession[]>;
     revokeSession: (token: string) => Promise<void>;
     revokeOtherSessions: () => Promise<void>;

package/dist/auth.js

@@ -77,6 +77,7 @@ const createAuthSession = (options = {}) => {
 				needsAdmin: Boolean(body.needsAdmin),
 				signInMethods: body.signInMethods ?? ["password"],
 				passwordReset: Boolean(body.passwordReset),
+				...body.changeEmail && { changeEmail: true },
 				...body.signUp && { signUp: true },
 				socialProviders: body.socialProviders ?? [],
 				...body.platformSignIn && { platformSignIn: body.platformSignIn },

package/dist/static-session.js

@@ -78,6 +78,9 @@ const createStaticSession = (token, user = {
 		disconnectApp: unsupported("disconnect an app"),
 		updateName: unsupported("change its name"),
 		changePassword: unsupported("change its password"),
+		setPassword: unsupported("set its password"),
+		requestEmailChange: unsupported("change its address"),
+		changeEmail: unsupported("change its address"),
 		sessions: async () => [],
 		revokeSession: unsupported("sign out a device"),
 		revokeOtherSessions: unsupported("sign out other devices")

package/dist/types.d.ts

@@ -261,6 +261,7 @@ export type Meta = {
   resources: ResourceModel[];
   views: ViewModel[];
   pages?: PageModel[];
+  account?: PageModel;
   permissions?: Record<string, ResourcePermissions>;
   userMenu?: UserMenuModel;
   signIn?: SignInViewModel[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/client",
-  "version": "0.46.3",
+  "version": "0.46.5",
   "description": "Typed fetch client for the Protobase REST API.",
   "license": "Apache-2.0",
   "repository": {
@@ -30,8 +30,8 @@
   },
   "dependencies": {
     "@better-auth/passkey": "^1.7.12",
-    "@protobase/layout": "0.46.3",
-    "@protobase/schema": "0.46.3",
+    "@protobase/layout": "0.46.5",
+    "@protobase/schema": "0.46.5",
     "@simplewebauthn/browser": "^13.3.0",
     "better-auth": "^1.7.12"
   }