@pubflow/core 0.4.4 → 0.4.6

package/dist/auth/service.js

@@ -49,16 +49,21 @@ class AuthService {
                     console.log('AuthService.login: Login successful, storing session data');
                 }
                 const data = response.data;
-                // Normalize snake_case → camelCase for 2FA fields returned by the backend
-                // Backend: { requires_2fa, session_id, available_methods }
-                // Client expects: { requires2fa, sessionId, availableMethods }
+                // Normalize snake_case → camelCase for 2FA fields returned by the backend.
+                // Backend: { success:false, requires_2fa:true, session_id, available_methods, user }
                 if (data.requires_2fa) {
                     const partialSessionId = (_b = data.session_id) !== null && _b !== void 0 ? _b : data.sessionId;
-                    // ← CRITICAL: store the partial session so ApiClient can attach it
-                    // to subsequent /auth/two_factor/:method/start calls.
+                    // Store the partial session so ApiClient can attach it on
+                    // subsequent /auth/two_factor/:method/start and /verify calls.
                     if (partialSessionId) {
                         await this.storage.setItem(this.sessionKey, partialSessionId);
                     }
+                    // The 2FA login response already includes safe user data.
+                    // Store it now so getCurrentUser() returns the real user after OTP verify —
+                    // no extra API call to /me or /validation needed.
+                    if (data.user) {
+                        await this.storeUserData(data.user);
+                    }
                     return {
                         success: true,
                         requires2fa: true,
@@ -66,7 +71,7 @@ class AuthService {
                         availableMethods: (_d = (_c = data.available_methods) !== null && _c !== void 0 ? _c : data.availableMethods) !== null && _d !== void 0 ? _d : [],
                     };
                 }
-                // Normal login — store session ID and user data
+                // Normal (non-2FA) login — store session ID and user data
                 if ((_e = data.session_id) !== null && _e !== void 0 ? _e : data.sessionId) {
                     await this.storage.setItem(this.sessionKey, (_f = data.session_id) !== null && _f !== void 0 ? _f : data.sessionId);
                 }

package/dist/auth/two-factor.d.ts

@@ -11,7 +11,7 @@ import type { TwoFactorMethod, TwoFactorSystemInfo, TwoFactorStartResult, TwoFac
 export declare class TwoFactorService {
     private apiClient;
     private basePath;
-    constructor(apiClient: ApiClient, config: PubflowInstanceConfig);
+    constructor(apiClient: ApiClient, configOrBasePath: PubflowInstanceConfig | string);
     /**
      * GET /auth/two_factor/system
      * Returns system-level 2FA availability (no auth needed).

package/dist/auth/two-factor.js

@@ -9,9 +9,14 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TwoFactorService = void 0;
 class TwoFactorService {
-    constructor(apiClient, config) {
+    constructor(apiClient, configOrBasePath) {
         this.apiClient = apiClient;
-        this.basePath = `${config.authBasePath || '/auth'}/two_factor`;
+        if (typeof configOrBasePath === 'string') {
+            this.basePath = configOrBasePath;
+        }
+        else {
+            this.basePath = `${configOrBasePath.authBasePath || '/auth'}/two_factor`;
+        }
     }
     // ─── Public (no auth) ──────────────────────────────────────────────────────
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pubflow/core",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "description": "Core functionality for Pubflow framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",