@reauth-dev/sdk 0.1.0 → 0.2.0

package/dist/server.mjs

@@ -1,3 +1,7 @@
+import {
+  DEFAULT_TIMEOUT_MS
+} from "./chunk-EY5LQCDG.mjs";
+
 // src/server.ts
 import { hkdf } from "crypto";
 import * as jose from "jose";
@@ -11,6 +15,28 @@ async function deriveJwtSecret(apiKey, domainId) {
     });
   });
 }
+var VALID_SUBSCRIPTION_STATUSES = /* @__PURE__ */ new Set([
+  "active",
+  "past_due",
+  "canceled",
+  "trialing",
+  "incomplete",
+  "incomplete_expired",
+  "unpaid",
+  "paused",
+  "none"
+]);
+function isValidClaims(payload) {
+  if (typeof payload.sub !== "string") return false;
+  if (typeof payload.domain_id !== "string") return false;
+  if (typeof payload.domain !== "string") return false;
+  if (!Array.isArray(payload.roles) || !payload.roles.every((r) => typeof r === "string")) return false;
+  const subscription = payload.subscription;
+  if (typeof subscription !== "object" || subscription === null || Array.isArray(subscription)) return false;
+  const status = subscription.status;
+  if (typeof status !== "string" || !VALID_SUBSCRIPTION_STATUSES.has(status)) return false;
+  return true;
+}
 function transformSubscription(sub) {
   return {
     status: sub.status,
@@ -37,6 +63,10 @@ function parseCookies(cookieHeader) {
 }
 function createServerClient(config) {
   const { domain, apiKey } = config;
+  if (config.timeout !== void 0 && (!Number.isFinite(config.timeout) || config.timeout <= 0)) {
+    throw new Error("timeout must be a positive finite number in milliseconds");
+  }
+  const timeoutMs = config.timeout ?? DEFAULT_TIMEOUT_MS;
   if (!apiKey) {
     throw new Error(
       "apiKey is required for createServerClient. Get one from the Reauth dashboard."
@@ -84,7 +114,11 @@ function createServerClient(config) {
             // 60 seconds clock skew tolerance
           }
         );
-        const claims = payload;
+        const payloadRecord = payload;
+        if (!isValidClaims(payloadRecord)) {
+          return { valid: false, user: null, claims: null, error: "Invalid token claims: missing required fields" };
+        }
+        const claims = payloadRecord;
         if (claims.domain !== domain) {
           return { valid: false, user: null, claims: null, error: "Domain mismatch" };
         }
@@ -207,10 +241,11 @@ function createServerClient(config) {
      * ```
      */
     async getUserById(userId) {
-      const res = await fetch(`${developerBaseUrl}/users/${userId}`, {
+      const res = await fetch(`${developerBaseUrl}/users/${encodeURIComponent(userId)}`, {
         headers: {
           Authorization: `Bearer ${apiKey}`
-        }
+        },
+        signal: AbortSignal.timeout(timeoutMs)
       });
       if (!res.ok) {
         if (res.status === 401) {
@@ -243,16 +278,18 @@ function createServerClient(config) {
      * @returns Object with the current balance
      */
     async getBalance(userId) {
-      const res = await fetch(`${developerBaseUrl}/users/${userId}/balance`, {
+      const res = await fetch(`${developerBaseUrl}/users/${encodeURIComponent(userId)}/balance`, {
         headers: {
           Authorization: `Bearer ${apiKey}`
-        }
+        },
+        signal: AbortSignal.timeout(timeoutMs)
       });
       if (!res.ok) {
         if (res.status === 401) throw new Error("Invalid API key");
         throw new Error(`Failed to get balance: ${res.status}`);
       }
-      return res.json();
+      const data = await res.json();
+      return { balance: data.balance };
     },
     /**
      * Charge (deduct) credits from a user's balance.
@@ -263,12 +300,13 @@ function createServerClient(config) {
      * @throws Error with status 402 if insufficient balance, 400 if invalid amount
      */
     async charge(userId, opts) {
-      const res = await fetch(`${developerBaseUrl}/users/${userId}/charge`, {
+      const res = await fetch(`${developerBaseUrl}/users/${encodeURIComponent(userId)}/charge`, {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
           Authorization: `Bearer ${apiKey}`
         },
+        signal: AbortSignal.timeout(timeoutMs),
         body: JSON.stringify({
           amount: opts.amount,
           request_uuid: opts.requestUuid,
@@ -292,12 +330,13 @@ function createServerClient(config) {
      * @returns Object with the new balance after deposit
      */
     async deposit(userId, opts) {
-      const res = await fetch(`${developerBaseUrl}/users/${userId}/deposit`, {
+      const res = await fetch(`${developerBaseUrl}/users/${encodeURIComponent(userId)}/deposit`, {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
           Authorization: `Bearer ${apiKey}`
         },
+        signal: AbortSignal.timeout(timeoutMs),
         body: JSON.stringify({
           amount: opts.amount,
           request_uuid: opts.requestUuid,
@@ -325,11 +364,12 @@ function createServerClient(config) {
       if (opts?.offset !== void 0) params.set("offset", String(opts.offset));
       const qs = params.toString();
       const res = await fetch(
-        `${developerBaseUrl}/users/${userId}/balance/transactions${qs ? `?${qs}` : ""}`,
+        `${developerBaseUrl}/users/${encodeURIComponent(userId)}/balance/transactions${qs ? `?${qs}` : ""}`,
         {
           headers: {
             Authorization: `Bearer ${apiKey}`
-          }
+          },
+          signal: AbortSignal.timeout(timeoutMs)
         }
       );
       if (!res.ok) {
@@ -352,5 +392,7 @@ function createServerClient(config) {
   };
 }
 export {
-  createServerClient
+  createServerClient,
+  deriveJwtSecret,
+  parseCookies
 };

package/dist/{types-D8oOYbeC.d.mts → types-BqZzje-y.d.mts}

@@ -5,8 +5,11 @@ type ReauthSession = {
     email: string | null;
     roles: string[] | null;
     waitlist_position: number | null;
+    /** Whether the user has linked their Google account */
+    google_linked: boolean | null;
     error: string | null;
-    error_code: "ACCOUNT_SUSPENDED" | null;
+    /** Error code (e.g., "ACCOUNT_SUSPENDED", "SESSION_VERIFICATION_FAILED") */
+    error_code: string | null;
     /** Subscription information (if billing is configured) */
     subscription?: {
         status: string;
@@ -62,6 +65,8 @@ type DomainEndUserClaims = {
 type ReauthConfig = {
     /** Your verified domain (e.g., "yourdomain.com") */
     domain: string;
+    /** Request timeout in milliseconds. Defaults to 10 seconds if not specified. */
+    timeout?: number;
 };
 /** Configuration for server-side reauth client */
 type ReauthServerConfig = ReauthConfig & {
@@ -112,6 +117,16 @@ type TokenResponse = {
     /** Token type (always "Bearer") */
     tokenType: string;
 };
+/** A single feature attached to a subscription plan */
+type PlanFeature = {
+    code: string;
+    name: string;
+    featureType: "boolean" | "numeric";
+    numericValue: number | null;
+    unitLabel: string | null;
+};
+/** Plan type determines how a user subscribes */
+type PlanType = "self_service" | "sales";
 /** Subscription plan available for purchase */
 type SubscriptionPlan = {
     id: string;
@@ -123,8 +138,11 @@ type SubscriptionPlan = {
     interval: "monthly" | "yearly" | "custom";
     intervalCount: number;
     trialDays: number;
-    features: string[];
+    features: PlanFeature[];
     displayOrder: number;
+    creditsAmount: number;
+    planType: PlanType;
+    contactUrl: string | null;
 };
 /** User's current subscription details */
 type UserSubscription = {
@@ -166,4 +184,4 @@ type TransactionsPaginationOptions = {
     offset?: number;
 };
 
-export type { AuthResult as A, BalanceTransaction as B, CheckoutSession as C, DomainEndUserClaims as D, ReauthConfig as R, SubscriptionPlan as S, TokenResponse as T, UserSubscription as U, ReauthSession as a, TransactionsPaginationOptions as b, User as c, UserDetails as d, ReauthServerConfig as e, RequestLike as f, SubscriptionInfo as g, ChargeOptions as h, DepositOptions as i };
+export type { AuthResult as A, BalanceTransaction as B, CheckoutSession as C, DomainEndUserClaims as D, PlanFeature as P, ReauthConfig as R, SubscriptionPlan as S, TokenResponse as T, UserSubscription as U, ReauthSession as a, TransactionsPaginationOptions as b, User as c, UserDetails as d, ReauthServerConfig as e, RequestLike as f, SubscriptionInfo as g, ChargeOptions as h, DepositOptions as i };

package/dist/{types-D8oOYbeC.d.ts → types-BqZzje-y.d.ts}

@@ -5,8 +5,11 @@ type ReauthSession = {
     email: string | null;
     roles: string[] | null;
     waitlist_position: number | null;
+    /** Whether the user has linked their Google account */
+    google_linked: boolean | null;
     error: string | null;
-    error_code: "ACCOUNT_SUSPENDED" | null;
+    /** Error code (e.g., "ACCOUNT_SUSPENDED", "SESSION_VERIFICATION_FAILED") */
+    error_code: string | null;
     /** Subscription information (if billing is configured) */
     subscription?: {
         status: string;
@@ -62,6 +65,8 @@ type DomainEndUserClaims = {
 type ReauthConfig = {
     /** Your verified domain (e.g., "yourdomain.com") */
     domain: string;
+    /** Request timeout in milliseconds. Defaults to 10 seconds if not specified. */
+    timeout?: number;
 };
 /** Configuration for server-side reauth client */
 type ReauthServerConfig = ReauthConfig & {
@@ -112,6 +117,16 @@ type TokenResponse = {
     /** Token type (always "Bearer") */
     tokenType: string;
 };
+/** A single feature attached to a subscription plan */
+type PlanFeature = {
+    code: string;
+    name: string;
+    featureType: "boolean" | "numeric";
+    numericValue: number | null;
+    unitLabel: string | null;
+};
+/** Plan type determines how a user subscribes */
+type PlanType = "self_service" | "sales";
 /** Subscription plan available for purchase */
 type SubscriptionPlan = {
     id: string;
@@ -123,8 +138,11 @@ type SubscriptionPlan = {
     interval: "monthly" | "yearly" | "custom";
     intervalCount: number;
     trialDays: number;
-    features: string[];
+    features: PlanFeature[];
     displayOrder: number;
+    creditsAmount: number;
+    planType: PlanType;
+    contactUrl: string | null;
 };
 /** User's current subscription details */
 type UserSubscription = {
@@ -166,4 +184,4 @@ type TransactionsPaginationOptions = {
     offset?: number;
 };
 
-export type { AuthResult as A, BalanceTransaction as B, CheckoutSession as C, DomainEndUserClaims as D, ReauthConfig as R, SubscriptionPlan as S, TokenResponse as T, UserSubscription as U, ReauthSession as a, TransactionsPaginationOptions as b, User as c, UserDetails as d, ReauthServerConfig as e, RequestLike as f, SubscriptionInfo as g, ChargeOptions as h, DepositOptions as i };
+export type { AuthResult as A, BalanceTransaction as B, CheckoutSession as C, DomainEndUserClaims as D, PlanFeature as P, ReauthConfig as R, SubscriptionPlan as S, TokenResponse as T, UserSubscription as U, ReauthSession as a, TransactionsPaginationOptions as b, User as c, UserDetails as d, ReauthServerConfig as e, RequestLike as f, SubscriptionInfo as g, ChargeOptions as h, DepositOptions as i };

package/dist/webhooks.js

@@ -43,11 +43,15 @@ function parseSignatureHeader(header) {
   let timestamp = "";
   const signatures = [];
   for (const part of parts) {
-    const [key, value] = part.split("=", 2);
+    const [rawKey, rawValue] = part.trim().split("=", 2);
+    const key = rawKey?.trim();
+    const value = rawValue?.trim();
     if (key === "t") {
-      timestamp = value;
+      timestamp = value ?? "";
     } else if (key === "v1") {
-      signatures.push(value);
+      if (value) {
+        signatures.push(value);
+      }
     }
   }
   return { timestamp, signatures };

package/dist/webhooks.mjs

@@ -15,11 +15,15 @@ function parseSignatureHeader(header) {
   let timestamp = "";
   const signatures = [];
   for (const part of parts) {
-    const [key, value] = part.split("=", 2);
+    const [rawKey, rawValue] = part.trim().split("=", 2);
+    const key = rawKey?.trim();
+    const value = rawValue?.trim();
     if (key === "t") {
-      timestamp = value;
+      timestamp = value ?? "";
     } else if (key === "v1") {
-      signatures.push(value);
+      if (value) {
+        signatures.push(value);
+      }
     }
   }
   return { timestamp, signatures };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reauth-dev/sdk",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "TypeScript SDK for reauth.dev authentication",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -38,6 +38,8 @@
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
     "format": "prettier --write src"
   },
@@ -58,7 +60,8 @@
     "prettier": "^3.8.1",
     "react": "^18.0.0",
     "tsup": "^8.0.0",
-    "typescript": "^5.0.0"
+    "typescript": "^5.0.0",
+    "vitest": "^4.0.18"
   },
   "keywords": [
     "auth",