@schibsted/account-sdk-browser 6.0.0-alpha.2 → 6.0.0-alpha.4

package/README.md

@@ -24,11 +24,12 @@ For example if your `pre` domain is pre.sdk-example.com, and it uses id.pre.sdk-
 domain, your local domain should be local.sdk-example.com.
 
 1. Do `npm install --save @schibsted/account-sdk-browser`
-2. Use this library as you would any other npm module: `import { Identity, Monetization } from '@schibsted/account-sdk-browser'`.
+2. Use this library as you would any other npm module: `import { createAccountSdk, getAccountSdk } from '@schibsted/account-sdk-browser'`.
 3. Build your site as you prefer. This library is published as ES modules and uses modern JavaScript
    syntax (including async/await and other ES2017 and WHATWG features). We recommend that you do
    any transpilation yourself for the browser versions you need to cater to. We do not add polyfills.
-4. Initiate the SDK and provide at least `clientId`, `env` and `sessionDomain`.
+4. Initiate the SDK with `createAccountSdk` and provide `clientId`, `redirectUri` and `sessionDomain`.
+   Set `env` if you do not want to use the default `PRE` environment.
 
 If this is for a new site and there is no sessionDomain yet, contact
 [support](mailto:schibstedaccount@schibsted.com) to initiate the process.
@@ -41,8 +42,8 @@ Follow the [migration guide](./MIGRATION.md).
 
 1. Ensure that your site has no site specific terms and conditions in the Schibsted account login flow.
 1. Define rules for when and how often the simplified login prompt should be shown to unique users on your site. How you do this is up to you, but we recommend starting with showing the prompt once per user before potentially increasing this frequency over time.
-1. Set up a function to check if users landing on your domain [is logged in](https://schibsted.github.io/account-sdk-browser/classes/Identity.html#isloggedin) to your site.
-1. If the user is not logged-in to your site, call the [showSimplifiedLoginWidget](https://schibsted.github.io/account-sdk-browser/classes/Identity.html#showsimplifiedloginwidget) function. The `showSimplifiedLoginWidget` accepts the same params as login function (`state` is required, it might be string or async function). If the simplified login prompt is to be loaded, `showSimplifiedLoginWidget` will return `true`.
+1. Set up a function to check if users landing on your domain [are logged in](https://schibsted.github.io/account-sdk-browser/classes/Account.html#isloggedin) to your site.
+1. If the user is not logged-in to your site, call the [showSimplifiedLoginWidget](https://schibsted.github.io/account-sdk-browser/classes/Account.html#showsimplifiedloginwidget) function. The `showSimplifiedLoginWidget` accepts the same params as login function (`state` is required, it might be string or async function). If the simplified login prompt is to be loaded, `showSimplifiedLoginWidget` will return `true`.
 1. Set up a way to store information about which users have been shown the simplified login prompt. How you do this is up to you, but one way is to use localStorage. Use this information to execute on the rules defined in #2.
 
 ## Example project
@@ -65,38 +66,35 @@ This allows you to call Schibsted Account APIs on behalf of that user.
 
 ## Events
 
-The SDK fires events on the instances when something we deem interesting is happening. For example the
-[Identity](https://schibsted.github.io/account-sdk-browser/classes/Identity.html) class
-emits some events when the user is logged in or logged out. This SDK uses a familar interface that's
-very similar to Node's [EventEmitter](https://nodejs.org/api/events.html). The most important
+The SDK fires events on the Account instance when something we deem interesting is happening. For
+example, the Account instance emits events when the user is logged in or logged out. This SDK uses a
+familiar interface that's very similar to Node's [EventEmitter](https://nodejs.org/api/events.html). The most important
 methods are `.on(eventName, listener)` (to subscribe to an event) and `.off(eventName, listener)`
 (to unsubscribe to an event).
 
-The SDK also emits global events on the `window` when a new instance is created.
-Events are emitted for:
+The SDK also emits a global event on the `window` when a new Account instance is created.
 
 | Class        | event name              |
 | ------------ | ----------------------- |
-| Identity     | `schIdentity:ready`     |
-| Monetization | `schMonetization:ready` |
+| Account      | `schAccount:ready`      |
 
 ```js
-window.addEventListener('schIdentity:ready', e => {
+window.addEventListener('schAccount:ready', e => {
     // The event contains the initialized instance (e.detail.instance);
 }
 
 ```
 
-## Identity
+## Account
 
 Let's start with a bit of example code:
 
 #### Example
 
 ```javascript
-import { Identity } from '@schibsted/account-sdk-browser';
+import { createAccountSdk } from '@schibsted/account-sdk-browser';
 
-const identity = new Identity({
+const account = createAccountSdk({
     clientId: '56e9a5d1eee0000000000000',
     redirectUri: 'https://awesomenews.site', // ensure it's listed in selfservice
     env: 'PRE', // Schibsted account env. A url or a special key: 'PRE', 'PRO', 'PRO_NO', 'PRO_FI' or 'PRO_DK'
@@ -105,8 +103,8 @@ const identity = new Identity({
 
 async function whenSiteLoaded() {
     const loginContainer = document.getElementById('login-container');
-    if (await identity.isLoggedIn()) {
-        const user = await identity.getUser();
+    if (await account.isLoggedIn()) {
+        const user = await account.getUser();
         const span = document.createElement('span');
         span.textContent = `Hello ${user.givenName}`;
         loginContainer.appendChild(span);
@@ -116,10 +114,18 @@ async function whenSiteLoaded() {
 }
 
 function userClicksLogIn() {
-    identity.login({ state: 'some-random-string-1234-foobar-wonky-pig' });
+    account.login({ state: 'some-random-string-1234-foobar-wonky-pig' });
 }
 ```
 
+If your code needs the initialized singleton from another module, use `getAccountSdk()`:
+
+```javascript
+import { getAccountSdk } from '@schibsted/account-sdk-browser';
+
+const account = await getAccountSdk();
+```
+
 #### Regarding `state`
 
 This parameter is an OpenID Connect parameter (described in [this paragraph in the
@@ -128,7 +134,7 @@ an opaque string. This means you can send anything that can be serialized to a s
 we have good experience sending something like a JSON value like a base64-url-encoded value — it's
 just an easy way to avoid browsers or backends messing with special characters.
 
-But as a trivial example, if you call `Identity.login(..)` with params
+But as a trivial example, if you call `account.login(..)` with params
 `redirectUri=https://site.com&state=article%3D1234` — then at the end of the authentication flow,
 the user will be sent back to your redirectUri, and the `state` parameter will be forwarded along
 with the auth `code` parameter.
@@ -138,7 +144,7 @@ attacks. For example this can be accomplished by:
 
 1. Your backend generates random token: `1234abcd`, saves it in some tokenCache, and forwards to
    your browser frontend
-1. Your frontend calls `Identity.login` with `state = base64Urlencode({ token: '1234abcd', article:
+1. Your frontend calls `account.login` with `state = base64Urlencode({ token: '1234abcd', article:
 '1234', ... })`
 1. When auth flow completes, the user is redirected back to your site. Then, your backend sees the
    query parameters `code` (which it can exchange for OAuth tokens for the user) and `state`
@@ -159,8 +165,8 @@ mentioning that your end users have a few ways to log in:
 *  Multifactor authentication: first client indicates which methods should be preferred, later these
     will be included (if fulfilled) in `AMR` claim of IDToken
 
-The default is username & password. If you wish to use one of the passwordless login methods, the
-`login()` function takes an optional parameter called `acrValues` (Authentication Context Class Reference).
+The default is username & password. If you wish to use one of the passwordless login methods,
+`account.login()` takes an optional parameter called `acrValues` (Authentication Context Class Reference).
 The `acrValues` parameter with multifactor authentication can take following values:
 
 *  `eid` - authentication using BankID (for DEV and PRE environments you can choose between country specific solution by specifying `eid-no` or `eid-se` instead)
@@ -187,10 +193,10 @@ Schibsted account relies on browser cookies to determine whether a user is recog
 The SDK provides functions that can be used to check if the user that's visiting your site is
 already a Schibsted user or not.
 
-*  [Identity#isLoggedIn](https://schibsted.github.io/account-sdk-browser/classes/Identity.html#isloggedin)
+*  `account.isLoggedIn()`
     tells you if the user that is visiting your site is already logged in to Schibsted account or not.
 
-*  [Identity#isConnected](https://schibsted.github.io/account-sdk-browser/classes/Identity.html#isconnected)
+*  `account.isConnected()`
     tells you if the user is connected to your client. A user might have `isLoggedIn=true` and at the
     same time `isConnected=false` if they have logged in to Schibsted account, but not accepted terms
     and privacy policy for your site.
@@ -202,32 +208,26 @@ will just ask them to accept those terms and redirect them right back to your si
 #### Logging out
 
 If you want to log the user out of Schibsted account, you can call
-[Identity#logout](https://schibsted.github.io/account-sdk-browser/classes/Identity.html#logout). This
+`account.logout()`. This
 will remove the Schibsted account brand session. User will still be logged into Schibsted account.
 
-## Monetization
+## Access Checks
 
 The preferred method for checking whether a user has access to a product/subscription is
-[Monetization#hasAccess](https://schibsted.github.io/account-sdk-browser/classes/Monetization.html#hasaccess).
+`account.hasAccess()`.
 It requires using Session Service, and supports both Schibsted account productId's and Zuora
 feature id's.
 
 #### Example
 
 ```javascript
-import { Monetization } from '@schibsted/account-sdk-browser';
-
-const monetization = new Monetization({
-    clientId: '56e9a5d1eee0000000000000',
-    redirectUri: 'https://awesomenews.site', // ensure it's listed in selfservice
-    sessionDomain: 'https://id.aweseome.site', // client-configured session-service domain
-    env: 'PRE', // Schibsted account env. A url or a special key: 'PRE', 'PRO' or 'PRO_NO'
-});
+import { getAccountSdk } from '@schibsted/account-sdk-browser';
 
 try {
-    // Check if the user has access to a a particular product
-    const userId = await identity.getUserId();
-    const data = await monetization.hasAccess([productId], userId);
+    // Check if the user has access to a particular product
+    const account = await getAccountSdk();
+    const userId = await account.getUserId();
+    const data = await account.hasAccess([productId], userId);
     alert(`User has access to ${productId}? ${data.entitled}`);
 } catch (err) {
     alert(`Could not query if the user has access to ${productId} because ${err}`);

package/dist/account-sdk.d.ts

@@ -0,0 +1,4 @@
+import { Account } from './account.js';
+import { AccountConfig } from './types/account.js';
+export declare function createAccountSdk(config: AccountConfig): Account;
+export declare function getAccountSdk(): Promise<Account>;

package/dist/account.d.ts

@@ -0,0 +1,30 @@
+import { AccountConfig, AccountEventHandler, AccountEventName } from './types/account.js';
+import { LoginOptions, SimplifiedLoginData, SimplifiedLoginWidgetLoginOptions, SimplifiedLoginWidgetOptions } from './types/login.js';
+import { HasAccessResult } from './types/monetization.js';
+import { ConnectedSessionResponse, SessionResponse, SessionUserId } from './types/session.js';
+/**
+ * Unified client-side interface for a configured Schibsted Account integration.
+ */
+export declare class Account {
+    #private;
+    constructor(config: AccountConfig);
+    hasSession(): Promise<SessionResponse>;
+    isLoggedIn(): Promise<boolean>;
+    isConnected(): Promise<boolean>;
+    getUser(): Promise<ConnectedSessionResponse>;
+    getUserId(): Promise<string>;
+    getUserSDRN(): Promise<string>;
+    getUserContextData(): Promise<SimplifiedLoginData | null>;
+    getSpId(): Promise<string | null>;
+    login(options: LoginOptions): Window | null;
+    logout(redirectUri?: string): void;
+    loginUrl(options: LoginOptions): string;
+    accountUrl(redirectUri?: string): string;
+    showSimplifiedLoginWidget(loginParams: SimplifiedLoginWidgetLoginOptions, options?: SimplifiedLoginWidgetOptions): Promise<boolean>;
+    clearCachedUserSession(): void;
+    hasAccess(productIds: string[], userId: SessionUserId): Promise<HasAccessResult | null>;
+    clearCachedAccessResult(productIds: string[], userId: SessionUserId): void;
+    on(event: AccountEventName, callback: AccountEventHandler, ctx?: unknown): this;
+    off(event: AccountEventName, callback?: AccountEventHandler): this;
+}
+export default Account;

package/dist/global-registry.d.ts

@@ -1,7 +1,7 @@
 /**
  * Names of the SDK instance properties that can be registered on the global {@link Window} object.
  */
-type Property = 'schIdentity' | 'schMonetization';
+type Property = 'schAccount' | 'schIdentity' | 'schMonetization';
 /**
  * Registers an SDK instance on the global {@link Window} object's given property and dispatches a ready event.
  *

package/dist/globals.d.ts

@@ -1,7 +1,9 @@
+import { Account } from './account.js';
 import { Identity } from './identity.js';
 import { Monetization } from './monetization.js';
 declare global {
     interface Window {
+        schAccount?: Account;
         schIdentity?: Identity;
         schMonetization?: Monetization;
         SPiD?: {

package/dist/has-access-response.d.ts

@@ -0,0 +1,2 @@
+import { HasAccessResult } from './types/monetization.js';
+export declare function parseHasAccessResult(value: unknown): HasAccessResult;

package/dist/identity.d.ts

@@ -1,204 +1,44 @@
 import { TinyEmitter } from 'tiny-emitter';
-import { default as RESTClient } from './RESTClient.js';
-import { default as SDKError } from './SDKError.js';
-/**
- * Options accepted by {@link Identity#login} and related login URL helpers.
- */
-export type LoginOptions = {
-    /**
-     * An opaque value used by the client to maintain state between the request and callback.
-     * It's also recommended to prevent CSRF {@link https://tools.ietf.org/html/rfc6749#section-10.12}
-     */
-    state: string;
-    /**
-     * Authentication Context Class Reference Values. If omitted, the user will be asked to
-     * authenticate using username+password. For 2FA (Two-Factor Authentication) possible values
-     * are `sms`, `otp` (one time password), `password` (will force password confirmation, even if
-     * user is already logged in), `eid`. Those values might be mixed as space-separated string.
-     * To make sure that user has authenticated with 2FA you need to verify AMR (Authentication
-     * Methods References) claim in ID token. Might also be used to ensure additional acr
-     * (sms, otp, eid) for already logged in users. Supported value is also 'otp-email' means one
-     * time password using email.
-     */
-    acrValues?: string;
-    /**
-     * The OAuth scopes for the tokens. This is a list of scopes, separated by space. If the list
-     * of scopes contains `openid`, the generated tokens includes the id token which can be useful
-     * for getting information about the user. Omitting scope is allowed, while `invalid_scope` is
-     * returned when the client asks for a scope you aren't allowed to request.
-     * {@link https://tools.ietf.org/html/rfc6749#section-3.3}
-     * Defaults to `openid`.
-     */
-    scope?: string;
-    /**
-     * Redirect uri that will receive the code. Must exactly match a redirectUri from your client
-     * in self-service
-     */
-    redirectUri?: string;
-    /** Should we try to open a popup window? Defaults to `false`. */
-    preferPopup?: boolean;
-    /** user email or UUID hint */
-    loginHint?: string;
-    /** Pulse tag */
-    tag?: string;
-    /** Teaser slug. Teaser with given slug will be displayed in place of default teaser */
-    teaser?: string;
-    /**
-     * Specifies the allowable elapsed time in seconds since the last time the End-User was actively
-     * authenticated. If last authentication time is more than maxAge seconds in the past,
-     * re-authentication will be required. See the OpenID Connect spec section 3.1.2.1 for more
-     * information
-     */
-    maxAge?: number | string;
-    /**
-     * Optional parameter to overwrite client locale setting.
-     * New flows supports nb_NO, fi_FI, sv_SE, en_US
-     */
-    locale?: string;
-    /** display username and password on one screen. Defaults to `false`. */
-    oneStepLogin?: boolean;
-    /**
-     * String that specifies whether the Authorization Server prompts the End-User for
-     * reauthentication or confirm account screen. Supported values: `select_account` or `login`.
-     * Defaults to `select_account`.
-     */
-    prompt?: string;
-    /** Identifier for cross-domain tracking in Pulse */
-    xDomainId?: string;
-    /** Environment for cross-domain tracking in Pulse */
-    xEnvironmentId?: string;
-    /** Campaign identifier for tracking in Pulse */
-    originCampaign?: string;
-};
-/**
- * Identical to {@link LoginOptions} except that `state` may also be a (possibly async) function;
- * all other fields reuse the `LoginOptions` documentation.
- */
-export type SimplifiedLoginWidgetLoginOptions = Omit<LoginOptions, 'state'> & {
-    /**
-     * An opaque value used by the client to maintain state between the request and callback.
-     * It's also recommended to prevent CSRF {@link https://tools.ietf.org/html/rfc6749#section-10.12}
-     */
-    state: string | (() => string | Promise<string>);
-};
-/**
- * Successful response returned from {@link Identity#hasSession}.
- */
-export type HasSessionSuccessResponse = {
-    /**
-     * Is the user connected to the merchant? (it means that the merchant id is in the list of
-     * merchants listed of this user in the database)? Example: false
-     */
-    result: boolean;
-    /** Example: 'notConnected' or 'connected'. Deprecated, use `Identity.isConnected()` */
-    userStatus: string;
-    /** Example: 'localhost' */
-    baseDomain: string;
-    /** Example: '58eca10fdbb9f6df72c3368f'. Obsolete */
-    id: string;
-    /** Example: 37162 */
-    userId: number;
-    /** Example: 'b3b23aa7-34f2-5d02-a10e-5a3455c6ab2c' */
-    uuid: string;
-    /** Example: 'eyJjbGllbnRfaWQ...' */
-    sp_id: string;
-    /** Example: 30 * 60 * 1000 (for 30 minutes) */
-    expiresIn: number;
-    /** Example: 1506285759 */
-    serverTime: number;
-    /**
-     * Example: 'NCdzXaz4ZRb7...' The sig parameter is a concatenation of an HMAC SHA-256 signature
-     * string, a dot (.) and a base64url encoded JSON object (session).
-     * {@link http://techdocs.spid.no/sdks/js/response-signature-and-validation/}
-     */
-    sig: string;
-    /** (Only for connected users) Example: 'batman' */
-    displayName: string;
-    /** (Only for connected users) Example: 'Bruce' */
-    givenName: string;
-    /** (Only for connected users) Example: 'Wayne' */
-    familyName: string;
-    /** (Only for connected users) Example: 'male', 'female', 'undisclosed' */
-    gender: string;
-    /** (Only for connected users) Example: 'http://www.srv.com/some/picture.jpg' */
-    photo: string;
-    /** (Only for connected users) */
-    tracking: boolean;
-    /** (Only for connected users) */
-    clientAgreementAccepted: boolean;
-    /** (Only for connected users) */
-    defaultAgreementAccepted: boolean;
-    pairId: string;
-    sdrn: string;
-};
-/**
- * Failure response returned from {@link Identity#hasSession}.
- */
-export type HasSessionFailureResponse = {
-    error: {
-        /** Typically an HTTP response code. Example: 401 */
-        code: number;
-        /** Example: "No session found!" */
-        description: string;
-        /** Example: "UserException" */
-        type: string;
-    };
-    response: {
-        /** Example: "localhost" */
-        baseDomain: string;
-        /** Time span in milliseconds. Example: 30 * 60 * 1000 (for 30 minutes) */
-        expiresIn: number;
-        result: boolean;
-        /** Server time in seconds since the Unix Epoch. Example: 1506287788 */
-        serverTime: number;
-    };
-};
-/**
- * Minimal user information used by the simplified login widget flow.
- */
-export type SimplifiedLoginData = {
-    /** Deprecated: User UUID, to be be used as `loginHint` for {@link Identity#login} */
-    identifier: string;
-    /** Human-readable user identifier */
-    display_text: string;
-    /** Client name */
-    client_name: string;
-};
-/**
- * Configuration options for {@link Identity#showSimplifiedLoginWidget}.
- */
-export type SimplifiedLoginWidgetOptions = {
-    /** expected encoding of simplified login widget. Could be utf-8 (default), iso-8859-1 or iso-8859-15 */
-    encoding: string;
-    /**
-     * expected locale of simplified login widget. Should be provided in a short format like 'nb',
-     * 'sv'. If not set, a value from the env variable is used.
-     */
-    locale?: 'nb' | 'sv' | 'fi' | 'da' | 'en';
-};
+import { default as Cache } from './cache.js';
+import { default as RESTClient } from './rest-client.js';
+import { LogFunction } from './types/common.js';
+import { IdentityBeforeRedirectCallback, IdentityOptions, VarnishCookieOptions } from './types/identity.js';
+import { LoginOptions, OpenSimplifiedLoginWidget, SimplifiedLoginData, SimplifiedLoginWidgetLoginOptions, SimplifiedLoginWidgetOptions } from './types/login.js';
+import { ConnectedSessionResponse, SessionObjectResponse, SessionResponse } from './types/session.js';
+export { isConnectedSessionResponse, isSessionSuccessResponse } from './session-response.js';
+export type { ConnectedSessionResponse, SessionFailureResponse, SessionObjectResponse, SessionResponse, SessionSuccessResponse, SessionUserId, } from './types/session.js';
+declare global {
+    interface Window {
+        openSimplifiedLoginWidget?: OpenSimplifiedLoginWidget;
+    }
+}
 /**
  * Provides Identity functionalty to a web page
  */
 export declare class Identity extends TinyEmitter {
     _sessionInitiatedSent: boolean;
-    window: any;
+    window: Window;
     clientId: string;
-    sessionStorageCache: any;
-    localStorageCache: any;
+    sessionStorageCache: Cache;
+    localStorageCache: Cache;
     redirectUri: string;
     env: string;
-    log?: Function;
-    callbackBeforeRedirect: Function;
+    log?: LogFunction;
+    callbackBeforeRedirect: IdentityBeforeRedirectCallback;
     _sessionDomain: string;
     _enableSessionCaching: boolean;
-    _session: any;
+    /**
+     * @internal Starts as `{}` before the first `hasSession()` call, then stores the latest
+     * object response from hasSession().
+     */
+    _session: SessionObjectResponse;
     _spid: RESTClient;
     _oauthService: RESTClient;
     _bffService: RESTClient;
     _sessionService: RESTClient;
     _globalSessionService: RESTClient;
-    _usedSessionServiceGetSessionEndpoint: any;
-    _hasSessionInProgress?: boolean | Promise<any>;
+    _usedSessionServiceGetSessionEndpoint: 'v2/session' | 'session';
+    _hasSessionInProgress?: false | Promise<SessionResponse>;
     popup?: Window | null;
     setVarnishCookie?: boolean;
     varnishExpiresIn?: number;
@@ -215,15 +55,7 @@ export declare class Identity extends TinyEmitter {
      * @param options.callbackBeforeRedirect - callback triggered before session refresh redirect happen
      * @throws {SDKError} - If any of options are invalid
      */
-    constructor({ clientId, redirectUri, sessionDomain, env, log, window, callbackBeforeRedirect, }: {
-        clientId: string;
-        sessionDomain: string;
-        redirectUri: string;
-        env?: string;
-        log?: Function;
-        window?: Window;
-        callbackBeforeRedirect?: Function;
-    });
+    constructor({ clientId, redirectUri, sessionDomain, env, log, window, callbackBeforeRedirect, }: IdentityOptions);
     /**
      * Read tabId from session storage
      * @private
@@ -234,7 +66,7 @@ export declare class Identity extends TinyEmitter {
      * @private
      *
      */
-    _isSessionCallBlocked(): boolean | void;
+    _isSessionCallBlocked(): boolean;
     /**
      * Block calls to get session
      * @private
@@ -248,42 +80,12 @@ export declare class Identity extends TinyEmitter {
      */
     _unblockSessionCall(): void;
     /**
-     * Set SPiD server URL
-     * @private
-     * @param url - real URL or 'PRE' style key
-     */
-    _setSpidServerUrl(url: string): void;
-    /**
-     * Set OAuth server URL
-     * @private
-     * @param url - real URL or 'PRE' style key
-     */
-    _setOauthServerUrl(url: string): void;
-    /**
-     * Set BFF server URL
-     * @private
-     * @param url  - real URL or 'PRE' style key
-     */
-    _setBffServerUrl(url: string): void;
-    /**
-     * Set site-specific session-service domain
-     * @private
-     * @param domain - real URL — (**not** 'PRE' style env key)
-     */
-    _setSessionServiceUrl(domain: string): void;
-    /**
-     * Set global session-service server URL
-     * @private
-     * @param url - real URL or 'PRE' style key
-     */
-    _setGlobalSessionServiceUrl(url: string): void;
-    /**
-     * Emits the relevant events based on the previous and new reply from hassession
+     * Emits the relevant events based on the previous and new reply from hasSession
      * @private
      * @param previous
      * @param current
      */
-    _emitSessionEvent(previous: any, current: any): void;
+    _emitSessionEvent(previous: object, current: object): void;
     /**
      * Close this.popup if it exists and is open
      * @private
@@ -297,16 +99,13 @@ export declare class Identity extends TinyEmitter {
      * cookie expires. The default is to use the same time that hasSession responses are cached for
      * @param options.domain Override cookie domain. E.g. «vg.no» instead of «www.vg.no»
      */
-    enableVarnishCookie(options?: {
-        expiresIn?: number;
-        domain?: string;
-    }): void;
+    enableVarnishCookie(options: VarnishCookieOptions): void;
     /**
      * Set the Varnish cookie if configured
      * @private
      * @param sessionData
      */
-    _maybeSetVarnishCookie(sessionData: HasSessionSuccessResponse): void;
+    _maybeSetVarnishCookie(sessionData: object): void;
     /**
      * Clear the Varnish cookie if configured
      * @private
@@ -337,7 +136,7 @@ export declare class Identity extends TinyEmitter {
      * @fires Identity#statusChange
      * @fires Identity#error
      */
-    hasSession(): Promise<HasSessionSuccessResponse | HasSessionFailureResponse>;
+    hasSession(): Promise<SessionResponse>;
     /**
      * @summary Allows the client app to check if the user is logged in to Schibsted account
      * @remarks This function calls {@link Identity#hasSession} internally and thus has the side
@@ -364,7 +163,7 @@ export declare class Identity extends TinyEmitter {
      * @throws {SDKError} If the user isn't connected to the merchant
      * @throws {SDKError} If we couldn't get the user
      */
-    getUser(): Promise<HasSessionSuccessResponse>;
+    getUser(): Promise<ConnectedSessionResponse>;
     /**
      * @summary
      * In Schibsted account, there are multiple ways of identifying a user; the `userId`,
@@ -489,7 +288,7 @@ export declare class Identity extends TinyEmitter {
      * @param options.originCampaign
      * @return - The url
      */
-    loginUrl({ state, acrValues, scope, redirectUri, loginHint, tag, teaser, maxAge, locale, oneStepLogin, prompt, xDomainId, xEnvironmentId, originCampaign, }: LoginOptions, ..._args: any[]): string;
+    loginUrl({ state, acrValues, scope, redirectUri, loginHint, tag, teaser, maxAge, locale, oneStepLogin, prompt, xDomainId, xEnvironmentId, originCampaign, }: LoginOptions): string;
     /**
      * The url for logging the user out
      * @param redirectUri
@@ -516,8 +315,9 @@ export declare class Identity extends TinyEmitter {
      * @param options - additional configuration of Simplified Login Widget
      * @fires Identity#simplifiedLoginOpened
      * @fires Identity#simplifiedLoginCancelled
-     * @return - will resolve to true if widget will be display. Otherwise, will throw SDKError
+     * @throws {SDKError} - If user context data is missing or the widget script cannot be loaded
+     * @return - will resolve to true if widget will be displayed
      */
-    showSimplifiedLoginWidget(loginParams: SimplifiedLoginWidgetLoginOptions, options?: SimplifiedLoginWidgetOptions): Promise<boolean | SDKError>;
+    showSimplifiedLoginWidget(loginParams: SimplifiedLoginWidgetLoginOptions, options?: SimplifiedLoginWidgetOptions): Promise<boolean>;
 }
 export default Identity;

package/dist/index.d.ts

@@ -1,3 +1,8 @@
-export * from './identity.js';
-export * from './monetization.js';
-export { default as SDKError } from './SDKError.js';
+export { Account } from './account.js';
+export { createAccountSdk, getAccountSdk } from './account-sdk.js';
+export { default as SDKError } from './sdk-error.js';
+export type { AccountConfig, AccountEventHandler, AccountEventName, AccountSessionEventName, } from './types/account.js';
+export type { AccountEnvironment, LogFunction } from './types/common.js';
+export type { LoginOptions, SimplifiedLoginData, SimplifiedLoginWidgetLoginOptions, SimplifiedLoginWidgetOptions, } from './types/login.js';
+export type { HasAccessResult } from './types/monetization.js';
+export type { ConnectedSessionResponse, ConnectedSessionWithUserIdResponse, RedirectSessionResponse, SessionFailureResponse, SessionResponse, SessionSuccessResponse, SessionUserId, } from './types/session.js';