@sendoracloud/sdk-react-native 0.8.0 → 0.10.0

package/dist/index.cjs

@@ -355,6 +355,59 @@ var Auth = class {
       return parsed.data.user;
     });
   }
+  /**
+   * Verify an IdP-issued credential (authorization code OR id_token)
+   * and mint a Sendora session. Customer's app handles the IdP
+   * dance — typically via expo-auth-session / react-native-app-auth
+   * — then hands the result here. See web SDK for full provider
+   * matrix; mirrors that surface 1:1.
+   */
+  loginSocial(input) {
+    return this.serialize(async () => {
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const res = await post(
+        { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+        "/api/v1/auth-service/login/social",
+        input
+      );
+      if (!res) throw new AuthError("NETWORK_ERROR", "Network request failed");
+      let parsed;
+      try {
+        parsed = await res.json();
+      } catch {
+        throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+      }
+      if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        throw new AuthError(
+          parsed.error?.code ?? "SOCIAL_LOGIN_FAILED",
+          parsed.error?.message ?? "Social login failed"
+        );
+      }
+      this.persist(parsed.data);
+      return parsed.data.user;
+    });
+  }
+  signInWithGoogle(code, redirectUri) {
+    return this.loginSocial({ provider: "google", code, redirectUri });
+  }
+  signInWithGitHub(code, redirectUri) {
+    return this.loginSocial({ provider: "github", code, redirectUri });
+  }
+  signInWithApple(input) {
+    return this.loginSocial({ provider: "apple", ...input });
+  }
+  signInWithMicrosoft(code, redirectUri) {
+    return this.loginSocial({ provider: "microsoft", code, redirectUri });
+  }
+  signInWithLinkedIn(code, redirectUri) {
+    return this.loginSocial({ provider: "linkedin", code, redirectUri });
+  }
+  signInWithFacebook(code, redirectUri) {
+    return this.loginSocial({ provider: "facebook", code, redirectUri });
+  }
+  signInWithDiscord(code, redirectUri) {
+    return this.loginSocial({ provider: "discord", code, redirectUri });
+  }
   /**
    * Exchange the MFA challenge token from `signIn` for a real session
    * by submitting a TOTP or recovery code from the user's authenticator.
@@ -391,6 +444,77 @@ var Auth = class {
     });
   }
   // ============================================================
+  // EMAIL OTP (6-digit cross-device code)
+  // ============================================================
+  async sendEmailOtp(email) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email-otp/request",
+      { email }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("EMAIL_OTP_REQUEST_FAILED", "Failed to send code");
+    }
+  }
+  verifyEmailOtp(email, code) {
+    return this.serialize(async () => {
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const data = await this.callAuth("/api/v1/auth-service/email-otp/verify", { email, code });
+      this.persist(data);
+      return data.user;
+    });
+  }
+  // ============================================================
+  // PASSWORD RESET + EMAIL VERIFICATION
+  // ============================================================
+  /** Trigger password-reset email. Resolves on 204 even when address is unknown (anti-enumeration). */
+  async requestPasswordReset(email) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/password/forgot",
+      { email }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("PASSWORD_RESET_REQUEST_FAILED", "Failed to send reset email");
+    }
+  }
+  /** Pair the reset-email token with the new password to complete the reset. */
+  async resetPassword(token, newPassword) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/password/reset",
+      { token, newPassword }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("PASSWORD_RESET_FAILED", "Reset failed");
+    }
+  }
+  /** Verify the email-address token from the link Sendora sent on signup. */
+  async verifyEmail(token) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email/verify",
+      { token }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("EMAIL_VERIFICATION_FAILED", "Verification failed");
+    }
+  }
+  /** Re-send the email-verification email for the currently-signed-in user. */
+  async sendVerificationEmail() {
+    const headers = this.bearerHeaders();
+    if (!headers) throw new AuthError("UNAUTHORIZED", "Sign in before requesting a verification email");
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email/verify/resend",
+      {},
+      headers
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("VERIFICATION_RESEND_FAILED", "Failed to send verification email");
+    }
+  }
+  // ============================================================
   // TOTP MFA — enrollment management (Bearer-authenticated)
   // ============================================================
   async enrollMfa() {
@@ -643,7 +767,7 @@ function decodeJwtPayload(token) {
 }
 
 // src/index.ts
-var SDK_VERSION = "0.4.0";
+var SDK_VERSION = "0.10.0";
 var DEFAULT_API_URL = "https://api.sendoracloud.com";
 var ANON_KEY = "anon_id";
 var USER_ID_KEY = "user_id";
@@ -692,7 +816,7 @@ var SendoraSDK = class {
   }
   /** Initialize the SDK. Must be awaited at app startup before identify/track. */
   async init(config) {
-    const rawKey = String(config.publicKey ?? "").trim();
+    const rawKey = String(config.apiKey ?? config.publicKey ?? "").trim();
     if (/^sk_/i.test(rawKey) || /sk_(prod|staging|dev|live|test)_/i.test(rawKey)) {
       throw new Error(
         "[sendoracloud] Secret key (sk_*) detected. The client SDK must only receive public keys (pk_*). Secret keys belong on your server."
@@ -737,6 +861,10 @@ var SendoraSDK = class {
       environment: "prod",
       consentedByDefault: true,
       ...config,
+      // Store rawKey on BOTH fields so any downstream reader that
+      // grabbed the legacy `publicKey` field keeps working, and
+      // future code reading `apiKey` does too.
+      apiKey: rawKey,
       publicKey: rawKey
     };
     this.auth = new Auth({

package/dist/index.d.cts

@@ -137,6 +137,39 @@ declare class Auth {
         mfaChallengeToken: string;
         userId: string;
     }>;
+    /**
+     * Verify an IdP-issued credential (authorization code OR id_token)
+     * and mint a Sendora session. Customer's app handles the IdP
+     * dance — typically via expo-auth-session / react-native-app-auth
+     * — then hands the result here. See web SDK for full provider
+     * matrix; mirrors that surface 1:1.
+     */
+    loginSocial(input: {
+        provider: "google" | "github" | "apple" | "microsoft" | "linkedin" | "facebook" | "twitter" | "discord";
+        code?: string;
+        idToken?: string;
+        redirectUri?: string;
+        codeVerifier?: string;
+        appleName?: {
+            firstName?: string;
+            lastName?: string;
+        };
+    }): Promise<AuthUser>;
+    signInWithGoogle(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithGitHub(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithApple(input: {
+        idToken?: string;
+        code?: string;
+        redirectUri?: string;
+        appleName?: {
+            firstName?: string;
+            lastName?: string;
+        };
+    }): Promise<AuthUser>;
+    signInWithMicrosoft(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithLinkedIn(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithFacebook(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithDiscord(code: string, redirectUri: string): Promise<AuthUser>;
     /**
      * Exchange the MFA challenge token from `signIn` for a real session
      * by submitting a TOTP or recovery code from the user's authenticator.
@@ -144,6 +177,16 @@ declare class Auth {
     challengeMfa(mfaChallengeToken: string, code: string): Promise<AuthUser>;
     sendMagicLink(email: string): Promise<void>;
     verifyMagicLink(token: string): Promise<AuthUser>;
+    sendEmailOtp(email: string): Promise<void>;
+    verifyEmailOtp(email: string, code: string): Promise<AuthUser>;
+    /** Trigger password-reset email. Resolves on 204 even when address is unknown (anti-enumeration). */
+    requestPasswordReset(email: string): Promise<void>;
+    /** Pair the reset-email token with the new password to complete the reset. */
+    resetPassword(token: string, newPassword: string): Promise<void>;
+    /** Verify the email-address token from the link Sendora sent on signup. */
+    verifyEmail(token: string): Promise<void>;
+    /** Re-send the email-verification email for the currently-signed-in user. */
+    sendVerificationEmail(): Promise<void>;
     enrollMfa(): Promise<{
         secret: string;
         otpauthUrl: string;
@@ -198,9 +241,23 @@ declare class Auth {
 }
 
 interface SendoraConfig {
-    /** Public API key (pk_live_... or pk_test_...). Secret keys are refused. */
-    publicKey: string;
-    /** Org UUID — defaults to the key's bound org, but can be overridden for test harnesses. */
+    /**
+     * Public API key (`pk_live_…` or `pk_test_…`). Secret keys are refused.
+     * Canonical name as of 0.10.0 — pre-0.10.0 callers using `publicKey`
+     * still work via the deprecated alias below.
+     */
+    apiKey?: string;
+    /**
+     * @deprecated Use `apiKey` instead (0.10.0+ canonical name across
+     * sdk-web / sdk-ios / sdk-android). Kept for back-compat — when
+     * both are set, `apiKey` wins.
+     */
+    publicKey?: string;
+    /**
+     * @deprecated 0.10.0 — backend now derives org from the API key
+     * row server-side. Kept for test harnesses that need to override
+     * the bound org explicitly.
+     */
     orgId?: string;
     /** Backend base URL. Defaults to Sendora's production API. */
     apiUrl?: string;

package/dist/index.d.ts

@@ -137,6 +137,39 @@ declare class Auth {
         mfaChallengeToken: string;
         userId: string;
     }>;
+    /**
+     * Verify an IdP-issued credential (authorization code OR id_token)
+     * and mint a Sendora session. Customer's app handles the IdP
+     * dance — typically via expo-auth-session / react-native-app-auth
+     * — then hands the result here. See web SDK for full provider
+     * matrix; mirrors that surface 1:1.
+     */
+    loginSocial(input: {
+        provider: "google" | "github" | "apple" | "microsoft" | "linkedin" | "facebook" | "twitter" | "discord";
+        code?: string;
+        idToken?: string;
+        redirectUri?: string;
+        codeVerifier?: string;
+        appleName?: {
+            firstName?: string;
+            lastName?: string;
+        };
+    }): Promise<AuthUser>;
+    signInWithGoogle(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithGitHub(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithApple(input: {
+        idToken?: string;
+        code?: string;
+        redirectUri?: string;
+        appleName?: {
+            firstName?: string;
+            lastName?: string;
+        };
+    }): Promise<AuthUser>;
+    signInWithMicrosoft(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithLinkedIn(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithFacebook(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithDiscord(code: string, redirectUri: string): Promise<AuthUser>;
     /**
      * Exchange the MFA challenge token from `signIn` for a real session
      * by submitting a TOTP or recovery code from the user's authenticator.
@@ -144,6 +177,16 @@ declare class Auth {
     challengeMfa(mfaChallengeToken: string, code: string): Promise<AuthUser>;
     sendMagicLink(email: string): Promise<void>;
     verifyMagicLink(token: string): Promise<AuthUser>;
+    sendEmailOtp(email: string): Promise<void>;
+    verifyEmailOtp(email: string, code: string): Promise<AuthUser>;
+    /** Trigger password-reset email. Resolves on 204 even when address is unknown (anti-enumeration). */
+    requestPasswordReset(email: string): Promise<void>;
+    /** Pair the reset-email token with the new password to complete the reset. */
+    resetPassword(token: string, newPassword: string): Promise<void>;
+    /** Verify the email-address token from the link Sendora sent on signup. */
+    verifyEmail(token: string): Promise<void>;
+    /** Re-send the email-verification email for the currently-signed-in user. */
+    sendVerificationEmail(): Promise<void>;
     enrollMfa(): Promise<{
         secret: string;
         otpauthUrl: string;
@@ -198,9 +241,23 @@ declare class Auth {
 }
 
 interface SendoraConfig {
-    /** Public API key (pk_live_... or pk_test_...). Secret keys are refused. */
-    publicKey: string;
-    /** Org UUID — defaults to the key's bound org, but can be overridden for test harnesses. */
+    /**
+     * Public API key (`pk_live_…` or `pk_test_…`). Secret keys are refused.
+     * Canonical name as of 0.10.0 — pre-0.10.0 callers using `publicKey`
+     * still work via the deprecated alias below.
+     */
+    apiKey?: string;
+    /**
+     * @deprecated Use `apiKey` instead (0.10.0+ canonical name across
+     * sdk-web / sdk-ios / sdk-android). Kept for back-compat — when
+     * both are set, `apiKey` wins.
+     */
+    publicKey?: string;
+    /**
+     * @deprecated 0.10.0 — backend now derives org from the API key
+     * row server-side. Kept for test harnesses that need to override
+     * the bound org explicitly.
+     */
     orgId?: string;
     /** Backend base URL. Defaults to Sendora's production API. */
     apiUrl?: string;

package/dist/index.js

@@ -315,6 +315,59 @@ var Auth = class {
       return parsed.data.user;
     });
   }
+  /**
+   * Verify an IdP-issued credential (authorization code OR id_token)
+   * and mint a Sendora session. Customer's app handles the IdP
+   * dance — typically via expo-auth-session / react-native-app-auth
+   * — then hands the result here. See web SDK for full provider
+   * matrix; mirrors that surface 1:1.
+   */
+  loginSocial(input) {
+    return this.serialize(async () => {
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const res = await post(
+        { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+        "/api/v1/auth-service/login/social",
+        input
+      );
+      if (!res) throw new AuthError("NETWORK_ERROR", "Network request failed");
+      let parsed;
+      try {
+        parsed = await res.json();
+      } catch {
+        throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+      }
+      if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        throw new AuthError(
+          parsed.error?.code ?? "SOCIAL_LOGIN_FAILED",
+          parsed.error?.message ?? "Social login failed"
+        );
+      }
+      this.persist(parsed.data);
+      return parsed.data.user;
+    });
+  }
+  signInWithGoogle(code, redirectUri) {
+    return this.loginSocial({ provider: "google", code, redirectUri });
+  }
+  signInWithGitHub(code, redirectUri) {
+    return this.loginSocial({ provider: "github", code, redirectUri });
+  }
+  signInWithApple(input) {
+    return this.loginSocial({ provider: "apple", ...input });
+  }
+  signInWithMicrosoft(code, redirectUri) {
+    return this.loginSocial({ provider: "microsoft", code, redirectUri });
+  }
+  signInWithLinkedIn(code, redirectUri) {
+    return this.loginSocial({ provider: "linkedin", code, redirectUri });
+  }
+  signInWithFacebook(code, redirectUri) {
+    return this.loginSocial({ provider: "facebook", code, redirectUri });
+  }
+  signInWithDiscord(code, redirectUri) {
+    return this.loginSocial({ provider: "discord", code, redirectUri });
+  }
   /**
    * Exchange the MFA challenge token from `signIn` for a real session
    * by submitting a TOTP or recovery code from the user's authenticator.
@@ -351,6 +404,77 @@ var Auth = class {
     });
   }
   // ============================================================
+  // EMAIL OTP (6-digit cross-device code)
+  // ============================================================
+  async sendEmailOtp(email) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email-otp/request",
+      { email }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("EMAIL_OTP_REQUEST_FAILED", "Failed to send code");
+    }
+  }
+  verifyEmailOtp(email, code) {
+    return this.serialize(async () => {
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const data = await this.callAuth("/api/v1/auth-service/email-otp/verify", { email, code });
+      this.persist(data);
+      return data.user;
+    });
+  }
+  // ============================================================
+  // PASSWORD RESET + EMAIL VERIFICATION
+  // ============================================================
+  /** Trigger password-reset email. Resolves on 204 even when address is unknown (anti-enumeration). */
+  async requestPasswordReset(email) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/password/forgot",
+      { email }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("PASSWORD_RESET_REQUEST_FAILED", "Failed to send reset email");
+    }
+  }
+  /** Pair the reset-email token with the new password to complete the reset. */
+  async resetPassword(token, newPassword) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/password/reset",
+      { token, newPassword }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("PASSWORD_RESET_FAILED", "Reset failed");
+    }
+  }
+  /** Verify the email-address token from the link Sendora sent on signup. */
+  async verifyEmail(token) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email/verify",
+      { token }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("EMAIL_VERIFICATION_FAILED", "Verification failed");
+    }
+  }
+  /** Re-send the email-verification email for the currently-signed-in user. */
+  async sendVerificationEmail() {
+    const headers = this.bearerHeaders();
+    if (!headers) throw new AuthError("UNAUTHORIZED", "Sign in before requesting a verification email");
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email/verify/resend",
+      {},
+      headers
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("VERIFICATION_RESEND_FAILED", "Failed to send verification email");
+    }
+  }
+  // ============================================================
   // TOTP MFA — enrollment management (Bearer-authenticated)
   // ============================================================
   async enrollMfa() {
@@ -603,7 +727,7 @@ function decodeJwtPayload(token) {
 }
 
 // src/index.ts
-var SDK_VERSION = "0.4.0";
+var SDK_VERSION = "0.10.0";
 var DEFAULT_API_URL = "https://api.sendoracloud.com";
 var ANON_KEY = "anon_id";
 var USER_ID_KEY = "user_id";
@@ -652,7 +776,7 @@ var SendoraSDK = class {
   }
   /** Initialize the SDK. Must be awaited at app startup before identify/track. */
   async init(config) {
-    const rawKey = String(config.publicKey ?? "").trim();
+    const rawKey = String(config.apiKey ?? config.publicKey ?? "").trim();
     if (/^sk_/i.test(rawKey) || /sk_(prod|staging|dev|live|test)_/i.test(rawKey)) {
       throw new Error(
         "[sendoracloud] Secret key (sk_*) detected. The client SDK must only receive public keys (pk_*). Secret keys belong on your server."
@@ -697,6 +821,10 @@ var SendoraSDK = class {
       environment: "prod",
       consentedByDefault: true,
       ...config,
+      // Store rawKey on BOTH fields so any downstream reader that
+      // grabbed the legacy `publicKey` field keeps working, and
+      // future code reading `apiKey` does too.
+      apiKey: rawKey,
       publicKey: rawKey
     };
     this.auth = new Auth({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth. Expo Go compatible, no native modules beyond AsyncStorage.",
   "type": "module",
   "main": "./dist/index.cjs",