@sendoracloud/sdk-react-native 0.8.0 → 0.9.0

package/dist/index.cjs

@@ -355,6 +355,59 @@ var Auth = class {
       return parsed.data.user;
     });
   }
+  /**
+   * Verify an IdP-issued credential (authorization code OR id_token)
+   * and mint a Sendora session. Customer's app handles the IdP
+   * dance — typically via expo-auth-session / react-native-app-auth
+   * — then hands the result here. See web SDK for full provider
+   * matrix; mirrors that surface 1:1.
+   */
+  loginSocial(input) {
+    return this.serialize(async () => {
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const res = await post(
+        { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+        "/api/v1/auth-service/login/social",
+        input
+      );
+      if (!res) throw new AuthError("NETWORK_ERROR", "Network request failed");
+      let parsed;
+      try {
+        parsed = await res.json();
+      } catch {
+        throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+      }
+      if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        throw new AuthError(
+          parsed.error?.code ?? "SOCIAL_LOGIN_FAILED",
+          parsed.error?.message ?? "Social login failed"
+        );
+      }
+      this.persist(parsed.data);
+      return parsed.data.user;
+    });
+  }
+  signInWithGoogle(code, redirectUri) {
+    return this.loginSocial({ provider: "google", code, redirectUri });
+  }
+  signInWithGitHub(code, redirectUri) {
+    return this.loginSocial({ provider: "github", code, redirectUri });
+  }
+  signInWithApple(input) {
+    return this.loginSocial({ provider: "apple", ...input });
+  }
+  signInWithMicrosoft(code, redirectUri) {
+    return this.loginSocial({ provider: "microsoft", code, redirectUri });
+  }
+  signInWithLinkedIn(code, redirectUri) {
+    return this.loginSocial({ provider: "linkedin", code, redirectUri });
+  }
+  signInWithFacebook(code, redirectUri) {
+    return this.loginSocial({ provider: "facebook", code, redirectUri });
+  }
+  signInWithDiscord(code, redirectUri) {
+    return this.loginSocial({ provider: "discord", code, redirectUri });
+  }
   /**
    * Exchange the MFA challenge token from `signIn` for a real session
    * by submitting a TOTP or recovery code from the user's authenticator.
@@ -391,6 +444,77 @@ var Auth = class {
     });
   }
   // ============================================================
+  // EMAIL OTP (6-digit cross-device code)
+  // ============================================================
+  async sendEmailOtp(email) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email-otp/request",
+      { email }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("EMAIL_OTP_REQUEST_FAILED", "Failed to send code");
+    }
+  }
+  verifyEmailOtp(email, code) {
+    return this.serialize(async () => {
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const data = await this.callAuth("/api/v1/auth-service/email-otp/verify", { email, code });
+      this.persist(data);
+      return data.user;
+    });
+  }
+  // ============================================================
+  // PASSWORD RESET + EMAIL VERIFICATION
+  // ============================================================
+  /** Trigger password-reset email. Resolves on 204 even when address is unknown (anti-enumeration). */
+  async requestPasswordReset(email) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/password/forgot",
+      { email }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("PASSWORD_RESET_REQUEST_FAILED", "Failed to send reset email");
+    }
+  }
+  /** Pair the reset-email token with the new password to complete the reset. */
+  async resetPassword(token, newPassword) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/password/reset",
+      { token, newPassword }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("PASSWORD_RESET_FAILED", "Reset failed");
+    }
+  }
+  /** Verify the email-address token from the link Sendora sent on signup. */
+  async verifyEmail(token) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email/verify",
+      { token }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("EMAIL_VERIFICATION_FAILED", "Verification failed");
+    }
+  }
+  /** Re-send the email-verification email for the currently-signed-in user. */
+  async sendVerificationEmail() {
+    const headers = this.bearerHeaders();
+    if (!headers) throw new AuthError("UNAUTHORIZED", "Sign in before requesting a verification email");
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email/verify/resend",
+      {},
+      headers
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("VERIFICATION_RESEND_FAILED", "Failed to send verification email");
+    }
+  }
+  // ============================================================
   // TOTP MFA — enrollment management (Bearer-authenticated)
   // ============================================================
   async enrollMfa() {

package/dist/index.d.cts

@@ -137,6 +137,39 @@ declare class Auth {
         mfaChallengeToken: string;
         userId: string;
     }>;
+    /**
+     * Verify an IdP-issued credential (authorization code OR id_token)
+     * and mint a Sendora session. Customer's app handles the IdP
+     * dance — typically via expo-auth-session / react-native-app-auth
+     * — then hands the result here. See web SDK for full provider
+     * matrix; mirrors that surface 1:1.
+     */
+    loginSocial(input: {
+        provider: "google" | "github" | "apple" | "microsoft" | "linkedin" | "facebook" | "twitter" | "discord";
+        code?: string;
+        idToken?: string;
+        redirectUri?: string;
+        codeVerifier?: string;
+        appleName?: {
+            firstName?: string;
+            lastName?: string;
+        };
+    }): Promise<AuthUser>;
+    signInWithGoogle(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithGitHub(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithApple(input: {
+        idToken?: string;
+        code?: string;
+        redirectUri?: string;
+        appleName?: {
+            firstName?: string;
+            lastName?: string;
+        };
+    }): Promise<AuthUser>;
+    signInWithMicrosoft(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithLinkedIn(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithFacebook(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithDiscord(code: string, redirectUri: string): Promise<AuthUser>;
     /**
      * Exchange the MFA challenge token from `signIn` for a real session
      * by submitting a TOTP or recovery code from the user's authenticator.
@@ -144,6 +177,16 @@ declare class Auth {
     challengeMfa(mfaChallengeToken: string, code: string): Promise<AuthUser>;
     sendMagicLink(email: string): Promise<void>;
     verifyMagicLink(token: string): Promise<AuthUser>;
+    sendEmailOtp(email: string): Promise<void>;
+    verifyEmailOtp(email: string, code: string): Promise<AuthUser>;
+    /** Trigger password-reset email. Resolves on 204 even when address is unknown (anti-enumeration). */
+    requestPasswordReset(email: string): Promise<void>;
+    /** Pair the reset-email token with the new password to complete the reset. */
+    resetPassword(token: string, newPassword: string): Promise<void>;
+    /** Verify the email-address token from the link Sendora sent on signup. */
+    verifyEmail(token: string): Promise<void>;
+    /** Re-send the email-verification email for the currently-signed-in user. */
+    sendVerificationEmail(): Promise<void>;
     enrollMfa(): Promise<{
         secret: string;
         otpauthUrl: string;

package/dist/index.d.ts

@@ -137,6 +137,39 @@ declare class Auth {
         mfaChallengeToken: string;
         userId: string;
     }>;
+    /**
+     * Verify an IdP-issued credential (authorization code OR id_token)
+     * and mint a Sendora session. Customer's app handles the IdP
+     * dance — typically via expo-auth-session / react-native-app-auth
+     * — then hands the result here. See web SDK for full provider
+     * matrix; mirrors that surface 1:1.
+     */
+    loginSocial(input: {
+        provider: "google" | "github" | "apple" | "microsoft" | "linkedin" | "facebook" | "twitter" | "discord";
+        code?: string;
+        idToken?: string;
+        redirectUri?: string;
+        codeVerifier?: string;
+        appleName?: {
+            firstName?: string;
+            lastName?: string;
+        };
+    }): Promise<AuthUser>;
+    signInWithGoogle(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithGitHub(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithApple(input: {
+        idToken?: string;
+        code?: string;
+        redirectUri?: string;
+        appleName?: {
+            firstName?: string;
+            lastName?: string;
+        };
+    }): Promise<AuthUser>;
+    signInWithMicrosoft(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithLinkedIn(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithFacebook(code: string, redirectUri: string): Promise<AuthUser>;
+    signInWithDiscord(code: string, redirectUri: string): Promise<AuthUser>;
     /**
      * Exchange the MFA challenge token from `signIn` for a real session
      * by submitting a TOTP or recovery code from the user's authenticator.
@@ -144,6 +177,16 @@ declare class Auth {
     challengeMfa(mfaChallengeToken: string, code: string): Promise<AuthUser>;
     sendMagicLink(email: string): Promise<void>;
     verifyMagicLink(token: string): Promise<AuthUser>;
+    sendEmailOtp(email: string): Promise<void>;
+    verifyEmailOtp(email: string, code: string): Promise<AuthUser>;
+    /** Trigger password-reset email. Resolves on 204 even when address is unknown (anti-enumeration). */
+    requestPasswordReset(email: string): Promise<void>;
+    /** Pair the reset-email token with the new password to complete the reset. */
+    resetPassword(token: string, newPassword: string): Promise<void>;
+    /** Verify the email-address token from the link Sendora sent on signup. */
+    verifyEmail(token: string): Promise<void>;
+    /** Re-send the email-verification email for the currently-signed-in user. */
+    sendVerificationEmail(): Promise<void>;
     enrollMfa(): Promise<{
         secret: string;
         otpauthUrl: string;

package/dist/index.js

@@ -315,6 +315,59 @@ var Auth = class {
       return parsed.data.user;
     });
   }
+  /**
+   * Verify an IdP-issued credential (authorization code OR id_token)
+   * and mint a Sendora session. Customer's app handles the IdP
+   * dance — typically via expo-auth-session / react-native-app-auth
+   * — then hands the result here. See web SDK for full provider
+   * matrix; mirrors that surface 1:1.
+   */
+  loginSocial(input) {
+    return this.serialize(async () => {
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const res = await post(
+        { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+        "/api/v1/auth-service/login/social",
+        input
+      );
+      if (!res) throw new AuthError("NETWORK_ERROR", "Network request failed");
+      let parsed;
+      try {
+        parsed = await res.json();
+      } catch {
+        throw new AuthError("PARSE_ERROR", `HTTP ${res.status}`);
+      }
+      if (!res.ok || !parsed.success || !isAuthApiResponse(parsed.data)) {
+        throw new AuthError(
+          parsed.error?.code ?? "SOCIAL_LOGIN_FAILED",
+          parsed.error?.message ?? "Social login failed"
+        );
+      }
+      this.persist(parsed.data);
+      return parsed.data.user;
+    });
+  }
+  signInWithGoogle(code, redirectUri) {
+    return this.loginSocial({ provider: "google", code, redirectUri });
+  }
+  signInWithGitHub(code, redirectUri) {
+    return this.loginSocial({ provider: "github", code, redirectUri });
+  }
+  signInWithApple(input) {
+    return this.loginSocial({ provider: "apple", ...input });
+  }
+  signInWithMicrosoft(code, redirectUri) {
+    return this.loginSocial({ provider: "microsoft", code, redirectUri });
+  }
+  signInWithLinkedIn(code, redirectUri) {
+    return this.loginSocial({ provider: "linkedin", code, redirectUri });
+  }
+  signInWithFacebook(code, redirectUri) {
+    return this.loginSocial({ provider: "facebook", code, redirectUri });
+  }
+  signInWithDiscord(code, redirectUri) {
+    return this.loginSocial({ provider: "discord", code, redirectUri });
+  }
   /**
    * Exchange the MFA challenge token from `signIn` for a real session
    * by submitting a TOTP or recovery code from the user's authenticator.
@@ -351,6 +404,77 @@ var Auth = class {
     });
   }
   // ============================================================
+  // EMAIL OTP (6-digit cross-device code)
+  // ============================================================
+  async sendEmailOtp(email) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email-otp/request",
+      { email }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("EMAIL_OTP_REQUEST_FAILED", "Failed to send code");
+    }
+  }
+  verifyEmailOtp(email, code) {
+    return this.serialize(async () => {
+      if (this.user !== null) await this.wipeLocalIdentity();
+      const data = await this.callAuth("/api/v1/auth-service/email-otp/verify", { email, code });
+      this.persist(data);
+      return data.user;
+    });
+  }
+  // ============================================================
+  // PASSWORD RESET + EMAIL VERIFICATION
+  // ============================================================
+  /** Trigger password-reset email. Resolves on 204 even when address is unknown (anti-enumeration). */
+  async requestPasswordReset(email) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/password/forgot",
+      { email }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("PASSWORD_RESET_REQUEST_FAILED", "Failed to send reset email");
+    }
+  }
+  /** Pair the reset-email token with the new password to complete the reset. */
+  async resetPassword(token, newPassword) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/password/reset",
+      { token, newPassword }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("PASSWORD_RESET_FAILED", "Reset failed");
+    }
+  }
+  /** Verify the email-address token from the link Sendora sent on signup. */
+  async verifyEmail(token) {
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email/verify",
+      { token }
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("EMAIL_VERIFICATION_FAILED", "Verification failed");
+    }
+  }
+  /** Re-send the email-verification email for the currently-signed-in user. */
+  async sendVerificationEmail() {
+    const headers = this.bearerHeaders();
+    if (!headers) throw new AuthError("UNAUTHORIZED", "Sign in before requesting a verification email");
+    const res = await post(
+      { apiUrl: this.hooks.apiUrl, publicKey: this.hooks.publicKey, debug: this.hooks.debug },
+      "/api/v1/auth-service/email/verify/resend",
+      {},
+      headers
+    );
+    if (!res || !res.ok) {
+      throw new AuthError("VERIFICATION_RESEND_FAILED", "Failed to send verification email");
+    }
+  }
+  // ============================================================
   // TOTP MFA — enrollment management (Bearer-authenticated)
   // ============================================================
   async enrollMfa() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendoracloud/sdk-react-native",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Sendora Cloud React Native + Expo SDK — analytics, identity, push-token registration, auth. Expo Go compatible, no native modules beyond AsyncStorage.",
   "type": "module",
   "main": "./dist/index.cjs",