@spacelr/sdk 0.6.0 → 0.8.0

package/dist/index.mjs

@@ -1547,6 +1547,88 @@ var AuthModule = class {
     await this.storeTokensFromLogin(response);
     return response;
   }
+  /**
+   * Fetch WebAuthn assertion options to start a passkey login.
+   * Pass `email` to scope the challenge to a known user's registered
+   * credentials; omit it for a discoverable-credential (usernameless) flow.
+   */
+  async beginPasskeyLogin(email) {
+    return this.http.request({
+      method: "POST",
+      path: "/auth/passkey/login/options",
+      body: email ? { email } : {}
+    });
+  }
+  /**
+   * Verify a WebAuthn assertion produced by `navigator.credentials.get()`
+   * against the options returned by `beginPasskeyLogin()`, completing login.
+   */
+  async verifyPasskeyLogin(response) {
+    const result = await this.http.request({
+      method: "POST",
+      path: "/auth/passkey/login/verify",
+      body: { response }
+    });
+    await this.storeTokensFromLogin(result);
+    return result;
+  }
+  /**
+   * Fetch WebAuthn attestation options to register a new passkey for the
+   * currently authenticated user.
+   */
+  async beginPasskeyRegistration() {
+    return this.http.request({
+      method: "POST",
+      path: "/auth/passkey/register/options",
+      authenticated: true,
+      body: {}
+    });
+  }
+  /**
+   * Verify a WebAuthn attestation produced by `navigator.credentials.create()`
+   * against the options returned by `beginPasskeyRegistration()`, saving the
+   * new credential under the current user. This does not issue tokens or
+   * change auth state — the caller is already authenticated.
+   */
+  async verifyPasskeyRegistration(response, label) {
+    return this.http.request({
+      method: "POST",
+      path: "/auth/passkey/register/verify",
+      authenticated: true,
+      body: { response, label }
+    });
+  }
+  /**
+   * List the WebAuthn passkey credentials registered for the current user.
+   */
+  async listPasskeys() {
+    return this.http.request({
+      method: "GET",
+      path: "/auth/passkey/credentials",
+      authenticated: true
+    });
+  }
+  /**
+   * Rename a registered passkey credential (e.g. "My Laptop").
+   */
+  async renamePasskey(credentialId, label) {
+    return this.http.request({
+      method: "PATCH",
+      path: `/auth/passkey/credentials/${encodeURIComponent(credentialId)}`,
+      authenticated: true,
+      body: { label }
+    });
+  }
+  /**
+   * Delete a registered passkey credential.
+   */
+  async deletePasskey(credentialId) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/auth/passkey/credentials/${encodeURIComponent(credentialId)}`,
+      authenticated: true
+    });
+  }
   async storeTokensFromLogin(response) {
     const expiresAt = response.expires_in ? Math.floor(Date.now() / 1e3) + response.expires_in : void 0;
     await this.tokenManager.setTokens({