@stackframe/stack 2.6.11 → 2.6.15

package/dist/lib/stack-app.d.mts

@@ -67,6 +67,31 @@ type StackClientAppJson<HasTokenStore extends boolean, ProjectId extends string>
     uniqueIdentifier: string;
 };
 declare const stackAppInternalsSymbol: unique symbol;
+type ContactChannel = {
+    id: string;
+    value: string;
+    type: 'email';
+    isPrimary: boolean;
+    isVerified: boolean;
+    usedForAuth: boolean;
+    sendVerificationEmail(): Promise<Result<undefined, KnownErrors["EmailAlreadyVerified"]>>;
+    update(data: ContactChannelUpdateOptions): Promise<void>;
+    delete(): Promise<void>;
+};
+type ContactChannelCreateOptions = {
+    value: string;
+    type: 'email';
+    usedForAuth: boolean;
+};
+type ContactChannelUpdateOptions = {
+    usedForAuth?: boolean;
+    value?: string;
+    isPrimary?: boolean;
+};
+type ServerContactChannel = ContactChannel;
+type ServerContactChannelCreateOptions = ContactChannelCreateOptions & {
+    isVerified?: boolean;
+};
 type Session = {
     getTokens(): Promise<{
         accessToken: string | null;
@@ -151,6 +176,7 @@ type Auth = {
         accessToken: string | null;
         refreshToken: string | null;
     }>;
+    registerPasskey(): Promise<Result<undefined, KnownErrors["PasskeyRegistrationFailed"] | KnownErrors["PasskeyWebAuthnError"]>>;
 };
 /**
  * ```
@@ -188,39 +214,48 @@ type BaseUser = {
     readonly signedUpAt: Date;
     readonly clientMetadata: any;
     readonly clientReadOnlyMetadata: any;
-    /**
-     * Whether the primary e-mail can be used for authentication.
-     */
-    readonly emailAuthEnabled: boolean;
     /**
      * Whether the user has a password set.
      */
     readonly hasPassword: boolean;
-    /**
-     * @deprecated
-     */
-    readonly oauthProviders: readonly {
-        id: string;
-    }[];
+    readonly otpAuthEnabled: boolean;
+    readonly passkeyAuthEnabled: boolean;
     readonly isMultiFactorRequired: boolean;
     /**
      * A shorthand method to update multiple fields of the user at once.
      */
     readonly selectedTeam: Team | null;
     toClientJson(): CurrentUserCrud["Client"]["Read"];
+    /**
+     * @deprecated, use contact channel's usedForAuth instead
+     */
+    readonly emailAuthEnabled: boolean;
+    /**
+     * @deprecated
+     */
+    readonly oauthProviders: readonly {
+        id: string;
+    }[];
 };
 type UserExtra = {
     setDisplayName(displayName: string): Promise<void>;
+    /** @deprecated Use contact channel's sendVerificationEmail instead */
     sendVerificationEmail(): Promise<KnownErrors["EmailAlreadyVerified"] | void>;
     setClientMetadata(metadata: any): Promise<void>;
     updatePassword(options: {
         oldPassword: string;
         newPassword: string;
     }): Promise<KnownErrors["PasswordConfirmationMismatch"] | KnownErrors["PasswordRequirementsNotMet"] | void>;
+    setPassword(options: {
+        password: string;
+    }): Promise<KnownErrors["PasswordRequirementsNotMet"] | void>;
     /**
      * A shorthand method to update multiple fields of the user at once.
      */
     update(update: UserUpdateOptions): Promise<void>;
+    useContactChannels(): ContactChannel[];
+    listContactChannels(): Promise<ContactChannel[]>;
+    createContactChannel(data: ContactChannelCreateOptions): Promise<ContactChannel>;
     delete(): Promise<void>;
     getConnectedAccount(id: ProviderType, options: {
         or: 'redirect';
@@ -263,6 +298,8 @@ type UserUpdateOptions = {
     selectedTeamId?: string | null;
     totpMultiFactorSecret?: Uint8Array | null;
     profileImageUrl?: string | null;
+    otpAuthEnabled?: boolean;
+    passkeyAuthEnabled?: boolean;
 };
 type ServerBaseUser = {
     setPrimaryEmail(email: string, options?: {
@@ -272,14 +309,12 @@ type ServerBaseUser = {
     readonly serverMetadata: any;
     setServerMetadata(metadata: any): Promise<void>;
     setClientReadOnlyMetadata(metadata: any): Promise<void>;
-    updatePassword(options: {
-        oldPassword?: string;
-        newPassword: string;
-    }): Promise<KnownErrors["PasswordConfirmationMismatch"] | KnownErrors["PasswordRequirementsNotMet"] | void>;
+    useContactChannels(): ServerContactChannel[];
+    listContactChannels(): Promise<ServerContactChannel[]>;
+    createContactChannel(data: ServerContactChannelCreateOptions): Promise<ServerContactChannel>;
     update(user: ServerUserUpdateOptions): Promise<void>;
     grantPermission(scope: Team, permissionId: string): Promise<void>;
     revokePermission(scope: Team, permissionId: string): Promise<void>;
-    hasPermission(scope: Team, permissionId: string): Promise<boolean>;
     /**
      * Creates a new session object with a refresh token for this user. Can be used to impersonate them.
      */
@@ -307,8 +342,10 @@ type ServerUserUpdateOptions = {
     password?: string;
 } & UserUpdateOptions;
 type ServerUserCreateOptions = {
-    primaryEmail: string;
-    password: string;
+    primaryEmail?: string;
+    primaryEmailAuthEnabled?: boolean;
+    password?: string;
+    otpAuthEnabled?: boolean;
     displayName?: string;
     primaryEmailVerified?: boolean;
 };
@@ -346,6 +383,7 @@ type ProjectConfig = {
     readonly signUpEnabled: boolean;
     readonly credentialEnabled: boolean;
     readonly magicLinkEnabled: boolean;
+    readonly passkeyEnabled: boolean;
     readonly clientTeamCreationEnabled: boolean;
     readonly clientUserDeletionEnabled: boolean;
     readonly oauthProviders: OAuthProviderConfig[];
@@ -358,6 +396,7 @@ type AdminProjectConfig = {
     readonly signUpEnabled: boolean;
     readonly credentialEnabled: boolean;
     readonly magicLinkEnabled: boolean;
+    readonly passkeyEnabled: boolean;
     readonly clientTeamCreationEnabled: boolean;
     readonly clientUserDeletionEnabled: boolean;
     readonly legacyGlobalJwtSigning: boolean;
@@ -405,6 +444,7 @@ type AdminProjectConfigUpdateOptions = {
     signUpEnabled?: boolean;
     credentialEnabled?: boolean;
     magicLinkEnabled?: boolean;
+    passkeyEnabled?: boolean;
     clientTeamCreationEnabled?: boolean;
     clientUserDeletionEnabled?: boolean;
     allowLocalhost?: boolean;
@@ -475,7 +515,7 @@ type Team = {
     clientReadOnlyMetadata: any;
     inviteUser(options: {
         email: string;
-    }): Promise<Result<undefined, KnownErrors["TeamPermissionRequired"]>>;
+    }): Promise<void>;
     listUsers(): Promise<TeamUser[]>;
     useUsers(): TeamUser[];
     update(update: TeamUpdateOptions): Promise<void>;
@@ -503,7 +543,7 @@ type ServerTeam = {
     addUser(userId: string): Promise<void>;
     inviteUser(options: {
         email: string;
-    }): Promise<Result<undefined, KnownErrors["TeamPermissionRequired"]>>;
+    }): Promise<void>;
     removeUser(userId: string): Promise<void>;
 } & Team;
 type ServerTeamCreateOptions = TeamCreateOptions;
@@ -566,6 +606,7 @@ type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends s
         password: string;
         noRedirect?: boolean;
     }): Promise<Result<undefined, KnownErrors["UserEmailAlreadyExists"] | KnownErrors["PasswordRequirementsNotMet"]>>;
+    signInWithPasskey(): Promise<Result<undefined, KnownErrors["PasskeyAuthenticationFailed"] | KnownErrors["InvalidTotpCode"] | KnownErrors["PasskeyWebAuthnError"]>>;
     callOAuthCallback(): Promise<boolean>;
     sendForgotPasswordEmail(email: string): Promise<Result<undefined, KnownErrors["UserNotFound"]>>;
     sendMagicLinkEmail(email: string): Promise<Result<{

package/dist/lib/stack-app.d.ts

@@ -67,6 +67,31 @@ type StackClientAppJson<HasTokenStore extends boolean, ProjectId extends string>
     uniqueIdentifier: string;
 };
 declare const stackAppInternalsSymbol: unique symbol;
+type ContactChannel = {
+    id: string;
+    value: string;
+    type: 'email';
+    isPrimary: boolean;
+    isVerified: boolean;
+    usedForAuth: boolean;
+    sendVerificationEmail(): Promise<Result<undefined, KnownErrors["EmailAlreadyVerified"]>>;
+    update(data: ContactChannelUpdateOptions): Promise<void>;
+    delete(): Promise<void>;
+};
+type ContactChannelCreateOptions = {
+    value: string;
+    type: 'email';
+    usedForAuth: boolean;
+};
+type ContactChannelUpdateOptions = {
+    usedForAuth?: boolean;
+    value?: string;
+    isPrimary?: boolean;
+};
+type ServerContactChannel = ContactChannel;
+type ServerContactChannelCreateOptions = ContactChannelCreateOptions & {
+    isVerified?: boolean;
+};
 type Session = {
     getTokens(): Promise<{
         accessToken: string | null;
@@ -151,6 +176,7 @@ type Auth = {
         accessToken: string | null;
         refreshToken: string | null;
     }>;
+    registerPasskey(): Promise<Result<undefined, KnownErrors["PasskeyRegistrationFailed"] | KnownErrors["PasskeyWebAuthnError"]>>;
 };
 /**
  * ```
@@ -188,39 +214,48 @@ type BaseUser = {
     readonly signedUpAt: Date;
     readonly clientMetadata: any;
     readonly clientReadOnlyMetadata: any;
-    /**
-     * Whether the primary e-mail can be used for authentication.
-     */
-    readonly emailAuthEnabled: boolean;
     /**
      * Whether the user has a password set.
      */
     readonly hasPassword: boolean;
-    /**
-     * @deprecated
-     */
-    readonly oauthProviders: readonly {
-        id: string;
-    }[];
+    readonly otpAuthEnabled: boolean;
+    readonly passkeyAuthEnabled: boolean;
     readonly isMultiFactorRequired: boolean;
     /**
      * A shorthand method to update multiple fields of the user at once.
      */
     readonly selectedTeam: Team | null;
     toClientJson(): CurrentUserCrud["Client"]["Read"];
+    /**
+     * @deprecated, use contact channel's usedForAuth instead
+     */
+    readonly emailAuthEnabled: boolean;
+    /**
+     * @deprecated
+     */
+    readonly oauthProviders: readonly {
+        id: string;
+    }[];
 };
 type UserExtra = {
     setDisplayName(displayName: string): Promise<void>;
+    /** @deprecated Use contact channel's sendVerificationEmail instead */
     sendVerificationEmail(): Promise<KnownErrors["EmailAlreadyVerified"] | void>;
     setClientMetadata(metadata: any): Promise<void>;
     updatePassword(options: {
         oldPassword: string;
         newPassword: string;
     }): Promise<KnownErrors["PasswordConfirmationMismatch"] | KnownErrors["PasswordRequirementsNotMet"] | void>;
+    setPassword(options: {
+        password: string;
+    }): Promise<KnownErrors["PasswordRequirementsNotMet"] | void>;
     /**
      * A shorthand method to update multiple fields of the user at once.
      */
     update(update: UserUpdateOptions): Promise<void>;
+    useContactChannels(): ContactChannel[];
+    listContactChannels(): Promise<ContactChannel[]>;
+    createContactChannel(data: ContactChannelCreateOptions): Promise<ContactChannel>;
     delete(): Promise<void>;
     getConnectedAccount(id: ProviderType, options: {
         or: 'redirect';
@@ -263,6 +298,8 @@ type UserUpdateOptions = {
     selectedTeamId?: string | null;
     totpMultiFactorSecret?: Uint8Array | null;
     profileImageUrl?: string | null;
+    otpAuthEnabled?: boolean;
+    passkeyAuthEnabled?: boolean;
 };
 type ServerBaseUser = {
     setPrimaryEmail(email: string, options?: {
@@ -272,14 +309,12 @@ type ServerBaseUser = {
     readonly serverMetadata: any;
     setServerMetadata(metadata: any): Promise<void>;
     setClientReadOnlyMetadata(metadata: any): Promise<void>;
-    updatePassword(options: {
-        oldPassword?: string;
-        newPassword: string;
-    }): Promise<KnownErrors["PasswordConfirmationMismatch"] | KnownErrors["PasswordRequirementsNotMet"] | void>;
+    useContactChannels(): ServerContactChannel[];
+    listContactChannels(): Promise<ServerContactChannel[]>;
+    createContactChannel(data: ServerContactChannelCreateOptions): Promise<ServerContactChannel>;
     update(user: ServerUserUpdateOptions): Promise<void>;
     grantPermission(scope: Team, permissionId: string): Promise<void>;
     revokePermission(scope: Team, permissionId: string): Promise<void>;
-    hasPermission(scope: Team, permissionId: string): Promise<boolean>;
     /**
      * Creates a new session object with a refresh token for this user. Can be used to impersonate them.
      */
@@ -307,8 +342,10 @@ type ServerUserUpdateOptions = {
     password?: string;
 } & UserUpdateOptions;
 type ServerUserCreateOptions = {
-    primaryEmail: string;
-    password: string;
+    primaryEmail?: string;
+    primaryEmailAuthEnabled?: boolean;
+    password?: string;
+    otpAuthEnabled?: boolean;
     displayName?: string;
     primaryEmailVerified?: boolean;
 };
@@ -346,6 +383,7 @@ type ProjectConfig = {
     readonly signUpEnabled: boolean;
     readonly credentialEnabled: boolean;
     readonly magicLinkEnabled: boolean;
+    readonly passkeyEnabled: boolean;
     readonly clientTeamCreationEnabled: boolean;
     readonly clientUserDeletionEnabled: boolean;
     readonly oauthProviders: OAuthProviderConfig[];
@@ -358,6 +396,7 @@ type AdminProjectConfig = {
     readonly signUpEnabled: boolean;
     readonly credentialEnabled: boolean;
     readonly magicLinkEnabled: boolean;
+    readonly passkeyEnabled: boolean;
     readonly clientTeamCreationEnabled: boolean;
     readonly clientUserDeletionEnabled: boolean;
     readonly legacyGlobalJwtSigning: boolean;
@@ -405,6 +444,7 @@ type AdminProjectConfigUpdateOptions = {
     signUpEnabled?: boolean;
     credentialEnabled?: boolean;
     magicLinkEnabled?: boolean;
+    passkeyEnabled?: boolean;
     clientTeamCreationEnabled?: boolean;
     clientUserDeletionEnabled?: boolean;
     allowLocalhost?: boolean;
@@ -475,7 +515,7 @@ type Team = {
     clientReadOnlyMetadata: any;
     inviteUser(options: {
         email: string;
-    }): Promise<Result<undefined, KnownErrors["TeamPermissionRequired"]>>;
+    }): Promise<void>;
     listUsers(): Promise<TeamUser[]>;
     useUsers(): TeamUser[];
     update(update: TeamUpdateOptions): Promise<void>;
@@ -503,7 +543,7 @@ type ServerTeam = {
     addUser(userId: string): Promise<void>;
     inviteUser(options: {
         email: string;
-    }): Promise<Result<undefined, KnownErrors["TeamPermissionRequired"]>>;
+    }): Promise<void>;
     removeUser(userId: string): Promise<void>;
 } & Team;
 type ServerTeamCreateOptions = TeamCreateOptions;
@@ -566,6 +606,7 @@ type StackClientApp<HasTokenStore extends boolean = boolean, ProjectId extends s
         password: string;
         noRedirect?: boolean;
     }): Promise<Result<undefined, KnownErrors["UserEmailAlreadyExists"] | KnownErrors["PasswordRequirementsNotMet"]>>;
+    signInWithPasskey(): Promise<Result<undefined, KnownErrors["PasskeyAuthenticationFailed"] | KnownErrors["InvalidTotpCode"] | KnownErrors["PasskeyWebAuthnError"]>>;
     callOAuthCallback(): Promise<boolean>;
     sendForgotPasswordEmail(email: string): Promise<Result<undefined, KnownErrors["UserNotFound"]>>;
     sendMagicLinkEmail(email: string): Promise<Result<{