@viu/emporix-sdk 2.36.1 → 2.37.0

package/dist/customer.d.ts

@@ -314,6 +314,32 @@ type UpdateEmail = {
      */
     token?: string;
 };
+type ValidateTokenResponse = {
+    /**
+     * Type of the token. Usually it's `Bearer`.
+     */
+    token_type?: string;
+    /**
+     * Specifies the token's expiration time, represented in seconds.
+     */
+    expires_in?: number;
+    /**
+     * A list of scopes assigned to the user.
+     */
+    scope?: string;
+    /**
+     * Identifier of the user session.
+     */
+    sessionId?: string;
+    /**
+     * Customer email used to login (generate the token).
+     */
+    email?: string;
+    /**
+     * Legal Entity ID.
+     */
+    legalEntityId?: string;
+};
 
 /**
  * Caller-owned customer session. Maps the Emporix `CustomerToken` wire shape to
@@ -351,6 +377,12 @@ type AddressUpdateInput = AddressUpdateDto;
 type ChangeEmailInput = ChangeEmailRequestDto;
 type ConfirmEmailChangeInput = UpdateEmail;
 type ResendActivationInput = RefreshToken;
+/**
+ * What `validateToken` reports about a customer token: `scope` is the
+ * space-separated scope list, plus `sessionId`, `email`, `legalEntityId` and
+ * `expires_in`. Every field is optional upstream.
+ */
+type CustomerTokenValidation = ValidateTokenResponse;
 /** Customer signup, session, profile and addresses. */
 declare class CustomerService {
     private readonly ctx;
@@ -420,6 +452,18 @@ declare class CustomerService {
     }, auth?: AuthContext): Promise<CustomerSession>;
     /** Returns the authenticated customer. Requires customer/raw auth. */
     me(auth?: AuthContext): Promise<Customer>;
+    /**
+     * Validates a customer token and returns what the tenant knows about it —
+     * `scope`, `sessionId`, `email`, `legalEntityId`, `expires_in`
+     * (`GET /validateauthtoken`). Requires customer/raw auth.
+     *
+     * An invalid or expired token answers `401`, which surfaces as
+     * {@link EmporixAuthError} rather than a falsy result: this is a check, not a
+     * predicate. Reach for it when you hold a token from elsewhere — an SSO
+     * exchange, a Managed Dashboard host — and need its scopes before deciding
+     * what to render, instead of discovering them from a failed call.
+     */
+    validateToken(auth?: AuthContext): Promise<CustomerTokenValidation>;
     /** Updates the authenticated customer. Requires customer/raw auth. */
     update(patch: CustomerUpdateInput, auth?: AuthContext): Promise<Customer>;
     /** Changes the password. Requires customer/raw auth. */
@@ -451,4 +495,4 @@ declare class CustomerService {
     };
 }
 
-export { type Address, type AddressCreateInput, type AddressUpdateInput, type ChangeEmailInput, type ConfirmEmailChangeInput, type Customer, CustomerService, type CustomerSession, type CustomerSignupInput, type CustomerUpdateInput, type PasswordChangeInput, type PasswordResetConfirmInput, type PasswordResetRequestInput, type ResendActivationInput };
+export { type Address, type AddressCreateInput, type AddressUpdateInput, type ChangeEmailInput, type ConfirmEmailChangeInput, type Customer, CustomerService, type CustomerSession, type CustomerSignupInput, type CustomerTokenValidation, type CustomerUpdateInput, type PasswordChangeInput, type PasswordResetConfirmInput, type PasswordResetRequestInput, type ResendActivationInput };

package/dist/customer.js

@@ -1,4 +1,4 @@
-export { CustomerService } from './chunk-PRN3T6TY.js';
+export { CustomerService } from './chunk-UA4BM6OP.js';
 import './chunk-3BDDYX3V.js';
 import './chunk-UWGGF4MC.js';
 //# sourceMappingURL=customer.js.map

package/dist/index.cjs

@@ -995,7 +995,7 @@ var HttpClient = class {
 };
 
 // package.json
-var version = "2.36.1";
+var version = "2.37.0";
 
 // src/version.ts
 var SDK_VERSION = version;
@@ -1212,6 +1212,24 @@ var CustomerService = class {
       auth: requireCustomer(auth2)
     });
   }
+  /**
+   * Validates a customer token and returns what the tenant knows about it —
+   * `scope`, `sessionId`, `email`, `legalEntityId`, `expires_in`
+   * (`GET /validateauthtoken`). Requires customer/raw auth.
+   *
+   * An invalid or expired token answers `401`, which surfaces as
+   * {@link EmporixAuthError} rather than a falsy result: this is a check, not a
+   * predicate. Reach for it when you hold a token from elsewhere — an SSO
+   * exchange, a Managed Dashboard host — and need its scopes before deciding
+   * what to render, instead of discovering them from a failed call.
+   */
+  async validateToken(auth2) {
+    return this.ctx.http.request({
+      method: "GET",
+      path: `/customer/${this.ctx.tenant}/validateauthtoken`,
+      auth: requireCustomer(auth2)
+    });
+  }
   /** Updates the authenticated customer. Requires customer/raw auth. */
   async update(patch, auth2) {
     return this.ctx.http.request({
@@ -4142,6 +4160,17 @@ var IamService = class {
       path: `${this.base()}/users/${userId}/groups`,
       auth: auth2
     }),
+    /**
+     * Reads one of a user's groups (`GET /users/{userId}/groups/{groupId}`).
+     * The collection read above returns the same shape per entry; this exists
+     * because Emporix exposes the item separately and a caller holding both ids
+     * should not have to page the collection to resolve one group.
+     */
+    getGroup: async (userId, groupId, auth2) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/${encodeURIComponent(userId)}/groups/${encodeURIComponent(groupId)}`,
+      auth: auth2
+    }),
     getScopes: async (userId, auth2) => this.ctx.http.request({
       method: "GET",
       path: `${this.base()}/users/${userId}/scopes`,