@yackey-labs/yauth-client 0.1.0

package/src/generated.ts

@@ -0,0 +1,385 @@
+// Auto-generated by axum-ts-client. Do not edit.
+
+import type { AccountLockoutMessageResponse } from "./bindings/AccountLockoutMessageResponse";
+import type { ApiKeyResponse } from "./bindings/ApiKeyResponse";
+import type { AuthConfigResponse } from "./bindings/AuthConfigResponse";
+import type { AuthorizeQuery } from "./bindings/AuthorizeQuery";
+import type { AuthorizeResponse } from "./bindings/AuthorizeResponse";
+import type { AuthUser } from "./bindings/AuthUser";
+import type { BackupCodeCountResponse } from "./bindings/BackupCodeCountResponse";
+import type { BackupCodesResponse } from "./bindings/BackupCodesResponse";
+import type { BanRequest } from "./bindings/BanRequest";
+import type { CallbackBody } from "./bindings/CallbackBody";
+import type { ChangePasswordRequest } from "./bindings/ChangePasswordRequest";
+import type { ConfirmTotpRequest } from "./bindings/ConfirmTotpRequest";
+import type { CreateApiKeyRequest } from "./bindings/CreateApiKeyRequest";
+import type { CreateApiKeyResponse } from "./bindings/CreateApiKeyResponse";
+import type { CreateWebhookRequest } from "./bindings/CreateWebhookRequest";
+import type { ForgotPasswordRequest } from "./bindings/ForgotPasswordRequest";
+import type { ListSessionsQuery } from "./bindings/ListSessionsQuery";
+import type { ListUsersQuery } from "./bindings/ListUsersQuery";
+import type { LoginRequest } from "./bindings/LoginRequest";
+import type { MagicLinkMessageResponse } from "./bindings/MagicLinkMessageResponse";
+import type { MagicLinkSendRequest } from "./bindings/MagicLinkSendRequest";
+import type { MagicLinkVerifyRequest } from "./bindings/MagicLinkVerifyRequest";
+import type { MessageResponse } from "./bindings/MessageResponse";
+import type { MfaAuthResponse } from "./bindings/MfaAuthResponse";
+import type { MfaMessageResponse } from "./bindings/MfaMessageResponse";
+import type { OAuthAccountResponse } from "./bindings/OAuthAccountResponse";
+import type { OAuthAuthResponse } from "./bindings/OAuthAuthResponse";
+import type { PasskeyInfo } from "./bindings/PasskeyInfo";
+import type { PasskeyLoginBeginRequest } from "./bindings/PasskeyLoginBeginRequest";
+import type { PasskeyLoginFinishRequest } from "./bindings/PasskeyLoginFinishRequest";
+import type { RefreshRequest } from "./bindings/RefreshRequest";
+import type { RegisterFinishRequest } from "./bindings/RegisterFinishRequest";
+import type { RegisterRequest } from "./bindings/RegisterRequest";
+import type { RequestUnlockRequest } from "./bindings/RequestUnlockRequest";
+import type { ResendVerificationRequest } from "./bindings/ResendVerificationRequest";
+import type { ResetPasswordRequest } from "./bindings/ResetPasswordRequest";
+import type { RevokeRequest } from "./bindings/RevokeRequest";
+import type { SetupTotpResponse } from "./bindings/SetupTotpResponse";
+import type { TokenRequest } from "./bindings/TokenRequest";
+import type { TokenResponse } from "./bindings/TokenResponse";
+import type { UnlockAccountRequest } from "./bindings/UnlockAccountRequest";
+import type { UpdateProfileRequest } from "./bindings/UpdateProfileRequest";
+import type { UpdateUserRequest } from "./bindings/UpdateUserRequest";
+import type { UpdateWebhookRequest } from "./bindings/UpdateWebhookRequest";
+import type { VerifyEmailRequest } from "./bindings/VerifyEmailRequest";
+import type { VerifyMfaRequest } from "./bindings/VerifyMfaRequest";
+import type { WebhookDetailResponse } from "./bindings/WebhookDetailResponse";
+import type { WebhookResponse } from "./bindings/WebhookResponse";
+
+export class YAuthError extends Error {
+	constructor(
+		message: string,
+		public status: number,
+		public body?: unknown,
+	) {
+		super(message);
+		this.name = "YAuthError";
+	}
+}
+
+export interface YAuthClientOptions {
+	baseUrl: string;
+	getToken?: () => Promise<string | null>;
+	credentials?: RequestCredentials;
+	fetch?: typeof fetch;
+	onError?: (error: YAuthError) => void;
+}
+
+type RequestOptions = {
+	method?: string;
+	body?: unknown;
+	query?: Record<string, unknown>;
+	auth?: boolean;
+};
+
+function createRequest(options: YAuthClientOptions) {
+	const { baseUrl, credentials = "include" } = options;
+	const fetchFn = options.fetch ?? globalThis.fetch;
+
+	async function request<T>(
+		path: string,
+		opts: RequestOptions = {},
+	): Promise<T> {
+		const { method = "GET", body, query, auth } = opts;
+
+		let url = `${baseUrl}${path}`;
+		if (query) {
+			const params = new URLSearchParams();
+			for (const [key, value] of Object.entries(query)) {
+				if (value !== undefined && value !== null) {
+					params.set(key, String(value));
+				}
+			}
+			const qs = params.toString();
+			if (qs) url += `?${qs}`;
+		}
+
+		const headers: Record<string, string> = {
+			"Content-Type": "application/json",
+		};
+
+		if (auth && options.getToken) {
+			const token = await options.getToken();
+			if (token) headers.Authorization = `Bearer ${token}`;
+		}
+
+		const response = await fetchFn(url, {
+			method,
+			credentials,
+			headers,
+			body: body ? JSON.stringify(body) : undefined,
+		});
+
+		if (!response.ok) {
+			const text = await response.text();
+			let message: string;
+			let errorBody: unknown;
+			try {
+				const json = JSON.parse(text);
+				message = json.error ?? json.message ?? text;
+				errorBody = json;
+			} catch {
+				message = text;
+			}
+			const error = new YAuthError(message, response.status, errorBody);
+			if (options.onError) options.onError(error);
+			throw error;
+		}
+
+		const text = await response.text();
+		return (text ? JSON.parse(text) : undefined) as T;
+	}
+
+	return request;
+}
+
+export function createYAuthClient(options: YAuthClientOptions) {
+	const request = createRequest(options);
+
+	return {
+		getConfig: () => request<AuthConfigResponse>("/config"),
+		getSession: () => request<AuthUser>("/session", { auth: true }),
+		logout: () => request<void>("/logout", { method: "POST", auth: true }),
+		updateProfile: (body: UpdateProfileRequest) =>
+			request<AuthUser>("/me", { method: "PATCH", auth: true, body }),
+
+		accountLockout: {
+			requestUnlock: (body: RequestUnlockRequest) =>
+				request<AccountLockoutMessageResponse>("/account/request-unlock", {
+					method: "POST",
+					body,
+				}),
+			unlock: (body: UnlockAccountRequest) =>
+				request<AccountLockoutMessageResponse>("/account/unlock", {
+					method: "POST",
+					body,
+				}),
+			adminUnlock: (id: string) =>
+				request<AccountLockoutMessageResponse>(`/admin/users/${id}/unlock`, {
+					method: "POST",
+					auth: true,
+				}),
+		},
+
+		admin: {
+			listUsers: (query?: ListUsersQuery) =>
+				request<void>("/admin/users", { auth: true, query }),
+			getUser: (id: string) =>
+				request<AuthUser>(`/admin/users/${id}`, { auth: true }),
+			updateUser: (id: string, body: UpdateUserRequest) =>
+				request<AuthUser>(`/admin/users/${id}`, {
+					method: "PUT",
+					auth: true,
+					body,
+				}),
+			deleteUser: (id: string) =>
+				request<void>(`/admin/users/${id}`, { method: "DELETE", auth: true }),
+			banUser: (id: string, body: BanRequest) =>
+				request<AuthUser>(`/admin/users/${id}/ban`, {
+					method: "POST",
+					auth: true,
+					body,
+				}),
+			unbanUser: (id: string) =>
+				request<AuthUser>(`/admin/users/${id}/unban`, {
+					method: "POST",
+					auth: true,
+				}),
+			impersonate: (id: string) =>
+				request<void>(`/admin/users/${id}/impersonate`, {
+					method: "POST",
+					auth: true,
+				}),
+			listSessions: (query?: ListSessionsQuery) =>
+				request<void>("/admin/sessions", { auth: true, query }),
+			deleteSession: (id: string) =>
+				request<void>(`/admin/sessions/${id}`, {
+					method: "DELETE",
+					auth: true,
+				}),
+		},
+
+		apiKeys: {
+			create: (body: CreateApiKeyRequest) =>
+				request<CreateApiKeyResponse>("/api-keys", {
+					method: "POST",
+					auth: true,
+					body,
+				}),
+			list: () => request<ApiKeyResponse>("/api-keys", { auth: true }),
+			delete: (id: string) =>
+				request<void>(`/api-keys/${id}`, { method: "DELETE", auth: true }),
+		},
+
+		bearer: {
+			getToken: (body: TokenRequest) =>
+				request<TokenResponse>("/token", { method: "POST", body }),
+			refresh: (body: RefreshRequest) =>
+				request<TokenResponse>("/token/refresh", { method: "POST", body }),
+			revoke: (body: RevokeRequest) =>
+				request<void>("/token/revoke", { method: "POST", auth: true, body }),
+		},
+
+		emailPassword: {
+			register: (body: RegisterRequest) =>
+				request<MessageResponse>("/register", { method: "POST", body }),
+			login: (body: LoginRequest) =>
+				request<void>("/login", { method: "POST", body }),
+			verifyEmail: (body: VerifyEmailRequest) =>
+				request<MessageResponse>("/verify-email", { method: "POST", body }),
+			resendVerification: (body: ResendVerificationRequest) =>
+				request<MessageResponse>("/resend-verification", {
+					method: "POST",
+					body,
+				}),
+			forgotPassword: (body: ForgotPasswordRequest) =>
+				request<MessageResponse>("/forgot-password", { method: "POST", body }),
+			resetPassword: (body: ResetPasswordRequest) =>
+				request<MessageResponse>("/reset-password", { method: "POST", body }),
+			changePassword: (body: ChangePasswordRequest) =>
+				request<MessageResponse>("/change-password", {
+					method: "POST",
+					auth: true,
+					body,
+				}),
+		},
+
+		magicLink: {
+			send: (body: MagicLinkSendRequest) =>
+				request<MagicLinkMessageResponse>("/magic-link/send", {
+					method: "POST",
+					body,
+				}),
+			verify: (body: MagicLinkVerifyRequest) =>
+				request<void>("/magic-link/verify", { method: "POST", body }),
+		},
+
+		mfa: {
+			setup: () =>
+				request<SetupTotpResponse>("/mfa/totp/setup", {
+					method: "POST",
+					auth: true,
+				}),
+			confirm: (body: ConfirmTotpRequest) =>
+				request<MfaMessageResponse>("/mfa/totp/confirm", {
+					method: "POST",
+					auth: true,
+					body,
+				}),
+			disable: () =>
+				request<MfaMessageResponse>("/mfa/totp", {
+					method: "DELETE",
+					auth: true,
+				}),
+			verify: (body: VerifyMfaRequest) =>
+				request<MfaAuthResponse>("/mfa/verify", { method: "POST", body }),
+			getBackupCodeCount: () =>
+				request<BackupCodeCountResponse>("/mfa/backup-codes", { auth: true }),
+			regenerateBackupCodes: () =>
+				request<BackupCodesResponse>("/mfa/backup-codes/regenerate", {
+					method: "POST",
+					auth: true,
+				}),
+		},
+
+		oauth: {
+			authorize: (provider: string, query?: AuthorizeQuery) => {
+				let url = `${options.baseUrl}/oauth/${provider}/authorize`;
+				if (query) {
+					const params = new URLSearchParams();
+					for (const [key, value] of Object.entries(query)) {
+						if (value !== undefined && value !== null)
+							params.set(key, String(value));
+					}
+					const qs = params.toString();
+					if (qs) url += `?${qs}`;
+				}
+				return url;
+			},
+			callback: (provider: string, body: CallbackBody) =>
+				request<OAuthAuthResponse>(`/oauth/${provider}/callback`, {
+					method: "POST",
+					body,
+				}),
+			accounts: () =>
+				request<OAuthAccountResponse>("/oauth/accounts", { auth: true }),
+			unlink: (provider: string) =>
+				request<void>(`/oauth/${provider}`, { method: "DELETE", auth: true }),
+			link: (provider: string) =>
+				request<AuthorizeResponse>(`/oauth/${provider}/link`, {
+					method: "POST",
+					auth: true,
+				}),
+		},
+
+		oauth2Server: {
+			metadata: () => request<void>("/.well-known/oauth-authorization-server"),
+			authorize: () => request<void>("/oauth/authorize"),
+			authorizeConsent: () =>
+				request<void>("/oauth/authorize", { method: "POST" }),
+			token: () => request<void>("/oauth/token", { method: "POST" }),
+			introspect: () => request<void>("/oauth/introspect", { method: "POST" }),
+			revoke: () => request<void>("/oauth/revoke", { method: "POST" }),
+			register: () => request<void>("/oauth/register", { method: "POST" }),
+			deviceAuthorize: () =>
+				request<void>("/oauth/device/code", { method: "POST" }),
+			deviceVerify: () => request<void>("/oauth/device"),
+			deviceApprove: () => request<void>("/oauth/device", { method: "POST" }),
+		},
+
+		oidc: {
+			openidConfiguration: () =>
+				request<void>("/.well-known/openid-configuration"),
+			jwks: () => request<void>("/.well-known/jwks.json"),
+			userinfo: () => request<void>("/userinfo", { auth: true }),
+		},
+
+		passkey: {
+			loginBegin: (body: PasskeyLoginBeginRequest) =>
+				request<void>("/passkey/login/begin", { method: "POST", body }),
+			loginFinish: (body: PasskeyLoginFinishRequest) =>
+				request<void>("/passkey/login/finish", { method: "POST", body }),
+			registerBegin: () =>
+				request<void>("/passkeys/register/begin", {
+					method: "POST",
+					auth: true,
+				}),
+			registerFinish: (body: RegisterFinishRequest) =>
+				request<void>("/passkeys/register/finish", {
+					method: "POST",
+					auth: true,
+					body,
+				}),
+			list: () => request<PasskeyInfo>("/passkeys", { auth: true }),
+			delete: (id: string) =>
+				request<void>(`/passkeys/${id}`, { method: "DELETE", auth: true }),
+		},
+
+		webhooks: {
+			create: (body: CreateWebhookRequest) =>
+				request<WebhookResponse>("/webhooks", {
+					method: "POST",
+					auth: true,
+					body,
+				}),
+			list: () => request<WebhookResponse>("/webhooks", { auth: true }),
+			get: (id: string) =>
+				request<WebhookDetailResponse>(`/webhooks/${id}`, { auth: true }),
+			update: (id: string, body: UpdateWebhookRequest) =>
+				request<WebhookResponse>(`/webhooks/${id}`, {
+					method: "PUT",
+					auth: true,
+					body,
+				}),
+			delete: (id: string) =>
+				request<void>(`/webhooks/${id}`, { method: "DELETE", auth: true }),
+			test: (id: string) =>
+				request<void>(`/webhooks/${id}/test`, { method: "POST", auth: true }),
+		},
+	};
+}
+
+export type YAuthClient = ReturnType<typeof createYAuthClient>;