ab-ecosystem-sso 0.1.17 → 0.1.18

package/README.md

@@ -97,6 +97,41 @@ import { Signup, ForgotPassword } from "ab-ecosystem-sso";
 <ForgotPassword projectId="…" onBackToLogin={() => navigate("/login")} />
 ```
 
+`Signup` loads the project's currencies from `GET /currency` and offers only those. Its country dropdown uses a bundled default list; pass **`countries`** (an array of `{ code, name }`) to replace it:
+
+```tsx
+<Signup
+  projectId="…"
+  countries={[
+    { code: "US", name: "United States" },
+    { code: "IN", name: "India" },
+  ]}
+  onSuccess={handleAuth}
+/>
+```
+
+**Password reset.** `ForgotPassword` has two steps. With no token it shows the request-a-link form (emails a reset link). When the user returns via that link, extract the token from the URL and pass it as **`resetToken`** — the component then renders the reset step (new password + confirm + captcha) and POSTs to `/auth/reset-password`:
+
+```tsx
+// e.g. reset link is /reset-password?token=abc123
+const token = new URLSearchParams(location.search).get("token") ?? undefined;
+
+<ForgotPassword
+  projectId="…"
+  resetToken={token}
+  onResetSuccess={() => navigate("/login")}
+  onBackToLogin={() => navigate("/login")}
+/>
+```
+
+The new password must be at least 8 characters and match the confirmation. On success it shows a confirmation and calls `onResetSuccess`. Extracting the token is the host's responsibility (the link format is yours to define).
+
+| `ForgotPassword` prop | Type | Notes |
+| --- | --- | --- |
+| `resetToken` | `string` | Present ⇒ render the reset-password step instead of request-a-link. |
+| `onResetSuccess` | `() => void` | Fires after the password is reset. |
+| `onBackToLogin` | `() => void` | Back-to-login link (both steps). |
+
 ### `VerifyEmail`
 
 The email-verification screen for a `/verify/:token` route — the link you email to new users. It shows a captcha (site key from the project's auth-config), then posts the captcha + token to `/auth/verify-email`.
@@ -143,7 +178,7 @@ On success it calls `onVerified` (send the user to login) and shows a **Continue
 | `onError` | `(error: Error) => void` | On failure. |
 | `classNames` | `AuthClassNames` | Per-element class overrides: `card`, `input`, `label`, `button`, `link`, `captcha`, `error`, … |
 
-Per-screen extras: `Login` adds `onForgotPassword` / `onSignupClick`; `Signup` adds `onLoginClick`; `ForgotPassword` adds `onBackToLogin`; `VerifyEmail` adds `token` / `onVerified` / `onLoginClick` / `onSignupClick` (and has no `onSuccess`, since no session is created).
+Per-screen extras: `Login` adds `onForgotPassword` / `onSignupClick`; `Signup` adds `onLoginClick` / `countries`; `ForgotPassword` adds `onBackToLogin` / `resetToken` / `onResetSuccess`; `VerifyEmail` adds `token` / `onVerified` / `onLoginClick` / `onSignupClick` (and has no `onSuccess`, since no session is created).
 
 ---
 
@@ -401,6 +436,8 @@ Beyond the components, these functions are exported for building custom UIs:
 | --- | --- |
 | `getAuthConfig(projectId, apiBaseUrl?)` | `GET /auth-config` → `AuthConfig` (captcha, branding, card layout; no token) |
 | `verifyEmailApi(projectId, { token, captchaToken }, apiBaseUrl?)` | `POST /auth/verify-email` |
+| `resetPasswordApi(projectId, { token, password, captchaToken }, apiBaseUrl?)` | `POST /auth/reset-password` |
+| `getCurrenciesApi(projectId, apiBaseUrl?)` | `GET /currency` → `ProjectCurrency[]` |
 | `getUser(projectId, token, apiBaseUrl?)` | `GET /me` (raw envelope) |
 | `getUserProfile(projectId, token, apiBaseUrl?)` | `GET /me` → `MappedProfile` |
 | `getUserWallet(projectId, token, apiBaseUrl?)` | `GET /me` → `UserWallets` |