authmi 1.1.0 → 1.2.0

package/dist/{chunk-EAK7C6YO.mjs → chunk-DMNUO422.mjs}

@@ -81,6 +81,22 @@ var LocalStorageTokenStorage = class {
   }
 };
 
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
 // src/types.ts
 var AuthMiError = class extends Error {
   constructor(message, code, statusCode) {
@@ -103,7 +119,7 @@ var ScopeError = class extends AuthMiError {
 var AuthMiClient = class {
   constructor(config, options) {
     this.configProvider = config;
-    this.storage = options?.storage ?? new LocalStorageTokenStorage();
+    this.storage = options?.storage ?? (typeof window !== "undefined" ? new LocalStorageTokenStorage() : new MemoryTokenStorage());
     this.cache = options?.cache || null;
   }
   /** Resolve current config (supports lazy evaluation) */
@@ -111,7 +127,7 @@ var AuthMiClient = class {
     return resolveConfig(this.configProvider);
   }
   // ============ HTTP plumbing ============
-  async request(endpoint, options = {}, requireUserToken = false) {
+  async request(endpoint, options = {}, requireUserToken = false, requireServiceAuth = true) {
     const cfg = this.config;
     const url = `${cfg.baseUrl}${endpoint}`;
     const headers = {
@@ -122,9 +138,10 @@ var AuthMiClient = class {
       if (requireUserToken) {
         const token = await this.storage.getToken();
         if (token) headers["Authorization"] = `Bearer ${token}`;
-      } else if (cfg.clientId && cfg.clientSecret) {
+      } else if (requireServiceAuth && cfg.clientId && cfg.clientSecret) {
         headers["Authorization"] = `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`;
-      } else if (cfg.apiKey) {
+        headers["X-Service-ID"] = cfg.serviceId || cfg.clientId;
+      } else if (requireServiceAuth && cfg.apiKey) {
         headers["Authorization"] = `Bearer ${cfg.apiKey}`;
       }
     }
@@ -182,7 +199,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/signup", {
       method: "POST",
       body: JSON.stringify(credentials)
-    });
+    }, false, false);
     return this.mapAuthToken(response);
   }
   async login(credentials) {
@@ -196,7 +213,7 @@ var AuthMiClient = class {
         expires_in_hours: credentials.expiresInHours || cfg.defaultTokenExpiry,
         scopes: credentials.scopes
       })
-    });
+    }, false, false);
     const token = this.mapAuthToken(response);
     this.setAccessToken(token.accessToken);
     return token;
@@ -225,38 +242,38 @@ var AuthMiClient = class {
     return token;
   }
   async getMe() {
-    const response = await this.request("/api/v1/auth/me");
+    const response = await this.request("/api/v1/auth/me", {}, true);
     return { userId: response.user_id, email: response.email, name: response.name, createdAt: response.created_at };
   }
   async forgotPassword(request) {
     return this.request("/api/v1/auth/forgot-password", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    });
+    }, false, false);
   }
   async resetPassword(request) {
     return this.request("/api/v1/auth/reset-password", {
       method: "POST",
       body: JSON.stringify({ token: request.token, new_password: request.newPassword })
-    });
+    }, false, false);
   }
   async verifyEmail(request) {
     return this.request("/api/v1/auth/verify-email", {
       method: "POST",
       body: JSON.stringify({ token: request.token })
-    });
+    }, false, false);
   }
   async resendVerification(request) {
     return this.request("/api/v1/auth/resend-verification", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    });
+    }, false, false);
   }
   async deactivateAccount(password) {
     await this.request("/api/v1/auth/deactivate", {
       method: "POST",
       body: JSON.stringify({ password })
-    });
+    }, true, false);
   }
   mapAuthToken(raw) {
     return {
@@ -279,7 +296,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/oauth/initiate", {
       method: "POST",
       body: JSON.stringify({ provider, redirectUri, client_id: cfg.serviceId || cfg.clientId })
-    });
+    }, false, false);
     return response.url;
   }
   handleOAuthCallback(url) {
@@ -300,13 +317,13 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/saml/initiate", {
       method: "POST",
       body: JSON.stringify({ email: request.email, redirect_uri: request.redirectUri })
-    });
+    }, false, false);
   }
   async parseSamlMetadata(xml) {
     return this.request("/api/v1/auth/saml/parse-metadata", {
       method: "POST",
       body: JSON.stringify({ metadata_xml: xml })
-    });
+    }, false, false);
   }
   async listSamlConnections() {
     const response = await this.request("/api/v1/auth/saml/connections");
@@ -325,28 +342,28 @@ var AuthMiClient = class {
   }
   // ============ 2FA ============
   async setup2fa() {
-    return this.request("/api/v1/auth/2fa/setup", { method: "POST" });
+    return this.request("/api/v1/auth/2fa/setup", { method: "POST" }, true, false);
   }
   async enable2fa(code) {
     return this.request("/api/v1/auth/2fa/enable", {
       method: "POST",
       body: JSON.stringify({ code })
-    });
+    }, true, false);
   }
   async disable2fa(password) {
     await this.request("/api/v1/auth/2fa/disable", {
       method: "POST",
       body: JSON.stringify({ password })
-    });
+    }, true, false);
   }
   async regenerateBackupCodes() {
-    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" });
+    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" }, true, false);
   }
   async challenge2fa(request) {
     return this.request("/api/v1/auth/2fa/challenge", {
       method: "POST",
       body: JSON.stringify(request)
-    });
+    }, false, false);
   }
   // ============ Users ============
   async createUser(request) {
@@ -682,6 +699,7 @@ export {
   __commonJS,
   __toESM,
   LocalStorageTokenStorage,
+  MemoryTokenStorage,
   AuthMiError,
   ScopeError,
   AuthMiClient

package/dist/index.js

@@ -82,6 +82,22 @@ var LocalStorageTokenStorage = class {
   }
 };
 
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
 // src/types.ts
 var AuthMiError = class extends Error {
   constructor(message, code, statusCode) {
@@ -104,7 +120,7 @@ var ScopeError = class extends AuthMiError {
 var AuthMiClient = class {
   constructor(config, options) {
     this.configProvider = config;
-    this.storage = options?.storage ?? new LocalStorageTokenStorage();
+    this.storage = options?.storage ?? (typeof window !== "undefined" ? new LocalStorageTokenStorage() : new MemoryTokenStorage());
     this.cache = options?.cache || null;
   }
   /** Resolve current config (supports lazy evaluation) */
@@ -112,7 +128,7 @@ var AuthMiClient = class {
     return resolveConfig(this.configProvider);
   }
   // ============ HTTP plumbing ============
-  async request(endpoint, options = {}, requireUserToken = false) {
+  async request(endpoint, options = {}, requireUserToken = false, requireServiceAuth = true) {
     const cfg = this.config;
     const url = `${cfg.baseUrl}${endpoint}`;
     const headers = {
@@ -123,9 +139,10 @@ var AuthMiClient = class {
       if (requireUserToken) {
         const token = await this.storage.getToken();
         if (token) headers["Authorization"] = `Bearer ${token}`;
-      } else if (cfg.clientId && cfg.clientSecret) {
+      } else if (requireServiceAuth && cfg.clientId && cfg.clientSecret) {
         headers["Authorization"] = `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`;
-      } else if (cfg.apiKey) {
+        headers["X-Service-ID"] = cfg.serviceId || cfg.clientId;
+      } else if (requireServiceAuth && cfg.apiKey) {
         headers["Authorization"] = `Bearer ${cfg.apiKey}`;
       }
     }
@@ -183,7 +200,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/signup", {
       method: "POST",
       body: JSON.stringify(credentials)
-    });
+    }, false, false);
     return this.mapAuthToken(response);
   }
   async login(credentials) {
@@ -197,7 +214,7 @@ var AuthMiClient = class {
         expires_in_hours: credentials.expiresInHours || cfg.defaultTokenExpiry,
         scopes: credentials.scopes
       })
-    });
+    }, false, false);
     const token = this.mapAuthToken(response);
     this.setAccessToken(token.accessToken);
     return token;
@@ -226,38 +243,38 @@ var AuthMiClient = class {
     return token;
   }
   async getMe() {
-    const response = await this.request("/api/v1/auth/me");
+    const response = await this.request("/api/v1/auth/me", {}, true);
     return { userId: response.user_id, email: response.email, name: response.name, createdAt: response.created_at };
   }
   async forgotPassword(request) {
     return this.request("/api/v1/auth/forgot-password", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    });
+    }, false, false);
   }
   async resetPassword(request) {
     return this.request("/api/v1/auth/reset-password", {
       method: "POST",
       body: JSON.stringify({ token: request.token, new_password: request.newPassword })
-    });
+    }, false, false);
   }
   async verifyEmail(request) {
     return this.request("/api/v1/auth/verify-email", {
       method: "POST",
       body: JSON.stringify({ token: request.token })
-    });
+    }, false, false);
   }
   async resendVerification(request) {
     return this.request("/api/v1/auth/resend-verification", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    });
+    }, false, false);
   }
   async deactivateAccount(password) {
     await this.request("/api/v1/auth/deactivate", {
       method: "POST",
       body: JSON.stringify({ password })
-    });
+    }, true, false);
   }
   mapAuthToken(raw) {
     return {
@@ -280,7 +297,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/oauth/initiate", {
       method: "POST",
       body: JSON.stringify({ provider, redirectUri, client_id: cfg.serviceId || cfg.clientId })
-    });
+    }, false, false);
     return response.url;
   }
   handleOAuthCallback(url) {
@@ -301,13 +318,13 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/saml/initiate", {
       method: "POST",
       body: JSON.stringify({ email: request.email, redirect_uri: request.redirectUri })
-    });
+    }, false, false);
   }
   async parseSamlMetadata(xml) {
     return this.request("/api/v1/auth/saml/parse-metadata", {
       method: "POST",
       body: JSON.stringify({ metadata_xml: xml })
-    });
+    }, false, false);
   }
   async listSamlConnections() {
     const response = await this.request("/api/v1/auth/saml/connections");
@@ -326,28 +343,28 @@ var AuthMiClient = class {
   }
   // ============ 2FA ============
   async setup2fa() {
-    return this.request("/api/v1/auth/2fa/setup", { method: "POST" });
+    return this.request("/api/v1/auth/2fa/setup", { method: "POST" }, true, false);
   }
   async enable2fa(code) {
     return this.request("/api/v1/auth/2fa/enable", {
       method: "POST",
       body: JSON.stringify({ code })
-    });
+    }, true, false);
   }
   async disable2fa(password) {
     await this.request("/api/v1/auth/2fa/disable", {
       method: "POST",
       body: JSON.stringify({ password })
-    });
+    }, true, false);
   }
   async regenerateBackupCodes() {
-    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" });
+    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" }, true, false);
   }
   async challenge2fa(request) {
     return this.request("/api/v1/auth/2fa/challenge", {
       method: "POST",
       body: JSON.stringify(request)
-    });
+    }, false, false);
   }
   // ============ Users ============
   async createUser(request) {
@@ -735,22 +752,6 @@ var CookieTokenStorage = class _CookieTokenStorage {
   }
 };
 
-// src/storage/memory.ts
-var MemoryTokenStorage = class {
-  constructor() {
-    this.token = null;
-  }
-  getToken() {
-    return this.token;
-  }
-  setToken(token) {
-    this.token = token;
-  }
-  removeToken() {
-    this.token = null;
-  }
-};
-
 // src/cache.ts
 var IntrospectCache = class {
   constructor(ttlMs = 6e4) {

package/dist/index.mjs

@@ -2,8 +2,9 @@ import {
   AuthMiClient,
   AuthMiError,
   LocalStorageTokenStorage,
+  MemoryTokenStorage,
   ScopeError
-} from "./chunk-EAK7C6YO.mjs";
+} from "./chunk-DMNUO422.mjs";
 
 // src/storage/cookie.ts
 var CookieTokenStorage = class _CookieTokenStorage {
@@ -62,22 +63,6 @@ var CookieTokenStorage = class _CookieTokenStorage {
   }
 };
 
-// src/storage/memory.ts
-var MemoryTokenStorage = class {
-  constructor() {
-    this.token = null;
-  }
-  getToken() {
-    return this.token;
-  }
-  setToken(token) {
-    this.token = token;
-  }
-  removeToken() {
-    this.token = null;
-  }
-};
-
 // src/cache.ts
 var IntrospectCache = class {
   constructor(ttlMs = 6e4) {

package/dist/next.js

@@ -4510,6 +4510,22 @@ var LocalStorageTokenStorage = class {
   }
 };
 
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
 // src/types.ts
 var AuthMiError = class extends Error {
   constructor(message, code, statusCode) {
@@ -4532,7 +4548,7 @@ var ScopeError = class extends AuthMiError {
 var AuthMiClient = class {
   constructor(config, options) {
     this.configProvider = config;
-    this.storage = options?.storage ?? new LocalStorageTokenStorage();
+    this.storage = options?.storage ?? (typeof window !== "undefined" ? new LocalStorageTokenStorage() : new MemoryTokenStorage());
     this.cache = options?.cache || null;
   }
   /** Resolve current config (supports lazy evaluation) */
@@ -4540,7 +4556,7 @@ var AuthMiClient = class {
     return resolveConfig(this.configProvider);
   }
   // ============ HTTP plumbing ============
-  async request(endpoint, options = {}, requireUserToken = false) {
+  async request(endpoint, options = {}, requireUserToken = false, requireServiceAuth = true) {
     const cfg = this.config;
     const url = `${cfg.baseUrl}${endpoint}`;
     const headers = {
@@ -4551,9 +4567,10 @@ var AuthMiClient = class {
       if (requireUserToken) {
         const token = await this.storage.getToken();
         if (token) headers["Authorization"] = `Bearer ${token}`;
-      } else if (cfg.clientId && cfg.clientSecret) {
+      } else if (requireServiceAuth && cfg.clientId && cfg.clientSecret) {
         headers["Authorization"] = `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`;
-      } else if (cfg.apiKey) {
+        headers["X-Service-ID"] = cfg.serviceId || cfg.clientId;
+      } else if (requireServiceAuth && cfg.apiKey) {
         headers["Authorization"] = `Bearer ${cfg.apiKey}`;
       }
     }
@@ -4611,7 +4628,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/signup", {
       method: "POST",
       body: JSON.stringify(credentials)
-    });
+    }, false, false);
     return this.mapAuthToken(response);
   }
   async login(credentials) {
@@ -4625,7 +4642,7 @@ var AuthMiClient = class {
         expires_in_hours: credentials.expiresInHours || cfg.defaultTokenExpiry,
         scopes: credentials.scopes
       })
-    });
+    }, false, false);
     const token = this.mapAuthToken(response);
     this.setAccessToken(token.accessToken);
     return token;
@@ -4654,38 +4671,38 @@ var AuthMiClient = class {
     return token;
   }
   async getMe() {
-    const response = await this.request("/api/v1/auth/me");
+    const response = await this.request("/api/v1/auth/me", {}, true);
     return { userId: response.user_id, email: response.email, name: response.name, createdAt: response.created_at };
   }
   async forgotPassword(request) {
     return this.request("/api/v1/auth/forgot-password", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    });
+    }, false, false);
   }
   async resetPassword(request) {
     return this.request("/api/v1/auth/reset-password", {
       method: "POST",
       body: JSON.stringify({ token: request.token, new_password: request.newPassword })
-    });
+    }, false, false);
   }
   async verifyEmail(request) {
     return this.request("/api/v1/auth/verify-email", {
       method: "POST",
       body: JSON.stringify({ token: request.token })
-    });
+    }, false, false);
   }
   async resendVerification(request) {
     return this.request("/api/v1/auth/resend-verification", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    });
+    }, false, false);
   }
   async deactivateAccount(password) {
     await this.request("/api/v1/auth/deactivate", {
       method: "POST",
       body: JSON.stringify({ password })
-    });
+    }, true, false);
   }
   mapAuthToken(raw) {
     return {
@@ -4708,7 +4725,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/oauth/initiate", {
       method: "POST",
       body: JSON.stringify({ provider, redirectUri, client_id: cfg.serviceId || cfg.clientId })
-    });
+    }, false, false);
     return response.url;
   }
   handleOAuthCallback(url) {
@@ -4729,13 +4746,13 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/saml/initiate", {
       method: "POST",
       body: JSON.stringify({ email: request.email, redirect_uri: request.redirectUri })
-    });
+    }, false, false);
   }
   async parseSamlMetadata(xml) {
     return this.request("/api/v1/auth/saml/parse-metadata", {
       method: "POST",
       body: JSON.stringify({ metadata_xml: xml })
-    });
+    }, false, false);
   }
   async listSamlConnections() {
     const response = await this.request("/api/v1/auth/saml/connections");
@@ -4754,28 +4771,28 @@ var AuthMiClient = class {
   }
   // ============ 2FA ============
   async setup2fa() {
-    return this.request("/api/v1/auth/2fa/setup", { method: "POST" });
+    return this.request("/api/v1/auth/2fa/setup", { method: "POST" }, true, false);
   }
   async enable2fa(code) {
     return this.request("/api/v1/auth/2fa/enable", {
       method: "POST",
       body: JSON.stringify({ code })
-    });
+    }, true, false);
   }
   async disable2fa(password) {
     await this.request("/api/v1/auth/2fa/disable", {
       method: "POST",
       body: JSON.stringify({ password })
-    });
+    }, true, false);
   }
   async regenerateBackupCodes() {
-    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" });
+    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" }, true, false);
   }
   async challenge2fa(request) {
     return this.request("/api/v1/auth/2fa/challenge", {
       method: "POST",
       body: JSON.stringify(request)
-    });
+    }, false, false);
   }
   // ============ Users ============
   async createUser(request) {

package/dist/next.mjs

@@ -5,7 +5,7 @@ import {
   __commonJS,
   __require,
   __toESM
-} from "./chunk-EAK7C6YO.mjs";
+} from "./chunk-DMNUO422.mjs";
 
 // ../../node_modules/next/dist/shared/lib/i18n/detect-domain-locale.js
 var require_detect_domain_locale = __commonJS({

package/dist/react.js

@@ -86,6 +86,22 @@ var LocalStorageTokenStorage = class {
   }
 };
 
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
 // src/types.ts
 var AuthMiError = class extends Error {
   constructor(message, code, statusCode) {
@@ -108,7 +124,7 @@ var ScopeError = class extends AuthMiError {
 var AuthMiClient = class {
   constructor(config, options) {
     this.configProvider = config;
-    this.storage = options?.storage ?? new LocalStorageTokenStorage();
+    this.storage = options?.storage ?? (typeof window !== "undefined" ? new LocalStorageTokenStorage() : new MemoryTokenStorage());
     this.cache = options?.cache || null;
   }
   /** Resolve current config (supports lazy evaluation) */
@@ -116,7 +132,7 @@ var AuthMiClient = class {
     return resolveConfig(this.configProvider);
   }
   // ============ HTTP plumbing ============
-  async request(endpoint, options = {}, requireUserToken = false) {
+  async request(endpoint, options = {}, requireUserToken = false, requireServiceAuth = true) {
     const cfg = this.config;
     const url = `${cfg.baseUrl}${endpoint}`;
     const headers = {
@@ -127,9 +143,10 @@ var AuthMiClient = class {
       if (requireUserToken) {
         const token = await this.storage.getToken();
         if (token) headers["Authorization"] = `Bearer ${token}`;
-      } else if (cfg.clientId && cfg.clientSecret) {
+      } else if (requireServiceAuth && cfg.clientId && cfg.clientSecret) {
         headers["Authorization"] = `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`;
-      } else if (cfg.apiKey) {
+        headers["X-Service-ID"] = cfg.serviceId || cfg.clientId;
+      } else if (requireServiceAuth && cfg.apiKey) {
         headers["Authorization"] = `Bearer ${cfg.apiKey}`;
       }
     }
@@ -187,7 +204,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/signup", {
       method: "POST",
       body: JSON.stringify(credentials)
-    });
+    }, false, false);
     return this.mapAuthToken(response);
   }
   async login(credentials) {
@@ -201,7 +218,7 @@ var AuthMiClient = class {
         expires_in_hours: credentials.expiresInHours || cfg.defaultTokenExpiry,
         scopes: credentials.scopes
       })
-    });
+    }, false, false);
     const token = this.mapAuthToken(response);
     this.setAccessToken(token.accessToken);
     return token;
@@ -230,38 +247,38 @@ var AuthMiClient = class {
     return token;
   }
   async getMe() {
-    const response = await this.request("/api/v1/auth/me");
+    const response = await this.request("/api/v1/auth/me", {}, true);
     return { userId: response.user_id, email: response.email, name: response.name, createdAt: response.created_at };
   }
   async forgotPassword(request) {
     return this.request("/api/v1/auth/forgot-password", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    });
+    }, false, false);
   }
   async resetPassword(request) {
     return this.request("/api/v1/auth/reset-password", {
       method: "POST",
       body: JSON.stringify({ token: request.token, new_password: request.newPassword })
-    });
+    }, false, false);
   }
   async verifyEmail(request) {
     return this.request("/api/v1/auth/verify-email", {
       method: "POST",
       body: JSON.stringify({ token: request.token })
-    });
+    }, false, false);
   }
   async resendVerification(request) {
     return this.request("/api/v1/auth/resend-verification", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    });
+    }, false, false);
   }
   async deactivateAccount(password) {
     await this.request("/api/v1/auth/deactivate", {
       method: "POST",
       body: JSON.stringify({ password })
-    });
+    }, true, false);
   }
   mapAuthToken(raw) {
     return {
@@ -284,7 +301,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/oauth/initiate", {
       method: "POST",
       body: JSON.stringify({ provider, redirectUri, client_id: cfg.serviceId || cfg.clientId })
-    });
+    }, false, false);
     return response.url;
   }
   handleOAuthCallback(url) {
@@ -305,13 +322,13 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/saml/initiate", {
       method: "POST",
       body: JSON.stringify({ email: request.email, redirect_uri: request.redirectUri })
-    });
+    }, false, false);
   }
   async parseSamlMetadata(xml) {
     return this.request("/api/v1/auth/saml/parse-metadata", {
       method: "POST",
       body: JSON.stringify({ metadata_xml: xml })
-    });
+    }, false, false);
   }
   async listSamlConnections() {
     const response = await this.request("/api/v1/auth/saml/connections");
@@ -330,28 +347,28 @@ var AuthMiClient = class {
   }
   // ============ 2FA ============
   async setup2fa() {
-    return this.request("/api/v1/auth/2fa/setup", { method: "POST" });
+    return this.request("/api/v1/auth/2fa/setup", { method: "POST" }, true, false);
   }
   async enable2fa(code) {
     return this.request("/api/v1/auth/2fa/enable", {
       method: "POST",
       body: JSON.stringify({ code })
-    });
+    }, true, false);
   }
   async disable2fa(password) {
     await this.request("/api/v1/auth/2fa/disable", {
       method: "POST",
       body: JSON.stringify({ password })
-    });
+    }, true, false);
   }
   async regenerateBackupCodes() {
-    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" });
+    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" }, true, false);
   }
   async challenge2fa(request) {
     return this.request("/api/v1/auth/2fa/challenge", {
       method: "POST",
       body: JSON.stringify(request)
-    });
+    }, false, false);
   }
   // ============ Users ============
   async createUser(request) {

package/dist/react.mjs

@@ -2,7 +2,7 @@ import {
   AuthMiClient,
   AuthMiError,
   ScopeError
-} from "./chunk-EAK7C6YO.mjs";
+} from "./chunk-DMNUO422.mjs";
 
 // src/react.tsx
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "authmi",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Official client library for Auth Mi - Multi-tenant authentication-as-a-service",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",