authmi 1.1.0 → 1.3.0

package/dist/{chunk-EAK7C6YO.mjs → chunk-LBMBSWSF.mjs}

@@ -33,12 +33,29 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 // src/config.ts
 function resolveConfig(provider) {
   const raw = typeof provider === "function" ? provider() : provider;
+  let clientId = raw.clientId ?? "";
+  let clientSecret = raw.clientSecret ?? "";
+  let serviceId = raw.serviceId ?? "";
+  const token = raw.token ?? "";
+  if (raw.token) {
+    const dot = raw.token.indexOf(".");
+    if (dot > 0) {
+      const sid = raw.token.slice(0, dot);
+      const secret = raw.token.slice(dot + 1);
+      if (sid && secret) {
+        clientId = sid;
+        clientSecret = secret;
+        if (!serviceId) serviceId = sid;
+      }
+    }
+  }
   return {
     baseUrl: raw.baseUrl,
     apiKey: raw.apiKey ?? "",
-    serviceId: raw.serviceId ?? "",
-    clientId: raw.clientId ?? "",
-    clientSecret: raw.clientSecret ?? "",
+    serviceId,
+    clientId,
+    clientSecret,
+    token,
     defaultTokenExpiry: raw.defaultTokenExpiry ?? 24
   };
 }
@@ -81,6 +98,22 @@ var LocalStorageTokenStorage = class {
   }
 };
 
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
 // src/types.ts
 var AuthMiError = class extends Error {
   constructor(message, code, statusCode) {
@@ -103,7 +136,7 @@ var ScopeError = class extends AuthMiError {
 var AuthMiClient = class {
   constructor(config, options) {
     this.configProvider = config;
-    this.storage = options?.storage ?? new LocalStorageTokenStorage();
+    this.storage = options?.storage ?? (typeof window !== "undefined" ? new LocalStorageTokenStorage() : new MemoryTokenStorage());
     this.cache = options?.cache || null;
   }
   /** Resolve current config (supports lazy evaluation) */
@@ -160,7 +193,7 @@ var AuthMiClient = class {
     this.configProvider = { ...current, ...config };
   }
   getConfig() {
-    const { apiKey: _, clientSecret: __, ...rest } = resolveConfig(this.configProvider);
+    const { apiKey: _, clientSecret: __, token: ___, ...rest } = resolveConfig(this.configProvider);
     return rest;
   }
   // ============ Token Management ============
@@ -225,7 +258,7 @@ var AuthMiClient = class {
     return token;
   }
   async getMe() {
-    const response = await this.request("/api/v1/auth/me");
+    const response = await this.request("/api/v1/auth/me", {}, true);
     return { userId: response.user_id, email: response.email, name: response.name, createdAt: response.created_at };
   }
   async forgotPassword(request) {
@@ -641,6 +674,18 @@ var AuthMiClient = class {
       { method: "POST" }
     );
   }
+  /** Get the combined service token — a single string combining serviceId and
+   * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+   * instead of providing serviceId and clientSecret separately.
+   *
+   * Format returned: "{serviceId}.{clientSecret}"
+   */
+  async getServiceToken(serviceId) {
+    return this.request(
+      `/api/v1/services/${encodeURIComponent(serviceId)}/token`,
+      { method: "POST" }
+    ).then((r) => ({ token: r.token, serviceId: r.service_id, serviceName: r.service_name }));
+  }
   // ============ JWKS ============
   async getJwks(serviceId) {
     return this.request(`/.well-known/jwks.json?service_id=${encodeURIComponent(serviceId)}`);
@@ -682,6 +727,7 @@ export {
   __commonJS,
   __toESM,
   LocalStorageTokenStorage,
+  MemoryTokenStorage,
   AuthMiError,
   ScopeError,
   AuthMiClient

package/dist/{client-DmZsG2xs.d.mts → client-ClqDnphI.d.mts}

@@ -9,6 +9,17 @@ interface AuthMiConfig {
     clientId?: string;
     /** Client Secret for Basic auth */
     clientSecret?: string;
+    /**
+     * Combined service token — alternative to providing serviceId+clientSecret
+     * (or clientId+clientSecret) separately.
+     *
+     * Format:  "{serviceId}.{clientSecret}"
+     * Example: "svc-lightssl.cs-a1b2c3d4e5f6..."
+     *
+     * The SDK splits the token on the first '.' to extract the service ID
+     * and the client secret, then uses Basic auth as usual.
+     */
+    token?: string;
     /** Default token expiration in hours (default: 24) */
     defaultTokenExpiry?: number;
 }
@@ -318,7 +329,7 @@ declare class AuthMiClient {
     private get config();
     private request;
     configure(config: Partial<AuthMiConfig>): void;
-    getConfig(): Omit<AuthMiConfig, "apiKey" | "clientSecret">;
+    getConfig(): Omit<AuthMiConfig, "apiKey" | "clientSecret" | "token">;
     getAccessToken(): Promise<string | null>;
     setAccessToken(token: string): void;
     clearAccessToken(): void;
@@ -398,6 +409,17 @@ declare class AuthMiClient {
     rotateClientSecret(serviceId: string): Promise<{
         clientSecret: string;
     }>;
+    /** Get the combined service token — a single string combining serviceId and
+     * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+     * instead of providing serviceId and clientSecret separately.
+     *
+     * Format returned: "{serviceId}.{clientSecret}"
+     */
+    getServiceToken(serviceId: string): Promise<{
+        token: string;
+        serviceId: string;
+        serviceName: string;
+    }>;
     getJwks(serviceId: string): Promise<JwksResponse>;
     onboardService(request: OnboardRequest, masterAdminKey: string): Promise<OnboardResponse>;
     deleteService(serviceId: string, masterAdminKey: string): Promise<void>;

package/dist/{client-DmZsG2xs.d.ts → client-ClqDnphI.d.ts}

@@ -9,6 +9,17 @@ interface AuthMiConfig {
     clientId?: string;
     /** Client Secret for Basic auth */
     clientSecret?: string;
+    /**
+     * Combined service token — alternative to providing serviceId+clientSecret
+     * (or clientId+clientSecret) separately.
+     *
+     * Format:  "{serviceId}.{clientSecret}"
+     * Example: "svc-lightssl.cs-a1b2c3d4e5f6..."
+     *
+     * The SDK splits the token on the first '.' to extract the service ID
+     * and the client secret, then uses Basic auth as usual.
+     */
+    token?: string;
     /** Default token expiration in hours (default: 24) */
     defaultTokenExpiry?: number;
 }
@@ -318,7 +329,7 @@ declare class AuthMiClient {
     private get config();
     private request;
     configure(config: Partial<AuthMiConfig>): void;
-    getConfig(): Omit<AuthMiConfig, "apiKey" | "clientSecret">;
+    getConfig(): Omit<AuthMiConfig, "apiKey" | "clientSecret" | "token">;
     getAccessToken(): Promise<string | null>;
     setAccessToken(token: string): void;
     clearAccessToken(): void;
@@ -398,6 +409,17 @@ declare class AuthMiClient {
     rotateClientSecret(serviceId: string): Promise<{
         clientSecret: string;
     }>;
+    /** Get the combined service token — a single string combining serviceId and
+     * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+     * instead of providing serviceId and clientSecret separately.
+     *
+     * Format returned: "{serviceId}.{clientSecret}"
+     */
+    getServiceToken(serviceId: string): Promise<{
+        token: string;
+        serviceId: string;
+        serviceName: string;
+    }>;
     getJwks(serviceId: string): Promise<JwksResponse>;
     onboardService(request: OnboardRequest, masterAdminKey: string): Promise<OnboardResponse>;
     deleteService(serviceId: string, masterAdminKey: string): Promise<void>;

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { T as TokenStorage } from './client-DmZsG2xs.mjs';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, d as AuthMiConfig, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, i as ConfigProvider, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, I as IntrospectCache, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.mjs';
+import { T as TokenStorage } from './client-ClqDnphI.mjs';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, d as AuthMiConfig, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, i as ConfigProvider, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, I as IntrospectCache, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.mjs';
 
 declare class LocalStorageTokenStorage implements TokenStorage {
     private canAccess;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { T as TokenStorage } from './client-DmZsG2xs.js';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, d as AuthMiConfig, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, i as ConfigProvider, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, I as IntrospectCache, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.js';
+import { T as TokenStorage } from './client-ClqDnphI.js';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, d as AuthMiConfig, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, i as ConfigProvider, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, I as IntrospectCache, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.js';
 
 declare class LocalStorageTokenStorage implements TokenStorage {
     private canAccess;

package/dist/index.js

@@ -34,12 +34,29 @@ module.exports = __toCommonJS(index_exports);
 // src/config.ts
 function resolveConfig(provider) {
   const raw = typeof provider === "function" ? provider() : provider;
+  let clientId = raw.clientId ?? "";
+  let clientSecret = raw.clientSecret ?? "";
+  let serviceId = raw.serviceId ?? "";
+  const token = raw.token ?? "";
+  if (raw.token) {
+    const dot = raw.token.indexOf(".");
+    if (dot > 0) {
+      const sid = raw.token.slice(0, dot);
+      const secret = raw.token.slice(dot + 1);
+      if (sid && secret) {
+        clientId = sid;
+        clientSecret = secret;
+        if (!serviceId) serviceId = sid;
+      }
+    }
+  }
   return {
     baseUrl: raw.baseUrl,
     apiKey: raw.apiKey ?? "",
-    serviceId: raw.serviceId ?? "",
-    clientId: raw.clientId ?? "",
-    clientSecret: raw.clientSecret ?? "",
+    serviceId,
+    clientId,
+    clientSecret,
+    token,
     defaultTokenExpiry: raw.defaultTokenExpiry ?? 24
   };
 }
@@ -82,6 +99,22 @@ var LocalStorageTokenStorage = class {
   }
 };
 
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
 // src/types.ts
 var AuthMiError = class extends Error {
   constructor(message, code, statusCode) {
@@ -104,7 +137,7 @@ var ScopeError = class extends AuthMiError {
 var AuthMiClient = class {
   constructor(config, options) {
     this.configProvider = config;
-    this.storage = options?.storage ?? new LocalStorageTokenStorage();
+    this.storage = options?.storage ?? (typeof window !== "undefined" ? new LocalStorageTokenStorage() : new MemoryTokenStorage());
     this.cache = options?.cache || null;
   }
   /** Resolve current config (supports lazy evaluation) */
@@ -161,7 +194,7 @@ var AuthMiClient = class {
     this.configProvider = { ...current, ...config };
   }
   getConfig() {
-    const { apiKey: _, clientSecret: __, ...rest } = resolveConfig(this.configProvider);
+    const { apiKey: _, clientSecret: __, token: ___, ...rest } = resolveConfig(this.configProvider);
     return rest;
   }
   // ============ Token Management ============
@@ -226,7 +259,7 @@ var AuthMiClient = class {
     return token;
   }
   async getMe() {
-    const response = await this.request("/api/v1/auth/me");
+    const response = await this.request("/api/v1/auth/me", {}, true);
     return { userId: response.user_id, email: response.email, name: response.name, createdAt: response.created_at };
   }
   async forgotPassword(request) {
@@ -642,6 +675,18 @@ var AuthMiClient = class {
       { method: "POST" }
     );
   }
+  /** Get the combined service token — a single string combining serviceId and
+   * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+   * instead of providing serviceId and clientSecret separately.
+   *
+   * Format returned: "{serviceId}.{clientSecret}"
+   */
+  async getServiceToken(serviceId) {
+    return this.request(
+      `/api/v1/services/${encodeURIComponent(serviceId)}/token`,
+      { method: "POST" }
+    ).then((r) => ({ token: r.token, serviceId: r.service_id, serviceName: r.service_name }));
+  }
   // ============ JWKS ============
   async getJwks(serviceId) {
     return this.request(`/.well-known/jwks.json?service_id=${encodeURIComponent(serviceId)}`);
@@ -735,22 +780,6 @@ var CookieTokenStorage = class _CookieTokenStorage {
   }
 };
 
-// src/storage/memory.ts
-var MemoryTokenStorage = class {
-  constructor() {
-    this.token = null;
-  }
-  getToken() {
-    return this.token;
-  }
-  setToken(token) {
-    this.token = token;
-  }
-  removeToken() {
-    this.token = null;
-  }
-};
-
 // src/cache.ts
 var IntrospectCache = class {
   constructor(ttlMs = 6e4) {

package/dist/index.mjs

@@ -2,8 +2,9 @@ import {
   AuthMiClient,
   AuthMiError,
   LocalStorageTokenStorage,
+  MemoryTokenStorage,
   ScopeError
-} from "./chunk-EAK7C6YO.mjs";
+} from "./chunk-LBMBSWSF.mjs";
 
 // src/storage/cookie.ts
 var CookieTokenStorage = class _CookieTokenStorage {
@@ -62,22 +63,6 @@ var CookieTokenStorage = class _CookieTokenStorage {
   }
 };
 
-// src/storage/memory.ts
-var MemoryTokenStorage = class {
-  constructor() {
-    this.token = null;
-  }
-  getToken() {
-    return this.token;
-  }
-  setToken(token) {
-    this.token = token;
-  }
-  removeToken() {
-    this.token = null;
-  }
-};
-
 // src/cache.ts
 var IntrospectCache = class {
   constructor(ttlMs = 6e4) {

package/dist/next.d.mts

@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.mjs';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.mjs';
 
 interface MiddlewareOptions {
     /** Base URL of Auth Mi service */

package/dist/next.d.ts

@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.js';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.js';
 
 interface MiddlewareOptions {
     /** Base URL of Auth Mi service */

package/dist/next.js

@@ -4462,12 +4462,29 @@ var import_server = __toESM(require_server());
 // src/config.ts
 function resolveConfig(provider) {
   const raw = typeof provider === "function" ? provider() : provider;
+  let clientId = raw.clientId ?? "";
+  let clientSecret = raw.clientSecret ?? "";
+  let serviceId = raw.serviceId ?? "";
+  const token = raw.token ?? "";
+  if (raw.token) {
+    const dot = raw.token.indexOf(".");
+    if (dot > 0) {
+      const sid = raw.token.slice(0, dot);
+      const secret = raw.token.slice(dot + 1);
+      if (sid && secret) {
+        clientId = sid;
+        clientSecret = secret;
+        if (!serviceId) serviceId = sid;
+      }
+    }
+  }
   return {
     baseUrl: raw.baseUrl,
     apiKey: raw.apiKey ?? "",
-    serviceId: raw.serviceId ?? "",
-    clientId: raw.clientId ?? "",
-    clientSecret: raw.clientSecret ?? "",
+    serviceId,
+    clientId,
+    clientSecret,
+    token,
     defaultTokenExpiry: raw.defaultTokenExpiry ?? 24
   };
 }
@@ -4510,6 +4527,22 @@ var LocalStorageTokenStorage = class {
   }
 };
 
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
 // src/types.ts
 var AuthMiError = class extends Error {
   constructor(message, code, statusCode) {
@@ -4532,7 +4565,7 @@ var ScopeError = class extends AuthMiError {
 var AuthMiClient = class {
   constructor(config, options) {
     this.configProvider = config;
-    this.storage = options?.storage ?? new LocalStorageTokenStorage();
+    this.storage = options?.storage ?? (typeof window !== "undefined" ? new LocalStorageTokenStorage() : new MemoryTokenStorage());
     this.cache = options?.cache || null;
   }
   /** Resolve current config (supports lazy evaluation) */
@@ -4589,7 +4622,7 @@ var AuthMiClient = class {
     this.configProvider = { ...current, ...config };
   }
   getConfig() {
-    const { apiKey: _, clientSecret: __, ...rest } = resolveConfig(this.configProvider);
+    const { apiKey: _, clientSecret: __, token: ___, ...rest } = resolveConfig(this.configProvider);
     return rest;
   }
   // ============ Token Management ============
@@ -4654,7 +4687,7 @@ var AuthMiClient = class {
     return token;
   }
   async getMe() {
-    const response = await this.request("/api/v1/auth/me");
+    const response = await this.request("/api/v1/auth/me", {}, true);
     return { userId: response.user_id, email: response.email, name: response.name, createdAt: response.created_at };
   }
   async forgotPassword(request) {
@@ -5070,6 +5103,18 @@ var AuthMiClient = class {
       { method: "POST" }
     );
   }
+  /** Get the combined service token — a single string combining serviceId and
+   * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+   * instead of providing serviceId and clientSecret separately.
+   *
+   * Format returned: "{serviceId}.{clientSecret}"
+   */
+  async getServiceToken(serviceId) {
+    return this.request(
+      `/api/v1/services/${encodeURIComponent(serviceId)}/token`,
+      { method: "POST" }
+    ).then((r) => ({ token: r.token, serviceId: r.service_id, serviceName: r.service_name }));
+  }
   // ============ JWKS ============
   async getJwks(serviceId) {
     return this.request(`/.well-known/jwks.json?service_id=${encodeURIComponent(serviceId)}`);

package/dist/next.mjs

@@ -5,7 +5,7 @@ import {
   __commonJS,
   __require,
   __toESM
-} from "./chunk-EAK7C6YO.mjs";
+} from "./chunk-LBMBSWSF.mjs";
 
 // ../../node_modules/next/dist/shared/lib/i18n/detect-domain-locale.js
 var require_detect_domain_locale = __commonJS({

package/dist/react.d.mts

@@ -1,7 +1,7 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { i as ConfigProvider, h as ClientOptions, G as Setup2FAResult, E as Enable2FAResult, B as BackupCodesResult, C as Challenge2FARequest, f as AuthToken, s as OAuthProvider, c as AuthMiClient, M as User, V as ValidationResult, O as OAuthCallbackResult } from './client-DmZsG2xs.mjs';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, d as AuthMiConfig, e as AuthMiError, g as CheckoutResponse, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, r as OAuthInitiateResponse, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.mjs';
+import { i as ConfigProvider, h as ClientOptions, G as Setup2FAResult, E as Enable2FAResult, B as BackupCodesResult, C as Challenge2FARequest, f as AuthToken, s as OAuthProvider, c as AuthMiClient, M as User, V as ValidationResult, O as OAuthCallbackResult } from './client-ClqDnphI.mjs';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, d as AuthMiConfig, e as AuthMiError, g as CheckoutResponse, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, r as OAuthInitiateResponse, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.mjs';
 
 interface AuthMiContextValue {
     client: AuthMiClient;

package/dist/react.d.ts

@@ -1,7 +1,7 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { i as ConfigProvider, h as ClientOptions, G as Setup2FAResult, E as Enable2FAResult, B as BackupCodesResult, C as Challenge2FARequest, f as AuthToken, s as OAuthProvider, c as AuthMiClient, M as User, V as ValidationResult, O as OAuthCallbackResult } from './client-DmZsG2xs.js';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, d as AuthMiConfig, e as AuthMiError, g as CheckoutResponse, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, r as OAuthInitiateResponse, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.js';
+import { i as ConfigProvider, h as ClientOptions, G as Setup2FAResult, E as Enable2FAResult, B as BackupCodesResult, C as Challenge2FARequest, f as AuthToken, s as OAuthProvider, c as AuthMiClient, M as User, V as ValidationResult, O as OAuthCallbackResult } from './client-ClqDnphI.js';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, d as AuthMiConfig, e as AuthMiError, g as CheckoutResponse, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, r as OAuthInitiateResponse, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.js';
 
 interface AuthMiContextValue {
     client: AuthMiClient;

package/dist/react.js

@@ -38,12 +38,29 @@ var import_react = require("react");
 // src/config.ts
 function resolveConfig(provider) {
   const raw = typeof provider === "function" ? provider() : provider;
+  let clientId = raw.clientId ?? "";
+  let clientSecret = raw.clientSecret ?? "";
+  let serviceId = raw.serviceId ?? "";
+  const token = raw.token ?? "";
+  if (raw.token) {
+    const dot = raw.token.indexOf(".");
+    if (dot > 0) {
+      const sid = raw.token.slice(0, dot);
+      const secret = raw.token.slice(dot + 1);
+      if (sid && secret) {
+        clientId = sid;
+        clientSecret = secret;
+        if (!serviceId) serviceId = sid;
+      }
+    }
+  }
   return {
     baseUrl: raw.baseUrl,
     apiKey: raw.apiKey ?? "",
-    serviceId: raw.serviceId ?? "",
-    clientId: raw.clientId ?? "",
-    clientSecret: raw.clientSecret ?? "",
+    serviceId,
+    clientId,
+    clientSecret,
+    token,
     defaultTokenExpiry: raw.defaultTokenExpiry ?? 24
   };
 }
@@ -86,6 +103,22 @@ var LocalStorageTokenStorage = class {
   }
 };
 
+// src/storage/memory.ts
+var MemoryTokenStorage = class {
+  constructor() {
+    this.token = null;
+  }
+  getToken() {
+    return this.token;
+  }
+  setToken(token) {
+    this.token = token;
+  }
+  removeToken() {
+    this.token = null;
+  }
+};
+
 // src/types.ts
 var AuthMiError = class extends Error {
   constructor(message, code, statusCode) {
@@ -108,7 +141,7 @@ var ScopeError = class extends AuthMiError {
 var AuthMiClient = class {
   constructor(config, options) {
     this.configProvider = config;
-    this.storage = options?.storage ?? new LocalStorageTokenStorage();
+    this.storage = options?.storage ?? (typeof window !== "undefined" ? new LocalStorageTokenStorage() : new MemoryTokenStorage());
     this.cache = options?.cache || null;
   }
   /** Resolve current config (supports lazy evaluation) */
@@ -165,7 +198,7 @@ var AuthMiClient = class {
     this.configProvider = { ...current, ...config };
   }
   getConfig() {
-    const { apiKey: _, clientSecret: __, ...rest } = resolveConfig(this.configProvider);
+    const { apiKey: _, clientSecret: __, token: ___, ...rest } = resolveConfig(this.configProvider);
     return rest;
   }
   // ============ Token Management ============
@@ -230,7 +263,7 @@ var AuthMiClient = class {
     return token;
   }
   async getMe() {
-    const response = await this.request("/api/v1/auth/me");
+    const response = await this.request("/api/v1/auth/me", {}, true);
     return { userId: response.user_id, email: response.email, name: response.name, createdAt: response.created_at };
   }
   async forgotPassword(request) {
@@ -646,6 +679,18 @@ var AuthMiClient = class {
       { method: "POST" }
     );
   }
+  /** Get the combined service token — a single string combining serviceId and
+   * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+   * instead of providing serviceId and clientSecret separately.
+   *
+   * Format returned: "{serviceId}.{clientSecret}"
+   */
+  async getServiceToken(serviceId) {
+    return this.request(
+      `/api/v1/services/${encodeURIComponent(serviceId)}/token`,
+      { method: "POST" }
+    ).then((r) => ({ token: r.token, serviceId: r.service_id, serviceName: r.service_name }));
+  }
   // ============ JWKS ============
   async getJwks(serviceId) {
     return this.request(`/.well-known/jwks.json?service_id=${encodeURIComponent(serviceId)}`);

package/dist/react.mjs

@@ -2,7 +2,7 @@ import {
   AuthMiClient,
   AuthMiError,
   ScopeError
-} from "./chunk-EAK7C6YO.mjs";
+} from "./chunk-LBMBSWSF.mjs";
 
 // src/react.tsx
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "authmi",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Official client library for Auth Mi - Multi-tenant authentication-as-a-service",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",