authmi 1.2.0 → 1.3.0

package/dist/{chunk-DMNUO422.mjs → chunk-LBMBSWSF.mjs}

@@ -33,12 +33,29 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 // src/config.ts
 function resolveConfig(provider) {
   const raw = typeof provider === "function" ? provider() : provider;
+  let clientId = raw.clientId ?? "";
+  let clientSecret = raw.clientSecret ?? "";
+  let serviceId = raw.serviceId ?? "";
+  const token = raw.token ?? "";
+  if (raw.token) {
+    const dot = raw.token.indexOf(".");
+    if (dot > 0) {
+      const sid = raw.token.slice(0, dot);
+      const secret = raw.token.slice(dot + 1);
+      if (sid && secret) {
+        clientId = sid;
+        clientSecret = secret;
+        if (!serviceId) serviceId = sid;
+      }
+    }
+  }
   return {
     baseUrl: raw.baseUrl,
     apiKey: raw.apiKey ?? "",
-    serviceId: raw.serviceId ?? "",
-    clientId: raw.clientId ?? "",
-    clientSecret: raw.clientSecret ?? "",
+    serviceId,
+    clientId,
+    clientSecret,
+    token,
     defaultTokenExpiry: raw.defaultTokenExpiry ?? 24
   };
 }
@@ -127,7 +144,7 @@ var AuthMiClient = class {
     return resolveConfig(this.configProvider);
   }
   // ============ HTTP plumbing ============
-  async request(endpoint, options = {}, requireUserToken = false, requireServiceAuth = true) {
+  async request(endpoint, options = {}, requireUserToken = false) {
     const cfg = this.config;
     const url = `${cfg.baseUrl}${endpoint}`;
     const headers = {
@@ -138,10 +155,9 @@ var AuthMiClient = class {
       if (requireUserToken) {
         const token = await this.storage.getToken();
         if (token) headers["Authorization"] = `Bearer ${token}`;
-      } else if (requireServiceAuth && cfg.clientId && cfg.clientSecret) {
+      } else if (cfg.clientId && cfg.clientSecret) {
         headers["Authorization"] = `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`;
-        headers["X-Service-ID"] = cfg.serviceId || cfg.clientId;
-      } else if (requireServiceAuth && cfg.apiKey) {
+      } else if (cfg.apiKey) {
         headers["Authorization"] = `Bearer ${cfg.apiKey}`;
       }
     }
@@ -177,7 +193,7 @@ var AuthMiClient = class {
     this.configProvider = { ...current, ...config };
   }
   getConfig() {
-    const { apiKey: _, clientSecret: __, ...rest } = resolveConfig(this.configProvider);
+    const { apiKey: _, clientSecret: __, token: ___, ...rest } = resolveConfig(this.configProvider);
     return rest;
   }
   // ============ Token Management ============
@@ -199,7 +215,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/signup", {
       method: "POST",
       body: JSON.stringify(credentials)
-    }, false, false);
+    });
     return this.mapAuthToken(response);
   }
   async login(credentials) {
@@ -213,7 +229,7 @@ var AuthMiClient = class {
         expires_in_hours: credentials.expiresInHours || cfg.defaultTokenExpiry,
         scopes: credentials.scopes
       })
-    }, false, false);
+    });
     const token = this.mapAuthToken(response);
     this.setAccessToken(token.accessToken);
     return token;
@@ -249,31 +265,31 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/forgot-password", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    }, false, false);
+    });
   }
   async resetPassword(request) {
     return this.request("/api/v1/auth/reset-password", {
       method: "POST",
       body: JSON.stringify({ token: request.token, new_password: request.newPassword })
-    }, false, false);
+    });
   }
   async verifyEmail(request) {
     return this.request("/api/v1/auth/verify-email", {
       method: "POST",
       body: JSON.stringify({ token: request.token })
-    }, false, false);
+    });
   }
   async resendVerification(request) {
     return this.request("/api/v1/auth/resend-verification", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    }, false, false);
+    });
   }
   async deactivateAccount(password) {
     await this.request("/api/v1/auth/deactivate", {
       method: "POST",
       body: JSON.stringify({ password })
-    }, true, false);
+    });
   }
   mapAuthToken(raw) {
     return {
@@ -296,7 +312,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/oauth/initiate", {
       method: "POST",
       body: JSON.stringify({ provider, redirectUri, client_id: cfg.serviceId || cfg.clientId })
-    }, false, false);
+    });
     return response.url;
   }
   handleOAuthCallback(url) {
@@ -317,13 +333,13 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/saml/initiate", {
       method: "POST",
       body: JSON.stringify({ email: request.email, redirect_uri: request.redirectUri })
-    }, false, false);
+    });
   }
   async parseSamlMetadata(xml) {
     return this.request("/api/v1/auth/saml/parse-metadata", {
       method: "POST",
       body: JSON.stringify({ metadata_xml: xml })
-    }, false, false);
+    });
   }
   async listSamlConnections() {
     const response = await this.request("/api/v1/auth/saml/connections");
@@ -342,28 +358,28 @@ var AuthMiClient = class {
   }
   // ============ 2FA ============
   async setup2fa() {
-    return this.request("/api/v1/auth/2fa/setup", { method: "POST" }, true, false);
+    return this.request("/api/v1/auth/2fa/setup", { method: "POST" });
   }
   async enable2fa(code) {
     return this.request("/api/v1/auth/2fa/enable", {
       method: "POST",
       body: JSON.stringify({ code })
-    }, true, false);
+    });
   }
   async disable2fa(password) {
     await this.request("/api/v1/auth/2fa/disable", {
       method: "POST",
       body: JSON.stringify({ password })
-    }, true, false);
+    });
   }
   async regenerateBackupCodes() {
-    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" }, true, false);
+    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" });
   }
   async challenge2fa(request) {
     return this.request("/api/v1/auth/2fa/challenge", {
       method: "POST",
       body: JSON.stringify(request)
-    }, false, false);
+    });
   }
   // ============ Users ============
   async createUser(request) {
@@ -658,6 +674,18 @@ var AuthMiClient = class {
       { method: "POST" }
     );
   }
+  /** Get the combined service token — a single string combining serviceId and
+   * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+   * instead of providing serviceId and clientSecret separately.
+   *
+   * Format returned: "{serviceId}.{clientSecret}"
+   */
+  async getServiceToken(serviceId) {
+    return this.request(
+      `/api/v1/services/${encodeURIComponent(serviceId)}/token`,
+      { method: "POST" }
+    ).then((r) => ({ token: r.token, serviceId: r.service_id, serviceName: r.service_name }));
+  }
   // ============ JWKS ============
   async getJwks(serviceId) {
     return this.request(`/.well-known/jwks.json?service_id=${encodeURIComponent(serviceId)}`);

package/dist/{client-DmZsG2xs.d.mts → client-ClqDnphI.d.mts}

@@ -9,6 +9,17 @@ interface AuthMiConfig {
     clientId?: string;
     /** Client Secret for Basic auth */
     clientSecret?: string;
+    /**
+     * Combined service token — alternative to providing serviceId+clientSecret
+     * (or clientId+clientSecret) separately.
+     *
+     * Format:  "{serviceId}.{clientSecret}"
+     * Example: "svc-lightssl.cs-a1b2c3d4e5f6..."
+     *
+     * The SDK splits the token on the first '.' to extract the service ID
+     * and the client secret, then uses Basic auth as usual.
+     */
+    token?: string;
     /** Default token expiration in hours (default: 24) */
     defaultTokenExpiry?: number;
 }
@@ -318,7 +329,7 @@ declare class AuthMiClient {
     private get config();
     private request;
     configure(config: Partial<AuthMiConfig>): void;
-    getConfig(): Omit<AuthMiConfig, "apiKey" | "clientSecret">;
+    getConfig(): Omit<AuthMiConfig, "apiKey" | "clientSecret" | "token">;
     getAccessToken(): Promise<string | null>;
     setAccessToken(token: string): void;
     clearAccessToken(): void;
@@ -398,6 +409,17 @@ declare class AuthMiClient {
     rotateClientSecret(serviceId: string): Promise<{
         clientSecret: string;
     }>;
+    /** Get the combined service token — a single string combining serviceId and
+     * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+     * instead of providing serviceId and clientSecret separately.
+     *
+     * Format returned: "{serviceId}.{clientSecret}"
+     */
+    getServiceToken(serviceId: string): Promise<{
+        token: string;
+        serviceId: string;
+        serviceName: string;
+    }>;
     getJwks(serviceId: string): Promise<JwksResponse>;
     onboardService(request: OnboardRequest, masterAdminKey: string): Promise<OnboardResponse>;
     deleteService(serviceId: string, masterAdminKey: string): Promise<void>;

package/dist/{client-DmZsG2xs.d.ts → client-ClqDnphI.d.ts}

@@ -9,6 +9,17 @@ interface AuthMiConfig {
     clientId?: string;
     /** Client Secret for Basic auth */
     clientSecret?: string;
+    /**
+     * Combined service token — alternative to providing serviceId+clientSecret
+     * (or clientId+clientSecret) separately.
+     *
+     * Format:  "{serviceId}.{clientSecret}"
+     * Example: "svc-lightssl.cs-a1b2c3d4e5f6..."
+     *
+     * The SDK splits the token on the first '.' to extract the service ID
+     * and the client secret, then uses Basic auth as usual.
+     */
+    token?: string;
     /** Default token expiration in hours (default: 24) */
     defaultTokenExpiry?: number;
 }
@@ -318,7 +329,7 @@ declare class AuthMiClient {
     private get config();
     private request;
     configure(config: Partial<AuthMiConfig>): void;
-    getConfig(): Omit<AuthMiConfig, "apiKey" | "clientSecret">;
+    getConfig(): Omit<AuthMiConfig, "apiKey" | "clientSecret" | "token">;
     getAccessToken(): Promise<string | null>;
     setAccessToken(token: string): void;
     clearAccessToken(): void;
@@ -398,6 +409,17 @@ declare class AuthMiClient {
     rotateClientSecret(serviceId: string): Promise<{
         clientSecret: string;
     }>;
+    /** Get the combined service token — a single string combining serviceId and
+     * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+     * instead of providing serviceId and clientSecret separately.
+     *
+     * Format returned: "{serviceId}.{clientSecret}"
+     */
+    getServiceToken(serviceId: string): Promise<{
+        token: string;
+        serviceId: string;
+        serviceName: string;
+    }>;
     getJwks(serviceId: string): Promise<JwksResponse>;
     onboardService(request: OnboardRequest, masterAdminKey: string): Promise<OnboardResponse>;
     deleteService(serviceId: string, masterAdminKey: string): Promise<void>;

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { T as TokenStorage } from './client-DmZsG2xs.mjs';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, d as AuthMiConfig, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, i as ConfigProvider, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, I as IntrospectCache, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.mjs';
+import { T as TokenStorage } from './client-ClqDnphI.mjs';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, d as AuthMiConfig, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, i as ConfigProvider, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, I as IntrospectCache, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.mjs';
 
 declare class LocalStorageTokenStorage implements TokenStorage {
     private canAccess;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { T as TokenStorage } from './client-DmZsG2xs.js';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, d as AuthMiConfig, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, i as ConfigProvider, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, I as IntrospectCache, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.js';
+import { T as TokenStorage } from './client-ClqDnphI.js';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, d as AuthMiConfig, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, i as ConfigProvider, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, I as IntrospectCache, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.js';
 
 declare class LocalStorageTokenStorage implements TokenStorage {
     private canAccess;

package/dist/index.js

@@ -34,12 +34,29 @@ module.exports = __toCommonJS(index_exports);
 // src/config.ts
 function resolveConfig(provider) {
   const raw = typeof provider === "function" ? provider() : provider;
+  let clientId = raw.clientId ?? "";
+  let clientSecret = raw.clientSecret ?? "";
+  let serviceId = raw.serviceId ?? "";
+  const token = raw.token ?? "";
+  if (raw.token) {
+    const dot = raw.token.indexOf(".");
+    if (dot > 0) {
+      const sid = raw.token.slice(0, dot);
+      const secret = raw.token.slice(dot + 1);
+      if (sid && secret) {
+        clientId = sid;
+        clientSecret = secret;
+        if (!serviceId) serviceId = sid;
+      }
+    }
+  }
   return {
     baseUrl: raw.baseUrl,
     apiKey: raw.apiKey ?? "",
-    serviceId: raw.serviceId ?? "",
-    clientId: raw.clientId ?? "",
-    clientSecret: raw.clientSecret ?? "",
+    serviceId,
+    clientId,
+    clientSecret,
+    token,
     defaultTokenExpiry: raw.defaultTokenExpiry ?? 24
   };
 }
@@ -128,7 +145,7 @@ var AuthMiClient = class {
     return resolveConfig(this.configProvider);
   }
   // ============ HTTP plumbing ============
-  async request(endpoint, options = {}, requireUserToken = false, requireServiceAuth = true) {
+  async request(endpoint, options = {}, requireUserToken = false) {
     const cfg = this.config;
     const url = `${cfg.baseUrl}${endpoint}`;
     const headers = {
@@ -139,10 +156,9 @@ var AuthMiClient = class {
       if (requireUserToken) {
         const token = await this.storage.getToken();
         if (token) headers["Authorization"] = `Bearer ${token}`;
-      } else if (requireServiceAuth && cfg.clientId && cfg.clientSecret) {
+      } else if (cfg.clientId && cfg.clientSecret) {
         headers["Authorization"] = `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`;
-        headers["X-Service-ID"] = cfg.serviceId || cfg.clientId;
-      } else if (requireServiceAuth && cfg.apiKey) {
+      } else if (cfg.apiKey) {
         headers["Authorization"] = `Bearer ${cfg.apiKey}`;
       }
     }
@@ -178,7 +194,7 @@ var AuthMiClient = class {
     this.configProvider = { ...current, ...config };
   }
   getConfig() {
-    const { apiKey: _, clientSecret: __, ...rest } = resolveConfig(this.configProvider);
+    const { apiKey: _, clientSecret: __, token: ___, ...rest } = resolveConfig(this.configProvider);
     return rest;
   }
   // ============ Token Management ============
@@ -200,7 +216,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/signup", {
       method: "POST",
       body: JSON.stringify(credentials)
-    }, false, false);
+    });
     return this.mapAuthToken(response);
   }
   async login(credentials) {
@@ -214,7 +230,7 @@ var AuthMiClient = class {
         expires_in_hours: credentials.expiresInHours || cfg.defaultTokenExpiry,
         scopes: credentials.scopes
       })
-    }, false, false);
+    });
     const token = this.mapAuthToken(response);
     this.setAccessToken(token.accessToken);
     return token;
@@ -250,31 +266,31 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/forgot-password", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    }, false, false);
+    });
   }
   async resetPassword(request) {
     return this.request("/api/v1/auth/reset-password", {
       method: "POST",
       body: JSON.stringify({ token: request.token, new_password: request.newPassword })
-    }, false, false);
+    });
   }
   async verifyEmail(request) {
     return this.request("/api/v1/auth/verify-email", {
       method: "POST",
       body: JSON.stringify({ token: request.token })
-    }, false, false);
+    });
   }
   async resendVerification(request) {
     return this.request("/api/v1/auth/resend-verification", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    }, false, false);
+    });
   }
   async deactivateAccount(password) {
     await this.request("/api/v1/auth/deactivate", {
       method: "POST",
       body: JSON.stringify({ password })
-    }, true, false);
+    });
   }
   mapAuthToken(raw) {
     return {
@@ -297,7 +313,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/oauth/initiate", {
       method: "POST",
       body: JSON.stringify({ provider, redirectUri, client_id: cfg.serviceId || cfg.clientId })
-    }, false, false);
+    });
     return response.url;
   }
   handleOAuthCallback(url) {
@@ -318,13 +334,13 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/saml/initiate", {
       method: "POST",
       body: JSON.stringify({ email: request.email, redirect_uri: request.redirectUri })
-    }, false, false);
+    });
   }
   async parseSamlMetadata(xml) {
     return this.request("/api/v1/auth/saml/parse-metadata", {
       method: "POST",
       body: JSON.stringify({ metadata_xml: xml })
-    }, false, false);
+    });
   }
   async listSamlConnections() {
     const response = await this.request("/api/v1/auth/saml/connections");
@@ -343,28 +359,28 @@ var AuthMiClient = class {
   }
   // ============ 2FA ============
   async setup2fa() {
-    return this.request("/api/v1/auth/2fa/setup", { method: "POST" }, true, false);
+    return this.request("/api/v1/auth/2fa/setup", { method: "POST" });
   }
   async enable2fa(code) {
     return this.request("/api/v1/auth/2fa/enable", {
       method: "POST",
       body: JSON.stringify({ code })
-    }, true, false);
+    });
   }
   async disable2fa(password) {
     await this.request("/api/v1/auth/2fa/disable", {
       method: "POST",
       body: JSON.stringify({ password })
-    }, true, false);
+    });
   }
   async regenerateBackupCodes() {
-    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" }, true, false);
+    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" });
   }
   async challenge2fa(request) {
     return this.request("/api/v1/auth/2fa/challenge", {
       method: "POST",
       body: JSON.stringify(request)
-    }, false, false);
+    });
   }
   // ============ Users ============
   async createUser(request) {
@@ -659,6 +675,18 @@ var AuthMiClient = class {
       { method: "POST" }
     );
   }
+  /** Get the combined service token — a single string combining serviceId and
+   * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+   * instead of providing serviceId and clientSecret separately.
+   *
+   * Format returned: "{serviceId}.{clientSecret}"
+   */
+  async getServiceToken(serviceId) {
+    return this.request(
+      `/api/v1/services/${encodeURIComponent(serviceId)}/token`,
+      { method: "POST" }
+    ).then((r) => ({ token: r.token, serviceId: r.service_id, serviceName: r.service_name }));
+  }
   // ============ JWKS ============
   async getJwks(serviceId) {
     return this.request(`/.well-known/jwks.json?service_id=${encodeURIComponent(serviceId)}`);

package/dist/index.mjs

@@ -4,7 +4,7 @@ import {
   LocalStorageTokenStorage,
   MemoryTokenStorage,
   ScopeError
-} from "./chunk-DMNUO422.mjs";
+} from "./chunk-LBMBSWSF.mjs";
 
 // src/storage/cookie.ts
 var CookieTokenStorage = class _CookieTokenStorage {

package/dist/next.d.mts

@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.mjs';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.mjs';
 
 interface MiddlewareOptions {
     /** Base URL of Auth Mi service */

package/dist/next.d.ts

@@ -1,5 +1,5 @@
 import { NextRequest, NextResponse } from 'next/server';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.js';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, c as AuthMiClient, e as AuthMiError, f as AuthToken, B as BackupCodesResult, C as Challenge2FARequest, g as CheckoutResponse, h as ClientOptions, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, E as Enable2FAResult, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, O as OAuthCallbackResult, r as OAuthInitiateResponse, s as OAuthProvider, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, G as Setup2FAResult, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, M as User, V as ValidationResult, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.js';
 
 interface MiddlewareOptions {
     /** Base URL of Auth Mi service */

package/dist/next.js

@@ -4462,12 +4462,29 @@ var import_server = __toESM(require_server());
 // src/config.ts
 function resolveConfig(provider) {
   const raw = typeof provider === "function" ? provider() : provider;
+  let clientId = raw.clientId ?? "";
+  let clientSecret = raw.clientSecret ?? "";
+  let serviceId = raw.serviceId ?? "";
+  const token = raw.token ?? "";
+  if (raw.token) {
+    const dot = raw.token.indexOf(".");
+    if (dot > 0) {
+      const sid = raw.token.slice(0, dot);
+      const secret = raw.token.slice(dot + 1);
+      if (sid && secret) {
+        clientId = sid;
+        clientSecret = secret;
+        if (!serviceId) serviceId = sid;
+      }
+    }
+  }
   return {
     baseUrl: raw.baseUrl,
     apiKey: raw.apiKey ?? "",
-    serviceId: raw.serviceId ?? "",
-    clientId: raw.clientId ?? "",
-    clientSecret: raw.clientSecret ?? "",
+    serviceId,
+    clientId,
+    clientSecret,
+    token,
     defaultTokenExpiry: raw.defaultTokenExpiry ?? 24
   };
 }
@@ -4556,7 +4573,7 @@ var AuthMiClient = class {
     return resolveConfig(this.configProvider);
   }
   // ============ HTTP plumbing ============
-  async request(endpoint, options = {}, requireUserToken = false, requireServiceAuth = true) {
+  async request(endpoint, options = {}, requireUserToken = false) {
     const cfg = this.config;
     const url = `${cfg.baseUrl}${endpoint}`;
     const headers = {
@@ -4567,10 +4584,9 @@ var AuthMiClient = class {
       if (requireUserToken) {
         const token = await this.storage.getToken();
         if (token) headers["Authorization"] = `Bearer ${token}`;
-      } else if (requireServiceAuth && cfg.clientId && cfg.clientSecret) {
+      } else if (cfg.clientId && cfg.clientSecret) {
         headers["Authorization"] = `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`;
-        headers["X-Service-ID"] = cfg.serviceId || cfg.clientId;
-      } else if (requireServiceAuth && cfg.apiKey) {
+      } else if (cfg.apiKey) {
         headers["Authorization"] = `Bearer ${cfg.apiKey}`;
       }
     }
@@ -4606,7 +4622,7 @@ var AuthMiClient = class {
     this.configProvider = { ...current, ...config };
   }
   getConfig() {
-    const { apiKey: _, clientSecret: __, ...rest } = resolveConfig(this.configProvider);
+    const { apiKey: _, clientSecret: __, token: ___, ...rest } = resolveConfig(this.configProvider);
     return rest;
   }
   // ============ Token Management ============
@@ -4628,7 +4644,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/signup", {
       method: "POST",
       body: JSON.stringify(credentials)
-    }, false, false);
+    });
     return this.mapAuthToken(response);
   }
   async login(credentials) {
@@ -4642,7 +4658,7 @@ var AuthMiClient = class {
         expires_in_hours: credentials.expiresInHours || cfg.defaultTokenExpiry,
         scopes: credentials.scopes
       })
-    }, false, false);
+    });
     const token = this.mapAuthToken(response);
     this.setAccessToken(token.accessToken);
     return token;
@@ -4678,31 +4694,31 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/forgot-password", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    }, false, false);
+    });
   }
   async resetPassword(request) {
     return this.request("/api/v1/auth/reset-password", {
       method: "POST",
       body: JSON.stringify({ token: request.token, new_password: request.newPassword })
-    }, false, false);
+    });
   }
   async verifyEmail(request) {
     return this.request("/api/v1/auth/verify-email", {
       method: "POST",
       body: JSON.stringify({ token: request.token })
-    }, false, false);
+    });
   }
   async resendVerification(request) {
     return this.request("/api/v1/auth/resend-verification", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    }, false, false);
+    });
   }
   async deactivateAccount(password) {
     await this.request("/api/v1/auth/deactivate", {
       method: "POST",
       body: JSON.stringify({ password })
-    }, true, false);
+    });
   }
   mapAuthToken(raw) {
     return {
@@ -4725,7 +4741,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/oauth/initiate", {
       method: "POST",
       body: JSON.stringify({ provider, redirectUri, client_id: cfg.serviceId || cfg.clientId })
-    }, false, false);
+    });
     return response.url;
   }
   handleOAuthCallback(url) {
@@ -4746,13 +4762,13 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/saml/initiate", {
       method: "POST",
       body: JSON.stringify({ email: request.email, redirect_uri: request.redirectUri })
-    }, false, false);
+    });
   }
   async parseSamlMetadata(xml) {
     return this.request("/api/v1/auth/saml/parse-metadata", {
       method: "POST",
       body: JSON.stringify({ metadata_xml: xml })
-    }, false, false);
+    });
   }
   async listSamlConnections() {
     const response = await this.request("/api/v1/auth/saml/connections");
@@ -4771,28 +4787,28 @@ var AuthMiClient = class {
   }
   // ============ 2FA ============
   async setup2fa() {
-    return this.request("/api/v1/auth/2fa/setup", { method: "POST" }, true, false);
+    return this.request("/api/v1/auth/2fa/setup", { method: "POST" });
   }
   async enable2fa(code) {
     return this.request("/api/v1/auth/2fa/enable", {
       method: "POST",
       body: JSON.stringify({ code })
-    }, true, false);
+    });
   }
   async disable2fa(password) {
     await this.request("/api/v1/auth/2fa/disable", {
       method: "POST",
       body: JSON.stringify({ password })
-    }, true, false);
+    });
   }
   async regenerateBackupCodes() {
-    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" }, true, false);
+    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" });
   }
   async challenge2fa(request) {
     return this.request("/api/v1/auth/2fa/challenge", {
       method: "POST",
       body: JSON.stringify(request)
-    }, false, false);
+    });
   }
   // ============ Users ============
   async createUser(request) {
@@ -5087,6 +5103,18 @@ var AuthMiClient = class {
       { method: "POST" }
     );
   }
+  /** Get the combined service token — a single string combining serviceId and
+   * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+   * instead of providing serviceId and clientSecret separately.
+   *
+   * Format returned: "{serviceId}.{clientSecret}"
+   */
+  async getServiceToken(serviceId) {
+    return this.request(
+      `/api/v1/services/${encodeURIComponent(serviceId)}/token`,
+      { method: "POST" }
+    ).then((r) => ({ token: r.token, serviceId: r.service_id, serviceName: r.service_name }));
+  }
   // ============ JWKS ============
   async getJwks(serviceId) {
     return this.request(`/.well-known/jwks.json?service_id=${encodeURIComponent(serviceId)}`);

package/dist/next.mjs

@@ -5,7 +5,7 @@ import {
   __commonJS,
   __require,
   __toESM
-} from "./chunk-DMNUO422.mjs";
+} from "./chunk-LBMBSWSF.mjs";
 
 // ../../node_modules/next/dist/shared/lib/i18n/detect-domain-locale.js
 var require_detect_domain_locale = __commonJS({

package/dist/react.d.mts

@@ -1,7 +1,7 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { i as ConfigProvider, h as ClientOptions, G as Setup2FAResult, E as Enable2FAResult, B as BackupCodesResult, C as Challenge2FARequest, f as AuthToken, s as OAuthProvider, c as AuthMiClient, M as User, V as ValidationResult, O as OAuthCallbackResult } from './client-DmZsG2xs.mjs';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, d as AuthMiConfig, e as AuthMiError, g as CheckoutResponse, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, r as OAuthInitiateResponse, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.mjs';
+import { i as ConfigProvider, h as ClientOptions, G as Setup2FAResult, E as Enable2FAResult, B as BackupCodesResult, C as Challenge2FARequest, f as AuthToken, s as OAuthProvider, c as AuthMiClient, M as User, V as ValidationResult, O as OAuthCallbackResult } from './client-ClqDnphI.mjs';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, d as AuthMiConfig, e as AuthMiError, g as CheckoutResponse, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, r as OAuthInitiateResponse, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.mjs';
 
 interface AuthMiContextValue {
     client: AuthMiClient;

package/dist/react.d.ts

@@ -1,7 +1,7 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { i as ConfigProvider, h as ClientOptions, G as Setup2FAResult, E as Enable2FAResult, B as BackupCodesResult, C as Challenge2FARequest, f as AuthToken, s as OAuthProvider, c as AuthMiClient, M as User, V as ValidationResult, O as OAuthCallbackResult } from './client-DmZsG2xs.js';
-export { A as ApiKey, a as AuditLog, b as AuditLogQuery, d as AuthMiConfig, e as AuthMiError, g as CheckoutResponse, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, r as OAuthInitiateResponse, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, N as VerifyEmailRequest, W as Webhook } from './client-DmZsG2xs.js';
+import { i as ConfigProvider, h as ClientOptions, G as Setup2FAResult, E as Enable2FAResult, B as BackupCodesResult, C as Challenge2FARequest, f as AuthToken, s as OAuthProvider, c as AuthMiClient, M as User, V as ValidationResult, O as OAuthCallbackResult } from './client-ClqDnphI.js';
+export { A as ApiKey, a as AuditLog, b as AuditLogQuery, d as AuthMiConfig, e as AuthMiError, g as CheckoutResponse, j as CreateApiKeyRequest, k as CreateApiKeyResponse, l as CreateRoleRequest, m as CreateSamlConnectionRequest, n as CreateScopeRequest, o as CreateUserRequest, F as ForgotPasswordRequest, p as IntrospectRequest, q as IntrospectResponse, J as JwksResponse, L as LoginCredentials, r as OAuthInitiateResponse, P as Plan, t as PortalResponse, R as RegisterWebhookRequest, u as ResendVerificationRequest, v as ResetPasswordRequest, w as Role, S as SamlConnection, x as SamlInitiateRequest, y as Scope, z as ScopeError, D as ServiceDetail, H as SignupCredentials, K as Subscription, U as UpdateServiceRequest, N as VerifyEmailRequest, W as Webhook } from './client-ClqDnphI.js';
 
 interface AuthMiContextValue {
     client: AuthMiClient;

package/dist/react.js

@@ -38,12 +38,29 @@ var import_react = require("react");
 // src/config.ts
 function resolveConfig(provider) {
   const raw = typeof provider === "function" ? provider() : provider;
+  let clientId = raw.clientId ?? "";
+  let clientSecret = raw.clientSecret ?? "";
+  let serviceId = raw.serviceId ?? "";
+  const token = raw.token ?? "";
+  if (raw.token) {
+    const dot = raw.token.indexOf(".");
+    if (dot > 0) {
+      const sid = raw.token.slice(0, dot);
+      const secret = raw.token.slice(dot + 1);
+      if (sid && secret) {
+        clientId = sid;
+        clientSecret = secret;
+        if (!serviceId) serviceId = sid;
+      }
+    }
+  }
   return {
     baseUrl: raw.baseUrl,
     apiKey: raw.apiKey ?? "",
-    serviceId: raw.serviceId ?? "",
-    clientId: raw.clientId ?? "",
-    clientSecret: raw.clientSecret ?? "",
+    serviceId,
+    clientId,
+    clientSecret,
+    token,
     defaultTokenExpiry: raw.defaultTokenExpiry ?? 24
   };
 }
@@ -132,7 +149,7 @@ var AuthMiClient = class {
     return resolveConfig(this.configProvider);
   }
   // ============ HTTP plumbing ============
-  async request(endpoint, options = {}, requireUserToken = false, requireServiceAuth = true) {
+  async request(endpoint, options = {}, requireUserToken = false) {
     const cfg = this.config;
     const url = `${cfg.baseUrl}${endpoint}`;
     const headers = {
@@ -143,10 +160,9 @@ var AuthMiClient = class {
       if (requireUserToken) {
         const token = await this.storage.getToken();
         if (token) headers["Authorization"] = `Bearer ${token}`;
-      } else if (requireServiceAuth && cfg.clientId && cfg.clientSecret) {
+      } else if (cfg.clientId && cfg.clientSecret) {
         headers["Authorization"] = `Basic ${btoa(`${cfg.clientId}:${cfg.clientSecret}`)}`;
-        headers["X-Service-ID"] = cfg.serviceId || cfg.clientId;
-      } else if (requireServiceAuth && cfg.apiKey) {
+      } else if (cfg.apiKey) {
         headers["Authorization"] = `Bearer ${cfg.apiKey}`;
       }
     }
@@ -182,7 +198,7 @@ var AuthMiClient = class {
     this.configProvider = { ...current, ...config };
   }
   getConfig() {
-    const { apiKey: _, clientSecret: __, ...rest } = resolveConfig(this.configProvider);
+    const { apiKey: _, clientSecret: __, token: ___, ...rest } = resolveConfig(this.configProvider);
     return rest;
   }
   // ============ Token Management ============
@@ -204,7 +220,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/signup", {
       method: "POST",
       body: JSON.stringify(credentials)
-    }, false, false);
+    });
     return this.mapAuthToken(response);
   }
   async login(credentials) {
@@ -218,7 +234,7 @@ var AuthMiClient = class {
         expires_in_hours: credentials.expiresInHours || cfg.defaultTokenExpiry,
         scopes: credentials.scopes
       })
-    }, false, false);
+    });
     const token = this.mapAuthToken(response);
     this.setAccessToken(token.accessToken);
     return token;
@@ -254,31 +270,31 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/forgot-password", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    }, false, false);
+    });
   }
   async resetPassword(request) {
     return this.request("/api/v1/auth/reset-password", {
       method: "POST",
       body: JSON.stringify({ token: request.token, new_password: request.newPassword })
-    }, false, false);
+    });
   }
   async verifyEmail(request) {
     return this.request("/api/v1/auth/verify-email", {
       method: "POST",
       body: JSON.stringify({ token: request.token })
-    }, false, false);
+    });
   }
   async resendVerification(request) {
     return this.request("/api/v1/auth/resend-verification", {
       method: "POST",
       body: JSON.stringify({ email: request.email, client_id: this.config.serviceId })
-    }, false, false);
+    });
   }
   async deactivateAccount(password) {
     await this.request("/api/v1/auth/deactivate", {
       method: "POST",
       body: JSON.stringify({ password })
-    }, true, false);
+    });
   }
   mapAuthToken(raw) {
     return {
@@ -301,7 +317,7 @@ var AuthMiClient = class {
     const response = await this.request("/api/v1/auth/oauth/initiate", {
       method: "POST",
       body: JSON.stringify({ provider, redirectUri, client_id: cfg.serviceId || cfg.clientId })
-    }, false, false);
+    });
     return response.url;
   }
   handleOAuthCallback(url) {
@@ -322,13 +338,13 @@ var AuthMiClient = class {
     return this.request("/api/v1/auth/saml/initiate", {
       method: "POST",
       body: JSON.stringify({ email: request.email, redirect_uri: request.redirectUri })
-    }, false, false);
+    });
   }
   async parseSamlMetadata(xml) {
     return this.request("/api/v1/auth/saml/parse-metadata", {
       method: "POST",
       body: JSON.stringify({ metadata_xml: xml })
-    }, false, false);
+    });
   }
   async listSamlConnections() {
     const response = await this.request("/api/v1/auth/saml/connections");
@@ -347,28 +363,28 @@ var AuthMiClient = class {
   }
   // ============ 2FA ============
   async setup2fa() {
-    return this.request("/api/v1/auth/2fa/setup", { method: "POST" }, true, false);
+    return this.request("/api/v1/auth/2fa/setup", { method: "POST" });
   }
   async enable2fa(code) {
     return this.request("/api/v1/auth/2fa/enable", {
       method: "POST",
       body: JSON.stringify({ code })
-    }, true, false);
+    });
   }
   async disable2fa(password) {
     await this.request("/api/v1/auth/2fa/disable", {
       method: "POST",
       body: JSON.stringify({ password })
-    }, true, false);
+    });
   }
   async regenerateBackupCodes() {
-    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" }, true, false);
+    return this.request("/api/v1/auth/2fa/backup-codes", { method: "POST" });
   }
   async challenge2fa(request) {
     return this.request("/api/v1/auth/2fa/challenge", {
       method: "POST",
       body: JSON.stringify(request)
-    }, false, false);
+    });
   }
   // ============ Users ============
   async createUser(request) {
@@ -663,6 +679,18 @@ var AuthMiClient = class {
       { method: "POST" }
     );
   }
+  /** Get the combined service token — a single string combining serviceId and
+   * clientSecret. Can be passed to `AuthMiClient` as the `token` config option
+   * instead of providing serviceId and clientSecret separately.
+   *
+   * Format returned: "{serviceId}.{clientSecret}"
+   */
+  async getServiceToken(serviceId) {
+    return this.request(
+      `/api/v1/services/${encodeURIComponent(serviceId)}/token`,
+      { method: "POST" }
+    ).then((r) => ({ token: r.token, serviceId: r.service_id, serviceName: r.service_name }));
+  }
   // ============ JWKS ============
   async getJwks(serviceId) {
     return this.request(`/.well-known/jwks.json?service_id=${encodeURIComponent(serviceId)}`);

package/dist/react.mjs

@@ -2,7 +2,7 @@ import {
   AuthMiClient,
   AuthMiError,
   ScopeError
-} from "./chunk-DMNUO422.mjs";
+} from "./chunk-LBMBSWSF.mjs";
 
 // src/react.tsx
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "authmi",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Official client library for Auth Mi - Multi-tenant authentication-as-a-service",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",