authtara-sdk 1.0.0

package/dist/index.js

@@ -0,0 +1,372 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ApiError: () => ApiError,
+  Authtara: () => Authtara,
+  AuthtaraError: () => AuthtaraError,
+  ConfigurationError: () => ConfigurationError,
+  EntitlementDeniedError: () => EntitlementDeniedError,
+  InvalidTokenError: () => InvalidTokenError,
+  default: () => index_default
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/common/errors.ts
+var AuthtaraError = class _AuthtaraError extends Error {
+  constructor(message, code, statusCode) {
+    super(message);
+    this.name = "AuthtaraError";
+    this.code = code;
+    this.statusCode = statusCode;
+    Object.setPrototypeOf(this, _AuthtaraError.prototype);
+  }
+};
+var InvalidTokenError = class _InvalidTokenError extends AuthtaraError {
+  constructor(message = "Invalid or expired token") {
+    super(message, "INVALID_TOKEN", 401);
+    this.name = "InvalidTokenError";
+    Object.setPrototypeOf(this, _InvalidTokenError.prototype);
+  }
+};
+var EntitlementDeniedError = class _EntitlementDeniedError extends AuthtaraError {
+  constructor(message = "Access denied", reason) {
+    super(message, "ENTITLEMENT_DENIED", 403);
+    this.name = "EntitlementDeniedError";
+    this.reason = reason;
+    Object.setPrototypeOf(this, _EntitlementDeniedError.prototype);
+  }
+};
+var ApiError = class _ApiError extends AuthtaraError {
+  constructor(message, statusCode, response) {
+    super(message, "API_ERROR", statusCode);
+    this.name = "ApiError";
+    this.response = response;
+    Object.setPrototypeOf(this, _ApiError.prototype);
+  }
+};
+var ConfigurationError = class _ConfigurationError extends AuthtaraError {
+  constructor(message) {
+    super(message, "CONFIG_ERROR");
+    this.name = "ConfigurationError";
+    Object.setPrototypeOf(this, _ConfigurationError.prototype);
+  }
+};
+
+// src/common/http-client.ts
+function extractErrorMessage(error, fallback) {
+  if (!error) return fallback;
+  if (typeof error === "string") return error;
+  if (typeof error === "object" && error.message) return error.message;
+  return fallback;
+}
+var HttpClient = class {
+  constructor(config) {
+    if (!config.baseUrl) {
+      throw new ConfigurationError("baseUrl is required");
+    }
+    if (!config.apiKey) {
+      throw new ConfigurationError("apiKey is required");
+    }
+    this.baseUrl = config.baseUrl.replace(/\/$/, "");
+    this.apiKey = config.apiKey;
+    this.timeout = config.timeout ?? 3e4;
+  }
+  /**
+   * Make HTTP request to Platform API
+   */
+  async request(options) {
+    const url = `${this.baseUrl}${options.path}`;
+    const headers = {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${this.apiKey}`,
+      ...options.headers
+    };
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+    try {
+      const response = await fetch(url, {
+        method: options.method,
+        headers,
+        body: options.body ? JSON.stringify(options.body) : void 0,
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      const data = await response.json();
+      if (!response.ok) {
+        throw new ApiError(
+          extractErrorMessage(data.error, `HTTP ${response.status}: ${response.statusText}`),
+          response.status,
+          data
+        );
+      }
+      if (!data.success) {
+        throw new ApiError(extractErrorMessage(data.error, "API request failed"), 400, data);
+      }
+      return data.data;
+    } catch (error) {
+      clearTimeout(timeoutId);
+      if (error instanceof ApiError) {
+        throw error;
+      }
+      if (error instanceof Error) {
+        if (error.name === "AbortError") {
+          throw new ApiError(`Request timeout after ${this.timeout}ms`, 408);
+        }
+        throw new ApiError(error.message, 500);
+      }
+      throw new ApiError("Unknown error occurred", 500);
+    }
+  }
+  /**
+   * POST request shorthand
+   */
+  async post(path, body) {
+    return this.request({ method: "POST", path, body });
+  }
+  /**
+   * GET request shorthand
+   */
+  async get(path) {
+    return this.request({ method: "GET", path });
+  }
+};
+
+// src/auth/index.ts
+var import_jose = require("jose");
+var AuthModule = class {
+  constructor(apiKey, httpClient, issuer = "platform.digitalsolution.com") {
+    if (!apiKey) {
+      throw new ConfigurationError("apiKey is required for AuthModule");
+    }
+    this.apiKey = apiKey;
+    this.httpClient = httpClient;
+    this.issuer = issuer;
+  }
+  /**
+   * Verifikasi SSO JWT token secara offline
+   *
+   * Token diverifikasi menggunakan App Secret (HS256).
+   * Ini lebih cepat daripada memanggil API karena tidak memerlukan network request.
+   *
+   * @param token - JWT token dari SSO callback
+   * @returns SessionVerifyResult dengan data user, tenant, dan subscription
+   * @throws InvalidTokenError jika token tidak valid atau expired
+   *
+   * @example
+   * ```typescript
+   * const session = await ds.auth.verifySession(token);
+   * if (session.isValid) {
+   *   console.log('User:', session.user);
+   *   console.log('Tenant:', session.tenant);
+   * }
+   * ```
+   */
+  async verifySession(token) {
+    if (!token) {
+      throw new InvalidTokenError("Token is required");
+    }
+    try {
+      const secretKey = new TextEncoder().encode(this.apiKey);
+      const { payload } = await (0, import_jose.jwtVerify)(token, secretKey, {
+        algorithms: ["HS256"],
+        issuer: this.issuer
+      });
+      const ssoPayload = payload;
+      return {
+        isValid: true,
+        user: {
+          id: ssoPayload.sub ?? "",
+          email: ssoPayload.email ?? "",
+          name: ssoPayload.name ?? null
+        },
+        tenant: ssoPayload.tenant,
+        subscription: ssoPayload.subscription
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Token verification failed";
+      throw new InvalidTokenError(message);
+    }
+  }
+  /**
+   * Exchange authorization code untuk JWT token (server-to-server)
+   *
+   * Gunakan ini di callback endpoint untuk menukar authorization code
+   * menjadi JWT token yang bisa diverifikasi.
+   *
+   * @param code - Authorization code dari callback URL
+   * @returns ExchangeResult dengan token dan data context
+   *
+   * @example
+   * ```typescript
+   * // Di endpoint /api/sso/callback
+   * const code = searchParams.get('code');
+   * const result = await ds.auth.exchangeCode(code);
+   * // Simpan result.token ke session
+   * ```
+   */
+  async exchangeCode(code) {
+    if (!code) {
+      throw new ConfigurationError("Authorization code is required");
+    }
+    return this.httpClient.post("/api/sso/exchange", {
+      code,
+      appSecret: this.apiKey
+    });
+  }
+};
+
+// src/billing/index.ts
+var BillingModule = class {
+  constructor(httpClient) {
+    if (!httpClient) {
+      throw new ConfigurationError("httpClient is required for BillingModule");
+    }
+    this.httpClient = httpClient;
+  }
+  /**
+   * Cek apakah tenant memiliki akses ke aplikasi Anda
+   *
+   * @param params - Parameter pengecekan (tenantId wajib, featureKey opsional)
+   * @returns EntitlementResult dengan status akses
+   *
+   * @example
+   * ```typescript
+   * // Cek akses dasar
+   * const hasAccess = await ds.billing.checkEntitlement({
+   *   tenantId: tenant.id
+   * });
+   *
+   * // Cek fitur spesifik
+   * const canUseAI = await ds.billing.checkEntitlement({
+   *   tenantId: tenant.id,
+   *   featureKey: 'ai_generator'
+   * });
+   *
+   * if (!canUseAI.granted) {
+   *   throw new Error(canUseAI.reason);
+   * }
+   * ```
+   */
+  async checkEntitlement(params) {
+    if (!params.tenantId) {
+      throw new ConfigurationError("tenantId is required");
+    }
+    return this.httpClient.post(
+      "/api/v1/dev/entitlements/check",
+      {
+        tenantId: params.tenantId,
+        featureKey: params.featureKey
+      }
+    );
+  }
+};
+
+// src/metering/index.ts
+var MeteringModule = class {
+  constructor(httpClient) {
+    if (!httpClient) {
+      throw new ConfigurationError(
+        "httpClient is required for MeteringModule"
+      );
+    }
+    this.httpClient = httpClient;
+  }
+  /**
+   * Catat penggunaan untuk usage-based billing
+   *
+   * @param params - Parameter pencatatan
+   * @returns RecordUsageResult
+   *
+   * @example
+   * ```typescript
+   * // Setelah user mengirim pesan
+   * await ds.metering.recordUsage({
+   *   tenantId: currentTenant.id,
+   *   metricSlug: 'message_sent',
+   *   amount: 1
+   * });
+   *
+   * // Batch recording untuk efisiensi
+   * await ds.metering.recordUsage({
+   *   tenantId: currentTenant.id,
+   *   metricSlug: 'api_call',
+   *   amount: 100 // Batch 100 API calls
+   * });
+   * ```
+   */
+  async recordUsage(params) {
+    if (!params.tenantId) {
+      throw new ConfigurationError("tenantId is required");
+    }
+    if (!params.metricSlug) {
+      throw new ConfigurationError("metricSlug is required");
+    }
+    if (!params.amount || params.amount < 1) {
+      throw new ConfigurationError("amount must be a positive number");
+    }
+    return this.httpClient.post(
+      "/api/v1/dev/metering/record",
+      {
+        tenantId: params.tenantId,
+        metricSlug: params.metricSlug,
+        amount: params.amount,
+        timestamp: params.timestamp
+      }
+    );
+  }
+};
+
+// src/index.ts
+var Authtara = class {
+  /**
+   * Create new Authtara SDK instance
+   *
+   * @param config - Konfigurasi SDK
+   * @throws ConfigurationError jika apiKey tidak disediakan
+   */
+  constructor(config) {
+    if (!config.apiKey) {
+      throw new ConfigurationError(
+        "apiKey is required. Get it from your Developer Dashboard."
+      );
+    }
+    const endpoint = config.endpoint ?? "https://api.digitalsolution.com";
+    const httpClient = new HttpClient({
+      baseUrl: endpoint,
+      apiKey: config.apiKey,
+      timeout: config.timeout
+    });
+    this.auth = new AuthModule(config.apiKey, httpClient);
+    this.billing = new BillingModule(httpClient);
+    this.metering = new MeteringModule(httpClient);
+  }
+};
+var index_default = Authtara;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ApiError,
+  Authtara,
+  AuthtaraError,
+  ConfigurationError,
+  EntitlementDeniedError,
+  InvalidTokenError
+});

package/dist/index.mjs

@@ -0,0 +1,340 @@
+// src/common/errors.ts
+var AuthtaraError = class _AuthtaraError extends Error {
+  constructor(message, code, statusCode) {
+    super(message);
+    this.name = "AuthtaraError";
+    this.code = code;
+    this.statusCode = statusCode;
+    Object.setPrototypeOf(this, _AuthtaraError.prototype);
+  }
+};
+var InvalidTokenError = class _InvalidTokenError extends AuthtaraError {
+  constructor(message = "Invalid or expired token") {
+    super(message, "INVALID_TOKEN", 401);
+    this.name = "InvalidTokenError";
+    Object.setPrototypeOf(this, _InvalidTokenError.prototype);
+  }
+};
+var EntitlementDeniedError = class _EntitlementDeniedError extends AuthtaraError {
+  constructor(message = "Access denied", reason) {
+    super(message, "ENTITLEMENT_DENIED", 403);
+    this.name = "EntitlementDeniedError";
+    this.reason = reason;
+    Object.setPrototypeOf(this, _EntitlementDeniedError.prototype);
+  }
+};
+var ApiError = class _ApiError extends AuthtaraError {
+  constructor(message, statusCode, response) {
+    super(message, "API_ERROR", statusCode);
+    this.name = "ApiError";
+    this.response = response;
+    Object.setPrototypeOf(this, _ApiError.prototype);
+  }
+};
+var ConfigurationError = class _ConfigurationError extends AuthtaraError {
+  constructor(message) {
+    super(message, "CONFIG_ERROR");
+    this.name = "ConfigurationError";
+    Object.setPrototypeOf(this, _ConfigurationError.prototype);
+  }
+};
+
+// src/common/http-client.ts
+function extractErrorMessage(error, fallback) {
+  if (!error) return fallback;
+  if (typeof error === "string") return error;
+  if (typeof error === "object" && error.message) return error.message;
+  return fallback;
+}
+var HttpClient = class {
+  constructor(config) {
+    if (!config.baseUrl) {
+      throw new ConfigurationError("baseUrl is required");
+    }
+    if (!config.apiKey) {
+      throw new ConfigurationError("apiKey is required");
+    }
+    this.baseUrl = config.baseUrl.replace(/\/$/, "");
+    this.apiKey = config.apiKey;
+    this.timeout = config.timeout ?? 3e4;
+  }
+  /**
+   * Make HTTP request to Platform API
+   */
+  async request(options) {
+    const url = `${this.baseUrl}${options.path}`;
+    const headers = {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${this.apiKey}`,
+      ...options.headers
+    };
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+    try {
+      const response = await fetch(url, {
+        method: options.method,
+        headers,
+        body: options.body ? JSON.stringify(options.body) : void 0,
+        signal: controller.signal
+      });
+      clearTimeout(timeoutId);
+      const data = await response.json();
+      if (!response.ok) {
+        throw new ApiError(
+          extractErrorMessage(data.error, `HTTP ${response.status}: ${response.statusText}`),
+          response.status,
+          data
+        );
+      }
+      if (!data.success) {
+        throw new ApiError(extractErrorMessage(data.error, "API request failed"), 400, data);
+      }
+      return data.data;
+    } catch (error) {
+      clearTimeout(timeoutId);
+      if (error instanceof ApiError) {
+        throw error;
+      }
+      if (error instanceof Error) {
+        if (error.name === "AbortError") {
+          throw new ApiError(`Request timeout after ${this.timeout}ms`, 408);
+        }
+        throw new ApiError(error.message, 500);
+      }
+      throw new ApiError("Unknown error occurred", 500);
+    }
+  }
+  /**
+   * POST request shorthand
+   */
+  async post(path, body) {
+    return this.request({ method: "POST", path, body });
+  }
+  /**
+   * GET request shorthand
+   */
+  async get(path) {
+    return this.request({ method: "GET", path });
+  }
+};
+
+// src/auth/index.ts
+import { jwtVerify } from "jose";
+var AuthModule = class {
+  constructor(apiKey, httpClient, issuer = "platform.digitalsolution.com") {
+    if (!apiKey) {
+      throw new ConfigurationError("apiKey is required for AuthModule");
+    }
+    this.apiKey = apiKey;
+    this.httpClient = httpClient;
+    this.issuer = issuer;
+  }
+  /**
+   * Verifikasi SSO JWT token secara offline
+   *
+   * Token diverifikasi menggunakan App Secret (HS256).
+   * Ini lebih cepat daripada memanggil API karena tidak memerlukan network request.
+   *
+   * @param token - JWT token dari SSO callback
+   * @returns SessionVerifyResult dengan data user, tenant, dan subscription
+   * @throws InvalidTokenError jika token tidak valid atau expired
+   *
+   * @example
+   * ```typescript
+   * const session = await ds.auth.verifySession(token);
+   * if (session.isValid) {
+   *   console.log('User:', session.user);
+   *   console.log('Tenant:', session.tenant);
+   * }
+   * ```
+   */
+  async verifySession(token) {
+    if (!token) {
+      throw new InvalidTokenError("Token is required");
+    }
+    try {
+      const secretKey = new TextEncoder().encode(this.apiKey);
+      const { payload } = await jwtVerify(token, secretKey, {
+        algorithms: ["HS256"],
+        issuer: this.issuer
+      });
+      const ssoPayload = payload;
+      return {
+        isValid: true,
+        user: {
+          id: ssoPayload.sub ?? "",
+          email: ssoPayload.email ?? "",
+          name: ssoPayload.name ?? null
+        },
+        tenant: ssoPayload.tenant,
+        subscription: ssoPayload.subscription
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Token verification failed";
+      throw new InvalidTokenError(message);
+    }
+  }
+  /**
+   * Exchange authorization code untuk JWT token (server-to-server)
+   *
+   * Gunakan ini di callback endpoint untuk menukar authorization code
+   * menjadi JWT token yang bisa diverifikasi.
+   *
+   * @param code - Authorization code dari callback URL
+   * @returns ExchangeResult dengan token dan data context
+   *
+   * @example
+   * ```typescript
+   * // Di endpoint /api/sso/callback
+   * const code = searchParams.get('code');
+   * const result = await ds.auth.exchangeCode(code);
+   * // Simpan result.token ke session
+   * ```
+   */
+  async exchangeCode(code) {
+    if (!code) {
+      throw new ConfigurationError("Authorization code is required");
+    }
+    return this.httpClient.post("/api/sso/exchange", {
+      code,
+      appSecret: this.apiKey
+    });
+  }
+};
+
+// src/billing/index.ts
+var BillingModule = class {
+  constructor(httpClient) {
+    if (!httpClient) {
+      throw new ConfigurationError("httpClient is required for BillingModule");
+    }
+    this.httpClient = httpClient;
+  }
+  /**
+   * Cek apakah tenant memiliki akses ke aplikasi Anda
+   *
+   * @param params - Parameter pengecekan (tenantId wajib, featureKey opsional)
+   * @returns EntitlementResult dengan status akses
+   *
+   * @example
+   * ```typescript
+   * // Cek akses dasar
+   * const hasAccess = await ds.billing.checkEntitlement({
+   *   tenantId: tenant.id
+   * });
+   *
+   * // Cek fitur spesifik
+   * const canUseAI = await ds.billing.checkEntitlement({
+   *   tenantId: tenant.id,
+   *   featureKey: 'ai_generator'
+   * });
+   *
+   * if (!canUseAI.granted) {
+   *   throw new Error(canUseAI.reason);
+   * }
+   * ```
+   */
+  async checkEntitlement(params) {
+    if (!params.tenantId) {
+      throw new ConfigurationError("tenantId is required");
+    }
+    return this.httpClient.post(
+      "/api/v1/dev/entitlements/check",
+      {
+        tenantId: params.tenantId,
+        featureKey: params.featureKey
+      }
+    );
+  }
+};
+
+// src/metering/index.ts
+var MeteringModule = class {
+  constructor(httpClient) {
+    if (!httpClient) {
+      throw new ConfigurationError(
+        "httpClient is required for MeteringModule"
+      );
+    }
+    this.httpClient = httpClient;
+  }
+  /**
+   * Catat penggunaan untuk usage-based billing
+   *
+   * @param params - Parameter pencatatan
+   * @returns RecordUsageResult
+   *
+   * @example
+   * ```typescript
+   * // Setelah user mengirim pesan
+   * await ds.metering.recordUsage({
+   *   tenantId: currentTenant.id,
+   *   metricSlug: 'message_sent',
+   *   amount: 1
+   * });
+   *
+   * // Batch recording untuk efisiensi
+   * await ds.metering.recordUsage({
+   *   tenantId: currentTenant.id,
+   *   metricSlug: 'api_call',
+   *   amount: 100 // Batch 100 API calls
+   * });
+   * ```
+   */
+  async recordUsage(params) {
+    if (!params.tenantId) {
+      throw new ConfigurationError("tenantId is required");
+    }
+    if (!params.metricSlug) {
+      throw new ConfigurationError("metricSlug is required");
+    }
+    if (!params.amount || params.amount < 1) {
+      throw new ConfigurationError("amount must be a positive number");
+    }
+    return this.httpClient.post(
+      "/api/v1/dev/metering/record",
+      {
+        tenantId: params.tenantId,
+        metricSlug: params.metricSlug,
+        amount: params.amount,
+        timestamp: params.timestamp
+      }
+    );
+  }
+};
+
+// src/index.ts
+var Authtara = class {
+  /**
+   * Create new Authtara SDK instance
+   *
+   * @param config - Konfigurasi SDK
+   * @throws ConfigurationError jika apiKey tidak disediakan
+   */
+  constructor(config) {
+    if (!config.apiKey) {
+      throw new ConfigurationError(
+        "apiKey is required. Get it from your Developer Dashboard."
+      );
+    }
+    const endpoint = config.endpoint ?? "https://api.digitalsolution.com";
+    const httpClient = new HttpClient({
+      baseUrl: endpoint,
+      apiKey: config.apiKey,
+      timeout: config.timeout
+    });
+    this.auth = new AuthModule(config.apiKey, httpClient);
+    this.billing = new BillingModule(httpClient);
+    this.metering = new MeteringModule(httpClient);
+  }
+};
+var index_default = Authtara;
+export {
+  ApiError,
+  Authtara,
+  AuthtaraError,
+  ConfigurationError,
+  EntitlementDeniedError,
+  InvalidTokenError,
+  index_default as default
+};