authtara-sdk 1.1.1 → 1.1.2

package/dist/index.d.mts

@@ -101,10 +101,11 @@ interface ExchangeResult {
  * - exchangeCode: Menukar authorization code dengan JWT token (server-to-server)
  */
 declare class AuthModule {
+    private readonly appId;
     private readonly apiKey;
     private readonly httpClient;
     private readonly issuer;
-    constructor(apiKey: string, httpClient: HttpClient, issuer?: string);
+    constructor(appId: string, apiKey: string, httpClient: HttpClient, issuer?: string);
     /**
      * Verifikasi SSO JWT token secara offline
      *
@@ -126,23 +127,46 @@ declare class AuthModule {
      */
     verifySession(token: string): Promise<SessionVerifyResult>;
     /**
-     * Exchange authorization code untuk JWT token (server-to-server)
+     * Exchange Authorization Code untuk JWT Token (OAuth 2.0)
      *
-     * Gunakan ini di callback endpoint untuk menukar authorization code
-     * menjadi JWT token yang bisa diverifikasi.
+     * **Server-side only!** Jangan panggil function ini di browser karena mengandung appSecret.
      *
      * @param code - Authorization code dari callback URL
-     * @returns ExchangeResult dengan token dan data context
+     * @param redirectUri - Redirect URI yang sama dengan saat request authorization code
+     * @returns Promise dengan JWT token dan user context
      *
      * @example
      * ```typescript
      * // Di endpoint /api/sso/callback
      * const code = searchParams.get('code');
-     * const result = await ds.auth.exchangeCode(code);
-     * // Simpan result.token ke session
+     * const result = await ds.auth.exchangeCode(code, 'http://localhost:4000/api/sso/callback');
+     * // Simpan result.access_token ke session
      * ```
      */
-    exchangeCode(code: string): Promise<ExchangeResult>;
+    exchangeCode(code: string, redirectUri: string): Promise<TokenResponse>;
+}
+/**
+ * OAuth 2.0 Token Response
+ */
+interface TokenResponse {
+    access_token: string;
+    token_type: 'Bearer';
+    expires_in: number;
+    user: {
+        id: string;
+        email: string;
+        name: string | null;
+    };
+    tenant: {
+        id: string;
+        name: string;
+        subdomain: string;
+        role: string;
+    };
+    subscription: {
+        plan: string;
+        status: string;
+    };
 }
 
 /**
@@ -393,6 +417,12 @@ declare class ConfigurationError extends AuthtaraError {
  * Konfigurasi untuk Authtara SDK
  */
 interface AuthtaraConfig {
+    /**
+     * App ID dari Dashboard Developer
+     *
+     * Didapatkan saat aplikasi dibuat
+     */
+    appId: string;
     /**
      * App Secret dari Dashboard Developer
      *

package/dist/index.d.ts

@@ -101,10 +101,11 @@ interface ExchangeResult {
  * - exchangeCode: Menukar authorization code dengan JWT token (server-to-server)
  */
 declare class AuthModule {
+    private readonly appId;
     private readonly apiKey;
     private readonly httpClient;
     private readonly issuer;
-    constructor(apiKey: string, httpClient: HttpClient, issuer?: string);
+    constructor(appId: string, apiKey: string, httpClient: HttpClient, issuer?: string);
     /**
      * Verifikasi SSO JWT token secara offline
      *
@@ -126,23 +127,46 @@ declare class AuthModule {
      */
     verifySession(token: string): Promise<SessionVerifyResult>;
     /**
-     * Exchange authorization code untuk JWT token (server-to-server)
+     * Exchange Authorization Code untuk JWT Token (OAuth 2.0)
      *
-     * Gunakan ini di callback endpoint untuk menukar authorization code
-     * menjadi JWT token yang bisa diverifikasi.
+     * **Server-side only!** Jangan panggil function ini di browser karena mengandung appSecret.
      *
      * @param code - Authorization code dari callback URL
-     * @returns ExchangeResult dengan token dan data context
+     * @param redirectUri - Redirect URI yang sama dengan saat request authorization code
+     * @returns Promise dengan JWT token dan user context
      *
      * @example
      * ```typescript
      * // Di endpoint /api/sso/callback
      * const code = searchParams.get('code');
-     * const result = await ds.auth.exchangeCode(code);
-     * // Simpan result.token ke session
+     * const result = await ds.auth.exchangeCode(code, 'http://localhost:4000/api/sso/callback');
+     * // Simpan result.access_token ke session
      * ```
      */
-    exchangeCode(code: string): Promise<ExchangeResult>;
+    exchangeCode(code: string, redirectUri: string): Promise<TokenResponse>;
+}
+/**
+ * OAuth 2.0 Token Response
+ */
+interface TokenResponse {
+    access_token: string;
+    token_type: 'Bearer';
+    expires_in: number;
+    user: {
+        id: string;
+        email: string;
+        name: string | null;
+    };
+    tenant: {
+        id: string;
+        name: string;
+        subdomain: string;
+        role: string;
+    };
+    subscription: {
+        plan: string;
+        status: string;
+    };
 }
 
 /**
@@ -393,6 +417,12 @@ declare class ConfigurationError extends AuthtaraError {
  * Konfigurasi untuk Authtara SDK
  */
 interface AuthtaraConfig {
+    /**
+     * App ID dari Dashboard Developer
+     *
+     * Didapatkan saat aplikasi dibuat
+     */
+    appId: string;
     /**
      * App Secret dari Dashboard Developer
      *

package/dist/index.js

@@ -153,10 +153,14 @@ var HttpClient = class {
 // src/auth/index.ts
 var import_jose = require("jose");
 var AuthModule = class {
-  constructor(apiKey, httpClient, issuer = "platform.digitalsolution.com") {
+  constructor(appId, apiKey, httpClient, issuer = "platform.digitalsolution.com") {
+    if (!appId) {
+      throw new ConfigurationError("appId is required for AuthModule");
+    }
     if (!apiKey) {
       throw new ConfigurationError("apiKey is required for AuthModule");
     }
+    this.appId = appId;
     this.apiKey = apiKey;
     this.httpClient = httpClient;
     this.issuer = issuer;
@@ -207,30 +211,37 @@ var AuthModule = class {
     }
   }
   /**
-   * Exchange authorization code untuk JWT token (server-to-server)
+   * Exchange Authorization Code untuk JWT Token (OAuth 2.0)
    *
-   * Gunakan ini di callback endpoint untuk menukar authorization code
-   * menjadi JWT token yang bisa diverifikasi.
+   * **Server-side only!** Jangan panggil function ini di browser karena mengandung appSecret.
    *
    * @param code - Authorization code dari callback URL
-   * @returns ExchangeResult dengan token dan data context
+   * @param redirectUri - Redirect URI yang sama dengan saat request authorization code
+   * @returns Promise dengan JWT token dan user context
    *
    * @example
    * ```typescript
    * // Di endpoint /api/sso/callback
    * const code = searchParams.get('code');
-   * const result = await ds.auth.exchangeCode(code);
-   * // Simpan result.token ke session
+   * const result = await ds.auth.exchangeCode(code, 'http://localhost:4000/api/sso/callback');
+   * // Simpan result.access_token ke session
    * ```
    */
-  async exchangeCode(code) {
+  async exchangeCode(code, redirectUri) {
     if (!code) {
       throw new ConfigurationError("Authorization code is required");
     }
-    return this.httpClient.post("/api/sso/exchange", {
+    if (!redirectUri) {
+      throw new ConfigurationError("Redirect URI is required");
+    }
+    const response = await this.httpClient.post("/api/oauth/token", {
+      grant_type: "authorization_code",
       code,
-      appSecret: this.apiKey
+      client_id: this.appId,
+      client_secret: this.apiKey,
+      redirect_uri: redirectUri
     });
+    return response;
   }
 };
 
@@ -344,18 +355,22 @@ var Authtara = class {
    * @throws ConfigurationError jika apiKey tidak disediakan
    */
   constructor(config) {
+    if (!config.appId) {
+      throw new ConfigurationError(
+        "appId is required. Get it from your Developer Dashboard."
+      );
+    }
     if (!config.apiKey) {
       throw new ConfigurationError(
         "apiKey is required. Get it from your Developer Dashboard."
       );
     }
-    const endpoint = config.endpoint ?? "https://api.digitalsolution.com";
     const httpClient = new HttpClient({
-      baseUrl: endpoint,
+      baseUrl: config.endpoint || "https://api.digitalsolution.com",
       apiKey: config.apiKey,
       timeout: config.timeout
     });
-    this.auth = new AuthModule(config.apiKey, httpClient);
+    this.auth = new AuthModule(config.appId, config.apiKey, httpClient);
     this.billing = new BillingModule(httpClient);
     this.metering = new MeteringModule(httpClient);
   }

package/dist/index.mjs

@@ -121,10 +121,14 @@ var HttpClient = class {
 // src/auth/index.ts
 import { jwtVerify } from "jose";
 var AuthModule = class {
-  constructor(apiKey, httpClient, issuer = "platform.digitalsolution.com") {
+  constructor(appId, apiKey, httpClient, issuer = "platform.digitalsolution.com") {
+    if (!appId) {
+      throw new ConfigurationError("appId is required for AuthModule");
+    }
     if (!apiKey) {
       throw new ConfigurationError("apiKey is required for AuthModule");
     }
+    this.appId = appId;
     this.apiKey = apiKey;
     this.httpClient = httpClient;
     this.issuer = issuer;
@@ -175,30 +179,37 @@ var AuthModule = class {
     }
   }
   /**
-   * Exchange authorization code untuk JWT token (server-to-server)
+   * Exchange Authorization Code untuk JWT Token (OAuth 2.0)
    *
-   * Gunakan ini di callback endpoint untuk menukar authorization code
-   * menjadi JWT token yang bisa diverifikasi.
+   * **Server-side only!** Jangan panggil function ini di browser karena mengandung appSecret.
    *
    * @param code - Authorization code dari callback URL
-   * @returns ExchangeResult dengan token dan data context
+   * @param redirectUri - Redirect URI yang sama dengan saat request authorization code
+   * @returns Promise dengan JWT token dan user context
    *
    * @example
    * ```typescript
    * // Di endpoint /api/sso/callback
    * const code = searchParams.get('code');
-   * const result = await ds.auth.exchangeCode(code);
-   * // Simpan result.token ke session
+   * const result = await ds.auth.exchangeCode(code, 'http://localhost:4000/api/sso/callback');
+   * // Simpan result.access_token ke session
    * ```
    */
-  async exchangeCode(code) {
+  async exchangeCode(code, redirectUri) {
     if (!code) {
       throw new ConfigurationError("Authorization code is required");
     }
-    return this.httpClient.post("/api/sso/exchange", {
+    if (!redirectUri) {
+      throw new ConfigurationError("Redirect URI is required");
+    }
+    const response = await this.httpClient.post("/api/oauth/token", {
+      grant_type: "authorization_code",
       code,
-      appSecret: this.apiKey
+      client_id: this.appId,
+      client_secret: this.apiKey,
+      redirect_uri: redirectUri
     });
+    return response;
   }
 };
 
@@ -312,18 +323,22 @@ var Authtara = class {
    * @throws ConfigurationError jika apiKey tidak disediakan
    */
   constructor(config) {
+    if (!config.appId) {
+      throw new ConfigurationError(
+        "appId is required. Get it from your Developer Dashboard."
+      );
+    }
     if (!config.apiKey) {
       throw new ConfigurationError(
         "apiKey is required. Get it from your Developer Dashboard."
       );
     }
-    const endpoint = config.endpoint ?? "https://api.digitalsolution.com";
     const httpClient = new HttpClient({
-      baseUrl: endpoint,
+      baseUrl: config.endpoint || "https://api.digitalsolution.com",
       apiKey: config.apiKey,
       timeout: config.timeout
     });
-    this.auth = new AuthModule(config.apiKey, httpClient);
+    this.auth = new AuthModule(config.appId, config.apiKey, httpClient);
     this.billing = new BillingModule(httpClient);
     this.metering = new MeteringModule(httpClient);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "authtara-sdk",
-    "version": "1.1.1",
+    "version": "1.1.2",
     "description": "SDK Client untuk integrasi dengan DigitalSolution Platform - SSO, Billing, dan Metering",
     "main": "./dist/index.js",
     "module": "./dist/index.mjs",