cauthy-auth 0.19.0 → 0.22.0

package/dist/{system-DhRr_WxR.d.ts → system-DTIeDXDP.d.ts}

@@ -192,6 +192,8 @@ interface SessionUser {
     emailVerifyBy?: string;
     /** The language the person reads in ("es", "en-US"), when Cauthy knows it. */
     locale?: string;
+    /** A guest: a visitor's session before they sign up. No email; `account.upgrade` makes it an account, keeping `id`. */
+    isAnonymous?: boolean;
 }
 /** A value JSON can carry. What crosses from server to browser is typed as this, never `unknown`. */
 type JsonValue = string | number | boolean | null | JsonValue[] | {

package/dist/vue.d.mts

@@ -1,8 +1,8 @@
 import { ShallowRef, Plugin } from 'vue';
 import { SessionStore, SessionState, SessionStoreOptions, AuthClient } from './client.mjs';
-export { Account, AccountSession, AuthError, AuthMethods, AuthResult, Passkey, PasskeyKind } from './client.mjs';
-import { i as PublicSession } from './system-ZD_Wa8Bm.mjs';
-export { P as PermissionOf, f as Policy, R as RoleOf, k as SessionOrganization, m as SessionUser, p as can, r as definePolicy } from './system-ZD_Wa8Bm.mjs';
+export { Account, AccountSession, AuthError, AuthMethods, AuthResult, Passkey, PasskeyKind, SSOConnection } from './client.mjs';
+import { i as PublicSession } from './system-BxMsSIu1.mjs';
+export { P as PermissionOf, f as Policy, R as RoleOf, k as SessionOrganization, m as SessionUser, p as can, r as definePolicy } from './system-BxMsSIu1.mjs';
 import './theme.mjs';
 import './validate-B_iC-4y8.mjs';
 import 'jose';

package/dist/vue.d.ts

@@ -1,8 +1,8 @@
 import { ShallowRef, Plugin } from 'vue';
 import { SessionStore, SessionState, SessionStoreOptions, AuthClient } from './client.js';
-export { Account, AccountSession, AuthError, AuthMethods, AuthResult, Passkey, PasskeyKind } from './client.js';
-import { i as PublicSession } from './system-DhRr_WxR.js';
-export { P as PermissionOf, f as Policy, R as RoleOf, k as SessionOrganization, m as SessionUser, p as can, r as definePolicy } from './system-DhRr_WxR.js';
+export { Account, AccountSession, AuthError, AuthMethods, AuthResult, Passkey, PasskeyKind, SSOConnection } from './client.js';
+import { i as PublicSession } from './system-DTIeDXDP.js';
+export { P as PermissionOf, f as Policy, R as RoleOf, k as SessionOrganization, m as SessionUser, p as can, r as definePolicy } from './system-DTIeDXDP.js';
 import './theme.js';
 import './validate-B_iC-4y8.js';
 import 'jose';

package/dist/vue.js

@@ -231,8 +231,14 @@ function createAuthClient(options = {}) {
       return null;
     }
   }
+  const upgradeUrl = (provider, o = {}) => `${base}/me/upgrade/social/${encodeURIComponent(provider)}${o.returnTo ? `?return_to=${encodeURIComponent(o.returnTo)}` : ""}`;
   const linkUrl = (provider, o = {}) => `${base}/me/identities/link/${encodeURIComponent(provider)}${o.returnTo ? `?return_to=${encodeURIComponent(o.returnTo)}` : ""}`;
   const socialUrl = (provider, o = {}) => `${base}/sign-in/social/${encodeURIComponent(provider)}${o.returnTo ? `?return_to=${encodeURIComponent(o.returnTo)}` : ""}`;
+  const ssoUrl = (target, o = {}) => {
+    const q = new URLSearchParams("connection" in target ? { connection: target.connection } : { email: target.email.trim() });
+    if (o.returnTo) q.set("return_to", o.returnTo);
+    return `${base}/sign-in/sso?${q}`;
+  };
   const passkeyUrl = (o = {}) => {
     const q = new URLSearchParams({ method: "passkey" });
     if (o.returnTo) q.set("return_to", o.returnTo);
@@ -244,11 +250,11 @@ function createAuthClient(options = {}) {
       const res = await doFetch(`${base}/methods`, { credentials: "same-origin", headers: { accept: "application/json" } });
       if (res.ok) {
         const m = await res.json();
-        return { providers: [], signUp: true, magicLink: false, passkey: false, ...m, passkeyHere: m.passkeyHere === true, passkeyOnCauthy: m.passkeyOnCauthy ?? m.passkey === true };
+        return { providers: [], signUp: true, magicLink: false, passkey: false, ...m, passkeyHere: m.passkeyHere === true, passkeyOnCauthy: m.passkeyOnCauthy ?? m.passkey === true, sso: m.sso === true };
       }
     } catch {
     }
-    return { providers: [], signUp: true, magicLink: false, passkey: false, passkeyHere: false, passkeyOnCauthy: false };
+    return { providers: [], signUp: true, magicLink: false, passkey: false, passkeyHere: false, passkeyOnCauthy: false, sso: false };
   }
   async function ceremony(begin, finish, form, run, more = {}) {
     const begun = await post(begin, form, null);
@@ -263,6 +269,7 @@ function createAuthClient(options = {}) {
   }
   return {
     signIn: {
+      anonymously: (f = {}) => post("/sign-in/anonymous", {}, null, f.captchaToken),
       email: (f) => post("/sign-in/email", { email: f.email, password: f.password }, firstProblem(checkEmail(f.email), checkPassword(f.password)), f.captchaToken),
       mfa: (f) => post("/sign-in/mfa", { code: f.code }, checkCode(f.code)),
       mfaMethods: () => post("/sign-in/mfa/methods", {}, null),
@@ -346,6 +353,11 @@ function createAuthClient(options = {}) {
       socialUrl,
       social(provider, o) {
         window.location.assign(socialUrl(provider, o));
+      },
+      ssoDiscover: (f) => post("/sign-in/sso/discover", { email: f.email.trim() }, checkEmail(f.email)),
+      ssoUrl,
+      sso(target, o) {
+        window.location.assign(ssoUrl(target, o));
       }
     },
     signUp: {
@@ -355,6 +367,24 @@ function createAuthClient(options = {}) {
     resetPassword: (f) => post("/reset-password", { token: f.token, password: f.password }, checkNewPassword(f.password)),
     verifyEmail: (f) => post("/verify-email", { token: f.token }, null),
     signOut: () => post("/sign-out", {}, null),
+    organizations: {
+      async list(system) {
+        const body = await read(`/me/organizations${system ? `?system=${encodeURIComponent(system)}` : ""}`);
+        return body && Array.isArray(body.organizations) ? body.organizations : [];
+      },
+      async members(id) {
+        const body = await read(`/me/organizations/members?id=${encodeURIComponent(id)}`);
+        return body && Array.isArray(body.members) ? body.members : null;
+      },
+      async roles(id) {
+        const body = await read(`/me/organizations/roles?id=${encodeURIComponent(id)}`);
+        return body && Array.isArray(body.roles) ? body.roles : null;
+      },
+      add: (id, f) => post("/me/organizations/members/add", { organizationId: id, email: f.email, role: f.role, name: f.name ?? "", locale: f.locale ?? "" }, checkEmail(f.email)),
+      setRole: (id, userId, role) => post("/me/organizations/members/role", { organizationId: id, userId, role }, null),
+      remove: (id, userId) => post("/me/organizations/members/remove", { organizationId: id, userId }, null),
+      inviteAgain: (id, userId, f = {}) => post("/me/organizations/members/invite", { organizationId: id, userId, locale: f.locale ?? "" }, null)
+    },
     account: {
       async get() {
         const body = await read("/me");
@@ -393,6 +423,11 @@ function createAuthClient(options = {}) {
         return body && Array.isArray(body.sessions) ? body.sessions : [];
       },
       signOutEverywhere: () => post("/me/sessions/end", {}, null),
+      upgrade: (f) => post("/me/upgrade", { email: f.email, password: f.password, name: f.name ?? "" }, firstProblem(checkName(f.name), checkEmail(f.email), checkNewPassword(f.password))),
+      upgradeUrl,
+      upgradeWith(provider, o) {
+        window.location.assign(upgradeUrl(provider, o));
+      },
       async agents() {
         const body = await read("/me/agents");
         return body && Array.isArray(body.agents) ? body.agents : [];