cauthy-auth 0.22.0 → 0.23.0

package/dist/client.d.mts

@@ -439,13 +439,34 @@ interface AuthClient {
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }>>;
-        /** While the second step is asked for: whether the account has an authenticator app, and the phone (masked) a code can be sent to. */
+        /** While the second step is asked for: whether the account has an authenticator app, the phone (masked) a code can be sent to, and phones that approve sign-ins. */
         mfaMethods(): Promise<AuthResult<'ok', {
             totp: boolean;
             phone: {
                 number: string;
                 channel: string;
             } | null;
+            push: {
+                devices: number;
+            } | null;
+        }>>;
+        /**
+         * Sends a push to the account's phones (the application's app, with
+         * cauthy-expo): show `number`, which the person picks on the phone, then
+         * call `mfaPushWait`.
+         */
+        mfaPush(): Promise<AuthResult<'sent', {
+            number: number;
+        }>>;
+        /**
+         * Waits for the phone's answer, listening (server-sent events) rather than
+         * asking again and again, and signs in when it approves. `denied`: turned
+         * down on the phone; `expired`: nobody answered in time.
+         */
+        mfaPushWait(o?: {
+            signal?: AbortSignal;
+        }): Promise<AuthResult<'signed_in', {
+            session: PublicSession;
         }>>;
         /** Sends a code to the account's phone, by SMS or WhatsApp; `mfa` takes it. A few per sign-in. */
         mfaSendCode(): Promise<AuthResult<'sent', {

package/dist/client.d.ts

@@ -439,13 +439,34 @@ interface AuthClient {
         }): Promise<AuthResult<'signed_in', {
             session: PublicSession;
         }>>;
-        /** While the second step is asked for: whether the account has an authenticator app, and the phone (masked) a code can be sent to. */
+        /** While the second step is asked for: whether the account has an authenticator app, the phone (masked) a code can be sent to, and phones that approve sign-ins. */
         mfaMethods(): Promise<AuthResult<'ok', {
             totp: boolean;
             phone: {
                 number: string;
                 channel: string;
             } | null;
+            push: {
+                devices: number;
+            } | null;
+        }>>;
+        /**
+         * Sends a push to the account's phones (the application's app, with
+         * cauthy-expo): show `number`, which the person picks on the phone, then
+         * call `mfaPushWait`.
+         */
+        mfaPush(): Promise<AuthResult<'sent', {
+            number: number;
+        }>>;
+        /**
+         * Waits for the phone's answer, listening (server-sent events) rather than
+         * asking again and again, and signs in when it approves. `denied`: turned
+         * down on the phone; `expired`: nobody answered in time.
+         */
+        mfaPushWait(o?: {
+            signal?: AbortSignal;
+        }): Promise<AuthResult<'signed_in', {
+            session: PublicSession;
         }>>;
         /** Sends a code to the account's phone, by SMS or WhatsApp; `mfa` takes it. A few per sign-in. */
         mfaSendCode(): Promise<AuthResult<'sent', {

package/dist/client.js

@@ -386,6 +386,35 @@ function createAuthClient(options = {}) {
       mfa: (f) => post("/sign-in/mfa", { code: f.code }, checkCode(f.code)),
       mfaMethods: () => post("/sign-in/mfa/methods", {}, null),
       mfaSendCode: () => post("/sign-in/mfa/send", {}, null),
+      mfaPush: () => post("/sign-in/mfa/push", {}, null),
+      async mfaPushWait(o = {}) {
+        const status = await new Promise((resolve) => {
+          if (typeof EventSource !== "function") return resolve("approved");
+          const source = new EventSource(`${base}/sign-in/mfa/push/events`, { withCredentials: true });
+          const stop = (st) => {
+            source.close();
+            resolve(st);
+          };
+          o.signal?.addEventListener("abort", () => stop("aborted"));
+          source.addEventListener("status", (e) => {
+            const st = (() => {
+              try {
+                return String(JSON.parse(e.data).status);
+              } catch {
+                return "";
+              }
+            })();
+            if (st && st !== "pending") stop(st);
+          });
+          source.onerror = () => {
+            if (source.readyState === EventSource.CLOSED) stop("expired");
+          };
+        });
+        if (status === "aborted") return { ok: false, error: { code: "aborted", message: "Stopped waiting." } };
+        if (status === "denied") return { ok: false, error: { code: "push_denied", message: "The sign-in was turned down on the phone." } };
+        if (status === "expired") return { ok: false, error: { code: "push_expired", message: "Nobody answered on the phone in time." } };
+        return post("/sign-in/mfa/push/finish", {}, null);
+      },
       magicLink: (f) => post("/sign-in/magic-link", { email: f.email, ...f.create ? { create: true } : {}, ...f.returnTo ? { returnTo: f.returnTo } : {} }, checkEmail(f.email), f.captchaToken),
       magicLinkVerify: (f) => post("/sign-in/magic-link/verify", { token: f.token }, null),
       emailCode: (f) => post("/sign-in/email-code", { code: f.code }, checkCode(f.code)),