herald-auth-web 0.5.1 → 0.5.2

package/dist/index.js

@@ -838,6 +838,14 @@ var verify = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
+var ldapLogin = (options) => (options.client ?? client).post({
+  url: "/api/auth/{realmId}/login/ldap",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
 var handlePasskey2FaOptions = (options) => (options.client ?? client).post({
   url: "/api/auth/{realmId}/login/passkey/2fa/options",
   ...options,
@@ -1178,6 +1186,31 @@ function createAuth(deps) {
       );
       return toLoginResult(body, deps);
     },
+    /**
+     * Corporate-directory (LDAP) login. Mirrors `login()`: the directory
+     * credentials are verified server-side (search-then-bind) and the 200 body
+     * is normalized through the same `toLoginResult` multi-branch handling
+     * (success tokens / second-factor / consent / oauth-redirect).
+     */
+    async loginWithLdap(payload) {
+      const body = await resolveOp(
+        ldapLogin({
+          client: client2,
+          path: { realmId },
+          body: {
+            clientId: deps.clientId,
+            username: payload.username,
+            password: payload.password,
+            ...payload.turnstileToken ? { turnstileToken: payload.turnstileToken } : {},
+            ...payload.agreements ? { agreements: payload.agreements } : {},
+            ...payload.oauthClientId ? { oauthClientId: payload.oauthClientId } : {},
+            ...payload.redirectUri ? { redirectUri: payload.redirectUri } : {},
+            ...payload.state ? { state: payload.state } : {}
+          }
+        })
+      );
+      return toLoginResult(body, deps);
+    },
     async verifyTotp(payload) {
       const body = await resolveOp(
         handleVerifyTotp({