nexabase-console 2.0.0 → 2.0.2

package/README.md

@@ -220,47 +220,120 @@ async function potongStokAman(productId, variantId, qtyBeli) {
 
 ---
 
-### 3. Autentikasi Pengguna & OTP Tanpa Sandi
+### 3. Autentikasi Pengguna & OTP Tanpa Sandi (SDK v2.0.0)
 
-#### Pendaftaran & Login Tradisional
+#### Inisialisasi Auth & Realtime State Listener
 ```javascript
-// Registrasi User Baru
+import { getAuth, NexaAuthError } from 'nexabase-console';
+
+const auth = getAuth(app);
+
+// Realtime Listener & Sync Sesi Multi-Tab via StorageEvent
+const unsubscribe = auth.onAuthStateChanged((user) => {
+  if (user) {
+    console.log("User terautentikasi:", user.uid, "| Email:", user.email);
+  } else {
+    console.log("User ter-logout / belum login");
+  }
+});
+```
+
+#### Pendaftaran & Login Email/Password
+```javascript
+// 1. Registrasi Akun Baru
 const register = async () => {
-  const user = await app.auth().createUserWithEmailAndPassword(
-    'test@example.com', 
-    'password123', 
-    'Andi Wijaya'
-  );
-  console.log("Registrasi Berhasil:", user);
+  try {
+    const session = await auth.createUserWithEmailAndPassword(
+      'budi@example.com', 
+      'Password123!', 
+      'Budi Santoso'
+    );
+    console.log("Registrasi Berhasil! UID:", session.user.uid);
+  } catch (err) {
+    if (err instanceof NexaAuthError && err.code === 'auth/email-already-in-use') {
+      console.error("Email sudah terdaftar.");
+    }
+  }
 };
 
-// Login User
+// 2. Login User (Dukungan Automatic Single-Flight Token Refresh)
 const login = async () => {
-  const authSession = await app.auth().signInWithEmailAndPassword(
-    'test@example.com', 
-    'password123'
-  );
-  console.log("Token Sesi JWT:", authSession.token);
-  console.log("Data Akun Pengguna:", authSession.user);
+  try {
+    const session = await auth.signInWithEmailAndPassword(
+      'budi@example.com', 
+      'Password123!'
+    );
+    console.log("Access Token JWT:", session.accessToken);
+    console.log("Refresh Token:", session.refreshToken);
+  } catch (err) {
+    if (err instanceof NexaAuthError && err.code === 'auth/invalid-credential') {
+      console.error("Email atau password salah.");
+    }
+  }
 };
 ```
 
-#### Login Passwordless dengan OTP (Email)
+#### Login Passwordless dengan OTP (Email 6-Digit)
 ```javascript
-// 1. Kirim OTP Ke Email Pengguna
+// 1. Kirim OTP Ke Email (Berlaku 5 Menit, Hash Single-Use)
 const sendMyOtp = async () => {
-  const res = await app.auth().sendOtp('test@example.com');
-  console.log("Kode OTP berhasil terkirim ke email Anda.");
+  const res = await auth.sendOtp('budi@example.com');
+  console.log("Kode OTP berhasil terkirim:", res.message);
 };
 
 // 2. Verifikasi OTP dari Input Pengguna
 const verifyMyOtp = async () => {
-  const otpCode = '123456'; // Kode 6 digit yang dikirim ke email
-  const authSession = await app.auth().signInWithOtp('test@example.com', otpCode, 'Andi Wijaya');
-  console.log("Login OTP Berhasil! Sesi JWT Aktif:", authSession.token);
+  try {
+    const otpCode = '123456'; // Kode 6 digit yang dikirim ke email
+    const session = await auth.signInWithOtp('budi@example.com', otpCode);
+    console.log("Login OTP Berhasil! Welcome:", session.user.email);
+  } catch (err) {
+    if (err instanceof NexaAuthError) {
+      if (err.code === 'auth/invalid-otp') console.error("OTP tidak valid.");
+      if (err.code === 'auth/expired-otp') console.error("OTP kedaluwarsa.");
+      if (err.code === 'auth/too-many-otp-attempts') console.error("Terlalu banyak percobaan.");
+    }
+  }
 };
 ```
 
+#### Mengambil ID Token untuk Request API / Server Verification
+```javascript
+// Mengambil token JWT (dengan auto-refresh jika hampir expired)
+const idToken = await auth.getIdToken(/* forceRefresh */ false);
+
+// Mengambil rincian klaim token (exp, authTime, claims)
+const tokenResult = await auth.getIdTokenResult();
+console.log("Token Kedaluwarsa:", tokenResult.expirationTime);
+```
+
+#### Update Profil, Reset Password & Sign Out
+```javascript
+// Update Profil
+await auth.updateProfile({ name: 'Budi Santoso, M.T.', photoURL: 'https://example.com/photo.jpg' });
+
+// Reset Password Email
+await auth.sendPasswordResetEmail('budi@example.com');
+
+// Revoke All Sessions
+await auth.revokeAllSessions();
+
+// === Opsi Logout Akun (Sign Out) ===
+// 1. Method Instance (Rekomendasi)
+await auth.signOut();
+
+// 2. Fungsi Standar Modular
+import { signOut } from 'nexabase-console';
+await signOut(auth);
+
+// 3. Namespace Helper
+import { NexabaseAuth } from 'nexabase-console';
+await NexabaseAuth.signOut(auth);
+
+// 4. Shortcut dari objek App
+await app.signOut();
+```
+
 ---
 
 ### 4. File Storage API

package/dist/app/NexaApp.d.ts

@@ -1,8 +1,9 @@
 import { AxiosInstance } from 'axios';
-import { NexaConfig, User, AuthResponse, DatabaseReference, StorageReference, UploadOptions, OfflineJob } from '../types/index';
+import { NexaConfig, DatabaseReference, StorageReference, UploadOptions, OfflineJob } from '../types/index';
 import { HttpClient } from '../transport/HttpClient';
 import { SSEClient } from '../transport/SSEClient';
 import { Auth } from '../auth/Auth';
+import { User as AuthUser, AuthSession } from '../auth/authTypes';
 import { IndexedDB } from '../persistence/IndexedDB';
 import { LocalStore } from '../persistence/LocalStore';
 import { MutationQueue } from '../persistence/MutationQueue';
@@ -44,15 +45,15 @@ export declare class NexaApp {
     _ensureFirestoreSSE(): void;
     _closeFirestoreSSEIfIdle(): void;
     _notifySnapshotCallbacks(path: string, actionType: string, payload: any): void;
-    signInWithEmailAndPassword(email: string, password: string): Promise<AuthResponse>;
-    createUserWithEmailAndPassword(email: string, password: string, name: string): Promise<User>;
+    signInWithEmailAndPassword(email: string, password: string): Promise<AuthSession>;
+    createUserWithEmailAndPassword(email: string, password: string, name?: string): Promise<AuthSession>;
     sendOtp(email: string): Promise<{
         success: boolean;
         message: string;
     }>;
-    signInWithOtp(email: string, otp: string, name?: string): Promise<AuthResponse>;
+    signInWithOtp(email: string, otp: string): Promise<AuthSession>;
     signOut(): void;
-    getCurrentUser(): User | null;
+    getCurrentUser(): AuthUser | null;
     ref(path: string): DatabaseReference;
     storageRef(path: string): StorageReference;
     uploadFile(path: string, file: File | Blob, options?: UploadOptions): Promise<{

package/dist/app/NexaApp.js

@@ -150,8 +150,8 @@ class NexaApp {
     async sendOtp(email) {
         return this.authService.sendOtp(email);
     }
-    async signInWithOtp(email, otp, name) {
-        const res = await this.authService.signInWithOtp(email, otp, name);
+    async signInWithOtp(email, otp) {
+        const res = await this.authService.signInWithOtp(email, otp);
         this.token = this.authService.getToken();
         return res;
     }

package/dist/app/initializeApp.d.ts

@@ -1,8 +1,14 @@
 import { NexaApp } from './NexaApp';
 import { NexaConfig } from '../types/index';
+import { Auth } from '../auth/Auth';
 export declare const NexaBase: {
     init: (config: NexaConfig) => NexaApp;
     initializeApp: (config: NexaConfig) => NexaApp;
 };
 export declare const initializeApp: (config: NexaConfig) => NexaApp;
 export declare const getFirestore: (app: NexaApp) => NexaApp;
+export declare const getAuth: (app: NexaApp) => Auth;
+export declare const signOut: (auth: Auth) => Promise<void>;
+export declare const NexabaseAuth: {
+    signOut: (auth: Auth) => Promise<void>;
+};

package/dist/app/initializeApp.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getFirestore = exports.initializeApp = exports.NexaBase = void 0;
+exports.NexabaseAuth = exports.signOut = exports.getAuth = exports.getFirestore = exports.initializeApp = exports.NexaBase = void 0;
 const NexaApp_1 = require("./NexaApp");
 exports.NexaBase = {
     init: (config) => {
@@ -25,3 +25,16 @@ const getFirestore = (app) => {
     return app;
 };
 exports.getFirestore = getFirestore;
+const getAuth = (app) => {
+    return app.authService;
+};
+exports.getAuth = getAuth;
+const signOut = (auth) => {
+    return auth.signOut();
+};
+exports.signOut = signOut;
+exports.NexabaseAuth = {
+    signOut: (auth) => {
+        return auth.signOut();
+    }
+};

package/dist/auth/Auth.d.ts

@@ -1,21 +1,53 @@
 import { AxiosInstance } from 'axios';
-import { User, AuthResponse } from './authTypes';
+import { User, AuthSession, IdTokenResult, UserProfileUpdate, AuthStateCallback } from './authTypes';
 export declare class Auth {
     private projectId;
     private client;
-    private token;
     private persistence;
+    private emulatorUrl;
+    private currentSession;
+    private listeners;
+    private refreshPromise;
+    private refreshTimer;
     constructor(projectId: string, client: AxiosInstance, initialToken: string | null);
+    connectAuthEmulator(url: string): void;
+    get emulator(): string | null;
+    private initSession;
+    onAuthStateChanged(callback: AuthStateCallback): () => void;
+    private notifyListeners;
+    private handleStorageChange;
+    get currentUser(): User | null;
     getToken(): string | null;
     setToken(token: string | null): void;
-    signInWithEmailAndPassword(email: string, password: string): Promise<AuthResponse>;
-    createUserWithEmailAndPassword(email: string, password: string, name: string): Promise<User>;
+    getIdToken(forceRefresh?: boolean): Promise<string>;
+    getIdTokenResult(forceRefresh?: boolean): Promise<IdTokenResult>;
+    private parseJwtClaims;
+    private refreshAccessTokenDeduplicated;
+    private refreshAccessToken;
+    private scheduleAutoRefresh;
+    private clearAutoRefresh;
+    createUserWithEmailAndPassword(email: string, password: string, name?: string): Promise<AuthSession>;
+    signInWithEmailAndPassword(email: string, password: string): Promise<AuthSession>;
     sendOtp(email: string): Promise<{
         success: boolean;
         message: string;
     }>;
-    signInWithOtp(email: string, otp: string, name?: string): Promise<AuthResponse>;
-    signOut(): void;
+    signInWithOtp(email: string, otp: string): Promise<AuthSession>;
+    sendPasswordResetEmail(email: string): Promise<{
+        success: boolean;
+    }>;
+    confirmPasswordReset(code: string, newPassword: string): Promise<{
+        success: boolean;
+    }>;
+    sendEmailVerification(): Promise<{
+        success: boolean;
+    }>;
+    updateProfile(update: UserProfileUpdate): Promise<User>;
+    updatePassword(newPassword: string): Promise<void>;
+    deleteUser(): Promise<void>;
+    revokeSession(sessionId?: string): Promise<void>;
+    revokeAllSessions(): Promise<void>;
+    signOut(): Promise<void>;
     getCurrentUser(): User | null;
 }
 export { Auth as AuthService };