oneentry 1.0.176 → 1.0.177

package/esm/attribute-sets/attributeSetsInterfaces.d.ts

@@ -5,6 +5,27 @@ import type { IAttributeLocalizeInfo, IError, ITimeIntervalSchedule } from '../b
  * @description This interface defines methods for retrieving attributes based on markers and language codes.
  */
 interface IAttributesSets {
+    /**
+     * Getting all attribute sets objects.
+     * @handleName getAttributes
+     * @param {string} [langCode] - Language code. Default: "en_US".
+     * @param {number} [offset] - Number of records to skip. Default: 0.
+     * @param {number} [limit] - Maximum number of records to return. Default: 30.
+     * @param {number} [typeId] - ID of the attribute set type to filter by. Default: null.
+     * @param {string} [sortBy] - Field to sort by: `id` (descending) or `position`. Default: "id".
+     * @returns {IAttributesSetsResponse} Object with the array of IAttributeSetsEntity and the total count.
+     * @throws {IError} - If there is an error during the fetch operation, it will return an error object.
+     */
+    getAttributes(langCode?: string, offset?: number, limit?: number, typeId?: any, sortBy?: string): Promise<IAttributesSetsResponse | IError>;
+    /**
+     * Getting one attribute set object by its marker.
+     * @handleName getAttributeSetByMarker
+     * @param {string} marker - Marker of the attribute set. Example: "full_form".
+     * @param {string} [langCode] - Language code. Default: "en_US".
+     * @returns {IAttributeSetsEntity} The attribute set with its schema.
+     * @throws {IError} - If there is an error during the fetch operation, it will return an error object.
+     */
+    getAttributeSetByMarker(marker: string, langCode?: string): Promise<IAttributeSetsEntity | IError>;
     /**
      * Fetches attributes by a specific marker.
      * @handleName getAttributesByMarker
@@ -91,17 +112,15 @@ type AttributeType = 'string' | 'text' | 'textWithHeader' | 'integer' | 'real' |
     [
       {
         "title": "red",
-        "value": 1,
+        "value": "1",
         "position": 1,
-        "extendedValue": null,
-        "extendedValueType": null
+        "extended": { "type": null, "value": null }
       },
       {
         "title": "yellow",
-        "value": 2,
+        "value": "2",
         "position": 2,
-        "extendedValue": null,
-        "extendedValueType": null
+        "extended": { "type": null, "value": null }
       }
     ]
  * @property {IAttributeValidators} validators - Validators configured for the attribute; empty object when none are set.
@@ -119,7 +138,12 @@ type AttributeType = 'string' | 'text' | 'textWithHeader' | 'integer' | 'real' |
    {
      "title": "My attribute"
    }
- * @property {Record<string, IAttributesSetsEntity>} additionalFields - Nested sub-attributes keyed by marker; an empty object when there are none.
+ * @property {Record<string, IAttributeAdditionalField>} additionalFields - Additional fields of the attribute keyed by marker: a type and a value each, not full attributes. An empty object when there are none.
+ * @example
+   {
+     "additional_field": { "type": "string", "value": "Additional field data" }
+   }
+ * @property {boolean} [multiselect] - For `list` attributes — whether several options from `listTitles` may be selected. Example: false.
  * @description This interface defines the structure of an attribute set entity, including its type, marker, position, validators, localization information, list titles, additional fields, and settings.
  */
 interface IAttributesSetsEntity {
@@ -131,7 +155,18 @@ interface IAttributesSetsEntity {
     listTitles: IListTitle[];
     validators: IAttributeValidators;
     localizeInfos: IAttributeLocalizeInfo;
-    additionalFields: Record<string, IAttributesSetsEntity>;
+    additionalFields: Record<string, IAttributeAdditionalField>;
+    multiselect?: boolean;
+}
+/**
+ * @interface IAttributeAdditionalField
+ * @property {string} type - Type of the additional field. Example: "string".
+ * @property {unknown} value - Value of the additional field. Example: "Additional field data".
+ * @description An additional field of an attribute, as `getAttributesByMarker` returns it.
+ */
+interface IAttributeAdditionalField {
+    type: string;
+    value: unknown;
 }
 /**
  * @interface IAttributeSchemaItem
@@ -149,7 +184,7 @@ interface IAttributesSetsEntity {
  * @property {boolean} [multiselect] - For `list` fields — whether several options from `listTitles` may be selected. Optional. Example: false.
  * @property {string} [moduleIdentifier] - For `entity` fields — identifier of the module the linked entities are taken from. Optional. Example: "catalog".
  * @property {number | null} [parentId] - Identifier of the parent field, `null` for top-level. Optional, seen on `groupOfImages` fields.
- * @property {Record<string, IAttributeSchemaItem>} [additionalFields] - Nested sub-fields keyed by marker. Optional.
+ * @property {Record<string, IAttributeAdditionalField>} [additionalFields] - Additional fields keyed by marker: a type and a value each. Optional. Example: `{ "additional_field": { "type": "string", "value": "Additional field data" } }`.
  * @property {IAttributeValidators} [validators] - Validation rules for the field. Optional.
  * @property {boolean | string} [splitUnit] - Splitting unit configuration; `false` when disabled, otherwise the unit name (e.g. "percent"). Optional, used by numeric fields.
  * @property {number[] | boolean} [splitParts] - For split-price fields — ids of the schema fields the price is split into (e.g. [2, 3]); `false` when the field does not split. Optional.
@@ -159,6 +194,14 @@ interface IAttributesSetsEntity {
  * @property {boolean} [receiveValues] - For `timeInterval` fields — whether the field receives precomputed values. Optional.
  * @property {ITimeIntervalSchedule[]} [intervals] - For `timeInterval` fields — top-level schedule definition (separate from `localizeInfos.intervals`). Optional.
  * @property {unknown} [value] - Current value of the field: `null` on numeric fields without a value, an array of schedule groups on `timeInterval` fields. Optional.
+ * @property {boolean} [isLogin] - Whether the field is the login of a sign-up form. Optional.
+ * @property {boolean} [isSignUp] - Whether the field is filled at sign-up. Optional.
+ * @property {boolean} [isPassword] - Whether the field is the password of a sign-up form. Optional.
+ * @property {boolean} [isNotificationEmail] - Whether the field is the e-mail used for notifications. Optional.
+ * @property {boolean} [isNotificationPhoneSMS] - Whether the field is the phone used for SMS notifications. Optional.
+ * @property {boolean} [isNotificationPhonePush] - Whether the field is the phone used for push notifications. Optional.
+ * @property {boolean} [isProductPreview] - Whether the field is the product preview image. Optional.
+ * @property {number | null} [previewTemplateId] - ID of the preview template of an image field. Optional.
  * @description Definition of a single field inside an attribute set's schema.
  */
 interface IAttributeSchemaItem {
@@ -176,7 +219,7 @@ interface IAttributeSchemaItem {
     listType?: string;
     moduleIdentifier?: string;
     parentId?: number | null;
-    additionalFields?: Record<string, IAttributeSchemaItem>;
+    additionalFields?: Record<string, IAttributeAdditionalField>;
     validators?: IAttributeValidators;
     splitUnit?: boolean | string;
     splitParts?: number[] | boolean;
@@ -186,6 +229,14 @@ interface IAttributeSchemaItem {
     receiveValues?: boolean;
     intervals?: ITimeIntervalSchedule[];
     value?: unknown;
+    isLogin?: boolean;
+    isSignUp?: boolean;
+    isPassword?: boolean;
+    isNotificationEmail?: boolean;
+    isNotificationPhoneSMS?: boolean;
+    isNotificationPhonePush?: boolean;
+    isProductPreview?: boolean;
+    previewTemplateId?: number | null;
 }
 /**
  * @interface IAttributeValidators
@@ -333,13 +384,13 @@ interface IAttributeValidators {
        "original": true,
        "identifier": "string",
        "localizeInfos": {
-         "en_US": { "title": "String" }
+         "title": "String"
        }
      }
    }
  * @property {boolean} isVisible - Whether the attribute set is visible. Example: true.
- * @property {string} type - Type of the attribute set. Example: "product", "user", "etc".
- * @property {number} position - Position of the attribute set, used for sorting. Example: 1.
+ * @property {IAttributeSetTypeRef} type - Type of the attribute set: an object with the type id and name. Example: `{ "id": 1, "type": "forProducts" }`.
+ * @property {number} position - Number of the set in the current answer, not a property of the set: it changes with `sortBy` (set 38 is `1` by `id` and `21` by `position`). Example: 1.
  * @description This interface defines the structure of an attribute set entity.
  */
 interface IAttributeSetsEntity {
@@ -386,4 +437,4 @@ interface IAttributesSetsResponse {
     total: number;
     items: IAttributeSetsEntity[];
 }
-export type { AttributeType, IAttributeSchemaItem, IAttributeSetsEntity, IAttributeSetTypeRef, IAttributesSets, IAttributesSetsEntity, IAttributesSetsResponse, IAttributeValidators, IListTitle, IListTitleEntityValue, IListTitleExtended, };
+export type { AttributeType, IAttributeAdditionalField, IAttributeSchemaItem, IAttributeSetsEntity, IAttributeSetTypeRef, IAttributesSets, IAttributesSetsEntity, IAttributesSetsResponse, IAttributeValidators, IListTitle, IListTitleEntityValue, IListTitleExtended, };

package/esm/attribute-sets/attributeSetsSchemas.d.ts

@@ -24,10 +24,11 @@ export declare const AttributeEntitySchema: z.ZodObject<{
     initialValue: z.ZodAny;
     marker: z.ZodString;
     position: z.ZodNumber;
-    listTitles: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>]>>;
-    validators: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>>;
+    listTitles: z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>]>;
+    validators: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>;
     localizeInfos: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>;
-    additionalFields: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>>;
+    additionalFields: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>;
+    multiselect: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 /**
  * Attribute set entity schema (attribute set object)
@@ -77,8 +78,9 @@ export declare const AttributesArrayResponseSchema: z.ZodArray<z.ZodObject<{
     initialValue: z.ZodAny;
     marker: z.ZodString;
     position: z.ZodNumber;
-    listTitles: z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>]>>;
-    validators: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>>;
+    listTitles: z.ZodUnion<readonly [z.ZodArray<z.ZodAny>, z.ZodRecord<z.ZodString, z.ZodAny>]>;
+    validators: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>;
     localizeInfos: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>;
-    additionalFields: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>>;
+    additionalFields: z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodArray<z.ZodAny>]>;
+    multiselect: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>>;

package/esm/attribute-sets/attributeSetsSchemas.js

@@ -24,16 +24,13 @@ export const AttributeEntitySchema = z.object({
     initialValue: z.any(),
     marker: z.string(),
     position: z.number(),
-    listTitles: z
-        .union([z.array(z.any()), z.record(z.string(), z.any())])
-        .optional(),
-    validators: z
-        .union([z.record(z.string(), z.any()), z.array(z.any())])
-        .optional(),
+    // Required as in IAttributesSetsEntity: the API sends them on every attribute
+    listTitles: z.union([z.array(z.any()), z.record(z.string(), z.any())]),
+    validators: z.union([z.record(z.string(), z.any()), z.array(z.any())]),
     localizeInfos: z.union([z.record(z.string(), z.any()), z.array(z.any())]),
-    additionalFields: z
-        .union([z.record(z.string(), z.any()), z.array(z.any())])
-        .optional(),
+    additionalFields: z.union([z.record(z.string(), z.any()), z.array(z.any())]),
+    // The API sends it on list attributes; without it here validation dropped the field
+    multiselect: z.boolean().optional(),
 });
 /**
  * Attribute set entity schema (attribute set object)

package/esm/auth-provider/authProviderApi.d.ts

@@ -90,7 +90,7 @@ export default class AuthProviderApi extends AsyncModules implements IAuthProvid
      * @handleName generateCode
      * @param {string} marker - Marker of the auth provider. Example: "email".
      * @param {string} userIdentifier - Identifier (login) of the user, such as an email address. Example: "example@oneentry.cloud".
-     * @param {string} eventIdentifier - Marker of the event the code is generated for. Example: "user_registration".
+     * @param {string} eventIdentifier - Marker of the event the code is generated for. Example: "reg".
      * @returns {Promise<void | IError>} Returns void if the code is successfully generated, or an error object if there was an issue.
      * @throws {IError} When isShell=false and an error occurs during the fetch
      * @description Obtaining a code to activate the user.
@@ -102,7 +102,7 @@ export default class AuthProviderApi extends AsyncModules implements IAuthProvid
      * @handleName checkCode
      * @param {string} marker - Marker of the auth provider. Example: "email".
      * @param {string} userIdentifier  - The text identifier of the user's object (user login). Example: "example@oneentry.cloud".
-     * @param {string} eventIdentifier - Marker of the event the code is generated for. Example: "user_registration".
+     * @param {string} eventIdentifier - Marker of the event the code is generated for. Example: "reg".
      * @param {string} code - One-time code the user received. Example: "123456".
      * @returns {Promise<boolean | IError>} Returns true if the code is correct, or an error object if there was an issue.
      * @throws {IError} When isShell=false and an error occurs during the fetch
@@ -140,7 +140,7 @@ export default class AuthProviderApi extends AsyncModules implements IAuthProvid
             }
           ]
         }
-     * @param {{ marker: string; value: string | number }[]} body.authData - An array of authentication data objects, each containing a marker and its corresponding value.
+     * @param {{ marker: string; value: string }[]} body.authData - An array of authentication data objects, each containing a marker and its corresponding value.
      * @example
         [
           {
@@ -253,7 +253,7 @@ export default class AuthProviderApi extends AsyncModules implements IAuthProvid
           "redirect_uri": "http://localhost:3000"
         }
      * @param {string} [langCode] - Language code. Default: "en_US".
-     * @returns {Promise<ISignUpEntity | IError>} Returns a user object.
+     * @returns {Promise<IAuthEntity | IError>} Returns the tokens of the signed-in user; they are stored in the state like after `auth`.
      * @throws {IError} When isShell=false and an error occurs during the fetch
      * @description User registration (authorization) via OAUTH.
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/oauth oauth} documentation.

package/esm/auth-provider/authProviderApi.js

@@ -88,17 +88,19 @@ export default class AuthProviderApi extends AsyncModules {
     async signUp(marker, body, langCode = this.state.lang) {
         // `langCode` goes onto our own copy — the caller's body stays as it was
         // given, so a retry or a second parallel call sends the same thing (CMS-909).
-        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/sign-up`, this._normalizePostBody({ ...body, langCode }, langCode));
+        const result = await this._asSignIn()._fetchPost(`/marker/${this._pathSegment(marker)}/users/sign-up`, this._normalizePostBody({ ...body, langCode }, langCode));
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('SignUpResponseSchema'));
-        return this._normalizeData(validated);
+        // The fields went in under `langCode`; without it a sign-up in another language
+        // returned `formData` still keyed by that language
+        return this._normalizeData(validated, langCode);
     }
     /**
      * Getting a user activation code. The code is returned via the appropriate user notification method.
      * @handleName generateCode
      * @param {string} marker - Marker of the auth provider. Example: "email".
      * @param {string} userIdentifier - Identifier (login) of the user, such as an email address. Example: "example@oneentry.cloud".
-     * @param {string} eventIdentifier - Marker of the event the code is generated for. Example: "user_registration".
+     * @param {string} eventIdentifier - Marker of the event the code is generated for. Example: "reg".
      * @returns {Promise<void | IError>} Returns void if the code is successfully generated, or an error object if there was an issue.
      * @throws {IError} When isShell=false and an error occurs during the fetch
      * @description Obtaining a code to activate the user.
@@ -110,14 +112,15 @@ export default class AuthProviderApi extends AsyncModules {
             eventIdentifier,
         };
         const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/generate-code`, data);
-        return result;
+        // An empty 2xx body is read as `{}`; the method returns nothing on success
+        return this._isErrorResponse(result) ? result : undefined;
     }
     /**
      * User activation code verification. Returns true (if the code is correct) or false (if it is incorrect).
      * @handleName checkCode
      * @param {string} marker - Marker of the auth provider. Example: "email".
      * @param {string} userIdentifier  - The text identifier of the user's object (user login). Example: "example@oneentry.cloud".
-     * @param {string} eventIdentifier - Marker of the event the code is generated for. Example: "user_registration".
+     * @param {string} eventIdentifier - Marker of the event the code is generated for. Example: "reg".
      * @param {string} code - One-time code the user received. Example: "123456".
      * @returns {Promise<boolean | IError>} Returns true if the code is correct, or an error object if there was an issue.
      * @throws {IError} When isShell=false and an error occurs during the fetch
@@ -131,7 +134,7 @@ export default class AuthProviderApi extends AsyncModules {
             code,
         };
         const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/check-code`, data);
-        return result;
+        return this._asBoolean(result);
     }
     /**
      * User activate.
@@ -150,7 +153,7 @@ export default class AuthProviderApi extends AsyncModules {
             code: code,
         };
         const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/activate`, data);
-        return result;
+        return this._asBoolean(result);
     }
     /**
      * User authorization.
@@ -170,7 +173,7 @@ export default class AuthProviderApi extends AsyncModules {
             }
           ]
         }
-     * @param {{ marker: string; value: string | number }[]} body.authData - An array of authentication data objects, each containing a marker and its corresponding value.
+     * @param {{ marker: string; value: string }[]} body.authData - An array of authentication data objects, each containing a marker and its corresponding value.
      * @example
         [
           {
@@ -186,12 +189,14 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/auth auth} documentation.
      */
     async auth(marker, body) {
-        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/auth`, body);
+        const result = await this._asSignIn()._fetchPost(`/marker/${this._pathSegment(marker)}/users/auth`, body);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('AuthResponseSchema'));
         if (!('statusCode' in validated)) {
             this.state.accessToken = validated.accessToken;
             this.state.refreshToken = validated.refreshToken;
+            // The automatic refresh has to use the provider the session was opened with
+            this.state.providerMarker = marker;
             if (this.state.saveFunction && validated.refreshToken) {
                 this.state.saveFunction(validated.refreshToken);
             }
@@ -210,10 +215,17 @@ export default class AuthProviderApi extends AsyncModules {
      */
     async refresh(marker, token) {
         const data = { refreshToken: token };
-        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/refresh`, data);
-        if (!('statusCode' in result)) {
+        // Sent as is: through the regular path a restored session (refresh token, no access
+        // token) first refreshed on its own, rotated this very token and the call answered 400
+        const result = await this._asSignIn()._fetchPost(`/marker/${this._pathSegment(marker)}/users/refresh`, data);
+        // Tokens are stored only when the answer carries them: an empty 2xx body came back
+        // as `{}` and wiped the session (`saveFunction(undefined)`)
+        if (!this._isErrorResponse(result) &&
+            typeof (result === null || result === void 0 ? void 0 : result.refreshToken) === 'string' &&
+            typeof (result === null || result === void 0 ? void 0 : result.accessToken) === 'string') {
             this.state.accessToken = result.accessToken;
             this.state.refreshToken = result.refreshToken;
+            this.state.providerMarker = marker;
             if (this.state.saveFunction) {
                 this.state.saveFunction(result.refreshToken);
             }
@@ -232,11 +244,51 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/logout logout} documentation.
      */
     async logout(marker, token) {
-        const data = {
-            refreshToken: token,
+        var _a;
+        // Logout needs a bearer, so a restored session refreshes first — and that rotates the
+        // token passed in. Refresh up front and log out with the rotated one, or the call
+        // answered 400 and the session stayed alive
+        const wasCurrent = token === this.state.refreshToken;
+        if (!this.state.accessToken &&
+            !this.state.customAuth &&
+            wasCurrent &&
+            this._canRefresh() &&
+            (await this.refreshToken())) {
+            token = this.state.refreshToken;
+        }
+        const path = `/marker/${this._pathSegment(marker)}/users/logout`;
+        // Sent quietly and without throwing: a 401 mid-session refreshes and rotates the token
+        // the body carries, the retry answers 400 — that attempt is not the caller's failure
+        const attempt = async (refreshToken) => {
+            try {
+                return this._asBoolean(await this._asSubRequest()._fetchPost(path, {
+                    refreshToken,
+                }));
+            }
+            catch (error) {
+                return error;
+            }
         };
-        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/logout`, data);
-        if (result) {
+        let result = await attempt(token);
+        if (this._isErrorResponse(result) &&
+            wasCurrent &&
+            this.state.refreshToken &&
+            this.state.refreshToken !== token) {
+            result = await attempt(this.state.refreshToken);
+        }
+        if (this._isErrorResponse(result)) {
+            const handler = (_a = this.state.errorsFunctions) === null || _a === void 0 ? void 0 : _a[result.statusCode];
+            if (handler) {
+                await handler(result);
+            }
+            if (!this.state.isShell) {
+                throw result;
+            }
+            return result;
+        }
+        // An error object is truthy too: a failed logout used to wipe the tokens of a
+        // session that is still alive on the server
+        if (result && !this._isErrorResponse(result)) {
             this.state.accessToken = undefined;
             this.state.refreshToken = undefined;
             if (this.state.saveFunction) {
@@ -257,14 +309,16 @@ export default class AuthProviderApi extends AsyncModules {
      */
     async logoutAll(marker) {
         const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/logout-all`);
-        if (result) {
+        // An error object is truthy too: a failed logout used to wipe the tokens of a
+        // session that is still alive on the server
+        if (result && !this._isErrorResponse(result)) {
             this.state.accessToken = undefined;
             this.state.refreshToken = undefined;
             if (this.state.saveFunction) {
                 this.state.saveFunction('');
             }
         }
-        return result;
+        return this._asBoolean(result);
     }
     /**
      * Change password.
@@ -291,7 +345,7 @@ export default class AuthProviderApi extends AsyncModules {
             password2: repeatPassword !== null && repeatPassword !== void 0 ? repeatPassword : newPassword,
         };
         const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/users/change-password`, data);
-        return result;
+        return this._asBoolean(result);
     }
     /**
      * Get all auth providers objects.
@@ -305,7 +359,7 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/getAuthProviders getAuthProviders} documentation.
      */
     async getAuthProviders(langCode = this.state.lang, offset = 0, limit = 30) {
-        const result = await this._fetchGet(`?langCode=${langCode}&offset=${offset}&limit=${limit}`);
+        const result = await this._fetchGet(`?langCode=${encodeURIComponent(langCode)}&offset=${encodeURIComponent(String(offset))}&limit=${encodeURIComponent(String(limit))}`);
         // Validate response if validation is enabled
         const validated = await this._validateResponse(result, schema('AuthProvidersResponseSchema'));
         return this._normalizeData(validated);
@@ -321,7 +375,7 @@ export default class AuthProviderApi extends AsyncModules {
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/getAuthProviderByMarker getAuthProviderByMarker} documentation.
      */
     async getAuthProviderByMarker(marker, langCode = this.state.lang) {
-        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${langCode}`);
+        const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}?langCode=${encodeURIComponent(langCode)}`);
         return this._normalizeData(result);
     }
     /**
@@ -335,7 +389,9 @@ export default class AuthProviderApi extends AsyncModules {
      */
     async getActiveSessionsByMarker(marker) {
         const result = await this._fetchGet(`/marker/${this._pathSegment(marker)}/users/sessions`);
-        return this._normalizeData(result);
+        // Validate response if validation is enabled
+        const validated = await this._validateResponse(result, schema('ActiveSessionsResponseSchema'));
+        return this._normalizeData(validated);
     }
     /**
      * User registration (authorization) via OAUTH.
@@ -351,13 +407,24 @@ export default class AuthProviderApi extends AsyncModules {
           "redirect_uri": "http://localhost:3000"
         }
      * @param {string} [langCode] - Language code. Default: "en_US".
-     * @returns {Promise<ISignUpEntity | IError>} Returns a user object.
+     * @returns {Promise<IAuthEntity | IError>} Returns the tokens of the signed-in user; they are stored in the state like after `auth`.
      * @throws {IError} When isShell=false and an error occurs during the fetch
      * @description User registration (authorization) via OAUTH.
      * @see {@link https://js-sdk.oneentry.cloud/docs/auth-provider/oauth oauth} documentation.
      */
     async oauth(marker, body, langCode = this.state.lang) {
-        const result = await this._fetchPost(`/marker/${this._pathSegment(marker)}/oauth`, this._normalizePostBody(body, langCode));
+        // A sign-in like `auth`: no current session, no refresh on 401, and the issued
+        // tokens are kept — they used to stay out of the state
+        const result = await this._asSignIn()._fetchPost(`/marker/${this._pathSegment(marker)}/oauth`, this._normalizePostBody(body, langCode));
+        if (!this._isErrorResponse(result) &&
+            typeof (result === null || result === void 0 ? void 0 : result.accessToken) === 'string') {
+            this.state.accessToken = result.accessToken;
+            this.state.refreshToken = result.refreshToken;
+            this.state.providerMarker = marker;
+            if (this.state.saveFunction && result.refreshToken) {
+                this.state.saveFunction(result.refreshToken);
+            }
+        }
         return result;
     }
 }

package/esm/auth-provider/authProviderSchemas.d.ts

@@ -24,6 +24,7 @@ export declare const SignUpResponseSchema: z.ZodObject<{
     importId: z.ZodNullable<z.ZodOptional<z.ZodAny>>;
     deletedAt: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     isDeleted: z.ZodOptional<z.ZodBoolean>;
+    oauthSub: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     state: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     rating: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     attributeSetId: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;

package/esm/auth-provider/authProviderSchemas.js

@@ -25,6 +25,7 @@ export const SignUpResponseSchema = z.object({
     importId: z.any().optional().nullable(),
     deletedAt: z.string().optional().nullable(),
     isDeleted: z.boolean().optional(),
+    oauthSub: z.string().nullable().optional(),
     state: z.record(z.string(), z.any()).optional(),
     rating: z.record(z.string(), z.unknown()).optional(),
     attributeSetId: z.number().nullable().optional(),

package/esm/auth-provider/authProvidersInterfaces.d.ts

@@ -47,7 +47,7 @@ interface IAuthProvider {
      * @handleName generateCode
      * @param {string} marker - The marker identifying the auth provider. Example: "email".
      * @param {string} userIdentifier - The user's identifier. Example: "example@oneentry.cloud".
-     * @param {string} eventIdentifier - The event identifier related to the code generation. Example: "user_registration".
+     * @param {string} eventIdentifier - The event identifier related to the code generation. Example: "reg".
      * @returns {void} A promise that resolves to void or an error.
      * @throws {IError} - If there is an error during the fetch operation, it will return an error object.
      * @description This method generates an activation code for a user.
@@ -58,7 +58,7 @@ interface IAuthProvider {
      * @handleName checkCode
      * @param {string} marker - The marker identifying the auth provider. Example: "email".
      * @param {string} userIdentifier - The user's identifier. Example: "example@oneentry.cloud".
-     * @param {string} eventIdentifier - The event identifier related to the code verification. Example: "user_registration".
+     * @param {string} eventIdentifier - The event identifier related to the code verification. Example: "reg".
      * @param {string} code - The activation code to verify. Example: "123456".
      * @returns {boolean} A promise that resolves to a boolean indicating success or failure, or an error.
      * @throws {IError} - If there is an error during the fetch operation, it will return an error object.
@@ -162,7 +162,7 @@ interface IAuthProvider {
     getActiveSessionsByMarker(marker: string): Promise<IActiveSession[] | IError>;
     /**
      * User registration (authorization) via OAUTH.
-     * @handleName oauthSignUp
+     * @handleName oauth
      * @param {string} marker - Marker of the auth provider. Example: "email".
      * @param {IOauthData} body - OAuth data for registration.
      * @example
@@ -174,7 +174,7 @@ interface IAuthProvider {
           "redirect_uri": "http://localhost:3000"
         }
      * @param {string} [langCode] - Language code. Default: "en_US".
-     * @returns {ISignUpEntity} Returns a user object.
+     * @returns {IAuthEntity} Returns the tokens of the signed-in user; they are stored in the state like after `auth`.
      * @throws {IError} - If there is an error during the fetch operation, it will return an error object.
      * @description User registration (authorization) via OAUTH.
      */
@@ -267,6 +267,7 @@ interface IOauthData {
  * @property {unknown} [importId] - Import identifier. Example: null.
  * @property {string | null} [deletedAt] - Deletion date, or `null`. Example: null.
  * @property {boolean} [isDeleted] - Whether the user account is deleted. Example: false.
+ * @property {string | null} [oauthSub] - Subject of the OAuth account the user is linked to; `null` for a user signed up by e-mail. Example: null.
  * @property {Record<string, unknown>} [state] - Custom key-value data stored with the user. Example: {}.
  * @property {IRating} [rating] - Rating data: average value, likes and dislikes, and the calculation method.
  * @property {number | null} [attributeSetId] - ID of the attribute set attached to the user, or `null` when none is attached. Example: null.
@@ -286,6 +287,7 @@ interface ISignUpEntity {
     importId?: unknown;
     deletedAt?: string | null;
     isDeleted?: boolean;
+    oauthSub?: string | null;
     state?: Record<string, unknown>;
     rating?: IRating;
     attributeSetId?: number | null;
@@ -334,7 +336,7 @@ interface IAuthEntity {
  * @property {number} version - Version number of the auth provider; changes with each update. Example: 1.
  * @property {string} identifier - Marker of the auth provider. Example: "email".
  * @property {string} type - Type of the auth provider, for example `"email"`. Example: "email".
- * @property {string | null} formIdentifier - Marker of the form linked to the auth provider, or `null` if there is none. Example: "reg_form".
+ * @property {string | null} formIdentifier - Marker of the form linked to the auth provider, or `null` if there is none. Example: "reg".
  * @property {string} userGroupIdentifier - Identifier of the user group linked to the auth provider. Example: "guest".
  * @property {boolean} isActive - Whether the auth provider is active. Example: true.
  * @property {boolean} isCheckCode - Whether the auth provider requires a verification code. Example: false.
@@ -428,4 +430,4 @@ interface IDeviceInfo {
     browser: string;
     location: string;
 }
-export type { IActiveSession, IAuthData, IAuthEntity, IAuthFormData, IAuthPostBody, IAuthProvider, IAuthProvidersEntity, ICodeEntity, IDeviceInfo, INotificationData, IOauthData, ISignUpData, ISignUpEntity, };
+export type { IActiveSession, IAuthData, IAuthEntity, IAuthFormData, IAuthPostBody, IAuthProvider, IAuthProvidersEntity, IAuthProvidersEntityConfig, ICodeEntity, IDeviceInfo, INotificationData, IOauthData, ISignUpData, ISignUpEntity, };