postex-auth-sdk-stage 1.3.2 → 2.0.0

package/dist/auth.d.ts

@@ -1,4 +1,12 @@
 type AuthEntity = "xstak" | "postex" | "callcourier" | "postexglobal" | "postexsa";
+type AuthIdentifierInput = string | {
+    email?: string;
+    mobileNumber?: string;
+    realm?: string;
+};
+interface RealmOptions {
+    realm?: string;
+}
 interface AuthSDKConfig {
     apiKey?: string;
     appId?: AuthEntity;
@@ -66,10 +74,7 @@ interface PasskeyRegistrationChallenge {
     timeout?: number;
     attestation?: AttestationConveyancePreference;
     /** Existing credential IDs to exclude (prevents duplicate registration) */
-    excludeCredentials?: Array<{
-        id: string;
-        type: "public-key";
-    }>;
+    excludeCredentials?: string[];
 }
 interface PasskeyRegisterResponse {
     registered: boolean;
@@ -109,6 +114,8 @@ export declare class AuthSDK {
     constructor(config: AuthSDKConfig);
     private getBaseUrl;
     private normalizeAuthIdentifier;
+    private extractRealm;
+    private buildAuthRequestBody;
     private buildUrl;
     private request;
     /**
@@ -122,26 +129,17 @@ export declare class AuthSDK {
      * GET /auth/status - Check if client has trusted device session and what auth method is available.
      * Returns no_session | session_found | webauthn_ready per PostEx Auth BFF spec.
      */
-    getStatus(identifier: string | {
-        email?: string;
-        mobileNumber?: string;
-    }): Promise<AuthStatusResponse>;
+    getStatus(identifier: AuthIdentifierInput, options?: RealmOptions): Promise<AuthStatusResponse>;
     /**
      * POST /auth/initiate - Unified entry: returns webauthn_challenge or otp_sent.
      * Sets auth_session cookie when otp_sent.
      */
-    initiateAuth(identifier: string | {
-        email?: string;
-        mobileNumber?: string;
-    }): Promise<InitiateAuthResponse>;
+    initiateAuth(identifier: AuthIdentifierInput, options?: RealmOptions): Promise<InitiateAuthResponse>;
     /**
      * POST /otp/initiate - Direct OTP initiation using email or mobile number.
      * Requires at least one identifier: email or mobileNumber.
      */
-    initiateOTP(identifier: string | {
-        email?: string;
-        mobileNumber?: string;
-    }): Promise<OTPInitiateResponse>;
+    initiateOTP(identifier: AuthIdentifierInput, options?: RealmOptions): Promise<OTPInitiateResponse>;
     /**
      * POST /otp/verify - Verifies the OTP code entered by the user.
      * Stores tokens from the response.
@@ -232,7 +230,7 @@ export declare class AuthSDK {
      * Requires trusted device cookie (td). Refresh token is stored server-side.
      * Rate limit: 10 requests per minute.
      */
-    refreshToken(): Promise<RefreshTokenResponse>;
+    refreshToken(options?: RealmOptions): Promise<RefreshTokenResponse>;
     /**
      * POST /auth/logout - Logout from the current device.
      * Revokes the current token and trusted device, then clears local tokens.