login(params: LoginParams): Promise<Session>

import { AvnologyId } from "@avnology/sdk-typescript";

const client = new AvnologyId({
  baseUrl: "https://api.id.avnology.com",
  clientId: "app_abc123",
});

const session = await client.login({
  email: "[email protected]",
  password: "SecurePassword123!",
});

console.log(session.id);              // "ses_abc123..."
console.log(session.identity.id);     // "usr_abc123..."
console.log(session.identity.email);  // "[email protected]"
console.log(session.expiresAt);       // "2026-04-09T12:00:00Z"
console.log(session.authenticatorAssuranceLevel); // "aal1"

const session = await client.login({
  email: "[email protected]",
  password: "SecurePassword123!",
  organizationId: "org_abc123",
});

console.log(session.identity.organizationId); // "org_abc123"

import {
  InvalidCredentialsError,
  AccountLockedError,
  MfaRequiredError,
  AccountDisabledError,
  RateLimitError,
  ValidationError,
} from "@avnology/sdk-typescript";

try {
  const session = await client.login({ email, password });
} catch (error) {
  if (error instanceof InvalidCredentialsError) {
    // Wrong email or password. Do not reveal which one is wrong.
    showError("Invalid email or password.");
  } else if (error instanceof AccountLockedError) {
    // Too many failed attempts. Account temporarily locked.
    showError(
      `Account locked due to too many failed attempts. ` +
      `Try again in ${error.retryAfter} seconds.`
    );
  } else if (error instanceof MfaRequiredError) {
    // First factor succeeded, but MFA is required.
    // Redirect user to MFA challenge with the flow ID.
    redirectToMfa(error.flowId, error.availableMethods);
    // error.availableMethods: ["totp", "webauthn", "recovery_code"]
  } else if (error instanceof AccountDisabledError) {
    // The account has been administratively disabled.
    showError("This account has been deactivated. Contact support.");
  } else if (error instanceof RateLimitError) {
    showError(`Too many requests. Try again in ${error.retryAfter} seconds.`);
  } else if (error instanceof ValidationError) {
    // Invalid input (e.g., malformed email).
    showFieldErrors(error.fieldErrors);
    // error.fieldErrors: [{ field: "email", message: "Invalid email format" }]
  }
}

loginWithPasskey(params?: LoginWithPasskeyParams): Promise<Session>

try {
  const session = await client.loginWithPasskey();
  console.log(session.identity.email);
  console.log(session.authenticatorAssuranceLevel); // "aal2" for device-bound passkeys
} catch (error) {
  if (error.name === "NotAllowedError") {
    // User cancelled the WebAuthn dialog
    showError("Passkey authentication was cancelled.");
  }
}

// Start conditional passkey login (non-blocking)
const session = await client.loginWithPasskey({
  mediation: "conditional",
});

loginWithProvider(provider: string, params?: LoginWithProviderParams): void

// Redirect to Google login
client.loginWithProvider("google");

// With return URL
client.loginWithProvider("github", {
  returnUrl: "https://myapp.com/dashboard",
});

// Organization-scoped
client.loginWithProvider("microsoft", {
  organizationId: "org_abc123",
});

// On your callback page or return URL
const session = await client.getSession();
if (session) {
  console.log("Logged in as:", session.identity.email);
  router.navigate("/dashboard");
}

loginWithMagicLink(params: MagicLinkParams): Promise<{ flowId: string }>

const { flowId } = await client.loginWithMagicLink({
  email: "[email protected]",
});

showMessage("Check your email for a login link.");

// The magic link URL contains a token that, when clicked,
// authenticates the user and redirects to your app.

loginWithSms(params: SmsLoginParams): Promise<{ flowId: string }>

// Step 1: Send the SMS code
const { flowId } = await client.loginWithSms({
  phone: "+15550100",
});

showMessage("Enter the 6-digit code sent to your phone.");

// Step 2: Verify the code
const session = await client.verifySmsCode({
  flowId,
  code: "482901", // User-entered code
});

console.log(session.identity.phone); // "+15550100"

verifySmsCode(params: VerifySmsCodeParams): Promise<Session>

import { InvalidCodeError, ExpiredFlowError } from "@avnology/sdk-typescript";

try {
  const session = await client.verifySmsCode({ flowId, code });
} catch (error) {
  if (error instanceof InvalidCodeError) {
    showError("The code you entered is incorrect. Please try again.");
    // error.attemptsRemaining: number of attempts left
  } else if (error instanceof ExpiredFlowError) {
    showError("This code has expired. Please request a new one.");
  }
}