requestRecovery(params: RequestRecoveryParams): Promise<{ flowId: string }>

import { AvnologyId } from "@avnology/sdk-typescript";

const client = new AvnologyId({
  baseUrl: "https://api.id.avnology.com",
  clientId: "app_abc123",
});

const { flowId } = await client.requestRecovery({
  email: "[email protected]",
});

showMessage("If an account exists with that email, a recovery code has been sent.");
// Note: The message is intentionally vague to prevent email enumeration.
// The API always returns success regardless of whether the email exists.

import { RateLimitError } from "@avnology/sdk-typescript";

try {
  const { flowId } = await client.requestRecovery({ email });
  showMessage("Check your email for a recovery code.");
} catch (error) {
  if (error instanceof RateLimitError) {
    showError(
      `Too many recovery requests. ` +
      `Please try again in ${error.retryAfter} seconds.`
    );
  }
}

resetPassword(params: ResetPasswordParams): Promise<Session>

// Step 1: User requests recovery
const { flowId } = await client.requestRecovery({ email: "[email protected]" });

// Step 2: User enters recovery code and new password
const session = await client.resetPassword({
  flowId,
  code: "482901",
  password: "NewSecurePassword456!",
});

console.log("Password reset. Logged in as:", session.identity.email);

import {
  InvalidCodeError,
  ExpiredFlowError,
  PasswordBreachedError,
  PasswordTooWeakError,
} from "@avnology/sdk-typescript";

async function handlePasswordReset(email: string) {
  // Step 1: Request recovery code
  const { flowId } = await client.requestRecovery({ email });
  showMessage("Check your email for a 6-digit recovery code.");

  // Step 2: Get code and new password from user
  const code = await getUserInput("Recovery code:");
  const newPassword = await getUserInput("New password:");

  try {
    const session = await client.resetPassword({
      flowId,
      code,
      password: newPassword,
    });
    showSuccess("Your password has been reset successfully.");
    redirectToDashboard();
  } catch (error) {
    if (error instanceof InvalidCodeError) {
      showError("Invalid recovery code. Please check and try again.");
    } else if (error instanceof ExpiredFlowError) {
      showError(
        "This recovery code has expired. " +
        "Please request a new one."
      );
      // Restart the flow
      await handlePasswordReset(email);
    } else if (error instanceof PasswordBreachedError) {
      showError(
        "This password was found in a data breach. " +
        "Please choose a different password."
      );
    } else if (error instanceof PasswordTooWeakError) {
      showError(`Password too weak: ${error.reason}`);
    }
  }
}

changePassword(params: ChangePasswordParams): Promise<void>

try {
  await client.changePassword({
    currentPassword: "OldPassword123!",
    newPassword: "NewPassword456!",
  });
  showSuccess("Password changed successfully.");
} catch (error) {
  if (error instanceof InvalidCredentialsError) {
    showError("Current password is incorrect.");
  } else if (error instanceof PasswordBreachedError) {
    showError("New password found in a data breach.");
  } else if (error instanceof PasswordTooWeakError) {
    showError(`New password too weak: ${error.reason}`);
  }
}