Authentication

import { createCimplifyClient } from '@cimplify/sdk'

export const client = createCimplifyClient({
  publicKey: process.env.NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY!,
})

// 1. Send the code (single string contact: phone in E.164 or email)
const sent = await client.auth.requestOtp('+233244000000')
if (!sent.ok) {
  console.error(sent.error.code, sent.error.message)
  return
}

// 2. Verify: pass the user-entered code first, then the same contact
const verified = await client.auth.verifyOtp('123456', '+233244000000')
if (!verified.ok) {
  console.error(verified.error.code, verified.error.message)
  return
}

// 3. The SDK has already wired the session token into the client.
//    All subsequent requests are authenticated automatically.
console.log(verified.value.customer.id)

// Phone (E.164)
await client.auth.requestOtp('+233244000000')

// Email
await client.auth.requestOtp('jane@example.com')

// Custom idempotency key (otherwise the SDK auto-generates one)
await client.auth.requestOtp('+233244000000', undefined, {
  idempotencyKey: 'send-otp-2024-01-15-abc',
})

const result = await client.auth.verifyOtp('123456', '+233244000000')

if (!result.ok) {
  // Codes you'll see: VALIDATION_ERROR, OTP_EXPIRED, OTP_INVALID
  console.error(result.error.code, result.error.message)
  return
}

const { customer, session_token } = result.value
// session_token is already attached to the client. It's exposed here only
// for cases where you also need to persist it server-side.

const status = await client.auth.getStatus()
if (status.ok) {
  console.log(status.value.is_authenticated)
  console.log(status.value.customer)
  console.log(status.value.session_expires_at)
}

const user = await client.auth.getCurrentUser()    // Result<Customer | null>
const authed = await client.auth.isAuthenticated() // Result<boolean>

const updated = await client.auth.updateProfile({
  name: 'Jane Doe',
  email: 'jane@example.com',
  phone: '+233244000000',
})

if (updated.ok) {
  console.log(updated.value.id, updated.value.name)
}

await client.auth.logout()
// client.getAccessToken() is now undefined; subsequent requests are anonymous

'use client'
import { useState } from 'react'
import { useCimplifyClient } from '@cimplify/sdk/react'

export function SignInForm() {
  const client = useCimplifyClient()
  const [contact, setContact] = useState('')
  const [code, setCode] = useState('')
  const [stage, setStage] = useState<'request' | 'verify'>('request')
  const [error, setError] = useState<string | null>(null)

  async function send() {
    const r = await client.auth.requestOtp(contact)
    if (!r.ok) return setError(r.error.message)
    setStage('verify')
  }

  async function verify() {
    const r = await client.auth.verifyOtp(code, contact)
    if (!r.ok) return setError(r.error.message)
    setError(null)
  }

  return stage === 'request' ? (
    <form onSubmit={(e) => { e.preventDefault(); send() }}>
      <input value={contact} onChange={(e) => setContact(e.target.value)} placeholder="Phone or email" />
      <button type="submit">Send code</button>
      {error && <p>{error}</p>}
    </form>
  ) : (
    <form onSubmit={(e) => { e.preventDefault(); verify() }}>
      <input value={code} onChange={(e) => setCode(e.target.value)} placeholder="6-digit code" />
      <button type="submit">Verify</button>
      {error && <p>{error}</p>}
    </form>
  )
}