مصادقة SDK

const { data, error } = await dypai.auth.signUp({
  email: 'user@example.com',
  password: 'secure-password',
  full_name: 'John Doe'  // extra fields auto-forwarded to user_metadata
});

if (error) {
  console.error(error.message);
  return;
}

if (data.confirmationRequired) {
  // Email confirmation is enabled — user must verify their email
  showMessage('Check your inbox to confirm your email');
} else {
  // Email confirmation disabled — user is logged in immediately
  console.log('Logged in:', data.user);
}

await dypai.auth.signUp({
  email, password,
  user_data: { full_name: 'John Doe', company: 'Acme' }
});

const { data, error } = await dypai.auth.signInWithPassword({
  email: 'user@example.com',
  password: 'secure-password'
});

if (error) {
  // If user hasn't confirmed email, error.status will be 400
  console.error(error.message);
  return;
}

console.log('Logged in:', data.user);

const { data, error } = await dypai.auth.resendConfirmationEmail('user@example.com');

if (!error) {
  showMessage('Confirmation email resent — check your inbox');
}

https://your-app.com/#access_token=eyJ...&refresh_token=xxx&type=signup

https://your-app.com/#access_token=eyJ...&refresh_token=xxx&type=invite

dypai.auth.onAuthStateChange((event, session) => {
  if (event === 'SIGNED_IN') {
    router.push('/dashboard');
  }
  if (event === 'PASSWORD_RECOVERY') {
    router.push('/reset-password');
  }
});

dypai.auth.onAuthStateChange(async (event) => {
  if (event === 'PASSWORD_RECOVERY') {
    await dypai.auth.setPassword('new-secure-password');
  }
});

// 1. Send a 6-digit code to the user's email
await dypai.auth.signInWithOtp({
  email: 'user@example.com',
  create_user: true  // auto-register if user doesn't exist
});

// 2. User enters the code
const { data, error } = await dypai.auth.verifyOtp({
  email: 'user@example.com',
  token: '123456',
  type: 'magiclink'  // always 'magiclink' for email OTP
});

// 1. Send a 6-digit code via SMS
await dypai.auth.signInWithOtp({
  phone: '+34600000000',
  create_user: true
});

// 2. User enters the code
const { data, error } = await dypai.auth.verifyOtp({
  phone: '+34600000000',
  token: '123456',
  type: 'sms'  // always 'sms' for phone OTP
});

await dypai.auth.signInWithOAuth('google', {
  redirectTo: 'https://your-app.com/auth/callback',
  scopes: ['email', 'profile']  // optional
});

// 1. Send a password reset email
await dypai.auth.resetPasswordForEmail('user@example.com');

// 2. User clicks the link in the email → SDK auto-detects the recovery token
dypai.auth.onAuthStateChange(async (event, session) => {
  if (event === 'PASSWORD_RECOVERY') {
    // Show "set new password" form, then:
    const { data, error } = await dypai.auth.updateUser({
      password: 'new-secure-password'
    });
  }
});

const { data: session, error } = await dypai.auth.getSession();

if (session) {
  console.log('Token:', session.access_token);
  console.log('User:', session.user);
}

const { data: user, error } = await dypai.auth.getUser();
// or the shorthand alias:
const { data: user, error } = await dypai.me();

if (dypai.auth.isLoggedIn()) {
  // User has an active session
}

const { data: user } = await dypai.auth.getUser();

user.id          // User UUID
user.email       // email
user.role        // "admin", "editor", "viewer", etc. — your app role
user.confirmed_at // null if email not confirmed

// Read current user
const user = dypai.auth.user;
console.log(user.email, user.confirmed_at);

// Update user metadata
await dypai.auth.updateUser({
  data: {
    full_name: 'John Doe',
    avatar_url: 'https://example.com/avatar.jpg'
  }
});

const { data: { subscription } } = dypai.auth.onAuthStateChange((event, session) => {
  switch (event) {
    case 'INITIAL_SESSION':
      // Fired on SDK init — session recovered from storage (or null)
      break;
    case 'SIGNED_IN':
      // User logged in (password, OTP, OAuth, or email link callback)
      break;
    case 'SIGNED_OUT':
      // User logged out or session expired
      break;
    case 'TOKEN_REFRESHED':
      // Access token silently refreshed in background
      break;
    case 'USER_UPDATED':
      // Profile or password changed via updateUser()
      break;
    case 'PASSWORD_RECOVERY':
      // User arrived via password reset link — show new password form
      break;
  }
});

// To unsubscribe later:
subscription.unsubscribe();

await dypai.auth.signOut();