Authentication

$user = $yorauth->auth()->register([
    'email'    => 'jane@example.com',
    'password' => 'super-secret-password',
    'name'     => 'Jane Doe',
    'metadata' => [                       // optional
        'plan'          => 'starter',
        'referral_code' => 'ABC123',
    ],
]);

echo $user['id'];    // uuid
echo $user['email']; // 'jane@example.com'

$result = $yorauth->auth()->login('jane@example.com', 'super-secret-password');

// Or with options:
$result = $yorauth->auth()->login('jane@example.com', 'super-secret-password', [
    'remember_me' => true,  // optional — extends refresh token lifetime
]);

if ($result['mfa_required'] ?? false) {
    // Store challenge_token and redirect to MFA step
    $challengeToken = $result['challenge_token'];
    $mfaMethods     = $result['mfa_methods']; // ['totp']
} else {
    $accessToken  = $result['data']['access_token'];
    $refreshToken = $result['data']['refresh_token'];
    $expiresIn    = $result['data']['expires_in']; // seconds
    $user         = $result['data']['user'];
}

$yorauth->auth()->logout($refreshToken);

$tokens = $yorauth->auth()->refreshToken($refreshToken);

$newAccessToken  = $tokens['access_token'];
$newRefreshToken = $tokens['refresh_token']; // rotation — store the new one
$expiresIn       = $tokens['expires_in'];

$yorauth->auth()->forgotPassword('jane@example.com');
// Always succeeds — never reveals whether the email exists.

$yorauth->auth()->resetPassword([
    'token'    => 'token-from-email-link',
    'email'    => 'jane@example.com',
    'password' => 'new-super-secret-password',
]);

$yorauth->auth()->verifyEmail('token-from-verification-email');

$yorauth->auth()->resendVerification('jane@example.com');

$yorauth->auth()->requestMagicLink('jane@example.com');

// Or with a redirect URL:
$yorauth->auth()->requestMagicLink('jane@example.com', 'https://myapp.com/auth/callback');
// Always succeeds — never reveals whether the email exists.

$session = $yorauth->auth()->verifyMagicLink($tokenFromQueryString);

$accessToken  = $session['access_token'];
$refreshToken = $session['refresh_token'];
$user         = $session['user'];
$redirectUrl  = $session['redirect_url']; // set during request, if any

$setup = $yorauth->mfa()->setupTotp($userId, 'My App'); // label is optional — shown in authenticator apps

$methodId        = $setup['data']['method_id'];        // needed for confirm step
$provisioningUri = $setup['data']['provisioning_uri']; // otpauth:// URI

$result = $yorauth->mfa()->confirmTotp($userId, $setup['data']['method_id'], '123456');

$backupCodes = $result['data']['backup_codes']; // string[] — display once and store securely

$yorauth->mfa()->disableTotp($userId, $currentPassword); // password required for re-authentication

$status = $yorauth->mfa()->getStatus($userId);

$status['data']['mfa_enabled'];           // bool
$status['data']['methods'];               // array of active MFA methods
$status['data']['backup_codes_remaining']; // int

$result = $yorauth->mfa()->regenerateBackupCodes($userId, $currentPassword);

$result['data']['backup_codes']; // new codes — previous ones are now invalid

$loginResult = $yorauth->auth()->login('jane@example.com', 'secret');

if ($loginResult['mfa_required'] ?? false) {
    // Accept the code from the user (e.g. from a request input)
    $session = $yorauth->auth()->verifyMfa([
        'challenge_token' => $loginResult['challenge_token'],
        'code'            => $request->input('code'), // 6-digit TOTP or 8-char backup code
    ]);

    $accessToken = $session['data']['access_token'];
    $user        = $session['data']['user'];
}

namespace App\Http\Controllers\Auth;

use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;
use YorAuth\Laravel\Facades\YorAuth;
use YorAuth\Sdk\Exceptions\YorAuthException;

class LoginController extends Controller
{
    public function login(Request $request): JsonResponse
    {
        $request->validate([
            'email'    => 'required|email',
            'password' => 'required|string',
        ]);

        try {
            $result = YorAuth::auth()->login(
                $request->email,
                $request->password,
                ['remember_me' => $request->boolean('remember_me')],
            );
        } catch (YorAuthException $e) {
            return response()->json([
                'message' => $e->getMessage(),
                'code'    => $e->errorCode,
            ], $e->statusCode);
        }

        if ($result['mfa_required'] ?? false) {
            return response()->json([
                'mfa_required'    => true,
                'challenge_token' => $result['challenge_token'],
            ]);
        }

        return response()->json([
            'access_token'  => $result['data']['access_token'],
            'refresh_token' => $result['data']['refresh_token'],
            'expires_in'    => $result['data']['expires_in'],
        ]);
    }
}

// routes/api.php
Route::middleware('yorauth.authenticated')->group(function () {
    Route::get('/me', function (Request $request) {
        return response()->json($request->user());
    });
});