[AUTH-3740] Sessions migrate endpoint

lib/b2c/index.ts

@@ -112,6 +112,8 @@ export type {
   SessionsGetJWKSResponse,
   SessionsGetRequest,
   SessionsGetResponse,
+  SessionsMigrateRequest,
+  SessionsMigrateResponse,
   SessionsRevokeRequest,
   SessionsRevokeResponse,
 } from "./sessions";

lib/b2c/m2m.ts

@@ -241,19 +241,19 @@ export class M2M {
   // ADDIMPORT: import { performAuthorizationCheck, ScopeAuthorizationFunc } from "./m2m_local";
   // ADDIMPORT: import { ClientError } from "../shared/errors";
   /**
-             * Authenticate an access token issued by Stytch from the Token endpoint.
-             * M2M access tokens are JWTs signed with the project's JWKs, and can be validated locally using any Stytch client library.
-             * You may pass in an optional set of scopes that the JWT must contain in order to enforce permissions.
-             * You may also override the default scope authorization function to implement custom authorization logic.
-             *
-             * @param data {@link AuthenticateTokenRequest}
-             * @param scopeAuthorizationFunc {@link ScopeAuthorizationFunc} - A function that checks if the token has the required scopes. 
-               The default function assumes scopes are either direct string matches or written in the form "action:resource". See the 
-               documentation for {@link performAuthorizationCheck} for more information.
-             * @async
-             * @returns {@link AuthenticateTokenResponse}
-             * @throws {ClientError} when token can not be authenticated
-             */
+               * Authenticate an access token issued by Stytch from the Token endpoint.
+               * M2M access tokens are JWTs signed with the project's JWKs, and can be validated locally using any Stytch client library.
+               * You may pass in an optional set of scopes that the JWT must contain in order to enforce permissions.
+               * You may also override the default scope authorization function to implement custom authorization logic.
+               *
+               * @param data {@link AuthenticateTokenRequest}
+               * @param scopeAuthorizationFunc {@link ScopeAuthorizationFunc} - A function that checks if the token has the required scopes. 
+                 The default function assumes scopes are either direct string matches or written in the form "action:resource". See the 
+                 documentation for {@link performAuthorizationCheck} for more information.
+               * @async
+               * @returns {@link AuthenticateTokenResponse}
+               * @throws {ClientError} when token can not be authenticated
+               */
   async authenticateToken(
     data: AuthenticateTokenRequest,
     scopeAuthorizationFunc: ScopeAuthorizationFunc = performAuthorizationCheck

lib/b2c/sessions.ts

@@ -507,6 +507,22 @@ export interface SessionsGetResponse {
   status_code: number;
 }
 
+export interface SessionsMigrateRequest {
+  session_token: string;
+  session_duration_minutes?: number;
+  session_custom_claims?: Record<string, any>; // eslint-disable-line @typescript-eslint/no-explicit-any
+}
+
+export interface SessionsMigrateResponse {
+  request_id: string;
+  user_id: string;
+  session_token: string;
+  session_jwt: string;
+  user: User;
+  status_code: number;
+  session?: Session;
+}
+
 // Request type for `sessions.revoke`.
 export interface SessionsRevokeRequest {
   // The `session_id` to revoke.
@@ -661,6 +677,23 @@ export class Sessions {
     });
   }
 
+  /**
+   * @param data {@link SessionsMigrateRequest}
+   * @returns {@link SessionsMigrateResponse}
+   * @async
+   * @throws A {@link StytchError} on a non-2xx response from the Stytch API
+   * @throws A {@link RequestError} when the Stytch API cannot be reached
+   */
+  migrate(data: SessionsMigrateRequest): Promise<SessionsMigrateResponse> {
+    const headers: Record<string, string> = {};
+    return request<SessionsMigrateResponse>(this.fetchConfig, {
+      method: "POST",
+      url: `/v1/sessions/migrate`,
+      headers,
+      data,
+    });
+  }
+
   /**
    * Get the JSON Web Key Set (JWKS) for a project.
    *