Seamless Auth SDK Updates – Bootstrap & Admin Support

[Bccorb]

Seamless Auth SDK Updates – Bootstrap & Admin Support

Overview

This release introduces major enhancements to the Seamless Auth SDK ecosystem, expanding support beyond authentication into full platform administration, onboarding, and observability.

The core and Express SDKs now support:

• Bootstrap admin initialization

• Admin and internal dashboard APIs

• Session management APIs

• Improved cookie handling for multi-step auth flows

---

Core SDK Additions (@seamless-auth/core)

1. Bootstrap Admin Support

• Added bootstrapAdminInviteHandler

• Supports:

  • Creating bootstrap admin invite

  • Handling service-authenticated requests

  • Returning normalized response structure

• Enhanced registration handler:

  • Extracts seamless_bootstrap_token from upstream Set-Cookie

  • Returns bootstrap cookie via setCookies

---

2. System Configuration APIs

New handlers:

• getAvailableRolesHandler

• getSystemConfigAdminHandler

• updateSystemConfigHandler

Features:

• Admin-authenticated access

• Normalized error handling

• Full response passthrough

---

3. Internal Metrics APIs

New handlers:

• getAuthEventSummaryHandler

• getAuthEventTimeseriesHandler

• getLoginStatsHandler

• getSecurityAnomaliesHandler

• getDashboardMetricsHandler

• getGroupedEventSummaryHandler

Features:

• Query parameter support

• Consistent request abstraction

• Unified response format

---

4. Admin APIs

New handlers:

Users

• getUsersHandler

• createUserHandler

• updateUserHandler

• deleteUserHandler

• getUserDetailHandler

• getUserAnomaliesHandler

Events & Metrics

• getAuthEventsHandler

• getCredentialCountHandler

Sessions (Admin)

• listAllSessionsHandler

• listUserSessionsHandler

• revokeAllUserSessionsHandler

---

5. User Session APIs

New handlers:

• listSessionsHandler

• revokeSessionHandler

• revokeAllSessionsHandler

Features:

• User-scoped session control

• Access-token authenticated

---

6. Cookie Handling Enhancements

• Added support for multiple cookies in handler responses

• Introduced generic cookie definition pattern:

{
  name: string
  value: string | object
  ttl: number
  domain?: string
}