@asteby/storefront 0.20.0 → 0.22.0

package/dist/mock.cjs

@@ -225,6 +225,9 @@ function buildAccountOrders(currency) {
     folio_number: "1042",
     total: money(129900, currency),
     issued_at: "2026-08-13T10:00:00.000Z",
+    payment_method: "PUE",
+    payment_form: "04",
+    receiver: { rfc: "XAXX010101000", name: "P\xFAblico en general", tax_regime: "616", cfdi_use: "S01", postal_code: "76000" },
     test_mode: false,
     environment: "production"
   };
@@ -1916,6 +1919,7 @@ function createMockStorefront(options = {}) {
     notifications: { channels: ["email"] },
     data_export: true,
     account_delete: true,
+    email_change: true,
     ...(options.subjectKinds?.length ?? 0) > 0 ? { subjects: { kinds: options.subjectKinds.map((k) => k.key), share_with_workshop: false } } : {},
     ...options.customerCapabilities
   };
@@ -2321,7 +2325,9 @@ function createMockStorefront(options = {}) {
         first_name: extra.first_name ?? null,
         last_name: extra.last_name ?? null,
         default_address_id: null,
-        created_at: now()
+        created_at: now(),
+        // Registered with no mail connector: the e-mail is only a login name until a code proves it.
+        email_verified: capabilities.email_verification
       };
       state.customers.push(customer);
     }
@@ -2757,7 +2763,8 @@ function createMockStorefront(options = {}) {
         first_name: null,
         last_name: null,
         default_address_id: null,
-        created_at: now()
+        created_at: now(),
+        email_verified: kind === "email"
       };
       state.customers.push(customer);
     }
@@ -2778,12 +2785,12 @@ function createMockStorefront(options = {}) {
     const text = (v) => typeof v === "string" && v.trim() ? v.trim() : null;
     const first_name = text(body.first_name);
     const last_name = text(body.last_name);
-    if (state.passwords.has(email)) throw new HttpError(409, "conflict", "An account with this email already exists", "email");
     if (capabilities.email_verification) {
       state.pendingRegistrations.set(email, { password, first_name, last_name });
       state.otps.set(`email:${email}`, otpCode);
       return { status: 202, body: { status: "verification_required" }, cache: "private" };
     }
+    if (state.passwords.has(email)) throw new HttpError(409, "conflict", "An account with this email already exists", "email");
     state.passwords.set(email, password);
     return { status: 201, body: sessionFor(email, { first_name, last_name }), cache: "private" };
   });
@@ -2960,6 +2967,48 @@ function createMockStorefront(options = {}) {
     info.reauth_at = Date.now();
     return { body: { reauth_at: new Date(info.reauth_at).toISOString(), valid_for_seconds: REAUTH_WINDOW_MS / 1e3 }, cache: "private" };
   });
+  const emailCodeKey = (kind, customerId, email) => `${kind}_email:${customerId}:${email}`;
+  route("POST", "/customer/email/verification", "customer:write", ({ headers }) => {
+    const { c } = sessionOf(headers);
+    if (!c.email) throw new HttpError(422, "invalid_state", "The account has no email", "email");
+    if (c.email_verified !== false) throw new HttpError(422, "invalid_state", "The email is already verified", "email");
+    state.otps.set(emailCodeKey("verify", c.id, c.email), otpCode);
+    return { status: 204 };
+  });
+  route("POST", "/customer/email/verification/confirm", "customer:write", ({ headers, body }) => {
+    const { c } = sessionOf(headers);
+    if (!c.email) throw new HttpError(422, "invalid_state", "The account has no email", "email");
+    if (c.email_verified !== false) throw new HttpError(422, "invalid_state", "The email is already verified", "email");
+    const key = emailCodeKey("verify", c.id, c.email);
+    if (typeof body.code !== "string" || state.otps.get(key) !== body.code) throw new HttpError(400, "validation", "The code is invalid or expired; request a new one", "code");
+    state.otps.delete(key);
+    c.email_verified = true;
+    return { body: c, cache: "private" };
+  });
+  route("POST", "/customer/email/change", "customer:write", ({ headers, body }) => {
+    const { c, info } = sessionOf(headers);
+    requireRecentReauth(info);
+    const email = emailOf(body);
+    if (email === c.email) throw new HttpError(400, "validation", "This is already the email of the account", "email");
+    const taken = state.customers.some((x) => x.email === email) || state.passwords.has(email);
+    if (!taken) state.otps.set(emailCodeKey("change", c.id, email), otpCode);
+    return { status: 202, body: { status: "verification_required" }, cache: "private" };
+  });
+  route("POST", "/customer/email/change/confirm", "customer:write", ({ headers, body }) => {
+    const { c, token } = sessionOf(headers);
+    const email = emailOf(body);
+    const key = emailCodeKey("change", c.id, email);
+    if (typeof body.code !== "string" || state.otps.get(key) !== body.code) throw new HttpError(400, "validation", "The code is invalid or expired; request a new one", "code");
+    state.otps.delete(key);
+    if (c.email && state.passwords.has(c.email)) {
+      state.passwords.set(email, state.passwords.get(c.email));
+      state.passwords.delete(c.email);
+    }
+    c.email = email;
+    c.email_verified = true;
+    for (const [t, id] of [...state.sessions.entries()]) if (id === c.id && t !== token) state.sessions.delete(t);
+    return { body: c, cache: "private" };
+  });
   route("POST", "/customer/data-export", "customer:write", ({ headers }) => {
     const { c, info } = sessionOf(headers);
     requireRecentReauth(info);