@asteby/storefront 0.21.1 → 0.22.1

package/dist/mock.cjs

@@ -1919,6 +1919,7 @@ function createMockStorefront(options = {}) {
     notifications: { channels: ["email"] },
     data_export: true,
     account_delete: true,
+    email_change: true,
     ...(options.subjectKinds?.length ?? 0) > 0 ? { subjects: { kinds: options.subjectKinds.map((k) => k.key), share_with_workshop: false } } : {},
     ...options.customerCapabilities
   };
@@ -2324,7 +2325,9 @@ function createMockStorefront(options = {}) {
         first_name: extra.first_name ?? null,
         last_name: extra.last_name ?? null,
         default_address_id: null,
-        created_at: now()
+        created_at: now(),
+        // Registered with no mail connector: the e-mail is only a login name until a code proves it.
+        email_verified: capabilities.email_verification
       };
       state.customers.push(customer);
     }
@@ -2760,7 +2763,8 @@ function createMockStorefront(options = {}) {
         first_name: null,
         last_name: null,
         default_address_id: null,
-        created_at: now()
+        created_at: now(),
+        email_verified: kind === "email"
       };
       state.customers.push(customer);
     }
@@ -2963,6 +2967,48 @@ function createMockStorefront(options = {}) {
     info.reauth_at = Date.now();
     return { body: { reauth_at: new Date(info.reauth_at).toISOString(), valid_for_seconds: REAUTH_WINDOW_MS / 1e3 }, cache: "private" };
   });
+  const emailCodeKey = (kind, customerId, email) => `${kind}_email:${customerId}:${email}`;
+  route("POST", "/customer/email/verification", "customer:write", ({ headers }) => {
+    const { c } = sessionOf(headers);
+    if (!c.email) throw new HttpError(422, "invalid_state", "The account has no email", "email");
+    if (c.email_verified !== false) throw new HttpError(422, "invalid_state", "The email is already verified", "email");
+    state.otps.set(emailCodeKey("verify", c.id, c.email), otpCode);
+    return { status: 204 };
+  });
+  route("POST", "/customer/email/verification/confirm", "customer:write", ({ headers, body }) => {
+    const { c } = sessionOf(headers);
+    if (!c.email) throw new HttpError(422, "invalid_state", "The account has no email", "email");
+    if (c.email_verified !== false) throw new HttpError(422, "invalid_state", "The email is already verified", "email");
+    const key = emailCodeKey("verify", c.id, c.email);
+    if (typeof body.code !== "string" || state.otps.get(key) !== body.code) throw new HttpError(400, "validation", "The code is invalid or expired; request a new one", "code");
+    state.otps.delete(key);
+    c.email_verified = true;
+    return { body: c, cache: "private" };
+  });
+  route("POST", "/customer/email/change", "customer:write", ({ headers, body }) => {
+    const { c, info } = sessionOf(headers);
+    requireRecentReauth(info);
+    const email = emailOf(body);
+    if (email === c.email) throw new HttpError(400, "validation", "This is already the email of the account", "email");
+    const taken = state.customers.some((x) => x.email === email) || state.passwords.has(email);
+    if (!taken) state.otps.set(emailCodeKey("change", c.id, email), otpCode);
+    return { status: 202, body: { status: "verification_required" }, cache: "private" };
+  });
+  route("POST", "/customer/email/change/confirm", "customer:write", ({ headers, body }) => {
+    const { c, token } = sessionOf(headers);
+    const email = emailOf(body);
+    const key = emailCodeKey("change", c.id, email);
+    if (typeof body.code !== "string" || state.otps.get(key) !== body.code) throw new HttpError(400, "validation", "The code is invalid or expired; request a new one", "code");
+    state.otps.delete(key);
+    if (c.email && state.passwords.has(c.email)) {
+      state.passwords.set(email, state.passwords.get(c.email));
+      state.passwords.delete(c.email);
+    }
+    c.email = email;
+    c.email_verified = true;
+    for (const [t, id] of [...state.sessions.entries()]) if (id === c.id && t !== token) state.sessions.delete(t);
+    return { body: c, cache: "private" };
+  });
   route("POST", "/customer/data-export", "customer:write", ({ headers }) => {
     const { c, info } = sessionOf(headers);
     requireRecentReauth(info);