@asteby/storefront 0.21.1 → 0.22.1

package/dist/mock.d.cts

@@ -1,4 +1,4 @@
-import { bO as SubjectKind, a6 as IdentityRulesV1, bi as RegionFiscalId, a4 as IdentityDocumentSpec, bg as Region, bz as Shop, b1 as Product, y as Collection, bR as Theme, aI as Page, aq as Menu, c as Article, C as Cart, a as Address, ag as InvoiceRequest, B as Customer, $ as FiscalProfile, bI as Subject, ax as Order, aL as PaymentAttemptResult, a_ as PendingPayment, ai as InvoiceStage, D as CustomerCapabilities, b8 as PromotionAnnouncement, by as ShippingRate, aS as PaymentMethod } from './account-settings-BkShqX2k.cjs';
+import { bS as SubjectKind, aa as IdentityRulesV1, bm as RegionFiscalId, a8 as IdentityDocumentSpec, bk as Region, bD as Shop, b5 as Product, y as Collection, bV as Theme, aM as Page, au as Menu, c as Article, C as Cart, a as Address, ak as InvoiceRequest, B as Customer, a3 as FiscalProfile, bM as Subject, aB as Order, aP as PaymentAttemptResult, b2 as PendingPayment, am as InvoiceStage, D as CustomerCapabilities, bc as PromotionAnnouncement, bC as ShippingRate, aW as PaymentMethod } from './account-settings-DZGcveuu.cjs';
 import './geo.cjs';
 
 /**

package/dist/mock.d.ts

@@ -1,4 +1,4 @@
-import { bO as SubjectKind, a6 as IdentityRulesV1, bi as RegionFiscalId, a4 as IdentityDocumentSpec, bg as Region, bz as Shop, b1 as Product, y as Collection, bR as Theme, aI as Page, aq as Menu, c as Article, C as Cart, a as Address, ag as InvoiceRequest, B as Customer, $ as FiscalProfile, bI as Subject, ax as Order, aL as PaymentAttemptResult, a_ as PendingPayment, ai as InvoiceStage, D as CustomerCapabilities, b8 as PromotionAnnouncement, by as ShippingRate, aS as PaymentMethod } from './account-settings-quulZwuF.js';
+import { bS as SubjectKind, aa as IdentityRulesV1, bm as RegionFiscalId, a8 as IdentityDocumentSpec, bk as Region, bD as Shop, b5 as Product, y as Collection, bV as Theme, aM as Page, au as Menu, c as Article, C as Cart, a as Address, ak as InvoiceRequest, B as Customer, a3 as FiscalProfile, bM as Subject, aB as Order, aP as PaymentAttemptResult, b2 as PendingPayment, am as InvoiceStage, D as CustomerCapabilities, bc as PromotionAnnouncement, bC as ShippingRate, aW as PaymentMethod } from './account-settings-CwEnn5sR.js';
 import './geo.js';
 
 /**

package/dist/mock.js

@@ -1642,6 +1642,7 @@ function createMockStorefront(options = {}) {
     notifications: { channels: ["email"] },
     data_export: true,
     account_delete: true,
+    email_change: true,
     ...(options.subjectKinds?.length ?? 0) > 0 ? { subjects: { kinds: options.subjectKinds.map((k) => k.key), share_with_workshop: false } } : {},
     ...options.customerCapabilities
   };
@@ -2047,7 +2048,9 @@ function createMockStorefront(options = {}) {
         first_name: extra.first_name ?? null,
         last_name: extra.last_name ?? null,
         default_address_id: null,
-        created_at: now()
+        created_at: now(),
+        // Registered with no mail connector: the e-mail is only a login name until a code proves it.
+        email_verified: capabilities.email_verification
       };
       state.customers.push(customer);
     }
@@ -2483,7 +2486,8 @@ function createMockStorefront(options = {}) {
         first_name: null,
         last_name: null,
         default_address_id: null,
-        created_at: now()
+        created_at: now(),
+        email_verified: kind === "email"
       };
       state.customers.push(customer);
     }
@@ -2686,6 +2690,48 @@ function createMockStorefront(options = {}) {
     info.reauth_at = Date.now();
     return { body: { reauth_at: new Date(info.reauth_at).toISOString(), valid_for_seconds: REAUTH_WINDOW_MS / 1e3 }, cache: "private" };
   });
+  const emailCodeKey = (kind, customerId, email) => `${kind}_email:${customerId}:${email}`;
+  route("POST", "/customer/email/verification", "customer:write", ({ headers }) => {
+    const { c } = sessionOf(headers);
+    if (!c.email) throw new HttpError(422, "invalid_state", "The account has no email", "email");
+    if (c.email_verified !== false) throw new HttpError(422, "invalid_state", "The email is already verified", "email");
+    state.otps.set(emailCodeKey("verify", c.id, c.email), otpCode);
+    return { status: 204 };
+  });
+  route("POST", "/customer/email/verification/confirm", "customer:write", ({ headers, body }) => {
+    const { c } = sessionOf(headers);
+    if (!c.email) throw new HttpError(422, "invalid_state", "The account has no email", "email");
+    if (c.email_verified !== false) throw new HttpError(422, "invalid_state", "The email is already verified", "email");
+    const key = emailCodeKey("verify", c.id, c.email);
+    if (typeof body.code !== "string" || state.otps.get(key) !== body.code) throw new HttpError(400, "validation", "The code is invalid or expired; request a new one", "code");
+    state.otps.delete(key);
+    c.email_verified = true;
+    return { body: c, cache: "private" };
+  });
+  route("POST", "/customer/email/change", "customer:write", ({ headers, body }) => {
+    const { c, info } = sessionOf(headers);
+    requireRecentReauth(info);
+    const email = emailOf(body);
+    if (email === c.email) throw new HttpError(400, "validation", "This is already the email of the account", "email");
+    const taken = state.customers.some((x) => x.email === email) || state.passwords.has(email);
+    if (!taken) state.otps.set(emailCodeKey("change", c.id, email), otpCode);
+    return { status: 202, body: { status: "verification_required" }, cache: "private" };
+  });
+  route("POST", "/customer/email/change/confirm", "customer:write", ({ headers, body }) => {
+    const { c, token } = sessionOf(headers);
+    const email = emailOf(body);
+    const key = emailCodeKey("change", c.id, email);
+    if (typeof body.code !== "string" || state.otps.get(key) !== body.code) throw new HttpError(400, "validation", "The code is invalid or expired; request a new one", "code");
+    state.otps.delete(key);
+    if (c.email && state.passwords.has(c.email)) {
+      state.passwords.set(email, state.passwords.get(c.email));
+      state.passwords.delete(c.email);
+    }
+    c.email = email;
+    c.email_verified = true;
+    for (const [t, id] of [...state.sessions.entries()]) if (id === c.id && t !== token) state.sessions.delete(t);
+    return { body: c, cache: "private" };
+  });
   route("POST", "/customer/data-export", "customer:write", ({ headers }) => {
     const { c, info } = sessionOf(headers);
     requireRecentReauth(info);