@asteby/storefront 0.8.0 → 0.10.0

package/README.md

@@ -65,6 +65,30 @@ const me = storefront.withCustomerToken(token) // sends X-Customer-Token
 await me.customer.orders()
 ```
 
+Stores that also offer email + password accounts ask what the store supports and
+then use the password routes (the `StorefrontError` codes are `unauthorized` for
+wrong credentials or codes, `conflict` for an email already registered and
+`rate_limited` for too many attempts):
+
+```ts
+const caps = await storefront.customer.capabilities()
+// { password: boolean, email_verification: boolean, otp_channels: ('email' | 'whatsapp')[] }
+
+const res = await storefront.customer.register({ email, password, first_name, last_name })
+const session =
+  res.status === 'created'
+    ? res.session // no verification required: already signed in
+    : await storefront.customer.verifyRegistration({ email, code }) // code from the email
+
+const again = await storefront.customer.loginWithPassword({ email, password })
+
+// Signed-in buyer sets or changes the password (current_password when it already has one):
+await storefront.customer.setPassword({ password, current_password }, { customerToken: session.token })
+
+// Forgot password: requestOtp({ email }) emails a code, then
+await storefront.customer.resetPassword({ email, code, password })
+```
+
 Checkout always sends an `Idempotency-Key` (generated with
 `crypto.randomUUID()` unless you pass `{ idempotencyKey }`):
 
@@ -118,6 +142,14 @@ Mock behaviour:
 - Checkout: returns a fake order and a `redirect_url`, decrements stock and
   honours `Idempotency-Key`.
 - Buyer: OTP code `000000`; seed customer `cliente@example.com` with one order.
+- Password accounts: `customer.capabilities()` is configurable
+  (`createMockStorefront({ customerCapabilities })`, default
+  `{ password: true, email_verification: true, otp_channels: ['email'] }`).
+  `register` answers `verification_required` and the code is `000000`; accounts
+  live in memory (passwords of 10-128 characters); `409` for a registered email,
+  `401` for wrong credentials/codes, `429` after `maxLoginAttempts` (5) failed
+  logins, `403` when `password` is disabled. The seed customer has no password
+  until `setPassword` (or `resetPassword` with the OTP code).
 - Content: theme tokens, `home` page (hero, product_grid, collection_list,
   rich_text, faq), `main` and `footer` menus, legal pages (`terminos`,
   `privacidad`, `devoluciones`) and two articles. `?preview=` returns a draft.
@@ -291,7 +323,7 @@ over language) and `hreflangLinks` for per-market SEO.
 Resources: `shop.get`, `products.list/get/recommendations`,
 `collections.list/get`, `stock.get`,
 `carts.create/get/addLines/updateLines/removeLines/setDiscountCodes/setBuyer/setShippingAddress/deliveryOptions/setDelivery/checkout`,
-`customer.requestOtp/createSession/get/orders/order/requestReturn/requestInvoice/addresses.{list,create,update,delete}`,
+`customer.requestOtp/createSession/capabilities/register/verifyRegistration/loginWithPassword/setPassword/resetPassword/get/orders/order/requestReturn/requestInvoice/addresses.{list,create,update,delete}`,
 `content.theme/page/menu/articles/article`. Every method takes a last
 `options` argument: `{ cache, signal, next, headers, timeoutMs, customerToken, clientIp }`
 (plus `idempotencyKey` on writes and `preview` on pages/articles); unknown keys

package/dist/index.cjs

@@ -382,6 +382,24 @@ function createStorefrontClient(config) {
       requestOtp: (identifier, options) => write("POST", "/storefront/customer/otp", identifier, options),
       /** Exchanges the code for a buyer session (`token` goes in `customerToken`). */
       createSession: (input, options) => write("POST", "/storefront/customer/session", input, options),
+      /** What the store supports (password login, email verification, OTP channels). Drives which forms to show. */
+      capabilities: (options) => get("/storefront/customer/capabilities", void 0, options),
+      /**
+       * Creates an account with email + password. `verification_required` (202): a code was emailed, finish with
+       * `verifyRegistration`. `created` (201): the account exists and `session` is ready. `409` when the email is taken.
+       */
+      register: async (input, options) => {
+        const res = await write("POST", "/storefront/customer/register", input, options);
+        return res && "token" in res ? { status: "created", session: res } : { status: "verification_required" };
+      },
+      /** Confirms the emailed registration code and returns the new buyer session. */
+      verifyRegistration: (input, options) => write("POST", "/storefront/customer/register/verify", input, options),
+      /** Email + password login. `401` for wrong credentials. */
+      loginWithPassword: (input, options) => write("POST", "/storefront/customer/login", input, options),
+      /** Sets or changes the password of the signed-in buyer (`options.customerToken`, or a `withCustomerToken` client). */
+      setPassword: (input, options) => write("PUT", "/storefront/customer/password", input, options),
+      /** Resets a forgotten password with the code from `requestOtp({ email })`. */
+      resetPassword: (input, options) => write("POST", "/storefront/customer/password/reset", input, options),
       get: (options) => get("/storefront/customer", void 0, options),
       orders: (params, options) => get("/storefront/customer/orders", params, options),
       /** `null` when the order does not exist or belongs to someone else. */
@@ -1110,8 +1128,35 @@ function hreflangLinks(markets, path, defaultMarket, protocol = "https") {
   return links;
 }
 
+// src/delivery.ts
+function parseDelivery(value) {
+  const raw = (value ?? "").trim();
+  const i = raw.indexOf(":");
+  const head = i === -1 ? raw : raw.slice(0, i);
+  const id = i === -1 ? "" : raw.slice(i + 1);
+  const kind = head === "pickup" ? "pickup" : head === "ship" ? "ship" : "rate";
+  return { kind, id, method: kind === "pickup" ? "pickup" : "shipping", addressOnly: kind === "ship" };
+}
+function deliveryInput(choice) {
+  if (choice.addressOnly) return null;
+  if (choice.kind === "pickup") return { method: "pickup", branch_id: choice.id };
+  return { method: "shipping", rate_id: choice.id || void 0 };
+}
+var MISSING_WEIGHT = "missing_weight";
+function deliveryNotices(delivery) {
+  const all = delivery?.unavailable ?? [];
+  const missingWeight = all.filter((u) => u.code === MISSING_WEIGHT);
+  const unavailable = all.filter((u) => u.code !== MISSING_WEIGHT);
+  return {
+    missingWeight,
+    unavailable,
+    hasNotices: missingWeight.length > 0 || unavailable.length > 0 || delivery?.partial === true
+  };
+}
+
 exports.CLIENT_IP_HEADER = CLIENT_IP_HEADER;
 exports.COUNTRY_HEADERS = COUNTRY_HEADERS;
+exports.MISSING_WEIGHT = MISSING_WEIGHT;
 exports.NOTE_MAX_LENGTH = NOTE_MAX_LENGTH;
 exports.StorefrontError = StorefrontError;
 exports.appendParams = appendParams;
@@ -1123,6 +1168,8 @@ exports.clampPercent = clampPercent;
 exports.createStorefrontClient = createStorefrontClient;
 exports.declineMessage = declineMessage;
 exports.declineMessageKey = declineMessageKey;
+exports.deliveryInput = deliveryInput;
+exports.deliveryNotices = deliveryNotices;
 exports.formatAvailabilityMessage = formatAvailabilityMessage;
 exports.formatMoney = formatMoney;
 exports.formatVoucherExpiry = formatVoucherExpiry;
@@ -1133,6 +1180,7 @@ exports.isTokenPublishable = isTokenPublishable;
 exports.negotiateLocale = negotiateLocale;
 exports.normalizeClientIp = normalizeClientIp;
 exports.normalizeNote = normalizeNote;
+exports.parseDelivery = parseDelivery;
 exports.parseMoney = parseMoney;
 exports.parseProductFilters = parseProductFilters;
 exports.paymentErrorView = paymentErrorView;