@cimplify/sdk 0.54.0 → 0.56.0

package/dist/server.js

@@ -1,11 +1,12 @@
 'use strict';
 
-var chunkIJ32BXKZ_js = require('./chunk-IJ32BXKZ.js');
-require('./chunk-YJLOOC3L.js');
+var chunkMW7ICTVK_js = require('./chunk-MW7ICTVK.js');
+require('./chunk-JGBDWEPJ.js');
 require('./chunk-7Y2O3E4D.js');
 var chunkXA3ZNR75_js = require('./chunk-XA3ZNR75.js');
 require('./chunk-OWW5GUSB.js');
 var react = require('react');
+var jose = require('jose');
 
 var DEFAULT_PROD_URL = "https://storefronts.cimplify.io";
 var DEFAULT_DEV_URL = "http://127.0.0.1:8787";
@@ -25,7 +26,7 @@ function readEnv(...keys) {
 var getServerClient = react.cache((opts = {}) => {
   const baseUrl = opts.apiUrl ?? readEnv("CIMPLIFY_API_URL", "NEXT_PUBLIC_CIMPLIFY_API_URL") ?? defaultBaseUrl();
   const publicKey = opts.secretKey ?? readEnv("CIMPLIFY_SECRET_KEY", "NEXT_PUBLIC_CIMPLIFY_PUBLIC_KEY") ?? "mock-dev";
-  const client = chunkIJ32BXKZ_js.createCimplifyClient({
+  const client = chunkMW7ICTVK_js.createCimplifyClient({
     baseUrl,
     publicKey,
     suppressPublicKeyWarning: true
@@ -33,6 +34,9 @@ var getServerClient = react.cache((opts = {}) => {
   if (opts.locationId) {
     client.setLocationId(opts.locationId);
   }
+  if (opts.accessToken) {
+    client.setAccessToken(opts.accessToken);
+  }
   return client;
 });
 
@@ -233,6 +237,211 @@ async function refreshPage() {
   const fn = await getRefresh();
   fn();
 }
+var DEFAULT_AUTH_URL = "https://auth.cimplify.io";
+var SESSION_COOKIE = "cimplify_session";
+var ACCESS_TOKEN_COOKIE = "cimplify_access";
+var discoveryCache = /* @__PURE__ */ new Map();
+var jwksCache = /* @__PURE__ */ new Map();
+function authUrl(cfg) {
+  return (cfg.authUrl ?? DEFAULT_AUTH_URL).replace(/\/$/, "");
+}
+function cookieName(cfg) {
+  return cfg.cookieName ?? SESSION_COOKIE;
+}
+function accessTokenCookieName(cfg) {
+  return cfg.accessTokenCookieName ?? ACCESS_TOKEN_COOKIE;
+}
+async function discovery(cfg) {
+  const base = authUrl(cfg);
+  let p = discoveryCache.get(base);
+  if (!p) {
+    p = fetch(`${base}/.well-known/openid-configuration`, {
+      next: { revalidate: 3600 }
+    }).then((r) => {
+      if (!r.ok) throw new Error(`oidc discovery failed: ${r.status}`);
+      return r.json();
+    });
+    discoveryCache.set(base, p);
+  }
+  return p;
+}
+async function jwks(cfg) {
+  const doc = await discovery(cfg);
+  let set = jwksCache.get(doc.jwks_uri);
+  if (!set) {
+    set = jose.createRemoteJWKSet(new URL(doc.jwks_uri));
+    jwksCache.set(doc.jwks_uri, set);
+  }
+  return { set, issuer: doc.issuer };
+}
+async function exchangeCode(opts) {
+  const doc = await discovery(opts);
+  const body = new URLSearchParams({
+    grant_type: "authorization_code",
+    code: opts.code,
+    code_verifier: opts.codeVerifier,
+    redirect_uri: opts.redirectUri,
+    client_id: opts.clientId
+  });
+  const res = await fetch(doc.token_endpoint, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: body.toString()
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`token exchange failed (${res.status}): ${text}`);
+  }
+  const payload = await res.json();
+  return {
+    accessToken: payload.access_token,
+    idToken: payload.id_token,
+    refreshToken: payload.refresh_token,
+    expiresIn: payload.expires_in,
+    scope: payload.scope
+  };
+}
+async function verifyIdToken(cfg, idToken) {
+  const { set, issuer } = await jwks(cfg);
+  return jose.jwtVerify(idToken, set, {
+    issuer,
+    audience: cfg.clientId
+  });
+}
+function payloadToSession(payload) {
+  return {
+    sub: String(payload.sub ?? ""),
+    name: payload.name,
+    email: payload.email,
+    emailVerified: payload.email_verified,
+    phoneNumber: payload.phone_number,
+    phoneNumberVerified: payload.phone_number_verified,
+    exp: Number(payload.exp ?? 0),
+    iat: Number(payload.iat ?? 0)
+  };
+}
+function buildSessionCookie(cfg, idToken, maxAgeSeconds) {
+  const name = cookieName(cfg);
+  const parts = [
+    `${name}=${idToken}`,
+    "Path=/",
+    "HttpOnly",
+    "Secure",
+    "SameSite=Lax",
+    `Max-Age=${maxAgeSeconds}`
+  ];
+  if (cfg.cookieDomain) parts.push(`Domain=${cfg.cookieDomain}`);
+  return parts.join("; ");
+}
+function buildSignoutCookie(cfg) {
+  const name = cookieName(cfg);
+  const parts = [`${name}=`, "Path=/", "HttpOnly", "Secure", "SameSite=Lax", "Max-Age=0"];
+  if (cfg.cookieDomain) parts.push(`Domain=${cfg.cookieDomain}`);
+  return parts.join("; ");
+}
+function buildAccessTokenCookie(cfg, accessToken, maxAgeSeconds) {
+  const parts = [
+    `${accessTokenCookieName(cfg)}=${accessToken}`,
+    "Path=/",
+    "HttpOnly",
+    "Secure",
+    "SameSite=Lax",
+    `Max-Age=${maxAgeSeconds}`
+  ];
+  if (cfg.cookieDomain) parts.push(`Domain=${cfg.cookieDomain}`);
+  return parts.join("; ");
+}
+function buildSignoutCookies(cfg) {
+  const idTokenParts = [
+    `${cookieName(cfg)}=`,
+    "Path=/",
+    "HttpOnly",
+    "Secure",
+    "SameSite=Lax",
+    "Max-Age=0"
+  ];
+  const accessParts = [
+    `${accessTokenCookieName(cfg)}=`,
+    "Path=/",
+    "HttpOnly",
+    "Secure",
+    "SameSite=Lax",
+    "Max-Age=0"
+  ];
+  if (cfg.cookieDomain) {
+    idTokenParts.push(`Domain=${cfg.cookieDomain}`);
+    accessParts.push(`Domain=${cfg.cookieDomain}`);
+  }
+  return [idTokenParts.join("; "), accessParts.join("; ")];
+}
+function getAccessTokenFromCookieHeader(cfg, cookieHeader) {
+  if (!cookieHeader) return null;
+  const name = accessTokenCookieName(cfg);
+  const match = cookieHeader.split(/;\s*/).find((p) => p.startsWith(`${name}=`));
+  if (!match) return null;
+  const token = match.slice(name.length + 1);
+  return token || null;
+}
+async function handleOidcCallback(req, opts) {
+  let body;
+  try {
+    body = await req.json();
+  } catch {
+    return Response.json({ error: "invalid_json" }, { status: 400 });
+  }
+  if (!body.code || !body.codeVerifier) {
+    return Response.json({ error: "missing_code_or_verifier" }, { status: 400 });
+  }
+  let tokens;
+  try {
+    tokens = await exchangeCode({
+      ...opts,
+      code: body.code,
+      codeVerifier: body.codeVerifier
+    });
+  } catch (e) {
+    return Response.json({ error: "exchange_failed", detail: String(e) }, { status: 400 });
+  }
+  if (!tokens.idToken) {
+    return Response.json({ error: "missing_id_token" }, { status: 400 });
+  }
+  try {
+    await verifyIdToken(opts, tokens.idToken);
+  } catch (e) {
+    return Response.json({ error: "id_token_invalid", detail: String(e) }, { status: 401 });
+  }
+  const headers = new Headers({ "Content-Type": "application/json" });
+  headers.append("Set-Cookie", buildSessionCookie(opts, tokens.idToken, tokens.expiresIn));
+  headers.append("Set-Cookie", buildAccessTokenCookie(opts, tokens.accessToken, tokens.expiresIn));
+  return new Response(JSON.stringify({ ok: true }), { status: 200, headers });
+}
+async function handleSessionRequest(req, cfg) {
+  const session = await getSessionFromCookieHeader(cfg, req.headers.get("cookie"));
+  if (!session) {
+    return new Response(JSON.stringify({ sub: null }), {
+      status: 200,
+      headers: { "Content-Type": "application/json", "Cache-Control": "no-store" }
+    });
+  }
+  return new Response(JSON.stringify(session), {
+    status: 200,
+    headers: { "Content-Type": "application/json", "Cache-Control": "no-store" }
+  });
+}
+async function getSessionFromCookieHeader(cfg, cookieHeader) {
+  if (!cookieHeader) return null;
+  const name = cookieName(cfg);
+  const match = cookieHeader.split(/;\s*/).find((p) => p.startsWith(`${name}=`));
+  if (!match) return null;
+  const token = match.slice(name.length + 1);
+  if (!token) return null;
+  try {
+    const { payload } = await verifyIdToken(cfg, token);
+    return payloadToSession(payload);
+  } catch {
+    return null;
+  }
+}
 
 Object.defineProperty(exports, "CimplifyError", {
   enumerable: true,
@@ -240,7 +449,16 @@ Object.defineProperty(exports, "CimplifyError", {
 });
 exports.CACHE_LIFE_DEFAULT = CACHE_LIFE_DEFAULT;
 exports.CACHE_LIFE_PROBE = CACHE_LIFE_PROBE;
+exports.buildAccessTokenCookie = buildAccessTokenCookie;
+exports.buildSessionCookie = buildSessionCookie;
+exports.buildSignoutCookie = buildSignoutCookie;
+exports.buildSignoutCookies = buildSignoutCookies;
+exports.exchangeCode = exchangeCode;
+exports.getAccessTokenFromCookieHeader = getAccessTokenFromCookieHeader;
 exports.getServerClient = getServerClient;
+exports.getSessionFromCookieHeader = getSessionFromCookieHeader;
+exports.handleOidcCallback = handleOidcCallback;
+exports.handleSessionRequest = handleSessionRequest;
 exports.refreshPage = refreshPage;
 exports.revalidateAddOn = revalidateAddOn;
 exports.revalidateAddOns = revalidateAddOns;
@@ -277,3 +495,4 @@ exports.updateProducts = updateProducts;
 exports.updateStock = updateStock;
 exports.updateSubscription = updateSubscription;
 exports.updateSubscriptions = updateSubscriptions;
+exports.verifyIdToken = verifyIdToken;

package/dist/server.mjs

@@ -1,9 +1,10 @@
-import { createCimplifyClient } from './chunk-6QZQQRBB.mjs';
-import './chunk-B3Y4C4A7.mjs';
+import { createCimplifyClient } from './chunk-SQ7U3BWY.mjs';
+import './chunk-I4IXPQIX.mjs';
 import './chunk-TD3AY34U.mjs';
 export { CimplifyError } from './chunk-AMZXALF6.mjs';
 import './chunk-3G6RQLXK.mjs';
 import { cache } from 'react';
+import { jwtVerify, createRemoteJWKSet } from 'jose';
 
 var DEFAULT_PROD_URL = "https://storefronts.cimplify.io";
 var DEFAULT_DEV_URL = "http://127.0.0.1:8787";
@@ -31,6 +32,9 @@ var getServerClient = cache((opts = {}) => {
   if (opts.locationId) {
     client.setLocationId(opts.locationId);
   }
+  if (opts.accessToken) {
+    client.setAccessToken(opts.accessToken);
+  }
   return client;
 });
 
@@ -231,5 +235,210 @@ async function refreshPage() {
   const fn = await getRefresh();
   fn();
 }
+var DEFAULT_AUTH_URL = "https://auth.cimplify.io";
+var SESSION_COOKIE = "cimplify_session";
+var ACCESS_TOKEN_COOKIE = "cimplify_access";
+var discoveryCache = /* @__PURE__ */ new Map();
+var jwksCache = /* @__PURE__ */ new Map();
+function authUrl(cfg) {
+  return (cfg.authUrl ?? DEFAULT_AUTH_URL).replace(/\/$/, "");
+}
+function cookieName(cfg) {
+  return cfg.cookieName ?? SESSION_COOKIE;
+}
+function accessTokenCookieName(cfg) {
+  return cfg.accessTokenCookieName ?? ACCESS_TOKEN_COOKIE;
+}
+async function discovery(cfg) {
+  const base = authUrl(cfg);
+  let p = discoveryCache.get(base);
+  if (!p) {
+    p = fetch(`${base}/.well-known/openid-configuration`, {
+      next: { revalidate: 3600 }
+    }).then((r) => {
+      if (!r.ok) throw new Error(`oidc discovery failed: ${r.status}`);
+      return r.json();
+    });
+    discoveryCache.set(base, p);
+  }
+  return p;
+}
+async function jwks(cfg) {
+  const doc = await discovery(cfg);
+  let set = jwksCache.get(doc.jwks_uri);
+  if (!set) {
+    set = createRemoteJWKSet(new URL(doc.jwks_uri));
+    jwksCache.set(doc.jwks_uri, set);
+  }
+  return { set, issuer: doc.issuer };
+}
+async function exchangeCode(opts) {
+  const doc = await discovery(opts);
+  const body = new URLSearchParams({
+    grant_type: "authorization_code",
+    code: opts.code,
+    code_verifier: opts.codeVerifier,
+    redirect_uri: opts.redirectUri,
+    client_id: opts.clientId
+  });
+  const res = await fetch(doc.token_endpoint, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: body.toString()
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new Error(`token exchange failed (${res.status}): ${text}`);
+  }
+  const payload = await res.json();
+  return {
+    accessToken: payload.access_token,
+    idToken: payload.id_token,
+    refreshToken: payload.refresh_token,
+    expiresIn: payload.expires_in,
+    scope: payload.scope
+  };
+}
+async function verifyIdToken(cfg, idToken) {
+  const { set, issuer } = await jwks(cfg);
+  return jwtVerify(idToken, set, {
+    issuer,
+    audience: cfg.clientId
+  });
+}
+function payloadToSession(payload) {
+  return {
+    sub: String(payload.sub ?? ""),
+    name: payload.name,
+    email: payload.email,
+    emailVerified: payload.email_verified,
+    phoneNumber: payload.phone_number,
+    phoneNumberVerified: payload.phone_number_verified,
+    exp: Number(payload.exp ?? 0),
+    iat: Number(payload.iat ?? 0)
+  };
+}
+function buildSessionCookie(cfg, idToken, maxAgeSeconds) {
+  const name = cookieName(cfg);
+  const parts = [
+    `${name}=${idToken}`,
+    "Path=/",
+    "HttpOnly",
+    "Secure",
+    "SameSite=Lax",
+    `Max-Age=${maxAgeSeconds}`
+  ];
+  if (cfg.cookieDomain) parts.push(`Domain=${cfg.cookieDomain}`);
+  return parts.join("; ");
+}
+function buildSignoutCookie(cfg) {
+  const name = cookieName(cfg);
+  const parts = [`${name}=`, "Path=/", "HttpOnly", "Secure", "SameSite=Lax", "Max-Age=0"];
+  if (cfg.cookieDomain) parts.push(`Domain=${cfg.cookieDomain}`);
+  return parts.join("; ");
+}
+function buildAccessTokenCookie(cfg, accessToken, maxAgeSeconds) {
+  const parts = [
+    `${accessTokenCookieName(cfg)}=${accessToken}`,
+    "Path=/",
+    "HttpOnly",
+    "Secure",
+    "SameSite=Lax",
+    `Max-Age=${maxAgeSeconds}`
+  ];
+  if (cfg.cookieDomain) parts.push(`Domain=${cfg.cookieDomain}`);
+  return parts.join("; ");
+}
+function buildSignoutCookies(cfg) {
+  const idTokenParts = [
+    `${cookieName(cfg)}=`,
+    "Path=/",
+    "HttpOnly",
+    "Secure",
+    "SameSite=Lax",
+    "Max-Age=0"
+  ];
+  const accessParts = [
+    `${accessTokenCookieName(cfg)}=`,
+    "Path=/",
+    "HttpOnly",
+    "Secure",
+    "SameSite=Lax",
+    "Max-Age=0"
+  ];
+  if (cfg.cookieDomain) {
+    idTokenParts.push(`Domain=${cfg.cookieDomain}`);
+    accessParts.push(`Domain=${cfg.cookieDomain}`);
+  }
+  return [idTokenParts.join("; "), accessParts.join("; ")];
+}
+function getAccessTokenFromCookieHeader(cfg, cookieHeader) {
+  if (!cookieHeader) return null;
+  const name = accessTokenCookieName(cfg);
+  const match = cookieHeader.split(/;\s*/).find((p) => p.startsWith(`${name}=`));
+  if (!match) return null;
+  const token = match.slice(name.length + 1);
+  return token || null;
+}
+async function handleOidcCallback(req, opts) {
+  let body;
+  try {
+    body = await req.json();
+  } catch {
+    return Response.json({ error: "invalid_json" }, { status: 400 });
+  }
+  if (!body.code || !body.codeVerifier) {
+    return Response.json({ error: "missing_code_or_verifier" }, { status: 400 });
+  }
+  let tokens;
+  try {
+    tokens = await exchangeCode({
+      ...opts,
+      code: body.code,
+      codeVerifier: body.codeVerifier
+    });
+  } catch (e) {
+    return Response.json({ error: "exchange_failed", detail: String(e) }, { status: 400 });
+  }
+  if (!tokens.idToken) {
+    return Response.json({ error: "missing_id_token" }, { status: 400 });
+  }
+  try {
+    await verifyIdToken(opts, tokens.idToken);
+  } catch (e) {
+    return Response.json({ error: "id_token_invalid", detail: String(e) }, { status: 401 });
+  }
+  const headers = new Headers({ "Content-Type": "application/json" });
+  headers.append("Set-Cookie", buildSessionCookie(opts, tokens.idToken, tokens.expiresIn));
+  headers.append("Set-Cookie", buildAccessTokenCookie(opts, tokens.accessToken, tokens.expiresIn));
+  return new Response(JSON.stringify({ ok: true }), { status: 200, headers });
+}
+async function handleSessionRequest(req, cfg) {
+  const session = await getSessionFromCookieHeader(cfg, req.headers.get("cookie"));
+  if (!session) {
+    return new Response(JSON.stringify({ sub: null }), {
+      status: 200,
+      headers: { "Content-Type": "application/json", "Cache-Control": "no-store" }
+    });
+  }
+  return new Response(JSON.stringify(session), {
+    status: 200,
+    headers: { "Content-Type": "application/json", "Cache-Control": "no-store" }
+  });
+}
+async function getSessionFromCookieHeader(cfg, cookieHeader) {
+  if (!cookieHeader) return null;
+  const name = cookieName(cfg);
+  const match = cookieHeader.split(/;\s*/).find((p) => p.startsWith(`${name}=`));
+  if (!match) return null;
+  const token = match.slice(name.length + 1);
+  if (!token) return null;
+  try {
+    const { payload } = await verifyIdToken(cfg, token);
+    return payloadToSession(payload);
+  } catch {
+    return null;
+  }
+}
 
-export { CACHE_LIFE_DEFAULT, CACHE_LIFE_PROBE, getServerClient, refreshPage, revalidateAddOn, revalidateAddOns, revalidateBrand, revalidateBusiness, revalidateByTag, revalidateCategories, revalidateCategory, revalidateCollection, revalidateCollections, revalidateLocation, revalidateLocations, revalidatePricing, revalidateProduct, revalidateProducts, revalidateStock, revalidateSubscription, revalidateSubscriptions, tags, updateAddOn, updateAddOns, updateBrand, updateBusiness, updateByTag, updateCategories, updateCategory, updateCollection, updateCollections, updateLocation, updateLocations, updatePricing, updateProduct, updateProducts, updateStock, updateSubscription, updateSubscriptions };
+export { CACHE_LIFE_DEFAULT, CACHE_LIFE_PROBE, buildAccessTokenCookie, buildSessionCookie, buildSignoutCookie, buildSignoutCookies, exchangeCode, getAccessTokenFromCookieHeader, getServerClient, getSessionFromCookieHeader, handleOidcCallback, handleSessionRequest, refreshPage, revalidateAddOn, revalidateAddOns, revalidateBrand, revalidateBusiness, revalidateByTag, revalidateCategories, revalidateCategory, revalidateCollection, revalidateCollections, revalidateLocation, revalidateLocations, revalidatePricing, revalidateProduct, revalidateProducts, revalidateStock, revalidateSubscription, revalidateSubscriptions, tags, updateAddOn, updateAddOns, updateBrand, updateBusiness, updateByTag, updateCategories, updateCategory, updateCollection, updateCollections, updateLocation, updateLocations, updatePricing, updateProduct, updateProducts, updateStock, updateSubscription, updateSubscriptions, verifyIdToken };

package/dist/{ads-C2c2Aald.d.mts → sign-in-TL01-awQ.d.mts}

@@ -25,4 +25,20 @@ interface AdContextValue {
     isLoading: boolean;
 }
 
-export { type AdConfig as A, type AdContextValue as a, type AdCreative as b, type AdPosition as c, type AdSlot as d, type AdTheme as e, getVariantDisplayName as g };
+interface SignInOptions {
+    clientId: string;
+    redirectUri: string;
+    callbackUri?: string;
+    scope?: string;
+    authUrl?: string;
+    loginHint?: string;
+    prompt?: "none" | "login" | "consent";
+    onError?: (err: {
+        error: string;
+        description?: string;
+    }) => void;
+    onSuccess?: () => void;
+}
+declare function startSignIn(opts: SignInOptions): Promise<void>;
+
+export { type AdConfig as A, type SignInOptions as S, type AdContextValue as a, type AdCreative as b, type AdPosition as c, type AdSlot as d, type AdTheme as e, getVariantDisplayName as g, startSignIn as s };

package/dist/{ads-C2c2Aald.d.ts → sign-in-TL01-awQ.d.ts}

@@ -25,4 +25,20 @@ interface AdContextValue {
     isLoading: boolean;
 }
 
-export { type AdConfig as A, type AdContextValue as a, type AdCreative as b, type AdPosition as c, type AdSlot as d, type AdTheme as e, getVariantDisplayName as g };
+interface SignInOptions {
+    clientId: string;
+    redirectUri: string;
+    callbackUri?: string;
+    scope?: string;
+    authUrl?: string;
+    loginHint?: string;
+    prompt?: "none" | "login" | "consent";
+    onError?: (err: {
+        error: string;
+        description?: string;
+    }) => void;
+    onSuccess?: () => void;
+}
+declare function startSignIn(opts: SignInOptions): Promise<void>;
+
+export { type AdConfig as A, type SignInOptions as S, type AdContextValue as a, type AdCreative as b, type AdPosition as c, type AdSlot as d, type AdTheme as e, getVariantDisplayName as g, startSignIn as s };