@commercengine/storefront-sdk 0.12.3 → 0.12.5

package/dist/index.mjs

@@ -1,5 +1,4 @@
 import createClient from "openapi-fetch";
-import { decodeJwt } from "jose";
 
 //#region ../sdk-core/dist/index.mjs
 /**
@@ -415,6 +414,30 @@ function getPathnameFromUrl(url) {
 //#endregion
 //#region src/lib/jwt-utils.ts
 /**
+* Decode a JWT token payload without signature verification.
+* This is a lightweight replacement for jose's decodeJwt.
+*
+* @param token - The JWT token to decode
+* @returns The decoded payload
+* @throws Error if the token is malformed
+*/
+function decodeJwt(token) {
+	if (typeof token !== "string") throw new Error("Invalid token: must be a string");
+	const parts = token.split(".");
+	if (parts.length !== 3) throw new Error("Invalid token: must have 3 parts");
+	const base64Url = parts[1];
+	if (!base64Url) throw new Error("Invalid token: missing payload");
+	let base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
+	const padding = base64.length % 4;
+	if (padding) base64 += "=".repeat(4 - padding);
+	const binaryStr = atob(base64);
+	const bytes = new Uint8Array(binaryStr.length);
+	for (let i = 0; i < binaryStr.length; i++) bytes[i] = binaryStr.charCodeAt(i);
+	const payload = JSON.parse(new TextDecoder().decode(bytes));
+	if (typeof payload !== "object" || payload === null) throw new Error("Invalid token: payload must be an object");
+	return payload;
+}
+/**
 * Decode and extract user information from a JWT token
 * 
 * @param token - The JWT token to decode
@@ -432,7 +455,7 @@ function extractUserInfoFromToken(token) {
 			lastName: payload.last_name,
 			storeId: payload.store_id,
 			isLoggedIn: payload.is_logged_in,
-			isAnonymous: !payload.is_logged_in,
+			isAnonymous: payload.is_anonymous,
 			customerId: payload.customer_id,
 			customerGroupId: payload.customer_group_id,
 			anonymousId: payload.anonymous_id,
@@ -487,7 +510,7 @@ function isUserLoggedIn(token) {
 * @returns True if user is anonymous, false otherwise
 */
 function isUserAnonymous(token) {
-	return extractUserInfoFromToken(token)?.isAnonymous || true;
+	return extractUserInfoFromToken(token)?.isAnonymous ?? true;
 }
 
 //#endregion
@@ -507,15 +530,10 @@ function isTokenReturningEndpoint(pathname) {
 		"/auth/register/phone",
 		"/auth/register/email",
 		"/auth/verify-otp",
-		"/auth/refresh-token"
+		"/auth/refresh-token",
+		"/auth/logout"
 	].some((endpoint) => pathname.endsWith(endpoint));
 }
-/**
-* Check if a URL path is the logout endpoint
-*/
-function isLogoutEndpoint(pathname) {
-	return pathname.endsWith("/auth/logout");
-}
 
 //#endregion
 //#region src/lib/middleware.ts
@@ -765,10 +783,6 @@ function createAuthMiddleware(config) {
 				} catch (error) {
 					console.warn("Failed to extract tokens from response:", error);
 				}
-				else if (isLogoutEndpoint(pathname)) {
-					await config.tokenStorage.clearTokens();
-					config.onTokensCleared?.();
-				}
 			}
 			if (response.status === 401 && !isAnonymousAuthEndpoint(pathname)) {
 				const currentToken = await config.tokenStorage.getAccessToken();