@commercetools-frontend/mc-dev-authentication 19.0.0 → 21.0.0-rc.0

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @commercetools-frontend/mc-dev-authentication
 
+## 21.0.0-rc.0
+
+### Major Changes
+
+- [#2430](https://github.com/commercetools/merchant-center-application-kit/pull/2430) [`1c363fad`](https://github.com/commercetools/merchant-center-application-kit/commit/1c363fad7ab770a739ac8080358e41ae4af42074) Thanks [@emmenko](https://github.com/emmenko)! - Drop Node.js `v12`. Recommended min Node.js version is `v14` or `v16`.
+
+* [#2430](https://github.com/commercetools/merchant-center-application-kit/pull/2430) [`07f5b00f`](https://github.com/commercetools/merchant-center-application-kit/commit/07f5b00f3045a3e30462a1150e6ba85fcecc9098) Thanks [@emmenko](https://github.com/emmenko)! - Following breaking changes were introduced:
+
+  - In `mc-scripts`, the `build` command additionally compiles the `index.html` by default.
+  - Running the `compile-html` command by default should not be necessary anymore. However, you can pass `--build-only` to the `build` command to opt-out of the compilation step, in case you want to run it separately, for example to use the `--transformer`.
+  - Running the `compile-html` command by default does not print to `stdout` the JSON string with the security headers. You can opt into the old behavior by passing the `--print-security-headers` option.
+  - The `--inline-csp` of `compile-html` has been dropped, as it's now the built-in behavior.
+  - The `dist` folder created by the `build` command has been removed. Instead, the `build` command writes the production bundles directly into the `public` folder.
+
+  For more information see [Release notes v21](https://docs.commercetools.com/custom-applications/releases/2022-01-31-custom-applications-v21).
+
+## 20.10.6
+
+### Patch Changes
+
+- [#2386](https://github.com/commercetools/merchant-center-application-kit/pull/2386) [`d7fcf6fc`](https://github.com/commercetools/merchant-center-application-kit/commit/d7fcf6fc8495d4eae68e0a4f4c1f1b3e0e394454) Thanks [@emmenko](https://github.com/emmenko)! - Upgrade to Yarn v3
+
+## 20.10.3
+
+### Patch Changes
+
+- [#2376](https://github.com/commercetools/merchant-center-application-kit/pull/2376) [`9d879503`](https://github.com/commercetools/merchant-center-application-kit/commit/9d879503f7af467729291d66a35625b6e7cbb385) Thanks [@emmenko](https://github.com/emmenko)! - > For commercetools only.
+
+  Allow to use OIDC login when developing against a local running MC API.
+
+## 20.10.1
+
+### Patch Changes
+
+- [#2356](https://github.com/commercetools/merchant-center-application-kit/pull/2356) [`e34fe076`](https://github.com/commercetools/merchant-center-application-kit/commit/e34fe076aab6681cdcc54622d84123f2c22020e6) Thanks [@ByronDWall](https://github.com/ByronDWall)! - set node version to 16.8 in nvmrc to avoid a bug in node/v8
+
 ## 19.0.0
 
 ### Major Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commercetools-frontend/mc-dev-authentication",
-  "version": "19.0.0",
+  "version": "21.0.0-rc.0",
   "description": "Authentication views when running webpack-dev-server in development mode",
   "bugs": "https://github.com/commercetools/merchant-center-application-kit/issues",
   "repository": {
@@ -8,11 +8,9 @@
     "url": "https://github.com/commercetools/merchant-center-application-kit.git",
     "directory": "packages/mc-dev-authentication"
   },
-  "scripts": {},
   "homepage": "https://docs.commercetools.com/custom-applications",
   "keywords": ["javascript", "frontend", "react", "toolkit"],
   "license": "MIT",
-  "private": false,
   "publishConfig": {
     "access": "public"
   },
@@ -20,6 +18,6 @@
     "pug": "3.0.2"
   },
   "engines": {
-    "node": ">=12 || >=14"
+    "node": ">=14"
   }
 }

package/transformer-local.js

@@ -14,7 +14,7 @@ const compileLogoutView = pug.compileFile(
 const appDirectory = fs.realpathSync(process.cwd());
 const resolveApp = (relativePath) => path.resolve(appDirectory, relativePath);
 const paths = {
-  appPublic: resolveApp('public'),
+  appBuild: resolveApp('public'),
 };
 
 // This transformer will generate a development `login` and `logout` HTML files
@@ -26,23 +26,23 @@ module.exports = ({ env }) => {
 
   fs.copyFileSync(
     path.join(__dirname, 'views', 'login.css'),
-    path.join(paths.appPublic, 'login.css')
+    path.join(paths.appBuild, 'login.css')
   );
   fs.copyFileSync(
     path.join(__dirname, 'views', 'login.js'),
-    path.join(paths.appPublic, 'login.js')
+    path.join(paths.appBuild, 'login.js')
   );
   fs.copyFileSync(
     path.join(__dirname, 'views', 'logout.js'),
-    path.join(paths.appPublic, 'logout.js')
+    path.join(paths.appBuild, 'logout.js')
   );
   fs.writeFileSync(
-    path.join(paths.appPublic, 'login.html'),
+    path.join(paths.appBuild, 'login.html'),
     loginViewHtml,
     'utf8'
   );
   fs.writeFileSync(
-    path.join(paths.appPublic, 'logout.html'),
+    path.join(paths.appBuild, 'logout.html'),
     logoutViewHtml,
     'utf8'
   );

package/views/login.js

@@ -20,6 +20,16 @@ window.addEventListener('load', function loaded() {
       password: data.get('password'),
     };
 
+    var queryParams = new URLSearchParams(window.location.search);
+    if (queryParams.has('response_type')) {
+      // OIDC params
+      payload.client_id = queryParams.get('client_id');
+      payload.response_type = queryParams.get('response_type');
+      payload.scope = queryParams.get('scope');
+      payload.state = queryParams.get('state');
+      payload.nonce = queryParams.get('nonce');
+    }
+
     var container = document.getElementById('errors');
     // Clean up error message elements
     while (container.firstChild) {
@@ -40,11 +50,16 @@ window.addEventListener('load', function loaded() {
       })
       .then(function handleResponse(response) {
         if (response.ok) {
-          return response.json().then(function onSuccess() {
-            window.localStorage.setItem('isAuthenticated', true);
-            var searchParams = new URLSearchParams(window.location.search);
-            var redirectTo = searchParams.get('redirectTo') || '/';
-            window.location.replace(redirectTo);
+          return response.json().then(function onSuccess(result) {
+            // Handle OIDC redirect.
+            if (queryParams.has('response_type')) {
+              window.location.replace(result.redirectTo);
+            } else {
+              window.localStorage.setItem('isAuthenticated', true);
+              var searchParams = new URLSearchParams(window.location.search);
+              var redirectTo = searchParams.get('redirectTo') || '/';
+              window.location.replace(redirectTo);
+            }
           });
         }
         return response.text().then(function onError(responseText) {