@decocms/apps-vtex 8.0.0 → 8.1.0-next.1

package/src/utils/vtexId.ts

@@ -1,138 +0,0 @@
-/**
- * VTEX authentication cookie parser.
- *
- * Parses the VtexIdclientAutCookie JWT to detect login state
- * without making API calls. Only decodes the payload (no signature
- * verification -- we only need presence and expiry, not auth).
- */
-
-export interface VtexAuthInfo {
-	isLoggedIn: boolean;
-	email?: string;
-	account?: string;
-	/** Unix timestamp (seconds) when the token expires. */
-	exp?: number;
-	/** Whether the token is expired. */
-	isExpired: boolean;
-}
-
-const VTEX_AUTH_COOKIE = "VtexIdclientAutCookie";
-
-/**
- * Extract the VtexIdclientAutCookie value from a cookie string.
- */
-export function extractVtexAuthCookie(cookieHeader: string): string | null {
-	const match = cookieHeader.match(new RegExp(`(?:^|;\\s*)${VTEX_AUTH_COOKIE}=([^;]+)`));
-	return match?.[1] ?? null;
-}
-
-/**
- * Decode a JWT payload without verification.
- * Only reads the middle segment (claims).
- */
-function decodeJwtPayload(token: string): Record<string, unknown> | null {
-	try {
-		const parts = token.split(".");
-		if (parts.length !== 3) return null;
-		const payload = parts[1];
-		const decoded = atob(payload.replace(/-/g, "+").replace(/_/g, "/"));
-		return JSON.parse(decoded);
-	} catch {
-		return null;
-	}
-}
-
-/**
- * Parse a VTEX auth cookie token into structured auth info.
- */
-export function parseVtexAuthToken(token: string): VtexAuthInfo {
-	const payload = decodeJwtPayload(token);
-	if (!payload) {
-		return { isLoggedIn: false, isExpired: true };
-	}
-
-	const exp = typeof payload.exp === "number" ? payload.exp : undefined;
-	const isExpired = exp != null ? exp * 1000 < Date.now() : false;
-	const email =
-		typeof payload.sub === "string"
-			? payload.sub
-			: typeof payload.userId === "string"
-				? payload.userId
-				: undefined;
-
-	const account = typeof payload.account === "string" ? payload.account : undefined;
-
-	return {
-		isLoggedIn: !isExpired,
-		email,
-		account,
-		exp,
-		isExpired,
-	};
-}
-
-/**
- * Check if a request has a valid (non-expired) VTEX auth cookie.
- */
-export function isVtexLoggedIn(request: Request): boolean {
-	const cookies = request.headers.get("cookie") ?? "";
-	const token = extractVtexAuthCookie(cookies);
-	if (!token) return false;
-	return parseVtexAuthToken(token).isLoggedIn;
-}
-
-/**
- * Build a complete auth cookie header string from either a raw token
- * or an already-formatted cookie string.
- *
- * VTEX requires both `VtexIdclientAutCookie` and the account-suffixed
- * variant `VtexIdclientAutCookie_{account}` for authenticated GraphQL
- * calls to myvtex.com.
- *
- * If `authCookie` already contains `=` (i.e. it's a full cookie string),
- * it's returned as-is. Otherwise the token is wrapped in both cookie names.
- */
-export function buildAuthCookieHeader(authCookie: string, account: string): string {
-	if (authCookie.includes("=")) return authCookie;
-	return `${VTEX_AUTH_COOKIE}=${authCookie}; ${VTEX_AUTH_COOKIE}_${account}=${authCookie}`;
-}
-
-export interface CookiePayload {
-	sub?: string;
-	account?: string;
-	audience?: string;
-	sess?: string;
-	exp?: number;
-	userId?: string;
-}
-
-/**
- * Parse VTEX auth cookies from request headers.
- *
- * Returns the serialized cookie string (for forwarding) and the decoded
- * JWT payload. Compatible with the legacy deco-cx/apps parseCookie API.
- */
-export function parseCookie(
-	headers: Headers,
-	account: string,
-): { cookie: string; payload: CookiePayload | undefined } {
-	const cookieHeader = headers.get("cookie") ?? "";
-
-	const base = extractVtexAuthCookie(cookieHeader);
-	const suffixedRe = new RegExp(`(?:^|;\\s*)${VTEX_AUTH_COOKIE}_${account}=([^;]+)`);
-	const suffixedMatch = cookieHeader.match(suffixedRe);
-	const suffixed = suffixedMatch?.[1] ?? null;
-
-	const token = base ?? suffixed;
-	const payload = token
-		? ((decodeJwtPayload(token) as CookiePayload | null) ?? undefined)
-		: undefined;
-
-	const parts: string[] = [];
-	if (base) parts.push(`${VTEX_AUTH_COOKIE}=${base}`);
-	if (suffixed) parts.push(`${VTEX_AUTH_COOKIE}_${account}=${suffixed}`);
-
-	return { cookie: parts.join("; "), payload };
-}
-
-export { VTEX_AUTH_COOKIE };

package/tsconfig.json

@@ -1,7 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "dist"
-  },
-  "include": ["src/**/*"]
-}