@easypayment/medusa-paypal-ui 1.0.55 → 1.1.0

package/src/client/http.ts

@@ -3,6 +3,38 @@ export type HttpOptions = {
   publishableApiKey?: string
 }
 
+export type RequestOptions = {
+  /**
+   * Number of extra attempts on transient failures (network error, timeout,
+   * HTTP 429/5xx). Only use for idempotent calls — the PayPal capture/complete
+   * endpoints are idempotent server-side, so a retried request after a network
+   * blip re-uses the existing result instead of duplicating work. Default 0.
+   */
+  retries?: number
+}
+
+class HttpError extends Error {
+  status: number
+  constructor(message: string, status: number) {
+    super(message)
+    this.name = "HttpError"
+    this.status = status
+  }
+}
+
+const RETRY_BASE_DELAY_MS = 400
+
+function isRetryableStatus(status: number): boolean {
+  return status === 429 || status >= 500
+}
+
+function isRetryableError(err: unknown): boolean {
+  // Network failures and our own timeout error are safe to retry.
+  return err instanceof Error && !(err instanceof HttpError)
+}
+
+const wait = (ms: number) => new Promise((r) => setTimeout(r, ms))
+
 function toHeaderRecord(headers?: RequestInit["headers"]): Record<string, string> {
   if (!headers) {
     return {}
@@ -22,7 +54,7 @@ function toHeaderRecord(headers?: RequestInit["headers"]): Record<string, string
 export function createHttpClient(opts: HttpOptions) {
   const base = opts.baseUrl.replace(/\/+$/, "")
 
-  async function request<T>(path: string, init?: RequestInit): Promise<T> {
+  async function attempt<T>(path: string, init?: RequestInit): Promise<T> {
     const url = `${base}${path.startsWith("/") ? "" : "/"}${path}`
     const headers: Record<string, string> = {
       Accept: "application/json",
@@ -55,21 +87,24 @@ export function createHttpClient(opts: HttpOptions) {
 
     if (!res.ok) {
       if (res.status === 401) {
-        throw new Error(
-          "[PayPal] Unauthorized (401) — check that your publishable API key is correct and set in NEXT_PUBLIC_MEDUSA_PUBLISHABLE_KEY"
+        throw new HttpError(
+          "[PayPal] Unauthorized (401) — check that your publishable API key is correct and set in NEXT_PUBLIC_MEDUSA_PUBLISHABLE_KEY",
+          401
         )
       }
       if (res.status === 403) {
-        throw new Error(
-          "[PayPal] Forbidden (403) — this request is not allowed. Check your CORS and API key settings."
+        throw new HttpError(
+          "[PayPal] Forbidden (403) — this request is not allowed. Check your CORS and API key settings.",
+          403
         )
       }
-      throw new Error(
-        text.slice(0, 500).replace(/<[^>]*>/g, "") || `Request failed (${res.status})`
+      throw new HttpError(
+        text.slice(0, 500).replace(/<[^>]*>/g, "") || `Request failed (${res.status})`,
+        res.status
       )
     }
     if (!text) {
-      throw new Error(`[PayPal] Empty response body from ${path} (${res.status})`)
+      throw new HttpError(`[PayPal] Empty response body from ${path} (${res.status})`, res.status)
     }
 
     const contentType = res.headers.get("content-type") || ""
@@ -86,5 +121,32 @@ export function createHttpClient(opts: HttpOptions) {
     }
   }
 
+  async function request<T>(
+    path: string,
+    init?: RequestInit,
+    reqOpts?: RequestOptions
+  ): Promise<T> {
+    const retries = Math.max(0, reqOpts?.retries ?? 0)
+    let lastError: unknown
+    for (let i = 0; i <= retries; i++) {
+      try {
+        return await attempt<T>(path, init)
+      } catch (err) {
+        lastError = err
+        const transient =
+          (err instanceof HttpError && isRetryableStatus(err.status)) ||
+          isRetryableError(err)
+        // Don't retry a caller-supplied AbortSignal cancellation.
+        const aborted =
+          err instanceof Error && err.name === "AbortError" && !!init?.signal
+        if (i >= retries || !transient || aborted) {
+          throw err
+        }
+        await wait(RETRY_BASE_DELAY_MS * Math.pow(2, i) + Math.random() * RETRY_BASE_DELAY_MS)
+      }
+    }
+    throw lastError
+  }
+
   return { request }
 }

package/src/client/paypal.ts

@@ -7,11 +7,19 @@ export async function markPaymentComplete(
   publishableApiKey?: string
 ): Promise<Record<string, unknown>> {
   const http = createHttpClient({ baseUrl, publishableApiKey })
-  return http.request<Record<string, unknown>>(`/store/paypal-complete`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ cart_id: cartId }),
-  })
+  // Retry transient failures: /store/paypal-complete is idempotent (it returns
+  // already_completed for a finished cart), so a network blip right after
+  // capture — the classic "captured but cart not completed" gap — is retried
+  // instead of stranding a paid-but-unfinalized order.
+  return http.request<Record<string, unknown>>(
+    `/store/paypal-complete`,
+    {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ cart_id: cartId }),
+    },
+    { retries: 3 }
+  )
 }
 
 export function createPayPalStoreApi(opts: HttpOptions) {
@@ -36,11 +44,19 @@ export function createPayPalStoreApi(opts: HttpOptions) {
     },
 
     captureOrder(cartId: string, orderId: string) {
-      return http.request<Record<string, unknown>>(`/store/paypal/capture-order`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ cart_id: cartId, order_id: orderId }),
-      })
+      // Retry transient failures: capture-order is idempotent server-side (it
+      // short-circuits on an existing capture and PayPal dedupes by request id),
+      // so a network blip during capture doesn't leave the buyer's funds
+      // authorized-but-not-captured with no recovery.
+      return http.request<Record<string, unknown>>(
+        `/store/paypal/capture-order`,
+        {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ cart_id: cartId, order_id: orderId }),
+        },
+        { retries: 2 }
+      )
     },
   }
 }