@edx/frontend-app-subscription-checkout 1.5.0 → 1.7.0

package/dist/styles/components/cartSummary.scss

@@ -19,4 +19,11 @@
   &__pricing {
     line-height: 1.35;
   }
+
+  &__count-skeleton {
+    display: inline-flex;
+    align-items: center;
+    width: 6rem;
+    line-height: 1;
+  }
 }

package/dist/styles/components/enrollmentSummary.scss

@@ -1,3 +1,9 @@
+.enrollment-summary {
+  &__pricing {
+    line-height: 1.35;
+  }
+}
+
 .enrolled__banner {
     div:first-child {
         border-top-left-radius: var(--pgn-size-border-radius-base);

package/dist/styles/components/paymentForm.scss

@@ -110,6 +110,26 @@
   &__terms {
     line-height: 1.6;
   }
+
+  &__confirm {
+    .pgn__form-checkbox {
+      align-items: flex-start;
+    }
+
+    // Paragon pins the label line-height to the checkbox size; let the
+    // copy wrap with its own leading instead.
+    .pgn__form-label {
+      display: block;
+      line-height: 1.6;
+      // Cancel half-leading above the first line and below the last so
+      // extra space only appears between wrapped lines.
+      margin-block: calc((1em - 1lh) / 2);
+    }
+  }
+
+  &__confirm-label {
+    line-height: inherit;
+  }
 }
 
 @media (--pgn-size-breakpoint-min-width-lg) {

package/dist/utils/planQuery.d.ts

@@ -0,0 +1,16 @@
+import type { BillingCycle } from '../types';
+/**
+ * Map ?plan= values to the internal billing cycle.
+ * Accepts monthly, annual, and annually (the public query value).
+ */
+export declare function parsePlanParam(raw: string | null | undefined): BillingCycle | null;
+export declare function getPlanFromSearch(search: string): BillingCycle;
+export declare function getPlanFromUrl(): BillingCycle;
+export declare function planToQueryValue(cycle: BillingCycle): 'monthly' | 'annually';
+/**
+ * Set ?plan= while preserving other params.
+ * Avoid URLSearchParams — it treats bare `+` as a space and would break
+ * course_run_key values like HarvardX+CS50+X.
+ */
+export declare function withPlanQuery(search: string, cycle: BillingCycle): string;
+export declare function writePlanQueryParam(cycle: BillingCycle): void;

package/dist/utils/planQuery.js

@@ -0,0 +1,57 @@
+const PLAN_QUERY_KEY = 'plan';
+/**
+ * Map ?plan= values to the internal billing cycle.
+ * Accepts monthly, annual, and annually (the public query value).
+ */
+export function parsePlanParam(raw) {
+    if (!raw)
+        return null;
+    const value = raw.trim().toLowerCase();
+    if (value === 'monthly')
+        return 'monthly';
+    if (value === 'annual' || value === 'annually')
+        return 'annual';
+    return null;
+}
+export function getPlanFromSearch(search) {
+    var _a, _b;
+    const match = /[?&]plan=([^&]*)/i.exec(search);
+    if (!match)
+        return 'monthly';
+    try {
+        return (_a = parsePlanParam(decodeURIComponent(match[1]))) !== null && _a !== void 0 ? _a : 'monthly';
+    }
+    catch (_c) {
+        return (_b = parsePlanParam(match[1])) !== null && _b !== void 0 ? _b : 'monthly';
+    }
+}
+export function getPlanFromUrl() {
+    if (typeof window === 'undefined')
+        return 'monthly';
+    return getPlanFromSearch(window.location.search);
+}
+export function planToQueryValue(cycle) {
+    return cycle === 'annual' ? 'annually' : 'monthly';
+}
+/**
+ * Set ?plan= while preserving other params.
+ * Avoid URLSearchParams — it treats bare `+` as a space and would break
+ * course_run_key values like HarvardX+CS50+X.
+ */
+export function withPlanQuery(search, cycle) {
+    const planValue = planToQueryValue(cycle);
+    const raw = search.startsWith('?') ? search.slice(1) : search;
+    const parts = raw
+        .split('&')
+        .filter((part) => (part.length > 0
+        && !part.toLowerCase().startsWith(`${PLAN_QUERY_KEY}=`)));
+    parts.push(`${PLAN_QUERY_KEY}=${planValue}`);
+    return `?${parts.join('&')}`;
+}
+export function writePlanQueryParam(cycle) {
+    if (typeof window === 'undefined')
+        return;
+    const next = `${window.location.pathname}${withPlanQuery(window.location.search, cycle)}${window.location.hash}`;
+    window.history.replaceState(window.history.state, '', next);
+}
+//# sourceMappingURL=planQuery.js.map

package/dist/utils/planQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planQuery.js","sourceRoot":"","sources":["../../src/utils/planQuery.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAA8B;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;;IAC9C,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAA,cAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,mCAAI,SAAS,CAAC;IACnE,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,MAAA,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mCAAI,SAAS,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB;IAClD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,KAAmB;IAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG;SACd,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAChB,IAAI,CAAC,MAAM,GAAG,CAAC;WACZ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CACxD,CAAC,CAAC;IACL,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC,CAAC;IAC7C,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAmB;IACrD,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC1C,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjH,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC","sourcesContent":["import type { BillingCycle } from '../types';\n\nconst PLAN_QUERY_KEY = 'plan';\n\n/**\n * Map ?plan= values to the internal billing cycle.\n * Accepts monthly, annual, and annually (the public query value).\n */\nexport function parsePlanParam(raw: string | null | undefined): BillingCycle | null {\n  if (!raw) return null;\n  const value = raw.trim().toLowerCase();\n  if (value === 'monthly') return 'monthly';\n  if (value === 'annual' || value === 'annually') return 'annual';\n  return null;\n}\n\nexport function getPlanFromSearch(search: string): BillingCycle {\n  const match = /[?&]plan=([^&]*)/i.exec(search);\n  if (!match) return 'monthly';\n  try {\n    return parsePlanParam(decodeURIComponent(match[1])) ?? 'monthly';\n  } catch {\n    return parsePlanParam(match[1]) ?? 'monthly';\n  }\n}\n\nexport function getPlanFromUrl(): BillingCycle {\n  if (typeof window === 'undefined') return 'monthly';\n  return getPlanFromSearch(window.location.search);\n}\n\nexport function planToQueryValue(cycle: BillingCycle): 'monthly' | 'annually' {\n  return cycle === 'annual' ? 'annually' : 'monthly';\n}\n\n/**\n * Set ?plan= while preserving other params.\n * Avoid URLSearchParams — it treats bare `+` as a space and would break\n * course_run_key values like HarvardX+CS50+X.\n */\nexport function withPlanQuery(search: string, cycle: BillingCycle): string {\n  const planValue = planToQueryValue(cycle);\n  const raw = search.startsWith('?') ? search.slice(1) : search;\n  const parts = raw\n    .split('&')\n    .filter((part) => (\n      part.length > 0\n      && !part.toLowerCase().startsWith(`${PLAN_QUERY_KEY}=`)\n    ));\n  parts.push(`${PLAN_QUERY_KEY}=${planValue}`);\n  return `?${parts.join('&')}`;\n}\n\nexport function writePlanQueryParam(cycle: BillingCycle): void {\n  if (typeof window === 'undefined') return;\n  const next = `${window.location.pathname}${withPlanQuery(window.location.search, cycle)}${window.location.hash}`;\n  window.history.replaceState(window.history.state, '', next);\n}\n"]}

package/dist/utils/provision.js

@@ -20,8 +20,8 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 import { EnvironmentTypes, getSiteConfig } from '@openedx/frontend-base';
 /** Hardcoded edX JWT used only for local/dev checkout against stage Viax. */
 const DEV_SESSION_BODY = {
-    payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.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',
-    signature: 'dbKfK0j4d4UBodTABpiS3XvD7AZUK3thvPPo0OBmXdtjMqdSK0TXDXHcXn9BdN4gyYYHncZPK7CQ5CDPEZgo15f9QCb7Zp19i15Gh-CBD9JCXuVbFhVJolkEURPAPo0bzuIF2C-VStz3H8gpeptOHqn0DoaEic5lFCQOmHnymjYFLYO9H0e-HOK71KZnXIPh_id-nkNmifjgSNwoMWh6aqXk6xkDe_XritQlVds9jVNhL3s2vzXm0dt2s4J8bmj3NuLc41Pn5mVVnN9vpOxA5ZJUqTpMMO6Eot0TsqYR5eG3xCIORTAlY7HoXMWnlgKWcx7BstjZeKB9niqQcCTs3g',
+    payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.eyJhdWQiOiJJbmtvY3VqTGlreXVjc0Vkd2lXYXRkZWJyRWFja21ldkxha0R1aWZLb29zaGtha1dvdyIsImV4cCI6MTc4NzY2OTQ5NiwiZ3JhbnRfdHlwZSI6InBhc3N3b3JkIiwiaWF0IjoxNzg3NjY1ODk2LCJpc3MiOiJodHRwczovL2NvdXJzZXMuc3RhZ2UuZWR4Lm9yZy9vYXV0aDIiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJUVV8yNjA4XzNZUksiLCJzY29wZXMiOlsidXNlcl9pZCIsImVtYWlsIiwicHJvZmlsZSJdLCJ2ZXJzaW9uIjoiMS4yLjAiLCJzdWIiOiJhZjFiNmY2ZTgxMTk2ZTM5YTg3ZjIzZTNiYzk0Y2M5ZSIsImZpbHRlcnMiOlsidXNlcjptZSJdLCJpc19yZXN0cmljdGVkIjpmYWxzZSwiZW1haWxfdmVyaWZpZWQiOmZhbHNlLCJ1c2VyX2lkIjo1Mjg1MDg3LCJlbWFpbCI6ImxpcmV0aW05NzBAYm9jYWJseS5jb20iLCJuYW1lIjoidGVzdCB1c2VyIiwiZmFtaWx5X25hbWUiOiIiLCJnaXZlbl9uYW1lIjoiIiwiYWRtaW5pc3RyYXRvciI6ZmFsc2UsInN1cGVydXNlciI6ZmFsc2V9',
+    signature: 'FpdQ-RysJxcQxJu-AsKz7HBh_Jh9AzV6TeBkwEHTEW631OnqY6J5HUNOfRR9HlfNqM_X7w4uvpP5TGiTvgqNZm6QWOYmzeNelcntqyLHl-8ZRMQQ3UMp6yDshalxqoNp_mfIbXCzaA0FTB1EXip6R87gG0zqL1DF2keJ5DCf_RvL4MLoNz1z_Hjrd7KDlMAhVCG6G3ylkrSnkFJRMqQloXgIdj2FfOYET7oxboMbv1jkPEOQzmPNvrPARF1WQ9F2lJV3JoBq3CSXYW1b-_6TYSvXafySGAN0vn3RvNFGHsoIBTSIWay_BcbwRpEZRR-nA-v1zW6dCG-euF9mB_6Ysg'
 };
 function parseSessionResponse(data) {
     var _a, _b, _c, _d;

package/dist/utils/provision.js.map

@@ -1 +1 @@
-{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/utils/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;AAEH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAWzE,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,ivBAAivB;IAC1vB,SAAS,EAAE,wVAAwV;CACpW,CAAC;AACF,SAAS,oBAAoB,CAAC,IAA6B;;IACzD,MAAM,SAAS,GAAG,CAChB,MAAA,MAAA,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAI,CAAC,KAAK,mCAAI,IAAI,CAAC,YAAY,mCAAI,IAAI,CAAC,WAAW,CAChD,CAAC;IACxB,MAAM,WAAW,GAAG,CAAC,MAAA,IAAI,CAAC,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAuB,CAAC;IAElF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE3E,OAAO;QACL,SAAS;QACT,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,SAAS,EAAE,IAAI,CAAC,SAA+B;QAC/C,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,KAAK,EAAE,IAAI,CAAC,KAA2B;KACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,gBAAgB,CAAC,UAAkB,EAAE,QAAgB;;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,yBAAyB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC5F,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;YACzD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CAAA;AAED,SAAS,aAAa;IACpB,OAAO,aAAa,EAAE,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW,CAAC;AACtE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAgB,eAAe,CAAC,UAAkB;;QACtD,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAEvE,IAAI,GAAa,CAAC;QAClB,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,kCACF,OAAO,KACV,cAAc,EAAE,kBAAkB,GACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,MAAM,uCAAuC,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD,CAAC;QAC9E,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;CAAA","sourcesContent":["/**\n * api/provision.ts — exchange the edX session for a viax token.\n *\n * {LMS_BASE_URL}/api/edx-session\n * The LMS reads the edX JWT from browser cookies, exchanges it with viax,\n * and returns a per-user token for authenticated API calls.\n *\n * Dev uses POST with a hardcoded JWT payload (local LMS cookie exchange is\n * unavailable). Stage and prod use GET and rely on the browser session cookies.\n */\n\nimport { EnvironmentTypes, getSiteConfig } from '@openedx/frontend-base';\n\nexport interface EdxSessionResult {\n  viaxToken: string, // raw JWT — add 'Bearer ' prefix before use\n  customerUid: string,\n  partyUid?: string,\n  edxUserId?: string,\n  username?: string,\n  email?: string,\n}\n\n/** Hardcoded edX JWT used only for local/dev checkout against stage Viax. */\nconst DEV_SESSION_BODY = {\n  payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.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',\n  signature: 'dbKfK0j4d4UBodTABpiS3XvD7AZUK3thvPPo0OBmXdtjMqdSK0TXDXHcXn9BdN4gyYYHncZPK7CQ5CDPEZgo15f9QCb7Zp19i15Gh-CBD9JCXuVbFhVJolkEURPAPo0bzuIF2C-VStz3H8gpeptOHqn0DoaEic5lFCQOmHnymjYFLYO9H0e-HOK71KZnXIPh_id-nkNmifjgSNwoMWh6aqXk6xkDe_XritQlVds9jVNhL3s2vzXm0dt2s4J8bmj3NuLc41Pn5mVVnN9vpOxA5ZJUqTpMMO6Eot0TsqYR5eG3xCIORTAlY7HoXMWnlgKWcx7BstjZeKB9niqQcCTs3g',\n};\nfunction parseSessionResponse(data: Record<string, unknown>): EdxSessionResult {\n  const viaxToken = (\n    data.viaxToken ?? data.token ?? data.access_token ?? data.accessToken\n  ) as string | undefined;\n  const customerUid = (data.customerUid ?? data.customer_uid) as string | undefined;\n\n  if (!viaxToken) throw new Error('Session response missing viax token.');\n  if (!customerUid) throw new Error('Session response missing customerUid.');\n\n  return {\n    viaxToken,\n    customerUid,\n    partyUid: data.partyUid as string | undefined,\n    edxUserId: data.edxUserId as string | undefined,\n    username: data.username as string | undefined,\n    email: data.email as string | undefined,\n  };\n}\n\n/**\n * Fetch the ISO 3166-1 alpha-2 country code from the user's edX account profile.\n * Returns null if the request fails or the field is absent.\n */\nexport async function fetchUserCountry(lmsBaseUrl: string, username: string): Promise<string | null> {\n  try {\n    const res = await fetch(`${lmsBaseUrl}/api/user/v1/accounts/${encodeURIComponent(username)}`, {\n      credentials: 'include',\n    });\n    if (!res.ok) return null;\n    const data = await res.json() as Record<string, unknown>;\n    return typeof data.country === 'string' && data.country ? data.country : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isDevelopment(): boolean {\n  return getSiteConfig().environment === EnvironmentTypes.DEVELOPMENT;\n}\n\n/** Exchange the learner's edX session (cookies) for a viax token. */\nexport async function fetchEdxSession(sessionUrl: string): Promise<EdxSessionResult> {\n  const headers: Record<string, string> = { Accept: 'application/json' };\n\n  let res: Response;\n  if (isDevelopment()) {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers: {\n        ...headers,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(DEV_SESSION_BODY),\n    });\n  } else {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers,\n    });\n  }\n\n  if (!res.ok) {\n    throw new Error(\n      `Failed to establish checkout session (${res.status}). Please log into edX and try again.`,\n    );\n  }\n\n  const data = await res.json() as Record<string, unknown> & { error?: string };\n  if (data.error) throw new Error(String(data.error));\n\n  return parseSessionResponse(data);\n}\n"]}
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/utils/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;AAEH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAWzE,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,suBAAsuB;IAC/uB,SAAS,EAAE,wVAAwV;CACpW,CAAC;AACF,SAAS,oBAAoB,CAAC,IAA6B;;IACzD,MAAM,SAAS,GAAG,CAChB,MAAA,MAAA,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAI,CAAC,KAAK,mCAAI,IAAI,CAAC,YAAY,mCAAI,IAAI,CAAC,WAAW,CAChD,CAAC;IACxB,MAAM,WAAW,GAAG,CAAC,MAAA,IAAI,CAAC,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAuB,CAAC;IAElF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE3E,OAAO;QACL,SAAS;QACT,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,SAAS,EAAE,IAAI,CAAC,SAA+B;QAC/C,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,KAAK,EAAE,IAAI,CAAC,KAA2B;KACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,gBAAgB,CAAC,UAAkB,EAAE,QAAgB;;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,yBAAyB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC5F,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;YACzD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CAAA;AAED,SAAS,aAAa;IACpB,OAAO,aAAa,EAAE,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW,CAAC;AACtE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAgB,eAAe,CAAC,UAAkB;;QACtD,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAEvE,IAAI,GAAa,CAAC;QAClB,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,kCACF,OAAO,KACV,cAAc,EAAE,kBAAkB,GACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,MAAM,uCAAuC,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD,CAAC;QAC9E,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;CAAA","sourcesContent":["/**\n * api/provision.ts — exchange the edX session for a viax token.\n *\n * {LMS_BASE_URL}/api/edx-session\n * The LMS reads the edX JWT from browser cookies, exchanges it with viax,\n * and returns a per-user token for authenticated API calls.\n *\n * Dev uses POST with a hardcoded JWT payload (local LMS cookie exchange is\n * unavailable). Stage and prod use GET and rely on the browser session cookies.\n */\n\nimport { EnvironmentTypes, getSiteConfig } from '@openedx/frontend-base';\n\nexport interface EdxSessionResult {\n  viaxToken: string, // raw JWT — add 'Bearer ' prefix before use\n  customerUid: string,\n  partyUid?: string,\n  edxUserId?: string,\n  username?: string,\n  email?: string,\n}\n\n/** Hardcoded edX JWT used only for local/dev checkout against stage Viax. */\nconst DEV_SESSION_BODY = {\n  payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.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',\n  signature: 'FpdQ-RysJxcQxJu-AsKz7HBh_Jh9AzV6TeBkwEHTEW631OnqY6J5HUNOfRR9HlfNqM_X7w4uvpP5TGiTvgqNZm6QWOYmzeNelcntqyLHl-8ZRMQQ3UMp6yDshalxqoNp_mfIbXCzaA0FTB1EXip6R87gG0zqL1DF2keJ5DCf_RvL4MLoNz1z_Hjrd7KDlMAhVCG6G3ylkrSnkFJRMqQloXgIdj2FfOYET7oxboMbv1jkPEOQzmPNvrPARF1WQ9F2lJV3JoBq3CSXYW1b-_6TYSvXafySGAN0vn3RvNFGHsoIBTSIWay_BcbwRpEZRR-nA-v1zW6dCG-euF9mB_6Ysg'\n};\nfunction parseSessionResponse(data: Record<string, unknown>): EdxSessionResult {\n  const viaxToken = (\n    data.viaxToken ?? data.token ?? data.access_token ?? data.accessToken\n  ) as string | undefined;\n  const customerUid = (data.customerUid ?? data.customer_uid) as string | undefined;\n\n  if (!viaxToken) throw new Error('Session response missing viax token.');\n  if (!customerUid) throw new Error('Session response missing customerUid.');\n\n  return {\n    viaxToken,\n    customerUid,\n    partyUid: data.partyUid as string | undefined,\n    edxUserId: data.edxUserId as string | undefined,\n    username: data.username as string | undefined,\n    email: data.email as string | undefined,\n  };\n}\n\n/**\n * Fetch the ISO 3166-1 alpha-2 country code from the user's edX account profile.\n * Returns null if the request fails or the field is absent.\n */\nexport async function fetchUserCountry(lmsBaseUrl: string, username: string): Promise<string | null> {\n  try {\n    const res = await fetch(`${lmsBaseUrl}/api/user/v1/accounts/${encodeURIComponent(username)}`, {\n      credentials: 'include',\n    });\n    if (!res.ok) return null;\n    const data = await res.json() as Record<string, unknown>;\n    return typeof data.country === 'string' && data.country ? data.country : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isDevelopment(): boolean {\n  return getSiteConfig().environment === EnvironmentTypes.DEVELOPMENT;\n}\n\n/** Exchange the learner's edX session (cookies) for a viax token. */\nexport async function fetchEdxSession(sessionUrl: string): Promise<EdxSessionResult> {\n  const headers: Record<string, string> = { Accept: 'application/json' };\n\n  let res: Response;\n  if (isDevelopment()) {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers: {\n        ...headers,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(DEV_SESSION_BODY),\n    });\n  } else {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers,\n    });\n  }\n\n  if (!res.ok) {\n    throw new Error(\n      `Failed to establish checkout session (${res.status}). Please log into edX and try again.`,\n    );\n  }\n\n  const data = await res.json() as Record<string, unknown> & { error?: string };\n  if (data.error) throw new Error(String(data.error));\n\n  return parseSessionResponse(data);\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edx/frontend-app-subscription-checkout",
-  "version": "1.5.0",
+  "version": "1.7.0",
   "description": "Subscription Checkout Frontend application",
   "repository": {
     "type": "git",