@faststore/api 1.12.50 → 1.12.51

package/dist/api.cjs.development.js

@@ -22,7 +22,7 @@ var api = require('@opentelemetry/api');
 var apiLogs = require('@opentelemetry/api-logs');
 
 var name = "@faststore/api";
-var version = "1.12.49";
+var version = "1.12.50";
 var license = "MIT";
 var main = "dist/index.js";
 var typings = "dist/index.d.ts";
@@ -92,7 +92,7 @@ var packageJson = {
 };
 
 const USER_AGENT = `${packageJson.name}@${packageJson.version}`;
-const fetchAPI = async (info, init) => {
+const fetchAPI = async (info, init, options) => {
   const response = await fetch(info, { ...init,
     headers: { ...(init == null ? void 0 : init.headers),
       'User-Agent': USER_AGENT
@@ -100,6 +100,10 @@ const fetchAPI = async (info, init) => {
   });
 
   if (response.ok) {
+    if (options != null && options.storeCookies) {
+      options.storeCookies(response.headers);
+    }
+
     return response.status !== 204 ? response.json() : undefined;
   }
 
@@ -108,17 +112,169 @@ const fetchAPI = async (info, init) => {
   throw new Error(text);
 };
 
+const MATCH_FIRST_SET_COOKIE_KEY_VALUE = /^([^=]+)=([^;]*)/;
+/**
+ * Splits a combined `set-cookie` header value (cookies joined by `, `) into
+ * individual cookies. Commas inside `expires=...` dates are kept.
+ */
+
+const splitSetCookieHeader = value => value.split(/,(?=\s*[^;,=\s]+=)/).map(setCookie => setCookie.trim());
+/**
+ * Returns every `set-cookie` value of a fetch response.
+ *
+ * `Headers.getSetCookie()` only exists on Node >= 18.14 (undici). FastStore v1
+ * stores may still run on Node 16, where isomorphic-unfetch falls back to
+ * node-fetch v2, which exposes repeated headers through `raw()` instead.
+ */
+
+
+const getSetCookies = headers => {
+  const maybeHeaders = headers;
+
+  if (typeof maybeHeaders.getSetCookie === 'function') {
+    return maybeHeaders.getSetCookie();
+  }
+
+  if (typeof maybeHeaders.raw === 'function') {
+    var _maybeHeaders$raw$set;
+
+    return (_maybeHeaders$raw$set = maybeHeaders.raw()['set-cookie']) != null ? _maybeHeaders$raw$set : [];
+  }
+
+  const setCookie = headers.get('set-cookie');
+  return setCookie ? splitSetCookieHeader(setCookie) : [];
+};
+/**
+ * This function updates the ctx.storage.cookies, that is used in each request.
+ *
+ * ctx.storage.cookies is a Map<string[1], Record<string, string>[2]> where,
+ * [1] cookie key
+ * [2] {
+ *       value: cookie value,
+ *       setCookie: setCookie used in browser response
+ *     }
+ */
+
+const updatesContextStorageCookies = (ctx, setCookieValue) => {
+  const matchCookie = setCookieValue.match(MATCH_FIRST_SET_COOKIE_KEY_VALUE);
+
+  if (matchCookie) {
+    const cookieKey = matchCookie[1];
+    const cookieValue = matchCookie[2];
+    ctx.storage.cookies.set(cookieKey, {
+      value: cookieValue,
+      setCookie: setCookieValue
+    });
+  }
+};
+const setCookie = (ctx, headers) => {
+  getSetCookies(headers).forEach(setCookieValue => updatesContextStorageCookies(ctx, setCookieValue));
+};
+const getStoreCookie = ctx => headers => setCookie(ctx, headers);
+/**
+ * This function returns a modified copy of the original cookie header (ctx.headers.cookie from the first request)
+ * with the cookie values that comes in each request (ctx.storage.cookies).
+ * If there is no cookies in storage, the ctx.headers?.cookie is used
+ *
+ * ctx.storage.cookies is a Map<string[1], Record<string, string>[2]> where,
+ * [1] cookie key
+ * [2] {
+ *       value: cookie value,
+ *       setCookie: setCookie used in browser response
+ *     }
+ */
+
+const getUpdatedCookie = ctx => {
+  var _ctx$headers;
+
+  if (!((_ctx$headers = ctx.headers) != null && _ctx$headers.cookie)) {
+    return null;
+  }
+
+  const contextStorageCookies = Array.from(ctx.storage.cookies.entries());
+
+  if (contextStorageCookies.length === 0) {
+    return ctx.headers.cookie;
+  }
+
+  return contextStorageCookies.reduce((existingCookies, [storageCookieKey, {
+    value: storageCookieValue
+  }]) => updatesCookieValueByKey(existingCookies, storageCookieKey, storageCookieValue), ctx.headers.cookie);
+};
+const getWithCookie = ctx => function withCookie(headers) {
+  const updatedCookie = getUpdatedCookie(ctx);
+
+  if (!updatedCookie) {
+    return headers;
+  }
+
+  return { ...headers,
+    cookie: updatedCookie
+  };
+};
+/**
+ * This function updates the cookie value based on its key
+ *
+ * const existingCookies = 'key=value1; key2=; key3=value3';
+ * const storageCookieKey = 'key2';
+ * const storageCookieValue = 'value2'
+ *
+ * updatesCookieValueByKey(existingCookies, storageCookieKey, storageCookieValue) returns 'key=value1; key2=value2; key3=value3';
+ */
+
+const updatesCookieValueByKey = (existingCookies, storageCookieKey, storageCookieValue) => {
+  const MATCH_COOKIE_KEY_VALUE = new RegExp(`(${storageCookieKey})=([^;]*)`);
+  const cookieParts = existingCookies.match(MATCH_COOKIE_KEY_VALUE); // replaces original cookie with the one coming from storage
+
+  if (cookieParts) {
+    return existingCookies.replace(cookieParts[0], `${cookieParts[1]}=${storageCookieValue}`);
+  } // add new storage cookie to the original list of cookies
+
+
+  return `${existingCookies};${storageCookieKey}=${storageCookieValue}`;
+};
+
 const BASE_INIT = {
   method: 'POST',
   headers: {
     'content-type': 'application/json'
   }
 };
+
+const getHeader = (headers, name) => {
+  const value = headers == null ? void 0 : headers[name];
+  return Array.isArray(value) ? value[0] : value;
+};
+/**
+ * Host the Checkout API uses as the domain of the cookies it sets. Checkout
+ * only honors it for hosts registered in the account, so a forged value is
+ * ignored there.
+ */
+
+
+const getForwardedHost = headers => {
+  var _getHeader;
+
+  // Proxies may append values: "client, proxy". Only the first one is the store host.
+  const host = ((_getHeader = getHeader(headers, 'x-forwarded-host')) == null ? void 0 : _getHeader.split(',')[0].trim()) || getHeader(headers, 'host') || '';
+  return host.trim().replace(/^www\./, '');
+};
+
 const VtexCommerce = ({
   account,
   environment
 }, ctx) => {
   const base = `https://${account}.${environment}.com.br`;
+  const storeCookies = getStoreCookie(ctx);
+  const withCookie = getWithCookie(ctx);
+  const forwardedHost = getForwardedHost(ctx.headers); // Checkout calls forward the shopper cookies and keep the cookies Checkout
+  // sets (e.g. CheckoutOrderFormOwnership) so they can reach the browser.
+
+  const checkoutHeaders = () => withCookie({
+    'content-type': 'application/json',
+    'X-FORWARDED-HOST': forwardedHost
+  });
+
   return {
     catalog: {
       salesChannel: sc => fetchAPI(`${base}/api/catalog_system/pub/saleschannel/${sc}`),
@@ -169,7 +325,10 @@ const VtexCommerce = ({
         }
 
         return fetchAPI(`${base}/api/checkout/pub/orderForm/${id}/attachments/shippingData`, { ...BASE_INIT,
+          headers: checkoutHeaders(),
           body: JSON.stringify(body)
+        }, {
+          storeCookies
         });
       },
       orderForm: ({
@@ -184,7 +343,11 @@ const VtexCommerce = ({
           refreshOutdatedData: refreshOutdatedData.toString(),
           sc: salesChannel
         });
-        return fetchAPI(`${base}/api/checkout/pub/orderForm/${id}?${params.toString()}`, BASE_INIT);
+        return fetchAPI(`${base}/api/checkout/pub/orderForm/${id}?${params.toString()}`, { ...BASE_INIT,
+          headers: checkoutHeaders()
+        }, {
+          storeCookies
+        });
       },
       updateOrderFormItems: ({
         id,
@@ -198,11 +361,14 @@ const VtexCommerce = ({
           sc: salesChannel
         });
         return fetchAPI(`${base}/api/checkout/pub/orderForm/${id}/items?${params}`, { ...BASE_INIT,
+          headers: checkoutHeaders(),
           body: JSON.stringify({
             orderItems,
             noSplitItem: !shouldSplitItem
           }),
           method: 'PATCH'
+        }, {
+          storeCookies
         });
       },
       setCustomData: ({
@@ -212,10 +378,13 @@ const VtexCommerce = ({
         value
       }) => {
         return fetchAPI(`${base}/api/checkout/pub/orderForm/${id}/customData/${appId}/${key}`, { ...BASE_INIT,
+          headers: checkoutHeaders(),
           body: JSON.stringify({
             value
           }),
           method: 'PUT'
+        }, {
+          storeCookies
         });
       },
       region: async ({
@@ -2468,7 +2637,8 @@ const getContextFactory = options => ctx => {
   ctx.storage = {
     channel: ChannelMarshal.parse(options.channel),
     flags: (_options$flags = options.flags) != null ? _options$flags : {},
-    locale: options.locale
+    locale: options.locale,
+    cookies: new Map()
   };
   ctx.clients = getClients(options, ctx);
   ctx.loaders = getLoaders(options, ctx);