@faststore/core 3.56.3 → 3.58.0

package/.turbo/turbo-build.log

@@ -1,23 +1,23 @@
 
-> @faststore/core@3.56.2 prebuild /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.57.0 prebuild /home/runner/work/faststore/faststore/packages/core
 > na run partytown && na run generate
 
 
-> @faststore/core@3.56.2 partytown /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.57.0 partytown /home/runner/work/faststore/faststore/packages/core
 > partytown copylib ./public/~partytown
 
 Partytown lib copied to: /home/runner/work/faststore/faststore/packages/core/public/~partytown
 
-> @faststore/core@3.56.2 generate /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.57.0 generate /home/runner/work/faststore/faststore/packages/core
 > na run generate:schema && na run generate:codegen && na run format:generated
 
 
-> @faststore/core@3.56.2 generate:schema /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.57.0 generate:schema /home/runner/work/faststore/faststore/packages/core
 > tsx src/server/generator/generateGraphQLSchemaFile.ts
 
 Schema GraphQL file generated successfully
 
-> @faststore/core@3.56.2 generate:codegen /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.57.0 generate:codegen /home/runner/work/faststore/faststore/packages/core
 > graphql-codegen
 
 [STARTED] Parse Configuration
@@ -37,11 +37,11 @@ Running lifecycle hook "afterStart" scripts...
 [CLI] Loading Documents
 [CLI] Generating output
 
-> @faststore/core@3.56.2 format:generated /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.57.0 format:generated /home/runner/work/faststore/faststore/packages/core
 > prettier --write "@generated/**/*.{ts,js,tsx,jsx,json}" --loglevel error
 
 
-> @faststore/core@3.56.2 build /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.57.0 build /home/runner/work/faststore/faststore/packages/core
 > next build
 
 ⚠ No build cache found. Please configure build caching for faster rebuilds. Read more: https://nextjs.org/docs/messages/no-cache
@@ -83,8 +83,8 @@ Route (pages)                              Size     First Load JS
 ├   └ css/b7bba8fce075688b.css             4.2 kB
 ├ λ /account/404                           2.03 kB         130 kB
 ├   └ css/5347dbc8b71de47d.css             4.25 kB
-├ λ /account/orders                        8.73 kB         137 kB
-├   └ css/bae051e2b6768884.css             11.8 kB
+├ λ /account/orders                        8.86 kB         137 kB
+├   └ css/8a3f440e0ff9cd8e.css             11.9 kB
 ├ λ /account/orders/[id]                   10.1 kB         138 kB
 ├   └ css/506442c818624bd2.css             11.5 kB
 ├ λ /account/profile                       1.27 kB         129 kB
@@ -101,7 +101,7 @@ Route (pages)                              Size     First Load JS
   ├ chunks/framework-807b0f81cbc129f0.js   45.4 kB
   ├ chunks/main-f658704b53a96ab1.js        33.1 kB
   ├ chunks/pages/_app-eb6edb0ba4b4be67.js  16.3 kB
-  ├ chunks/webpack-c7f9922d1ee74736.js     3.7 kB
+  ├ chunks/webpack-442c329509c9052f.js     3.7 kB
   └ css/0a57ee6c7a57788c.css               3.49 kB
 
 λ  (Server)  server-side renders at runtime (uses getInitialProps or getServerSideProps)

package/.turbo/turbo-test.log

@@ -1,15 +1,15 @@
 
-> @faststore/core@3.56.2 test /home/runner/work/faststore/faststore/packages/core
+> @faststore/core@3.57.0 test /home/runner/work/faststore/faststore/packages/core
 > jest
 
-PASS test/utils/multipleTemplates.test.ts (24.529 s)
-PASS test/server/cms/global.test.ts (24.645 s)
+PASS test/server/cms/global.test.ts (24.83 s)
+PASS test/utils/multipleTemplates.test.ts (24.884 s)
 PASS test/server/cms/index.test.ts
-PASS test/server/index.test.ts (29.556 s)
+PASS test/server/index.test.ts (30.148 s)
 A worker process has failed to exit gracefully and has been force exited. This is likely caused by tests leaking due to improper teardown. Try running with --detectOpenHandles to find leaks. Active timers can also cause this, ensure that .unref() was called on them.
 
 Test Suites: 4 passed, 4 total
 Tests:       22 passed, 22 total
 Snapshots:   0 total
-Time:        30.928 s
+Time:        31.704 s
 Ran all test suites.

package/@generated/gql.ts

@@ -56,6 +56,8 @@ const documents = {
     types.ServerUserDetailsQueryDocument,
   '\n  mutation CancelOrderMutation($data: IUserOrderCancel!) {\n    cancelOrder(data: $data) {\n      data\n    }\n  }\n':
     types.CancelOrderMutationDocument,
+  '\n  query ValidateUser {\n    validateUser {\n      isValid\n    }\n  }\n':
+    types.ValidateUserDocument,
   '\n  mutation ValidateCartMutation($cart: IStoreCart!, $session: IStoreSession!) {\n    validateCart(cart: $cart, session: $session) {\n      order {\n        orderNumber\n        acceptedOffer {\n          ...CartItem\n        }\n        shouldSplitItem\n      }\n      messages {\n        ...CartMessage\n      }\n    }\n  }\n\n  fragment CartMessage on StoreCartMessage {\n    text\n    status\n  }\n\n  fragment CartItem on StoreOffer {\n    seller {\n      identifier\n    }\n    quantity\n    price\n    priceWithTaxes\n    listPrice\n    listPriceWithTaxes\n    itemOffered {\n      ...CartProductItem\n    }\n  }\n\n  fragment CartProductItem on StoreProduct {\n    sku\n    name\n    unitMultiplier\n    image {\n      url\n      alternateName\n    }\n    brand {\n      name\n    }\n    isVariantOf {\n      productGroupID\n      name\n      skuVariants {\n        activeVariations\n        slugsMap\n        availableVariations\n      }\n    }\n    gtin\n    additionalProperty {\n      propertyID\n      name\n      value\n      valueReference\n    }\n  }\n':
     types.ValidateCartMutationDocument,
   '\n  mutation SubscribeToNewsletter($data: IPersonNewsletter!) {\n    subscribeToNewsletter(data: $data) {\n      id\n    }\n  }\n':
@@ -216,6 +218,12 @@ export function gql(
 export function gql(
   source: '\n  mutation CancelOrderMutation($data: IUserOrderCancel!) {\n    cancelOrder(data: $data) {\n      data\n    }\n  }\n'
 ): typeof import('./graphql').CancelOrderMutationDocument
+/**
+ * The gql function is used to parse GraphQL queries into a document that can be used by GraphQL clients.
+ */
+export function gql(
+  source: '\n  query ValidateUser {\n    validateUser {\n      isValid\n    }\n  }\n'
+): typeof import('./graphql').ValidateUserDocument
 /**
  * The gql function is used to parse GraphQL queries into a document that can be used by GraphQL clients.
  */

package/@generated/graphql.ts

@@ -561,6 +561,8 @@ export type Query = {
   shipping: Maybe<ShippingData>
   /** Returns information about the Details of an User Order. */
   userOrder: Maybe<UserOrderResult>
+  /** Returns information about the user validation. */
+  validateUser: Maybe<ValidateUserData>
 }
 
 export type QueryAllCollectionsArgs = {
@@ -1997,6 +1999,11 @@ export type UserOrderTransactions = {
   transactionId: Maybe<Scalars['String']['output']>
 }
 
+export type ValidateUserData = {
+  /** Indicates if the user is valid. */
+  isValid: Scalars['Boolean']['output']
+}
+
 export type ProductSummary_ProductFragment = {
   slug: string
   sku: string
@@ -2459,6 +2466,10 @@ export type CancelOrderMutationMutation = {
   cancelOrder: { data: string | null } | null
 }
 
+export type ValidateUserQueryVariables = Exact<{ [key: string]: never }>
+
+export type ValidateUserQuery = { validateUser: { isValid: boolean } | null }
+
 export type ValidateCartMutationMutationVariables = Exact<{
   cart: IStoreCart
   session: IStoreSession
@@ -3546,6 +3557,15 @@ export const CancelOrderMutationDocument = {
   CancelOrderMutationMutation,
   CancelOrderMutationMutationVariables
 >
+export const ValidateUserDocument = {
+  __meta__: {
+    operationName: 'ValidateUser',
+    operationHash: '32f99c73c3de958b64d6bece1afe800469f54548',
+  },
+} as unknown as TypedDocumentString<
+  ValidateUserQuery,
+  ValidateUserQueryVariables
+>
 export const ValidateCartMutationDocument = {
   __meta__: {
     operationName: 'ValidateCartMutation',

package/@generated/persisted-documents.json

@@ -8,6 +8,7 @@
   "9f24767f16e6e05c168336701a6c6c7b6b5dc1c6": "query ServerSecurityQuery { accountName }",
   "92d9db34aa133d60d474c6d4cdcdd2fc19041a5e": "query ServerUserDetailsQuery { accountName }",
   "e2b06da6840614d3c72768e56579b9d3b8e80802": "mutation CancelOrderMutation($data: IUserOrderCancel!) { cancelOrder(data: $data) { data } }",
+  "32f99c73c3de958b64d6bece1afe800469f54548": "query ValidateUser { validateUser { isValid } }",
   "c2b3f8bff73ebf6ac79d758c66cabbc21ba9fcc0": "fragment CartItem on StoreOffer { itemOffered { ...CartProductItem } listPrice listPriceWithTaxes price priceWithTaxes quantity seller { identifier } } fragment CartMessage on StoreCartMessage { status text } fragment CartProductItem on StoreProduct { additionalProperty { name propertyID value valueReference } brand { name } gtin image { alternateName url } isVariantOf { name productGroupID skuVariants { activeVariations availableVariations slugsMap } } name sku unitMultiplier } mutation ValidateCartMutation($cart: IStoreCart!, $session: IStoreSession!) { validateCart(cart: $cart, session: $session) { messages { ...CartMessage } order { acceptedOffer { ...CartItem } orderNumber shouldSplitItem } } }",
   "feb7005103a859e2bc8cf2360d568806fd88deba": "mutation SubscribeToNewsletter($data: IPersonNewsletter!) { subscribeToNewsletter(data: $data) { id } }",
   "dc912e7272e3d9f5ced206837df87f544d39d0a5": "query ClientProductCountQuery($term: String) { productCount(term: $term) { total } }",

package/@generated/schema.graphql

@@ -710,6 +710,13 @@ type Query {
   ): UserOrderListMinimalResult @cacheControl(scope: "public", sMaxAge: 120, staleWhileRevalidate: 3600)
   """Returns the account name of the current user or the B2B contract name if applicable."""
   accountName: String @cacheControl(scope: "public", sMaxAge: 120, staleWhileRevalidate: 3600)
+  """Returns information about the user validation."""
+  validateUser: ValidateUserData @cacheControl(scope: "public", sMaxAge: 120, staleWhileRevalidate: 3600)
+}
+
+type ValidateUserData {
+  """Indicates if the user is valid."""
+  isValid: Boolean!
 }
 
 """

package/CHANGELOG.md

@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.58.0](https://github.com/vtex/faststore/compare/v3.57.0...v3.58.0) (2025-06-20)
+
+### Features
+
+- add user validation query and implement access control in MyAccount ([#2899](https://github.com/vtex/faststore/issues/2899)) ([48978bf](https://github.com/vtex/faststore/commit/48978bf90e486b5eaa38ee230e7d8f9a269fb910))
+
+# [3.57.0](https://github.com/vtex/faststore/compare/v3.56.3...v3.57.0) (2025-06-20)
+
+### Features
+
+- show empty state instead of table ([#2913](https://github.com/vtex/faststore/issues/2913)) ([5803953](https://github.com/vtex/faststore/commit/580395323bde2f9f1ca5da222c75dc359ac695a5))
+
 ## [3.56.3](https://github.com/vtex/faststore/compare/v3.56.2...v3.56.3) (2025-06-20)
 
 **Note:** Version bump only for package @faststore/core

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faststore/core",
-  "version": "3.56.3",
+  "version": "3.58.0",
   "license": "MIT",
   "repository": "vtex/faststore",
   "browserslist": "supports es6-module and not dead",
@@ -44,7 +44,7 @@
     "@envelop/graphql-jit": "^8.0.3",
     "@envelop/parser-cache": "^6.0.2",
     "@envelop/validation-cache": "^6.0.2",
-    "@faststore/api": "^3.56.3",
+    "@faststore/api": "^3.58.0",
     "@faststore/graphql-utils": "^3.56.1",
     "@faststore/lighthouse": "^3.56.1",
     "@faststore/sdk": "^3.56.1",
@@ -105,5 +105,5 @@
     "ts-jest": "29.1.1",
     "typescript": "5.3.2"
   },
-  "gitHead": "7d0a61602c3dca4d8080da99dea0c5d4e3cfb38b"
+  "gitHead": "714b4b286130446f08511010d3cb14309ed9a9c7"
 }

package/src/components/account/orders/MyAccountListOrders/MyAccountListOrders.tsx

@@ -5,7 +5,9 @@ import { useRouter } from 'next/router'
 
 import {
   Button,
-  Icon,
+  EmptyState,
+  Icon as UIIcon,
+  LinkButton,
   SearchInputField,
   useUI,
   type SearchInputFieldRef,
@@ -20,7 +22,6 @@ import {
 } from 'src/sdk/search/useMyAccountFilter'
 import useScreenResize from 'src/sdk/ui/useScreenResize'
 import { FastStoreOrderStatus } from 'src/utils/userOrderStatus'
-import MyAccountListOrdersEmptyState from './MyAccountListOrdersEmptyState'
 import MyAccountListOrdersTable, {
   Pagination,
 } from './MyAccountListOrdersTable/MyAccountListOrdersTable'
@@ -105,6 +106,17 @@ function getAllFacets({
   ]
 }
 
+function hasActiveFilters(
+  filters: MyAccountListOrdersProps['filters']
+): boolean {
+  return (
+    filters.status.length > 0 ||
+    Boolean(filters.dateInitial) ||
+    Boolean(filters.dateFinal) ||
+    Boolean(filters.text)
+  )
+}
+
 export default function MyAccountListOrders({
   listOrders,
   total,
@@ -163,13 +175,8 @@ export default function MyAccountListOrders({
 
   const { openFilter, filter: displayFilter } = useUI()
 
-  if (listOrders.list.length === 0) {
-    return (
-      <div className={styles.page}>
-        <MyAccountListOrdersEmptyState />
-      </div>
-    )
-  }
+  const hasFilters = hasActiveFilters(filters)
+  const isEmpty = listOrders.list.length === 0
 
   return (
     <div className={styles.page}>
@@ -197,7 +204,7 @@ export default function MyAccountListOrders({
               data-fs-list-orders-search-filters-button
               variant="tertiary"
               icon={
-                <Icon
+                <UIIcon
                   width={16}
                   height={16}
                   name="FadersHorizontal"
@@ -279,12 +286,39 @@ export default function MyAccountListOrders({
           />
         )}
 
-        <MyAccountListOrdersTable
-          listOrders={listOrders}
-          total={total}
-          perPage={perPage}
-          filters={filters}
-        />
+        {isEmpty ? (
+          <EmptyState
+            titleIcon={
+              <UIIcon
+                name={hasFilters ? 'MagnifyingGlass' : 'Bag2'}
+                width={56}
+                height={56}
+                weight="thin"
+              />
+            }
+            title={
+              hasFilters ? 'No results found' : "You don't have any orders"
+            }
+            bkgColor="light"
+          >
+            {!hasFilters && (
+              <LinkButton
+                data-fs-list-orders-empty-state-link
+                href="/"
+                variant="secondary"
+              >
+                Start shopping
+              </LinkButton>
+            )}
+          </EmptyState>
+        ) : (
+          <MyAccountListOrdersTable
+            listOrders={listOrders}
+            total={total}
+            perPage={perPage}
+            filters={filters}
+          />
+        )}
       </div>
       {!isDesktop && (
         <Pagination page={filters.page} total={total} perPage={perPage} />

package/src/components/account/orders/MyAccountListOrders/styles.module.scss

@@ -1,8 +1,8 @@
 .page {
   @import "./MyAccountListOrdersTable/styles.scss";
   @import "./MyAccountSelectedTags/styles.scss";
-  @import "./MyAccountListOrdersEmptyState/styles.scss";
   @import "../../components/MyAccountStatusBadge/styles.scss";
+  @import "@faststore/ui/src/components/organisms/EmptyState/styles.scss";
 
   // --------------------------------------------------------
   // Design Tokens

package/src/experimental/myAccountSeverSideProps.ts

@@ -14,6 +14,7 @@ import { execute } from 'src/server'
 
 import { injectGlobalSections } from 'src/server/cms/global'
 import { getMyAccountRedirect } from 'src/utils/myAccountRedirect'
+import { validateUser } from 'src/sdk/account/validateUser'
 
 export type MyAccountProps = {
   globalSections: GlobalSectionsData
@@ -31,7 +32,16 @@ export const getServerSideProps: GetServerSideProps<
   Record<string, string>,
   Locator
 > = async (context) => {
-  // TODO validate permissions here
+  const isValid = await validateUser(context)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query: context.query,

package/src/pages/account/403.tsx

@@ -23,6 +23,7 @@ import type {
   ServerAccountPageQueryQuery,
   ServerAccountPageQueryQueryVariables,
 } from '@generated/graphql'
+import { validateUser } from 'src/sdk/account/validateUser'
 
 /* A list of components that can be used in the CMS. */
 const COMPONENTS: Record<string, ComponentType<any>> = {
@@ -71,7 +72,16 @@ export const getServerSideProps: GetServerSideProps<
   Record<string, string>,
   Locator
 > = async (context) => {
-  // TODO validate permissions here
+  const isValid = await validateUser(context)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query: context.query,

package/src/pages/account/404.tsx

@@ -24,6 +24,7 @@ import type {
   ServerAccountPageQueryQuery,
   ServerAccountPageQueryQueryVariables,
 } from '@generated/graphql'
+import { validateUser } from 'src/sdk/account/validateUser'
 
 /* A list of components that can be used in the CMS. */
 const COMPONENTS: Record<string, ComponentType<any>> = {
@@ -67,7 +68,16 @@ export const getServerSideProps: GetServerSideProps<
   Record<string, string>,
   Locator
 > = async (context) => {
-  // TODO validate permissions here
+  const isValid = await validateUser(context)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query: context.query,

package/src/pages/account/[...unknown].tsx

@@ -13,8 +13,6 @@ export const getStaticProps: GetStaticProps<
   Record<string, string>,
   Locator
 > = async () => {
-  // TODO validate permissions here
-
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query: {},
   })

package/src/pages/account/index.tsx

@@ -1,3 +1,4 @@
+import { validateUser } from 'src/sdk/account/validateUser'
 import type { GetServerSideProps, NextPage } from 'next'
 import { getMyAccountRedirect } from 'src/utils/myAccountRedirect'
 
@@ -5,8 +6,20 @@ const MyAccountRedirectPage: NextPage = () => {
   return null
 }
 
-export const getServerSideProps: GetServerSideProps = async ({ query }) => {
-  // TODO validate permissions here
+export const getServerSideProps: GetServerSideProps = async ({
+  query,
+  req,
+}) => {
+  const isValid = await validateUser({ query, req } as any)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query,

package/src/pages/account/orders/[id].tsx

@@ -8,6 +8,7 @@ import RenderSections from 'src/components/cms/RenderSections'
 import { default as GLOBAL_COMPONENTS } from 'src/components/cms/global/Components'
 import CUSTOM_COMPONENTS from 'src/customizations/src/components'
 import type { MyAccountProps } from 'src/experimental/myAccountSeverSideProps'
+import { validateUser } from 'src/sdk/account/validateUser'
 
 import { gql } from '@generated'
 import type {
@@ -204,7 +205,16 @@ export const getServerSideProps: GetServerSideProps<
   Record<string, string>,
   Locator
 > = async (context) => {
-  // TODO validate permissions here
+  const isValid = await validateUser(context)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query: context.query,

package/src/pages/account/orders/index.tsx

@@ -24,6 +24,7 @@ import { groupOrderStatusByLabel } from 'src/utils/userOrderStatus'
 
 import { MyAccountListOrders } from 'src/components/account/orders/MyAccountListOrders'
 import { extractStatusFromError } from 'src/utils/utilities'
+import { validateUser } from 'src/sdk/account/validateUser'
 
 /* A list of components that can be used in the CMS. */
 const COMPONENTS: Record<string, ComponentType<any>> = {
@@ -118,7 +119,16 @@ export const getServerSideProps: GetServerSideProps<
   Record<string, string>,
   Locator
 > = async (context) => {
-  // TODO validate permissions here
+  const isValid = await validateUser(context)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { previewData } = context
 

package/src/pages/account/profile.tsx

@@ -23,6 +23,7 @@ import type {
   ServerProfileQueryQuery,
   ServerProfileQueryQueryVariables,
 } from '@generated/graphql'
+import { validateUser } from 'src/sdk/account/validateUser'
 
 /* A list of components that can be used in the CMS. */
 const COMPONENTS: Record<string, ComponentType<any>> = {
@@ -63,7 +64,16 @@ export const getServerSideProps: GetServerSideProps<
   Record<string, string>,
   Locator
 > = async (context) => {
-  // TODO validate permissions here
+  const isValid = await validateUser(context)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query: context.query,

package/src/pages/account/security.tsx

@@ -24,6 +24,7 @@ import type {
   ServerSecurityQueryQuery,
   ServerSecurityQueryQueryVariables,
 } from '@generated/graphql'
+import { validateUser } from 'src/sdk/account/validateUser'
 
 /* A list of components that can be used in the CMS. */
 const COMPONENTS: Record<string, ComponentType<any>> = {
@@ -68,7 +69,16 @@ export const getServerSideProps: GetServerSideProps<
   Record<string, string>,
   Locator
 > = async (context) => {
-  // TODO validate permissions here
+  const isValid = await validateUser(context)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query: context.query,

package/src/pages/account/user-details.tsx

@@ -24,6 +24,7 @@ import type {
   ServerUserDetailsQueryQuery,
   ServerUserDetailsQueryQueryVariables,
 } from '@generated/graphql'
+import { validateUser } from 'src/sdk/account/validateUser'
 
 /* A list of components that can be used in the CMS. */
 const COMPONENTS: Record<string, ComponentType<any>> = {
@@ -64,7 +65,16 @@ export const getServerSideProps: GetServerSideProps<
   Record<string, string>,
   Locator
 > = async (context) => {
-  // TODO validate permissions here
+  const isValid = await validateUser(context)
+
+  if (!isValid) {
+    return {
+      redirect: {
+        destination: '/login',
+        permanent: false,
+      },
+    }
+  }
 
   const { isFaststoreMyAccountEnabled, redirect } = getMyAccountRedirect({
     query: context.query,

package/src/sdk/account/validateUser.ts

@@ -0,0 +1,32 @@
+import { gql } from '@generated/gql'
+import type {
+  ValidateUserQuery,
+  ValidateUserQueryVariables,
+} from '@generated/graphql'
+import type { GetServerSidePropsContext } from 'next'
+import { execute } from 'src/server'
+
+const query = gql(`
+  query ValidateUser {
+    validateUser {
+      isValid
+    }
+  }
+`)
+
+export async function validateUser(context: GetServerSidePropsContext) {
+  const validateUserResult = await execute<
+    ValidateUserQueryVariables,
+    ValidateUserQuery
+  >(
+    {
+      variables: {},
+      operation: query,
+    },
+    {
+      headers: { ...context.req.headers },
+    }
+  )
+
+  return validateUserResult?.data?.validateUser?.isValid
+}

package/test/server/index.test.ts

@@ -77,6 +77,7 @@ const QUERIES = [
   'userOrder',
   'listUserOrders',
   'accountName',
+  'validateUser',
 ]
 
 const MUTATIONS = [

package/.next/server/chunks/5772.js

@@ -1 +0,0 @@
-"use strict";exports.id=5772,exports.ids=[5772],exports.modules={96396:(e,t,r)=>{r.d(t,{Z:()=>o});var a=r(16689),l=r.n(a),n=r(42256),i=r(37041),s=r(2614);let f=(0,a.forwardRef)(function({onSubmit:e,buttonIcon:t,"aria-label":r="search",testId:f="fs-search-input",buttonProps:o,...d},c){let u=(0,a.useRef)(null),m=(0,a.useRef)(null);return(0,a.useImperativeHandle)(c,()=>({inputRef:u.current,formRef:m.current})),l().createElement("form",{ref:m,"data-fs-search-input-field":!0,"data-testid":f,onSubmit:t=>{t.preventDefault(),u.current?.value!==""&&e(u.current.value)},role:"search"},l().createElement(n.Z,{ref:u,"aria-label":r,"data-fs-search-input-field-input":!0,...d}),l().createElement(i.Z,{type:"submit","aria-label":"Submit Search",icon:t??l().createElement(s.Z,{name:"MagnifyingGlass"}),size:"small",...o}))}),o=f},38846:(e,t,r)=>{r.d(t,{Z:()=>__WEBPACK_DEFAULT_EXPORT__});var a=r(16689),l=r.n(a),n=r(13666),i=r(16652),s=r(77215),f=r(45049),o=r(83339);let __WEBPACK_DEFAULT_EXPORT__=function({title:e,size:t,direction:r,children:a,applyBtnProps:d,clearBtnProps:c,overlayProps:u,onClose:m,...E}){let{fade:p,fadeOut:_}=(0,n.b)(),{closeFilter:b}=(0,i.l)();return l().createElement(s.Z,{"data-fs-filter-slider":!0,isOpen:!0,fade:p,onDismiss:_,size:t,direction:r,onTransitionEnd:()=>"out"===p&&b(),overlayProps:u,...E},l().createElement("div",{"data-fs-filter-slider-content":!0},l().createElement(f.Z,{onClose:()=>{m(),_()}},l().createElement("h2",{"data-fs-filter-slider-title":!0},e)),a),l().createElement("footer",{"data-fs-filter-slider-footer":!0},l().createElement(o.Z,{"data-fs-filter-slider-footer-button-clear":!0,...c}),l().createElement(o.Z,{"data-fs-filter-slider-footer-button-apply":!0,"data-testid":"filter-slider-button-apply",...d,onClick:e=>{d?.onClick?.(e),_()}})))}}};