@jarwizz/create-jarshop 0.1.3 → 0.1.4

package/dist/template/src/plugins/jarshop-checkout/confirmation.ts

@@ -16,6 +16,19 @@ export function createConfirmationToken(now = Date.now()) {
   };
 }
 
+/**
+ * Independent one-time credentials for the browser hand-off and e-mail link.
+ *
+ * Checkout exchanges the browser token immediately. Reusing it in the outbox
+ * would make the e-mail link a replay before the customer receives it.
+ */
+export function createConfirmationTokenPair(now = Date.now()) {
+  return {
+    browser: createConfirmationToken(now),
+    email: createConfirmationToken(now),
+  };
+}
+
 export function canExchangeConfirmationToken(input: {
   expiresAt: Date;
   consumedAt: Date | null;

package/dist/template/src/plugins/jarshop-checkout/jarshop-checkout.plugin.ts

@@ -27,6 +27,7 @@ import {
   canExchangeConfirmationToken,
   canReadConfirmationCredential,
   createConfirmationToken,
+  createConfirmationTokenPair,
   hashConfirmationToken,
   readCookieValue,
 } from "./confirmation.js";
@@ -613,19 +614,25 @@ class JarShopCheckoutResolver {
         acceptedAt: new Date(),
       }),
     );
-    const confirmation = createConfirmationToken();
+    const confirmations = createConfirmationTokenPair();
     const tokenRepository = this.connection.getRepository(
       ctx,
       JarShopConfirmationToken,
     );
-    await tokenRepository.save(
+    await tokenRepository.save([
       tokenRepository.create({
-        tokenHash: confirmation.tokenHash,
+        tokenHash: confirmations.browser.tokenHash,
         orderId: Number(paymentResult.id),
-        expiresAt: confirmation.expiresAt,
+        expiresAt: confirmations.browser.expiresAt,
         consumedAt: null,
       }),
-    );
+      tokenRepository.create({
+        tokenHash: confirmations.email.tokenHash,
+        orderId: Number(paymentResult.id),
+        expiresAt: confirmations.email.expiresAt,
+        consumedAt: null,
+      }),
+    ]);
     const emailDeliveryRepository = this.connection.getRepository(
       ctx,
       JarShopOrderEmailDelivery,
@@ -636,7 +643,7 @@ class JarShopCheckoutResolver {
           orderId: Number(paymentResult.id),
           checkoutAttemptId: attempt.attemptId,
           languageCode: input.languageCode,
-          confirmationToken: confirmation.token,
+          confirmationToken: confirmations.email.token,
         }),
       ),
     );
@@ -650,13 +657,13 @@ class JarShopCheckoutResolver {
           placedOrder,
           activeOrder.totalWithTax,
           activeOrder.currencyCode,
-          confirmation.token,
+          confirmations.browser.token,
         )
       : success(
           paymentResult,
           activeOrder.totalWithTax,
           activeOrder.currencyCode,
-          confirmation.token,
+          confirmations.browser.token,
         );
   }
 

package/dist/template-manifest.json

@@ -1,3 +1,3 @@
 {
-  "digest": "sha256:16e696efe1452c2aeac287d87541d38e5254828686eae16084e1562c0e5a6bd1"
+  "digest": "sha256:b48464cda2b930fe6992452e539c4f5296ae82c2c8e673591766f263f264b129"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jarwizz/create-jarshop",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "private": false,
   "description": "Generate an independent JarShop Client Project.",
   "license": "MIT",