@mindful-web/marko-web-identity-x 1.83.1 → 1.85.2

package/components/non-auth-identify.marko

@@ -4,7 +4,12 @@ $ const { identityX } = req;
 <if(Boolean(identityX))>
   <marko-web-resolve|{ resolved: user }| promise=identityX.getIdentityData()>
     <if(user && user.id)>
-      <marko-web-resolve|{ resolved: fullUser }| promise=identityX.findUserById(user.id)>
+      <!--
+        Memoized: a progressive-profile page load resolves this same identity in the middleware and
+        again in `getIdentityData()`. Read-only, so a per-request cache is safe here -- see
+        `service.findUserByIdMemoized` for the one caller that must NOT use it.
+      -->
+      <marko-web-resolve|{ resolved: fullUser }| promise=identityX.findUserByIdMemoized(user.id)>
         <${input.renderBody} user=fullUser />
       </marko-web-resolve>
     </if>

package/components/non-auth-identify.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.83.1/components/non-auth-identify.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.85.2/components/non-auth-identify.marko",
     marko_component = require("./non-auth-identify.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     marko_dynamicTag = require("marko/dist/runtime/helpers/dynamic-tag"),
@@ -23,7 +23,7 @@ function render(input, out, __component, component, state) {
         renderBody: function(out, { resolved: user }) {
           if (user && user.id) {
             marko_web_resolve_tag({
-                promise: identityX.findUserById(user.id),
+                promise: identityX.findUserByIdMemoized(user.id),
                 renderBody: function(out, { resolved: fullUser }) {
                   marko_dynamicTag(out, input.renderBody, function() {
                     return {
@@ -45,7 +45,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.83.1/components/non-auth-identify.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.85.2/components/non-auth-identify.marko",
     component: "./non-auth-identify.marko",
     tags: [
       "@mindful-web/marko-core/components/resolve.marko"

package/components/progressive-profile-form.marko

@@ -0,0 +1,127 @@
+
+import defaultValue from "@mindful-web/marko-core/utils/default-value";
+import { getAsArray, getAsObject } from "@mindful-web/object-path";
+import baseContentEntity from "@mindful-web/marko-web-p1-events/utils/base-content-entity";
+
+import getProgressiveFormFields from '../utils/get-progressive-form-fields'
+
+$ const { req: { identityX }, site, i18n } = out.global;
+$ const { content } = input;
+<!-- NOT named `state`: compiled Marko render functions receive a `state` parameter (component
+     state), so a top-level `$ const state` is a SyntaxError at require time — after a clean
+     compile. -->
+$ const profileState = getAsObject(input, "state");
+
+<!--
+  The progressive-profile gate form.
+
+  Mirrors `form-access.marko`, with one deliberate difference: where that template sets
+  `updateProfileOnSubmit = false` for identified-but-unauthenticated visitors (their answers go to
+  an anonymous content-access submission and never touch their AppUser record), this one writes.
+  That is the entire point of the feature -- the identified bucket is the majority of who we know.
+
+  Rendering is driven off `state.missingRows`, produced by the theme middleware via
+  `get-missing-progressive-fields.js`, so only unanswered questions appear and every one of them is
+  required. The rows are NOT read from the request anywhere; the write route re-derives what it
+  will accept from server config.
+-->
+$ const fieldRows = getAsArray(profileState, "missingRows");
+$ const userId = profileState.userId;
+$ const contentId = content && content.id;
+
+<if(identityX && fieldRows.length && userId && contentId)>
+  $ const additionalEventData = {
+    ...defaultValue(input.additionalEventData, {}),
+    contentGateType: "progressive-profile",
+    ...(profileState.promoCode ? { promoCode: profileState.promoCode } : {}),
+  };
+  <!--
+    The default title names how many questions are about to be asked, which is the single biggest
+    lever on completion: most abandonment on a gate like this is fear of a long form.
+
+    Read from `state.missingCount` (the middleware already flattens it), so it is the number
+    actually being rendered rather than the number configured -- a site asking two questions shows
+    the one-question title to a reader who has already answered half of them. The `missingRows`
+    fallback covers a caller that builds the state by hand rather than via the theme middleware.
+
+    Each count is its own string rather than an interpolated number because both translation
+    layers here (the app-level `i18n` function and the Vue component's own `translate` map) are
+    flat key lookups with no placeholder support. Three variants covers it: a real form is one or
+    two questions, and anything longer reads better as "a few" than as a number.
+  -->
+  $ const questionCount = profileState.missingCount || fieldRows.reduce((total, row) => total + row.length, 0);
+  $ const defaultTitlesByCount = {
+    1: "One quick question, then keep reading",
+    2: "Two quick questions, then keep reading",
+  };
+  $ const defaultTitle = defaultTitlesByCount[questionCount] || "A few quick questions, then keep reading";
+
+  $ const title = defaultValue(input.title, i18n(defaultTitle));
+  $ const callToAction = defaultValue(input.callToAction, i18n("Knowing your role helps us cover the topics that matter to your work. We only ask once."));
+  $ const buttonLabel = defaultValue(input.buttonLabel, i18n("Continue Reading"));
+  $ const dismissLabel = defaultValue(input.dismissLabel, i18n("Not right now"));
+  $ const lang = site.config.lang || "en";
+
+  <marko-web-identity-x-context|{ hasUser, user, fields }| with-fields=true>
+    $ const contentEntity = (content.id && content.type) ? baseContentEntity(content.id, content.type) : null;
+
+    <!--
+      reCAPTCHA v3 site key, resolved the two ways the fleet already does it: `app.locals.recaptcha`
+      (set in each website repo's `start-server.js`) with a `process.env` fallback for the packages
+      that read it directly, as `marko-web-contact-us` does.
+    -->
+    $ const recaptcha = getAsObject(out, "global.recaptcha");
+    $ const recaptchaSiteKey = recaptcha.siteKey || process.env.RECAPTCHA_V3_SITE_KEY;
+
+    $ const buildProps = (activeUser) => {
+      const {
+        customSelectFieldAnswers,
+        customBooleanFieldAnswers,
+        customTextFieldAnswers,
+      } = getProgressiveFormFields({ fields, fieldRows, user: activeUser });
+      return {
+        fieldRows,
+        activeUser,
+        customSelectFieldAnswers,
+        customBooleanFieldAnswers,
+        customTextFieldAnswers,
+        contentEntity,
+        content: { id: content.id, type: content.type, name: content.name },
+        title,
+        callToAction,
+        buttonLabel,
+        dismissLabel,
+        dismissible: Boolean(profileState.dismissible),
+        recaptchaSiteKey,
+        userId,
+        audience: hasUser ? "authenticated" : "identified",
+        idxEntity: `identity-x.${identityX.config.getAppId()}.app-user*${userId}`,
+        fieldIds: fieldRows.reduce((arr, row) => [...arr, ...row.map((col) => col.id)], []),
+        additionalEventData,
+        loginSource: "progressiveProfile",
+        endpoints: identityX.config.getEndpoints(),
+        enableChangeEmail: identityX.config.get("enableChangeEmail"),
+        defaultFieldLabels: identityX.config.get("defaultFieldLabels"),
+        lang,
+      };
+    };
+
+    <div class="content-progressive-profile-idx__wrapper">
+      <if(!hasUser)>
+        <!--
+          Identified but not authenticated -- the majority of who we know, and the population this
+          feature exists for. Same wrapper `form-access.marko` uses to resolve the `__idx_idt`
+          identity into a full AppUser.
+        -->
+        <marko-web-identity-x-non-auth-identify|{ user: identifiedUser }|>
+          <if(identifiedUser)>
+            <marko-web-browser-component name="IdentityXProgressiveProfile" props=buildProps(identifiedUser) />
+          </if>
+        </marko-web-identity-x-non-auth-identify>
+      </if>
+      <else>
+        <marko-web-browser-component name="IdentityXProgressiveProfile" props=buildProps(user) />
+      </else>
+    </div>
+  </marko-web-identity-x-context>
+</if>

package/components/progressive-profile-form.marko.js

@@ -0,0 +1,147 @@
+// Compiled using marko@4.20.2 - DO NOT EDIT
+"use strict";
+
+var marko_template = module.exports = require("marko/dist/html").t(__filename),
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.85.2/components/progressive-profile-form.marko",
+    marko_component = require("./progressive-profile-form.marko"),
+    marko_renderer = require("marko/dist/runtime/components/renderer"),
+    module_defaultValue = require("@mindful-web/marko-core/utils/default-value"),
+    defaultValue = module_defaultValue.default || module_defaultValue,
+    module_objectPath_module = require("@mindful-web/object-path"),
+    objectPath_module = module_objectPath_module.default || module_objectPath_module,
+    getAsArray = module_objectPath_module.getAsArray,
+    getAsObject = module_objectPath_module.getAsObject,
+    module_baseContentEntity = require("@mindful-web/marko-web-p1-events/utils/base-content-entity"),
+    baseContentEntity = module_baseContentEntity.default || module_baseContentEntity,
+    module_getProgressiveFormFields = require("../utils/get-progressive-form-fields"),
+    getProgressiveFormFields = module_getProgressiveFormFields.default || module_getProgressiveFormFields,
+    marko_web_browser_component_template = require("@mindful-web/marko-web/components/browser-component.marko"),
+    marko_loadTag = require("marko/dist/runtime/helpers/load-tag"),
+    marko_web_browser_component_tag = marko_loadTag(marko_web_browser_component_template),
+    marko_web_identity_x_non_auth_identify_template = require("./non-auth-identify.marko"),
+    marko_web_identity_x_non_auth_identify_tag = marko_loadTag(marko_web_identity_x_non_auth_identify_template),
+    marko_web_identity_x_context_template = require("./context.marko"),
+    marko_web_identity_x_context_tag = marko_loadTag(marko_web_identity_x_context_template);
+
+function render(input, out, __component, component, state) {
+  var data = input;
+
+  const { req: { identityX }, site, i18n } = out.global;
+
+  const { content } = input;
+
+  const profileState = getAsObject(input, "state");
+
+  const fieldRows = getAsArray(profileState, "missingRows");
+
+  const userId = profileState.userId;
+
+  const contentId = content && content.id;
+
+  if (((identityX && fieldRows.length) && userId) && contentId) {
+    const additionalEventData = {
+    ...defaultValue(input.additionalEventData, {}),
+    contentGateType: "progressive-profile",
+    ...(profileState.promoCode ? { promoCode: profileState.promoCode } : {}),
+  };
+
+    const questionCount = profileState.missingCount || fieldRows.reduce((total, row) => total + row.length, 0);
+
+    const defaultTitlesByCount = {
+    1: "One quick question, then keep reading",
+    2: "Two quick questions, then keep reading",
+  };
+
+    const defaultTitle = defaultTitlesByCount[questionCount] || "A few quick questions, then keep reading";
+
+    const title = defaultValue(input.title, i18n(defaultTitle));
+
+    const callToAction = defaultValue(input.callToAction, i18n("Knowing your role helps us cover the topics that matter to your work. We only ask once."));
+
+    const buttonLabel = defaultValue(input.buttonLabel, i18n("Continue Reading"));
+
+    const dismissLabel = defaultValue(input.dismissLabel, i18n("Not right now"));
+
+    const lang = site.config.lang || "en";
+
+    marko_web_identity_x_context_tag({
+        withFields: true,
+        renderBody: function(out, { hasUser, user, fields }) {
+          const contentEntity = (content.id && content.type) ? baseContentEntity(content.id, content.type) : null;
+
+          const recaptcha = getAsObject(out, "global.recaptcha");
+
+          const recaptchaSiteKey = recaptcha.siteKey || process.env.RECAPTCHA_V3_SITE_KEY;
+
+          const buildProps = (activeUser) => {
+      const {
+        customSelectFieldAnswers,
+        customBooleanFieldAnswers,
+        customTextFieldAnswers,
+      } = getProgressiveFormFields({ fields, fieldRows, user: activeUser });
+      return {
+        fieldRows,
+        activeUser,
+        customSelectFieldAnswers,
+        customBooleanFieldAnswers,
+        customTextFieldAnswers,
+        contentEntity,
+        content: { id: content.id, type: content.type, name: content.name },
+        title,
+        callToAction,
+        buttonLabel,
+        dismissLabel,
+        dismissible: Boolean(profileState.dismissible),
+        recaptchaSiteKey,
+        userId,
+        audience: hasUser ? "authenticated" : "identified",
+        idxEntity: `identity-x.${identityX.config.getAppId()}.app-user*${userId}`,
+        fieldIds: fieldRows.reduce((arr, row) => [...arr, ...row.map((col) => col.id)], []),
+        additionalEventData,
+        loginSource: "progressiveProfile",
+        endpoints: identityX.config.getEndpoints(),
+        enableChangeEmail: identityX.config.get("enableChangeEmail"),
+        defaultFieldLabels: identityX.config.get("defaultFieldLabels"),
+        lang,
+      };
+    };
+
+          out.w("<div class=\"content-progressive-profile-idx__wrapper\">");
+
+          if (!hasUser) {
+            marko_web_identity_x_non_auth_identify_tag({
+                renderBody: function(out, { user: identifiedUser }) {
+                  if (identifiedUser) {
+                    marko_web_browser_component_tag({
+                        name: "IdentityXProgressiveProfile",
+                        props: buildProps(identifiedUser)
+                      }, out, __component, "3");
+                  }
+                }
+              }, out, __component, "2");
+          } else {
+            marko_web_browser_component_tag({
+                name: "IdentityXProgressiveProfile",
+                props: buildProps(user)
+              }, out, __component, "4");
+          }
+
+          out.w("</div>");
+        }
+      }, out, __component, "0");
+  }
+}
+
+marko_template._ = marko_renderer(render, {
+    e_: marko_componentType
+  }, marko_component);
+
+marko_template.meta = {
+    id: "/@mindful-web/marko-web-identity-x$1.85.2/components/progressive-profile-form.marko",
+    component: "./progressive-profile-form.marko",
+    tags: [
+      "@mindful-web/marko-web/components/browser-component.marko",
+      "./non-auth-identify.marko",
+      "./context.marko"
+    ]
+  };

package/components/subscribe.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.83.1/components/subscribe.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.85.2/components/subscribe.marko",
     marko_component = require("./subscribe.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -73,7 +73,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.83.1/components/subscribe.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.85.2/components/subscribe.marko",
     component: "./subscribe.marko",
     tags: [
       "@mindful-web/marko-web/components/browser-component.marko",

package/config.js

@@ -5,6 +5,80 @@ const defaultAddRequestAttributes = require('./utils/add-custom-attributes');
 
 const { log } = console;
 
+/**
+ * The only column types the progressive-profile gate may ask for.
+ *
+ * A strict subset of what `custom-column.vue` can draw, and narrower than
+ * `get-missing-progressive-fields.js` supports, for two independent reasons:
+ *
+ * - **`built-in` is unwritable.** The shipped `progressiveProfileUpdate` mutation is
+ *   attributes-only (core/root member fields were cut on review), so a built-in column renders,
+ *   accepts a value, and is then silently dropped: the user submits, gets `changed: false`, and is
+ *   re-gated forever. This is the only one of these checks whose runtime failure is *silent*.
+ * - **`custom-boolean` is unsatisfiable.** `custom-column.vue` binds the checkbox to
+ *   `customField.answer` but its change handler writes `customField.value`, so the box never
+ *   registers as checked — and a *required* checkbox that cannot be checked traps the user behind
+ *   HTML5 validation. The diff util, the payload builder and the mutation all handle booleans
+ *   correctly; only the shared renderer does not, and that is fixed in the separate shared-code
+ *   PR rather than here. Remove `custom-boolean` from this list once it is.
+ *
+ * No coverage is lost: every field the fleet-wide impact analysis measured is a select attribute.
+ */
+const PROGRESSIVE_PROFILE_TYPES = ['custom-select', 'custom-text'];
+const PROGRESSIVE_PROFILE_UNWRITABLE_TYPES = ['built-in'];
+
+/**
+ * Fails the boot rather than shipping a configuration that presents to a real visitor as a gate
+ * they cannot get past, or that collects nothing while appearing to work. Failing the deploy beats
+ * discovering either as a loop.
+ *
+ * @param {import('.').CustomColumnDefinition[][]} fieldRows
+ * @param {string[]} activeCustomFieldIds
+ * @param {string} [apiToken]
+ */
+const validateProgressiveProfileFieldRows = (fieldRows, activeCustomFieldIds, apiToken) => {
+  const bail = (msg) => { throw new Error(`Unable to configure IdentityX: ${msg}`); };
+  const allowed = new Set(PROGRESSIVE_PROFILE_TYPES);
+  const active = new Set(activeCustomFieldIds);
+  const rows = getAsArray({ fieldRows }, 'fieldRows');
+
+  if (rows.length) {
+    // Every write on the identified path goes through `getOrgUserApiToken()`.
+    if (!apiToken) {
+      bail('`progressiveProfileFieldRows` is configured but no `apiToken` was provided. Progressive profiling writes with the org API token.');
+    }
+    // The submit route scores every submission with reCAPTCHA v3, the same way every other write
+    // form on the fleet does. Without keys, every submit scores as unverified and every answer is
+    // silently discarded -- the gate would look like it works and collect nothing at all.
+    if (!process.env.RECAPTCHA_V3_SITE_KEY || !process.env.RECAPTCHA_V3_SECRET_KEY) {
+      bail('`progressiveProfileFieldRows` is configured but reCAPTCHA is not. Set RECAPTCHA_V3_SITE_KEY and RECAPTCHA_V3_SECRET_KEY.');
+    }
+  }
+
+  rows.forEach((row, ridx) => {
+    getAsArray({ row }, 'row').forEach((col, cidx) => {
+      const at = `progressiveProfileFieldRows[${ridx}][${cidx}]`;
+      if (!col || typeof col !== 'object') bail(`${at} is not a field definition.`);
+      const { id, type } = col;
+
+      if (PROGRESSIVE_PROFILE_UNWRITABLE_TYPES.includes(type)) {
+        bail(`${at} is a "${type}" field. Progressive profiling can only write member attributes (${PROGRESSIVE_PROFILE_TYPES.join(', ')}); a "${type}" field would render, accept an answer, and then be silently discarded, re-gating the user on every page.`);
+      }
+      if (!allowed.has(type)) {
+        // Anything else falls through to `custom-column.vue`'s final `<pre v-else>` debug block,
+        // printing raw field metadata to a real visitor.
+        bail(`${at} has unsupported type "${type}". Progressive profiling supports: ${PROGRESSIVE_PROFILE_TYPES.join(', ')}.`);
+      }
+      if (!id) bail(`${at} has no "id". Custom fields are addressed by id, not key.`);
+      if (active.size && !active.has(id)) {
+        // `routes/profile.js` filters custom answers through this allowlist, so an id missing
+        // from it is silently discarded on any profile submit -- and the gate never clears.
+        bail(`${at} ("${id}") is not present in "activeCustomFieldIds". Add it, or the answer will be silently discarded.`);
+      }
+    });
+  });
+};
+
 class IdentityXConfiguration {
   /**
    *
@@ -14,6 +88,10 @@ class IdentityXConfiguration {
    * @param {string[]} [options.requiredServerFields] Required fields, server enforced.
    * @param {string[]} [options.requiredClientFields] Required fields, client-side only.
    * @param {string[]} [options.requiredCreateFieldRows] Required fields, when creating a new user.
+   * @param {import('.').CustomColumnDefinition[][]} [options.progressiveProfileFieldRows] The
+   *   questions the progressive-profile gate may ask an already-known visitor. Attributes only
+   *   (`custom-select` / `custom-text`) — a `built-in` or `custom-boolean` column throws at boot;
+   *   see `validateProgressiveProfileFieldRows` for why each is a user-facing trap.
    * @param {string[]} [options.activeCustomFieldIds] Limit displayed custom fields, if present.
    * @param {string[]} [options.hiddenFields] The fields to hide from the profile.
    * @param {function} [options.onHookError] Reporter for non-fatal errors. Called as
@@ -42,6 +120,7 @@ class IdentityXConfiguration {
     requiredServerFields = [],
     requiredClientFields = [],
     requiredCreateFieldRows = [],
+    progressiveProfileFieldRows = [],
     activeCustomFieldIds = [],
     additionalCustomFieldIds = [],
     defaultFieldLabels = {},
@@ -55,6 +134,11 @@ class IdentityXConfiguration {
     ...rest
   } = {}) {
     if (!appId) throw new Error('Unable to configure IdentityX: no Application ID was provided.');
+    validateProgressiveProfileFieldRows(
+      progressiveProfileFieldRows,
+      activeCustomFieldIds,
+      apiToken,
+    );
     this.appId = appId;
     this.apiToken = apiToken;
     this.options = {
@@ -62,6 +146,7 @@ class IdentityXConfiguration {
       requiredServerFields,
       requiredClientFields,
       requiredCreateFieldRows,
+      progressiveProfileFieldRows,
       activeCustomFieldIds,
       additionalCustomFieldIds,
       defaultFieldLabels,
@@ -159,6 +244,19 @@ class IdentityXConfiguration {
     return this.getAsArray('requiredCreateFieldRows');
   }
 
+  /**
+   * The per-site progressive-profile questions, in the same `CustomColumnDefinition[][]` shape as
+   * `requiredCreateFieldRows` — so per-site custom-select ids work and `browser/custom-column.vue`
+   * renders them unchanged.
+   *
+   * Empty by default: the whole feature is inert fleet-wide until a site declares fields *and*
+   * enables `progressiveProfile` in its site config. Validated at boot (see
+   * `validateProgressiveProfileFieldRows`).
+   */
+  getProgressiveProfileFieldRows() {
+    return this.getAsArray('progressiveProfileFieldRows');
+  }
+
   getHiddenFields() {
     return this.getAsArray('hiddenFields');
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindful-web/marko-web-identity-x",
-  "version": "1.83.1",
+  "version": "1.85.2",
   "description": "Marko Wrapper for IdentityX",
   "repository": "https://github.com/parameter1/mindful-web/tree/main/packages/marko-web-identity-x",
   "author": "Josh Worden <josh@parameter1.com>",
@@ -14,6 +14,7 @@
   },
   "dependencies": {
     "@mindful-web/marko-web-gtm": "^1.83.1",
+    "@mindful-web/marko-web-recaptcha": "^1.83.1",
     "@mindful-web/object-path": "^1.83.1",
     "@mindful-web/utils": "^1.83.1",
     "apollo-cache-inmemory": "^1.6.6",
@@ -38,5 +39,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "c9507129d0e30847cb2b2a941cb383746d1fd501"
+  "gitHead": "96764a47941171b3da9865ac201c891494926f37"
 }

package/routes/google.js

@@ -105,6 +105,11 @@ module.exports = asyncRoute(async (req, res) => {
   // the request dies is the step that failed, so an error arrives already
   // localized instead of being a bare GraphQL message to reverse-engineer.
   //
+  // The sink itself defaults to `utils/add-custom-attributes.js` (New Relic,
+  // inert without the agent) and is overridable per site -- see the
+  // `addRequestAttributes` JSDoc in `config.js`. Everything below this line is
+  // about the *attributes*, not where they go.
+  //
   // Timing comes in two parts, because they answer different questions.
   //
   // `idxGoogleStepMs` is elapsed-at-last-step: last-write-wins, so on a completed

package/routes/index.js

@@ -16,6 +16,7 @@ const login = require('./login');
 const loginFields = require('./login-fields');
 const logout = require('./logout');
 const profile = require('./profile');
+const progressiveProfile = require('./progressive-profile');
 const regions = require('./regions');
 
 const router = Router();
@@ -37,6 +38,8 @@ router.post('/login-fields', loginFields);
 router.post('/login', login);
 router.post('/logout', logout);
 router.post('/profile', profile);
+router.post('/progressive-profile/dismiss', progressiveProfile.dismiss);
+router.post('/progressive-profile', progressiveProfile.submit);
 router.use(jsonErrorHandler());
 
 module.exports = router;