@misiki/gocommerce-connector 0.4.3 → 0.4.5

package/dist/services/index.cjs

@@ -2025,12 +2025,31 @@ var OrderService = class extends BaseService {
   async listPublic(_args = {}) {
     return emptyPage();
   }
-  async getOrderByEmailAndOTP() {
-    throw new NotSupportedError(
-      "OrderService",
-      "getOrderByEmailAndOTP",
-      "the engine sends no one-time codes; a guest reads an order with its access token"
+  /**
+   * Sends a 4-digit code to the email or phone on the order, when `contact`
+   * is that email or phone. The engine answers the same either way, so this
+   * resolves whether or not anything was sent.
+   */
+  async requestOrderCode({ orderNo, contact }) {
+    const res = await this.data(
+      `/api/orders/${encodeURIComponent(orderNo.trim())}/code`,
+      { method: "POST", body: { contact: contact.trim() } }
+    );
+    return { expiresInMinutes: res?.expires_in_minutes ?? 10 };
+  }
+  /**
+   * Opens an order with the code `requestOrderCode` sent. The token it answers
+   * is kept like an order placed in this browser, so the order page and
+   * `getOrder` read it again without another code.
+   */
+  async getOrderByEmailAndOTP({ orderNo, otp }) {
+    const number = orderNo.trim();
+    const res = await this.data(
+      `/api/orders/${encodeURIComponent(number)}/code/verify`,
+      { method: "POST", body: { code: String(otp).trim() } }
     );
+    rememberOrder({ number: res.order.number, token: res.access_token, cartId: "" });
+    return { data: [toOrder(res.order)] };
   }
 };
 var clean2 = (v) => v && v !== "undefined" && v !== "null" ? v : void 0;
@@ -2167,6 +2186,19 @@ var UserService = class extends BaseService {
   }
 };
 var AuthService = class extends UserService {
+  facts = new StoreFacts(this._fetch);
+  /**
+   * How this store signs customers in: `email_password` or `phone_otp`.
+   * A store whose accounts module says nothing signs in by email.
+   */
+  async loginMethod() {
+    try {
+      const method = (await this.facts.plugins()).get("identity")?.settings?.login_method;
+      return method === "phone_otp" ? "phone_otp" : "email_password";
+    } catch {
+      return "email_password";
+    }
+  }
   async forgotPassword({ email }) {
     return this.account("/x/identity/password-reset", {
       method: "POST",
@@ -2193,11 +2225,21 @@ var AuthService = class extends UserService {
       return { errorCode: err.code ?? "invalid_token", message: err.message };
     }
   }
-  async getOtp() {
-    throw new NotSupportedError("AuthService", "getOtp", "sign in with an email and password");
+  /** Texts a 4-digit sign-in code to `phone`, which needs its country code. */
+  async getOtp({ phone }) {
+    const res = await this.account("/x/identity/otp", {
+      method: "POST",
+      body: { phone: String(phone ?? "").trim() }
+    });
+    return { expiresInMinutes: res?.expires_in_minutes ?? 10 };
   }
-  async verifyOtp() {
-    throw new NotSupportedError("AuthService", "verifyOtp", "sign in with an email and password");
+  /** Signs in the account on `phone` with the code it was sent, opening one the first time. */
+  async verifyOtp({ phone, otp }) {
+    const auth = await this.account("/x/identity/otp/verify", {
+      method: "POST",
+      body: { phone: String(phone ?? "").trim(), code: String(otp ?? "").trim() }
+    });
+    return this.signedIn(auth);
   }
   async joinAsAdmin() {
     throw new NotSupportedError("AuthService", "joinAsAdmin", "operators are invited from the admin panel");
@@ -2552,7 +2594,11 @@ var StoreService = class extends BaseService {
           ...flag(plugins.has("product-reviews"))
         }
       },
-      ...menus?.length ? { menu: menus } : {}
+      ...menus?.length ? { menu: menus } : {},
+      // The one way this store signs customers in (D116), which the sign-in
+      // form reads as PHONE or EMAIL. Without the accounts module the static
+      // record says.
+      ...plugins.has("identity") ? { loginType: plugins.get("identity")?.settings?.login_method === "phone_otp" ? "PHONE" : "EMAIL" } : {}
     };
   }
 };