@misiki/gocommerce-connector 0.4.7 → 0.4.9

package/dist/services/index.cjs

@@ -2066,11 +2066,24 @@ var orderService = new OrderService();
 
 // src/services/user-service.ts
 var UserService = class extends BaseService {
-  /** Email and password. The answer is the user object the storefront keeps in its `me` cookie. */
-  async login({ email, password }) {
+  /**
+   * Email and password. The answer is the user object the storefront keeps in its `me` cookie.
+   * With `phone` and `phoneToken` from `verifyOtp({ askIfNew: true })`, the phone is added to
+   * the account as it signs in (D123).
+   */
+  async login({
+    email,
+    password,
+    phone,
+    phoneToken
+  }) {
     const auth = await this.account("/x/identity/login", {
       method: "POST",
-      body: { email: String(email ?? "").trim(), password: String(password ?? "") }
+      body: {
+        email: String(email ?? "").trim(),
+        password: String(password ?? ""),
+        ...phoneToken ? { phone: String(phone ?? "").trim(), phone_token: phoneToken } : {}
+      }
     });
     return this.signedIn(auth);
   }
@@ -2234,19 +2247,42 @@ var AuthService = class extends UserService {
       return { errorCode: err.code ?? "invalid_token", message: err.message };
     }
   }
-  /** Texts a 4-digit sign-in code to `phone`, which needs its country code. */
-  async getOtp({ phone }) {
+  /**
+   * Texts a 4-digit sign-in code to `phone`, which needs its country code. `domain`, the page's
+   * host and in the browser read from it, lets the engine end the text "@domain #code" when the
+   * host is the store's own, which Chrome on Android reads to fill the code in (D124).
+   */
+  async getOtp({ phone, domain }) {
+    const site = domain ?? (typeof window !== "undefined" ? window.location?.hostname : void 0);
     const res = await this.account("/x/identity/otp", {
       method: "POST",
-      body: { phone: String(phone ?? "").trim() }
+      body: { phone: String(phone ?? "").trim(), ...site ? { domain: site } : {} }
     });
     return { expiresInMinutes: res?.expires_in_minutes ?? 10 };
   }
-  /** Signs in the account on `phone` with the code it was sent, opening one the first time. */
-  async verifyOtp({ phone, otp }) {
-    const auth = await this.account("/x/identity/otp/verify", {
+  /**
+   * Signs in the account on `phone` with the code it was sent, opening one the first time.
+   * With `askIfNew`, on a store that signs in either way, a phone with no account opens none:
+   * the answer is `{ newPhone: true, phoneToken }`, and the storefront asks "Already have an
+   * account?" — `login` with the token adds the phone to it, `openPhoneAccount` opens a new one (D123).
+   */
+  async verifyOtp({ phone, otp, askIfNew }) {
+    const res = await this.account("/x/identity/otp/verify", {
       method: "POST",
-      body: { phone: String(phone ?? "").trim(), code: String(otp ?? "").trim() }
+      body: {
+        phone: String(phone ?? "").trim(),
+        code: String(otp ?? "").trim(),
+        ...askIfNew ? { ask_if_new: true } : {}
+      }
+    });
+    if ("new_phone" in res && res.new_phone) return { newPhone: true, phoneToken: res.phone_token };
+    return this.signedIn(res);
+  }
+  /** Opens a new account on a phone `verifyOtp({ askIfNew: true })` proved, and signs it in (D123). */
+  async openPhoneAccount({ phone, phoneToken }) {
+    const auth = await this.account("/x/identity/otp/new-account", {
+      method: "POST",
+      body: { phone: String(phone ?? "").trim(), phone_token: phoneToken }
     });
     return this.signedIn(auth);
   }