@moonbase.sh/storefront-api 3.1.0 → 3.2.0

package/README.md

@@ -122,7 +122,17 @@ host — is returned untouched and logs a warning, since it will be served at fu
 
 ## Token storage and logging
 
-By default, credentials are stored in localStorage (or in-memory if localStorage is unavailable).
+By default, credentials are stored in localStorage, falling back to memory only when localStorage
+cannot be reached at all. Even that check sits inside a `try`, because reading
+`window.localStorage` itself throws in Firefox when the buyer has blocked cookies and site data.
+
+Reachability, not writability, is the test on purpose: an origin that is merely full is still
+holding the buyer's existing session, so it is used rather than discarded. Individual reads and
+writes that fail degrade to an in-memory copy and warn through the configured logger. The session
+stays valid for that page load; it just doesn't survive a reload, and
+`client.tokenStore.isPersistent` goes false once that has happened if you want to tell the buyer.
+A failure to *persist* credentials is never reported as a failure to sign in, so a locked-down
+browser can't strand someone in a sign-in loop.
 
 You can inject your own storage/logger implementations:
 

package/dist/index.cjs

@@ -49,6 +49,7 @@ __export(index_exports, {
   SubscriptionStatus: () => SubscriptionStatus,
   TokenStore: () => TokenStore,
   imageWidths: () => imageWidths,
+  isLocalStorageAvailable: () => isLocalStorageAvailable,
   isPromotionDisplay: () => isPromotionDisplay,
   isTransformableImageUrl: () => isTransformableImageUrl,
   maxImageDimension: () => maxImageDimension,
@@ -757,15 +758,15 @@ var IdentityEndpoints = class {
       throw new NotFoundError("User not found");
     if (response.status >= 400)
       await handleResponseProblem(response, this.logger);
+    let identity;
     try {
-      const data = await response.json();
-      const user = identitySchema.parse(data);
-      this.tokenStore.setUser(user);
-      return userSchema.parse(user);
+      identity = identitySchema.parse(await response.json());
     } catch (err) {
       this.logger.warn("Could not sign in user", { email, response, err });
       throw new MoonbaseError("Bad response", "Could not sign in user", response.status);
     }
+    this.tokenStore.setUser(identity);
+    return userSchema.parse(identity);
   }
   async signUp(name, email, password, address, acceptedPrivacyPolicy, acceptedTermsAndConditions, communicationOptIn) {
     const path = `/api/customer/identity/sign-up?scheme=JWT&communicationOptIn=${communicationOptIn ? "true" : "false"}`;
@@ -792,14 +793,15 @@ var IdentityEndpoints = class {
       const parsed = pendingActivationSchema.parse(data);
       return { status: "activation-pending", email: parsed.email };
     }
+    let identity;
     try {
-      const identity = identitySchema.parse(data);
-      this.tokenStore.setUser(identity);
-      return { status: "signed-in", user: userSchema.parse(identity) };
+      identity = identitySchema.parse(data);
     } catch (err) {
       this.logger.warn("Could not sign up user", { email, response, err });
       throw new MoonbaseError("Bad response", "Could not sign up user", response.status);
     }
+    this.tokenStore.setUser(identity);
+    return { status: "signed-in", user: userSchema.parse(identity) };
   }
   async signOut() {
     this.tokenStore.clear();
@@ -1079,6 +1081,15 @@ var MoonbaseApi = class {
       status: response.status,
       duration: finishedAt.getTime() - startedAt.getTime()
     });
+    if (response.type === "opaqueredirect" || response.status === 0) {
+      const err = new MoonbaseError(
+        "Unexpected redirect",
+        `The Moonbase API redirected ${path}, which the SDK is not configured to follow`,
+        response.status
+      );
+      this.reportRequestProblem(path, request, response, err);
+      throw err;
+    }
     if (response.status >= 400) {
       try {
         await handleResponseProblem(response, this.logger);
@@ -1543,28 +1554,81 @@ var ConsoleLogger = class {
 };
 
 // src/utils/store.ts
+function isLocalStorageAvailable() {
+  try {
+    return typeof window !== "undefined" && !!window.localStorage;
+  } catch (e) {
+    return false;
+  }
+}
 var LocalStorageStore = class {
+  constructor(onDegraded) {
+    this.onDegraded = onDegraded;
+    // Values whose write to localStorage failed. Read back in preference to
+    // localStorage so the rest of the session sees what it just wrote.
+    this.fallback = /* @__PURE__ */ new Map();
+    this.degraded = false;
+  }
+  get isDegraded() {
+    return this.degraded;
+  }
   get(key) {
-    const item = localStorage.getItem(key);
-    if (item) {
-      return JSON.parse(item);
+    if (this.fallback.has(key))
+      return this.fallback.get(key);
+    try {
+      const item = localStorage.getItem(key);
+      if (item) {
+        return JSON.parse(item);
+      }
+      return null;
+    } catch (err) {
+      this.reportDegraded(err);
+      return null;
     }
-    return null;
   }
   set(key, item) {
-    localStorage.setItem(key, JSON.stringify(item));
+    try {
+      localStorage.setItem(key, JSON.stringify(item));
+      this.fallback.delete(key);
+    } catch (err) {
+      this.reportDegraded(err);
+      this.fallback.set(key, item);
+    }
   }
   remove(key) {
-    localStorage.removeItem(key);
+    try {
+      localStorage.removeItem(key);
+      this.fallback.delete(key);
+      return;
+    } catch (err) {
+      this.reportDegraded(err);
+    }
+    this.fallback.set(key, null);
+    try {
+      localStorage.setItem(key, "");
+    } catch (e) {
+    }
   }
   listen(key, callback) {
-    if (typeof window !== "undefined") {
-      window.addEventListener("storage", (event) => {
-        if (event.key === key) {
-          callback(event.newValue ? JSON.parse(event.newValue) : null);
-        }
-      });
-    }
+    if (typeof window === "undefined")
+      return;
+    window.addEventListener("storage", (event) => {
+      if (event.key !== key)
+        return;
+      this.fallback.delete(key);
+      try {
+        callback(event.newValue ? JSON.parse(event.newValue) : null);
+      } catch (err) {
+        console.warn(`Moonbase could not parse the stored value for ${key}`, err);
+      }
+    });
+  }
+  reportDegraded(err) {
+    var _a;
+    if (this.degraded)
+      return;
+    this.degraded = true;
+    (_a = this.onDegraded) == null ? void 0 : _a.call(this, err);
   }
 };
 var InMemoryStore = class {
@@ -1602,8 +1666,11 @@ var _TokenStore = class _TokenStore {
     this.tokens = null;
     this.refreshTimeoutId = null;
     this.refreshPromise = null;
-    var _a;
-    this.store = (_a = configuration.store) != null ? _a : typeof window !== "undefined" && localStorage ? new LocalStorageStore() : new InMemoryStore();
+    var _a, _b;
+    this.logger = (_a = configuration.logger) != null ? _a : new ConsoleLogger();
+    this.store = (_b = configuration.store) != null ? _b : isLocalStorageAvailable() ? new LocalStorageStore((err) => this.warnAboutStorage(err)) : new InMemoryStore();
+    if (typeof window !== "undefined" && !configuration.store && !(this.store instanceof LocalStorageStore))
+      this.warnAboutStorage();
     const storedToken = this.store.get(_TokenStore.storageKey);
     if (storedToken) {
       this.tokens = {
@@ -1618,18 +1685,17 @@ var _TokenStore = class _TokenStore {
       return this.tokens;
     return null;
   }
+  get isPersistent() {
+    return this.store instanceof LocalStorageStore && !this.store.isDegraded;
+  }
   async getAccessToken() {
     var _a, _b, _c;
-    if (this.isExpired) {
-      if (this.refreshPromise) {
-        const tokens2 = await this.refreshPromise;
-        return (_a = tokens2 == null ? void 0 : tokens2.accessToken) != null ? _a : null;
-      }
-      this.refreshPromise = this.refreshTokens();
-      const tokens = await this.refreshPromise;
-      return (_b = tokens == null ? void 0 : tokens.accessToken) != null ? _b : null;
+    if (!this.isExpired) {
+      return ((_a = this.tokens) == null ? void 0 : _a.accessToken) || null;
     }
-    return ((_c = this.tokens) == null ? void 0 : _c.accessToken) || null;
+    const pending = (_b = this.refreshPromise) != null ? _b : this.startRefresh();
+    const tokens = await pending;
+    return (_c = tokens == null ? void 0 : tokens.accessToken) != null ? _c : null;
   }
   setUser(user) {
     const identity = user;
@@ -1654,7 +1720,7 @@ var _TokenStore = class _TokenStore {
       if (this.refreshTimeoutId != null)
         window.clearTimeout(this.refreshTimeoutId);
       this.refreshTimeoutId = window.setTimeout(() => {
-        this.refreshPromise = this.refreshTokens();
+        this.startRefresh().catch((err) => this.logger.warn("Could not refresh access token", err));
       }, 10 * 60 * 1e3);
     }
     return this.tokens;
@@ -1669,10 +1735,25 @@ var _TokenStore = class _TokenStore {
   get isExpired() {
     return this.tokens != null && this.tokens.expiresAt < /* @__PURE__ */ new Date();
   }
+  /**
+   * Start a refresh and hold it so concurrent callers join it rather than firing
+   * their own. The slot is cleared as soon as it settles: a retained promise
+   * would hand every later expiry the same stale access token, and a rejected one
+   * that stayed put would re-throw on every subsequent request (including the
+   * anonymous ones) for the rest of the session.
+   */
+  startRefresh() {
+    const pending = this.refreshTokens().finally(() => {
+      if (this.refreshPromise === pending)
+        this.refreshPromise = null;
+    });
+    this.refreshPromise = pending;
+    return pending;
+  }
   async refreshTokens() {
     if (!this.tokens)
       throw new Error("No tokens found to refresh");
-    const response = await fetch(`${this.configuration.endpoint}/api/customer/identity/refresh?token=${this.tokens.refreshToken}`, {
+    const response = await fetch(`${this.configuration.endpoint}/api/customer/identity/refresh?token=${encodeURIComponent(this.tokens.refreshToken)}`, {
       method: "POST",
       headers: {
         "Accept": "application/json",
@@ -1694,12 +1775,18 @@ var _TokenStore = class _TokenStore {
   }
   handleStorageUpdate(updatedTokens) {
     this.tokens = updatedTokens;
-    if (this.refreshTimeoutId != null)
+    if (this.refreshTimeoutId != null && typeof window !== "undefined")
       window.clearTimeout(this.refreshTimeoutId);
     if (this.tokens) {
       this.tokens.expiresAt = new Date(this.tokens.expiresAt);
     }
   }
+  warnAboutStorage(err) {
+    this.logger.warn(
+      "Moonbase could not persist credentials to localStorage: this browser is blocking or has exhausted site storage. Sign-in will work for this page load but will not survive a reload.",
+      err
+    );
+  }
 };
 _TokenStore.storageKey = "moonbase_auth";
 var TokenStore = _TokenStore;
@@ -2432,6 +2519,7 @@ var MoonbaseClient = class {
   SubscriptionStatus,
   TokenStore,
   imageWidths,
+  isLocalStorageAvailable,
   isPromotionDisplay,
   isTransformableImageUrl,
   maxImageDimension,

package/dist/index.d.cts

@@ -26,12 +26,47 @@ interface IStore {
     set: <TItem>(key: string, item: TItem) => void;
     remove: (key: string) => void;
     listen: <TItem>(key: string, callback: (item: TItem | null) => void) => void;
+    /**
+     * True once any storage operation has failed and the store has fallen back to
+     * memory. Optional so custom stores don't have to implement it.
+     */
+    readonly isDegraded?: boolean;
 }
+/**
+ * Whether `localStorage` can be reached at all.
+ *
+ * Deliberately *not* a write probe. Writability is not the right question here,
+ * because `LocalStorageStore` degrades per operation when a write fails, so a
+ * storage that reads fine but is at quota is still worth using: it is holding the
+ * buyer's existing session, and refusing it would throw away a perfectly readable
+ * sign-in and send them back to the login form. The only thing that makes
+ * `localStorage` unusable is not being able to touch it, which is what Firefox
+ * does (`SecurityError` from the property getter) when the buyer has blocked
+ * cookies and site data. That is why even the truthiness check sits inside a
+ * `try`.
+ */
+declare function isLocalStorageAvailable(): boolean;
+/**
+ * `localStorage`-backed store that degrades to memory instead of throwing.
+ *
+ * Storage can start failing at any point in a session, not just at construction:
+ * the origin hits quota, an extension clears site data, the profile's storage
+ * file goes corrupt. Since this is where the auth tokens live, an unhandled
+ * throw here surfaces as a failed sign-in for a buyer whose credentials were
+ * accepted. So every operation falls back to an in-memory copy. The session
+ * keeps working; it just stops surviving a reload.
+ */
 declare class LocalStorageStore implements IStore {
+    private readonly onDegraded?;
+    private readonly fallback;
+    private degraded;
+    constructor(onDegraded?: ((err: unknown) => void) | undefined);
+    get isDegraded(): boolean;
     get<TItem>(key: string): TItem | null;
     set<TItem>(key: string, item: TItem): void;
     remove(key: string): void;
     listen<TItem>(key: string, callback: (item: TItem | null) => void): void;
+    private reportDegraded;
 }
 declare class InMemoryStore implements IStore {
     private readonly store;
@@ -47,6 +82,7 @@ type IdentityWithExpiry = Identity & {
 };
 interface ITokenStore {
     get user(): User | null;
+    get isPersistent(): boolean;
     getAccessToken: () => Promise<string | null>;
     setUser: (user: Identity | User) => User | null;
     clear: () => void;
@@ -57,15 +93,26 @@ declare class TokenStore implements ITokenStore {
     private refreshTimeoutId;
     private refreshPromise;
     private readonly store;
+    private readonly logger;
     static readonly storageKey = "moonbase_auth";
     constructor(configuration: MoonbaseConfiguration);
     get user(): User | null;
+    get isPersistent(): boolean;
     getAccessToken(): Promise<string | null>;
     setUser(user: Identity | User): IdentityWithExpiry | null;
     clear(): null;
     private get isExpired();
+    /**
+     * Start a refresh and hold it so concurrent callers join it rather than firing
+     * their own. The slot is cleared as soon as it settles: a retained promise
+     * would hand every later expiry the same stale access token, and a rejected one
+     * that stayed put would re-throw on every subsequent request (including the
+     * anonymous ones) for the rest of the session.
+     */
+    private startRefresh;
     private refreshTokens;
     private handleStorageUpdate;
+    private warnAboutStorage;
 }
 
 type HttpMethods = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
@@ -47032,4 +47079,4 @@ declare class MoonbaseClient {
     orders: OrderEndpoints;
 }
 
-export { type Activation, ActivationMethod, type ActivationRequest, ActivationRequestFulfillmentType, ActivationRequestStatus, ActivationStatus, type Address, Architecture, type BundleLineItem, type CartCatalog, type CartOrder, type CartTotal, type CartTotalCondition, CartUtils, type CommunicationPreferences, type CommunicationPreferencesInput, type CommunicationPreferencesView, type CompletedOrder, ConnectableAccountProvider, type ConnectedAccount, ConsoleLogger, CycleLength, type Discount, DiscountUtils, type Download, type DownloadManifest, type ILogger, type IRecurrence, type IStore, type ITokenStore, type Identity, type ImageFit, type ImageFormat, type ImageTransform, ImageUtils, InMemoryStore, type License, LicenseStatus, type LineItem, type LineItemTotal, LocalStorageStore, LogLevel, MarketingConsentType, type MilestoneProgress, type Money, type MoneyCollection, MoneyCollectionUtils, MoonbaseApi, MoonbaseClient, type MoonbaseConfiguration, MoonbaseError, NotAuthenticatedError, NotAuthorizedError, NotFoundError, type OfferCondition, type OfferConditionContext, type OfferProgress, type OfferScope, OfferUtils, type OpenOrder, type Order, OrderStatus, type OrderTotal, type OwnedProduct, type Page, Platform, type PricingTier, type PricingVariation, type ProblemDetails, type ProductLineItem, type PromotionDisplay, type Quantifiable, type RawPropertyArray, type RawPropertyObject, type RawPropertyValue, type SignUpResult, type SingleOrMultiple, type Storefront, type StorefrontBundle, type StorefrontOffer, type StorefrontOfferTarget, type StorefrontProduct, type StorefrontPromotion, type StorefrontPromotionCta, type StorefrontPromotionTarget, type SubscribeInput, type SubscribeResponse, type Subscription, SubscriptionStatus, type TaxEstimate, TokenStore, type UrchinTrackingModule, type User, type UserAccountConfirmed, type UserAccountConfirmedStatus, type Vendor, type Voucher, imageWidths, isPromotionDisplay, isTransformableImageUrl, maxImageDimension, objectToQuery, parseOffSiteReferrer, problemDetailsSchema, promotionDisplays, resolveUtm, schemas, utmToObject };
+export { type Activation, ActivationMethod, type ActivationRequest, ActivationRequestFulfillmentType, ActivationRequestStatus, ActivationStatus, type Address, Architecture, type BundleLineItem, type CartCatalog, type CartOrder, type CartTotal, type CartTotalCondition, CartUtils, type CommunicationPreferences, type CommunicationPreferencesInput, type CommunicationPreferencesView, type CompletedOrder, ConnectableAccountProvider, type ConnectedAccount, ConsoleLogger, CycleLength, type Discount, DiscountUtils, type Download, type DownloadManifest, type ILogger, type IRecurrence, type IStore, type ITokenStore, type Identity, type ImageFit, type ImageFormat, type ImageTransform, ImageUtils, InMemoryStore, type License, LicenseStatus, type LineItem, type LineItemTotal, LocalStorageStore, LogLevel, MarketingConsentType, type MilestoneProgress, type Money, type MoneyCollection, MoneyCollectionUtils, MoonbaseApi, MoonbaseClient, type MoonbaseConfiguration, MoonbaseError, NotAuthenticatedError, NotAuthorizedError, NotFoundError, type OfferCondition, type OfferConditionContext, type OfferProgress, type OfferScope, OfferUtils, type OpenOrder, type Order, OrderStatus, type OrderTotal, type OwnedProduct, type Page, Platform, type PricingTier, type PricingVariation, type ProblemDetails, type ProductLineItem, type PromotionDisplay, type Quantifiable, type RawPropertyArray, type RawPropertyObject, type RawPropertyValue, type SignUpResult, type SingleOrMultiple, type Storefront, type StorefrontBundle, type StorefrontOffer, type StorefrontOfferTarget, type StorefrontProduct, type StorefrontPromotion, type StorefrontPromotionCta, type StorefrontPromotionTarget, type SubscribeInput, type SubscribeResponse, type Subscription, SubscriptionStatus, type TaxEstimate, TokenStore, type UrchinTrackingModule, type User, type UserAccountConfirmed, type UserAccountConfirmedStatus, type Vendor, type Voucher, imageWidths, isLocalStorageAvailable, isPromotionDisplay, isTransformableImageUrl, maxImageDimension, objectToQuery, parseOffSiteReferrer, problemDetailsSchema, promotionDisplays, resolveUtm, schemas, utmToObject };

package/dist/index.d.ts

@@ -26,12 +26,47 @@ interface IStore {
     set: <TItem>(key: string, item: TItem) => void;
     remove: (key: string) => void;
     listen: <TItem>(key: string, callback: (item: TItem | null) => void) => void;
+    /**
+     * True once any storage operation has failed and the store has fallen back to
+     * memory. Optional so custom stores don't have to implement it.
+     */
+    readonly isDegraded?: boolean;
 }
+/**
+ * Whether `localStorage` can be reached at all.
+ *
+ * Deliberately *not* a write probe. Writability is not the right question here,
+ * because `LocalStorageStore` degrades per operation when a write fails, so a
+ * storage that reads fine but is at quota is still worth using: it is holding the
+ * buyer's existing session, and refusing it would throw away a perfectly readable
+ * sign-in and send them back to the login form. The only thing that makes
+ * `localStorage` unusable is not being able to touch it, which is what Firefox
+ * does (`SecurityError` from the property getter) when the buyer has blocked
+ * cookies and site data. That is why even the truthiness check sits inside a
+ * `try`.
+ */
+declare function isLocalStorageAvailable(): boolean;
+/**
+ * `localStorage`-backed store that degrades to memory instead of throwing.
+ *
+ * Storage can start failing at any point in a session, not just at construction:
+ * the origin hits quota, an extension clears site data, the profile's storage
+ * file goes corrupt. Since this is where the auth tokens live, an unhandled
+ * throw here surfaces as a failed sign-in for a buyer whose credentials were
+ * accepted. So every operation falls back to an in-memory copy. The session
+ * keeps working; it just stops surviving a reload.
+ */
 declare class LocalStorageStore implements IStore {
+    private readonly onDegraded?;
+    private readonly fallback;
+    private degraded;
+    constructor(onDegraded?: ((err: unknown) => void) | undefined);
+    get isDegraded(): boolean;
     get<TItem>(key: string): TItem | null;
     set<TItem>(key: string, item: TItem): void;
     remove(key: string): void;
     listen<TItem>(key: string, callback: (item: TItem | null) => void): void;
+    private reportDegraded;
 }
 declare class InMemoryStore implements IStore {
     private readonly store;
@@ -47,6 +82,7 @@ type IdentityWithExpiry = Identity & {
 };
 interface ITokenStore {
     get user(): User | null;
+    get isPersistent(): boolean;
     getAccessToken: () => Promise<string | null>;
     setUser: (user: Identity | User) => User | null;
     clear: () => void;
@@ -57,15 +93,26 @@ declare class TokenStore implements ITokenStore {
     private refreshTimeoutId;
     private refreshPromise;
     private readonly store;
+    private readonly logger;
     static readonly storageKey = "moonbase_auth";
     constructor(configuration: MoonbaseConfiguration);
     get user(): User | null;
+    get isPersistent(): boolean;
     getAccessToken(): Promise<string | null>;
     setUser(user: Identity | User): IdentityWithExpiry | null;
     clear(): null;
     private get isExpired();
+    /**
+     * Start a refresh and hold it so concurrent callers join it rather than firing
+     * their own. The slot is cleared as soon as it settles: a retained promise
+     * would hand every later expiry the same stale access token, and a rejected one
+     * that stayed put would re-throw on every subsequent request (including the
+     * anonymous ones) for the rest of the session.
+     */
+    private startRefresh;
     private refreshTokens;
     private handleStorageUpdate;
+    private warnAboutStorage;
 }
 
 type HttpMethods = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
@@ -47032,4 +47079,4 @@ declare class MoonbaseClient {
     orders: OrderEndpoints;
 }
 
-export { type Activation, ActivationMethod, type ActivationRequest, ActivationRequestFulfillmentType, ActivationRequestStatus, ActivationStatus, type Address, Architecture, type BundleLineItem, type CartCatalog, type CartOrder, type CartTotal, type CartTotalCondition, CartUtils, type CommunicationPreferences, type CommunicationPreferencesInput, type CommunicationPreferencesView, type CompletedOrder, ConnectableAccountProvider, type ConnectedAccount, ConsoleLogger, CycleLength, type Discount, DiscountUtils, type Download, type DownloadManifest, type ILogger, type IRecurrence, type IStore, type ITokenStore, type Identity, type ImageFit, type ImageFormat, type ImageTransform, ImageUtils, InMemoryStore, type License, LicenseStatus, type LineItem, type LineItemTotal, LocalStorageStore, LogLevel, MarketingConsentType, type MilestoneProgress, type Money, type MoneyCollection, MoneyCollectionUtils, MoonbaseApi, MoonbaseClient, type MoonbaseConfiguration, MoonbaseError, NotAuthenticatedError, NotAuthorizedError, NotFoundError, type OfferCondition, type OfferConditionContext, type OfferProgress, type OfferScope, OfferUtils, type OpenOrder, type Order, OrderStatus, type OrderTotal, type OwnedProduct, type Page, Platform, type PricingTier, type PricingVariation, type ProblemDetails, type ProductLineItem, type PromotionDisplay, type Quantifiable, type RawPropertyArray, type RawPropertyObject, type RawPropertyValue, type SignUpResult, type SingleOrMultiple, type Storefront, type StorefrontBundle, type StorefrontOffer, type StorefrontOfferTarget, type StorefrontProduct, type StorefrontPromotion, type StorefrontPromotionCta, type StorefrontPromotionTarget, type SubscribeInput, type SubscribeResponse, type Subscription, SubscriptionStatus, type TaxEstimate, TokenStore, type UrchinTrackingModule, type User, type UserAccountConfirmed, type UserAccountConfirmedStatus, type Vendor, type Voucher, imageWidths, isPromotionDisplay, isTransformableImageUrl, maxImageDimension, objectToQuery, parseOffSiteReferrer, problemDetailsSchema, promotionDisplays, resolveUtm, schemas, utmToObject };
+export { type Activation, ActivationMethod, type ActivationRequest, ActivationRequestFulfillmentType, ActivationRequestStatus, ActivationStatus, type Address, Architecture, type BundleLineItem, type CartCatalog, type CartOrder, type CartTotal, type CartTotalCondition, CartUtils, type CommunicationPreferences, type CommunicationPreferencesInput, type CommunicationPreferencesView, type CompletedOrder, ConnectableAccountProvider, type ConnectedAccount, ConsoleLogger, CycleLength, type Discount, DiscountUtils, type Download, type DownloadManifest, type ILogger, type IRecurrence, type IStore, type ITokenStore, type Identity, type ImageFit, type ImageFormat, type ImageTransform, ImageUtils, InMemoryStore, type License, LicenseStatus, type LineItem, type LineItemTotal, LocalStorageStore, LogLevel, MarketingConsentType, type MilestoneProgress, type Money, type MoneyCollection, MoneyCollectionUtils, MoonbaseApi, MoonbaseClient, type MoonbaseConfiguration, MoonbaseError, NotAuthenticatedError, NotAuthorizedError, NotFoundError, type OfferCondition, type OfferConditionContext, type OfferProgress, type OfferScope, OfferUtils, type OpenOrder, type Order, OrderStatus, type OrderTotal, type OwnedProduct, type Page, Platform, type PricingTier, type PricingVariation, type ProblemDetails, type ProductLineItem, type PromotionDisplay, type Quantifiable, type RawPropertyArray, type RawPropertyObject, type RawPropertyValue, type SignUpResult, type SingleOrMultiple, type Storefront, type StorefrontBundle, type StorefrontOffer, type StorefrontOfferTarget, type StorefrontProduct, type StorefrontPromotion, type StorefrontPromotionCta, type StorefrontPromotionTarget, type SubscribeInput, type SubscribeResponse, type Subscription, SubscriptionStatus, type TaxEstimate, TokenStore, type UrchinTrackingModule, type User, type UserAccountConfirmed, type UserAccountConfirmedStatus, type Vendor, type Voucher, imageWidths, isLocalStorageAvailable, isPromotionDisplay, isTransformableImageUrl, maxImageDimension, objectToQuery, parseOffSiteReferrer, problemDetailsSchema, promotionDisplays, resolveUtm, schemas, utmToObject };

package/dist/index.js

@@ -699,15 +699,15 @@ var IdentityEndpoints = class {
       throw new NotFoundError("User not found");
     if (response.status >= 400)
       await handleResponseProblem(response, this.logger);
+    let identity;
     try {
-      const data = await response.json();
-      const user = identitySchema.parse(data);
-      this.tokenStore.setUser(user);
-      return userSchema.parse(user);
+      identity = identitySchema.parse(await response.json());
     } catch (err) {
       this.logger.warn("Could not sign in user", { email, response, err });
       throw new MoonbaseError("Bad response", "Could not sign in user", response.status);
     }
+    this.tokenStore.setUser(identity);
+    return userSchema.parse(identity);
   }
   async signUp(name, email, password, address, acceptedPrivacyPolicy, acceptedTermsAndConditions, communicationOptIn) {
     const path = `/api/customer/identity/sign-up?scheme=JWT&communicationOptIn=${communicationOptIn ? "true" : "false"}`;
@@ -734,14 +734,15 @@ var IdentityEndpoints = class {
       const parsed = pendingActivationSchema.parse(data);
       return { status: "activation-pending", email: parsed.email };
     }
+    let identity;
     try {
-      const identity = identitySchema.parse(data);
-      this.tokenStore.setUser(identity);
-      return { status: "signed-in", user: userSchema.parse(identity) };
+      identity = identitySchema.parse(data);
     } catch (err) {
       this.logger.warn("Could not sign up user", { email, response, err });
       throw new MoonbaseError("Bad response", "Could not sign up user", response.status);
     }
+    this.tokenStore.setUser(identity);
+    return { status: "signed-in", user: userSchema.parse(identity) };
   }
   async signOut() {
     this.tokenStore.clear();
@@ -1021,6 +1022,15 @@ var MoonbaseApi = class {
       status: response.status,
       duration: finishedAt.getTime() - startedAt.getTime()
     });
+    if (response.type === "opaqueredirect" || response.status === 0) {
+      const err = new MoonbaseError(
+        "Unexpected redirect",
+        `The Moonbase API redirected ${path}, which the SDK is not configured to follow`,
+        response.status
+      );
+      this.reportRequestProblem(path, request, response, err);
+      throw err;
+    }
     if (response.status >= 400) {
       try {
         await handleResponseProblem(response, this.logger);
@@ -1485,28 +1495,81 @@ var ConsoleLogger = class {
 };
 
 // src/utils/store.ts
+function isLocalStorageAvailable() {
+  try {
+    return typeof window !== "undefined" && !!window.localStorage;
+  } catch (e) {
+    return false;
+  }
+}
 var LocalStorageStore = class {
+  constructor(onDegraded) {
+    this.onDegraded = onDegraded;
+    // Values whose write to localStorage failed. Read back in preference to
+    // localStorage so the rest of the session sees what it just wrote.
+    this.fallback = /* @__PURE__ */ new Map();
+    this.degraded = false;
+  }
+  get isDegraded() {
+    return this.degraded;
+  }
   get(key) {
-    const item = localStorage.getItem(key);
-    if (item) {
-      return JSON.parse(item);
+    if (this.fallback.has(key))
+      return this.fallback.get(key);
+    try {
+      const item = localStorage.getItem(key);
+      if (item) {
+        return JSON.parse(item);
+      }
+      return null;
+    } catch (err) {
+      this.reportDegraded(err);
+      return null;
     }
-    return null;
   }
   set(key, item) {
-    localStorage.setItem(key, JSON.stringify(item));
+    try {
+      localStorage.setItem(key, JSON.stringify(item));
+      this.fallback.delete(key);
+    } catch (err) {
+      this.reportDegraded(err);
+      this.fallback.set(key, item);
+    }
   }
   remove(key) {
-    localStorage.removeItem(key);
+    try {
+      localStorage.removeItem(key);
+      this.fallback.delete(key);
+      return;
+    } catch (err) {
+      this.reportDegraded(err);
+    }
+    this.fallback.set(key, null);
+    try {
+      localStorage.setItem(key, "");
+    } catch (e) {
+    }
   }
   listen(key, callback) {
-    if (typeof window !== "undefined") {
-      window.addEventListener("storage", (event) => {
-        if (event.key === key) {
-          callback(event.newValue ? JSON.parse(event.newValue) : null);
-        }
-      });
-    }
+    if (typeof window === "undefined")
+      return;
+    window.addEventListener("storage", (event) => {
+      if (event.key !== key)
+        return;
+      this.fallback.delete(key);
+      try {
+        callback(event.newValue ? JSON.parse(event.newValue) : null);
+      } catch (err) {
+        console.warn(`Moonbase could not parse the stored value for ${key}`, err);
+      }
+    });
+  }
+  reportDegraded(err) {
+    var _a;
+    if (this.degraded)
+      return;
+    this.degraded = true;
+    (_a = this.onDegraded) == null ? void 0 : _a.call(this, err);
   }
 };
 var InMemoryStore = class {
@@ -1544,8 +1607,11 @@ var _TokenStore = class _TokenStore {
     this.tokens = null;
     this.refreshTimeoutId = null;
     this.refreshPromise = null;
-    var _a;
-    this.store = (_a = configuration.store) != null ? _a : typeof window !== "undefined" && localStorage ? new LocalStorageStore() : new InMemoryStore();
+    var _a, _b;
+    this.logger = (_a = configuration.logger) != null ? _a : new ConsoleLogger();
+    this.store = (_b = configuration.store) != null ? _b : isLocalStorageAvailable() ? new LocalStorageStore((err) => this.warnAboutStorage(err)) : new InMemoryStore();
+    if (typeof window !== "undefined" && !configuration.store && !(this.store instanceof LocalStorageStore))
+      this.warnAboutStorage();
     const storedToken = this.store.get(_TokenStore.storageKey);
     if (storedToken) {
       this.tokens = {
@@ -1560,18 +1626,17 @@ var _TokenStore = class _TokenStore {
       return this.tokens;
     return null;
   }
+  get isPersistent() {
+    return this.store instanceof LocalStorageStore && !this.store.isDegraded;
+  }
   async getAccessToken() {
     var _a, _b, _c;
-    if (this.isExpired) {
-      if (this.refreshPromise) {
-        const tokens2 = await this.refreshPromise;
-        return (_a = tokens2 == null ? void 0 : tokens2.accessToken) != null ? _a : null;
-      }
-      this.refreshPromise = this.refreshTokens();
-      const tokens = await this.refreshPromise;
-      return (_b = tokens == null ? void 0 : tokens.accessToken) != null ? _b : null;
+    if (!this.isExpired) {
+      return ((_a = this.tokens) == null ? void 0 : _a.accessToken) || null;
     }
-    return ((_c = this.tokens) == null ? void 0 : _c.accessToken) || null;
+    const pending = (_b = this.refreshPromise) != null ? _b : this.startRefresh();
+    const tokens = await pending;
+    return (_c = tokens == null ? void 0 : tokens.accessToken) != null ? _c : null;
   }
   setUser(user) {
     const identity = user;
@@ -1596,7 +1661,7 @@ var _TokenStore = class _TokenStore {
       if (this.refreshTimeoutId != null)
         window.clearTimeout(this.refreshTimeoutId);
       this.refreshTimeoutId = window.setTimeout(() => {
-        this.refreshPromise = this.refreshTokens();
+        this.startRefresh().catch((err) => this.logger.warn("Could not refresh access token", err));
       }, 10 * 60 * 1e3);
     }
     return this.tokens;
@@ -1611,10 +1676,25 @@ var _TokenStore = class _TokenStore {
   get isExpired() {
     return this.tokens != null && this.tokens.expiresAt < /* @__PURE__ */ new Date();
   }
+  /**
+   * Start a refresh and hold it so concurrent callers join it rather than firing
+   * their own. The slot is cleared as soon as it settles: a retained promise
+   * would hand every later expiry the same stale access token, and a rejected one
+   * that stayed put would re-throw on every subsequent request (including the
+   * anonymous ones) for the rest of the session.
+   */
+  startRefresh() {
+    const pending = this.refreshTokens().finally(() => {
+      if (this.refreshPromise === pending)
+        this.refreshPromise = null;
+    });
+    this.refreshPromise = pending;
+    return pending;
+  }
   async refreshTokens() {
     if (!this.tokens)
       throw new Error("No tokens found to refresh");
-    const response = await fetch(`${this.configuration.endpoint}/api/customer/identity/refresh?token=${this.tokens.refreshToken}`, {
+    const response = await fetch(`${this.configuration.endpoint}/api/customer/identity/refresh?token=${encodeURIComponent(this.tokens.refreshToken)}`, {
       method: "POST",
       headers: {
         "Accept": "application/json",
@@ -1636,12 +1716,18 @@ var _TokenStore = class _TokenStore {
   }
   handleStorageUpdate(updatedTokens) {
     this.tokens = updatedTokens;
-    if (this.refreshTimeoutId != null)
+    if (this.refreshTimeoutId != null && typeof window !== "undefined")
       window.clearTimeout(this.refreshTimeoutId);
     if (this.tokens) {
       this.tokens.expiresAt = new Date(this.tokens.expiresAt);
     }
   }
+  warnAboutStorage(err) {
+    this.logger.warn(
+      "Moonbase could not persist credentials to localStorage: this browser is blocking or has exhausted site storage. Sign-in will work for this page load but will not survive a reload.",
+      err
+    );
+  }
 };
 _TokenStore.storageKey = "moonbase_auth";
 var TokenStore = _TokenStore;
@@ -2373,6 +2459,7 @@ export {
   SubscriptionStatus,
   TokenStore,
   imageWidths,
+  isLocalStorageAvailable,
   isPromotionDisplay,
   isTransformableImageUrl,
   maxImageDimension,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@moonbase.sh/storefront-api",
   "type": "module",
-  "version": "3.1.0",
+  "version": "3.2.0",
   "description": "Package to let you build storefronts with Moonbase.sh as payment and delivery provider",
   "author": "Tobias Lønnerød Madsen <m@dsen.tv>",
   "license": "MIT",