@propeller-commerce/propeller-v2-react-ui 0.9.0 → 0.10.1

package/CHANGELOG.md

@@ -8,6 +8,30 @@ once it reaches 1.0. Until then (the `0.x` line) the public API may change
 between minor versions; breaking changes are called out below and in
 [MIGRATION.md](./MIGRATION.md).
 
+## [0.10.1] - 2026-07-30
+
+### Fixed
+
+- **`<SearchBar>` autosuggest ignored orderlist scoping.** The component
+  resolves `user` like every other infra prop but never passed it to
+  `useProductSearch`, and the backend drives orderlist scoping off the user id —
+  so `orderlistIds` alone had no effect on the autosuggest query. The dropdown
+  returned the whole catalogue while the grid below it, which does pass `user`,
+  showed only the contract's products. Forwarding `user` makes the two agree.
+
+## [0.10.0] - 2026-07-29
+
+### Added
+
+- **Magic-token authentication in `useAuth`.** `magicLogin(token)` exchanges a
+  backend-issued magic token for a session (via
+  `MagicTokenService.magicTokenLogin`), sets the in-memory Bearer header — never
+  `setAccessToken` — and loads the viewer, mirroring `login()`. This is the
+  passwordless / punchout deep-link handoff. `createMagicToken(input)` issues a
+  magic token for a contact/customer (`MagicTokenCreateInput`, authenticated).
+  Both return the standard `Result` and are exposed on `UseAuthReturn`. No new
+  runtime dependency — the SDK's `MagicTokenService` ships in 0.14.0.
+
 ## [0.9.0] - 2026-07-29
 
 ### Changed

package/dist/index.cjs

@@ -307,6 +307,66 @@ function useAuth(options) {
       setLoading(false);
     }
   }, [graphqlClient, language, onAuthHeaderUpdate, configuration]);
+  const magicLogin = React6.useCallback(async (token) => {
+    setLoading(true);
+    setError(null);
+    try {
+      const loginResult = await new propellerSdkV2.MagicTokenService(graphqlClient).magicTokenLogin(token);
+      const session = loginResult?.session;
+      const accessToken = session?.accessToken;
+      const refreshToken = session?.refreshToken;
+      const expiresAt = session?.expirationTime;
+      if (accessToken) {
+        const cfg = graphqlClient.getConfig();
+        graphqlClient.updateConfig({
+          headers: { ...cfg.headers, Authorization: `Bearer ${accessToken}` }
+        });
+        onAuthHeaderUpdate?.(accessToken);
+      }
+      const userService = propellerV2CoreUi.createServices(graphqlClient).user;
+      const viewerInput = {
+        ...configuration?.contactTrackAttributes?.length && {
+          contactAttributesInput: { attributeDescription: { names: configuration.contactTrackAttributes } }
+        },
+        ...configuration?.customerTrackAttributes?.length && {
+          customerAttributesInput: { attributeDescription: { names: configuration.customerTrackAttributes } }
+        },
+        ...configuration?.companyTrackAttributes?.length && {
+          companyAttributesInput: { attributeDescription: { names: configuration.companyTrackAttributes } }
+        },
+        // See isViewerSearchInput — an empty array `[]` is truthy but 400s the viewer.
+        ...isViewerSearchInput(configuration?.contactPAConfigInput) && {
+          contactPAConfigInput: configuration.contactPAConfigInput
+        },
+        ...isViewerSearchInput(configuration?.contactCompaniesSearchInput) && {
+          contactCompaniesSearchInput: configuration.contactCompaniesSearchInput
+        }
+      };
+      const viewer = await userService.getViewer(viewerInput);
+      const user = viewer;
+      return propellerV2CoreUi.ok({ user, accessToken, refreshToken, expiresAt });
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : "Magic-token login failed";
+      setError(msg);
+      return propellerV2CoreUi.err(msg);
+    } finally {
+      setLoading(false);
+    }
+  }, [graphqlClient, onAuthHeaderUpdate, configuration]);
+  const createMagicToken = React6.useCallback(async (input) => {
+    setLoading(true);
+    setError(null);
+    try {
+      const token = await new propellerSdkV2.MagicTokenService(graphqlClient).createMagicToken(input);
+      return propellerV2CoreUi.ok(token);
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : "Failed to create magic token";
+      setError(msg);
+      return propellerV2CoreUi.err(msg);
+    } finally {
+      setLoading(false);
+    }
+  }, [graphqlClient]);
   const registerContact = React6.useCallback(async (input, preferredLanguage = language, autoLogin = true) => {
     setLoading(true);
     setError(null);
@@ -553,7 +613,7 @@ function useAuth(options) {
       setLoading(false);
     }
   }, [graphqlClient]);
-  return { loading, error, login, registerContact, registerCustomer, forgotPassword };
+  return { loading, error, login, magicLogin, createMagicToken, registerContact, registerCustomer, forgotPassword };
 }
 async function initCart(config) {
   const {
@@ -18400,6 +18460,12 @@ function SearchBar(rawProps) {
     graphqlClient: props.graphqlClient,
     language: props.language,
     configuration: props.configuration || {},
+    // `user` supplies userId/contactId/customerId to the autosuggest query.
+    // Without it the dropdown's results diverge from the grid's: orderlist
+    // scoping is driven by userId, so `orderlistIds` alone is ignored by the
+    // backend and the dropdown shows the whole catalogue while the grid below
+    // shows only the contract's products.
+    user: props.user,
     companyId: props.companyId,
     orderlistIds: props.orderlistIds,
     applyOrderlists: props.applyOrderlists