@putiikkipalvelu/storefront-sdk 0.2.0 → 0.2.2

package/dist/index.js

@@ -36,6 +36,14 @@ var ValidationError = class extends StorefrontError {
     this.name = "ValidationError";
   }
 };
+var VerificationRequiredError = class extends StorefrontError {
+  constructor(message, customerId) {
+    super(message, 403, "VERIFICATION_REQUIRED");
+    this.requiresVerification = true;
+    this.name = "VerificationRequiredError";
+    this.customerId = customerId;
+  }
+};
 
 // src/utils/fetch.ts
 var SDK_VERSION = "0.1.0";
@@ -96,15 +104,18 @@ function createFetcher(config) {
   return { request };
 }
 async function handleErrorResponse(response) {
-  let errorMessage = null;
+  let errorData = {};
   try {
     const json = await response.json();
-    if (json && typeof json === "object" && "error" in json) {
-      errorMessage = json.error;
+    if (json && typeof json === "object") {
+      errorData = json;
     }
   } catch {
   }
-  const message = errorMessage || response.statusText || "Request failed";
+  const message = errorData.error || response.statusText || "Request failed";
+  if (errorData.requiresVerification && errorData.customerId) {
+    throw new VerificationRequiredError(message, errorData.customerId);
+  }
   switch (response.status) {
     case 401:
       throw new AuthError(message);
@@ -677,11 +688,12 @@ function createCustomerResource(fetcher) {
   return {
     /**
      * Register a new customer account.
-     * After registration, the customer must verify their email before logging in.
+     * A verification email is sent automatically by the server.
+     * The customer must verify their email before logging in.
      *
      * @param data - Registration data (firstName, lastName, email, password)
      * @param fetchOptions - Fetch options
-     * @returns Created customer with verification token
+     * @returns Created customer data and success message
      *
      * @example
      * ```typescript
@@ -692,7 +704,7 @@ function createCustomerResource(fetcher) {
      *   password: 'securePassword123'
      * });
      *
-     * // Send verification email using customer.emailVerificationToken
+     * // Verification email is sent automatically by the server
      * console.log('Account created:', message);
      * ```
      */
@@ -840,21 +852,21 @@ function createCustomerResource(fetcher) {
       );
     },
     /**
-     * Resend the email verification token for an unverified customer.
-     * Generates a new token valid for 24 hours.
+     * Resend the verification email for an unverified customer.
+     * A new verification email is sent automatically by the server.
      *
      * @param customerId - The customer's ID (from failed login response)
      * @param fetchOptions - Fetch options
-     * @returns Updated customer with new verification token
+     * @returns Success message
      * @throws ValidationError if customer is already verified or not found
      *
      * @example
      * ```typescript
      * // After login fails with requiresVerification
-     * const { customer } = await client.customer.resendVerification(customerId);
+     * const { message } = await client.customer.resendVerification(customerId);
      *
-     * // Send new verification email using customer.emailVerificationToken
-     * await sendVerificationEmail(customer.email, customer.emailVerificationToken);
+     * // Verification email is sent automatically by the server
+     * console.log(message); // "Verification email sent."
      * ```
      */
     async resendVerification(customerId, fetchOptions) {
@@ -867,6 +879,77 @@ function createCustomerResource(fetcher) {
         }
       );
     },
+    /**
+     * Request a password reset for a customer account.
+     * The server sends a password reset email directly to the customer.
+     * Returns success even if email doesn't exist (to prevent email enumeration).
+     *
+     * Note: The reset token is never exposed to the client for security.
+     * The email is sent server-side with the reset link.
+     *
+     * @param email - Customer's email address
+     * @param fetchOptions - Fetch options
+     * @returns Generic success message (same whether email exists or not)
+     *
+     * @example
+     * ```typescript
+     * const response = await client.customer.forgotPassword('john@example.com');
+     *
+     * // Always show same message to user (email sent server-side)
+     * console.log(response.message);
+     * // "If an account exists with that email, password reset instructions have been sent."
+     * ```
+     */
+    async forgotPassword(email, fetchOptions) {
+      return fetcher.request(
+        "/api/storefront/v1/customer/(auth)/forgot-password",
+        {
+          method: "POST",
+          body: { email },
+          ...fetchOptions
+        }
+      );
+    },
+    /**
+     * Reset a customer's password using a valid reset token.
+     * The token is sent via email by the forgotPassword endpoint.
+     * After successful reset, all existing sessions are invalidated.
+     *
+     * @param token - Password reset token (from email link)
+     * @param password - New password (minimum 8 characters)
+     * @param fetchOptions - Fetch options
+     * @returns Success confirmation
+     * @throws ValidationError if token is invalid or expired
+     *
+     * @example
+     * ```typescript
+     * // Token comes from the reset email link
+     * const token = searchParams.get('token');
+     *
+     * try {
+     *   const { message } = await client.customer.resetPassword(token, newPassword);
+     *   console.log(message); // "Password reset successful..."
+     *
+     *   // Redirect to login page
+     *   redirect('/login?reset=success');
+     * } catch (error) {
+     *   if (error instanceof ValidationError) {
+     *     // Token invalid or expired
+     *     console.error('Please request a new password reset');
+     *   }
+     * }
+     * ```
+     */
+    async resetPassword(token, password, fetchOptions) {
+      return fetcher.request(
+        "/api/storefront/v1/customer/(auth)/reset-password",
+        {
+          method: "POST",
+          body: { token, password },
+          ...fetchOptions
+        }
+      );
+    },
     // =========================================================================
     // Profile Management Methods
     // =========================================================================
@@ -1303,14 +1386,12 @@ function createStorefrontClient(config) {
     throw new Error("baseUrl is required");
   }
   const baseUrl = config.baseUrl.replace(/\/$/, "");
-  const maskedApiKey = config.apiKey.length > 8 ? `${config.apiKey.slice(0, 8)}...` : config.apiKey;
   const fetcher = createFetcher({
     apiKey: config.apiKey,
     baseUrl,
     timeout: config.timeout
   });
   return {
-    apiKey: maskedApiKey,
     baseUrl,
     store: createStoreResource(fetcher),
     products: createProductsResource(fetcher),
@@ -1497,6 +1578,7 @@ export {
   RateLimitError,
   StorefrontError,
   ValidationError,
+  VerificationRequiredError,
   calculateCartWithCampaigns,
   createStorefrontClient,
   getPriceInfo,