@reblu/site-blocks 0.12.0 → 0.12.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +9 -0
- package/README.md +11 -0
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +21 -7
- package/dist/index.d.ts +21 -7
- package/dist/index.js.map +1 -1
- package/package.json +4 -4
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,14 @@
|
|
|
1
1
|
# @reblu/site-blocks
|
|
2
2
|
|
|
3
|
+
## 0.12.1
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- b75f066: Docs (REB-834): `CheckoutLoginPrompt` and `CheckoutForm` must never branch on whether an email has an account. Wire `onSubmitEmail` to carry the typed email into the checkout and keep the «Iniciar sesión o continuar como invitado» offer identical for every email; the deprecated `client.shop.checkEmail` always answers `{ exists: false }`.
|
|
8
|
+
- Updated dependencies [92e0f6f]
|
|
9
|
+
- Updated dependencies [b75f066]
|
|
10
|
+
- @reblu/site-contracts@1.14.0
|
|
11
|
+
|
|
3
12
|
## 0.12.0
|
|
4
13
|
|
|
5
14
|
### Minor Changes
|
package/README.md
CHANGED
|
@@ -313,6 +313,17 @@ const { status } = useCheckoutReturn()
|
|
|
313
313
|
<CartSummary {...summaryProps} notice={status === 'cancelled'} />
|
|
314
314
|
```
|
|
315
315
|
|
|
316
|
+
**Never reveal whether an account exists (REB-834).** `CheckoutLoginPrompt`
|
|
317
|
+
and `CheckoutForm`'s `loginPrompt` slot are a static «Iniciar sesión o
|
|
318
|
+
continuar como invitado» offer, identical for every email. Do not call
|
|
319
|
+
`client.shop.checkEmail` / mount `createShopCheckEmailRoute` (both deprecated:
|
|
320
|
+
the endpoint always answers `{ exists: false }`) and never build UI on an
|
|
321
|
+
`exists` answer — it was an account-enumeration oracle on the tenant's customer
|
|
322
|
+
list. Wire `onSubmitEmail` to carry the typed email into the checkout (or to
|
|
323
|
+
your login page) and `onContinueAsGuest` to proceed without it. When a guest's
|
|
324
|
+
email belongs to an account, the server links the order to that account after
|
|
325
|
+
payment; the browser is never told before.
|
|
326
|
+
|
|
316
327
|
`CheckoutForm` intentionally does NOT collect shipping/billing addresses —
|
|
317
328
|
those field sets vary by tenant shop config far more than the guest-email +
|
|
318
329
|
discount-code flow. Render them via `CheckoutForm`'s `children` slot
|