@redacto.io/consent-sdk-react 9.4.0 → 10.0.0-beta.0

package/src/RedactoPrivacyCenter/lib/constants.ts

@@ -196,6 +196,15 @@ export const MAX_REFRESH_BACKOFF_MS = 300_000; // 5m
 export const REFRESH_TOKEN_STORAGE_KEY = 'redacto_pc_refresh_token';
 export const LEGACY_REFRESH_TOKEN_COOKIE = 'refresh_token';
 
+// ─── DSAR request form ─────────────────────────────────────────────────────
+
+// Max product groups requested from the Go ledger's user-consents when
+// sourcing the DSAR request-form product picker (Approach A). The ledger caps
+// user-consents page size at 100; the picker needs all of a principal's
+// groups, so we request the max. A principal with >100 product groups would
+// need group-level pagination (follow-up).
+export const FORM_PICKER_GROUP_LIMIT = 100;
+
 // ─── Notification Hub ──────────────────────────────────────────────────────
 
 export const POLL_INTERVAL = 30_000;

package/src/RedactoPrivacyCenter/lib/types.ts

@@ -256,6 +256,10 @@ export type PurposeItem = {
   method: string;
   data_elements: ConsentDataElement[];
   link_reason: string | null;
+  // UUID of the notice version this purpose was consented under. Served by the
+  // Go ledger's user-consents response; required to revoke/regrant via the
+  // ledger's submit-consent endpoint (which has no manage-consent route).
+  notice_uuid: string | null;
 };
 
 export type ConsentGroup = {
@@ -405,9 +409,15 @@ export type Receipt = {
   created_at: string;
 };
 
+// Mirrors the Go ledger's `ConsentReceiptListResponse` (offset-paginated page
+// of the principal's receipts): flat `total`/`skip`/`limit`, not a nested
+// `pagination` object. `normalizeReceipts` in ReceiptsList tolerates either
+// envelope, but this type documents the ledger contract the SDK now calls.
 export type ReceiptListResponse = {
   data: Receipt[];
-  pagination: Pagination;
+  total: number;
+  skip: number;
+  limit: number;
 };
 
 export type ActivityResponse = {

package/src/RedactoPrivacyCenter/lib/utils.ts

@@ -244,6 +244,34 @@ export const decodeJwtToken = (token: string): { organisation_uuid?: string; org
   }
 };
 
+/**
+ * Resolve the user's contact identifier from a decoded JWT.
+ *
+ * Identifiers live under `user_data` (primary_email / primary_mobile /
+ * org_user_id); some token shapes also expose `contact`/`primary_email` at the
+ * top level. Email is preferred, but a mobile-only login must still resolve to
+ * the phone (or org_user_id) so case/grievance and consent-management actions —
+ * which key off this contact — work without an email. The backend matches
+ * identifiers type-aware (phone-to-phone), so storing the mobile here is safe.
+ */
+export const resolveContactFromJwt = (
+  decoded: { [key: string]: any } | null,
+): string | null => {
+  if (!decoded) {
+    return null;
+  }
+  const userData = (decoded.user_data as Record<string, unknown>) || {};
+  const candidate =
+    decoded.contact ||
+    decoded.primary_email ||
+    userData.primary_email ||
+    userData.primary_mobile ||
+    userData.org_user_id;
+  return typeof candidate === 'string' && candidate.trim() !== ''
+    ? candidate
+    : null;
+};
+
 /**
  * Decode JWT payload and check if token is expired or will expire soon
  * @param token - JWT token string

package/tests/Form.test.tsx

@@ -98,9 +98,14 @@ vi.mock('../src/RedactoPrivacyCenter/lib/i18n', () => ({
 // 1-form -> 1-case: only `createCaseRequest` is consumed by Form.tsx now.
 const createCaseRequest = vi.fn();
 const getFormData = vi.fn();
+const fetchUserConsents = vi.fn();
 vi.mock('../src/RedactoPrivacyCenter/lib/api', () => ({
   createCaseRequest: (...args: unknown[]) => createCaseRequest(...args),
   getFormData: (...args: unknown[]) => getFormData(...args),
+  // Approach A sources the product picker from the ledger's user-consents.
+  // Default to no ledger result so the form falls back to the getFormData
+  // product groups these tests set up.
+  fetchUserConsents: (...args: unknown[]) => fetchUserConsents(...args),
 }));
 
 // ─── upload stub ─────────────────────────────────────────────────────────────

package/tests/mocks.ts

@@ -235,6 +235,7 @@ export const defaultProps = {
   org_uuid: "org-123",
   workspace_uuid: "workspace-123",
   notice_uuid: "notice-123",
+  ledgerBaseUrl: "https://ledger.test/consent-ledger",
   accessToken: "mock-token",
   refreshToken: "mock-refresh-token",
   language: "en",

package/tests/resolveContactFromJwt.test.ts

@@ -0,0 +1,44 @@
+import { describe, expect, it } from 'vitest';
+
+import { resolveContactFromJwt } from '../src/RedactoPrivacyCenter/lib/utils';
+
+describe('resolveContactFromJwt', () => {
+  it('prefers the email when present in user_data', () => {
+    const decoded = {
+      user_data: {
+        primary_email: 'user@example.com',
+        primary_mobile: '+918955610253',
+        org_user_id: '+918955610253',
+      },
+    };
+    expect(resolveContactFromJwt(decoded)).toBe('user@example.com');
+  });
+
+  it('falls back to the mobile for a mobile-only login (no email)', () => {
+    const decoded = {
+      user_data: {
+        primary_email: null,
+        primary_mobile: '+918955610253',
+        org_user_id: '+918955610253',
+      },
+    };
+    expect(resolveContactFromJwt(decoded)).toBe('+918955610253');
+  });
+
+  it('falls back to org_user_id when neither email nor mobile is present', () => {
+    const decoded = { user_data: { org_user_id: 'ucid-123' } };
+    expect(resolveContactFromJwt(decoded)).toBe('ucid-123');
+  });
+
+  it('reads top-level contact / primary_email when not nested', () => {
+    expect(resolveContactFromJwt({ contact: 'a@b.com' })).toBe('a@b.com');
+    expect(resolveContactFromJwt({ primary_email: 'c@d.com' })).toBe('c@d.com');
+  });
+
+  it('returns null for missing, empty, or whitespace identifiers', () => {
+    expect(resolveContactFromJwt(null)).toBeNull();
+    expect(resolveContactFromJwt({})).toBeNull();
+    expect(resolveContactFromJwt({ user_data: {} })).toBeNull();
+    expect(resolveContactFromJwt({ user_data: { primary_mobile: '   ' } })).toBeNull();
+  });
+});