@salesforce/commerce-sdk-react 5.6.0-nightly-20261109080318 → 6.0.0-preview.0

package/CHANGELOG.md

@@ -1,8 +1,8 @@
-## v5.6.0-nightly-20261109080318 (Nov 09, 2026)
-## v5.6.0-dev (Nov 09, 2026)
-## v3.22.0-nightly-20261109080318 (Nov 09, 2026)
-## v5.6.0-dev (Oct 09, 2026)
-- [Feature] When a SLAS private client secret is set directly via `clientSecret` (not PWA Kit private client mode), `loginRegisteredUserB2C` now sends the `x-slas-client-auth` header so the login works with SLAS strict client auth.
+## v6.0.0-preview.0 (Nov 09, 2026)
+- [Breaking] Upgrade to `commerce-sdk-isomorphic@5.8.0`. Require `login_id` and `channel_id` on `getPasswordLessAccessToken` / `LoginPasswordlessUser` and forward them to the helper as camelCase `loginId` / `channelId` (mapped to snake_case on the wire by isomorphic). Also remove the stale `@ts-ignore` on `resetPassword` `user_id` (present in SDK types since 5.2.0); `user_id` and `channel_id` continue to be sent on password reset. To migrate, pass the shopper's `login_id` (the same value sent to `authorizePasswordless`) and the site `channel_id` to every `getPasswordLessAccessToken` / `useAuthHelper(AuthHelpers.LoginPasswordlessUser)` call. [#4075](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/4075)
+- [Breaking] `resetPassword` / `ResetPassword` now requires `user_id` and throws before calling SLAS when it is missing. SLAS checks it against the user the reset token was issued for. To migrate, pass the email the reset was requested for as `user_id` when calling `resetPassword`. [#4092](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/4092)
+- [Feature] When a SLAS private client secret is set directly via `clientSecret` (not PWA Kit private client mode), `loginRegisteredUserB2C` now sends the `x-slas-client-auth` header so the login works with SLAS strict client auth. `authorizeIDP` does not send the header, because it navigates the browser to SLAS and a navigation cannot carry custom headers; strict client auth for IDP login requires the PWA Kit proxy. [#4074](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/4074)
+
 ## v5.5.0 (Oct 08, 2026)
 - [Feature] Add a `useDeliveryEstimates` query hook and `ShopperDeliveryEstimates` client registration for the Shopper Delivery Estimates API. This requires `commerce-sdk-isomorphic` `5.7.0`, which includes the generated client. The TypeDoc entry is grouped with the Shopper Delivery Estimates API and links to the endpoint, SDK, and TanStack Query references. [#4013](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/4013)
 - [Feature] Add Shopper Experience `useComponent` query hook for fetching a single Page Designer component by component ID, with Page Designer edit/preview mode support (raw response preserved when a `mode` or `pdToken` is present). Page Designer mode uses `rawResponse`, which bypasses the SDK's `throwOnBadResponse` check, so `usePage`, `usePages`, and `useComponent` now explicitly throw a `ResponseError` on a non-ok response in that mode instead of parsing the error body as successful data.

package/auth/index.d.ts

@@ -59,6 +59,13 @@ type AuthorizePasswordlessParams = {
 };
 type GetPasswordLessAccessTokenParams = {
     pwdlessLoginToken: string;
+    /**
+     * Shopper login ID (typically email) used when the passwordless token was requested.
+     * Must exactly match the ID used during passwordless login.
+     */
+    login_id: string;
+    /** Channel / site ID for the passwordless token exchange. */
+    channel_id: string;
     /** When true, SLAS will register the customer if not already registered */
     register_customer?: boolean | string;
 };
@@ -501,6 +508,8 @@ declare class Auth {
     authorizePasswordless(parameters: AuthorizePasswordlessParams): Promise<Response>;
     /**
      * A wrapper method for commerce-sdk-isomorphic helper: getPasswordLessAccessToken.
+     * Requires `login_id` and `channel_id`; forwards them to the helper as camelCase
+     * `loginId` / `channelId` (commerce-sdk-isomorphic@5.8.0 maps these to the wire body).
      */
     getPasswordLessAccessToken(parameters: GetPasswordLessAccessTokenParams): Promise<helpers.TokenResponse>;
     /**
@@ -510,7 +519,7 @@ declare class Auth {
     getPasswordResetToken(parameters: ShopperLoginTypes.getPasswordResetTokenBodyType): Promise<Response>;
     /**
      * A wrapper method for the SLAS endpoint: resetPassword.
-     *
+     * Requires `user_id`: SLAS checks it against the user the reset token was issued for.
      */
     resetPassword(parameters: ShopperLoginTypes.resetPasswordBodyType): Promise<void>;
     /**

package/auth/index.js

@@ -1501,6 +1501,8 @@ class Auth {
 
   /**
    * A wrapper method for commerce-sdk-isomorphic helper: getPasswordLessAccessToken.
+   * Requires `login_id` and `channel_id`; forwards them to the helper as camelCase
+   * `loginId` / `channelId` (commerce-sdk-isomorphic@5.8.0 maps these to the wire body).
    */
   getPasswordLessAccessToken(parameters) {
     var _this15 = this;
@@ -1517,11 +1519,13 @@ class Auth {
         },
         parameters: _objectSpread(_objectSpread({
           pwdlessLoginToken,
+          loginId: parameters.login_id,
+          channelId: parameters.channel_id,
           dnt: dntPref !== undefined ? String(dntPref) : undefined
         }, usid && {
           usid
         }), parameters.register_customer !== undefined && {
-          register_customer: typeof parameters.register_customer === 'boolean' ? String(parameters.register_customer) : parameters.register_customer
+          registerCustomer: typeof parameters.register_customer === 'boolean' ? String(parameters.register_customer) : parameters.register_customer
         }),
         enableHttpOnlySessionCookies: _this15.enableHttpOnlySessionCookies
       });
@@ -1581,19 +1585,21 @@ class Auth {
 
   /**
    * A wrapper method for the SLAS endpoint: resetPassword.
-   *
+   * Requires `user_id`: SLAS checks it against the user the reset token was issued for.
    */
   resetPassword(parameters) {
     var _this17 = this;
     return _asyncToGenerator(function* () {
+      if (!parameters.user_id) {
+        throw new Error('Required argument user_id is not provided');
+      }
       const slasClient = _this17.client;
       const options = {
         headers: {
           Authorization: ''
         },
-        body: _objectSpread(_objectSpread({}, parameters.user_id && {
-          user_id: parameters.user_id
-        }), {}, {
+        body: _objectSpread({
+          user_id: parameters.user_id,
           pwd_action_token: parameters.pwd_action_token,
           channel_id: parameters.channel_id || slasClient.clientConfig.parameters.siteId,
           client_id: parameters.client_id || slasClient.clientConfig.parameters.clientId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/commerce-sdk-react",
-  "version": "5.6.0-nightly-20261109080318",
+  "version": "6.0.0-preview.0",
   "description": "A library that provides react hooks for fetching data from Commerce Cloud",
   "homepage": "https://github.com/SalesforceCommerceCloud/pwa-kit/tree/develop/packages/ecom-react-hooks#readme",
   "bugs": {
@@ -41,12 +41,12 @@
   },
   "dependencies": {
     "@salesforce/storefront-next-runtime": "1.3.1",
-    "commerce-sdk-isomorphic": "5.7.0",
+    "commerce-sdk-isomorphic": "5.8.0",
     "js-cookie": "^3.0.1",
     "jwt-decode": "^4.0.0"
   },
   "devDependencies": {
-    "@salesforce/pwa-kit-dev": "3.22.0-nightly-20261109080318",
+    "@salesforce/pwa-kit-dev": "3.22.0-preview.0",
     "@tanstack/react-query": "^4.28.0",
     "@testing-library/jest-dom": "^5.16.5",
     "@testing-library/react": "^14.0.0",
@@ -61,7 +61,7 @@
     "@types/react-helmet": "~6.1.6",
     "@types/react-router-dom": "~5.3.3",
     "cross-env": "^5.2.1",
-    "internal-lib-build": "3.22.0-nightly-20261109080318",
+    "internal-lib-build": "3.22.0-preview.0",
     "jsonwebtoken": "^9.0.0",
     "nock": "^13.3.0",
     "nodemon": "^2.0.22",
@@ -98,5 +98,5 @@
   "publishConfig": {
     "directory": "dist"
   },
-  "gitHead": "f3780ac1cdb05cff1d6b09e9c5c386a2b1b1dde5"
+  "gitHead": "48bba63cf8923a3cebce31ffa0d81dba52673ce2"
 }