@scayle/storefront-core 7.53.0 → 7.54.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @scayle/storefront-core
 
+## 7.54.0
+
+### Minor Changes
+
+- Add new function `purifySensitiveValue` to `sanitizationHelpers` to purify specific value.
+- Introduced a new parameter `showFirstAndLastChar` to both `purifySensitiveValue` and `purifySensitiveData`.
+
 ## 7.53.0
 
 ### Minor Changes

package/dist/helpers/sanitizationHelpers.cjs

@@ -3,19 +3,28 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.stripShopLocaleFromPath = exports.purifySensitiveData = exports.createAndPurifyHeaders = void 0;
+exports.stripShopLocaleFromPath = exports.purifySensitiveValue = exports.purifySensitiveData = exports.createAndPurifyHeaders = void 0;
 var _radash = require("radash");
 const SANITIZATION_MASK = "********";
+const regex = /(?<!^).(?!$)/g;
 const stripShopLocaleFromPath = (locale, path, splitter = "/") => path.split(splitter).filter(segment => segment.toLowerCase() !== locale.toLowerCase()).join("/");
 exports.stripShopLocaleFromPath = stripShopLocaleFromPath;
-const purifySensitiveData = (data = {}, blacklistedKeys = ["password"]) => {
+const purifySensitiveValue = (value, showFirstAndLastChar = false) => {
+  return showFirstAndLastChar && value.length > 2 ? value.replace(regex, "*") : SANITIZATION_MASK;
+};
+exports.purifySensitiveValue = purifySensitiveValue;
+const purifySensitiveData = (data = {}, blacklistedKeys = ["password"], showFirstAndLastChar = false) => {
   return Object.entries(data).reduce((purifiedPayload, [key, value]) => {
     if ((0, _radash.isObject)(value)) {
       purifiedPayload[key] = purifySensitiveData(value, blacklistedKeys);
       return purifiedPayload;
     }
     const isSensitiveData = blacklistedKeys.some(excludedKey => key.includes(excludedKey));
-    purifiedPayload[key] = isSensitiveData && value !== "" ? SANITIZATION_MASK : value;
+    if (isSensitiveData && value) {
+      purifiedPayload[key] = purifySensitiveValue(value, showFirstAndLastChar);
+    } else {
+      purifiedPayload[key] = value;
+    }
     return purifiedPayload;
   }, {});
 };

package/dist/helpers/sanitizationHelpers.d.ts

@@ -1,3 +1,4 @@
 export declare const stripShopLocaleFromPath: (locale: string, path: string, splitter?: string) => string;
-export declare const purifySensitiveData: (data?: Record<string, any>, blacklistedKeys?: string[]) => Record<string, any>;
+export declare const purifySensitiveValue: (value: string, showFirstAndLastChar?: boolean) => string;
+export declare const purifySensitiveData: (data?: Record<string, any>, blacklistedKeys?: string[], showFirstAndLastChar?: boolean) => Record<string, any>;
 export declare const createAndPurifyHeaders: (headers: Partial<Record<string, string | undefined>>) => Headers;

package/dist/helpers/sanitizationHelpers.mjs

@@ -1,7 +1,11 @@
 import { isObject, shake } from "radash";
 const SANITIZATION_MASK = "********";
+const regex = /(?<!^).(?!$)/g;
 export const stripShopLocaleFromPath = (locale, path, splitter = "/") => path.split(splitter).filter((segment) => segment.toLowerCase() !== locale.toLowerCase()).join("/");
-export const purifySensitiveData = (data = {}, blacklistedKeys = ["password"]) => {
+export const purifySensitiveValue = (value, showFirstAndLastChar = false) => {
+  return showFirstAndLastChar && value.length > 2 ? value.replace(regex, "*") : SANITIZATION_MASK;
+};
+export const purifySensitiveData = (data = {}, blacklistedKeys = ["password"], showFirstAndLastChar = false) => {
   return Object.entries(data).reduce(
     (purifiedPayload, [key, value]) => {
       if (isObject(value)) {
@@ -11,7 +15,11 @@ export const purifySensitiveData = (data = {}, blacklistedKeys = ["password"]) =
       const isSensitiveData = blacklistedKeys.some(
         (excludedKey) => key.includes(excludedKey)
       );
-      purifiedPayload[key] = isSensitiveData && value !== "" ? SANITIZATION_MASK : value;
+      if (isSensitiveData && value) {
+        purifiedPayload[key] = purifySensitiveValue(value, showFirstAndLastChar);
+      } else {
+        purifiedPayload[key] = value;
+      }
       return purifiedPayload;
     },
     {}

package/dist/rpc/methods/checkout/checkout.cjs

@@ -24,7 +24,7 @@ const getCheckoutToken = exports.getCheckoutToken = async function getCheckoutTo
     carrier,
     basketId: context.basketKey,
     campaignKey: context.campaignKey
-  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"7.52.1"}`).setProtectedHeader({
+  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"7.53.0"}`).setProtectedHeader({
     alg: "HS256",
     typ: "JWT"
   }).sign(secret);

package/dist/rpc/methods/checkout/checkout.mjs

@@ -13,7 +13,7 @@ export const getCheckoutToken = async function getCheckoutToken2(jwtPayload, con
     carrier,
     basketId: context.basketKey,
     campaignKey: context.campaignKey
-  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"7.52.1"}`).setProtectedHeader({ alg: "HS256", typ: "JWT" }).sign(secret);
+  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"7.53.0"}`).setProtectedHeader({ alg: "HS256", typ: "JWT" }).sign(secret);
   return {
     accessToken: context.accessToken,
     checkoutJwt

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scayle/storefront-core",
-  "version": "7.53.0",
+  "version": "7.54.0",
   "description": "Collection of essential utilities to work with the Storefront API",
   "author": "SCAYLE Commerce Engine",
   "license": "MIT",