@scayle/storefront-core 7.65.7 → 7.65.8

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @scayle/storefront-core
 
+## 7.65.8
+
+### Patch Changes
+
+- Fixed an issue with handling the deprecated MD5 hash support, e.g. used for generating a user-specific basket hash, resulting in a potential application crash
+
 ## 7.65.7
 
 ### Patch Changes
@@ -349,8 +355,8 @@
 
   ```ts
   const { data: externalIDPRedirects } = await useIDP({
-    queryParams: { redirectTo: "/account" },
-  });
+    queryParams: { redirectTo: '/account' },
+  })
   ```
 
   Please note that `code` and `state` are not supported as these are used by the SCAYLE Authentication API.
@@ -967,7 +973,7 @@
 
   ```js
   env: {
-    SFC_OMIT_MD5: true;
+    SFC_OMIT_MD5: true
   }
   ```
 
@@ -975,7 +981,7 @@
 
   ```js
   env: {
-    SFC_OMIT_MD5: process.env.SFC_OMIT_MD5;
+    SFC_OMIT_MD5: process.env.SFC_OMIT_MD5
   }
   ```
 
@@ -1013,7 +1019,7 @@
 
   ```js
   env: {
-    SFC_OMIT_MD5: true;
+    SFC_OMIT_MD5: true
   }
   ```
 
@@ -1021,7 +1027,7 @@
 
   ```js
   env: {
-    SFC_OMIT_MD5: process.env.SFC_OMIT_MD5;
+    SFC_OMIT_MD5: process.env.SFC_OMIT_MD5
   }
   ```
 

package/dist/rpc/methods/checkout/checkout.cjs

@@ -37,7 +37,7 @@ const getCheckoutToken = exports.getCheckoutToken = async function getCheckoutTo
     carrier,
     basketId: context.basketKey,
     campaignKey: context.campaignKey
-  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"7.65.7"}`).setProtectedHeader({
+  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"7.65.8"}`).setProtectedHeader({
     alg: "HS256",
     typ: "JWT"
   }).sign(secret);

package/dist/rpc/methods/checkout/checkout.mjs

@@ -35,7 +35,7 @@ export const getCheckoutToken = async function getCheckoutToken2(jwtPayload = {}
     carrier,
     basketId: context.basketKey,
     campaignKey: context.campaignKey
-  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"7.65.7"}`).setProtectedHeader({ alg: "HS256", typ: "JWT" }).sign(secret);
+  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"7.65.8"}`).setProtectedHeader({ alg: "HS256", typ: "JWT" }).sign(secret);
   return {
     accessToken: refreshedAccessToken,
     checkoutJwt

package/dist/utils/hash.cjs

@@ -5,12 +5,15 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.verifyOrderSuccessToken = exports.sha256 = exports.md5 = exports.hmac = exports.encodeBase64 = exports.decodeBase64 = exports.buildSignature = exports.buildHashPayload = void 0;
 var _uncrypto = require("uncrypto");
+function stringToBoolean(value, defaultValue = false) {
+  return value ? value.toLowerCase() === "true" : defaultValue;
+}
 const md5 = async value => {
-  if (!process.env.SFC_OMIT_MD5) {
-    const md5EncryptImport = await Promise.resolve().then(() => require("crypto-js/md5"));
-    const hexImport = await Promise.resolve().then(() => require("crypto-js/enc-hex"));
-    const md5Encrypt = md5EncryptImport.default && typeof md5EncryptImport.default === "function" ? md5EncryptImport.default : md5EncryptImport;
-    const hex = hexImport.default && typeof hexImport.default === "function" ? hexImport.default : hexImport;
+  if (!stringToBoolean(process.env.SFC_OMIT_MD5)) {
+    const md5EncryptImport = await Promise.resolve().then(() => require("crypto-js/md5.js"));
+    const hexImport = await Promise.resolve().then(() => require("crypto-js/enc-hex.js"));
+    const md5Encrypt = md5EncryptImport.default && (typeof md5EncryptImport.default === "function" || typeof md5EncryptImport.default === "object") ? md5EncryptImport.default : md5EncryptImport;
+    const hex = hexImport.default && (typeof hexImport.default === "function" || typeof hexImport.default === "object") ? hexImport.default : hexImport;
     return hex.stringify(md5Encrypt(value));
   } else {
     throw Error("SFC was built without support for MD5");

package/dist/utils/hash.mjs

@@ -1,10 +1,13 @@
 import { subtle } from "uncrypto";
+function stringToBoolean(value, defaultValue = false) {
+  return value ? value.toLowerCase() === "true" : defaultValue;
+}
 export const md5 = async (value) => {
-  if (!process.env.SFC_OMIT_MD5) {
-    const md5EncryptImport = await import("crypto-js/md5");
-    const hexImport = await import("crypto-js/enc-hex");
-    const md5Encrypt = md5EncryptImport.default && typeof md5EncryptImport.default === "function" ? md5EncryptImport.default : md5EncryptImport;
-    const hex = hexImport.default && typeof hexImport.default === "function" ? hexImport.default : hexImport;
+  if (!stringToBoolean(process.env.SFC_OMIT_MD5)) {
+    const md5EncryptImport = await import("crypto-js/md5.js");
+    const hexImport = await import("crypto-js/enc-hex.js");
+    const md5Encrypt = md5EncryptImport.default && (typeof md5EncryptImport.default === "function" || typeof md5EncryptImport.default === "object") ? md5EncryptImport.default : md5EncryptImport;
+    const hex = hexImport.default && (typeof hexImport.default === "function" || typeof hexImport.default === "object") ? hexImport.default : hexImport;
     return hex.stringify(md5Encrypt(value));
   } else {
     throw Error("SFC was built without support for MD5");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scayle/storefront-core",
-  "version": "7.65.7",
+  "version": "7.65.8",
   "description": "Collection of essential utilities to work with the Storefront API",
   "author": "SCAYLE Commerce Engine",
   "license": "MIT",