@scayle/storefront-core 8.38.4 → 8.39.1

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @scayle/storefront-core
 
+## 8.39.1
+
+### Patch Changes
+
+- Added `'token'` and `'code'` to the list of default `blacklistedKeys`. This will more proactively redact server logs to prevent leaked data.
+
+**Dependencies**
+
+- Updated dependency to @scayle/storefront-api@18.12.0
+- Updated dependency to @scayle/unstorage-scayle-kv-driver@1.0.3
+
+## 8.39.0
+
+### Patch Changes
+
+- Use a custom error type for OAuth API errors to improve troubleshooting OAuth errors.
+
 ## 8.38.4
 
 ## 8.38.3

package/dist/api/oauth.d.ts

@@ -10,6 +10,12 @@ export interface OAuthOptions {
     apiHost: string;
     additionalHeaders?: HeadersInit;
 }
+/**
+ * Error thrown when OAuth API request fails.
+ */
+export declare class OAuthRequestError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
 /**
  * Creates and returns an OAuthClient instance using the provided RPC context.
  *

package/dist/api/oauth.mjs

@@ -7,10 +7,30 @@ class MissingCredentialsError extends Error {
     this.name = "MissingCredentialsError";
   }
 }
+export class OAuthRequestError extends Error {
+  constructor(message, options) {
+    super(message, options);
+    this.name = "OAuthRequestError";
+  }
+}
+function stringifyOAuthError(error) {
+  if (error.message) {
+    return error.hint ? `${error.error}: ${error.message} (hint: ${error.hint})` : `${error.error}: ${error.message}`;
+  } else {
+    return error.error;
+  }
+}
 async function oauthResponseHandler(response) {
   const data = await response.json();
   if (!response.ok) {
-    throw new FetchError(response, data);
+    const fetchError = new FetchError(response, data);
+    if (data) {
+      const error = new OAuthRequestError(stringifyOAuthError(data), {
+        cause: fetchError
+      });
+      throw error;
+    }
+    throw fetchError;
   }
   return data;
 }

package/dist/helpers/productHelpers.mjs

@@ -140,11 +140,11 @@ export const getVariantCrosssellingValues = (variants) => {
   if (!variants?.length) {
     return [];
   }
-  const crossellings = variants.map((variant) => variant.advancedAttributes?.variantCrosssellings).filter(Boolean);
-  const uniqueCrossellings = [
-    ...new Map(crossellings.map((item) => [item?.id ?? item, item])).values()
+  const crossSellings = variants.map((variant) => variant.advancedAttributes?.variantCrosssellings).filter(Boolean);
+  const uniqueCrossSellings = [
+    ...new Map(crossSellings.map((item) => [item?.id ?? item, item])).values()
   ];
-  const values = uniqueCrossellings.map((r) => r?.values);
+  const values = uniqueCrossSellings.map((r) => r?.values);
   const fieldSets = flattenDeep(values).map((r) => r?.fieldSet);
   return flattenDeep(fieldSets).map((r) => r?.value).filter((it) => !!it);
 };

package/dist/helpers/sanitizationHelpers.mjs

@@ -4,7 +4,7 @@ export const stripShopLocaleFromPath = (locale, path, splitter = "/") => path.sp
 export const purifySensitiveValue = (value, showFirstAndLastChar = false) => {
   return showFirstAndLastChar && value.length > 2 ? value.replace(regex, "*") : SANITIZATION_MASK;
 };
-export const purifySensitiveData = (data = {}, blacklistedKeys = ["password"], showFirstAndLastChar = false) => {
+export const purifySensitiveData = (data = {}, blacklistedKeys = ["password", "token", "code"], showFirstAndLastChar = false) => {
   return Object.entries(data).reduce(
     (purifiedPayload, [key, value]) => {
       if (!!value && value.constructor === Object) {

package/dist/rpc/methods/checkout/checkout.mjs

@@ -33,7 +33,7 @@ export const getCheckoutToken = defineRpcHandler(async (jwtPayload = {}, context
     carrier,
     basketId: context.basketKey,
     campaignKey
-  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"8.38.4"}`).setProtectedHeader({ alg: "HS256", typ: "JWT" }).sign(secret);
+  }).setIssuedAt(now).setNotBefore(now).setExpirationTime("1h").setIssuer(`${"@scayle/storefront-core"}@${"8.39.1"}`).setProtectedHeader({ alg: "HS256", typ: "JWT" }).sign(secret);
   return {
     accessToken: refreshedAccessToken,
     checkoutJwt

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scayle/storefront-core",
-  "version": "8.38.4",
+  "version": "8.39.1",
   "description": "Collection of essential utilities to work with the Storefront API",
   "author": "SCAYLE Commerce Engine",
   "license": "MIT",
@@ -61,7 +61,7 @@
   },
   "devDependencies": {
     "@types/crypto-js": "4.2.2",
-    "@types/node": "22.16.5",
+    "@types/node": "22.17.0",
     "@types/webpack-env": "1.18.8",
     "@vitest/coverage-v8": "3.2.4",
     "dprint": "0.50.1",
@@ -70,14 +70,15 @@
     "fishery": "2.3.1",
     "publint": "0.3.12",
     "rimraf": "6.0.1",
-    "typescript": "5.8.3",
+    "typescript": "5.9.2",
     "unbuild": "3.6.0",
     "unstorage": "1.16.1",
     "vitest": "3.2.4",
-    "@scayle/eslint-config-storefront": "4.7.2"
+    "@scayle/eslint-config-storefront": "4.7.3",
+    "@scayle/vitest-config-storefront": "1.0.0"
   },
   "volta": {
-    "node": "22.17.1"
+    "node": "22.18.0"
   },
   "scripts": {
     "clean": "rimraf ./dist",