@schibsted/account-sdk-browser 5.2.5 → 6.0.0-alpha.1

package/LICENSE.md

@@ -1,4 +1,4 @@
-Copyright (c) 2024 Schibsted Products & Technology AS
+Copyright (c) 2026 Schibsted Products & Technology AS
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
 associated documentation files (the "Software"), to deal in the Software without restriction,

package/README.md

@@ -1,6 +1,4 @@
-[![logo](https://www.schibsted.com/Global/LogoTypes/Logos%202014/SMG_Small_2014_RGB.png)](https://github.com/schibsted/account-sdk-browser)
-
-![Build Status](https://github.com/schibsted/account-sdk-browser/actions/workflows/pr.yml/badge.svg)
+![Build Status](https://schibsted.ghe.com/user-identity/account-sdk-browser/actions/workflows/pr.yml/badge.svg)
 [![Code coverage](https://codecov.io/gh/schibsted/account-sdk-browser/branch/master/graph/badge.svg)](https://codecov.io/gh/schibsted/account-sdk-browser)
 [![Snyk](https://snyk.io/test/github/schibsted/account-sdk-browser/badge.svg?targetFile=package.json)](https://snyk.io/test/github/schibsted/account-sdk-browser)
 
@@ -26,14 +24,11 @@ For example if your `pre` domain is pre.sdk-example.com, and it uses id.pre.sdk-
 domain, your local domain should be local.sdk-example.com.
 
 1. Do `npm install --save @schibsted/account-sdk-browser`
-1. Use this library as you would any other npm module: `import { Identity, Monetization, Payment } from '@schibsted/account-sdk-browser'`
-   With CommonJS it is possible to `require` the modules Identity, Monetization and Payment
-   by appending `/identity`, `/monetization'` or `/payment'`.
-1. Build your site as you prefer. This library uses modern JavaScript syntax (including async/await
-   and other ES2017 and WHATWG features) by default. We recommend that you do any transpilation
-   yourself for the browser versions you need to cater to. See [this paragraph](#polyfills) for
-   info about our Babel-ified version and info about polyfills.
-1. Initiate the SDK and provide at least `clientId`, `env` and `sessionDomain`.
+2. Use this library as you would any other npm module: `import { Identity, Monetization, Payment } from '@schibsted/account-sdk-browser'`.
+3. Build your site as you prefer. This library is published as ES modules and uses modern JavaScript
+   syntax (including async/await and other ES2017 and WHATWG features). We recommend that you do
+   any transpilation yourself for the browser versions you need to cater to. We do not add polyfills.
+4. Initiate the SDK and provide at least `clientId`, `env` and `sessionDomain`.
 
 If this is for a new site and there is no sessionDomain yet, contact
 [support](mailto:schibstedaccount@schibsted.com) to initiate the process.
@@ -53,9 +48,9 @@ Follow the [migration guide](./MIGRATION.md).
 ## Example project
 
 There is an example that demonstrates how the SDK can be used. The code is
-[here](https://github.com/schibsted/sdk-example), and you can see it live
+[here](https://schibsted.ghe.com/user-identity/sdk-example), and you can see it live
 [here](https://pro.sdk-example.com). You have a use-case that we haven't thought of? Ask us to add
-it by creating an [issue](https://github.com/schibsted/sdk-example/issues/new).
+it by creating an [issue](https://schibsted.ghe.com/user-identity/sdk-example/issues/new).
 
 You can use that code as inspiration or just fork and play with it. The account-sdk-browser NPM
 module is used for authenticating the user with Schibsted account. Take a look at how the SDK is
@@ -184,7 +179,7 @@ signal to your main page — using
 [postMessage](https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage) or something
 similar — to indicate that the user is logged in. If the popup window fails to open, it'll
 automatically fall back to the redirect flow. The SDK Example project mentioned above demonstrates
-how it can work. Again, you can see [sdk-example](https://github.com/schibsted/sdk-example) if you
+how it can work. Again, you can see [sdk-example](https://schibsted.ghe.com/user-identity/sdk-example) if you
 want a working example.
 
 #### Is the user logged in?
@@ -264,25 +259,6 @@ const paylinkUrl = paymentSDK.purchasePaylinkUrl(paylink);
 paymentSDK.payWithPaylink(paylink);
 ```
 
-## Appendix
-
-#### Polyfills
-
-This SDK uses modern JavaScript features. If you support older browsers, you should use a tool like
-babel to transform the JavaScript as needed. However, since certain teams have deployment pipelines
-where it's difficult to do their own transpilation, we do provide some opt-in es5 files as well:
-
-1. `@schibsted/account-sdk-browser/es5`: Include both `Identity`, `Monetization` and `Payment`.
-1. `@schibsted/account-sdk-browser/es5/global`: Include both `Identity`, `Monetization` and
-   `Payment`. In addition, add them as variables to the global `window` object.
-1. `@schibsted/account-sdk-browser/es5/identity`, `@schibsted/account-sdk-browser/es5/monetization`
-   or `@schibsted/account-sdk-browser/es5/payment` can be used to only include each class by itself.
-
-But then regardless of whether you use the es5 versions or not, you might need to polyfill certain
-things that might be missing in the browsers you wish to support. A quick test using IE11 showed
-that we needed polyfills for `Promise`, `URL`, `Object.entries`, `fetch`, `Number.isFinite` and
-`Number.isInteger`.
-
 #### Cookies
 
 There are some cookies used by Schibsted account. They should all be considered opaque on the
@@ -312,23 +288,24 @@ browser side. Nevertheless, here is a short description of them.
     * `referer` (yep, missing the double "rr"..): If this is missing, a call to hassession will
       return a `401` with a `UserException` that says `No session found`.
 
-## Releasing
+## Publishing
 
-Tags are pushed to NPM via Travis. To release a new version, run in master
+Versioning and changelog are handled by [Release Please (GitHub Action)](https://github.com/googleapis/release-please). Publishing to [npmjs.org](https://www.npmjs.com/package/@schibsted/account-sdk-browser) is handled by the [npm-publish workflow](./.github/workflows/npm-publish.yml). See the [Release Please workflow](./.github/workflows/release-please.yml) and [`release-please-config.json`](./release-please-config.json).
 
-```bash
-$ npm version <major|minor|patch>
-```
+When publishable changes have been merged to `master`, Release Please will create (or update) a release pull request.
+The suggested version is based on the commit messages in accordance with the [Conventional Commits](https://www.conventionalcommits.org/) specification — `fix:` bumps the patch version, `feat:` bumps the minor version, and `feat!:` or a `BREAKING CHANGE:` footer bumps the major version.
+Other prefixes (`chore:`, `docs:`, `test:`, `refactor:`, `ci:`, `build:`, `style:`) do not trigger a release and are hidden from the changelog.
+
+To release/publish the changes simply merge the corresponding pull request and wait for the publish workflow to finish.
+Release-please will create a git tag (e.g. `v5.2.7`) and a GitHub Release, and the [publish workflow](./.github/workflows/npm-publish.yml) will push the package to npmjs.org.
 
-which will run the test, update version in package.json, commit, tag the commit
-and push.
 
 ## LICENSE
 
-Copyright (c) 2024 Schibsted Products & Technology AS
+Copyright (c) 2026 Schibsted Products & Technology AS
 
 Licensed under the [MIT
-License](https://github.com/schibsted/account-sdk-browser/blob/master/LICENSE.md)
+License](https://schibsted.ghe.com/user-identity/account-sdk-browser/blob/master/LICENSE.md)
 
 Unless required by applicable law or agreed to in writing, software distributed under the License is
 distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or

package/identity.js

@@ -1,4 +1,4 @@
-/* Copyright 2024 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.
+/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.
  * See LICENSE.md in the project root.
  */
 

package/index.js

@@ -1,4 +1,4 @@
-/* Copyright 2024 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.
+/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.
  * See LICENSE.md in the project root.
  */
 

package/monetization.js

@@ -1,4 +1,4 @@
-/* Copyright 2024 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.
+/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.
  * See LICENSE.md in the project root.
  */
 

package/package.json

@@ -1,20 +1,23 @@
 {
   "name": "@schibsted/account-sdk-browser",
-  "version": "5.2.5",
+  "version": "6.0.0-alpha.1",
   "description": "Schibsted account SDK for browsers",
   "main": "index.js",
   "type": "module",
+  "exports": {
+    ".": "./index.js",
+    "./identity": "./identity.js",
+    "./monetization": "./monetization.js",
+    "./payment": "./payment.js"
+  },
   "scripts": {
-    "build": "./build.sh",
-    "clean": "rimraf .cache coverage dist docs",
+    "clean": "rimraf .cache coverage docs && npm run clean:legacy",
+    "clean:legacy": "rimraf es5",
     "docs": "rimraf docs && jsdoc -c ./jsdoc.conf.json --verbose",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
-    "test": "jest",
-    "cover": "jest --coverage",
-    "preversion": "npm run lint && npm test",
-    "version": "node ./scripts/genversion.js && git add src/version.js",
-    "postversion": "git push && git push --tags"
+    "test": "vitest run",
+    "cover": "vitest run --coverage"
   },
   "author": "",
   "license": "MIT",
@@ -22,48 +25,19 @@
     "tiny-emitter": "^2.1.0"
   },
   "devDependencies": {
-    "@babel/core": "^7.11.4",
-    "@babel/preset-env": "^7.23.2",
-    "babel-loader": "^8.1.0",
-    "core-js": "^3.6.5",
+    "@vitest/coverage-v8": "^2.1.9",
     "docdash": "git+https://github.com/torarvid/docdash.git#v0.5.0",
     "eslint": "^6.8.0",
     "eslint-plugin-import": "^2.20.2",
-    "jest": "^26.4.2",
-    "jest-junit": "^10.0.0",
     "jsdoc": "^3.6.11",
+    "jsdom": "^25.0.1",
     "node-fetch": "^2.6.0",
-    "regenerator-runtime": "^0.13.7",
-    "webpack": "^4.44.1",
-    "webpack-cli": "^3.3.12",
+    "vitest": "^2.1.9",
     "whatwg-url": "^8.0.0"
   },
   "repository": {
     "type": "git",
-    "url": "git://github.com/schibsted/account-sdk-browser.git"
-  },
-  "babel": {
-    "presets": [
-      [
-        "@babel/preset-env",
-        {
-          "useBuiltIns": "usage",
-          "corejs": 3,
-          "targets": {
-            "browsers": [
-              "> 1%",
-              "last 10 chrome major versions",
-              "last 10 firefox major versions",
-              "last 10 opera major versions",
-              "last 2 safari major versions",
-              "last 2 ios major versions",
-              "last 2 ie major versions",
-              "last 5 edge major versions"
-            ]
-          }
-        }
-      ]
-    ]
+    "url": "git://schibsted.ghe.com/user-identity/account-sdk-browser.git"
   },
   "typings": "index.d.ts"
 }

package/payment.js

@@ -1,4 +1,4 @@
-/* Copyright 2024 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.
+/* Copyright 2026 Schibsted Products & Technology AS. Licensed under the terms of the MIT license.
  * See LICENSE.md in the project root.
  */
 

package/src/monetization.js

@@ -40,6 +40,7 @@ export class Monetization extends EventEmitter {
         this.clientId = clientId;
         this.env = env;
         this.redirectUri = redirectUri;
+        this.pendingHasAccessRequests = {};
         this._setSpidServerUrl(env);
 
         if (sessionDomain) {
@@ -99,13 +100,24 @@ export class Monetization extends EventEmitter {
             throw new SDKError(`'productIds' must be an array`);
         }
 
-        const sortedIds = productIds.sort();
-        const cacheKey = this._accessCacheKey(productIds, userId);
+        const sortedIds = [...productIds].sort();
+        const cacheKey = this._accessCacheKey(sortedIds, userId);
         let data = this.cache.get(cacheKey);
         if (!data) {
-            data = await this._sessionService.get(`/hasAccess/${sortedIds.join(',')}`);
-            const expiresSeconds = data.ttl;
-            this.cache.set(cacheKey, data, expiresSeconds * 1000);
+            if (!this.pendingHasAccessRequests[cacheKey]) {
+                this.pendingHasAccessRequests[cacheKey] = this._sessionService.get(`/hasAccess/${sortedIds.join(',')}`);
+            }
+            const promise = this.pendingHasAccessRequests[cacheKey];
+            try {
+                data = await promise;
+                const expiresSeconds = data.ttl;
+                this.cache.set(cacheKey, data, expiresSeconds * 1000);
+            } finally {
+                // If it rejects, we still want to clear the pending request
+                if (this.pendingHasAccessRequests[cacheKey] === promise) {
+                    delete this.pendingHasAccessRequests[cacheKey];
+                }
+            }
         }
 
         if (!data.entitled) {
@@ -133,7 +145,7 @@ export class Monetization extends EventEmitter {
      * @private
      */
     _accessCacheKey(productIds, userId) {
-        return `prd_${productIds.sort()}_${userId}`;
+        return `prd_${[...productIds].sort()}_${userId}`;
     }
 
     /**

package/src/payment.d.ts

@@ -74,7 +74,7 @@ export class Payment {
      */
     redeemUrl(voucherCode: string, redirectUri?: string): string;
     /**
-     * @deprecated https://github.com/schibsted/account-sdk-browser/issues/94
+     * @deprecated https://schibsted.ghe.com/user-identity/account-sdk-browser/issues/94
      *
      * Get the url for the paylink purchase
      * @todo Check working-ness for BFF + SPiD

package/src/payment.js

@@ -129,7 +129,7 @@ export class Payment {
     }
 
     /**
-     * @deprecated https://github.com/schibsted/account-sdk-browser/issues/94
+     * @deprecated https://schibsted.ghe.com/user-identity/account-sdk-browser/issues/94
      *
      * Get the url for the paylink purchase
      * @todo Check working-ness for BFF + SPiD

package/src/version.js

@@ -1,5 +1,5 @@
-// Automatically generated in 'npm version' by scripts/genversion.js
+// Version is bumped automatically by release-please. See release-please-config.json.
 
 'use strict'
-const version = '5.2.5';
+const version = '6.0.0-alpha.1'; // x-release-please-version
 export default version;