@thorprovider/adapters 4.2.1 → 5.0.0

package/src/providers/medusa/auth.js

@@ -1,601 +0,0 @@
-"use strict";
-/**
- * @fileoverview Medusa Authentication Provider
- * @module @thorprovider/adapters/providers/medusa/auth
- *
- * Implementation of AuthProvider for Medusa.js v2
- * Supports JWT and session-based authentication
- */
-var __assign = (this && this.__assign) || function () {
-    __assign = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign.apply(this, arguments);
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
-    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MedusaAuthProvider = void 0;
-var logger_1 = require("../../core/logger");
-var errors_1 = require("../../core/errors");
-var transforms_1 = require("./transforms");
-/**
- * Storage manager for authentication tokens
- */
-var AuthStorageManager = /** @class */ (function () {
-    function AuthStorageManager(config) {
-        var _a;
-        this.storage = null;
-        this.tokenKey = 'thor_auth_token';
-        this.storageType = config.storage;
-        this.storage = (_a = config.customStorage) !== null && _a !== void 0 ? _a : null;
-    }
-    AuthStorageManager.prototype.getToken = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                if (this.storage) {
-                    return [2 /*return*/, this.storage.getItem(this.tokenKey)];
-                }
-                if (typeof window === 'undefined') {
-                    // Server-side: no storage available
-                    return [2 /*return*/, null];
-                }
-                switch (this.storageType) {
-                    case 'localStorage':
-                        return [2 /*return*/, window.localStorage.getItem(this.tokenKey)];
-                    case 'sessionStorage':
-                        return [2 /*return*/, window.sessionStorage.getItem(this.tokenKey)];
-                    case 'cookie':
-                        // Cookies are handled automatically by fetch, just return null
-                        return [2 /*return*/, null];
-                    case 'memory':
-                        return [2 /*return*/, null];
-                    default:
-                        return [2 /*return*/, null];
-                }
-                return [2 /*return*/];
-            });
-        });
-    };
-    AuthStorageManager.prototype.setToken = function (token) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        if (!this.storage) return [3 /*break*/, 2];
-                        return [4 /*yield*/, this.storage.setItem(this.tokenKey, token)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                    case 2:
-                        if (typeof window === 'undefined') {
-                            return [2 /*return*/];
-                        }
-                        switch (this.storageType) {
-                            case 'localStorage':
-                                window.localStorage.setItem(this.tokenKey, token);
-                                break;
-                            case 'sessionStorage':
-                                window.sessionStorage.setItem(this.tokenKey, token);
-                                break;
-                            case 'cookie':
-                            case 'memory':
-                                // No action needed for cookie (handled by SDK) or memory
-                                break;
-                        }
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    AuthStorageManager.prototype.removeToken = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        if (!this.storage) return [3 /*break*/, 2];
-                        return [4 /*yield*/, this.storage.removeItem(this.tokenKey)];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/];
-                    case 2:
-                        if (typeof window === 'undefined') {
-                            return [2 /*return*/];
-                        }
-                        switch (this.storageType) {
-                            case 'localStorage':
-                                window.localStorage.removeItem(this.tokenKey);
-                                break;
-                            case 'sessionStorage':
-                                window.sessionStorage.removeItem(this.tokenKey);
-                                break;
-                            case 'cookie':
-                            case 'memory':
-                                // No action needed
-                                break;
-                        }
-                        return [2 /*return*/];
-                }
-            });
-        });
-    };
-    return AuthStorageManager;
-}());
-/**
- * Medusa authentication provider implementation
- */
-var MedusaAuthProvider = /** @class */ (function () {
-    function MedusaAuthProvider(sdk, authConfig, debug) {
-        if (debug === void 0) { debug = false; }
-        this.sdk = sdk;
-        this.authConfig = authConfig;
-        this.logger = (0, logger_1.createLogger)('MedusaAuthProvider', debug);
-        this.storageManager = new AuthStorageManager(authConfig);
-        this.logger.info('Medusa Auth Provider initialized', {
-            method: authConfig.method,
-            storage: authConfig.storage,
-        });
-    }
-    // ========================================
-    // Authentication Methods
-    // ========================================
-    MedusaAuthProvider.prototype.login = function (credentials) {
-        return __awaiter(this, void 0, void 0, function () {
-            var token, customer, error_1;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('login', { email: credentials.email });
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 6, , 7]);
-                        return [4 /*yield*/, this.sdk.auth.login('customer', 'emailpass', {
-                                email: credentials.email,
-                                password: credentials.password,
-                            })];
-                    case 2:
-                        token = _a.sent();
-                        // Check if token requires additional actions (OAuth flow)
-                        if (typeof token !== 'string') {
-                            this.logger.warn('Authentication requires additional actions', token);
-                            return [2 /*return*/, {
-                                    requiresAction: true,
-                                    redirectUrl: token.location,
-                                }];
-                        }
-                        if (!(this.authConfig.method === 'jwt')) return [3 /*break*/, 4];
-                        return [4 /*yield*/, this.storageManager.setToken(token)];
-                    case 3:
-                        _a.sent();
-                        _a.label = 4;
-                    case 4: return [4 /*yield*/, this.getCurrentCustomer()];
-                    case 5:
-                        customer = _a.sent();
-                        this.logger.info('Login successful', { customerId: customer === null || customer === void 0 ? void 0 : customer.id });
-                        return [2 /*return*/, {
-                                token: this.authConfig.method === 'jwt' ? token : undefined,
-                                customer: customer !== null && customer !== void 0 ? customer : undefined,
-                            }];
-                    case 6:
-                        error_1 = _a.sent();
-                        this.logger.error('Login failed', error_1);
-                        throw new errors_1.ProviderAPIError("Authentication failed: ".concat(error_1.message), 'LOGIN_FAILED', error_1);
-                    case 7: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.register = function (data) {
-        return __awaiter(this, void 0, void 0, function () {
-            var token, customer, error_2;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('register', { email: data.email });
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 6, , 7]);
-                        return [4 /*yield*/, this.sdk.auth.register('customer', 'emailpass', {
-                                email: data.email,
-                                password: data.password,
-                            })];
-                    case 2:
-                        token = _a.sent();
-                        if (typeof token !== 'string') {
-                            throw new Error('Registration returned non-string token');
-                        }
-                        return [4 /*yield*/, this.sdk.store.customer.create({
-                                email: data.email,
-                                first_name: data.first_name,
-                                last_name: data.last_name,
-                                phone: data.phone,
-                            })];
-                    case 3:
-                        customer = (_a.sent()).customer;
-                        if (!(this.authConfig.method === 'jwt')) return [3 /*break*/, 5];
-                        return [4 /*yield*/, this.storageManager.setToken(token)];
-                    case 4:
-                        _a.sent();
-                        _a.label = 5;
-                    case 5:
-                        // Note: For session-based auth, the SDK automatically handles cookies
-                        // when auth.register() is called with auth.type='session' in SDK config
-                        this.logger.info('Registration successful', { customerId: customer.id });
-                        return [2 /*return*/, {
-                                token: this.authConfig.method === 'jwt' ? token : undefined,
-                                customer: (0, transforms_1.transformCustomer)(customer, customer.email),
-                            }];
-                    case 6:
-                        error_2 = _a.sent();
-                        this.logger.error('Registration failed', error_2);
-                        throw new errors_1.ProviderAPIError("Registration failed: ".concat(error_2.message), 'REGISTRATION_FAILED', error_2);
-                    case 7: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.logout = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var error_3;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('logout');
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 5, , 6]);
-                        return [4 /*yield*/, this.storageManager.removeToken()];
-                    case 2:
-                        _a.sent();
-                        if (!(this.authConfig.method === 'session')) return [3 /*break*/, 4];
-                        return [4 /*yield*/, this.sdk.auth.logout()];
-                    case 3:
-                        _a.sent();
-                        _a.label = 4;
-                    case 4:
-                        this.logger.info('Logout successful');
-                        return [3 /*break*/, 6];
-                    case 5:
-                        error_3 = _a.sent();
-                        this.logger.error('Logout failed', error_3);
-                        return [3 /*break*/, 6];
-                    case 6: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    // ========================================
-    // Password Management
-    // ========================================
-    MedusaAuthProvider.prototype.requestPasswordReset = function (email) {
-        return __awaiter(this, void 0, void 0, function () {
-            var error_4;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('requestPasswordReset', { email: email });
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.sdk.auth.resetPassword('customer', 'emailpass', {
-                                identifier: email,
-                            })];
-                    case 2:
-                        _a.sent();
-                        this.logger.info('Password reset email sent', { email: email });
-                        return [3 /*break*/, 4];
-                    case 3:
-                        error_4 = _a.sent();
-                        this.logger.error('Password reset request failed', error_4);
-                        throw new errors_1.ProviderAPIError("Password reset request failed: ".concat(error_4.message), 'PASSWORD_RESET_FAILED', error_4);
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.resetPassword = function (token, password, metadata) {
-        return __awaiter(this, void 0, void 0, function () {
-            var email, error_5;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('resetPassword', { hasMetadata: !!metadata });
-                        email = metadata === null || metadata === void 0 ? void 0 : metadata.email;
-                        if (!email) {
-                            throw new errors_1.ProviderAPIError('Email is required in metadata for Medusa password reset', 'MEDUSA_AUTH_PROVIDER', 400);
-                        }
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        // Medusa v2.6+ API: email + password in body, token as 3rd param
-                        return [4 /*yield*/, this.sdk.auth.updateProvider('customer', 'emailpass', {
-                                email: email,
-                                password: password,
-                            }, token)];
-                    case 2:
-                        // Medusa v2.6+ API: email + password in body, token as 3rd param
-                        _a.sent();
-                        this.logger.info('Password reset successful');
-                        return [3 /*break*/, 4];
-                    case 3:
-                        error_5 = _a.sent();
-                        this.logger.error('Password reset failed', error_5);
-                        throw new errors_1.ProviderAPIError("Password reset failed: ".concat(error_5.message), 'PASSWORD_RESET_CONFIRM_FAILED', error_5);
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    // ========================================
-    // Session Management
-    // ========================================
-    MedusaAuthProvider.prototype.getCurrentCustomer = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var customer, error_6;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('getCurrentCustomer');
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.sdk.store.customer.retrieve()];
-                    case 2:
-                        customer = (_a.sent()).customer;
-                        if (!customer) {
-                            return [2 /*return*/, null];
-                        }
-                        return [2 /*return*/, (0, transforms_1.transformCustomer)(customer, customer.email)];
-                    case 3:
-                        error_6 = _a.sent();
-                        this.logger.debug('No authenticated customer');
-                        return [2 /*return*/, null];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.updateCustomer = function (data) {
-        return __awaiter(this, void 0, void 0, function () {
-            var updateData, customer, error_7;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('updateCustomer');
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        updateData = __assign({}, data);
-                        if (updateData.phone === null) {
-                            delete updateData.phone; // Medusa doesn't accept null, only undefined
-                        }
-                        return [4 /*yield*/, this.sdk.store.customer.update(updateData)];
-                    case 2:
-                        customer = (_a.sent()).customer;
-                        return [2 /*return*/, (0, transforms_1.transformCustomer)(customer, customer.email)];
-                    case 3:
-                        error_7 = _a.sent();
-                        this.logger.error('Update customer failed', error_7);
-                        throw new errors_1.ProviderAPIError("Failed to update customer: ".concat(error_7.message), 'UPDATE_CUSTOMER_FAILED', error_7);
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.isAuthenticated = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var customer;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getCurrentCustomer()];
-                    case 1:
-                        customer = _a.sent();
-                        return [2 /*return*/, customer !== null];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.getAuthToken = function () {
-        // For JWT auth, return stored token
-        if (this.authConfig.method === 'jwt') {
-            // This is sync, so we can't use async storage
-            // Return null and rely on storage manager
-            return null;
-        }
-        // For session auth, return null (cookies are handled automatically)
-        return null;
-    };
-    // ========================================
-    // Address Management
-    // ========================================
-    MedusaAuthProvider.prototype.getAddresses = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var addresses, error_8;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('getAddresses');
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.sdk.store.customer.listAddress()];
-                    case 2:
-                        addresses = (_a.sent()).addresses;
-                        return [2 /*return*/, addresses.map(function (address) { return (0, transforms_1.transformAddress)(address); })];
-                    case 3:
-                        error_8 = _a.sent();
-                        this.logger.error('Get addresses failed', error_8);
-                        throw new errors_1.ProviderAPIError("Failed to get addresses: ".concat(error_8.message), 'GET_ADDRESSES_FAILED', error_8);
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.createAddress = function (data) {
-        return __awaiter(this, void 0, void 0, function () {
-            var medusaData, customer, addresses, address, error_9;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('createAddress');
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        medusaData = {
-                            first_name: data.firstName,
-                            last_name: data.lastName,
-                            company: data.company,
-                            address_1: data.address1,
-                            address_2: data.address2,
-                            city: data.city,
-                            province: data.province,
-                            postal_code: data.postalCode,
-                            country_code: data.countryCode,
-                            phone: data.phone,
-                            metadata: data.metadata,
-                        };
-                        return [4 /*yield*/, this.sdk.store.customer.createAddress(medusaData)];
-                    case 2:
-                        customer = (_a.sent()).customer;
-                        addresses = customer.addresses || [];
-                        address = addresses[addresses.length - 1];
-                        if (!address) {
-                            throw new Error('No address returned from createAddress');
-                        }
-                        return [2 /*return*/, (0, transforms_1.transformAddress)(address)];
-                    case 3:
-                        error_9 = _a.sent();
-                        this.logger.error('Create address failed', error_9);
-                        throw new errors_1.ProviderAPIError("Failed to create address: ".concat(error_9.message), 'CREATE_ADDRESS_FAILED', error_9);
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.updateAddress = function (addressId, data) {
-        return __awaiter(this, void 0, void 0, function () {
-            var medusaData, customer, addresses, address, error_10;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('updateAddress', { addressId: addressId });
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        medusaData = {};
-                        if (data.firstName !== undefined)
-                            medusaData.first_name = data.firstName;
-                        if (data.lastName !== undefined)
-                            medusaData.last_name = data.lastName;
-                        if (data.company !== undefined)
-                            medusaData.company = data.company;
-                        if (data.address1 !== undefined)
-                            medusaData.address_1 = data.address1;
-                        if (data.address2 !== undefined)
-                            medusaData.address_2 = data.address2;
-                        if (data.city !== undefined)
-                            medusaData.city = data.city;
-                        if (data.province !== undefined)
-                            medusaData.province = data.province;
-                        if (data.postalCode !== undefined)
-                            medusaData.postal_code = data.postalCode;
-                        if (data.countryCode !== undefined)
-                            medusaData.country_code = data.countryCode;
-                        if (data.phone !== undefined)
-                            medusaData.phone = data.phone;
-                        if (data.metadata !== undefined)
-                            medusaData.metadata = data.metadata;
-                        return [4 /*yield*/, this.sdk.store.customer.updateAddress(addressId, medusaData)];
-                    case 2:
-                        customer = (_a.sent()).customer;
-                        addresses = customer.addresses || [];
-                        address = addresses.find(function (addr) { return addr.id === addressId; });
-                        if (!address) {
-                            throw new Error("Address ".concat(addressId, " not found after update"));
-                        }
-                        return [2 /*return*/, (0, transforms_1.transformAddress)(address)];
-                    case 3:
-                        error_10 = _a.sent();
-                        this.logger.error('Update address failed', error_10);
-                        throw new errors_1.ProviderAPIError("Failed to update address: ".concat(error_10.message), 'UPDATE_ADDRESS_FAILED', error_10);
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.deleteAddress = function (addressId) {
-        return __awaiter(this, void 0, void 0, function () {
-            var error_11;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.debug('deleteAddress', { addressId: addressId });
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.sdk.store.customer.deleteAddress(addressId)];
-                    case 2:
-                        _a.sent();
-                        this.logger.info('Address deleted', { addressId: addressId });
-                        return [3 /*break*/, 4];
-                    case 3:
-                        error_11 = _a.sent();
-                        this.logger.error('Delete address failed', error_11);
-                        throw new errors_1.ProviderAPIError("Failed to delete address: ".concat(error_11.message), 'DELETE_ADDRESS_FAILED', error_11);
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    MedusaAuthProvider.prototype.deleteCustomerAccount = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                this.logger.debug('deleteCustomerAccount');
-                // TODO: Implement when custom Medusa backend endpoint is ready
-                // DELETE /store/customers/me
-                throw new errors_1.ProviderAPIError('Delete customer account is not yet implemented. Requires custom Medusa backend endpoint.', 'NOT_IMPLEMENTED', undefined);
-            });
-        });
-    };
-    return MedusaAuthProvider;
-}());
-exports.MedusaAuthProvider = MedusaAuthProvider;