@thorprovider/medusa-extended 1.11.7 → 1.11.8

package/dist/index.mjs

@@ -1873,8 +1873,179 @@ function mapUiMessageStreamToEvents(stream, logger) {
     }
   });
 }
+
+// src/recovery.ts
+import { createLogger as createLogger3, ProviderAPIError as ProviderAPIError4 } from "@thorprovider/adapters";
+var RecoveryClient = class {
+  baseUrl;
+  logger;
+  constructor(config) {
+    this.baseUrl = config.baseUrl.replace(/\/$/, "");
+    this.logger = createLogger3("RecoveryClient", config.debug);
+  }
+  // -------------------------------------------------------------------------
+  // Private — HTTP helper
+  // -------------------------------------------------------------------------
+  async request(method, path, body) {
+    const url = `${this.baseUrl}${path}`;
+    this.logger.debug(`[recovery] ${method} ${path}`);
+    const headers = {
+      "Content-Type": "application/json"
+    };
+    const init = {
+      method,
+      headers,
+      ...body !== void 0 ? { body: JSON.stringify(body) } : {}
+    };
+    let response;
+    try {
+      response = await fetchBackendWithResilience(url, init);
+    } catch (networkError) {
+      throw new ProviderAPIError4(
+        `[recovery] Network error on ${method} ${path}: ${networkError.message}`,
+        "NETWORK_ERROR",
+        networkError
+      );
+    }
+    if (!response.ok) {
+      let message = `HTTP ${response.status}`;
+      try {
+        const json = await response.json();
+        message = json?.message ?? message;
+      } catch {
+      }
+      throw new ProviderAPIError4(
+        `[recovery] ${method} ${path} failed: ${message}`,
+        `RECOVERY_API_${response.status}`,
+        response.status
+      );
+    }
+    return response.json();
+  }
+  // -------------------------------------------------------------------------
+  // Private — reset token helpers
+  // -------------------------------------------------------------------------
+  /**
+   * Decodes the `entity_id` (email) claim from a Medusa reset-password JWT.
+   *
+   * The JWT is unsigned-trust for this claim: the email is later sent to
+   * `POST /auth/user/emailpass/update`, where Medusa itself re-validates the
+   * token signature and payload before applying the change.
+   */
+  decodeResetTokenEmail(token) {
+    const parts = token.split(".");
+    if (parts.length !== 3) return null;
+    try {
+      const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+      return typeof payload.entity_id === "string" && payload.entity_id.length > 0 ? payload.entity_id : null;
+    } catch {
+      return null;
+    }
+  }
+  // -------------------------------------------------------------------------
+  // Password reset
+  // -------------------------------------------------------------------------
+  /**
+   * Solicita un email de reset de contraseña para el actor `user`
+   * (dropshippers). El backend responde de forma uniforme exista o no la
+   * cuenta (anti enumeración).
+   *
+   * `POST /auth/user/emailpass/reset-password`
+   */
+  async requestUserPasswordReset(email) {
+    await this.request("POST", "/auth/user/emailpass/reset-password", {
+      identifier: email
+    });
+  }
+  /**
+   * Verifica un token de reset de contraseña sin consumirlo. Devuelve el
+   * email enmascarado (p. ej. `j***@ejemplo.com`) solo cuando `status === 'valid'`.
+   *
+   * `GET /store/dropshipper/auth/reset-password/verify`
+   */
+  async verifyUserPasswordResetToken(token) {
+    return this.request("GET", `/store/dropshipper/auth/reset-password/verify?token=${encodeURIComponent(token)}`);
+  }
+  /**
+   * Confirma el reset: re-verifica el token (sin consumir), luego consume el
+   * token vía `POST /auth/user/emailpass/update`. El email se deriva del
+   * propio JWT. Nunca devuelve auto-login: al éxito, la UI redirige a /login.
+   */
+  async confirmUserPasswordReset(token, password) {
+    const verify = await this.verifyUserPasswordResetToken(token);
+    if (verify.status !== "valid") {
+      return { ok: false, status: verify.status };
+    }
+    const email = this.decodeResetTokenEmail(token);
+    if (!email) {
+      return { ok: false, status: "invalid" };
+    }
+    try {
+      const headers = {
+        Authorization: `Bearer ${token}`,
+        "Content-Type": "application/json"
+      };
+      const response = await fetchBackendWithResilience(`${this.baseUrl}/auth/user/emailpass/update`, {
+        method: "POST",
+        headers,
+        body: JSON.stringify({ email, password })
+      });
+      if (!response.ok) {
+        throw new ProviderAPIError4(
+          `[recovery] POST /auth/user/emailpass/update failed: HTTP ${response.status}`,
+          "RECOVERY_API_" + response.status,
+          response.status
+        );
+      }
+      return { ok: true };
+    } catch (error) {
+      this.logger.warn("[recovery] confirmUserPasswordReset failed, re-verifying", error);
+      try {
+        const recheck = await this.verifyUserPasswordResetToken(token);
+        return { ok: false, status: recheck.status };
+      } catch {
+        return { ok: false, status: "invalid" };
+      }
+    }
+  }
+  // -------------------------------------------------------------------------
+  // Account activation
+  // -------------------------------------------------------------------------
+  /**
+   * Verifica un token de activación de cuenta dropshipper sin consumirlo.
+   *
+   * `GET /store/dropshipper/applications/activate/verify`
+   */
+  async verifyActivationToken(token) {
+    return this.request("GET", `/store/dropshipper/applications/activate/verify?token=${encodeURIComponent(token)}`);
+  }
+  /**
+   * Activa la cuenta: re-verifica el token (sin consumir), luego consume el
+   * token vía `POST /store/dropshipper/applications/activate` y establece la
+   * contraseña inicial. Al éxito, la UI redirige a /login sin auto-login.
+   */
+  async activateAccount(token, password) {
+    const verify = await this.verifyActivationToken(token);
+    if (verify.status !== "valid") {
+      return { ok: false, status: verify.status };
+    }
+    try {
+      await this.request("POST", "/store/dropshipper/applications/activate", { token, password });
+      return { ok: true };
+    } catch (error) {
+      this.logger.warn("[recovery] activateAccount failed, re-verifying", error);
+      try {
+        const recheck = await this.verifyActivationToken(token);
+        return { ok: false, status: recheck.status };
+      } catch {
+        return { ok: false, status: "invalid" };
+      }
+    }
+  }
+};
 export {
   DropshipperClient,
-  MedusaAdminClient
+  MedusaAdminClient,
+  RecoveryClient
 };
 //# sourceMappingURL=index.mjs.map