@unchainedshop/api 4.6.1 → 4.7.2

package/lib/roles/index.js

@@ -101,6 +101,7 @@ const actions = [
     'managePaymentCredentials',
     'bulkImport',
     'logout',
+    'logoutAllSessions',
     'loginAsGuest',
     'loginWithPassword',
     'loginWithWebAuthn',

package/lib/roles/loggedIn.js

@@ -172,4 +172,5 @@ export const loggedIn = (role, actions) => {
     role.allow(actions.downloadFile, isFileAccessible);
     role.allow(actions.uploadUserAvatar, canUpdateAvatar);
     role.allow(actions.uploadTempFile, canUpdateAvatar);
+    role.allow(actions.logoutAllSessions, () => true);
 };

package/lib/schema/mutation.js

@@ -57,6 +57,12 @@ export default [
       """
       logout: SuccessResponse
 
+      """
+      Log the user out of all sessions by invalidating all JWT tokens.
+      This increments the token version, making all existing tokens invalid.
+      """
+      logoutAllSessions: SuccessResponse
+
       """
       Impersonate a user
       """
@@ -221,20 +227,6 @@ export default [
       """
       terminateEnrollment(enrollmentId: ID!): Enrollment!
 
-      """
-      Change the delivery method/provider to an order. If the delivery provider
-      doesn’t exists new delivery provider will be created with the provided ID.
-      """
-      setOrderDeliveryProvider(orderId: ID!, deliveryProviderId: ID!): Order!
-        @deprecated(reason: "Use updateCart or updateCartDelivery* mutations instead")
-
-      """
-      Change the payment method/provider to an order. If the payment provider
-      doesn’t exists new payment provider will be created with the provided ID.
-      """
-      setOrderPaymentProvider(orderId: ID!, paymentProviderId: ID!): Order!
-        @deprecated(reason: "Use updateCart or updateCartPayment* mutations instead")
-
       """
       Update the cart by changing the delivery provider and using a shipping specific configuration
       """
@@ -265,36 +257,6 @@ export default [
       """
       updateCartPaymentGeneric(orderId: ID, paymentProviderId: ID!, meta: JSON): Order!
 
-      """
-      Update a Shipping Delivery Provider's specific configuration
-      """
-      updateOrderDeliveryShipping(
-        orderDeliveryId: ID!
-        address: AddressInput
-        meta: JSON
-      ): OrderDeliveryShipping! @deprecated(reason: "Use updateCartDeliveryShipping instead")
-
-      """
-      Update a Pick Up Delivery Provider's specific configuration
-      """
-      updateOrderDeliveryPickUp(
-        orderDeliveryId: ID!
-        orderPickUpLocationId: ID!
-        meta: JSON
-      ): OrderDeliveryPickUp! @deprecated(reason: "Use updateCartDeliveryPickUp instead")
-
-      """
-      Update an Invoice Payment Provider's specific configuration
-      """
-      updateOrderPaymentInvoice(orderPaymentId: ID!, meta: JSON): OrderPaymentInvoice!
-        @deprecated(reason: "Use updateCartPaymentInvoice instead")
-
-      """
-      Update a Generic Payment Provider's specific configuration
-      """
-      updateOrderPaymentGeneric(orderPaymentId: ID!, meta: JSON): OrderPaymentGeneric!
-        @deprecated(reason: "Use updateCartPaymentGeneric instead")
-
       """
       Remove an order while it's still open
       """

package/lib/schema/types/common.d.ts

@@ -0,0 +1,2 @@
+declare const _default: string[];
+export default _default;

package/lib/schema/types/common.js

@@ -0,0 +1,12 @@
+export default [
+    `
+    type SuccessResponse @cacheControl(maxAge: 0, scope: PRIVATE) {
+      success: Boolean
+    }
+
+    enum SortDirection {
+      ASC
+      DESC
+    }
+  `,
+];

package/lib/schema/types/index.js

@@ -15,7 +15,7 @@ import price from "./price.js";
 import payment from "./payment.js";
 import shop from "./shop.js";
 import stock from "./stock.js";
-import types from "./types.js";
+import common from "./common.js";
 import user from "./user.js";
 import warehousing from "./warehousing.js";
 import order from "./order/index.js";
@@ -46,7 +46,7 @@ export default [
     ...payment,
     ...shop,
     ...stock,
-    ...types,
+    ...common,
     ...user,
     ...warehousing,
     ...product,

package/lib/schema/types/order/delivery.js

@@ -33,8 +33,6 @@ export default [
       delivered: DateTime
       fee: Price
       discounts: [OrderDeliveryDiscount!]
-      pickUpLocations: [PickUpLocation!]!
-        @deprecated(reason: "Use DeliveryProvider.pickupLocations instead")
       activePickUpLocation: PickUpLocation
     }
 

package/lib/utils/mapServiceError.d.ts

@@ -0,0 +1 @@
+export declare function mapServiceError(error: unknown): never;

package/lib/utils/mapServiceError.js

@@ -0,0 +1,59 @@
+import { GraphQLError } from 'graphql';
+import * as errors from "../errors.js";
+const errorMap = {
+    ProductNotFoundError: errors.ProductNotFoundError,
+    ProductWrongStatusError: errors.ProductWrongStatusError,
+    ProductWrongTypeError: errors.ProductWrongTypeError,
+    CyclicProductBundlingNotSupportedError: errors.CyclicProductBundlingNotSupportedError,
+    ProductVariationInfinityLoop: errors.ProductVariationInfinityLoop,
+    ProductVariationVectorInvalid: errors.ProductVariationVectorInvalid,
+    ProductVariationVectorAlreadySet: errors.ProductVariationVectorAlreadySet,
+    ProductLinkedToActiveBundleError: errors.ProductLinkedToActiveBundleError,
+    ProductLinkedToActiveVariationError: errors.ProductLinkedToActiveVariationError,
+    ProductLinkedToQuotationError: errors.ProductLinkedToQuotationError,
+    ProductLinkedToEnrollmentError: errors.ProductLinkedToEnrollmentError,
+    EnrollmentNotFoundError: errors.EnrollmentNotFoundError,
+    EnrollmentWrongStatusError: errors.EnrollmentWrongStatusError,
+    EnrollmentPlanUpdateNotAllowedError: errors.EnrollmentWrongStatusError,
+    OrderNotFoundError: errors.OrderNotFoundError,
+    OrderWrongStatusError: errors.OrderWrongStatusError,
+    OrderItemNotFoundError: errors.OrderItemNotFoundError,
+    OrderQuantityTooLowError: errors.OrderQuantityTooLowError,
+    OrderPaymentNotFoundError: errors.OrderPaymentNotFoundError,
+    OrderWrongPaymentStatusError: errors.OrderWrongPaymentStatusError,
+    OrderDeliveryNotFoundError: errors.OrderDeliveryNotFoundError,
+    OrderWrongDeliveryStatusError: errors.OrderWrongDeliveryStatusError,
+    QuotationNotFoundError: errors.QuotationNotFoundError,
+    QuotationWrongStatusError: errors.QuotationWrongStatusError,
+    QuotationItemConfigurationError: errors.QuotationItemConfigurationError,
+    BookmarkNotFoundError: errors.BookmarkNotFoundError,
+    MultipleBookmarksFound: errors.MultipleBookmarksFound,
+    BookmarkAlreadyExistsError: errors.BookmarkAlreadyExistsError,
+    OrderDiscountCodeAlreadyPresentError: errors.OrderDiscountCodeAlreadyPresentError,
+    OrderDiscountCodeNotValidError: errors.OrderDiscountCodeNotValidError,
+    UserNotFoundError: errors.UserNotFoundError,
+    ImpersonatingAdminUserError: errors.ImpersonatingAdminUserError,
+    InvalidEmailVerificationTokenError: errors.InvalidEmailVerificationTokenError,
+    UsernameOrEmailRequiredError: errors.UsernameOrEmailRequiredError,
+    PasswordOrWebAuthnPublicKeyRequiredError: errors.PasswordOrWebAuthnPublicKeyRequiredError,
+    EmailAlreadyExistsError: errors.EmailAlreadyExistsError,
+    UsernameAlreadyExistsError: errors.UsernameAlreadyExistsError,
+    PasswordInvalidError: errors.PasswordInvalidError,
+    WebAuthnVerificationFailedError: errors.WebAuthnVerificationFailedError,
+    AuthOperationFailedError: errors.AuthOperationFailedError,
+    InvalidCredentialsError: errors.InvalidCredentialsError,
+    InvalidResetTokenError: errors.InvalidResetTokenError,
+    InvalidIdError: errors.InvalidIdError,
+    ProviderConfigurationInvalid: errors.ProviderConfigurationInvalid,
+};
+export function mapServiceError(error) {
+    if (error instanceof GraphQLError) {
+        throw error;
+    }
+    const serviceError = error;
+    const ErrorClass = serviceError.code ? errorMap[serviceError.code] : undefined;
+    if (ErrorClass) {
+        throw new ErrorClass(serviceError.data);
+    }
+    throw error;
+}

package/lib/utils/maskError.d.ts

@@ -0,0 +1 @@
+export declare function createMaskError(isDev: boolean): (error: unknown, message: string) => Error;

package/lib/utils/maskError.js

@@ -0,0 +1,22 @@
+import { GraphQLError } from 'graphql';
+import { maskError as yogaMaskError } from 'graphql-yoga';
+function isKnownError(error) {
+    return error instanceof Error && 'code' in error && typeof error.code === 'string';
+}
+export function createMaskError(isDev) {
+    return function maskError(error, message) {
+        const originalError = error instanceof GraphQLError ? error.originalError || error : error;
+        if (error instanceof GraphQLError && error.extensions?.code) {
+            return error;
+        }
+        if (isKnownError(originalError)) {
+            return new GraphQLError(originalError.message, {
+                extensions: {
+                    code: originalError.code,
+                    ...(originalError.data || {}),
+                },
+            });
+        }
+        return yogaMaskError(error, message, isDev);
+    };
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@unchainedshop/api",
   "description": "GraphQL API layer for the Unchained Engine with Express/Fastify adapters and MCP server",
-  "version": "4.6.1",
+  "version": "4.7.2",
   "main": "lib/api-index.js",
   "types": "lib/api-index.d.ts",
   "type": "module",
@@ -63,22 +63,20 @@
     "@ai-sdk/mcp": "^1",
     "@fastify/cookie": ">= 11 < 12",
     "@fastify/multipart": ">= 9 < 10",
-    "@fastify/session": ">= 11 < 12",
     "@fastify/static": ">= 9 < 10",
     "@modelcontextprotocol/sdk": ">= 1 < 2",
     "ai": ">= 6 < 7",
+    "cookie-parser": ">= 1.4 < 2",
     "express": ">= 5 < 6",
-    "express-session": ">= 1.18 < 2",
     "fastify": ">= 5.2 < 6",
     "graphql-yoga": ">= 5.9 < 6",
-    "multer": ">= 2 < 3",
-    "passport": ">= 0.7 < 1"
+    "multer": ">= 2 < 3"
   },
   "peerDependenciesMeta": {
     "graphql-yoga": {
       "optional": false
     },
-    "express-session": {
+    "cookie-parser": {
       "optional": false
     },
     "@modelcontextprotocol/sdk": {
@@ -99,9 +97,6 @@
     "@fastify/multipart": {
       "optional": true
     },
-    "@fastify/session": {
-      "optional": true
-    },
     "@fastify/static": {
       "optional": true
     },
@@ -110,9 +105,6 @@
     },
     "multer": {
       "optional": true
-    },
-    "passport": {
-      "optional": true
     }
   },
   "dependencies": {
@@ -121,9 +113,10 @@
     "@unchainedshop/logger": "^4.6.0",
     "@unchainedshop/roles": "^4.6.0",
     "@unchainedshop/utils": "^4.6.0",
+    "@whatwg-node/server": "^0.10.18",
     "dataloader": "^2.2.3",
-    "expiry-map": "^2.0.0",
     "graphql-scalars": "^1.24.2",
+    "jose": "^6.0.10",
     "mime": ">= 4 < 5",
     "p-memoize": "^8.0.0",
     "zod": "^3.25.76 || ^4"
@@ -132,18 +125,16 @@
     "@ai-sdk/mcp": "^1.0.5",
     "@fastify/cookie": "^11.0.2",
     "@fastify/multipart": "^9.0.3",
-    "@fastify/session": "^11.1.0",
     "@fastify/static": "^9.0.0",
     "@modelcontextprotocol/sdk": "^1.15.1",
+    "@types/cookie-parser": "^1.4.8",
     "@types/express": "^5.0.3",
-    "@types/express-session": "^1.18.2",
     "@types/node": "^25.0.0",
     "ai": "^6.0.14",
+    "cookie-parser": "^1.4.7",
     "express": "^5.1.0",
-    "express-session": "^1.18.1",
     "fastify": "^5.4.0",
     "multer": "^2.0.1",
-    "passport": "^0.7.0",
     "typescript": "^5.8.3"
   }
 }