@viu/emporix-sdk 2.37.0 → 2.38.0

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @viu/emporix-sdk
 
+## 2.38.0
+
+### Minor Changes
+
+- [#294](https://github.com/viuteam/emporix-sdk/pull/294) [`ebf7e61`](https://github.com/viuteam/emporix-sdk/commit/ebf7e610f21c37e000e96fbe651902860bb0fce0) Thanks [@amnael1](https://github.com/amnael1)! - fix(sdk): send `Emporix-Tenant` on every request
+
+  The tenant is already in the path of nearly every endpoint, so this header looks
+  redundant. It is not: Emporix validates dashboard and IAM user tokens against it
+  and answers **401** without it, even when `Authorization: Bearer …` is correct.
+
+  Found while embedding the SDK in a Management Dashboard perspective. Every read
+  and write failed with 401 despite a valid host-supplied token, and nothing in
+  the request looked wrong — the header is simply absent from the SDK's
+  `buildHeaders`, which is not a diagnosable symptom.
+
+  `@emporix/api-calls`, the client library the Management Dashboard itself uses,
+  sets the header whenever a tenant is known — it is an Emporix convention, not a
+  dashboard-only quirk. So this is unconditional rather than opt-in: `HttpClient`
+  emits it whenever `tenant` is set, and `createCore` always passes it. Every
+  client built through `createEmporixClient` gets it.
+
+  **Behaviour change for every consumer.** Storefront traffic now carries one
+  extra header on each request. It is placed _before_ `RequestOptions.headers`, so
+  a caller can still override it per request — the same escape hatch
+  `Accept-Language` has. Only `Authorization` remains non-negotiable.
+
+  `HttpClientOptions.tenant` is optional so a bare `new HttpClient(...)` stays
+  constructible; the header is then omitted entirely, matching what
+  `@emporix/api-calls` does with an empty tenant.
+
+  Also covers `requestStream` — it shares `buildHeaders`. Token requests
+  (`core/auth.ts`) are unaffected, as with `EmporixConfig.fetch`.
+
 ## 2.37.0
 
 ### Minor Changes

package/dist/availability.d.cts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext, P as PaginatedItems } from './context-DK8jg6y5.cjs';
+import { C as ClientContext, b as AuthContext, P as PaginatedItems } from './context-D64-B1Rz.cjs';
 
 type AvailabilityDto = {
     /**

package/dist/availability.d.ts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext, P as PaginatedItems } from './context-DK8jg6y5.js';
+import { C as ClientContext, b as AuthContext, P as PaginatedItems } from './context-D64-B1Rz.js';
 
 type AvailabilityDto = {
     /**

package/dist/cart.d.cts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.cjs';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.cjs';
 
 /**
  * Access control identifier that determines who can view or manage the cart.

package/dist/cart.d.ts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.js';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.js';
 
 /**
  * Access control identifier that determines who can view or manage the cart.

package/dist/category.d.cts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext, P as PaginatedItems } from './context-DK8jg6y5.cjs';
+import { C as ClientContext, b as AuthContext, P as PaginatedItems } from './context-D64-B1Rz.cjs';
 import { a as QueryFor } from './query-mLQs2WFr.cjs';
 import { Product } from './product.cjs';
 

package/dist/category.d.ts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext, P as PaginatedItems } from './context-DK8jg6y5.js';
+import { C as ClientContext, b as AuthContext, P as PaginatedItems } from './context-D64-B1Rz.js';
 import { a as QueryFor } from './query-mLQs2WFr.js';
 import { Product } from './product.js';
 

package/dist/checkout.d.cts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.cjs';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.cjs';
 
 /**
  * Information about the customer's address.

package/dist/checkout.d.ts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.js';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.js';
 
 /**
  * Information about the customer's address.

package/dist/companies.d.cts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.cjs';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.cjs';
 import { L as LegalEntity, e as LegalEntityCreate, f as LegalEntityUpdate } from './types.gen-fWB4nrso.cjs';
 export { A as AccountLimit, d as CustomerGroup, g as LegalInfo } from './types.gen-fWB4nrso.cjs';
 

package/dist/companies.d.ts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.js';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.js';
 import { L as LegalEntity, e as LegalEntityCreate, f as LegalEntityUpdate } from './types.gen-fWB4nrso.js';
 export { A as AccountLimit, d as CustomerGroup, g as LegalInfo } from './types.gen-fWB4nrso.js';
 

package/dist/contacts.d.cts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.cjs';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.cjs';
 import { C as ContactAssignment, a as ContactAssignmentCreate, b as ContactAssignmentUpdate } from './types.gen-fWB4nrso.cjs';
 
 /**

package/dist/contacts.d.ts

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.js';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.js';
 import { C as ContactAssignment, a as ContactAssignmentCreate, b as ContactAssignmentUpdate } from './types.gen-fWB4nrso.js';
 
 /**

package/dist/{context-DK8jg6y5.d.cts → context-D64-B1Rz.d.cts}

@@ -384,6 +384,19 @@ interface HttpResult<T> {
 /** Construction options for {@link HttpClient}. */
 interface HttpClientOptions {
     host: string;
+    /**
+     * Tenant, emitted as `Emporix-Tenant` on every request.
+     *
+     * The tenant is already in the path of nearly every endpoint, so this looks
+     * redundant — it is not. Emporix validates dashboard/IAM user tokens against
+     * this header and answers 401 without it, even when `Authorization` is
+     * correct. `@emporix/api-calls`, the client library the Management Dashboard
+     * itself uses, sets it whenever a tenant is known.
+     *
+     * Optional so a bare `new HttpClient(...)` stays constructible; every client
+     * built through `createCore` passes it.
+     */
+    tenant?: string;
     provider: TokenProvider;
     logger: Logger;
     retry: {

package/dist/{context-DK8jg6y5.d.ts → context-D64-B1Rz.d.ts}

@@ -384,6 +384,19 @@ interface HttpResult<T> {
 /** Construction options for {@link HttpClient}. */
 interface HttpClientOptions {
     host: string;
+    /**
+     * Tenant, emitted as `Emporix-Tenant` on every request.
+     *
+     * The tenant is already in the path of nearly every endpoint, so this looks
+     * redundant — it is not. Emporix validates dashboard/IAM user tokens against
+     * this header and answers 401 without it, even when `Authorization` is
+     * correct. `@emporix/api-calls`, the client library the Management Dashboard
+     * itself uses, sets it whenever a tenant is known.
+     *
+     * Optional so a bare `new HttpClient(...)` stays constructible; every client
+     * built through `createCore` passes it.
+     */
+    tenant?: string;
     provider: TokenProvider;
     logger: Logger;
     retry: {

package/dist/{customer-groups-BfHDqExS.d.cts → customer-groups-B6xrwf59.d.cts}

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.cjs';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.cjs';
 
 /**
  * Access control metadata.

package/dist/{customer-groups-Cs6-Cwzg.d.ts → customer-groups-YZg22bFc.d.ts}

@@ -1,4 +1,4 @@
-import { C as ClientContext, b as AuthContext } from './context-DK8jg6y5.js';
+import { C as ClientContext, b as AuthContext } from './context-D64-B1Rz.js';
 
 /**
  * Access control metadata.

package/dist/customer-groups.d.cts

@@ -1,2 +1,2 @@
-export { g as CustomerGroupsService, j as IamGroup, c as IamGroupMemberAssignment } from './customer-groups-BfHDqExS.cjs';
-import './context-DK8jg6y5.cjs';
+export { g as CustomerGroupsService, j as IamGroup, c as IamGroupMemberAssignment } from './customer-groups-B6xrwf59.cjs';
+import './context-D64-B1Rz.cjs';

package/dist/customer-groups.d.ts

@@ -1,2 +1,2 @@
-export { g as CustomerGroupsService, j as IamGroup, c as IamGroupMemberAssignment } from './customer-groups-Cs6-Cwzg.js';
-import './context-DK8jg6y5.js';
+export { g as CustomerGroupsService, j as IamGroup, c as IamGroupMemberAssignment } from './customer-groups-YZg22bFc.js';
+import './context-D64-B1Rz.js';

package/dist/customer.d.cts

@@ -1,4 +1,4 @@
-import { C as ClientContext, A as AnonymousSession, b as AuthContext } from './context-DK8jg6y5.cjs';
+import { C as ClientContext, A as AnonymousSession, b as AuthContext } from './context-D64-B1Rz.cjs';
 
 type AccountId = {
     /**

package/dist/customer.d.ts

@@ -1,4 +1,4 @@
-import { C as ClientContext, A as AnonymousSession, b as AuthContext } from './context-DK8jg6y5.js';
+import { C as ClientContext, A as AnonymousSession, b as AuthContext } from './context-D64-B1Rz.js';
 
 type AccountId = {
     /**

package/dist/index.cjs

@@ -741,6 +741,10 @@ var HttpClient = class {
   doFetch;
   buildHeaders(o, token, isFormData) {
     return {
+      // Before `o.headers` on purpose: a caller may override the tenant for a
+      // single request, the way `Accept-Language` can be overridden. Only
+      // `Authorization` is non-negotiable.
+      ...this.opts.tenant !== void 0 ? { "Emporix-Tenant": this.opts.tenant } : {},
       ...this.opts.requestContext?.language ? { "Accept-Language": this.opts.requestContext.language } : {},
       ...o.headers ?? {},
       Authorization: `Bearer ${token}`,
@@ -995,7 +999,7 @@ var HttpClient = class {
 };
 
 // package.json
-var version = "2.37.0";
+var version = "2.38.0";
 
 // src/version.ts
 var SDK_VERSION = version;
@@ -1029,6 +1033,7 @@ function createCore(config) {
     logger: root.child({ service }),
     http: new HttpClient({
       host: cfg.host,
+      tenant: cfg.tenant,
       provider: tokenProvider,
       logger: root.child({ service: "http" }),
       retry: cfg.retry,