customer-registration 0.0.111 → 0.0.113

package/.medusa/server/src/workflows/change-password.js

@@ -6,15 +6,12 @@ const utils_1 = require("@medusajs/framework/utils");
 const password_validation_1 = require("../utils/password-validation");
 const password_hashing_1 = require("../utils/password-hashing");
 const validatePasswordStep = (0, workflows_sdk_1.createStep)("validate-password", async ({ new_password, confirm_password }) => {
-    // Validate password strength
     (0, password_validation_1.validatePasswordStrength)(new_password);
-    // Validate passwords match
     (0, password_validation_1.validatePasswordMatch)(new_password, confirm_password);
     return new workflows_sdk_1.StepResponse({ validated: true });
 });
 const verifyCustomerStep = (0, workflows_sdk_1.createStep)("verify-customer", async ({ customer_id }, { container }) => {
     const customerService = container.resolve(utils_1.Modules.CUSTOMER);
-    // Verify customer exists
     const customer = await customerService.retrieveCustomer(customer_id);
     if (!customer) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer not found");
@@ -22,96 +19,75 @@ const verifyCustomerStep = (0, workflows_sdk_1.createStep)("verify-customer", as
     return new workflows_sdk_1.StepResponse({ customer_id, verified: true });
 });
 const verifyOldPasswordStep = (0, workflows_sdk_1.createStep)("verify-old-password", async ({ customer_id, old_password }, { container }) => {
-    // Get customer to retrieve email
     const customerService = container.resolve(utils_1.Modules.CUSTOMER);
     const customer = await customerService.retrieveCustomer(customer_id);
-    if (!customer || !customer.email) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer not found or email missing");
+    if (!customer) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer not found");
+    }
+    // Resolve provider and entity_id — supports both emailpass and phonepass
+    const provider = customer.email ? "emailpass" : "phonepass";
+    const entity_id = customer.email
+        ? customer.email.toLowerCase()
+        : customer.phone;
+    if (!entity_id) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer has no email or phone — cannot verify password");
     }
-    // Get PostgreSQL connection (Knex instance) from container
     const knex = container.resolve(utils_1.ContainerRegistrationKeys.PG_CONNECTION);
-    // Find provider_identity by entity_id (customer email) and provider
-    const providerIdentityResult = await knex.raw(`SELECT id, provider_metadata
+    const result = await knex.raw(`SELECT provider_metadata
        FROM provider_identity
-       WHERE entity_id = ? AND provider = 'emailpass'
-       LIMIT 1`, [customer.email.toLowerCase()]);
-    const providerIdentity = providerIdentityResult.rows?.[0] || providerIdentityResult[0]?.[0];
+       WHERE entity_id = ? AND provider = ?
+       LIMIT 1`, [entity_id, provider]);
+    const providerIdentity = result.rows?.[0] ?? result[0]?.[0];
     if (!providerIdentity) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Provider identity not found for customer");
     }
-    // Get password hash from provider_metadata
-    const providerMetadata = providerIdentity.provider_metadata || {};
-    const passwordHash = providerMetadata.password;
+    const passwordHash = providerIdentity.provider_metadata?.password;
     if (!passwordHash) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "No password set for this account");
     }
-    // Verify old password using scrypt (matching Medusa's format)
     const isValid = await (0, password_hashing_1.verifyPassword)(old_password, passwordHash);
     if (!isValid) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Current password is incorrect");
     }
     return new workflows_sdk_1.StepResponse({ verified: true });
 });
-const hashPasswordStep = (0, workflows_sdk_1.createStep)("hash-password", async ({ password }) => {
-    // Use scrypt to match Medusa's password hashing format
-    const passwordHash = await (0, password_hashing_1.hashPassword)(password);
-    return new workflows_sdk_1.StepResponse({ password_hash: passwordHash });
-});
-const updatePasswordStep = (0, workflows_sdk_1.createStep)("update-password", async ({ customer_id, password_hash }, { container }) => {
-    // Get customer to retrieve email
+const changePasswordUpdateStep = (0, workflows_sdk_1.createStep)("change-password-update", async ({ customer_id, new_password }, { container }) => {
     const customerService = container.resolve(utils_1.Modules.CUSTOMER);
     const customer = await customerService.retrieveCustomer(customer_id);
-    if (!customer || !customer.email) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer not found or email missing");
+    if (!customer) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer not found");
     }
-    // Get PostgreSQL connection (Knex instance) from container
-    const knex = container.resolve(utils_1.ContainerRegistrationKeys.PG_CONNECTION);
-    // Find provider_identity by entity_id (customer email) and provider
-    const providerIdentityResult = await knex.raw(`SELECT id, provider_metadata
-       FROM provider_identity
-       WHERE entity_id = ? AND provider = 'emailpass'
-       LIMIT 1`, [customer.email.toLowerCase()]);
-    const providerIdentity = providerIdentityResult.rows?.[0] || providerIdentityResult[0]?.[0];
-    if (!providerIdentity) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Provider identity not found for customer");
+    // Resolve provider and entity_id — supports both emailpass and phonepass
+    const provider = customer.email ? "emailpass" : "phonepass";
+    const entity_id = customer.email
+        ? customer.email.toLowerCase()
+        : customer.phone;
+    if (!entity_id) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer has no email or phone — cannot update password");
+    }
+    // Delegate to AUTH module — it handles hashing internally
+    const authService = container.resolve(utils_1.Modules.AUTH);
+    const updateResult = await authService.updateProvider(provider, {
+        entity_id,
+        password: new_password,
+    });
+    if (!updateResult.success) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, updateResult.error || "Failed to update password");
     }
-    // Update password hash in provider_metadata
-    await knex.raw(`UPDATE provider_identity 
-       SET provider_metadata = jsonb_set(
-         COALESCE(provider_metadata, '{}'::jsonb),
-         '{password}',
-         to_jsonb(?::text)
-       ),
-       updated_at = NOW()
-       WHERE id = ?`, [password_hash, providerIdentity.id]);
     return new workflows_sdk_1.StepResponse({ customer_id, success: true });
 });
 exports.changePasswordWorkflow = (0, workflows_sdk_1.createWorkflow)("change-password", (input) => {
-    // Validate password strength and match (runs during execution)
     validatePasswordStep({
         new_password: input.new_password,
         confirm_password: input.confirm_password,
     });
-    // Verify customer exists
-    const { customer_id } = verifyCustomerStep({
-        customer_id: input.customer_id,
-    });
-    // Verify old password
-    verifyOldPasswordStep({
+    const { customer_id } = verifyCustomerStep({ customer_id: input.customer_id });
+    verifyOldPasswordStep({ customer_id, old_password: input.old_password });
+    const { customer_id: updated_customer_id } = changePasswordUpdateStep({
         customer_id,
-        old_password: input.old_password,
-    });
-    // Hash the new password
-    const { password_hash } = hashPasswordStep({ password: input.new_password });
-    // Update password hash in database
-    const { customer_id: updated_customer_id } = updatePasswordStep({
-        customer_id,
-        password_hash,
-    });
-    return new workflows_sdk_1.WorkflowResponse({
-        customer_id: updated_customer_id,
-        success: true,
+        new_password: input.new_password,
     });
+    return new workflows_sdk_1.WorkflowResponse({ customer_id: updated_customer_id, success: true });
 });
 exports.default = exports.changePasswordWorkflow;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/send-contact-change-otp-workflow.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendContactChangeOtpWorkflow = void 0;
+const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
+const steps_1 = require("./steps");
+/**
+ * Generates an OTP whose JWT payload contains the `new_value` (new phone or
+ * email) and sends it to that new contact address — NOT the current one on
+ * the customer record.  No metadata staging is required.
+ */
+exports.sendContactChangeOtpWorkflow = (0, workflows_sdk_1.createWorkflow)("send-contact-change-otp", (input) => {
+    const { customer } = (0, steps_1.retrieveCustomerStep)({ customer_id: input.customer_id });
+    const { channelConfig } = (0, steps_1.resolveChannelConfigStep)({ type: input.otp_type });
+    const { token, expires_at, code } = (0, steps_1.generateContactChangeOtpStep)({
+        customer_id: input.customer_id,
+        type: input.otp_type,
+        new_value: input.new_value,
+        contact_type: input.contact_type,
+    });
+    const { templateData } = (0, steps_1.prepareTemplateDataStep)({
+        customer,
+        otpCode: code,
+    });
+    const { renderedContent } = (0, steps_1.loadTemplateStep)({
+        templatePath: channelConfig.template || null,
+        templateData,
+    });
+    // Send OTP to the NEW contact value, not customer.phone / customer.email
+    const notificationInput = (0, workflows_sdk_1.transform)({ input, channelConfig, templateData, renderedContent }, (data) => ({
+        to: data.input.new_value,
+        channel: data.channelConfig.channel,
+        channelConfig: data.channelConfig,
+        templateData: data.templateData,
+        renderedContent: data.renderedContent,
+        contactType: data.input.contact_type,
+    }));
+    (0, steps_1.sendNotificationStep)(notificationInput);
+    return new workflows_sdk_1.WorkflowResponse({ token, expires_at });
+});
+exports.default = exports.sendContactChangeOtpWorkflow;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/steps/determine-contact-method-step.js

@@ -7,7 +7,13 @@ exports.determineContactMethodStep = (0, workflows_sdk_1.createStep)("determine-
     const { customer, channelConfig } = input;
     const channelName = channelConfig.channel.toLowerCase();
     const contactType = channelName === "email" ? "email" : "phone";
-    const contactValue = contactType === "email" ? customer.email : customer.phone;
+    let contactValue;
+    if (contactType === "email") {
+        contactValue = customer.email;
+    }
+    else {
+        contactValue = customer.phone;
+    }
     if (!contactValue) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, contactType === "email"
             ? "Customer email is required for this verification type"
@@ -18,4 +24,4 @@ exports.determineContactMethodStep = (0, workflows_sdk_1.createStep)("determine-
         contactType,
     });
 });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/steps/generate-contact-change-otp-step.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateContactChangeOtpStep = void 0;
+const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
+const utils_1 = require("@medusajs/framework/utils");
+const otp_verification_1 = require("../../modules/otp-verification");
+/**
+ * Generates an OTP for a contact-change request.
+ * The new_value and contact_type are embedded in the signed JWT so that no
+ * metadata staging on the customer record is required.
+ */
+exports.generateContactChangeOtpStep = (0, workflows_sdk_1.createStep)("generate-contact-change-otp", async (input, { container }) => {
+    const config = container.resolve(utils_1.ContainerRegistrationKeys.CONFIG_MODULE);
+    const jwtSecret = config?.projectConfig
+        ?.http?.jwtSecret || "supersecret";
+    const otpService = container.resolve(otp_verification_1.OTP_VERIFICATION_MODULE);
+    const otpResult = await otpService.generateOtpForContactChange({ customer_id: input.customer_id, type: input.type }, jwtSecret, input.new_value, input.contact_type);
+    return new workflows_sdk_1.StepResponse({
+        token: otpResult.token,
+        expires_at: otpResult.expires_at,
+        code: otpResult.code,
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/steps/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.updatePasswordStep = exports.findCustomerByEmailStep = exports.prepareTemplateDataStep = exports.generateOtpStep = exports.determineContactMethodStep = exports.retrieveCustomerStep = exports.sendNotificationStep = exports.loadTemplateStep = exports.resolveChannelConfigStep = void 0;
+exports.syncPhonepassEntityIdStep = exports.updatePasswordStep = exports.findCustomerByEmailStep = exports.prepareTemplateDataStep = exports.generateContactChangeOtpStep = exports.generateOtpStep = exports.determineContactMethodStep = exports.retrieveCustomerStep = exports.sendNotificationStep = exports.loadTemplateStep = exports.resolveChannelConfigStep = void 0;
 var resolve_channel_config_step_1 = require("./resolve-channel-config-step");
 Object.defineProperty(exports, "resolveChannelConfigStep", { enumerable: true, get: function () { return resolve_channel_config_step_1.resolveChannelConfigStep; } });
 var load_template_step_1 = require("./load-template-step");
@@ -13,10 +13,14 @@ var determine_contact_method_step_1 = require("./determine-contact-method-step")
 Object.defineProperty(exports, "determineContactMethodStep", { enumerable: true, get: function () { return determine_contact_method_step_1.determineContactMethodStep; } });
 var generate_otp_step_1 = require("./generate-otp-step");
 Object.defineProperty(exports, "generateOtpStep", { enumerable: true, get: function () { return generate_otp_step_1.generateOtpStep; } });
+var generate_contact_change_otp_step_1 = require("./generate-contact-change-otp-step");
+Object.defineProperty(exports, "generateContactChangeOtpStep", { enumerable: true, get: function () { return generate_contact_change_otp_step_1.generateContactChangeOtpStep; } });
 var prepare_template_data_step_1 = require("./prepare-template-data-step");
 Object.defineProperty(exports, "prepareTemplateDataStep", { enumerable: true, get: function () { return prepare_template_data_step_1.prepareTemplateDataStep; } });
 var find_customer_by_email_step_1 = require("./find-customer-by-email-step");
 Object.defineProperty(exports, "findCustomerByEmailStep", { enumerable: true, get: function () { return find_customer_by_email_step_1.findCustomerByEmailStep; } });
 var update_password_step_1 = require("./update-password-step");
 Object.defineProperty(exports, "updatePasswordStep", { enumerable: true, get: function () { return update_password_step_1.updatePasswordStep; } });
-//# sourceMappingURL=data:application/json;base64,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
+var sync_phonepass_entity_id_step_1 = require("./sync-phonepass-entity-id-step");
+Object.defineProperty(exports, "syncPhonepassEntityIdStep", { enumerable: true, get: function () { return sync_phonepass_entity_id_step_1.syncPhonepassEntityIdStep; } });
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/steps/resolve-channel-config-step.js

@@ -4,6 +4,7 @@ exports.resolveChannelConfigStep = void 0;
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
 const utils_1 = require("@medusajs/framework/utils");
 const otp_verification_1 = require("../../modules/otp-verification");
+const otp_verification_2 = require("../../modules/otp-verification/models/otp-verification");
 exports.resolveChannelConfigStep = (0, workflows_sdk_1.createStep)("resolve-channel-config", async (input, { container }) => {
     const config = container.resolve(utils_1.ContainerRegistrationKeys.CONFIG_MODULE);
     const otpService = container.resolve(otp_verification_1.OTP_VERIFICATION_MODULE);
@@ -11,8 +12,16 @@ exports.resolveChannelConfigStep = (0, workflows_sdk_1.createStep)("resolve-chan
     if (!channelConfig || !channelConfig.channel) {
         throw new Error(`Channel configuration not found for type: ${input.type}. Please configure ${input.type} in plugin options with a 'channel' property.`);
     }
+    const deletionPurposes = [
+        otp_verification_2.OtpPurpose.ACCOUNT_DELETION_REQUEST,
+        otp_verification_2.OtpPurpose.ACCOUNT_DELETION_CANCEL,
+    ];
+    if (deletionPurposes.includes(input.type) &&
+        (!channelConfig.template || typeof channelConfig.template !== "string")) {
+        throw new Error(`account_deletion_request.template and account_deletion_cancel.template must be set in plugin options for account deletion flows.`);
+    }
     return new workflows_sdk_1.StepResponse({
         channelConfig,
     });
 });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVzb2x2ZS1jaGFubmVsLWNvbmZpZy1zdGVwLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vc3JjL3dvcmtmbG93cy9zdGVwcy9yZXNvbHZlLWNoYW5uZWwtY29uZmlnLXN0ZXAudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEscUVBQTRFO0FBQzVFLHFEQUFxRTtBQUNyRSxxRUFBd0U7QUFFeEUsNkZBQW1GO0FBVXRFLFFBQUEsd0JBQXdCLEdBQUcsSUFBQSwwQkFBVSxFQUNoRCx3QkFBd0IsRUFDeEIsS0FBSyxFQUFFLEtBQWdDLEVBQUUsRUFBRSxTQUFTLEVBQUUsRUFBRSxFQUFFO0lBQ3hELE1BQU0sTUFBTSxHQUFHLFNBQVMsQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsYUFBYSxDQUFDLENBQUE7SUFDekUsTUFBTSxVQUFVLEdBQUcsU0FBUyxDQUFDLE9BQU8sQ0FDbEMsMENBQXVCLENBQ3hCLENBQUE7SUFFRCxNQUFNLGFBQWEsR0FBRyxVQUFVLENBQUMsNEJBQTRCLENBQzNELEtBQUssQ0FBQyxJQUFJLEVBQ1YsTUFBTSxDQUNBLENBQUE7SUFFUixJQUFJLENBQUMsYUFBYSxJQUFJLENBQUMsYUFBYSxDQUFDLE9BQU8sRUFBRSxDQUFDO1FBQzdDLE1BQU0sSUFBSSxLQUFLLENBQ2IsNkNBQTZDLEtBQUssQ0FBQyxJQUFJLHNCQUFzQixLQUFLLENBQUMsSUFBSSwrQ0FBK0MsQ0FDdkksQ0FBQTtJQUNILENBQUM7SUFFRCxNQUFNLGdCQUFnQixHQUFHO1FBQ3ZCLDZCQUFVLENBQUMsd0JBQXdCO1FBQ25DLDZCQUFVLENBQUMsdUJBQXVCO0tBQ25DLENBQUE7SUFDRCxJQUNFLGdCQUFnQixDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDO1FBQ3JDLENBQUMsQ0FBQyxhQUFhLENBQUMsUUFBUSxJQUFJLE9BQU8sYUFBYSxDQUFDLFFBQVEsS0FBSyxRQUFRLENBQUMsRUFDdkUsQ0FBQztRQUNELE1BQU0sSUFBSSxLQUFLLENBQ2Isa0lBQWtJLENBQ25JLENBQUE7SUFDSCxDQUFDO0lBRUQsT0FBTyxJQUFJLDRCQUFZLENBQTZCO1FBQ2xELGFBQWE7S0FDZCxDQUFDLENBQUE7QUFDSixDQUFDLENBQ0YsQ0FBQSJ9

package/.medusa/server/src/workflows/steps/send-notification-step.js

@@ -123,43 +123,33 @@ function prepareSmsPayload(to, channel, renderedContent) {
 exports.sendNotificationStep = (0, workflows_sdk_1.createStep)("send-notification", async (input, { container }) => {
     let payload;
     if (input.contactType === "email") {
-        console.log("[send-notification] Preparing email payload");
         payload = prepareEmailPayload(input.to, input.renderedContent, input.channelConfig, input.templateData);
-        console.log("Email payload:", JSON.stringify(payload, null, 2));
     }
     else {
-        console.log("[send-notification] Preparing SMS payload");
         payload = prepareSmsPayload(input.to, input.channel, input.renderedContent);
-        console.log("SMS payload:", JSON.stringify(payload, null, 2));
     }
     // Use notification service with payload structure matching sendNotificationsStep
     const notificationService = container.resolve(utils_1.Modules.NOTIFICATION);
     if (!notificationService) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Notification service is not configured.");
     }
-    console.log("=== [send-notification] Attempting to send ===");
-    console.log("Payload:", JSON.stringify(payload, null, 2));
     // Use create method with payload structure matching @medusajs/medusa/core-flows
     try {
         if (typeof notificationService.create === "function") {
             await notificationService.create(payload);
-            console.log("[send-notification] Successfully sent using notificationService.create");
         }
         else if (typeof notificationService.createNotifications === "function") {
             await notificationService.createNotifications([payload]);
-            console.log("[send-notification] Successfully sent using notificationService.createNotifications");
         }
         else {
             throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, "Notification service does not support sending notifications.");
         }
     }
     catch (error) {
-        console.error("[send-notification] Failed to send notification:", error);
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, `Failed to send notification: ${error instanceof Error ? error.message : String(error)}`);
     }
-    console.log("=== [send-notification] Notification Sent Successfully ===");
     return new workflows_sdk_1.StepResponse({
         sent: true,
     });
 });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2VuZC1ub3RpZmljYXRpb24tc3RlcC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy93b3JrZmxvd3Mvc3RlcHMvc2VuZC1ub3RpZmljYXRpb24tc3RlcC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxxRUFBNEU7QUFDNUUscURBQWdFO0FBQ2hFLDRFQUFtRztBQUNuRywyQ0FBNEI7QUFnQjVCOzs7R0FHRztBQUNILFNBQVMsbUJBQW1CLENBQzFCLEVBQVUsRUFDVixlQUE4QixFQUM5QixhQUFrQixFQUNsQixZQUEwQjtJQUUxQixpRUFBaUU7SUFDakUsSUFBSSxTQUFTLEdBQUcsZUFBZSxDQUFBO0lBQy9CLElBQUksQ0FBQyxTQUFTLElBQUksWUFBWSxDQUFDLEdBQUcsRUFBRSxDQUFDO1FBQ25DLHlDQUF5QztRQUN6QywwRkFBMEY7UUFDMUYsdUVBQXVFO1FBQ3ZFLE1BQU0sbUJBQW1CLEdBQUcsSUFBSSxDQUFDLE9BQU8sQ0FDdEMsU0FBUyxFQUNULHNEQUFzRCxDQUN2RCxDQUFBO1FBRUQsU0FBUyxHQUFHLElBQUEsZ0NBQXFCLEVBQUMsbUJBQW1CLEVBQUU7WUFDckQsR0FBRyxFQUFFLFlBQVksQ0FBQyxHQUFHO1lBQ3JCLGFBQWEsRUFBRSxZQUFZLENBQUMsYUFBYSxJQUFJLFVBQVU7U0FDeEQsQ0FBQyxDQUFBO1FBRUYscURBQXFEO1FBQ3JELElBQUksQ0FBQyxTQUFTLEVBQUUsQ0FBQztZQUNmLE1BQU0sWUFBWSxHQUFHLFlBQVksQ0FBQyxhQUFhLElBQUksVUFBVSxDQUFBO1lBQzdELFNBQVMsR0FBRzs7Ozt1QkFJSyxZQUFZOzs7Z0JBR25CLFlBQVksQ0FBQyxHQUFHOzs7Ozs7O09BT3pCLENBQUMsSUFBSSxFQUFFLENBQUE7UUFDVixDQUFDO0lBQ0gsQ0FBQztJQUVELHNDQUFzQztJQUN0QyxNQUFNLFNBQVMsR0FBRyxTQUFTO1FBQ3pCLENBQUMsQ0FBQyxTQUFTO2FBQ04sT0FBTyxDQUFDLFVBQVUsRUFBRSxFQUFFLENBQUMsQ0FBQyxtQkFBbUI7YUFDM0MsT0FBTyxDQUFDLE1BQU0sRUFBRSxHQUFHLENBQUMsQ0FBQyxzQkFBc0I7YUFDM0MsSUFBSSxFQUFFO1FBQ1gsQ0FBQyxDQUFDLElBQUksQ0FBQTtJQUVSLE1BQU0sT0FBTyxHQUFRO1FBQ25CLEVBQUU7UUFDRixPQUFPLEVBQUUsYUFBYSxDQUFDLE9BQU8sSUFBSSxPQUFPO1FBQ3pDLElBQUksRUFBRTtZQUNKLE9BQU8sRUFBRSxhQUFhLENBQUMsT0FBTyxJQUFJLHFCQUFxQjtZQUN2RCxtRUFBbUU7WUFDbkUsR0FBRyxZQUFZO1NBQ2hCO0tBQ0YsQ0FBQTtJQUVELDhFQUE4RTtJQUM5RSxJQUFJLFNBQVMsRUFBRSxDQUFDO1FBQ2QsK0VBQStFO1FBQy9FLE9BQU8sQ0FBQyxJQUFJLEdBQUcsU0FBUyxDQUFBO1FBQ3hCLE9BQU8sQ0FBQyxJQUFJLEdBQUcsU0FBUyxJQUFJLFNBQVMsQ0FBQyxPQUFPLENBQUMsVUFBVSxFQUFFLEVBQUUsQ0FBQyxDQUFDLElBQUksRUFBRSxDQUFBO1FBRXBFLHlEQUF5RDtRQUN6RCxPQUFPLENBQUMsSUFBSSxHQUFHLFNBQVMsQ0FBQTtRQUN4QixPQUFPLENBQUMsUUFBUSxHQUFHLFNBQVMsQ0FBQTtRQUU1QiwwREFBMEQ7UUFDMUQsT0FBTyxDQUFDLElBQUksQ0FBQyxJQUFJLEdBQUcsU0FBUyxDQUFBO1FBQzdCLE9BQU8sQ0FBQyxJQUFJLENBQUMsSUFBSSxHQUFHLFNBQVMsSUFBSSxTQUFTLENBQUMsT0FBTyxDQUFDLFVBQVUsRUFBRSxFQUFFLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FBQTtJQUMzRSxDQUFDO0lBRUQsT0FBTyxPQUFPLENBQUE7QUFDaEIsQ0FBQztBQUVEOztHQUVHO0FBQ0gsU0FBUyxpQkFBaUIsQ0FDeEIsRUFBVSxFQUNWLE9BQWUsRUFDZixlQUE4QjtJQUU5QixNQUFNLE9BQU8sR0FBUTtRQUNuQixFQUFFO1FBQ0YsT0FBTyxFQUFFLE9BQU8sSUFBSSxLQUFLO1FBQ3pCLE9BQU8sRUFBRTtZQUNQLElBQUksRUFBRSxlQUFlO1NBQ3RCO0tBQ0YsQ0FBQTtJQUVELE9BQU8sT0FBTyxDQUFBO0FBQ2hCLENBQUM7QUFHRDs7R0FFRztBQUNVLFFBQUEsb0JBQW9CLEdBQUcsSUFBQSwwQkFBVSxFQUM1QyxtQkFBbUIsRUFDbkIsS0FBSyxFQUFFLEtBQTRCLEVBQUUsRUFBRSxTQUFTLEVBQUUsRUFBRSxFQUFFO0lBQ3BELElBQUksT0FBWSxDQUFBO0lBRWhCLElBQUksS0FBSyxDQUFDLFdBQVcsS0FBSyxPQUFPLEVBQUUsQ0FBQztRQUNsQyxPQUFPLEdBQUcsbUJBQW1CLENBQzNCLEtBQUssQ0FBQyxFQUFFLEVBQ1IsS0FBSyxDQUFDLGVBQWUsRUFDckIsS0FBSyxDQUFDLGFBQWEsRUFDbkIsS0FBSyxDQUFDLFlBQVksQ0FDbkIsQ0FBQTtJQUNILENBQUM7U0FBTSxDQUFDO1FBQ04sT0FBTyxHQUFHLGlCQUFpQixDQUN6QixLQUFLLENBQUMsRUFBRSxFQUNSLEtBQUssQ0FBQyxPQUFPLEVBQ2IsS0FBSyxDQUFDLGVBQWUsQ0FDdEIsQ0FBQTtJQUNILENBQUM7SUFFRCxpRkFBaUY7SUFDakYsTUFBTSxtQkFBbUIsR0FBRyxTQUFTLENBQUMsT0FBTyxDQUFDLGVBQU8sQ0FBQyxZQUFZLENBQVEsQ0FBQTtJQUUxRSxJQUFJLENBQUMsbUJBQW1CLEVBQUUsQ0FBQztRQUN6QixNQUFNLElBQUksbUJBQVcsQ0FDbkIsbUJBQVcsQ0FBQyxLQUFLLENBQUMsWUFBWSxFQUM5Qix5Q0FBeUMsQ0FDMUMsQ0FBQTtJQUNILENBQUM7SUFFRCxnRkFBZ0Y7SUFDaEYsSUFBSSxDQUFDO1FBQ0gsSUFBSSxPQUFPLG1CQUFtQixDQUFDLE1BQU0sS0FBSyxVQUFVLEVBQUUsQ0FBQztZQUNyRCxNQUFNLG1CQUFtQixDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsQ0FBQTtRQUMzQyxDQUFDO2FBQU0sSUFBSSxPQUFPLG1CQUFtQixDQUFDLG1CQUFtQixLQUFLLFVBQVUsRUFBRSxDQUFDO1lBQ3pFLE1BQU0sbUJBQW1CLENBQUMsbUJBQW1CLENBQUMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFBO1FBQzFELENBQUM7YUFBTSxDQUFDO1lBQ04sTUFBTSxJQUFJLG1CQUFXLENBQ25CLG1CQUFXLENBQUMsS0FBSyxDQUFDLGdCQUFnQixFQUNsQyw4REFBOEQsQ0FDL0QsQ0FBQTtRQUNILENBQUM7SUFDSCxDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxnQkFBZ0IsRUFDbEMsZ0NBQWdDLEtBQUssWUFBWSxLQUFLLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUN6RixDQUFBO0lBQ0gsQ0FBQztJQUVELE9BQU8sSUFBSSw0QkFBWSxDQUF5QjtRQUM5QyxJQUFJLEVBQUUsSUFBSTtLQUNYLENBQUMsQ0FBQTtBQUNKLENBQUMsQ0FDRixDQUFBIn0=

package/.medusa/server/src/workflows/steps/sync-phonepass-entity-id-step.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.syncPhonepassEntityIdStep = void 0;
+const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
+const utils_1 = require("@medusajs/framework/utils");
+/**
+ * After a customer verifies a new phone number, update the phonepass
+ * provider_identity.entity_id so the customer can log in with the new number.
+ *
+ * This is needed because phonepass.authenticate() looks up the identity by
+ * entity_id. If the customer changed their phone and the entity_id is stale,
+ * login silently fails even though the password is correct.
+ */
+exports.syncPhonepassEntityIdStep = (0, workflows_sdk_1.createStep)("sync-phonepass-entity-id", async (input, { container }) => {
+    const { login_identifier } = input;
+    // Only sync when phonepass is actually used for login
+    if (login_identifier !== "phone" && login_identifier !== "both") {
+        return new workflows_sdk_1.StepResponse({ synced: false, old_phone: null, new_phone: null }, null);
+    }
+    const knex = container.resolve(utils_1.ContainerRegistrationKeys.PG_CONNECTION);
+    // Get the customer's current phone
+    const customerRow = await knex.raw(`SELECT phone FROM customer WHERE id = ? LIMIT 1`, [input.customer_id]);
+    const currentPhone = (customerRow.rows?.[0] ?? customerRow[0]?.[0])?.phone ?? null;
+    if (!currentPhone) {
+        return new workflows_sdk_1.StepResponse({ synced: false, old_phone: null, new_phone: null }, null);
+    }
+    // Find the auth_identity for this customer
+    const authRow = await knex.raw(`SELECT id FROM auth_identity WHERE app_metadata->>'customer_id' = ? LIMIT 1`, [input.customer_id]);
+    const authIdentityId = (authRow.rows?.[0] ?? authRow[0]?.[0])?.id ?? null;
+    if (!authIdentityId) {
+        return new workflows_sdk_1.StepResponse({ synced: false, old_phone: null, new_phone: null }, null);
+    }
+    // Find the phonepass provider_identity linked to this auth identity
+    const piRow = await knex.raw(`SELECT id, entity_id
+       FROM provider_identity
+       WHERE auth_identity_id = ? AND provider = 'phonepass'
+       LIMIT 1`, [authIdentityId]);
+    const pi = piRow.rows?.[0] ?? piRow[0]?.[0] ?? null;
+    if (!pi) {
+        // No phonepass identity exists — nothing to sync
+        return new workflows_sdk_1.StepResponse({ synced: false, old_phone: null, new_phone: currentPhone }, null);
+    }
+    const oldPhone = pi.entity_id;
+    if (oldPhone === currentPhone) {
+        // entity_id is already up to date
+        return new workflows_sdk_1.StepResponse({ synced: false, old_phone: oldPhone, new_phone: currentPhone }, null);
+    }
+    await knex.raw(`UPDATE provider_identity
+       SET entity_id = ?, updated_at = NOW()
+       WHERE id = ?`, [currentPhone, pi.id]);
+    return new workflows_sdk_1.StepResponse({ synced: true, old_phone: oldPhone, new_phone: currentPhone }, { provider_identity_id: pi.id, old_phone: oldPhone });
+}, 
+// Compensation: restore the old entity_id if a later step in the workflow fails.
+// Medusa calls this with `undefined` when no compensation data was set.
+async (compensationData, { container }) => {
+    if (!compensationData)
+        return;
+    const knex = container.resolve(utils_1.ContainerRegistrationKeys.PG_CONNECTION);
+    await knex.raw(`UPDATE provider_identity
+       SET entity_id = ?, updated_at = NOW()
+       WHERE id = ?`, [compensationData.old_phone, compensationData.provider_identity_id]);
+});
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/steps/update-password-step.js

@@ -3,42 +3,34 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.updatePasswordStep = void 0;
 const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
 const utils_1 = require("@medusajs/framework/utils");
-exports.updatePasswordStep = (0, workflows_sdk_1.createStep)("update-password", async ({ customer_id, password_hash }, { container }) => {
+exports.updatePasswordStep = (0, workflows_sdk_1.createStep)("update-password", async ({ customer_id, new_password }, { container }) => {
     if (!customer_id) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Customer ID is required");
     }
-    if (!password_hash) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Password hash is required");
+    if (!new_password) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "New password is required");
     }
-    // Get customer to retrieve email
     const customerService = container.resolve(utils_1.Modules.CUSTOMER);
     const customer = await customerService.retrieveCustomer(customer_id);
-    if (!customer || !customer.email) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer not found or email missing");
+    if (!customer) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer not found");
     }
-    // Get PostgreSQL connection (Knex instance) from container
-    const knex = container.resolve(utils_1.ContainerRegistrationKeys.PG_CONNECTION);
-    // Find provider_identity by entity_id (customer email) and provider
-    const providerIdentityResult = await knex.raw(`SELECT id, provider_metadata
-       FROM provider_identity
-       WHERE entity_id = ? AND provider = 'emailpass'
-       LIMIT 1`, [customer.email.toLowerCase()]);
-    const providerIdentity = providerIdentityResult.rows?.[0] || providerIdentityResult[0]?.[0];
-    if (!providerIdentity) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Provider identity not found for customer");
+    // Resolve provider and entity_id — supports both emailpass and phonepass
+    const provider = customer.email ? "emailpass" : "phonepass";
+    const entity_id = customer.email
+        ? customer.email.toLowerCase()
+        : customer.phone;
+    if (!entity_id) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Customer has no email or phone — cannot update password");
     }
-    // Update password hash in provider_metadata
-    await knex.raw(`UPDATE provider_identity 
-       SET provider_metadata = jsonb_set(
-         COALESCE(provider_metadata, '{}'::jsonb),
-         '{password}',
-         to_jsonb(?::text)
-       ),
-       updated_at = NOW()
-       WHERE id = ?`, [password_hash, providerIdentity.id]);
-    return new workflows_sdk_1.StepResponse({
-        customer_id,
-        success: true,
+    const authService = container.resolve(utils_1.Modules.AUTH);
+    const updateResult = await authService.updateProvider(provider, {
+        entity_id,
+        password: new_password,
     });
+    if (!updateResult.success) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, updateResult.error || "Failed to update password");
+    }
+    return new workflows_sdk_1.StepResponse({ customer_id, success: true });
 });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXBkYXRlLXBhc3N3b3JkLXN0ZXAuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvd29ya2Zsb3dzL3N0ZXBzL3VwZGF0ZS1wYXNzd29yZC1zdGVwLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLHFFQUE0RTtBQUM1RSxxREFBZ0U7QUFjbkQsUUFBQSxrQkFBa0IsR0FBRyxJQUFBLDBCQUFVLEVBQzFDLGlCQUFpQixFQUNqQixLQUFLLEVBQUUsRUFBRSxXQUFXLEVBQUUsWUFBWSxFQUF1QixFQUFFLEVBQUUsU0FBUyxFQUFFLEVBQUUsRUFBRTtJQUMxRSxJQUFJLENBQUMsV0FBVyxFQUFFLENBQUM7UUFDakIsTUFBTSxJQUFJLG1CQUFXLENBQ25CLG1CQUFXLENBQUMsS0FBSyxDQUFDLFlBQVksRUFDOUIseUJBQXlCLENBQzFCLENBQUE7SUFDSCxDQUFDO0lBRUQsSUFBSSxDQUFDLFlBQVksRUFBRSxDQUFDO1FBQ2xCLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxZQUFZLEVBQzlCLDBCQUEwQixDQUMzQixDQUFBO0lBQ0gsQ0FBQztJQUVELE1BQU0sZUFBZSxHQUFHLFNBQVMsQ0FBQyxPQUFPLENBQXlCLGVBQU8sQ0FBQyxRQUFRLENBQUMsQ0FBQTtJQUNuRixNQUFNLFFBQVEsR0FBRyxNQUFNLGVBQWUsQ0FBQyxnQkFBZ0IsQ0FBQyxXQUFXLENBQUMsQ0FBQTtJQUVwRSxJQUFJLENBQUMsUUFBUSxFQUFFLENBQUM7UUFDZCxNQUFNLElBQUksbUJBQVcsQ0FBQyxtQkFBVyxDQUFDLEtBQUssQ0FBQyxTQUFTLEVBQUUsb0JBQW9CLENBQUMsQ0FBQTtJQUMxRSxDQUFDO0lBRUQseUVBQXlFO0lBQ3pFLE1BQU0sUUFBUSxHQUFHLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLFdBQVcsQ0FBQyxDQUFDLENBQUMsV0FBVyxDQUFBO0lBQzNELE1BQU0sU0FBUyxHQUFHLFFBQVEsQ0FBQyxLQUFLO1FBQzlCLENBQUMsQ0FBQyxRQUFRLENBQUMsS0FBSyxDQUFDLFdBQVcsRUFBRTtRQUM5QixDQUFDLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQTtJQUVsQixJQUFJLENBQUMsU0FBUyxFQUFFLENBQUM7UUFDZixNQUFNLElBQUksbUJBQVcsQ0FDbkIsbUJBQVcsQ0FBQyxLQUFLLENBQUMsU0FBUyxFQUMzQix5REFBeUQsQ0FDMUQsQ0FBQTtJQUNILENBQUM7SUFFRCxNQUFNLFdBQVcsR0FBRyxTQUFTLENBQUMsT0FBTyxDQUFDLGVBQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQTtJQUNuRCxNQUFNLFlBQVksR0FBRyxNQUFNLFdBQVcsQ0FBQyxjQUFjLENBQUMsUUFBUSxFQUFFO1FBQzlELFNBQVM7UUFDVCxRQUFRLEVBQUUsWUFBWTtLQUN2QixDQUFDLENBQUE7SUFFRixJQUFJLENBQUMsWUFBWSxDQUFDLE9BQU8sRUFBRSxDQUFDO1FBQzFCLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxnQkFBZ0IsRUFDbEMsWUFBWSxDQUFDLEtBQUssSUFBSSwyQkFBMkIsQ0FDbEQsQ0FBQTtJQUNILENBQUM7SUFFRCxPQUFPLElBQUksNEJBQVksQ0FBdUIsRUFBRSxXQUFXLEVBQUUsT0FBTyxFQUFFLElBQUksRUFBRSxDQUFDLENBQUE7QUFDL0UsQ0FBQyxDQUNGLENBQUEifQ==