customer-registration 0.0.127 → 0.0.128

package/.medusa/server/src/api/middlewares.js

@@ -44,15 +44,10 @@ exports.default = (0, http_1.defineMiddlewares)({
             middlewares: [(0, ip_rate_limit_1.ipRateLimit)({ max: 5, windowMs: 60_000 })],
         },
         {
-            matcher: "/auth/customer/emailotp/send",
-            method: ["POST"],
-            middlewares: [(0, ip_rate_limit_1.ipRateLimit)({ max: 5, windowMs: 60_000 })],
-        },
-        {
-            matcher: "/auth/customer/phoneotp/send",
+            matcher: "/store/customers/otp/send",
             method: ["POST"],
             middlewares: [(0, ip_rate_limit_1.ipRateLimit)({ max: 5, windowMs: 60_000 })],
         },
     ],
 });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/customers/otp/__tests__/send-route.test.js

@@ -0,0 +1,240 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@medusajs/framework/utils");
+const vitest_1 = require("vitest");
+const config_1 = require("../../../../../config");
+const otp_verification_1 = require("../../../../../modules/otp-verification/models/otp-verification");
+const send_email_auth_otp_workflow_1 = __importDefault(require("../../../../../workflows/send-email-auth-otp-workflow"));
+const send_phone_auth_otp_workflow_1 = __importDefault(require("../../../../../workflows/send-phone-auth-otp-workflow"));
+const send_otp_workflow_1 = __importDefault(require("../../../../../workflows/send-otp-workflow"));
+const email_auth_helpers_1 = require("../shared/email-auth-helpers");
+const phone_auth_helpers_1 = require("../shared/phone-auth-helpers");
+const route_1 = require("../send/route");
+vitest_1.vi.mock("../../../../../config", async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        resolveCustomerRegistrationOptions: vitest_1.vi.fn(),
+        isEmailOtpAuthEnabled: vitest_1.vi.fn(),
+        isPhoneOtpAuthEnabled: vitest_1.vi.fn(),
+    };
+});
+vitest_1.vi.mock("../shared/email-auth-helpers", () => ({
+    lookupCustomerByEmail: vitest_1.vi.fn(),
+    normalizeAuthEmail: (email) => email.toLowerCase().trim(),
+}));
+vitest_1.vi.mock("../shared/phone-auth-helpers", () => ({
+    lookupCustomerByPhone: vitest_1.vi.fn(),
+    normalizeAuthPhone: (phone) => phone.trim(),
+}));
+vitest_1.vi.mock("../../../../../workflows/send-email-auth-otp-workflow", () => ({
+    default: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("../../../../../workflows/send-phone-auth-otp-workflow", () => ({
+    default: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("../../../../../workflows/send-otp-workflow", () => ({
+    default: vitest_1.vi.fn(),
+}));
+const mockedIsEmailOtpEnabled = vitest_1.vi.mocked(config_1.isEmailOtpAuthEnabled);
+const mockedIsPhoneOtpEnabled = vitest_1.vi.mocked(config_1.isPhoneOtpAuthEnabled);
+const mockedLookupEmail = vitest_1.vi.mocked(email_auth_helpers_1.lookupCustomerByEmail);
+const mockedLookupPhone = vitest_1.vi.mocked(phone_auth_helpers_1.lookupCustomerByPhone);
+const mockedEmailWorkflow = vitest_1.vi.mocked(send_email_auth_otp_workflow_1.default);
+const mockedPhoneWorkflow = vitest_1.vi.mocked(send_phone_auth_otp_workflow_1.default);
+const mockedVerificationWorkflow = vitest_1.vi.mocked(send_otp_workflow_1.default);
+(0, vitest_1.describe)("POST /store/customers/otp/send table-driven tests", () => {
+    (0, vitest_1.beforeEach)(() => {
+        vitest_1.vi.clearAllMocks();
+        mockedIsEmailOtpEnabled.mockReturnValue(true);
+        mockedIsPhoneOtpEnabled.mockReturnValue(true);
+        mockedEmailWorkflow.mockReturnValue({
+            run: vitest_1.vi.fn().mockResolvedValue({
+                result: {
+                    token: "email_auth_token",
+                    expires_at: new Date("2025-06-03T12:00:00.000Z"),
+                },
+            }),
+        });
+        mockedPhoneWorkflow.mockReturnValue({
+            run: vitest_1.vi.fn().mockResolvedValue({
+                result: {
+                    token: "phone_auth_token",
+                    expires_at: new Date("2025-06-03T12:00:00.000Z"),
+                },
+            }),
+        });
+        mockedVerificationWorkflow.mockReturnValue({
+            run: vitest_1.vi.fn().mockResolvedValue({
+                result: {
+                    token: "verify_token",
+                    expires_at: new Date("2025-06-03T12:00:00.000Z"),
+                },
+            }),
+        });
+    });
+    const cases = [
+        {
+            title: "email_auth rejects when OTP auth is disabled",
+            body: { email: "user@example.com", type: otp_verification_1.OtpPurpose.EMAIL_AUTH },
+            emailOtpEnabled: false,
+            phoneOtpEnabled: true,
+            emailCustomer: null,
+            phoneCustomer: null,
+            pendingDeletion: false,
+            shouldThrow: true,
+            errorType: utils_1.MedusaError.Types.NOT_ALLOWED,
+        },
+        {
+            title: "email_auth rejects invalid email format",
+            body: { email: "bad", type: otp_verification_1.OtpPurpose.EMAIL_AUTH },
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            emailCustomer: null,
+            phoneCustomer: null,
+            pendingDeletion: false,
+            shouldThrow: true,
+            errorType: utils_1.MedusaError.Types.INVALID_DATA,
+        },
+        {
+            title: "email_auth blocks when pending account deletion",
+            body: { email: "user@example.com", type: otp_verification_1.OtpPurpose.EMAIL_AUTH },
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            emailCustomer: {
+                id: "cus_1",
+                email: "user@example.com",
+                has_account: true,
+                first_name: "A",
+                last_name: null,
+            },
+            phoneCustomer: null,
+            pendingDeletion: true,
+            shouldThrow: true,
+            errorType: utils_1.MedusaError.Types.NOT_ALLOWED,
+        },
+        {
+            title: "email_auth returns token for new user",
+            body: { email: "new@example.com", type: otp_verification_1.OtpPurpose.EMAIL_AUTH },
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            emailCustomer: null,
+            phoneCustomer: null,
+            pendingDeletion: false,
+            shouldThrow: false,
+            expectedStatus: 200,
+            expectedJson: {
+                token: "email_auth_token",
+                expires_at: new Date("2025-06-03T12:00:00.000Z"),
+                is_new_user: true,
+            },
+        },
+        {
+            title: "phone_auth rejects when OTP auth is disabled",
+            body: { phone: "+15551234567", type: otp_verification_1.OtpPurpose.PHONE_AUTH },
+            emailOtpEnabled: true,
+            phoneOtpEnabled: false,
+            emailCustomer: null,
+            phoneCustomer: null,
+            pendingDeletion: false,
+            shouldThrow: true,
+            errorType: utils_1.MedusaError.Types.NOT_ALLOWED,
+        },
+        {
+            title: "phone_auth returns token for new user",
+            body: { phone: "+15559876543", type: otp_verification_1.OtpPurpose.PHONE_AUTH },
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            emailCustomer: null,
+            phoneCustomer: null,
+            pendingDeletion: false,
+            shouldThrow: false,
+            expectedStatus: 200,
+            expectedJson: {
+                token: "phone_auth_token",
+                expires_at: new Date("2025-06-03T12:00:00.000Z"),
+                is_new_user: true,
+            },
+        },
+        {
+            title: "email_verification requires customer_id",
+            body: { type: otp_verification_1.OtpPurpose.EMAIL_VERIFICATION },
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            emailCustomer: null,
+            phoneCustomer: null,
+            pendingDeletion: false,
+            shouldThrow: true,
+            errorType: utils_1.MedusaError.Types.INVALID_DATA,
+        },
+        {
+            title: "email_verification returns token",
+            body: {
+                customer_id: "cus_1",
+                type: otp_verification_1.OtpPurpose.EMAIL_VERIFICATION,
+            },
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            emailCustomer: null,
+            phoneCustomer: null,
+            pendingDeletion: false,
+            shouldThrow: false,
+            expectedStatus: 200,
+            expectedJson: {
+                token: "verify_token",
+                expires_at: new Date("2025-06-03T12:00:00.000Z"),
+            },
+        },
+        {
+            title: "email_auth rejects customer_id in body",
+            body: {
+                customer_id: "cus_1",
+                email: "user@example.com",
+                type: otp_verification_1.OtpPurpose.EMAIL_AUTH,
+            },
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            emailCustomer: null,
+            phoneCustomer: null,
+            pendingDeletion: false,
+            shouldThrow: true,
+            errorType: utils_1.MedusaError.Types.INVALID_DATA,
+        },
+    ];
+    vitest_1.test.each(cases)("$title", async ({ body, emailOtpEnabled, phoneOtpEnabled, emailCustomer, phoneCustomer, pendingDeletion, shouldThrow, errorType, expectedStatus, expectedJson, }) => {
+        mockedIsEmailOtpEnabled.mockReturnValue(emailOtpEnabled);
+        mockedIsPhoneOtpEnabled.mockReturnValue(phoneOtpEnabled);
+        mockedLookupEmail.mockResolvedValue(emailCustomer);
+        mockedLookupPhone.mockResolvedValue(phoneCustomer);
+        const hasPendingRequest = vitest_1.vi.fn().mockResolvedValue(pendingDeletion);
+        const req = {
+            body,
+            scope: {
+                resolve: (token) => {
+                    if (token === utils_1.ContainerRegistrationKeys.CONFIG_MODULE) {
+                        return (0, config_1.resolveCustomerRegistrationOptions)(undefined);
+                    }
+                    if (String(token).includes("account_deletion")) {
+                        return { hasPendingRequest };
+                    }
+                    return undefined;
+                },
+            },
+        };
+        const status = vitest_1.vi.fn().mockReturnThis();
+        const json = vitest_1.vi.fn();
+        const res = { status, json };
+        const exec = () => (0, route_1.POST)(req, res);
+        if (shouldThrow) {
+            await (0, vitest_1.expect)(exec()).rejects.toMatchObject({ type: errorType });
+            return;
+        }
+        await exec();
+        (0, vitest_1.expect)(status).toHaveBeenCalledWith(expectedStatus);
+        (0, vitest_1.expect)(json).toHaveBeenCalledWith(expectedJson);
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/customers/otp/__tests__/verify-route.test.js

@@ -0,0 +1,240 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@medusajs/framework/utils");
+const vitest_1 = require("vitest");
+const config_1 = require("../../../../../config");
+const otp_verification_1 = require("../../../../../modules/otp-verification/models/otp-verification");
+const otp_verification_2 = require("../../../../../modules/otp-verification");
+const verify_email_auth_otp_workflow_1 = __importDefault(require("../../../../../workflows/verify-email-auth-otp-workflow"));
+const verify_phone_auth_otp_workflow_1 = __importDefault(require("../../../../../workflows/verify-phone-auth-otp-workflow"));
+const verify_email_1 = __importDefault(require("../../../../../workflows/verify-email"));
+const complete_customer_login_1 = require("../../../../auth/customer/shared/complete-customer-login");
+const resolve_otp_token_purpose_1 = require("../shared/resolve-otp-token-purpose");
+const route_1 = require("../verify/route");
+vitest_1.vi.mock("../../../../../config", async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        isEmailOtpAuthEnabled: vitest_1.vi.fn(),
+        isPhoneOtpAuthEnabled: vitest_1.vi.fn(),
+        resolveCustomerRegistrationOptions: vitest_1.vi.fn(() => ({
+            login: { identifier: "email" },
+            registration: { identifier: "email", require_verification: true },
+            auth: {
+                email: { methods: ["otp"] },
+                phone: { methods: ["otp"] },
+            },
+        })),
+    };
+});
+vitest_1.vi.mock("../shared/resolve-otp-token-purpose", () => ({
+    resolveOtpTokenPurpose: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("../../../../../workflows/verify-email-auth-otp-workflow", () => ({
+    default: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("../../../../../workflows/verify-phone-auth-otp-workflow", () => ({
+    default: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("../../../../../workflows/verify-email", () => ({
+    default: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("../../../../../workflows/verify-phone", () => ({
+    default: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("../../../../auth/customer/shared/complete-customer-login", () => ({
+    issueCustomerJwtToken: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock("../../shared/referral-code", () => ({
+    assertReferralCodeReferrerExists: vitest_1.vi.fn().mockResolvedValue(undefined),
+    maybeCreateReferralLinkFromRequest: vitest_1.vi.fn().mockResolvedValue(undefined),
+}));
+const mockedResolvePurpose = vitest_1.vi.mocked(resolve_otp_token_purpose_1.resolveOtpTokenPurpose);
+const mockedIsEmailOtpEnabled = vitest_1.vi.mocked(config_1.isEmailOtpAuthEnabled);
+const mockedIsPhoneOtpEnabled = vitest_1.vi.mocked(config_1.isPhoneOtpAuthEnabled);
+const mockedEmailAuthWorkflow = vitest_1.vi.mocked(verify_email_auth_otp_workflow_1.default);
+const mockedPhoneAuthWorkflow = vitest_1.vi.mocked(verify_phone_auth_otp_workflow_1.default);
+const mockedVerifyEmailWorkflow = vitest_1.vi.mocked(verify_email_1.default);
+const mockedIssueJwt = vitest_1.vi.mocked(complete_customer_login_1.issueCustomerJwtToken);
+(0, vitest_1.describe)("POST /store/customers/otp/verify table-driven tests", () => {
+    (0, vitest_1.beforeEach)(() => {
+        vitest_1.vi.clearAllMocks();
+        mockedIsEmailOtpEnabled.mockReturnValue(true);
+        mockedIsPhoneOtpEnabled.mockReturnValue(true);
+        mockedIssueJwt.mockResolvedValue("customer_jwt");
+        mockedEmailAuthWorkflow.mockReturnValue({
+            run: vitest_1.vi.fn().mockResolvedValue({
+                result: {
+                    customer: { id: "cus_new", email: "new@example.com" },
+                    auth_identity: { id: "auth_1" },
+                    is_new_user: true,
+                },
+            }),
+        });
+        mockedPhoneAuthWorkflow.mockReturnValue({
+            run: vitest_1.vi.fn().mockResolvedValue({
+                result: {
+                    customer: { id: "cus_new", phone: "+15559876543" },
+                    auth_identity: { id: "auth_1" },
+                    is_new_user: true,
+                },
+            }),
+        });
+        mockedVerifyEmailWorkflow.mockReturnValue({
+            run: vitest_1.vi.fn().mockResolvedValue({
+                result: {
+                    customer: { id: "cus_1", email: "user@example.com" },
+                    email_verified: true,
+                },
+            }),
+        });
+    });
+    const cases = [
+        {
+            title: "requires token",
+            body: { code: "123456" },
+            purpose: otp_verification_1.OtpPurpose.EMAIL_AUTH,
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            shouldThrow: true,
+            errorType: utils_1.MedusaError.Types.INVALID_DATA,
+        },
+        {
+            title: "email_auth rejects when OTP auth is disabled",
+            body: { token: "t", code: "123456" },
+            purpose: otp_verification_1.OtpPurpose.EMAIL_AUTH,
+            emailOtpEnabled: false,
+            phoneOtpEnabled: true,
+            shouldThrow: true,
+            errorType: utils_1.MedusaError.Types.NOT_ALLOWED,
+        },
+        {
+            title: "email_auth returns JWT and customer for new user",
+            body: { token: "t", code: "123456", first_name: "New" },
+            purpose: otp_verification_1.OtpPurpose.EMAIL_AUTH,
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            workflowResult: {
+                customer: { id: "cus_new", email: "new@example.com", first_name: "New" },
+                auth_identity: { id: "auth_1" },
+                is_new_user: true,
+            },
+            shouldThrow: false,
+            expectedStatus: 200,
+            expectedJson: {
+                verified: true,
+                token: "customer_jwt",
+                customer: { id: "cus_new", email: "new@example.com", first_name: "New" },
+                is_new_user: true,
+                needs_login: false,
+            },
+        },
+        {
+            title: "phone_auth returns JWT and customer for new user",
+            body: { token: "t", code: "123456", first_name: "New" },
+            purpose: otp_verification_1.OtpPurpose.PHONE_AUTH,
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            workflowResult: {
+                customer: { id: "cus_new", phone: "+15559876543", first_name: "New" },
+                auth_identity: { id: "auth_1" },
+                is_new_user: true,
+            },
+            shouldThrow: false,
+            expectedStatus: 200,
+            expectedJson: {
+                verified: true,
+                token: "customer_jwt",
+                customer: { id: "cus_new", phone: "+15559876543", first_name: "New" },
+                is_new_user: true,
+                needs_login: false,
+            },
+        },
+        {
+            title: "email_verification returns verified customer",
+            body: { token: "t", code: "123456" },
+            purpose: otp_verification_1.OtpPurpose.EMAIL_VERIFICATION,
+            emailOtpEnabled: true,
+            phoneOtpEnabled: true,
+            shouldThrow: false,
+            expectedStatus: 200,
+            expectedJson: {
+                verified: true,
+                customer: { id: "cus_1", email: "user@example.com" },
+                email_verified: true,
+                token: null,
+                needs_login: true,
+            },
+        },
+    ];
+    vitest_1.test.each(cases)("$title", async ({ body, purpose, emailOtpEnabled, phoneOtpEnabled, verifyOtpThrows, workflowResult, shouldThrow, errorType, expectedStatus, expectedJson, }) => {
+        mockedResolvePurpose.mockReturnValue(purpose);
+        mockedIsEmailOtpEnabled.mockReturnValue(emailOtpEnabled);
+        mockedIsPhoneOtpEnabled.mockReturnValue(phoneOtpEnabled);
+        const verifyEmailAuthOtp = vitest_1.vi.fn().mockResolvedValue({
+            verified: true,
+            email: "new@example.com",
+            customer_id: null,
+            type: otp_verification_1.OtpPurpose.EMAIL_AUTH,
+        });
+        const verifyPhoneAuthOtp = vitest_1.vi.fn().mockResolvedValue({
+            verified: true,
+            phone: "+15559876543",
+            customer_id: null,
+            type: otp_verification_1.OtpPurpose.PHONE_AUTH,
+        });
+        const verifyOtp = verifyOtpThrows
+            ? vitest_1.vi.fn().mockRejectedValue(verifyOtpThrows)
+            : vitest_1.vi.fn().mockResolvedValue({
+                verified: true,
+                customer_id: "cus_1",
+                type: otp_verification_1.OtpPurpose.EMAIL_VERIFICATION,
+            });
+        if (workflowResult && purpose === otp_verification_1.OtpPurpose.EMAIL_AUTH) {
+            mockedEmailAuthWorkflow.mockReturnValue({
+                run: vitest_1.vi.fn().mockResolvedValue({ result: workflowResult }),
+            });
+        }
+        if (workflowResult && purpose === otp_verification_1.OtpPurpose.PHONE_AUTH) {
+            mockedPhoneAuthWorkflow.mockReturnValue({
+                run: vitest_1.vi.fn().mockResolvedValue({ result: workflowResult }),
+            });
+        }
+        const req = {
+            body,
+            scope: {
+                resolve: (token) => {
+                    if (token === utils_1.ContainerRegistrationKeys.CONFIG_MODULE) {
+                        return {
+                            projectConfig: { http: { jwtSecret: "secret", jwtExpiresIn: "7d" } },
+                        };
+                    }
+                    if (token === otp_verification_2.OTP_VERIFICATION_MODULE) {
+                        return { verifyEmailAuthOtp, verifyPhoneAuthOtp, verifyOtp };
+                    }
+                    if (token === utils_1.ContainerRegistrationKeys.PG_CONNECTION) {
+                        return {
+                            raw: vitest_1.vi.fn().mockResolvedValue({ rows: [] }),
+                        };
+                    }
+                    return undefined;
+                },
+            },
+        };
+        const status = vitest_1.vi.fn().mockReturnThis();
+        const json = vitest_1.vi.fn();
+        const res = { status, json };
+        const exec = () => (0, route_1.POST)(req, res);
+        if (shouldThrow) {
+            await (0, vitest_1.expect)(exec()).rejects.toMatchObject({ type: errorType });
+            return;
+        }
+        await exec();
+        (0, vitest_1.expect)(status).toHaveBeenCalledWith(expectedStatus);
+        (0, vitest_1.expect)(json).toHaveBeenCalledWith(expectedJson);
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/customers/otp/send/route.js

@@ -7,19 +7,57 @@ exports.POST = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const otp_verification_1 = require("../../../../../modules/otp-verification/models/otp-verification");
 const send_otp_workflow_1 = __importDefault(require("../../../../../workflows/send-otp-workflow"));
+const handle_send_email_auth_otp_1 = require("../shared/handle-send-email-auth-otp");
+const handle_send_phone_auth_otp_1 = require("../shared/handle-send-phone-auth-otp");
+const VERIFICATION_TYPES = new Set([
+    otp_verification_1.OtpPurpose.EMAIL_VERIFICATION,
+    otp_verification_1.OtpPurpose.PHONE_VERIFICATION,
+]);
+const AUTH_TYPES = new Set([
+    otp_verification_1.OtpPurpose.EMAIL_AUTH,
+    otp_verification_1.OtpPurpose.PHONE_AUTH,
+]);
 const POST = async (req, res) => {
-    const { customer_id, type } = req.body;
-    if (!customer_id) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "customer_id is required");
-    }
+    const body = (req.body ?? {});
+    const { customer_id, email, phone, type } = body;
     if (!type || !Object.values(otp_verification_1.OtpPurpose).includes(type)) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, `Type must be one of: ${Object.values(otp_verification_1.OtpPurpose).join(", ")}`);
     }
-    // Execute workflow
+    const purpose = type;
+    if (AUTH_TYPES.has(purpose)) {
+        if (customer_id) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "customer_id must not be provided for auth OTP types");
+        }
+        if (purpose === otp_verification_1.OtpPurpose.EMAIL_AUTH) {
+            if (!email || typeof email !== "string") {
+                throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "email is required for email_auth");
+            }
+            if (phone) {
+                throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "phone must not be provided for email_auth");
+            }
+            return (0, handle_send_email_auth_otp_1.handleSendEmailAuthOtp)(req, res, email);
+        }
+        if (!phone || typeof phone !== "string") {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "phone is required for phone_auth");
+        }
+        if (email) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "email must not be provided for phone_auth");
+        }
+        return (0, handle_send_phone_auth_otp_1.handleSendPhoneAuthOtp)(req, res, phone);
+    }
+    if (!VERIFICATION_TYPES.has(purpose)) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, `Type ${type} is not supported for this endpoint`);
+    }
+    if (!customer_id) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "customer_id is required for verification OTP types");
+    }
+    if (email || phone) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "email and phone must not be provided for verification OTP types");
+    }
     const { result } = await (0, send_otp_workflow_1.default)(req.scope).run({
         input: {
             customer_id,
-            type: type,
+            type: purpose,
         },
     });
     return res.status(200).json({
@@ -28,4 +66,4 @@ const POST = async (req, res) => {
     });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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