@commercetools/frontend-sdk - npm Package Compare versions

Comparing version 1.9.3 to 1.10.0

CHANGELOG.md

 
+## Version 1.10.0 (2024-04-09)
+
+
+* Set cookie options httpOnly and secure to true by default
+* Added the ability to skip the action queue on the SDK.callAction method
+
 ## Version 1.9.3 (2024-03-04)
 
-
 * Improved error handling
@@ -6,0 +11,0 @@

lib/index.js

@@ -648,3 +648,6 @@ "use strict";
   async setCookie(key, data, options) {
-    let _cookieOptions;
+    let _cookieOptions = {
+      httpOnly: true,
+      secure: true
+    };
     let _req;
@@ -656,3 +659,3 @@ let _res;
       _res = res;
-      _cookieOptions = _options;
+      _cookieOptions = Object.assign({}, _options, _cookieOptions);
     }
@@ -864,2 +867,3 @@ const cookieStr = (0, import_cookie2.serialize)(key, this.stringify(data), {
    * @param {Object.<string, number, boolean, string[], number[], boolean[]>} [options.query] - An optional key, value pair object to be serialised into the url query.
+   * @param {boolean} [options.skipQueue] - An optional boolean, default false indicating whether or not to skip the action queue and execute fully asyncronously. May cause race conditions if used incorrectly.
    * @param {Object} [options.serverOptions] - An optional object containing the res and req objects for ServerResponse and IncomingMessage with cookies respectively. Required for server-side rendering session management.
@@ -879,15 +883,18 @@ *
     let result;
+    const action = () => fetcher(
+      this.#normaliseUrl(
+        `${this.#endpoint}/frontastic/action/${options.actionName}${params}`
+      ),
+      fetcherOptions,
+      options.serverOptions,
+      this.#sessionLifetime
+    );
     try {
-      result = await this.#actionQueue.add(
-        () => {
-          return fetcher(
-            this.#normaliseUrl(
-              `${this.#endpoint}/frontastic/action/${options.actionName}${params}`
-            ),
-            fetcherOptions,
-            options.serverOptions,
-            this.#sessionLifetime
-          );
-        }
-      );
+      if (options.skipQueue) {
+        result = await action();
+      } else {
+        result = await this.#actionQueue.add(
+          action
+        );
+      }
     } catch (error) {
@@ -894,0 +901,0 @@ return this.#handleError({

lib/library/CookieHandler.js

@@ -88,3 +88,6 @@ "use strict";
   async setCookie(key, data, options) {
-    let _cookieOptions;
+    let _cookieOptions = {
+      httpOnly: true,
+      secure: true
+    };
     let _req;
@@ -96,3 +99,3 @@ let _res;
       _res = res;
-      _cookieOptions = _options;
+      _cookieOptions = Object.assign({}, _options, _cookieOptions);
     }
@@ -99,0 +102,0 @@ const cookieStr = (0, import_cookie.serialize)(key, this.stringify(data), {

lib/library/SDK.d.ts

@@ -88,2 +88,3 @@ import { EventManager } from './EventManager.js';
      * @param {Object.<string, number, boolean, string[], number[], boolean[]>} [options.query] - An optional key, value pair object to be serialised into the url query.
+     * @param {boolean} [options.skipQueue] - An optional boolean, default false indicating whether or not to skip the action queue and execute fully asyncronously. May cause race conditions if used incorrectly.
      * @param {Object} [options.serverOptions] - An optional object containing the res and req objects for ServerResponse and IncomingMessage with cookies respectively. Required for server-side rendering session management.
@@ -97,2 +98,3 @@ *
         query?: AcceptedQueryTypes;
+        skipQueue?: boolean;
         serverOptions?: ServerOptions;
@@ -99,0 +101,0 @@ }): Promise<SDKResponse<ReturnData>>;

lib/library/SDK.js

@@ -428,3 +428,6 @@ "use strict";
   async setCookie(key, data, options) {
-    let _cookieOptions;
+    let _cookieOptions = {
+      httpOnly: true,
+      secure: true
+    };
     let _req;
@@ -436,3 +439,3 @@ let _res;
       _res = res;
-      _cookieOptions = _options;
+      _cookieOptions = Object.assign({}, _options, _cookieOptions);
     }
@@ -644,2 +647,3 @@ const cookieStr = (0, import_cookie.serialize)(key, this.stringify(data), {
    * @param {Object.<string, number, boolean, string[], number[], boolean[]>} [options.query] - An optional key, value pair object to be serialised into the url query.
+   * @param {boolean} [options.skipQueue] - An optional boolean, default false indicating whether or not to skip the action queue and execute fully asyncronously. May cause race conditions if used incorrectly.
    * @param {Object} [options.serverOptions] - An optional object containing the res and req objects for ServerResponse and IncomingMessage with cookies respectively. Required for server-side rendering session management.
@@ -659,15 +663,18 @@ *
     let result;
+    const action = () => fetcher(
+      this.#normaliseUrl(
+        `${this.#endpoint}/frontastic/action/${options.actionName}${params}`
+      ),
+      fetcherOptions,
+      options.serverOptions,
+      this.#sessionLifetime
+    );
     try {
-      result = await this.#actionQueue.add(
-        () => {
-          return fetcher(
-            this.#normaliseUrl(
-              `${this.#endpoint}/frontastic/action/${options.actionName}${params}`
-            ),
-            fetcherOptions,
-            options.serverOptions,
-            this.#sessionLifetime
-          );
-        }
-      );
+      if (options.skipQueue) {
+        result = await action();
+      } else {
+        result = await this.#actionQueue.add(
+          action
+        );
+      }
     } catch (error) {
@@ -674,0 +681,0 @@ return this.#handleError({

package.json

 {
 	"name": "@commercetools/frontend-sdk",
-	"version": "1.9.3",
+	"version": "1.10.0",
 	"license": "UNLICENSED",
@@ -5,0 +5,0 @@ "main": "lib/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

450862

increased by0.78%

Lines of code

5761

increased by0.45%

No dependency changes