@bigcommerce/[email protected]

Minor Changes

• #1631 58d9e7c Thanks @deini! - fetch available locales at build time

Patch Changes

• #1636 23abacf Thanks @chanceaclark! - Remove console.error when falling back to defaultChannelId

• #1636 23abacf Thanks @chanceaclark! - Clean up login error handling.

• Updated dependencies [23abacf]:

  • @bigcommerce/[email protected]

@bigcommerce/[email protected]

Minor Changes

• #1636 23abacf Thanks @chanceaclark! - Add optional error to BigCommerceResponse type

@bigcommerce/[email protected]

Patch Changes

• #1623 16e3a76 Thanks @chanceaclark! - allow props not to be spread

@bigcommerce/[email protected]

✨ This release updates to Next.js v15 ✨

Minor Changes

• #1623 16e3a76 Thanks @chanceaclark! - Next 15 upgrade

Patch Changes

• #1629 72a30a8 Thanks @deini! - Use Typescript on Next Config

• #1618 d60e916 Thanks @bc-svc-local! - Update translations.

• Updated dependencies [16e3a76]:

  • @bigcommerce/[email protected]

@bigcommerce/[email protected]

Minor Changes

• #1623 16e3a76 Thanks @chanceaclark! - Adds async support to beforeRequest hook

@bigcommerce/[email protected]

Minor Changes

• #1541 20c08da Thanks @matthewvolk! - Introduce an additional project creation scenario in which projects can be created without prompts if the CLI is provided with a valid --store-hash, --channel-id, and --storefront-token

@bigcommerce/[email protected]

Minor Changes

• #1262 0c2023b Thanks @chanceaclark! - Generates a storefront token when using the CLI to init or create a Catalyst storefront.

• #1262 0c2023b Thanks @chanceaclark! - Remove generating a customer impersonation token as we are using the API Token + Customer Access Token approach"

@bigcommerce/[email protected]

🔐 Update to GraphQL Authentication which solves checkout issues & improves security

We have created a new form of authentication for our GraphQL Storefront API which improves our security posture and solves session synchronization issues with headless checkouts.

Our new Customer Access Token for GraphQL is documented here

This update changes Catalyst to use normal GraphQL tokens and Customer Access Tokens in lieu of Customer Impersonation Tokens. You will need to do a one-time regeneration of your GraphQL token as part of the upgrade. New storefronts created via the CLI will provision appropriate tokens automatically, and existing apps can be updated by running the init command.

The benefit you’ll get is an improved security posture, and a better hosted checkout experience including:

• Logged-in customers maintaining their login state through to checkout (without having to use Customer Login API)
• A synchronized session between storefront & checkout; logging out in one place will log you out in both places
• Support for more security-sensitive features we will add to Catalyst in the future, such as Saved Payment Methods

Minor Changes

• #1262 0c2023b Thanks @chanceaclark! - Removes all usages of the customer impersonation token. Also updates the docs to correspond with the Storefront API Token.

• #1262 0c2023b Thanks @chanceaclark! - Allows the ability to consume a storefront token. This new token will allow Catalyst to create customerAccessToken's whenever a user logs into their account. This change doesn't include consuming the either token, only adding the ability to pass it in.

Patch Changes

• Updated dependencies [0c2023b, 0c2023b]:
  • @bigcommerce/[email protected]

@bigcommerce/[email protected]

Patch Changes

• #1525 e751319 Thanks @bc-alexsaiannyi! - fix warning for using the same keys on items

• #1521 fd83a78 Thanks @bc-yevhenii-buliuk! - fix styles for active account tab

• #1520 c898792 Thanks @bc-alexsaiannyi! - improve error message on reset password page

• #1524 f08883c Thanks @bc-alexsaiannyi! - improve behaviour for change password page for logged in user

• #1529 22426b2 Thanks @bc-yevhenii-buliuk! - fix validation message for email on account settings page

• #1516 41270c2 Thanks @bc-svc-local! - Update translations.

• #1534 de48618 Thanks @bc-svc-local! - Update translations.

@bigcommerce/[email protected]

Minor Changes

• #1262 0c2023b Thanks @chanceaclark! - Removes all usages of the customer impersonation token. Also updates the docs to correspond with the Storefront API Token.

• #1262 0c2023b Thanks @chanceaclark! - Allows the ability to consume a storefront token. This new token will allow Catalyst to create customerAccessToken's whenever a user logs into their account. This change doesn't include consuming the either token, only adding the ability to pass it in.