Releases: saleor/app-sdk
v0.39.1
0.39.1
Minor Changes
- d4169dc: Added new method to SettingsManager - "delete". It can delete metadata by key in Saleor. Implemented in MetadataManager and EncryptedMetadataManager
Patch Changes
-
f809368: Added
tokenRefresh
event to AppBridge.It's meant to be triggered by dashboard, when token is refreshed.
Apps that use new AppBridge will receive fresh token.This fixes this issue
For Saleor Cloud where token lives for 24h it was rare, but Saleor can be set to have any token duration, causing app to fail fast.
-
1783f47: Improved typings in metadata manager
v0.38.0
Minor Changes
- da351fa: Added JWT token expire date validation (claims.exp field). If token is expired, error will be thrown and verification will be aborted
Patch Changes
- 62e4c39: Registed Handler now prints saleorApiUrl in error response, so its available in dashboard toast
- 62e4c39: Wrapped useAuthenticatedFetch with useMemo to avoid re-renders
- c777275: Fixed SaleorCloudAPL "getAll" method that was not mapping response from remote with AuthData interface
- c777275: Added additional debug log if saleorApiUrl doesnt exist in register handler
v0.37.4
v0.37.3
Patch Changes
-
5057d34: Support comma-delimited x-forwarded-proto
-
5a68bec: Fix serialization of the nested values in the UpstashAPL.
-
ab24968: processProtectedHandler no longer requires a full NextApiRequest object as an argument. Now only the
headers
property is required to satisfy the type safety.Thanks to that, some requests like HTML
with tokens in BODY can be validated. Till now only fetch/ajax calls could have been validated
v0.37.2
v0.37.1
v0.36.0
Minor Changes
- 5744aa4: Add requiredSaleorVersion field to AppManifest, so Saleor can validate it during installation
- dfd632b: Add EnvAPL which is a read-only single-tenant APL implementation. It can print AuthData from registration process, but the developer is responsible to configure ENV and pass data to the constructor. Docs
- f7d38dc: Added useAuthenticatedFetch hook with can construct decorated window.fetch with pre-defined headers with required AppBridge state. Can be used with createProtectedHandler. Docs
Patch Changes
- dfd632b: "domain" field in AuthData is no longer required. It will be set by registerHandler, but if missing, domain can be resolved from saleorApiUrl
- dfd632b: JWKS field in AuthData is no longer required. registerHandler will try to set it for cache purposes, but not every time it is possible. If JWKS is not found, registerHandler will fetch it
- f7d38dc: Remove MANAGE_APPS from possible permissions, because App should not have it. Mutations that requires MANAGE_APPS will not work with App Token even if permission is set
v0.34.1
v0.34.0
Minor Changes
-
9420209: Add SaleorSyncWebhook class
Now app-sdk support both
new SaleorAsyncWebhook()
andnew SaleorSyncWebhook()
.Changes:
Constructor field
subscriptionQueryAst?: ASTNode
inSaleorAsyncWebhook
has been deprecated.Use
query
field instead (query: ASTNode | string
)Constructor field
asyncEvent
has been deprecated. Useevent
instead