Template
Rami BitarandClaude Opus 5
8167acb231
- Storefront customer operations in graphql/customer.js and a server-safe services/shopify/customer.ts - Session held in an httpOnly, sameSite=lax cookie set by the /api/account handlers; the access token never reaches client JS - Pages: /account/login, /register, /recover, /reset/[id]/[token] and /activate/[id]/[token] for Shopify's emailed links - /account renders order history as master-detail on one screen, since the Storefront API has no standalone order-by-id query for customers - Header user icon: links to sign-in when signed out, otherwise a menu with name, email, order history, and sign out - Login errors are collapsed and password recovery responds identically for known and unknown emails, so neither form enumerates accounts Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016jWbNNJLksC1QG8z8845FX
11 lines
306 B
TypeScript
11 lines
306 B
TypeScript
import { recoverPassword } from '@/services/shopify/customer';
|
|
|
|
export async function POST(req: Request) {
|
|
const { email } = await req.json();
|
|
|
|
if (email) await recoverPassword(email);
|
|
|
|
// Always the same response, so the form can't reveal who has an account.
|
|
return Response.json({ ok: true });
|
|
}
|