@odoro-cli/server-commerce

The Odoro storefront contract (/api/storefront/*), served by an @odoro-cli/server app from the site's own shop database — the shop capability of Odoro's cloud, version 1.

The V4 storefront script and @odoro-cli/commerce talk to it exactly as they talk to Odoro's central storefront.

import { createApp } from '@odoro-cli/server'
import {
  baseFromPool,
  createCommerceModule,
  odoroPayment,
} from '@odoro-cli/server-commerce'
import pg from 'pg'

createApp({
  // …
  modules: [
    createCommerceModule({
      db: baseFromPool(new pg.Pool({ connectionString: process.env.DATABASE_URL })),
      payment: odoroPayment({ origin: 'https://odoro.ai', site, secret }),
      callbackSecret: secret, // the same site secret signs Odoro's callbacks
    }),
  ],
})

What it serves

• catalogue, product page, collections, order tracking — only what is published;
• the cart, in an HttpOnly cookie set on the first add, never on a visit;
• checkout: stock checked against open reservations, prices of the day (changes reported), a 30-minute reservation, payment opened through the PaymentPort;
• discount codes (shop 1.2.0): a percentage or an amount off the basket, priced by the server from shop.discount_codes — dates, active flag, minimum basket and usage cap checked; a use counts once the order is paid; once the payment is open, the code is frozen. On a shop still in 1.1.0, a code is refused by name;
• POST /api/storefront/payment-callback: the order becomes paid only on a callback signed with callbackSecret (HMAC-SHA256 of reference.state.timestamp, 5-minute window). Idempotent: the stock leaves once.

The customer account (shop 1.3.0)

With a mail port (odoroMail: Odoro sends the link, the shop holds no mail key), /api/storefront/account serves the central storefront's contract: lien (a fifteen-minute link, at most three an hour, the answer never says whether the address is known), lettre (only with the ticked box), profil (session required; the consent can be withdrawn), deconnexion, and GET (profile, paid orders found by address, addresses). The link and the session live in the database as SHA-256 fingerprints only. The link is opened by openSession, which the app mounts on /api/storefront/account/login (a redirect with cookies, not JSON). Without the port, or on a shop before 1.3.0, the account says it is not available, by name.

Tests

COMMERCE_TEST_URL=postgres://user@host:port/postgres pnpm test — each run creates a database, loads test/fixtures/shop-1.3.0.sql, and drops it.