@W-20443849 Set default passwordless mode to 'email' for apps created via pwa-kit-create-app (#3526)

Author: hajinsuha1

packages/commerce-sdk-react/src/auth/index.ts

@@ -1272,7 +1272,7 @@ class Auth {
     async authorizePasswordless(parameters: AuthorizePasswordlessParams) {
         const usid = this.get('usid')
         // Default to 'callback' mode for backward compatibility as older versions of the template-retail-react-app
-        // expect this mode. Newer versions should explicitly set mode.
+        // do not pass the mode parameter. Newer versions should explicitly pass the mode.
         const mode = parameters.mode || 'callback'
         const callbackURI = parameters.callbackURI || this.passwordlessLoginCallbackURI
         const locale = this.locale

packages/pwa-kit-create-app/CHANGELOG.md

@@ -1,5 +1,6 @@
 
 ## v3.15.0-dev (Nov 05, 2025)
+- Update `default.js` and `/_app-config/index.jsx` template to use email mode by default for passwordless login. [#3526] (https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3526)
 
 ## v3.14.0 (Nov 04, 2025)
 - Prompt text for Site ID should match actual validation: Site ID may contain uppercase or lowercase letters, numbers, hyphens, or underscores. - Updated Site ID validator regex to allow both uppercase and lowercase letters for improved compatibility, clarity. [#3410] (https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3410)

packages/pwa-kit-create-app/assets/bootstrap/js/config/default.js.hbs

@@ -64,11 +64,12 @@ module.exports = {
                 {{else}}
                 enabled: false,
                 {{/if}}
+                // The mode of passwordless login. Valid values include 'email|callback'. Defaults to: 'callback'
+                mode: 'email',
                 // The callback URI, which can be an absolute URL (including third-party URIs) or a relative path set up by the developer.
-                // Required in 'callback' mode; if missing, passwordless login defaults to 'sms' mode, which requires Marketing Cloud configuration.
-                // If the env var `PASSWORDLESS_LOGIN_CALLBACK_URI` is set, it will override the config value.
-                callbackURI:
-                    process.env.PASSWORDLESS_LOGIN_CALLBACK_URI || '/passwordless-login-callback',
+                // Required in 'callback' mode. If the env var `PASSWORDLESS_LOGIN_CALLBACK_URI` is set, it will override the config value.
+                // callbackURI:
+                //     process.env.PASSWORDLESS_LOGIN_CALLBACK_URI || '/passwordless-login-callback',
                 // The landing path for passwordless login
                 landingPath: '/passwordless-login-landing'
             },

packages/pwa-kit-create-app/assets/bootstrap/js/overrides/app/components/_app-config/index.jsx.hbs

@@ -22,9 +22,8 @@ import {
     getEnvBasePath,
     slasPrivateProxyPath
 } from '@salesforce/pwa-kit-runtime/utils/ssr-namespace-paths'
-import {createUrlTemplate} from '@salesforce/retail-react-app/app/utils/url'
+import {buildAbsoluteUrl, createUrlTemplate} from '@salesforce/retail-react-app/app/utils/url'
 import createLogger from '@salesforce/pwa-kit-runtime/utils/logger-factory'
-import {isAbsoluteURL} from '@salesforce/retail-react-app/app/page-designer/utils'
 
 import {CommerceApiProvider} from '@salesforce/commerce-sdk-react'
 import {withReactQuery} from '@salesforce/pwa-kit-react-sdk/ssr/universal/components/with-react-query'
@@ -80,9 +79,7 @@ const AppConfig = ({children, locals = {}}) => {
     const redirectURI = `${appOrigin}${getEnvBasePath()}/callback`
     const proxy = `${appOrigin}${getEnvBasePath()}${commerceApiConfig.proxyPath}`
     const slasPrivateClientProxyEndpoint = `${appOrigin}${getEnvBasePath()}${slasPrivateProxyPath}`
-    const passwordlessLoginCallbackURI = isAbsoluteURL(passwordlessCallback)
-        ? passwordlessCallback
-        : `${appOrigin}${getEnvBasePath()}${passwordlessCallback}`
+    const passwordlessLoginCallbackURI = buildAbsoluteUrl(appOrigin, passwordlessCallback)
 
     return (
         <CommerceApiProvider

packages/pwa-kit-create-app/assets/templates/@salesforce/retail-react-app/app/components/_app-config/index.jsx.hbs

@@ -23,9 +23,8 @@ import {
     getEnvBasePath,
     slasPrivateProxyPath
 } from '@salesforce/pwa-kit-runtime/utils/ssr-namespace-paths'
-import {createUrlTemplate} from '@salesforce/retail-react-app/app/utils/url'
+import {buildAbsoluteUrl, createUrlTemplate} from '@salesforce/retail-react-app/app/utils/url'
 import createLogger from '@salesforce/pwa-kit-runtime/utils/logger-factory'
-import {isAbsoluteURL} from '@salesforce/retail-react-app/app/page-designer/utils'
 
 import {CommerceApiProvider} from '@salesforce/commerce-sdk-react'
 import {withReactQuery} from '@salesforce/pwa-kit-react-sdk/ssr/universal/components/with-react-query'
@@ -80,9 +79,7 @@ const AppConfig = ({children, locals = {}}) => {
     const redirectURI = `${appOrigin}${getEnvBasePath()}/callback`
     const proxy = `${appOrigin}${getEnvBasePath()}${commerceApiConfig.proxyPath}`
     const slasPrivateClientProxyEndpoint = `${appOrigin}${getEnvBasePath()}${slasPrivateProxyPath}`
-    const passwordlessLoginCallbackURI = isAbsoluteURL(passwordlessCallback)
-        ? passwordlessCallback
-        : `${appOrigin}${getEnvBasePath()}${passwordlessCallback}`
+    const passwordlessLoginCallbackURI = buildAbsoluteUrl(appOrigin, passwordlessCallback)
 
     return (
         <CommerceApiProvider

packages/pwa-kit-create-app/assets/templates/@salesforce/retail-react-app/config/default.js.hbs

@@ -64,11 +64,12 @@ module.exports = {
                 {{else}}
                 enabled: false,
                 {{/if}}
+                // The mode of passwordless login. Valid values include 'email|callback'. Defaults to: 'callback'
+                mode: 'email',
                 // The callback URI, which can be an absolute URL (including third-party URIs) or a relative path set up by the developer.
-                // Required in 'callback' mode; if missing, passwordless login defaults to 'sms' mode, which requires Marketing Cloud configuration.
-                // If the env var `PASSWORDLESS_LOGIN_CALLBACK_URI` is set, it will override the config value.
-                callbackURI:
-                    process.env.PASSWORDLESS_LOGIN_CALLBACK_URI || '/passwordless-login-callback',
+                // Required in 'callback' mode. If the env var `PASSWORDLESS_LOGIN_CALLBACK_URI` is set, it will override the config value.
+                // callbackURI:
+                //     process.env.PASSWORDLESS_LOGIN_CALLBACK_URI || '/passwordless-login-callback',
                 // The landing path for passwordless login
                 landingPath: '/passwordless-login-landing'
             },