Feature: Passwordless Login and Password Reset supports use of `email` mode by hajinsuha1 · Pull Request #3525 · SalesforceCommerceCloud/pwa-kit

hajinsuha1 · 2025-12-17T17:19:42Z

Description

This feature allows the mode for passwordless login and password reset to be configured in default.js.
It also changes the default mode used in template-retail-react-app from callback to email.

# Email mode
passwordless: {
   mode: 'email',
  ...
},
resetPassword: {
   mode: 'email',
  ...
},

# Callback mode
passwordless: {
   mode: 'callback',
   callbackURI: 'https://webhook.site/566b6fe3-84c7-4204-9270-3b0552d7d76e,
  ...
},
resetPassword: {
   mode: 'callback',
   callbackURI: 'https://webhook.site/566b6fe3-84c7-4204-9270-3b0552d7d76e',
  ...
},

This branch contains the following PRs:

After this PR is merged, to ensure the changes to the E2E tests pass the following PR that updates the extra-features-e2e-branch will need to be merged

@W-20279800 Update passwordless config in extra-features-e2e-branch for E2E tests #3557

Types of Changes

Bug fix (non-breaking change that fixes an issue)
New feature (non-breaking change that adds functionality)
Documentation update
Breaking change (could cause existing functionality to not work as expected)
Other changes (non-breaking changes that does not fit any of the above)

Breaking changes include:

Removing a public function or component or prop

Adding a required argument to a function

Changing the data type of a function parameter or return value

Adding a new peer dependency to package.json

Changes

template-retail-react-app

support setting passwordless login mode in config
Set default passwordless mode to 'email' for apps created via pwa-kit-create-app
Update password reset to use email mode by default. The mode can now be configured via default.js
update passwordless login extra-features e2e tests
update "Continue Securely" button to "Continue"
display errors in EmailConfirmation page
added new auth-utils.js that contains utility methods for mapping passwordless and reset password API error messages to user-friendly error messages
added error message mappings for the following API error messages:
- "no callback_uri is registered for client" -> "This feature is not currently available"
- "Too many login requests were made. Please try again later." -> Too many requests. For your security, please wait 10 minutes before trying again.
- "Monthly quota for passwordless login mode email has been exceeded" -> "This feature is not currently available"

commerce-sdk-react

Update getPasswordResetToken and authorizePasswordless to default locale to the one in CommerceApiProvider and pass callback_uri and idp_name only when they are defined
Update getPasswordResetToken to return a raw response and throw an error with the error message if the status code is not 200
pwa-kit-create-app
Update default.js and /_app-config/index.jsx template to use email mode by default for passwordless login and password reset.

How to Test-Drive This PR

Email mode

Changes have been deployed to https://wasatch-mrt-feature-private.mrt-storefront-staging.com/

Setup template-retail-react-app with a private client and start the app. By default, default.js is configured to use email mode for passwordless and resetPassword

# Checkout this branch
git checkout feature/email-otp

# Cherry pick the test commit that contains the private client setup
git fetch origin 465b813ed6274197134202d5b9b4fa9af905fb3c
git cherry-pick 465b813ed6274197134202d5b9b4fa9af905fb3c

# Build commerce-sdk-react locally by building the entire app
npm ci

# Set the private client secret via env vars and start the `template-retail-react-app`
export PWA_KIT_SLAS_CLIENT_SECRET=SECRET
cd packages/template-retail-react-app
npm start

Passwordless Login

Navigate to http://localhost:3000/us/en-US and login using the Auth Modal by clicking on the Profile icon, entering your email, and clicking the Continue button to trigger passwordless login (verify the locale that is sent is en-US)
Verify an email was sent to you with the OTP
Repeat steps 1-2 for the login page: http://localhost:3000/us/en-US/login page (verify the locale that is sent is en-US instead of en-GB)
Repeat steps 1-2 for the checkout page after adding an item to cart (verify the locale that is sent is en-US)

Password Reset

Open the developer console, start the reset password flow using the Auth Modal by clicking on the Profile icon, entering your email, clicking the Password button, clicking Forgot Password, then clicking theReset Password button (verify the locale that is sent is en-US)
Verify an email was sent to you with the magic link
Repeat steps 1-2 for the http://localhost:3000/us/en-US/login page (verify the locale that is sent is en-US instead of en-GB in the /password/reset request)
Repeat steps 1-2 for the login from the checkout page after adding an item to cart (verify the locale that is sent is en-US)

Callback mode

Changes have been deployed to https://wasatch-mrt-passwordless-poc.mrt-storefront-staging.com/

Update passwordless in default.js to

            passwordless: {
                enabled: true,
                mode: 'callback',
                callbackURI: 'https://webhook.site/566b6fe3-84c7-4204-9270-3b0552d7d76e',
                landingPath: '/passwordless-login-landing'
            },

Update resetPassword in default.js to

            resetPassword: {
                mode: 'callback',
                callbackURI: 'https://webhook.site/566b6fe3-84c7-4204-9270-3b0552d7d76e',
                landingPath: '/reset-password-landing'
            }

Restart the server
```
npm start
```

Passwordless Login

Navigate to http://localhost:3000/us/en-US and login using the Auth Modal by clicking on the Profile icon, entering your email, and clicking the Continue button to trigger passwordless login. (verify the locale that is sent is en-US)
Verify SLAS sent a POST request to the webhook callback uri: https://webhook.site/#!/view/566b6fe3-84c7-4204-9270-3b0552d7d76e
Repeat steps 1-2 for the login page: http://localhost:3000/us/en-US/login page (verify the locale that is sent is en-US instead of en-GB)
Repeat steps 1-2 for the checkout page after adding an item to cart

Password Reset

Navigate to http://localhost:3000/us/en-US, Open the developer console, start the reset password flow using the Auth Modal by clicking on the Profile icon, entering your email, clicking the Password button, clicking Forgot Password, then clicking theReset Password button
Verify SLAS sent a POST request to the webhook callback uri: https://webhook.site/566b6fe3-84c7-4204-9270-3b0552d7d76e
Repeat steps 1-2 for the login page: http://localhost:3000/us/en-US/login page (verify the locale that is sent is en-US instead of en-GB)
Repeat steps 1-2 for the login from the checkout page after adding an item to cart

Backwards compatibility (mode field missing)

The previous version of template-retail-react-app does not contain a mode field for passwordless and resetPassword in default.js. Let's make sure our changes in commerce-sdk-react are backwards compatible by making sure that when mode is missing and callbackURI is set in default.js, callback mode is used.

Update passwordless in default.js to

            passwordless: {
                enabled: true,
                callbackURI: 'https://webhook.site/566b6fe3-84c7-4204-9270-3b0552d7d76e',
                landingPath: '/passwordless-login-landing'
            },

Update resetPassword in default.js to

            resetPassword: {
                callbackURI: 'https://webhook.site/566b6fe3-84c7-4204-9270-3b0552d7d76e',
                landingPath: '/reset-password-landing'
            }

Restart the server
```
npm start
```

Passwordless Login

Login using the Auth Modal by clicking on the Profile icon, entering your email, and clicking the Continue button to trigger passwordless login
Verify SLAS sent a POST request to the webhook callback uri: https://webhook.site/#!/view/566b6fe3-84c7-4204-9270-3b0552d7d76e
Repeat steps 1-2 for the login page with a different locale: http://localhost:3000/us/en-US/login page (verify the locale that is sent is en-US instead of en-GB)
Repeat steps 1-2 for the checkout page after adding an item to cart

Password Reset

Open the developer console, start the reset password flow using the Auth Modal by clicking on the Profile icon, entering your email, clicking the Password button, clicking Forgot Password, then clicking theReset Password button
Verify SLAS sent a POST request to the webhook callback uri: https://webhook.site/566b6fe3-84c7-4204-9270-3b0552d7d76e
Repeat steps 1-2 for the login page with a different locale: http://localhost:3000/us/en-US/login page (verify the locale that is sent is en-US instead of en-GB)
Repeat steps 1-2 for the login from the checkout page after adding an item to cart

Error Handling

These error messages align with the messages reviewed by UX: https://salesforce.quip.com/97bPANYv5D2U

Too many requests error

Navigate to https://wasatch-mrt-feature-private.mrt-storefront-staging.com/us/en-us
Open the developer console
Click on the profile icon on the top right, enter your email, click the Continue button. Then click Resend Link button 6 times in 10 minutes.
Verify Too many requests. For your security, please wait 10 minutes before trying again. error is displayed
Close and reopen the auth modal, enter your email, click the Continue button.
Verify Too many requests. For your security, please wait 10 minutes before trying again. error is displayed
Click Password button, click Forgot Password link. Click Reset Password and repeat this 3 more times to trigger the too many requests error
Verify Too many requests. For your security, please wait 10 minutes before trying again. error is displayed
Repeat these steps in the login page: https://wasatch-mrt-feature-private.mrt-storefront-staging.com/us/en-us/login
Repeat these steps in the checkout page

`no callback_uri is registered for client` error

Navigate to https://wasatch-mrt-passwordless-poc.mrt-storefront-staging.com/us/en-us
Click on the profile icon on the top right, enter your email, click the Continue button.
Verify This feature is not currently available. error is displayed
Click Password button, click Forgot Password link. Click Reset Password.
Verify This feature is not currently available. error is displayed
Repeat these steps in the login page: https://wasatch-mrt-passwordless-poc.mrt-storefront-staging.com/us/en-us/login

pwa-kit-create-app

Generate the project using pwa-kit-create-app

GENERATOR_PRESET=retail-react-app-demo node packages/pwa-kit-create-app/scripts/create-mobify-app-dev.js --outputDir generated-retail-react-app-demo

Select The Retail app with demo Commerce Cloud instance

Once completed open default.js in the generated app

code generated-retail-react-app-demo/config/default.js

Verify in default.js, app.login.passwordless.mode and app.login.resetPassword.mode is set to email and callbackURI is commented out
Verify in /_app-config/index.jsx the absoluteUrl utility is used
In default.js
set app.login.passwordless.enabled to true
passwordless: { // Enables or disables passwordless login for the site. Defaults to: false enabled: true,
update commerceAPI to use an instance of SLAS that has email otp enabled
commerceAPI: { proxyPath: `/mobify/proxy/api`, parameters: { clientId: 'CLIENT_ID' organizationId: 'f_ecom_zzrf_001', shortCode: 'staging-001', siteId: 'RefArchGlobal' } },

update ssrParameters to use the ecom instance with email OTP enabled

    ssrParameters: {
        ssrFunctionNodeVersion: '22.x',
        proxyConfigs: [
            {
                host: 'staging-001.api.commercecloud.salesforce.com',
                path: 'api'
            },

In overrides/app/ssr.js

set useSLASPrivateClient to true
uncomment the applySLASPrivateClientToEndpoints property

    applySLASPrivateClientToEndpoints:
        /\/oauth2\/(token|passwordless\/(login|token)|password\/(reset|action))/,

In overrides/app/components/_app-config/index.jsx add enablePWAKitPrivateClient={true} to the fields of CommerceApiProvider

Set the private client secret and Start the app

cd generated-retail-react-app-demo 
export PWA_KIT_SLAS_CLIENT_SECRET=SECRET
npm start

Verify passwordless login works
Verify password reset works

E2E Tests

Start the playwright tests

# Set the playwright tests to run against a `template-retail-react-app` with the new email OTP feature
export PWA_E2E_USER_EMAIL=e2e.pwa.kit@gmail.com PWA_E2E_USER_PASSWORD=PASSWORD EXTRA_FEATURES_E2E_RETAIL_APP_HOME=https://wasatch-mrt-passwordless-test.mrt-storefront-staging.com

npx playwright test --project=extra-features-desktop --project=extra-features-mobile --ui

Verify all tests (desktop and mobile) pass except Verify password reset callback request on mobile when extra login features are not enabled. This tests fails as it runs against https://scaffold-pwa-e2e-pwa-kit-private.mobify-storefront.com/ which does not have the email otp changes yet

Checklists

General

Changes are covered by test cases
CHANGELOG.md updated with a short description of changes (not required for documentation updates)

Accessibility Compliance

You must check off all items in one of the follow two lists:

There are no changes to UI

or...

Changes were tested with a Screen Reader (iOS VoiceOver or Android Talkback) and had no issues
Changes comply with WCAG 2.0 guidelines levels A and AA
Changes to common UI patterns and interactions comply with WAI-ARIA best practices

Localization

Changes include a UI text update in the Retail React App (which requires translation)

* Add passwordless login mode configuration with email as default * Update authorizePasswordless to require mode parameter and add locale support * Remove commented out passwordless callbackURI configuration * Remove passwordlessCallbackURI variable and simplify callbackURI condition in authorizePasswordlessLogin * Remove conditional callbackURI spread and add mode parameter to checkout passwordless login * Add buildCallbackURL utility function and conditionally spread callbackURI in passwordless login * Rename buildCallbackURL to buildAbsoluteUrl and make passwordlessLoginCallbackURI optional * update unit tests in template-retail-react-app and fix passwordless mode in login page * make authorizePasswordless backward compatible and add unit tests for commerce-sdk-react * Make passwordlessLoginCallbackURI non-optional with empty string default * update changelog * Use endsWith() to match passwordless login landing path and add test for localized paths

cc-prodsec · 2025-12-17T17:19:54Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

… via pwa-kit-create-app (#3526)

Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

packages/commerce-sdk-react/src/auth/index.ts

* Update getPasswordResetToken to default locale to the one in CommerceApiProvider and pass callback_uri and idp_name only when they are defined * Update resetPassword to default hint to cross_device and pass code_verifier only when it is defined pwa-kit-create-app * Update default.js and /_app-config/index.jsx template to use email mode by default for passwordless login and password reset. * Update password reset to use email mode by default. The mode can now be configured via default.js

…ly" to "Continue" (#3556) * update passwordless and password reset e2e tests to veirfy mode email is used * Update EXTRA_FEATURES_E2E_RETAIL_APP_HOME to support environment variable configuration * Update mobile e2e tests to verify 'email' mode for passwordless login and password reset requests * update "continue securely" to "continue"

Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

…ing develop

hajinsuha1 · 2026-01-12T19:17:33Z

When the SLAS APIs /password/reset return a 400 due to exceeding the email limit of 3 per 10min the PWA Kit displays the error msg "Feature is unavailable..." Should we change this to display the general API error "Something went wrong..." or a new error message like "Too many requests. For your security, please wait 10 minutes before trying again"?

…asswordless and reset password (#3574) * Enhance error handling for password reset functionality and add new error message for "too many requests" errors * display errors in Email Confirmation page * added new auth-utils.js that contains utility methods for mapping passwordless and reset password API error messages to user-friendly error messages * added mapping of the following API error messages: "no callback_uri is registered for client" -> "This feature is not currently available", "Too many login requests were made. Please try again later." -> Too many requests. For your security, please wait 10 ** minutes before trying again., "Monthly quota for passwordless login mode email has been exceeded" -> "This feature is not currently available" * changelog updates and translations

packages/commerce-sdk-react/src/auth/index.ts

Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

…less and password reset

…erceCloud/pwa-kit into feature/email-otp

alexvuong · 2026-01-22T20:11:28Z

packages/commerce-sdk-react/src/auth/index.test.ts

+        const result = await auth.resetPassword(input)
+        expect(result).toBe(mockResponse)
+        expect(resetPasswordSpy).toHaveBeenCalled()
+        const callArgs = resetPasswordSpy.mock.calls[0][0] as any


Can we reduce the any explicit assignment?

alexvuong · 2026-01-22T20:12:43Z

packages/commerce-sdk-react/src/auth/index.ts

        const usid = this.get('usid')
+        // Default to 'callback' mode for backward compatibility as older versions of the template-retail-react-app
+        // do not pass the mode parameter. Newer versions should explicitly pass the mode.
+        const mode = parameters.mode || 'callback'


The upcoming release is gonna be breaking change version. If you want to change the default, now is the time

Make sure you document this behavior somewhere to make it clear

will make sure it's documented in the dev docs

alexvuong · 2026-01-22T20:16:19Z

packages/commerce-sdk-react/CHANGELOG.md


+- Update `authorizePasswordless` to pass locale and simplify mode selection to respect user's explicit mode choice while still defaulting to callback mode for backward compatibility [#3492](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3492)
+- Update `getPasswordResetToken` to pass locale, callback_uri and idp_name only when they are defined [#3547](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3547)
+- Update `resetPassword` to default hint to `cross_device` and pass code_verifier only when it is defined [#3547](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3547)


Let's bundle these up into one feature PR (this one since this feature branch has all the code changes). customers do not need to know about non-feature branches.

packages/pwa-kit-create-app/CHANGELOG.md

packages/template-retail-react-app/app/hooks/use-auth-modal.test.js

alexvuong · 2026-01-22T20:21:16Z

packages/template-retail-react-app/app/hooks/use-auth-modal.test.js

+        await user.click(screen.getByText(/Continue/i))
+
+        expect(
+            mockAuthHelperFunctions[AuthHelpers.AuthorizePasswordless].mutateAsync


Can we mock this at the api level with msw?

alexvuong · 2026-01-22T20:26:05Z

packages/template-retail-react-app/app/hooks/use-auth-modal.test.js

+    test.each([
+        ['no callback_uri is registered for client', 'This feature is not currently available.'],
+        [
+            'Too many password reset requests were made. Please try again later.',


Nit: while doing this is okay since we want to test if the error is being rendered properly when occurring, but realistically, we may want to trigger 6 times on resent link click, and on the 6th time is when error is mocked and returned.

alexvuong · 2026-01-22T20:33:09Z

packages/template-retail-react-app/app/pages/login/index.test.js

+    [AuthHelpers.AuthorizePasswordless]: {mutateAsync: jest.fn()}
+}
+
+jest.mock('@salesforce/commerce-sdk-react', () => {


for consistency, can we mock the data at api level to avoid doing this since we are currently using mws for various calls in this test file? Besides, this is a page component, it would be better to mock data at api-level

alexvuong · 2026-01-22T20:33:38Z

packages/template-retail-react-app/app/pages/login/index.test.js

+
+        // Verify that authorizePasswordless is called with correct parameters
+        await waitFor(() => {
+            expect(


Can we mock this call at api-level?

packages/template-retail-react-app/app/utils/url.js

Co-authored-by: Alex Vuong <alex.vuong@salesforce.com> Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

- mock at api level for tests - update changelog

…erceCloud/pwa-kit into feature/email-otp

yunakim714 · 2026-01-26T19:38:36Z

Hey Jinsu - I'm testing email mode on https://wasatch-mrt-feature-private.mrt-storefront-staging.com/ , and when I click Continue, I get the email sent successfully but I see the wrong login link. Wanted to double check on this

(Same for password reset)

yunakim714 · 2026-01-26T19:45:26Z

packages/commerce-sdk-react/src/auth/index.ts

            },
            parameters: {
-                ...(callbackURI && {callbackURI: callbackURI}),
+                ...(callbackURI && {callbackURI}),


Should we omit this if mode === email ?

I chose to let the API handle the scenario when mode = email and callbackURI is set.
The API will ignore the callback URI when mode is set to email

yunakim714 · 2026-01-26T19:46:18Z

packages/commerce-sdk-react/src/auth/index.ts

                channel_id: parameters.channel_id || slasClient.clientConfig.parameters.siteId,
                client_id: parameters.client_id || slasClient.clientConfig.parameters.clientId,
-                callback_uri: parameters.callback_uri,
+                ...(parameters.callback_uri && {callback_uri: parameters.callback_uri}),


Same here? If mode === email, do not set this ? Or is this ignored if mode === email ?

packages/template-retail-react-app/app/utils/auth-utils.js

packages/template-retail-react-app/app/utils/auth-utils.test.js

Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

Co-authored-by: Yuna Kim <84923642+yunakim714@users.noreply.github.com> Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

jeremy-jung1 · 2026-01-27T01:07:45Z

Can see that correlation ID is getting included and surfaces in log center in case of issues

hajinsuha1 added 2 commits December 10, 2025 09:13

Merge branch 'develop' into feature/email-otp

22b6a36

hajinsuha1 added the do not merge No matter what, do not merge this pr label Dec 17, 2025

hajinsuha1 added 2 commits December 22, 2025 14:26

@W-20443849 Set default passwordless mode to 'email' for apps created…

c646e44

… via pwa-kit-create-app (#3526)

Merge branch 'develop' into feature/email-otp

bd6d1d0

Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

hajinsuha1 commented Dec 29, 2025

View reviewed changes

packages/commerce-sdk-react/src/auth/index.ts Show resolved Hide resolved

hajinsuha1 changed the title ~~[DRAFT][DO NOT MERGE] Feature: Passwordless Login using SLAS Native Email OTP~~ Feature: Passwordless Login using SLAS Native Email OTP Dec 30, 2025

hajinsuha1 changed the title ~~Feature: Passwordless Login using SLAS Native Email OTP~~ [DO NOT MERGE] Feature: Passwordless Login using SLAS Native Email OTP Dec 30, 2025

hajinsuha1 mentioned this pull request Jan 5, 2026

@W-20279800 Update passwordless config in extra-features-e2e-branch for E2E tests #3557

Merged

12 tasks

hajinsuha1 changed the title ~~[DO NOT MERGE] Feature: Passwordless Login using SLAS Native Email OTP~~ [DO NOT MERGE] Feature: Passwordless Login and Password Reset supports use of SLAS Native Email OTP Jan 8, 2026

hajinsuha1 changed the title ~~[DO NOT MERGE] Feature: Passwordless Login and Password Reset supports use of SLAS Native Email OTP~~ [DO NOT MERGE] Feature: Passwordless Login and Password Reset supports use of email mode Jan 8, 2026

hajinsuha1 and others added 3 commits January 9, 2026 10:56

Merge branch 'develop' into feature/email-otp

07802f3

Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

lint

c0aedcb

fix incorrect resetPasswordLandingPath in usePasswordReset after merg…

3d27d0b

…ing develop

hajinsuha1 force-pushed the feature/email-otp branch from e1dcdfd to 3d27d0b Compare January 12, 2026 18:46

Merge branch 'develop' into feature/email-otp

e49c9be

fix failing unit test after merge from develop

3cfece1

hajinsuha1 marked this pull request as ready for review January 13, 2026 16:20

hajinsuha1 requested a review from a team as a code owner January 13, 2026 16:20

hajinsuha1 changed the title ~~[DO NOT MERGE] Feature: Passwordless Login and Password Reset supports use of email mode~~ Feature: Passwordless Login and Password Reset supports use of email mode Jan 13, 2026

Merge branch 'develop' into feature/email-otp

c02836d

hajinsuha1 removed the do not merge No matter what, do not merge this pr label Jan 13, 2026

hajinsuha1 commented Jan 16, 2026

View reviewed changes

packages/commerce-sdk-react/src/auth/index.ts Show resolved Hide resolved

Merge branch 'develop' into feature/email-otp

892ef8c

Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

hajinsuha1 requested a review from yunakim714 January 16, 2026 15:02

hajinsuha1 added 2 commits January 22, 2026 12:36

Update error message when shopper exceedes request limit for password…

36e1b20

…less and password reset

Merge branch 'feature/email-otp' of https://github.com/SalesforceComm…

3e9e385

…erceCloud/pwa-kit into feature/email-otp

hajinsuha1 mentioned this pull request Jan 22, 2026

@W-20540715 MERGE 1CC TO DEVELOP #3552

Merged

12 tasks

alexvuong reviewed Jan 22, 2026

View reviewed changes

packages/pwa-kit-create-app/CHANGELOG.md Outdated Show resolved Hide resolved

alexvuong reviewed Jan 22, 2026

View reviewed changes

packages/template-retail-react-app/app/hooks/use-auth-modal.test.js Show resolved Hide resolved

alexvuong reviewed Jan 22, 2026

View reviewed changes

packages/template-retail-react-app/app/utils/url.js Show resolved Hide resolved

hajinsuha1 and others added 4 commits January 22, 2026 16:46

Apply suggestion from @alexvuong

abff98d

Co-authored-by: Alex Vuong <alex.vuong@salesforce.com> Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

address feedback:

fe0a623

- mock at api level for tests - update changelog

Merge branch 'feature/email-otp' of https://github.com/SalesforceComm…

5f31e30

…erceCloud/pwa-kit into feature/email-otp

lint

bc6f621

yunakim714 reviewed Jan 26, 2026

View reviewed changes

packages/template-retail-react-app/app/utils/auth-utils.js Outdated Show resolved Hide resolved

packages/template-retail-react-app/app/utils/auth-utils.test.js Outdated Show resolved Hide resolved

hajinsuha1 and others added 2 commits January 26, 2026 15:06

Merge branch 'develop' into feature/email-otp

c766b59

Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

update copyright date for new files

f4852df

Co-authored-by: Yuna Kim <84923642+yunakim714@users.noreply.github.com> Signed-off-by: Jinsu Ha <91205717+hajinsuha1@users.noreply.github.com>

alexvuong approved these changes Jan 27, 2026

View reviewed changes

Merge branch 'develop' into feature/email-otp

12a235d

hajinsuha1 requested a review from yunakim714 January 28, 2026 15:07

yunakim714 approved these changes Jan 28, 2026

View reviewed changes

hajinsuha1 merged commit 5c30741 into develop Jan 28, 2026
40 checks passed

hajinsuha1 deleted the feature/email-otp branch January 28, 2026 17:02

vcua-mobify mentioned this pull request Feb 2, 2026

Passwordless Login - Util function for passwordless callback URI #3630

Merged

Conversation

hajinsuha1 commented Dec 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Types of Changes

Changes

template-retail-react-app

commerce-sdk-react

How to Test-Drive This PR

Email mode

Passwordless Login

Password Reset

Callback mode

Passwordless Login

Password Reset

Backwards compatibility (mode field missing)

Passwordless Login

Password Reset

Error Handling

Too many requests error

no callback_uri is registered for client error

pwa-kit-create-app

E2E Tests

Checklists

General

Accessibility Compliance

Localization

Uh oh!

cc-prodsec commented Dec 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

Uh oh!

hajinsuha1 commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

yunakim714 commented Jan 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

jeremy-jung1 commented Jan 27, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

hajinsuha1 commented Dec 17, 2025 •

edited

Loading

`no callback_uri is registered for client` error

cc-prodsec commented Dec 17, 2025 •

edited

Loading

hajinsuha1 commented Jan 12, 2026 •

edited

Loading

yunakim714 commented Jan 26, 2026 •

edited

Loading