spryker/customer

Included commits: 7.86.1...7.87.0

Improvements

• Introduced CustomerConstants::PASSWORD_HASH_COST and CustomerConfig::getPasswordHashCost() to make the bcrypt cost factor configurable, lowering hashing time in test environments.

Adjustments

• Removed Customer::BCRYPT_FACTOR in favor of CustomerConfig::getPasswordHashCost().

Included commits: 7.86.0...7.86.1

Fixes

• Fixed SpyCustomerQuery::filterByEmail() used by customer-related backend API endpoints to consistently apply case-sensitivity handling for every comparison, and to reject an array of emails combined with a comparison other than Criteria::IN/Criteria::NOT_IN by throwing AmbiguousComparisonException.

Included commits: 7.85.0...7.86.0

Improvements

• Added support for \Monolog\LogRecord in CurrentCustomerDataRequestProcessorPlugin::__invoke(), CurrentCustomerDataRequestLogProcessor::__invoke(), and CurrentCustomerDataRequestLogProcessorInterface::__invoke() to enable request-data enrichment under Monolog 3.

Fixes

• Fixed AddressController::editAction() to read the id-customer query parameter via Request::get() instead of getInt() for Symfony 7 compatibility.

Adjustments

• Converted Callback constraint options to named constructor arguments in CustomerForm and CustomerUpdateForm to support Symfony 6.4/7.4.

Included commits: 7.84.0...7.85.0

Improvements

• Introduced CustomerFacade::getCustomerCollectionByCollectionCriteria() to retrieve customers filtered by ids, references, emails, or search terms, with sorting and pagination, to support the back-office customers list endpoint.
• Introduced CustomerFacade::getAddressCollection() and CustomerFacade::validateAddress() to retrieve and validate customer addresses for the back-office customers endpoint.
• Introduced CustomerFacade::validateAddress() to validate first name, last name, salutation, and field lengths, and execute the AddressValidatorPluginInterface plugin stack before an address is created or updated.
• Extended CustomerFacade::addCustomer(), CustomerFacade::registerCustomer() and CustomerFacade::updateCustomer() to execute the new CustomerValidatorPluginInterface plugin stack, rejecting the customer without persisting anything when a plugin reports an error.
• Introduced CustomerConfig::getCustomerCollectionSortableFieldMap() and CustomerConfig::getAddressCollectionSortableFieldMap() to define the allow-listed sortable fields for the customer and address collection endpoints.
• Introduced CustomerConfig::getCustomerNamePattern() to define the pattern first and last names must match.
• Introduced CustomerDependencyProvider::PLUGINS_CUSTOMER_VALIDATOR and CustomerDependencyProvider::PLUGINS_ADDRESS_VALIDATOR plugin stack constants.
• Added createdAt and updatedAt fields to AddressTransfer to expose address timestamps on the back-office customers endpoint.
• Introduced CustomerCollectionCriteriaTransfer, CustomerConditionsTransfer, AddressCriteriaTransfer, AddressConditionsTransfer, AddressCollectionTransfer, AddressResponseTransfer and SortTransfer.
• Introduced new glossary key Messages::CUSTOMER_STORE_REQUIRED_FOR_PASSWORD_TOKEN, requiring storeName when a password token is requested.

Included commits: 7.83.0...7.84.0

Improvements

• Updated CustomerForm to use the updated Gui DatePickerType for the date of birth field, restricting selection to dates not later than today.

Included commits: 7.82.0...7.83.0

Improvements

• Extended password restore mail flow to support graceful handling of email delivery failures by propagating MailResponse data back to CustomerResponseTransfer, allowing callers to detect and surface email send errors.
• Introduced mailResponse property to MailTransfer to carry email delivery result information.
• Introduced MailResponse transfer to represent the outcome of an email send attempt.

Included commits: 7.81.1...7.82.0

Improvements

• Declared HTTP response codes for the customer registration confirmation endpoint to support API discoverability for the Storefront API.

Fixes

• Corrected the registration confirmation response code declaration from 200 to 201 and simplified the 422 description to cover both unknown keys and already-confirmed accounts, replacing separate 404 and 409 entries.

Included commits: 7.81.0...7.81.1

Adjustments

• Registered SprykerTest\Zed\Customer\Helper namespace in the autoloader to home test doubles in their seam-owning module.

Included commits: 7.80.2...7.81.0

Improvements

• Extended CustomerFacadeInterface::getCustomer() with an optional $isSecure parameter; when true (default), the password hash is excluded from the returned transfer to improve authentication security.
• Introduced CustomerClientInterface::getCustomerForAuthentication() to retrieve the customer including the password hash exclusively for authentication contexts.
• Adjusted CustomerSession::setCustomer() and setCustomerRawData() to exclude the password hash from the session to improve authentication security.
• Adjusted AbstractSpyCustomer::toArray() to strip the password field by default, and AbstractSpyCustomer::setPassword() to guard against accidental null overwrites on existing entities.

Included commits: 7.80.1...7.80.2

Fixes

• Fixed Customer::attachAddresses() to pass a non-null Criteria to bypass Propel's instance-pool cache, preventing stale empty address collections from being returned in long-running FPM workers.

Included commits: 7.80.0...7.80.1

Fixes

• Reverted broken release.

Included commits: 7.79.0...7.80.0

Improvements

• Introduced CustomerClientInterface::getCustomerForAuthentication() to retrieve customer data including the password hash exclusively for authentication contexts, keeping credential validation separate from general customer data retrieval.
• Extended CustomerFacadeInterface::getCustomer() with an optional $isSecure parameter (defaults to true) to exclude the password hash from the returned CustomerTransfer by default, ensuring credentials are not inadvertently exposed outside authentication flows.
• Adjusted update(), updatePassword(), findCustomerByReference(), and resolveCustomer() to strip the password hash from returned transfers, ensuring credentials are excluded from customer data used outside of authentication.

Included commits: 7.78.2...7.79.0

Improvements

• Extended customer search in the Back Office by adding support for filtering by first name, last name, and email using partial matching, enabling more flexible customer lookup in Back Office configuration.
• Introduced CustomerCriteriaSearchTerms transfer to carry search term filters (firstName, lastName, email) for customer queries.
• Added searchTerms and limit fields to CustomerCriteriaFilterTransfer to support configurable and targeted customer search.

Included commits: 7.78.1...7.78.2

Adjustments

• Removed includableIn declaration from customers-addresses resource schema file to align with the updated API Platform schema model.

Included commits: 7.78.0...7.78.1

Fixes

• Adjusted PHPStan configuration to use excludePaths instead of individual ignoreErrors entries for API Platform Storefront classes, fixing PHPStan errors.

Included commits: 7.77.0...7.78.0

Improvements

• Introduced CustomerFacade::resolveCustomer() and CustomerClient::resolveCustomer() to resolve or create a customer from OAuth resource owner data, supporting SOL-484 aim readiness in existing modules.
• Introduced AcceptOnlyOauthCustomerAuthenticationStrategyPlugin and CreateCustomerOauthCustomerAuthenticationStrategyPlugin to configure customer resolution behavior on OAuth login.
• Added sendRegistrationToken property to CustomerTransfer to control registration token delivery during OAuth-based customer creation.
• Introduced new transfers ResourceOwnerTransfer, ResourceOwnerRequestTransfer, ResourceOwnerResponseTransfer, OauthCustomerResolveRequestTransfer, OauthCustomerResolveResponseTransfer, OauthCustomerRestrictionRequestTransfer, and OauthCustomerRestrictionResponseTransfer to support OAuth customer resolution flow.