@inflightit/api-plugin-orders/src/util/anonymousToken.js

Orders plugin for the Reaction API

import getAnonymousAccessToken from "@reactioncommerce/api-utils/getAnonymousAccessToken.js";

/**
 * Create a new anonymous access token and add it to an order
 *
 * @param {Object} context app context
 * @param {String} orderId order id
 *
 * @returns {String} raw token secret
 */
export async function addAnonymousOrderToken(context, orderId) {
  const token = getAnonymousAccessToken();
  // We must never store the raw secret in the DB
  // So that even if the DB data is compromised,
  // the raw secrets are not there
  const toStore = { ...token };
  delete toStore.token;
  const update = { $push: { anonymousAccessTokens: toStore } };
  await context.collections.Orders.updateOne({ _id: orderId }, update);
  return token.token;
}