VCST-114: decoupled login error logic between modules

[ksavosteev]

Description

Added token login checks and error descriptions same as in storefront. Need to enable the following setting in platform config to see detailed errors. Otherwise generic LoginFailed error will be shown.

  "PasswordLogin": {
    "DetailedErrors": true
  },

---

Errors for all users (including admins):

• If account LockedOut and LockoutEnd == Max Date: UserIsLockedOut
• If account LockedOut and LockoutEnd != Max Date: UserIsTemporaryLockedOut

---

Errors only for contacts:

First need to pass storeId param to token/connect endpoint:

grant_type=password&scope=offline_access&username=<...>&password=<...>&storeId=B2B-store

• If no StoreId passed or StoreId != user store: UserCannotLoginInStore
• If account LockedOut and Contact status == "Locked" and user Email not confirmed and Email confirmation required: EmailVerificationIsRequired

References

QA-test:

Jira-link:

https://virtocommerce.atlassian.net/browse/VCST-114

Artifact URL:

Tagged version is: 3.809.0-alpha.12891-vcst-114-f2b03433

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud