feat(core-flows,medusa): Add customer validation on cart update (#9662)

packages/medusa/src/api/store/carts/[id]/route.ts

@@ -1,11 +1,15 @@
-import { updateCartWorkflow } from "@medusajs/core-flows"
+import { updateCartWorkflowWithCustomerValidation } from "@medusajs/core-flows"
 import {
   AdditionalData,
   HttpTypes,
   UpdateCartDataDTO,
 } from "@medusajs/framework/types"
 
-import { MedusaRequest, MedusaResponse } from "@medusajs/framework/http"
+import {
+  AuthenticatedMedusaRequest,
+  MedusaRequest,
+  MedusaResponse,
+} from "@medusajs/framework/http"
 import { refetchCart } from "../helpers"
 
 export const GET = async (
@@ -22,17 +26,15 @@ export const GET = async (
 }
 
 export const POST = async (
-  req: MedusaRequest<UpdateCartDataDTO & AdditionalData>,
-  res: MedusaResponse<{
-    cart: HttpTypes.StoreCart
-  }>
+  req: AuthenticatedMedusaRequest<UpdateCartDataDTO & AdditionalData>,
+  res: MedusaResponse<HttpTypes.StoreCartResponse>
 ) => {
-  const workflow = updateCartWorkflow(req.scope)
-
+  const workflow = updateCartWorkflowWithCustomerValidation(req.scope)
   await workflow.run({
     input: {
       ...req.validatedBody,
       id: req.params.id,
+      auth_customer_id: req.auth_context?.actor_id,
     },
   })
 

packages/medusa/src/api/store/carts/validators.ts

@@ -46,6 +46,7 @@ export const StoreRemoveCartPromotions = z
 export type StoreUpdateCartType = z.infer<typeof UpdateCart>
 export const UpdateCart = z
   .object({
+    customer_id: z.string().optional(),
     region_id: z.string().optional(),
     email: z.string().email().nullish(),
     billing_address: z.union([AddressPayload, z.string()]).optional(),