storefront

https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

Currently, catch block is the same for both methods in useForgotPasswordFactory (https://github.com/vuestorefront/vue-storefront/pull/5971/files/0e001721be751b0b0130915023ea0867722e1065#diff-89077440c1264480ee6ffbbcfb08d6c64c9881bea61ebbd8e0e5d260085b66ad):

err.message = err?.graphQLErrors?.[0]?.message || err.message;

Let's create an external function that takes care of that a

A while ago, we converted API controller specs into requests specs, see #2052. But those specs still have references from their old "life" that we can clean a little bit with a small effort.

In fact, their filenames still have the _controller_ part, which makes no sense now. Eg. solidus/api/spec/requests/spree/api/addresses_controller_spec.rb

Also, they contain references to the previo

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Describe the bug
Our form example should have native select - SfSelect. There is SfComponentSelect right now.

How to reproduce
Steps to reproduce the behavior:

1. Go to Form
2. See select

Describe the bug

There is a styling issue between the Search block included in WordPress and Storefront styles when the block is added to a widget area.

To Reproduce

1. With WordPress 5.8, go to Appearance > Widgets.
2. Add the Search block into the sidebar.
3. Go to the frontend, and notice there is a magnifier icon which overlaps the label:
   ![imatge](https://user-images.githubuserc

Type: minor

Describe the bug
After adding a new account address, the screen goes blank you appear to be logged out, but when you refresh the page, the address is there and you are still logged in.

To Reproduce
Steps to reproduce the behavior:

1. Go to storefront
2. Log in
3. Click user name in upper right > Profile
4. Add a new address.
5. When you submit the form, see the