Remove axios and call the API with fetch

CHANGELOG.md

@@ -5,6 +5,9 @@ All notable changes to the ordercloud-javascript-sdk will be documented in this
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+# Unreleased
+- Breaking: axios is no longer a peer dependency. Requests use the platform `fetch`. `requestOptions.cancelToken` is now `requestOptions.signal`. `axiosAdapter` and axios interceptors are replaced by `Configuration.Set({ fetch, onRequest, onResponse })`. See the migration guide.
+
 # [13.0.0] - 2026-09-25
 - Bring SDK up to date with API v1.0.470. Breaking: `ApiClient.ClientSecret` and `SecurityProfile.IsExternalRoleGroup` are removed. Buyer product `PriceSchedule` is now `BuyerPriceSchedule`.
 - Update dev dependencies, including TypeScript 5.9 and TypeDoc 0.28. TypeDoc 0.28 requires the missing-exports plugin to be listed explicitly.

MIGRATION_GUIDE.md

@@ -2,6 +2,37 @@
 
 The objective of this guide is to document the breaking changes and updates required to migrate from one major version to the next.
 
+## Unreleased
+
+* Axios is no longer a peer dependency. The SDK sends requests with the platform `fetch`. Remove `axios` from your app if you installed it only for the SDK.
+
+* `requestOptions.cancelToken` is now `requestOptions.signal`, an `AbortSignal`. A cancelled call rejects with `CancellationError`. `isCancellation(error)` identifies it. It is not an `OrderCloudError`.
+
+    Before:
+    ```typescript
+    import axios from 'axios'
+    const source = axios.CancelToken.source()
+    Products.List({}, { cancelToken: source.token })
+    source.cancel()
+    ```
+
+    After:
+    ```typescript
+    import { isCancellation } from 'ordercloud-javascript-sdk'
+    const controller = new AbortController()
+    Products.List({}, { signal: controller.signal }).catch(error => {
+      if (isCancellation(error)) {
+        return
+      }
+      throw error
+    })
+    controller.abort()
+    ```
+
+* `SdkConfiguration.axiosAdapter` is removed. Pass `fetch` to use your own HTTP implementation. Global axios interceptors no longer see SDK calls. Use `onRequest` and `onResponse` on `Configuration.Set`.
+
+* `OrderCloudError` still exposes `status`, `statusText`, `errorCode`, `errors`, `response`, and `isOrderCloudError`. `error.request` is no longer an axios `XMLHttpRequest` or Node `ClientRequest`. It is `{ url, method }`.
+
 ## version 11.x.x to version 12.x.x
 * The `URL` and `SharedKey` properties have been removed from the `MessageSender` model, and `DeliveryConfigID` is now required. Configuration must be provided via a `DeliveryConfig` (managed through the new `DeliveryConfigurations` service) using either a `MailchimpConfig` or `MessageSenderConfig` delivery target. See the [updated Message Senders KB article](https://ordercloud.io/knowledge-base/message-senders#configuration-options) for more details. 
 

README.md

@@ -38,11 +38,7 @@ The OrderCloud SDK for Javascript is a modern client library for building soluti
 
 ## Requirements
 
-[Axios](https://www.npmjs.com/package/axios) is a peer dependency of the OrderCloudSDK.
-
-> Note: Peer dependencies are not installed automatically. They must be installed separately.
-
-Why isn't axios a dependency of OrderCloud SDK? Since axios is a fairly popular http library and may already exist as a dependency in your project it is considered best practice to have it defined as a peer dependency. This way, there isn't a potential for two versions of axios to be installed which could result in weird bugs, not to mention a bloated javascript bundle.
+The SDK sends HTTP with the platform [`fetch`](https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API) implementation. It runs in browsers and Node versions that provide global `fetch`. No HTTP library is installed with the SDK.
 
 ## ⚙️ Installation
 
@@ -234,81 +230,70 @@ Products.Get('my-product')
       // https://ordercloud-api.github.io/ordercloud-javascript-sdk/classes/orderclouderror
       console.log(error.message);
       console.log(JSON.stringify(error.errors, null, 4));
-    } else if (error.request) {
-      // the request was made but no response received
-      // `error.request` is an instance of XMLHttpRequest in the browser and an instance of http.ClientRequest in node.js
-      console.log(error.request);
+    } else if (error.isCancellation) {
+      // the caller aborted the request
+      console.log(error.message);
+    } else if (error.isTimeout) {
+      // the request exceeded timeoutInMilliseconds
+      console.log(error.message);
     } else {
       // Something happened in setting up the request that triggered an Error
       console.log('Error', error.message);
     }
   })
 ```
 
-## Interceptors
-
-You can use [axios interceptors](https://github.com/axios/axios#interceptors) to intercept a request before it goes out to the API or to intercept a response before it gets handled by the SDK. This enables you to log, rewrite, or even retry calls.
+## Request and response hooks
 
-The SDK does not use a custom axios instance, so you can set up your interceptors right off of axios.
+`Configuration.Set` accepts `onRequest` and `onResponse`. Use them to log, rewrite, or retry a call. `onRequest` returns the request that will be sent. `onResponse` runs before the SDK returns data or throws `OrderCloudError`.
 
 ```javascript
-// Add a request interceptor
-axios.interceptors.request.use(function (config) {
-    // Do something before request is sent
-    return config;
-  }, function (error) {
-    // Do something with request error
-    return Promise.reject(error);
-  });
-
-// Add a response interceptor
-axios.interceptors.response.use(function (response) {
-    // Any status code that lie within the range of 2xx cause this function to trigger
-    // Do something with response data
-    return response;
-  }, function (error) {
-    // Any status codes that falls outside the range of 2xx cause this function to trigger
-    // Do something with response error
-    return Promise.reject(error);
-  });
+import { Configuration } from 'ordercloud-javascript-sdk';
+
+Configuration.Set({
+  onRequest(request) {
+    console.log(request.method, request.url)
+    return request
+  },
+  onResponse(response) {
+    console.log(response.status)
+    return response
+  },
+})
 ```
 
 ## Cancelling Requests
 
-In addition to `requestOptions.accessToken` the sdk provides `requestOptions.cancelToken` which enables [axios request cancellation](https://github.com/axios/axios#cancellation). This option is useful for cleaning up outstanding requests when changes in your user experience no longer require the data requested. For instance, you could use the cancel token to clean up outstanding requests [when your react component unmounts](https://reactjs.org/docs/hooks-effect.html#effects-with-cleanup).
+`requestOptions.signal` accepts an [AbortSignal](https://developer.mozilla.org/en-US/docs/Web/API/AbortSignal). Use it to drop a request when the result is no longer needed, for instance [when a react component unmounts](https://reactjs.org/docs/hooks-effect.html#effects-with-cleanup).
 
 ```javascript
-import axios from 'axios';
-import { Products } from 'ordercloud-javascript-sdk';
+import { Products, isCancellation } from 'ordercloud-javascript-sdk';
 
-const signal = axios.CancelToken.source();
+const controller = new AbortController();
 
-Products.List({search: 'Tennis balls'}, {cancelToken: signal.token})
+Products.List({search: 'Tennis balls'}, {signal: controller.signal})
   .catch(ex => {
-    if (axios.isCancel(ex)) {
+    if (isCancellation(ex)) {
       console.log(ex) // 'This request was cancelled!'
     } else {
       console.log(ex) // Normal ordercloud exception
     }
   })
 
-// Oops! I don't want to resolve this request anymore
-signal.cancel('This request was cancelled!')
+controller.abort()
 ```
 
-## Axios Adapters
-
-Adapters in Axios allow for custom handling of requests, which opens up possibilities for advanced functionalities such as caching, request mocking, and the option to switch HTTP APIs (for instance, from XHR to Fetch). You can use community created adapters, or create one yourself (just make sure it adheres to the [axios adapter interface](https://github.com/axios/axios/blob/v1.x/lib/adapters/README.md))
+## Custom fetch
 
-Like all other sdk level options, Axios adapters can be defined with the Configuration service
+Pass a `fetch` function to the Configuration service to mock, cache, or reroute HTTP. The default is the platform global `fetch`.
 
 ```typescript
 import { Configuration } from 'ordercloud-javascript-sdk';
 
 Configuration.Set({
   baseApiUrl: 'https://sandboxapi.ordercloud.io',
   timeoutInMilliseconds: 20 * 1000,
-  axiosAdapter: myAdapter
+  fetch: myFetch
 })
 ```