@autobusal/order-process 1.5.0 → 1.5.2

package/BKT/Bkt.tsx

@@ -76,7 +76,10 @@ const Bkt = ({ hash, t }: Props): JSX.Element => {
         <input type="hidden" defaultValue={ data?.currency } { ...register('currency') } />
         <input type="hidden" defaultValue={ data?.okUrl } { ...register('okUrl') } />
         <input type="hidden" defaultValue={ data?.failUrl } { ...register('failUrl') } />
-        <input type="hidden" defaultValue={ data?.orderId } { ...register('oid') } />
+        { /* Claude - 2026-09-25 (audit): the hash is signed over data.oid (the
+             per-attempt order-number reference), not the database id - posting
+             orderId made BKT reject the signature. orderId stays as ObtBktId. */ }
+        <input type="hidden" defaultValue={ data?.oid ?? data?.orderId } { ...register('oid') } />
         <input type="hidden" defaultValue={ data?.amount } { ...register('amount') } />
         <input type="hidden" defaultValue={ data?.lang } { ...register('lang') } />
 

package/Content.tsx

@@ -5,6 +5,7 @@ import Stripe from './Stripe/Stripe';
 import Mollie from './Mollie/Mollie';
 import Raiffeisen from './Reiffeisen/Raiffeisen';
 import Nexi from './Nexi/Nexi';
+import Mgpay from './Mgpay/Mgpay';
 
 interface Props {
   type?: string
@@ -28,6 +29,8 @@ const Content = ({ type, hash, t }: Props): JSX.Element => {
 
     case 'nexi':
       return <Nexi hash={ hash } t={ t } />;
+    case 'mgpay':
+      return <Mgpay hash={ hash } t={ t } />;
 
     default:
       return <Standard type={ type } hash={ hash } t={ t } />;

package/Mgpay/Mgpay.tsx

@@ -0,0 +1,49 @@
+import { useEffect } from 'react';
+import { TFunction } from 'i18next';
+import { useNavigate } from 'react-router-dom';
+import { Inline } from '@autobusal/common';
+import { Container } from '../styles';
+import { useMakeMgpay } from '../services';
+
+interface Props {
+  hash?: string
+  t: TFunction<'common'>
+}
+
+/**
+ * The Magus Pay Hub - Claude, 2026-09-07.
+ *
+ * Same shape as Raiffeisen: one call to obtapi registers the order with the
+ * hub and answers with its pay_url; the browser goes there and comes back
+ * to /orders/purchased or /orders/cancelled, which are hints - the booking
+ * is marked paid only by the hub's signed notification to obtapi.
+ */
+const Mgpay = ({ hash, t }: Props): JSX.Element => {
+  const { data, isSuccess, isError, error } = useMakeMgpay(String(hash));
+
+  const navigate = useNavigate();
+
+  useEffect(() => {
+    if (isSuccess) {
+      window.location.href = data.redirect;
+    }
+  }, [data, isSuccess]);
+
+  useEffect(() => {
+    if (isError) {
+      const message = (error as { response?: { data?: { message?: string } } })?.response?.data?.message;
+
+      const reason = message ?? t('order_process.error', { ns: 'common', defaultValue: 'We could not complete your payment. Please try again.' });
+
+      navigate(hash ? `/orders/cancelled/${ hash }?msg=${ encodeURIComponent(reason) }` : '/', { replace: true });
+    }
+  }, [isError, error, hash, navigate, t]);
+
+  return (
+    <Container>
+      <Inline text={ t('order_process.mgpay', { defaultValue: t('order_process.raiffeisen') }) } />
+    </Container>
+  );
+};
+
+export default Mgpay;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autobusal/order-process",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "author": "Ferjolt Ozuni",
   "type": "module",
   "main": "index.ts",

package/services.ts

@@ -1,6 +1,6 @@
 import { useQuery, UseQueryResult } from '@tanstack/react-query';
 import { apiClient } from '@autobusal/providers';
-import { BKTData, StripeData, MollieData, RaiffeisenData, NexiData } from './types';
+import { BKTData, StripeData, MollieData, RaiffeisenData, NexiData, MgpayData } from './types';
 
 /**
  * Starting a payment must happen EXACTLY ONCE per attempt.
@@ -116,4 +116,18 @@ export const useMakeNexi = (hash: string): UseQueryResult<NexiData> => (
         ))
     )
   })
-);
+);
+
+export const useMakeMgpay = (hash: string): UseQueryResult<MgpayData> => (
+  useQuery({
+    queryKey: ['process-payment-mgpay', { hash }],
+    ...ONCE,
+    queryFn: async () => (
+      await apiClient
+        .post('/api/payment/mgpay', { hash })
+        .then(response => (
+          response?.data ?? ''
+        ))
+    )
+  })
+);

package/types.ts

@@ -5,7 +5,7 @@ export interface BKTFormData {
   currency: number
   okUrl: string
   failUrl: string
-  oid: number
+  oid: number | string // Claude - 2026-09-25 (audit): the order-number reference is a string
   amount: number
   lang: string
   Email: string
@@ -47,6 +47,9 @@ export interface BKTData {
   description: string
   amount: number
   orderId: number
+  // Claude - 2026-09-25 (audit): the per-attempt order-number reference
+  // obtapi signs into the hash (BKT Prepare) - what BKT must receive as oid
+  oid?: string
   labelId: number
   domain: string
   currency: number
@@ -77,4 +80,8 @@ export interface RaiffeisenData {
 
 export interface NexiData {
   redirect: string
-}
+}
+
+export interface MgpayData {
+  redirect: string
+}