@beel_es/sdk 1.0.0

package/dist/webhooks/index.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookVerificationError = exports.WebhookVerifier = void 0;
+const crypto_1 = require("crypto");
+class WebhookVerifier {
+    constructor(secret, toleranceSeconds = 300) {
+        if (!secret || secret.trim().length === 0) {
+            throw new Error('Webhook secret is required');
+        }
+        this.secret = secret;
+        this.toleranceSeconds = toleranceSeconds;
+    }
+    verify(rawBody, signatureHeader) {
+        if (!signatureHeader) {
+            throw new WebhookVerificationError('Missing BeeL-Signature header');
+        }
+        const { timestamp, signature } = this.parseSignatureHeader(signatureHeader);
+        const now = Math.floor(Date.now() / 1000);
+        const age = Math.abs(now - timestamp);
+        if (age > this.toleranceSeconds) {
+            throw new WebhookVerificationError(`Webhook timestamp too old (${age}s ago, max ${this.toleranceSeconds}s allowed)`);
+        }
+        const bodyString = Buffer.isBuffer(rawBody) ? rawBody.toString('utf8') : rawBody;
+        const expectedSignature = this.computeSignature(timestamp, bodyString);
+        if (!this.secureCompare(signature, expectedSignature)) {
+            throw new WebhookVerificationError('Invalid webhook signature');
+        }
+        try {
+            return JSON.parse(bodyString);
+        }
+        catch {
+            throw new WebhookVerificationError('Invalid JSON in webhook body');
+        }
+    }
+    parseSignatureHeader(header) {
+        const parts = header.split(',');
+        let timestamp;
+        let signature;
+        for (const part of parts) {
+            const [key, value] = part.split('=', 2);
+            if (key === 't')
+                timestamp = parseInt(value, 10);
+            else if (key === 'v1')
+                signature = value;
+        }
+        if (!timestamp || !signature || isNaN(timestamp)) {
+            throw new WebhookVerificationError('Invalid signature header format');
+        }
+        return { timestamp, signature };
+    }
+    computeSignature(timestamp, body) {
+        return (0, crypto_1.createHmac)('sha256', this.secret)
+            .update(`${timestamp}.${body}`, 'utf8')
+            .digest('hex');
+    }
+    secureCompare(a, b) {
+        if (a.length !== b.length)
+            return false;
+        return (0, crypto_1.timingSafeEqual)(Buffer.from(a, 'utf8'), Buffer.from(b, 'utf8'));
+    }
+}
+exports.WebhookVerifier = WebhookVerifier;
+class WebhookVerificationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WebhookVerificationError';
+    }
+}
+exports.WebhookVerificationError = WebhookVerificationError;
+//# sourceMappingURL=index.js.map

package/dist/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":";;;AAAA,mCAAqD;AAUrD,MAAa,eAAe;IAI1B,YAAY,MAAc,EAAE,mBAA2B,GAAG;QACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED,MAAM,CACJ,OAAwB,EACxB,eAAmC;QAEnC,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAE5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;QAEtC,IAAI,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,IAAI,wBAAwB,CAChC,8BAA8B,GAAG,cAAc,IAAI,CAAC,gBAAgB,YAAY,CACjF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACjF,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEvE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,wBAAwB,CAAC,8BAA8B,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,MAAc;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,SAA6B,CAAC;QAClC,IAAI,SAA6B,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACxC,IAAI,GAAG,KAAK,GAAG;gBAAE,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;iBAC5C,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAS,GAAG,KAAK,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IAEO,gBAAgB,CAAC,SAAiB,EAAE,IAAY;QACtD,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;aACrC,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC;aACtC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAEO,aAAa,CAAC,CAAS,EAAE,CAAS;QACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,IAAA,wBAAe,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;CACF;AAzED,0CAyEC;AAED,MAAa,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AALD,4DAKC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@beel_es/sdk",
+  "version": "1.0.0",
+  "description": "Official TypeScript SDK for the BeeL API - Fully typed wrapper over OpenAPI-generated code",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "prebuild": "mkdir -p src/generated && cp -r ../../generated/typescript/* src/generated/",
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "test": "jest"
+  },
+  "keywords": [
+    "beel",
+    "invoicing",
+    "api",
+    "sdk",
+    "typescript"
+  ],
+  "author": "BeeL",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/beel-es/beel-sdks"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.3.0"
+  },
+  "peerDependencies": {
+    "typescript": ">=4.5.0"
+  }
+}