@fastaar/nextjs 0.1.0

package/dist/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhook.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport { WebhookEvent } from './types';\n\n/**\n * Verify the X-Fastaar-Signature header (`t=<ts>,v1=<hmac>`) against the\n * raw request body using your merchant webhook secret.\n *\n * @param secret Your merchant webhook secret\n * @param rawBody The raw request body string or Buffer\n * @param signatureHeader The value of the X-Fastaar-Signature header\n * @param toleranceSeconds Allowed drift in seconds. Defaults to 300 (5 minutes).\n * @returns boolean\n */\nexport function verifyWebhookSignature(\n  secret: string,\n  rawBody: string | Buffer,\n  signatureHeader: string | null | undefined,\n  toleranceSeconds = 300\n): boolean {\n  const match = /^t=(\\d+),v1=([a-f0-9]{64})$/.exec(signatureHeader ?? '');\n\n  if (!match) {\n    return false;\n  }\n\n  const timestamp = Number(match[1]);\n\n  if (Math.abs(Date.now() / 1000 - timestamp) > toleranceSeconds) {\n    return false;\n  }\n\n  const expected = crypto\n    .createHmac('sha256', secret)\n    .update(`${timestamp}.${rawBody}`)\n    .digest('hex');\n\n  try {\n    return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(match[2]));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verifies and parses a webhook event request from a Next.js App Router Route Handler.\n * It automatically reads the request's raw text body, verifies the signature, and\n * returns the parsed event object.\n *\n * @param req The Request (or NextRequest) object from the Route Handler\n * @param secret The webhook secret. Defaults to process.env.FASTAAR_WEBHOOK_SECRET.\n * @returns {Promise<{ isValid: boolean; event: WebhookEvent | null }>}\n */\nexport async function verifyNextWebhook(\n  req: Request,\n  secret?: string\n): Promise<{ isValid: boolean; event: WebhookEvent | null }> {\n  const webhookSecret = secret ?? process.env.FASTAAR_WEBHOOK_SECRET;\n  if (!webhookSecret) {\n    throw new Error('Fastaar webhook secret is required for verification.');\n  }\n\n  const signature = req.headers.get('x-fastaar-signature') || req.headers.get('X-Fastaar-Signature');\n  if (!signature) {\n    return { isValid: false, event: null };\n  }\n\n  try {\n    // Clone the request to avoid locking the stream if accessed again\n    const clonedReq = req.clone();\n    const rawBody = await clonedReq.text();\n\n    const isValid = verifyWebhookSignature(webhookSecret, rawBody, signature);\n    if (!isValid) {\n      return { isValid: false, event: null };\n    }\n\n    const event = JSON.parse(rawBody) as WebhookEvent;\n    return { isValid: true, event };\n  } catch {\n    return { isValid: false, event: null };\n  }\n}\n"],"mappings":"AAAA,OAAO,YAAY;AAaZ,SAAS,uBACd,QACA,SACA,iBACA,mBAAmB,KACV;AACT,QAAM,QAAQ,8BAA8B,KAAK,mBAAmB,EAAE;AAEtE,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,QAAM,YAAY,OAAO,MAAM,CAAC,CAAC;AAEjC,MAAI,KAAK,IAAI,KAAK,IAAI,IAAI,MAAO,SAAS,IAAI,kBAAkB;AAC9D,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,OACd,WAAW,UAAU,MAAM,EAC3B,OAAO,GAAG,SAAS,IAAI,OAAO,EAAE,EAChC,OAAO,KAAK;AAEf,MAAI;AACF,WAAO,OAAO,gBAAgB,OAAO,KAAK,QAAQ,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC;AAAA,EAC5E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWA,eAAsB,kBACpB,KACA,QAC2D;AAC3D,QAAM,gBAAgB,UAAU,QAAQ,IAAI;AAC5C,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AAEA,QAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB,KAAK,IAAI,QAAQ,IAAI,qBAAqB;AACjG,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,SAAS,OAAO,OAAO,KAAK;AAAA,EACvC;AAEA,MAAI;AAEF,UAAM,YAAY,IAAI,MAAM;AAC5B,UAAM,UAAU,MAAM,UAAU,KAAK;AAErC,UAAM,UAAU,uBAAuB,eAAe,SAAS,SAAS;AACxE,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,SAAS,OAAO,OAAO,KAAK;AAAA,IACvC;AAEA,UAAM,QAAQ,KAAK,MAAM,OAAO;AAChC,WAAO,EAAE,SAAS,MAAM,MAAM;AAAA,EAChC,QAAQ;AACN,WAAO,EAAE,SAAS,OAAO,OAAO,KAAK;AAAA,EACvC;AACF;","names":[]}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@fastaar/nextjs",
+  "version": "0.1.0",
+  "description": "Next.js React Server Components & Route Handlers integration for Fastaar payment gateway",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "prepublishOnly": "npm run build"
+  },
+  "peerDependencies": {
+    "next": ">=13.0.0",
+    "react": ">=18.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "@types/react": "^18.2.48",
+    "next": "^14.1.0",
+    "react": "^18.2.0",
+    "tsup": "^8.0.1",
+    "typescript": "^5.3.3"
+  },
+  "keywords": [
+    "fastaar",
+    "bkash",
+    "nagad",
+    "payments",
+    "bangladesh",
+    "nextjs",
+    "server-components",
+    "react-server-components"
+  ]
+}