@flowselections/floriday-afhandeling-module 1.0.15 → 1.0.16

package/dist-lib/lib/authGateway.server.d.ts

@@ -0,0 +1,16 @@
+/** Batch-variant — geeft per sales-order-id een set delivery-order-ids terug. */
+export declare function resolveDeliveryOrdersBatch(salesOrderIds: string[]): Promise<Map<string, string[]>>;
+/**
+ * Haalt de Floriday-afleverbrief PDF op voor een sales-order via de
+ * Authenticatie-module gateway. Retourneert null wanneer:
+ *   - de secret niet geconfigureerd is
+ *   - er (nog) geen delivery-order in de cache staat
+ *   - de gateway een fout of geen URL teruggeeft
+ *   - de PDF-download faalt
+ * Nooit throws — de pakbon-print moet altijd door kunnen gaan.
+ */
+export declare function fetchDeliveryNotePdf(salesOrderId: string): Promise<{
+    base64: string;
+    mime: string;
+} | null>;
+//# sourceMappingURL=authGateway.server.d.ts.map

package/dist-lib/lib/authGateway.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authGateway.server.d.ts","sourceRoot":"","sources":["../../src/lib/authGateway.server.ts"],"names":[],"mappings":"AAoFA,iFAAiF;AACjF,wBAAsB,0BAA0B,CAC9C,aAAa,EAAE,MAAM,EAAE,GACtB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CA6BhC;AAgCD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAqElD"}

package/dist-lib/lib/authGateway.server.js

@@ -0,0 +1,195 @@
+// Server-only helper: HMAC-getekende call naar de Authenticatie-module gateway
+// om een Floriday-afleverbrief (delivery note / logistic-labels PDF) op te halen
+// vanuit een publieke Pickstation-route (geen Supabase-sessie beschikbaar).
+//
+// Signature schema (moet identiek zijn in de Authenticatie-module):
+//   message   = `${timestamp}.${JSON.stringify(body)}`
+//   signature = hex(HMAC-SHA256(AUTH_GATEWAY_HMAC_SECRET, message))
+//   headers   = { "X-Signature": signature, "X-Timestamp": timestamp }
+// Timestamp = ISO 8601 UTC, ±5 min venster.
+import { createHmac } from "node:crypto";
+import { createClient } from "@supabase/supabase-js";
+const GATEWAY_URL_FALLBACK = "https://floriday-authenticatie-module.lovable.app";
+const LOG = "[auth-gateway]";
+function gatewayBase() {
+    const raw = process.env.AUTH_GATEWAY_URL ??
+        process.env.VITE_AUTH_GATEWAY_URL ??
+        GATEWAY_URL_FALLBACK;
+    return raw.replace(/\/$/, "");
+}
+function getSupabase() {
+    const url = process.env.SUPABASE_URL ?? process.env.VITE_SUPABASE_URL;
+    const key = process.env.SUPABASE_PUBLISHABLE_KEY ?? process.env.VITE_SUPABASE_PUBLISHABLE_KEY;
+    if (!url || !key)
+        throw new Error("Supabase publishable env vars ontbreken");
+    return createClient(url, key, {
+        auth: { storage: undefined, persistSession: false, autoRefreshToken: false },
+    });
+}
+let cachedEnvironment = null;
+async function getFloridayEnvironment() {
+    if (cachedEnvironment)
+        return cachedEnvironment;
+    try {
+        const supabase = getSupabase();
+        const { data, error } = await supabase
+            .from("floriday_settings")
+            .select("active_environment")
+            .eq("id", 1)
+            .maybeSingle();
+        if (error) {
+            console.warn(`${LOG} kon actieve Floriday-omgeving niet ophalen`, error.message);
+        }
+        cachedEnvironment = data?.active_environment ?? "live";
+    }
+    catch (e) {
+        console.warn(`${LOG} kon actieve Floriday-omgeving niet ophalen`, e instanceof Error ? e.message : String(e));
+        cachedEnvironment = "live";
+    }
+    return cachedEnvironment;
+}
+/** Resolvt delivery-order-ids voor één sales-order via de SECURITY DEFINER RPC. */
+async function resolveDeliveryOrderIds(salesOrderId) {
+    try {
+        const supabase = getSupabase();
+        const { data, error } = await supabase.rpc("pickstation_resolve_delivery_orders", {
+            p_sales_order_ids: [salesOrderId],
+        });
+        if (error) {
+            console.warn(`${LOG} delivery-order lookup mislukt`, error.message);
+            return [];
+        }
+        const ids = new Set();
+        for (const row of (data ?? [])) {
+            if (row.delivery_order_id)
+                ids.add(row.delivery_order_id);
+        }
+        return [...ids];
+    }
+    catch (e) {
+        console.warn(`${LOG} delivery-order lookup exception`, e instanceof Error ? e.message : String(e));
+        return [];
+    }
+}
+/** Batch-variant — geeft per sales-order-id een set delivery-order-ids terug. */
+export async function resolveDeliveryOrdersBatch(salesOrderIds) {
+    const out = new Map();
+    const unique = [...new Set(salesOrderIds.filter(Boolean))];
+    if (unique.length === 0)
+        return out;
+    try {
+        const supabase = getSupabase();
+        const { data, error } = await supabase.rpc("pickstation_resolve_delivery_orders", {
+            p_sales_order_ids: unique,
+        });
+        if (error) {
+            console.warn(`${LOG} batch delivery-order lookup mislukt`, error.message);
+            return out;
+        }
+        for (const row of (data ?? [])) {
+            if (!row.sales_order_id || !row.delivery_order_id)
+                continue;
+            const list = out.get(row.sales_order_id) ?? [];
+            if (!list.includes(row.delivery_order_id))
+                list.push(row.delivery_order_id);
+            out.set(row.sales_order_id, list);
+        }
+    }
+    catch (e) {
+        console.warn(`${LOG} batch delivery-order lookup exception`, e instanceof Error ? e.message : String(e));
+    }
+    return out;
+}
+function signBody(secret, timestamp, body) {
+    return createHmac("sha256", secret).update(`${timestamp}.${body}`).digest("hex");
+}
+async function fetchPdfAsBase64(url) {
+    try {
+        const res = await fetch(url);
+        if (!res.ok) {
+            console.warn(`${LOG} PDF download mislukt`, { status: res.status, url });
+            return null;
+        }
+        const mime = res.headers.get("content-type") ?? "application/pdf";
+        const buf = new Uint8Array(await res.arrayBuffer());
+        let binary = "";
+        const chunk = 0x8000;
+        for (let i = 0; i < buf.length; i += chunk) {
+            binary += String.fromCharCode(...buf.subarray(i, i + chunk));
+        }
+        // btoa is available in the Workers runtime
+        const base64 = btoa(binary);
+        return { base64, mime };
+    }
+    catch (e) {
+        console.warn(`${LOG} PDF download exception`, e instanceof Error ? e.message : String(e));
+        return null;
+    }
+}
+/**
+ * Haalt de Floriday-afleverbrief PDF op voor een sales-order via de
+ * Authenticatie-module gateway. Retourneert null wanneer:
+ *   - de secret niet geconfigureerd is
+ *   - er (nog) geen delivery-order in de cache staat
+ *   - de gateway een fout of geen URL teruggeeft
+ *   - de PDF-download faalt
+ * Nooit throws — de pakbon-print moet altijd door kunnen gaan.
+ */
+export async function fetchDeliveryNotePdf(salesOrderId) {
+    const secret = process.env.AUTH_GATEWAY_HMAC_SECRET;
+    if (!secret) {
+        console.error(`${LOG} AUTH_GATEWAY_HMAC_SECRET ontbreekt — kan afleverbrief niet ophalen`);
+        return null;
+    }
+    if (!salesOrderId)
+        return null;
+    const deliveryOrderIds = await resolveDeliveryOrderIds(salesOrderId);
+    if (deliveryOrderIds.length === 0) {
+        return null; // nog geen delivery-order — normaal gedrag
+    }
+    if (deliveryOrderIds.length > 1) {
+        console.warn(`${LOG} meerdere delivery-orders voor sales-order ${salesOrderId} — pickstation prints alleen de eerste`);
+    }
+    const environment = await getFloridayEnvironment();
+    const payload = {
+        environment,
+        kind: "delivery-note",
+        salesOrderId,
+        deliveryOrderId: deliveryOrderIds[0],
+    };
+    const bodyStr = JSON.stringify(payload);
+    const timestamp = new Date().toISOString();
+    const signature = signBody(secret, timestamp, bodyStr);
+    try {
+        const res = await fetch(`${gatewayBase()}/api/public/gateway/pdf`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "X-Signature": signature,
+                "X-Timestamp": timestamp,
+            },
+            body: bodyStr,
+        });
+        const ct = res.headers.get("content-type") ?? "";
+        if (!ct.includes("application/json")) {
+            console.warn(`${LOG} gateway gaf geen JSON terug`, {
+                status: res.status,
+                contentType: ct,
+            });
+            return null;
+        }
+        const data = (await res.json());
+        if (!res.ok || !data?.ok || !data.url) {
+            console.warn(`${LOG} gateway respons niet OK`, {
+                status: res.status,
+                error: data?.error,
+            });
+            return null;
+        }
+        return await fetchPdfAsBase64(data.url);
+    }
+    catch (e) {
+        console.warn(`${LOG} gateway request exception`, e instanceof Error ? e.message : String(e));
+        return null;
+    }
+}