@flowselections/floriday-authenticatie-module 1.0.15 → 1.0.16

package/dist-lib/lib/floriday.functions.js

@@ -6,7 +6,7 @@
 // ============================================================================
 import { createServerFn } from "@tanstack/react-start";
 import { requireSupabaseAuth } from "../integrations/supabase/auth-middleware";
-import { FLORYDAY_CLOCK_SUPPLY_PERMISSION_MESSAGE, FLORYDAY_CONTRACT_PERMISSION_MESSAGE, FLORYDAY_STANDARD_SCOPE, getFlorydayScopeForPath, isClockSupplyScope, isContractScope, } from "./floriday-scopes";
+import { FLORYDAY_AGREEMENT_PERMISSION_MESSAGE, FLORYDAY_CLOCK_SUPPLY_PERMISSION_MESSAGE, FLORYDAY_CONTRACT_PERMISSION_MESSAGE, FLORYDAY_SALES_STRATEGY_PERMISSION_MESSAGE, FLORYDAY_STANDARD_SCOPE, getFlorydayScopeForPath, isAgreementScope, isClockSupplyScope, isContractScope, isSalesStrategyScope, } from "./floriday-scopes";
 /**
  * Valideert een GS1 GLN: exact 13 cijfers met geldige check digit.
  * Retourneert null als geldig, anders een nl-foutmelding.
@@ -177,7 +177,16 @@ export async function getFlorydayAccessToken(supabase, env, options = {}) {
 function createFlorydayTokenError(status, body, scope) {
     const normalized = body.toLowerCase();
     const policyDenied = normalized.includes("access_denied") || normalized.includes("policy evaluation failed");
-    if (status === 401 && policyDenied) {
+    // Floriday geeft `invalid_scope` (HTTP 400) al bij het token-endpoint terug
+    // wanneer één van de gevraagde scopes niet aan de Client ID hangt.
+    const invalidScope = normalized.includes("invalid_scope") || normalized.includes("scopes are not configured");
+    if ((status === 401 && policyDenied) || (status === 400 && invalidScope)) {
+        if (isSalesStrategyScope(scope)) {
+            return new Error(FLORYDAY_SALES_STRATEGY_PERMISSION_MESSAGE);
+        }
+        if (isAgreementScope(scope)) {
+            return new Error(FLORYDAY_AGREEMENT_PERMISSION_MESSAGE);
+        }
         if (isClockSupplyScope(scope)) {
             return new Error(FLORYDAY_CLOCK_SUPPLY_PERMISSION_MESSAGE);
         }
@@ -537,6 +546,8 @@ const MANAGED_FLORYDAY_CRON_JOB_NAMES = new Set([
     "floriday-sales-strategies-sync-hourly",
     "floriday-base-items-sync-hourly",
     "floriday-contract-trade-item-groups-sync-hourly",
+    "floriday-agreements-sync-hourly",
+    "floriday-agreement-calloffs-sync-hourly",
     // Referentiedata (schema + code-lijsten)
     "floriday-reference-data-refresh-daily",
 ]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/floriday-authenticatie-module",
-  "version": "1.0.15",
+  "version": "1.0.16",
   "sideEffects": false,
   "type": "module",
   "main": "./dist-lib/index.js",