@flowselections/floriday-authenticatie-module 1.0.22 → 1.0.24

package/dist-lib/lib/floriday.functions.js

@@ -93,7 +93,8 @@ function toPublic(row) {
 }
 // ─── Reusable internals (importable by other server fns) ────────────────────
 export async function getActiveFlorydayCredentials(supabase, env) {
-    const { data, error } = await supabase
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
+    const { data, error } = await supabaseAdmin
         .from("floriday_connections")
         .select("*")
         .eq("environment", env)
@@ -104,6 +105,7 @@ export async function getActiveFlorydayCredentials(supabase, env) {
     return data;
 }
 export async function getFlorydayAccessToken(supabase, env, options = {}) {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     const row = await getActiveFlorydayCredentials(supabase, env);
     if (!row)
         throw new Error(`Geen actieve Floriday-koppeling voor ${env}`);
@@ -117,7 +119,7 @@ export async function getFlorydayAccessToken(supabase, env, options = {}) {
     // Concurrency-guard: vlak voor de tokenrequest opnieuw lezen — een parallelle worker
     // kan zojuist een fresh token hebben geschreven en dan hoeven we niet nóg eens te refreshen.
     if (canReuseStoredToken && !options.forceRefresh) {
-        const { data: fresh } = await supabase
+        const { data: fresh } = await supabaseAdmin
             .from("floriday_connections")
             .select("access_token, token_expires_at")
             .eq("id", row.id)
@@ -127,32 +129,20 @@ export async function getFlorydayAccessToken(supabase, env, options = {}) {
             return fresh.access_token;
         }
     }
-    let json;
+    let accessToken;
     let newExpiresAt;
     try {
-        const tokenRes = await fetch(FLORYDAY_ENDPOINTS[env].tokenUrl, {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/x-www-form-urlencoded",
-                Accept: "application/json",
-            },
-            body: new URLSearchParams({
-                grant_type: "client_credentials",
-                client_id: deepSanitizeCredential(row.client_id),
-                client_secret: deepSanitizeCredential(row.client_secret),
-                scope: requestedScope,
-            }).toString(),
-        });
-        const text = await tokenRes.text();
-        if (!tokenRes.ok) {
-            throw createFlorydayTokenError(tokenRes.status, text, requestedScope);
+        const { getFlorydayTokenFromCentral } = await import("./central-auth.server");
+        const result = await getFlorydayTokenFromCentral(env, requestedScope);
+        if (!result.ok) {
+            throw createFlorydayTokenError(result.raw.status, result.raw.body, requestedScope);
         }
-        json = JSON.parse(text);
-        newExpiresAt = new Date(now + json.expires_in * 1000).toISOString();
+        accessToken = result.access_token;
+        newExpiresAt = result.expires_at;
         if (canReuseStoredToken) {
-            await supabase
+            await supabaseAdmin
                 .from("floriday_connections")
-                .update({ access_token: json.access_token, token_expires_at: newExpiresAt })
+                .update({ access_token: accessToken, token_expires_at: newExpiresAt })
                 .eq("id", row.id);
         }
         // Best-effort logging (faalt nooit hard).
@@ -172,7 +162,7 @@ export async function getFlorydayAccessToken(supabase, env, options = {}) {
         }).then(() => undefined, () => undefined);
         throw e;
     }
-    return json.access_token;
+    return accessToken;
 }
 function createFlorydayTokenError(status, body, scope) {
     const normalized = body.toLowerCase();
@@ -194,6 +184,7 @@ function createFlorydayTokenError(status, body, scope) {
     return new Error(`Floriday token-aanvraag mislukt [${status}]: ${body.slice(0, 300)}`);
 }
 async function fetchAndStoreFlorydayOrganizationName(supabase, env, connectionId) {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     try {
         // Stap 1: bepaal de eigen organizationId via trade-settings.
         const tsRes = await florydayFetch(supabase, env, `/${SUPPLIERS_API_VERSION}/trade-settings/supplier/current-organization`);
@@ -219,7 +210,7 @@ async function fetchAndStoreFlorydayOrganizationName(supabase, env, connectionId
         if (!name)
             return null;
         // Lees huidige rij om gln_code niet te overschrijven als die al gezet is.
-        const { data: existing } = await supabase
+        const { data: existing } = await supabaseAdmin
             .from("floriday_connections")
             .select("gln_code")
             .eq("id", connectionId)
@@ -228,7 +219,7 @@ async function fetchAndStoreFlorydayOrganizationName(supabase, env, connectionId
         if (gln && !existing?.gln_code) {
             update.gln_code = gln;
         }
-        await supabase.from("floriday_connections").update(update).eq("id", connectionId);
+        await supabaseAdmin.from("floriday_connections").update(update).eq("id", connectionId);
         return name;
     }
     catch (e) {
@@ -311,7 +302,8 @@ export async function florydayFetch(supabase, pathOrEnv, pathOrInit, maybeInit =
 export const listFlorydayConnections = createServerFn({ method: "GET" })
     .middleware([requireSupabaseAuth])
     .handler(async ({ context }) => {
-    const { data, error } = await context.supabase
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
+    const { data, error } = await supabaseAdmin
         .from("floriday_connections")
         .select("*")
         .order("environment", { ascending: true });
@@ -322,7 +314,8 @@ export const listFlorydayConnections = createServerFn({ method: "GET" })
 export const getFlorydayTokenHealth = createServerFn({ method: "GET" })
     .middleware([requireSupabaseAuth])
     .handler(async ({ context }) => {
-    const { data: conns } = await context.supabase
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
+    const { data: conns } = await supabaseAdmin
         .from("floriday_connections")
         .select("id, environment, token_expires_at, is_active")
         .eq("is_active", true);
@@ -345,8 +338,9 @@ export const forceRefreshFlorydayToken = createServerFn({ method: "POST" })
     return input;
 })
     .handler(async ({ data, context }) => {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     await getFlorydayAccessToken(context.supabase, data.environment, { forceRefresh: true });
-    const { data: row } = await context.supabase
+    const { data: row } = await supabaseAdmin
         .from("floriday_connections")
         .select("token_expires_at")
         .eq("environment", data.environment)
@@ -366,12 +360,13 @@ export const upsertFlorydayConnection = createServerFn({ method: "POST" })
     return input;
 })
     .handler(async ({ data, context }) => {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     // Update-in-place op (environment, is_active=true) — geen DELETE meer,
     // anders zou ON DELETE CASCADE alle cache-data voor deze connection wissen
     // bij een gewone credential-wijziging. SELECT-filter matcht exact de
     // partiële unieke index floriday_connections_env_active_uniq
     // (environment) WHERE is_active = true.
-    const { data: existing, error: selectError } = await context.supabase
+    const { data: existing, error: selectError } = await supabaseAdmin
         .from("floriday_connections")
         .select("id")
         .eq("environment", data.environment)
@@ -392,7 +387,7 @@ export const upsertFlorydayConnection = createServerFn({ method: "POST" })
     };
     let inserted;
     if (existing?.id) {
-        const { data: updated, error } = await context.supabase
+        const { data: updated, error } = await supabaseAdmin
             .from("floriday_connections")
             .update(payload)
             .eq("id", existing.id)
@@ -407,7 +402,7 @@ export const upsertFlorydayConnection = createServerFn({ method: "POST" })
         // de partiële unieke index vangt de tweede insert luid af met een
         // constraint-error. Credentials opslaan is een handmatige, zeldzame
         // actie — geen extra locking nodig.
-        const { data: created, error } = await context.supabase
+        const { data: created, error } = await supabaseAdmin
             .from("floriday_connections")
             .insert({ environment: data.environment, ...payload })
             .select("*")
@@ -491,7 +486,8 @@ export const deleteFlorydayConnection = createServerFn({ method: "POST" })
     return input;
 })
     .handler(async ({ data, context }) => {
-    const { error } = await context.supabase
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
+    const { error } = await supabaseAdmin
         .from("floriday_connections")
         .delete()
         .eq("id", data.id);
@@ -693,10 +689,11 @@ export const updateFlorydayPublishingSettings = createServerFn({ method: "POST"
     return { ...input, gln_code: trimmed || null };
 })
     .handler(async ({ data, context }) => {
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     const row = await getActiveFlorydayCredentials(context.supabase, data.environment);
     if (!row)
         throw new Error(`Geen actieve Floriday-koppeling voor ${data.environment}`);
-    const { error } = await context.supabase
+    const { error } = await supabaseAdmin
         .from("floriday_connections")
         .update({
         gln_code: data.gln_code?.trim() || null,
@@ -743,6 +740,7 @@ async function fetchBySequence(supabase, env, bySequenceEndpointBase, fromSequen
 }
 export async function syncFloridayEntityBySequence(supabase, env, connectionId, opts) {
     const t0 = Date.now();
+    const { supabaseAdmin } = await import("../integrations/supabase/client.server");
     const { data: stateRow } = await supabase
         .from("floriday_sync_state")
         .select("last_sequence_number")
@@ -754,7 +752,7 @@ export async function syncFloridayEntityBySequence(supabase, env, connectionId,
         // Debug-logging: helpt 401's onderscheid maken tussen scope-issue,
         // expired token en wrong env. Token zelf wordt NIET gelogd.
         try {
-            const { data: connRow } = await supabase
+            const { data: connRow } = await supabaseAdmin
                 .from("floriday_connections")
                 .select("token_expires_at")
                 .eq("id", connectionId)

package/dist-lib/lib/gateway/cache-tables.d.ts

@@ -0,0 +1,2 @@
+export declare const CACHE_TABLES: Record<string, string>;
+//# sourceMappingURL=cache-tables.d.ts.map

package/dist-lib/lib/gateway/cache-tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-tables.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/cache-tables.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAyB/C,CAAC"}

package/dist-lib/lib/gateway/cache-tables.js

@@ -0,0 +1,27 @@
+// Letterlijke kopie uit src/routes/api/public/gateway/cached-list.ts (HEAD).
+export const CACHE_TABLES = {
+    "sales-orders": "floriday_salesorders_cache",
+    "trade-items": "floriday_trade_items_cache",
+    "customer-organizations": "floriday_customers_cache",
+    "carriers": "floriday_carriers_cache",
+    "fulfillment-orders": "floriday_fulfillment_orders_cache",
+    "delivery-orders": "floriday_delivery_orders_cache",
+    "clock-supplies": "floriday_clock_supplies_cache",
+    "clock-presales": "floriday_clock_presales_cache",
+    "contracts": "floriday_contracts_cache",
+    "blanket-orders": "floriday_blanket_orders_cache",
+    "warehouses": "floriday_warehouses_cache",
+    "delivery-locations": "floriday_delivery_locations_cache",
+    "packings": "floriday_packings_cache",
+    "connections": "floriday_connections_cache",
+    "customer-stickers": "floriday_customer_stickers_cache",
+    "additional-services": "floriday_additional_services_cache",
+    "commercial-service-types": "floriday_commercial_service_types_cache",
+    "collections": "floriday_collections_cache",
+    "price-groups": "floriday_price_groups_cache",
+    "delivery-condition-sets": "floriday_delivery_condition_sets_cache",
+    "sales-strategies": "floriday_sales_strategies_cache",
+    "base-items": "floriday_base_items_cache",
+    "contract-trade-item-groups": "floriday_contract_trade_item_groups_cache",
+    "trade-item-classifications": "floriday_trade_item_classifications_cache",
+};

package/dist-lib/lib/gateway/cached-list.d.ts

@@ -0,0 +1,15 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+export interface CachedListInput {
+    environment: "staging" | "live";
+    entity: string;
+    limit?: number;
+}
+export type CachedListResult = {
+    ok: true;
+    rows: unknown[];
+} | {
+    ok: false;
+    error: string;
+};
+export declare function runCachedList(supabase: SupabaseClient, parsed: CachedListInput): Promise<CachedListResult>;
+//# sourceMappingURL=cached-list.d.ts.map

package/dist-lib/lib/gateway/cached-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cached-list.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/cached-list.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,EAAE,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAsB,aAAa,CACjC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,gBAAgB,CAAC,CA8B3B"}

package/dist-lib/lib/gateway/cached-list.js

@@ -0,0 +1,35 @@
+// Verplaatste business-logica voor de cached-list gateway-route.
+// Behoud van gedrag: query, limit-clamp en ordering zijn letterlijk overgenomen
+// uit src/routes/api/public/gateway/cached-list.ts (HEAD). Enige verschillen:
+// (a) supabase is een parameter, (b) return data i.p.v. Response, (c) imports.
+import { CACHE_TABLES } from "../../lib/gateway/cache-tables";
+export async function runCachedList(supabase, parsed) {
+    if (parsed.environment !== "staging" && parsed.environment !== "live") {
+        return { ok: false, error: "Ongeldige environment" };
+    }
+    const table = CACHE_TABLES[parsed.entity];
+    if (!table) {
+        return { ok: false, error: `Onbekende entity: ${parsed.entity}` };
+    }
+    const limit = Math.min(Math.max(parsed.limit ?? 100, 1), 1000);
+    const { data: conn } = await supabase
+        .from("floriday_connections")
+        .select("id")
+        .eq("environment", parsed.environment)
+        .eq("is_active", true)
+        .order("updated_at", { ascending: false })
+        .limit(1)
+        .maybeSingle();
+    if (!conn) {
+        return { ok: false, error: `Geen actieve koppeling voor ${parsed.environment}` };
+    }
+    const { data: rows, error } = await supabase
+        .from(table)
+        .select("*")
+        .eq("connection_id", conn.id)
+        .order("updated_at", { ascending: false })
+        .limit(limit);
+    if (error)
+        return { ok: false, error: error.message };
+    return { ok: true, rows: rows ?? [] };
+}

package/dist-lib/lib/gateway/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./shared";
+export * from "./cache-tables";
+export * from "./cached-list";
+//# sourceMappingURL=index.d.ts.map

package/dist-lib/lib/gateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC"}

package/dist-lib/lib/gateway/index.js

@@ -0,0 +1,3 @@
+export * from "./shared";
+export * from "./cache-tables";
+export * from "./cached-list";

package/dist-lib/lib/gateway/shared.d.ts

@@ -0,0 +1,2 @@
+export { verifyGatewayCaller, corsPreflight, withCors, GATEWAY_CORS_HEADERS, } from "../../lib/floriday-gateway-auth";
+//# sourceMappingURL=shared.d.ts.map

package/dist-lib/lib/gateway/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/lib/gateway/shared.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,QAAQ,EACR,oBAAoB,GACrB,MAAM,6BAA6B,CAAC"}

package/dist-lib/lib/gateway/shared.js

@@ -0,0 +1,3 @@
+// Gateway shared re-exports — subset used by cached-list (stap 1).
+// Aanvullende exports (binary caller, types) volgen bij latere lifts.
+export { verifyGatewayCaller, corsPreflight, withCors, GATEWAY_CORS_HEADERS, } from "../../lib/floriday-gateway-auth";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowselections/floriday-authenticatie-module",
-  "version": "1.0.22",
+  "version": "1.0.24",
   "sideEffects": false,
   "type": "module",
   "main": "./dist-lib/index.js",
@@ -9,6 +9,10 @@
     ".": {
       "types": "./dist-lib/index.d.ts",
       "default": "./dist-lib/index.js"
+    },
+    "./gateway": {
+      "types": "./dist-lib/lib/gateway/index.d.ts",
+      "default": "./dist-lib/lib/gateway/index.js"
     }
   },
   "files": [
@@ -39,7 +43,7 @@
   "devDependencies": {
     "@flowselections/core": "1.0.16",
     "@eslint/js": "^9.32.0",
-    "@lovable.dev/vite-tanstack-config": "2.7.1",
+    "@lovable.dev/vite-tanstack-config": "2.7.6",
     "@types/node": "^22.16.5",
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",