@flowselections/floriday-verkoop-module 1.0.21 → 1.0.25

package/dist-lib/lib/floriday-auto-fulfillment.server.js

@@ -2,7 +2,7 @@ import { florydayWrite } from "./floriday-gateway.server";
 async function loadConnectionMeta(supabase, connectionId) {
     const { data } = await supabase
         .from("floriday_connections")
-        .select("id, environment, access_token, api_key, is_active, gln_code, preferred_warehouse_id")
+        .select("id, environment, api_key, is_active, gln_code, preferred_warehouse_id")
         .eq("id", connectionId)
         .maybeSingle();
     return data ?? null;

package/dist-lib/lib/floriday-central-token.server.d.ts

@@ -0,0 +1,12 @@
+export type CentralTokenOk = {
+    ok: true;
+    access_token: string;
+    expires_at: string | null;
+};
+export type CentralTokenFail = {
+    ok: false;
+    status: number;
+    raw: string;
+};
+export declare function getFlorydayTokenFromCentral(environment: "staging" | "live" | string): Promise<CentralTokenOk | CentralTokenFail>;
+//# sourceMappingURL=floriday-central-token.server.d.ts.map

package/dist-lib/lib/floriday-central-token.server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"floriday-central-token.server.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-central-token.server.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,IAAI,CAAC;IACT,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,GACvC,OAAO,CAAC,cAAc,GAAG,gBAAgB,CAAC,CAsD5C"}

package/dist-lib/lib/floriday-central-token.server.js

@@ -0,0 +1,58 @@
+// Server-only. Haalt Floriday access-tokens op via de Central Auth Module.
+// Één bron van waarheid voor de scope: verkoop geeft GEEN scope mee, zodat
+// central de provider-default toepast (provider.scopes uit central's DB).
+// Dit voorkomt scope-drift tussen modules.
+//
+// Endpoint: POST {CENTRAL_AUTH_URL}/api/token/floriday
+// Auth:     Authorization: Bearer {CENTRAL_AUTH_SECRET}
+// Body:     { environment: "staging" | "live" }
+// Response: { access_token: string, expires_at: string }
+export async function getFlorydayTokenFromCentral(environment) {
+    const url = process.env.CENTRAL_AUTH_URL;
+    const secret = process.env.CENTRAL_AUTH_SECRET;
+    if (!url || !secret) {
+        console.warn("[floriday-central-token] CENTRAL_AUTH_URL / CENTRAL_AUTH_SECRET ontbreekt in env");
+        return {
+            ok: false,
+            status: 0,
+            raw: "central env missing: CENTRAL_AUTH_URL and/or CENTRAL_AUTH_SECRET",
+        };
+    }
+    // Central verwacht "staging" of "live". Normaliseer varianten.
+    const env = environment === "live" || environment === "production" || environment === "prod"
+        ? "live"
+        : "staging";
+    const base = url.replace(/\/+$/, "");
+    const endpoint = `${base}/api/token/floriday`;
+    try {
+        const res = await fetch(endpoint, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${secret}`,
+                "Content-Type": "application/json",
+                Accept: "application/json",
+            },
+            // Bewust GEEN scope-veld: central past provider-default toe (single source of truth).
+            body: JSON.stringify({ environment: env }),
+        });
+        const text = await res.text();
+        if (!res.ok) {
+            console.warn(`[floriday-central-token] central token endpoint faalde ${res.status}: ${text.slice(0, 300)}`);
+            return { ok: false, status: res.status, raw: text };
+        }
+        const json = JSON.parse(text);
+        if (!json.access_token) {
+            return { ok: false, status: res.status, raw: text };
+        }
+        return {
+            ok: true,
+            access_token: json.access_token,
+            expires_at: json.expires_at ?? null,
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.warn("[floriday-central-token] fetch faalde:", msg);
+        return { ok: false, status: 0, raw: msg };
+    }
+}

package/dist-lib/lib/floriday-gateway.server.d.ts

@@ -12,8 +12,8 @@ export interface FlorydayFetchResult<T = unknown> {
     rawText: string;
     connection: FloridayConnectionRow;
 }
-/** Low-level fetch with token-refresh + retry-once on 401/403. */
-export declare function florydayFetch<T = unknown>(supabase: SupabaseClient, conn: FloridayConnectionRow, init: {
+/** Low-level fetch. Grant-per-call via central; retry-once on 401/403. */
+export declare function florydayFetch<T = unknown>(_supabase: SupabaseClient, conn: FloridayConnectionRow, init: {
     method: string;
     path: string;
     body?: unknown;

package/dist-lib/lib/floriday-gateway.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"floriday-gateway.server.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-gateway.server.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAAC;AAKrD,wBAAgB,UAAU,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAIvF;AAMD,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,mBAAmB,GAAG,MAAM,GAChC,OAAO,CAAC,qBAAqB,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAa/D;AA6BD,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,OAAO;IAC9C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,kEAAkE;AAClE,wBAAsB,aAAa,CAAC,CAAC,GAAG,OAAO,EAC7C,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,qBAAqB,EAC3B,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CA8CjC;AAGD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AA4DD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAkBD,wBAAsB,aAAa,CACjC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,mBAAmB,GAAG,MAAM,EACjC,IAAI,EAAE,iBAAiB,EACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CA6D9B"}
+{"version":3,"file":"floriday-gateway.server.d.ts","sourceRoot":"","sources":["../../src/lib/floriday-gateway.server.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAGjF,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAAC;AAErD,wBAAgB,UAAU,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAIvF;AAMD,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,mBAAmB,GAAG,MAAM,GAChC,OAAO,CAAC,qBAAqB,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAa/D;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,OAAO;IAC9C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,0EAA0E;AAC1E,wBAAsB,aAAa,CAAC,CAAC,GAAG,OAAO,EAC7C,SAAS,EAAE,cAAc,EACzB,IAAI,EAAE,qBAAqB,EAC3B,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CA4CjC;AAGD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AA4DD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAkBD,wBAAsB,aAAa,CACjC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,mBAAmB,GAAG,MAAM,EACjC,IAAI,EAAE,iBAAiB,EACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CA6D9B"}

package/dist-lib/lib/floriday-gateway.server.js

@@ -1,5 +1,5 @@
 import { FLORIDAY_API_BASES } from "./floriday-sync";
-const AUTH_MODULE_REFRESH_URL = "https://project--vmicscahrnzpmhagztmx.lovable.app/api/public/cron/refresh-floriday-tokens";
+import { getFlorydayTokenFromCentral } from "./floriday-central-token.server";
 export function apiBaseFor(env) {
     return env === "live" || env === "production" || env === "prod"
         ? FLORIDAY_API_BASES.production
@@ -12,7 +12,7 @@ export async function pickActiveConnection(supabase, env) {
     const dbEnv = normalizeEnvKey(env);
     const { data, error } = await supabase
         .from("floriday_connections")
-        .select("id, environment, access_token, api_key, is_active, gln_code")
+        .select("id, environment, api_key, is_active, gln_code")
         .eq("environment", dbEnv)
         .eq("is_active", true)
         .order("updated_at", { ascending: false })
@@ -24,41 +24,15 @@ export async function pickActiveConnection(supabase, env) {
         throw new Error(`Geen actieve Floriday connectie voor "${dbEnv}"`);
     return data;
 }
-async function triggerAuthModuleRefresh() {
-    try {
-        await fetch(AUTH_MODULE_REFRESH_URL, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: "{}",
-        });
-    }
-    catch {
-        // best-effort — caller re-reads the token regardless
-    }
-}
-async function reloadConnection(supabase, connectionId) {
-    const { data, error } = await supabase
-        .from("floriday_connections")
-        .select("id, environment, access_token, api_key, is_active")
-        .eq("id", connectionId)
-        .maybeSingle();
-    if (error || !data) {
-        throw new Error(`Floriday connectie ${connectionId} herladen mislukt: ${error?.message ?? "not found"}`);
-    }
-    return data;
-}
-/** Low-level fetch with token-refresh + retry-once on 401/403. */
-export async function florydayFetch(supabase, conn, init) {
-    let active = conn;
+/** Low-level fetch. Grant-per-call via central; retry-once on 401/403. */
+export async function florydayFetch(_supabase, conn, init) {
+    const active = conn;
     let lastRes = null;
     let lastText = "";
     for (let attempt = 0; attempt < 2; attempt += 1) {
-        if (!active.access_token) {
-            await triggerAuthModuleRefresh();
-            active = await reloadConnection(supabase, active.id);
-            if (!active.access_token) {
-                throw new Error(`Floriday connectie ${active.id} heeft geen access_token`);
-            }
+        const tokenRes = await getFlorydayTokenFromCentral(active.environment ?? "staging");
+        if (!tokenRes.ok) {
+            throw new Error(`Floriday token via central faalde [${tokenRes.status}] voor connectie ${active.id}: ${tokenRes.raw.slice(0, 300)}`);
         }
         const url = `${apiBaseFor(active.environment)}${init.path}`;
         const res = await fetch(url, {
@@ -66,7 +40,7 @@ export async function florydayFetch(supabase, conn, init) {
             headers: {
                 Accept: "application/json",
                 ...(init.body !== undefined ? { "Content-Type": "application/json" } : {}),
-                Authorization: `Bearer ${active.access_token}`,
+                Authorization: `Bearer ${tokenRes.access_token}`,
                 ...(active.api_key ? { "x-api-key": active.api_key } : {}),
             },
             body: init.body !== undefined ? JSON.stringify(init.body) : undefined,
@@ -79,8 +53,7 @@ export async function florydayFetch(supabase, conn, init) {
             return { ok: true, status: res.status, data: parsed, rawText: text, connection: active };
         }
         if ((res.status === 401 || res.status === 403) && attempt === 0) {
-            await triggerAuthModuleRefresh();
-            active = await reloadConnection(supabase, active.id);
+            // Central kan een verse grant leveren op de volgende poging.
             continue;
         }
         break;