@flowselections/twinfield-authenticatie-module-15-06-2026 1.3.9 → 1.3.10

package/dist-lib/components/TwinfieldKoppelingPage.d.ts

@@ -0,0 +1,2 @@
+export declare function TwinfieldKoppelingPage(): import("react").JSX.Element;
+//# sourceMappingURL=TwinfieldKoppelingPage.d.ts.map

package/dist-lib/components/TwinfieldKoppelingPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TwinfieldKoppelingPage.d.ts","sourceRoot":"","sources":["../../src/components/TwinfieldKoppelingPage.tsx"],"names":[],"mappings":"AAEA,wBAAgB,sBAAsB,gCAMrC"}

package/dist-lib/components/TwinfieldKoppelingPage.js

@@ -0,0 +1,5 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { TwinfieldAuthSettingsCard } from "./settings/TwinfieldAuthSettingsCard";
+export function TwinfieldKoppelingPage() {
+    return (_jsx("div", { className: "p-6 max-w-4xl mx-auto", children: _jsx(TwinfieldAuthSettingsCard, { defaultExpanded: true }) }));
+}

package/dist-lib/index.d.ts

@@ -3,6 +3,7 @@ export * from './_core-safelist';
 export * from './components/TemplatePage';
 export * from './components/TemplateModulePage';
 export { TemplateModuleLogo } from './components/TemplateModuleLogo';
+export { TwinfieldKoppelingPage } from './components/TwinfieldKoppelingPage';
 export { TemplateModulePage } from "./components/TemplateModulePage";
 export { downloadTwinfieldInvoicePdf, downloadTwinfieldInvoicePdfsBulk, resendTwinfieldInvoice, sendPaymentReminder, duplicateTwinfieldInvoice, } from "./lib/accounting/twinfield/actions.functions";
 export { getTwinfieldConformance } from "./lib/accounting/twinfield/conformance.functions";

package/dist-lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAKrE,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,EAChC,sBAAsB,EACtB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAE1F,eAAO,MAAM,4BAA4B,EAAE,UAY1C,CAAC;AAEF,eAAO,MAAM,QAAQ,YAA+B,CAAC;AACrD,eAAO,MAAM,4BAA4B,YAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAKrE,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,EAChC,sBAAsB,EACtB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAE1F,eAAO,MAAM,4BAA4B,EAAE,UAY1C,CAAC;AAEF,eAAO,MAAM,QAAQ,YAA+B,CAAC;AACrD,eAAO,MAAM,4BAA4B,YAA+B,CAAC"}

package/dist-lib/index.js

@@ -18,6 +18,7 @@ export * from './_core-safelist';
 export * from './components/TemplatePage';
 export * from './components/TemplateModulePage';
 export { TemplateModuleLogo } from './components/TemplateModuleLogo';
+export { TwinfieldKoppelingPage } from './components/TwinfieldKoppelingPage';
 export { TemplateModulePage } from "./components/TemplateModulePage";
 import { TwinfieldAuthSettingsCard } from "./components/settings/TwinfieldAuthSettingsCard";
 // Twinfield acties-server-fns — geëxporteerd voor de facturatie-module.

package/dist-lib/lib/central/central-accounts.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"central-accounts.server.d.ts","sourceRoot":"","sources":["../../../src/lib/central/central-accounts.server.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAoED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAiB/D;AAGD;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA6D1B;AAGD;;GAEG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAkCjF;AAED;;GAEG;AACH,wBAAsB,6BAA6B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBxF"}
+{"version":3,"file":"central-accounts.server.d.ts","sourceRoot":"","sources":["../../../src/lib/central/central-accounts.server.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAoED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAiB/D;AAGD;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAoE1B;AAGD;;GAEG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAkCjF;AAED;;GAEG;AACH,wBAAsB,6BAA6B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBxF"}

package/dist-lib/lib/central/central-accounts.server.js

@@ -101,7 +101,7 @@ export function assertTwinfieldAuthorizeUrl(value) {
 export async function startTwinfieldAuthorize(returnUrl) {
     const returnDetails = describeReturnUrl(returnUrl);
     if (!returnDetails.valid || !returnUrl.startsWith("https://")) {
-        throw new Error(`Ongeldige return_url voor Central Auth (${returnUrl}). Verwacht een absolute https-URL naar de shell, bijv. https://mijn-shell.nl/mijn-module. Controleer PUBLIC_BASE_URL en of de host als return-host in Central Auth staat.`);
+        throw new Error(`Ongeldige return_url voor Central Auth (${returnUrl}). Verwacht een absolute https-URL naar de module, bijv. https://mijn-shell.nl/twinfield-authenticatie.`);
     }
     const { baseUrl, secret } = getCentralConfig();
     const endpoint = `${baseUrl}/api/authorize/twinfield`;
@@ -118,6 +118,10 @@ export async function startTwinfieldAuthorize(returnUrl) {
             body: snippet,
             returnUrl: describeReturnUrl(returnUrl),
         });
+        const returnHostRejected = res.status === 400 && /return[_ -]?url|return[_ -]?host|allowed host|toegestaan/i.test(snippet);
+        if (returnHostRejected) {
+            throw new Error(`Central Auth staat de return-host ${returnDetails.host ?? "van deze shell"} niet toe. Registreer deze host in Central Auth en probeer opnieuw.`);
+        }
         throw new Error(`Central Auth authorize faalde (${res.status}): ${snippet}`);
     }
     let json = null;

package/dist-lib/lib/central/return-url.server.d.ts

@@ -2,4 +2,9 @@ export declare function normalizePublicBaseUrl(value: string | null | undefined)
 /** Alleen relatieve paden toestaan (geen schema, geen protocol-relative). */
 export declare function normalizeReturnPath(value: string | null | undefined, fallback?: string): string;
 export declare function baseUrlFromRequest(request: Request | null | undefined): string | null;
+export declare function buildReturnUrl(requestBase: string | null, envBase: string | null, returnPathValue: string | null | undefined): {
+    returnUrl: string;
+    returnPath: string;
+    source: "request" | "env";
+};
 //# sourceMappingURL=return-url.server.d.ts.map

package/dist-lib/lib/central/return-url.server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"return-url.server.d.ts","sourceRoot":"","sources":["../../../src/lib/central/return-url.server.ts"],"names":[],"mappings":"AAIA,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAatF;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,SAAiB,GAAG,MAAM,CAMvG;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAiBrF"}
+{"version":3,"file":"return-url.server.d.ts","sourceRoot":"","sources":["../../../src/lib/central/return-url.server.ts"],"names":[],"mappings":"AAIA,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAatF;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,SAA6B,GAAG,MAAM,CAMnH;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAiBrF;AAED,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACzC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,KAAK,CAAA;CAAE,CAsBtE"}

package/dist-lib/lib/central/return-url.server.js

@@ -22,7 +22,7 @@ export function normalizePublicBaseUrl(value) {
     }
 }
 /** Alleen relatieve paden toestaan (geen schema, geen protocol-relative). */
-export function normalizeReturnPath(value, fallback = "/mijn-module") {
+export function normalizeReturnPath(value, fallback = "/twinfield-authenticatie") {
     const raw = (value ?? "").trim();
     if (!raw.startsWith("/") || raw.startsWith("//"))
         return fallback;
@@ -52,3 +52,20 @@ export function baseUrlFromRequest(request) {
         return null;
     }
 }
+export function buildReturnUrl(requestBase, envBase, returnPathValue) {
+    const base = requestBase ?? envBase;
+    if (!base) {
+        throw new Error("Kon de basis-URL van deze app niet bepalen. Stel PUBLIC_BASE_URL in als absolute https-URL (bijv. https://jouw-shell.nl).");
+    }
+    const returnPath = normalizeReturnPath(returnPathValue);
+    const returnUrl = new URL(returnPath, `${base}/`);
+    const expectedOrigin = new URL(base).origin;
+    if (returnUrl.protocol !== "https:" || returnUrl.origin !== expectedOrigin) {
+        throw new Error("De return-URL kon niet veilig worden opgebouwd uit de HTTPS-origin van deze shell.");
+    }
+    return {
+        returnUrl: returnUrl.toString(),
+        returnPath,
+        source: requestBase ? "request" : "env",
+    };
+}