@haus-tech/bankid-auth-plugin 1.0.1 → 1.0.4

package/CHANGELOG.md

@@ -0,0 +1,19 @@
+## 1.0.3
+
+This was a version bump only for bankid-auth-plugin to align it with other projects, there were no code changes.
+
+## 1.0.2
+
+### 🚀 Features
+
+- **bankid-auth-plugin:** Add initial implementation of BankID auth plugin ([#54](https://github.com/WeAreHausTech/haus-tech-vendure-plugins/pull/54))
+
+### 🩹 Fixes
+
+- **product-import-export-plugin:** improve import parser handling ([c952c7b](https://github.com/WeAreHausTech/haus-tech-vendure-plugins/commit/c952c7b))
+
+## 1.0.1
+
+### 🚀 Features
+
+- Add initial implementation of BankID auth plugin (#54) ([92faf35](https://github.com/WeAreHausTech/haus-vendure-plugins-public/commit/92faf354f6009b820f192fcdd28334b5bc370cdc))

package/README.md

@@ -0,0 +1,114 @@
+---
+name: bankid-auth-plugin
+title: BankID Auth Plugin
+description: Vendure plugin that integrates BankID authentication into your e-commerce platform.
+version: 1.0.1
+---
+
+# BankID Auth Plugin
+
+The `BankID Auth Plugin` is a Vendure plugin that integrates BankID authentication into your e-commerce platform. BankID is a secure and widely used electronic identification system, primarily in Sweden, that allows users to authenticate themselves online.
+
+## Functionality
+
+- Enable secure customer authentication using BankID.
+- Provides REST endpoints for initiating, authenticating, and canceling BankID sessions.
+- Validates user IP addresses during authentication for enhanced security.
+- Supports a customizable post-authentication strategy for handling successful authentications.
+
+## Use Cases
+
+The BankID Auth Plugin is ideal for:
+
+- E-commerce platforms that require secure and reliable customer authentication.
+- Businesses operating in Sweden or regions where BankID is widely used.
+- Scenarios where IP validation and session management are critical.
+
+## Installation
+
+To install the `BankID Auth Plugin`, follow these steps:
+
+1. Install the plugin package:
+
+   ```bash
+   yarn add @haus-tech/bankid-auth-plugin
+   ```
+
+   Or, if using npm:
+
+   ```bash
+   npm install @haus-tech/bankid-auth-plugin
+   ```
+
+2. Add the plugin to your Vendure configuration in `vendure-config.ts`:
+
+   ```ts
+   import { BankidAuthPlugin } from '@haus-tech/bankid-auth-plugin';
+
+   export const config = {
+     plugins: [
+       BankidAuthPlugin.init({
+         bankidApiUrl: 'https://api.bankid.com',
+         clientCert: '/path/to/client-cert.pem',
+         clientKey: '/path/to/client-key.pem',
+       }),
+     ],
+   };
+   ```
+
+3. Restart your Vendure server.
+
+## Usage
+
+### Admin Configuration
+
+The plugin does not provide a direct UI-based configuration. Instead, it is configured programmatically in the Vendure configuration file.
+
+### REST API
+
+The plugin provides the following REST endpoints:
+
+- `POST /api/bankid/initiate`: Starts a BankID session.
+- `POST /api/bankid/authenticate`: Authenticates a user based on an order reference.
+- `POST /api/bankid/cancel`: Cancels an ongoing BankID session.
+
+### Example Integration
+
+To integrate BankID authentication into your storefront, use the provided REST endpoints. For example:
+
+```ts
+fetch('/api/bankid/initiate', {
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json' },
+  body: JSON.stringify({ endUserIp: '192.168.1.1' }),
+})
+  .then((res) => res.json())
+  .then((data) => {
+    console.log(data);
+  });
+```
+
+## Testing
+
+1. Run `yarn test` to execute the e2e tests.
+2. Implement additional tests to cover your specific use cases.
+
+## Publish to NPM
+
+1. Make sure you are [logged in to NPM](https://docs.npmjs.com/cli/v9/commands/npm-login).
+2. Build the plugin:
+
+   ```bash
+   yarn build
+   ```
+
+3. Publish the plugin:
+
+   ```bash
+   yarn publish
+   ```
+
+## Resources
+
+- [Vendure Plugin Documentation](https://www.vendure.io/docs/plugins/)
+- [BankID API Documentation](https://www.bankid.com/rp-info) for detailed information on BankID's authentication services.

package/package.json

@@ -1,17 +1,11 @@
 {
   "name": "@haus-tech/bankid-auth-plugin",
-  "version": "1.0.1",
+  "version": "1.0.4",
   "description": "Support for authentication via Swedish BankID",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
-  "files": [
-    "dist",
-    "README.md"
-  ],
+  "main": "src/index.js",
+  "types": "src/index.d.ts",
   "scripts": {
-    "start": "yarn ts-node test/dev-server.ts",
-    "build": "yarn run -T rimraf dist && yarn run -T tsc && yarn run -T copyfiles -u 1 'src/ui/**/*' dist/",
-    "test": "jest --preset=\"ts-jest\"",
-    "prepublishOnly": "yarn && yarn build"
-  }
-}
+    "start": "yarn ts-node test/dev-server.ts"
+  },
+  "type": "commonjs"
+}

package/src/api/api-extensions.d.ts

@@ -0,0 +1 @@
+export declare const shopSchema: import("graphql").DocumentNode;

package/src/api/api-extensions.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shopSchema = void 0;
+const graphql_tag_1 = require("graphql-tag");
+exports.shopSchema = (0, graphql_tag_1.gql) `
+  extend type Mutation {
+    initiateBankidAuth: InitiateBankidAuthResponse!
+  }
+
+  type InitiateBankidAuthResponse {
+    autoStartToken: String!
+  }
+
+  extend type Mutation {
+    getBankidAuthStatus(input: GetBankidAuthStatusInput!): GetBankidAuthStatusResponse!
+  }
+
+  input GetBankidAuthStatusInput {
+    isSameDevice: Boolean!
+  }
+
+  type GetBankidAuthStatusResponse {
+    status: String!
+    hintCode: String
+    autoStartToken: String
+    qrData: String
+  }
+  extend type Mutation {
+    cancelBankidAuth: Boolean!
+  }
+`;
+//# sourceMappingURL=api-extensions.js.map

package/src/api/api-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-extensions.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/api/api-extensions.ts"],"names":[],"mappings":";;;AAAA,6CAAiC;AAEpB,QAAA,UAAU,GAAG,IAAA,iBAAG,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;CA0B5B,CAAA"}

package/{dist → src}/bankid-auth.plugin.js

@@ -11,36 +11,39 @@ exports.BankIdAuthPlugin = void 0;
 const core_1 = require("@vendure/core");
 const constants_1 = require("./constants");
 const bankid_auth_service_1 = require("./services/bankid-auth.service");
-const bankid_auth_controller_1 = require("./bankid-auth.controller");
-let BankIdAuthPlugin = BankIdAuthPlugin_1 = class BankIdAuthPlugin {
+const bankid_api_service_1 = require("./services/bankid-api.service");
+const bankid_session_service_1 = require("./services/bankid-session.service");
+const api_extensions_1 = require("./api/api-extensions");
+const bankid_auth_resolver_1 = require("./bankid-auth.resolver");
+let BankIdAuthPlugin = class BankIdAuthPlugin {
+    static { BankIdAuthPlugin_1 = this; }
     static options;
     static init(options) {
         this.options = options;
-        if (!options.postAuthStrategy) {
-            throw new Error('BankIdAuthPlugin requires a PostAuthenticateStrategy but none was provided');
-        }
         if (!options.bankIdApiBaseUrl) {
             throw new Error('BankIdAuthPlugin requires a bankIdApiBaseUrl but none was provided');
         }
         return BankIdAuthPlugin_1;
     }
 };
-BankIdAuthPlugin = BankIdAuthPlugin_1 = __decorate([
+exports.BankIdAuthPlugin = BankIdAuthPlugin;
+exports.BankIdAuthPlugin = BankIdAuthPlugin = BankIdAuthPlugin_1 = __decorate([
     (0, core_1.VendurePlugin)({
         imports: [core_1.PluginCommonModule],
         providers: [
-            { provide: constants_1.BANKID_AUTH_PLUGIN_OPTIONS, useFactory: () => BankIdAuthPlugin_1.options },
+            { provide: constants_1.BANKID_AUTH_PLUGIN_OPTIONS, useFactory: () => BankIdAuthPlugin.options },
+            bankid_api_service_1.BankIdApiService,
+            bankid_session_service_1.BankIdSessionService,
             bankid_auth_service_1.BankIdAuthService,
         ],
+        shopApiExtensions: {
+            resolvers: [bankid_auth_resolver_1.BankIdAuthResolver],
+            schema: api_extensions_1.shopSchema,
+        },
         configuration: (config) => {
-            // Plugin-specific configuration
-            // such as custom fields, custom permissions,
-            // strategies etc. can be configured here by
-            // modifying the `config` object.
             return config;
         },
-        controllers: [bankid_auth_controller_1.BankIdAuthController],
         compatibility: '^3.0.0',
     })
 ], BankIdAuthPlugin);
-exports.BankIdAuthPlugin = BankIdAuthPlugin;
+//# sourceMappingURL=bankid-auth.plugin.js.map

package/src/bankid-auth.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bankid-auth.plugin.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/bankid-auth.plugin.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,wCAAuE;AACvE,2CAAwD;AACxD,wEAAkE;AAClE,sEAAgE;AAChE,8EAAwE;AAExE,yDAAiD;AACjD,iEAA2D;AAmBpD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;;IAC3B,MAAM,CAAC,OAAO,CAAyB;IAEvC,MAAM,CAAC,IAAI,CAAC,OAAgC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,kBAAgB,CAAA;IACzB,CAAC;CACF,CAAA;AAVY,4CAAgB;2BAAhB,gBAAgB;IAjB5B,IAAA,oBAAa,EAAC;QACb,OAAO,EAAE,CAAC,yBAAkB,CAAC;QAC7B,SAAS,EAAE;YACT,EAAE,OAAO,EAAE,sCAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE;YACnF,qCAAgB;YAChB,6CAAoB;YACpB,uCAAiB;SAClB;QACD,iBAAiB,EAAE;YACjB,SAAS,EAAE,CAAC,yCAAkB,CAAC;YAC/B,MAAM,EAAE,2BAAU;SACnB;QACD,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE;YACxB,OAAO,MAAM,CAAA;QACf,CAAC;QACD,aAAa,EAAE,QAAQ;KACxB,CAAC;GACW,gBAAgB,CAU5B"}

package/src/bankid-auth.resolver.d.ts

@@ -0,0 +1,25 @@
+import { BankIdAuthService } from './services/bankid-auth.service';
+import { BankIdSessionService } from './services/bankid-session.service';
+import { RequestContext } from '@vendure/core';
+import { GetBankidAuthStatusInput } from './types';
+import { Request } from 'express';
+export declare class BankIdAuthResolver {
+    private bankIdAuthService;
+    private bankIdSessionService;
+    constructor(bankIdAuthService: BankIdAuthService, bankIdSessionService: BankIdSessionService);
+    initiateBankidAuth(ctx: RequestContext, req: Request): Promise<Pick<import("./types").InitiateResponse, "autoStartToken">>;
+    getBankidAuthStatus(ctx: RequestContext, args: {
+        input: GetBankidAuthStatusInput;
+    }): Promise<{
+        status: string;
+        hintCode: null;
+        autoStartToken: null;
+        qrData: null;
+    } | {
+        status: import("./types").BankIdOrderStatus;
+        hintCode: string;
+        autoStartToken: string;
+        qrData: string | undefined;
+    }>;
+    cancelBankidAuth(ctx: RequestContext): Promise<boolean>;
+}

package/{dist/bankid-auth.controller.js → src/bankid-auth.resolver.js}

@@ -12,40 +12,52 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BankIdAuthController = void 0;
+exports.BankIdAuthResolver = void 0;
 const common_1 = require("@nestjs/common");
 const bankid_auth_service_1 = require("./services/bankid-auth.service");
+const bankid_session_service_1 = require("./services/bankid-session.service");
 const core_1 = require("@vendure/core");
 const utils_1 = require("./utils");
 const utils_2 = require("./utils");
-let BankIdAuthController = class BankIdAuthController {
+const graphql_1 = require("@nestjs/graphql");
+const graphql_2 = require("@nestjs/graphql");
+const lodash_1 = require("lodash");
+let BankIdAuthResolver = class BankIdAuthResolver {
     bankIdAuthService;
-    cacheService;
-    constructor(bankIdAuthService, cacheService) {
+    bankIdSessionService;
+    constructor(bankIdAuthService, bankIdSessionService) {
         this.bankIdAuthService = bankIdAuthService;
-        this.cacheService = cacheService;
+        this.bankIdSessionService = bankIdSessionService;
     }
-    async initiate(ctx) {
-        const endUserIp = (0, utils_1.getEndUserIp)(ctx);
+    async initiateBankidAuth(ctx, req) {
+        const endUserIp = (0, utils_1.getClientIp)(req);
         try {
             const result = await this.bankIdAuthService.initiate(ctx, endUserIp);
-            const cacheKey = `bankid:session:${result.orderRef}`;
-            this.cacheService.set(cacheKey, endUserIp, { ttl: 120000 });
-            return { data: result };
+            await this.bankIdSessionService.save(ctx, result, endUserIp);
+            return (0, lodash_1.pick)(result, ['autoStartToken']);
         }
         catch (error) {
             throw (0, utils_1.handleBankIdError)(error);
         }
     }
-    async authenticate(ctx, body) {
-        if (!body.orderRef) {
-            throw new common_1.HttpException('orderRef is required', common_1.HttpStatus.BAD_REQUEST);
+    async getBankidAuthStatus(ctx, args) {
+        const data = await this.bankIdSessionService.get(ctx);
+        if (!data || !data.orderRef) {
+            return {
+                status: 'NOT_INITIATED',
+                hintCode: null,
+                autoStartToken: null,
+                qrData: null,
+            };
         }
-        const cacheKey = `bankid:session:${body.orderRef}`;
-        const cachedIpAddress = (await this.cacheService.get(cacheKey));
         try {
-            const res = await this.bankIdAuthService.authenticate(ctx, body.orderRef, cachedIpAddress, body.isSameDevice);
-            return { data: res };
+            const statusResponse = await this.bankIdAuthService.getBankidAuthStatus(ctx, data, args.input.isSameDevice);
+            return {
+                status: statusResponse.status,
+                hintCode: statusResponse.hintCode,
+                autoStartToken: data.autoStartToken,
+                qrData: statusResponse.qrData,
+            };
         }
         catch (error) {
             if (error instanceof utils_2.IpMismatchError) {
@@ -54,47 +66,48 @@ let BankIdAuthController = class BankIdAuthController {
             throw (0, utils_1.handleBankIdError)(error);
         }
     }
-    async cancel(ctx, body) {
-        if (!body.orderRef) {
-            throw new common_1.HttpException('orderRef is required', common_1.HttpStatus.BAD_REQUEST);
+    async cancelBankidAuth(ctx) {
+        const data = await this.bankIdSessionService.get(ctx);
+        if (!data || !data.orderRef) {
+            throw new common_1.HttpException('No active BankID order to cancel', common_1.HttpStatus.BAD_REQUEST);
         }
         try {
-            await this.bankIdAuthService.cancel(ctx, body.orderRef);
+            await this.bankIdAuthService.cancel(ctx, data.orderRef);
+            await this.bankIdSessionService.clear(ctx);
+            return true;
         }
         catch (error) {
             throw (0, utils_1.handleBankIdError)(error);
         }
     }
 };
+exports.BankIdAuthResolver = BankIdAuthResolver;
 __decorate([
-    (0, common_1.Post)('initiate'),
-    (0, common_1.HttpCode)(common_1.HttpStatus.CREATED),
+    (0, graphql_1.Mutation)(),
     __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_2.Context)('req')),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [core_1.RequestContext]),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
     __metadata("design:returntype", Promise)
-], BankIdAuthController.prototype, "initiate", null);
+], BankIdAuthResolver.prototype, "initiateBankidAuth", null);
 __decorate([
-    (0, common_1.Post)('authenticate'),
-    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, graphql_1.Mutation)(),
     __param(0, (0, core_1.Ctx)()),
-    __param(1, (0, common_1.Body)()),
+    __param(1, (0, graphql_1.Args)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [core_1.RequestContext, Object]),
     __metadata("design:returntype", Promise)
-], BankIdAuthController.prototype, "authenticate", null);
+], BankIdAuthResolver.prototype, "getBankidAuthStatus", null);
 __decorate([
-    (0, common_1.Post)('cancel'),
-    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, graphql_1.Mutation)(),
     __param(0, (0, core_1.Ctx)()),
-    __param(1, (0, common_1.Body)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:paramtypes", [core_1.RequestContext]),
     __metadata("design:returntype", Promise)
-], BankIdAuthController.prototype, "cancel", null);
-BankIdAuthController = __decorate([
-    (0, common_1.Controller)('api/bankid'),
+], BankIdAuthResolver.prototype, "cancelBankidAuth", null);
+exports.BankIdAuthResolver = BankIdAuthResolver = __decorate([
+    (0, graphql_1.Resolver)(),
     __metadata("design:paramtypes", [bankid_auth_service_1.BankIdAuthService,
-        core_1.CacheService])
-], BankIdAuthController);
-exports.BankIdAuthController = BankIdAuthController;
+        bankid_session_service_1.BankIdSessionService])
+], BankIdAuthResolver);
+//# sourceMappingURL=bankid-auth.resolver.js.map

package/src/bankid-auth.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bankid-auth.resolver.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/bankid-auth.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAiF;AACjF,wEAAkE;AAClE,8EAAwE;AACxE,wCAAmD;AACnD,mCAAwD;AACxD,mCAAyC;AACzC,6CAA0D;AAG1D,6CAAyC;AACzC,mCAA6B;AAItB,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEnB;IACA;IAFV,YACU,iBAAoC,EACpC,oBAA0C;QAD1C,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,yBAAoB,GAApB,oBAAoB,CAAsB;IACjD,CAAC;IAGE,AAAN,KAAK,CAAC,kBAAkB,CAAQ,GAAmB,EAAkB,GAAY;QAC/E,MAAM,SAAS,GAAG,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAA;QAElC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YAEpE,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;YAE5D,OAAO,IAAA,aAAI,EAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,yBAAiB,EAAC,KAA2B,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,mBAAmB,CAChB,GAAmB,EAClB,IAAyC;QAEjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAErD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE,eAAe;gBACvB,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,IAAI;gBACpB,MAAM,EAAE,IAAI;aACb,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CACrE,GAAG,EACH,IAAI,EACJ,IAAI,CAAC,KAAK,CAAC,YAAY,CACxB,CAAA;YAED,OAAO;gBACL,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,MAAM,EAAE,cAAc,CAAC,MAAM;aAC9B,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAe,EAAE,CAAC;gBACrC,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,CAAA;YACxC,CAAC;YACD,MAAM,IAAA,yBAAiB,EAAC,KAA2B,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CAAQ,GAAmB;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAErD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,sBAAa,CAAC,kCAAkC,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAA;QACrF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvD,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC1C,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,yBAAiB,EAAC,KAA2B,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;CACF,CAAA;AA1EY,gDAAkB;AAOvB;IADL,IAAA,kBAAQ,GAAE;IACe,WAAA,IAAA,UAAG,GAAE,CAAA;IAAuB,WAAA,IAAA,iBAAO,EAAC,KAAK,CAAC,CAAA;;qCAA/B,qBAAc;;4DAYlD;AAGK;IADL,IAAA,kBAAQ,GAAE;IAER,WAAA,IAAA,UAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,qBAAc;;6DAiC3B;AAGK;IADL,IAAA,kBAAQ,GAAE;IACa,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAM,qBAAc;;0DAchD;6BAzEU,kBAAkB;IAD9B,IAAA,kBAAQ,GAAE;qCAGoB,uCAAiB;QACd,6CAAoB;GAHzC,kBAAkB,CA0E9B"}

package/{dist → src}/constants.js

@@ -3,3 +3,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.loggerCtx = exports.BANKID_AUTH_PLUGIN_OPTIONS = void 0;
 exports.BANKID_AUTH_PLUGIN_OPTIONS = Symbol('BANKID_AUTH_PLUGIN_OPTIONS');
 exports.loggerCtx = 'BankidAuthPlugin';
+//# sourceMappingURL=constants.js.map

package/src/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,0BAA0B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAA;AACjE,QAAA,SAAS,GAAG,kBAAkB,CAAA"}

package/src/index.d.ts

@@ -0,0 +1,2 @@
+export * from './bankid-auth.plugin';
+export * from './services/bankid-session.service';

package/{dist → src}/index.js

@@ -15,3 +15,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./bankid-auth.plugin"), exports);
+__exportStar(require("./services/bankid-session.service"), exports);
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAoC;AACpC,oEAAiD"}

package/src/services/bankid-api.service.d.ts

@@ -0,0 +1,10 @@
+import { RequestContext } from '@vendure/core';
+import { InitiateResponse, CollectResponse, BankIdAuthPluginOptions } from '../types';
+export declare class BankIdApiService {
+    private options;
+    private readonly axiosInstance;
+    constructor(options: BankIdAuthPluginOptions);
+    initiate(_ctx: RequestContext, endUserIp: string): Promise<InitiateResponse>;
+    collect(_ctx: RequestContext, orderRef: string): Promise<CollectResponse>;
+    cancel(_ctx: RequestContext, orderRef: string): Promise<boolean>;
+}

package/src/services/bankid-api.service.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BankIdApiService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const constants_1 = require("../constants");
+const constants_2 = require("../constants");
+const axios_1 = __importDefault(require("axios"));
+const https_1 = __importDefault(require("https"));
+let BankIdApiService = class BankIdApiService {
+    options;
+    axiosInstance;
+    constructor(options) {
+        this.options = options;
+        this.axiosInstance = axios_1.default.create({
+            baseURL: this.options.bankIdApiBaseUrl,
+            httpsAgent: new https_1.default.Agent({
+                cert: this.options.clientCert,
+                key: this.options.privateKey,
+                ca: this.options.caCert,
+                rejectUnauthorized: process.env.BANKID_REJECT_UNAUTHORIZED !== 'false',
+            }),
+        });
+    }
+    async initiate(_ctx, endUserIp) {
+        const response = await this.axiosInstance.post('/auth', { endUserIp });
+        return response.data;
+    }
+    async collect(_ctx, orderRef) {
+        try {
+            const response = await this.axiosInstance.post('/collect', { orderRef });
+            return response.data;
+        }
+        catch (error) {
+            core_1.Logger.error('BankID collect error', constants_1.loggerCtx);
+            throw error;
+        }
+    }
+    async cancel(_ctx, orderRef) {
+        const response = await this.axiosInstance.post('/cancel', { orderRef });
+        if (response.status !== 200) {
+            throw new Error('Failed to cancel order');
+        }
+        return true;
+    }
+};
+exports.BankIdApiService = BankIdApiService;
+exports.BankIdApiService = BankIdApiService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(constants_2.BANKID_AUTH_PLUGIN_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], BankIdApiService);
+//# sourceMappingURL=bankid-api.service.js.map

package/src/services/bankid-api.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bankid-api.service.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/services/bankid-api.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAmD;AACnD,wCAAsD;AACtD,4CAAwC;AACxC,4CAAyD;AACzD,kDAA4C;AAC5C,kDAAyB;AAIlB,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAG6B;IAFvC,aAAa,CAAe;IAE7C,YAAwD,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;QACtF,IAAI,CAAC,aAAa,GAAG,eAAK,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;YACtC,UAAU,EAAE,IAAI,eAAK,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBAC7B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBAC5B,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBACvB,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,OAAO;aACvE,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAoB,EAAE,SAAiB;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;QACtE,OAAO,QAAQ,CAAC,IAAI,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,QAAgB;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAkB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;YACzF,OAAO,QAAQ,CAAC,IAAI,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,qBAAS,CAAC,CAAA;YAC/C,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAoB,EAAE,QAAgB;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC3C,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA;AAtCY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAIE,WAAA,IAAA,eAAM,EAAC,sCAA0B,CAAC,CAAA;;GAHpC,gBAAgB,CAsC5B"}

package/src/services/bankid-auth.service.d.ts

@@ -0,0 +1,14 @@
+import { RequestContext } from '@vendure/core';
+import { InitiateResponse, OrderStatusResponse, CollectResponse } from '../types';
+import { BankIdApiService } from './bankid-api.service';
+import { BankIdSessionService } from './bankid-session.service';
+import { BankIdSessionData } from '../types';
+export declare class BankIdAuthService {
+    private apiService;
+    private bankIdSessionService;
+    constructor(apiService: BankIdApiService, bankIdSessionService: BankIdSessionService);
+    initiate(ctx: RequestContext, endUserIp: string): Promise<InitiateResponse>;
+    getBankidAuthStatus(ctx: RequestContext, data: BankIdSessionData, isSameDevice: boolean): Promise<OrderStatusResponse>;
+    handleComplete(ctx: RequestContext, response: CollectResponse, isSameDevice: boolean, cachedIpAddress: string): Promise<Pick<CollectResponse, "orderRef" | "status" | "hintCode">>;
+    cancel(ctx: RequestContext, orderRef: string): Promise<boolean>;
+}

package/src/services/bankid-auth.service.js

@@ -0,0 +1,72 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BankIdAuthService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const constants_1 = require("../constants");
+const types_1 = require("../types");
+const utils_1 = require("../utils");
+const lodash_1 = require("lodash");
+const bankid_api_service_1 = require("./bankid-api.service");
+const bankid_session_service_1 = require("./bankid-session.service");
+let BankIdAuthService = class BankIdAuthService {
+    apiService;
+    bankIdSessionService;
+    constructor(apiService, bankIdSessionService) {
+        this.apiService = apiService;
+        this.bankIdSessionService = bankIdSessionService;
+    }
+    async initiate(ctx, endUserIp) {
+        return this.apiService.initiate(ctx, endUserIp);
+    }
+    async getBankidAuthStatus(ctx, data, isSameDevice) {
+        try {
+            const response = await this.apiService.collect(ctx, data.orderRef);
+            if (response.status === types_1.BankIdOrderStatus.Complete && response.completionData != null) {
+                return await this.handleComplete(ctx, response, isSameDevice, data.endUserIp);
+            }
+            const qrData = (0, utils_1.generateQrData)(data);
+            const result = {
+                ...response,
+                qrData: qrData,
+            };
+            return (0, lodash_1.pick)(result, ['status', 'hintCode', 'qrData', 'orderRef']);
+        }
+        catch (error) {
+            core_1.Logger.error('BankID collect error', constants_1.loggerCtx);
+            await this.bankIdSessionService.clear(ctx);
+            throw error;
+        }
+    }
+    async handleComplete(ctx, response, isSameDevice, cachedIpAddress) {
+        await this.bankIdSessionService.clear(ctx);
+        const { user, device } = response.completionData || {};
+        if (!user || !device) {
+            throw new Error('User or device not found'); // This should never happen since we check for completionData in the collect response
+        }
+        if (isSameDevice && cachedIpAddress != device.ipAddress) {
+            throw new utils_1.IpMismatchError(cachedIpAddress, device.ipAddress);
+        }
+        await this.bankIdSessionService.saveAuthenticatedUser(ctx, user.personalNumber);
+        return (0, lodash_1.pick)(response, ['status', 'hintCode', 'orderRef']);
+    }
+    async cancel(ctx, orderRef) {
+        return this.apiService.cancel(ctx, orderRef);
+    }
+};
+exports.BankIdAuthService = BankIdAuthService;
+exports.BankIdAuthService = BankIdAuthService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [bankid_api_service_1.BankIdApiService,
+        bankid_session_service_1.BankIdSessionService])
+], BankIdAuthService);
+//# sourceMappingURL=bankid-auth.service.js.map

package/src/services/bankid-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bankid-auth.service.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/services/bankid-auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2C;AAC3C,wCAAsD;AACtD,4CAAwC;AACxC,oCAAoG;AACpG,oCAA0D;AAC1D,mCAA6B;AAC7B,6DAAuD;AACvD,qEAA+D;AAIxD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAElB;IACA;IAFV,YACU,UAA4B,EAC5B,oBAA0C;QAD1C,eAAU,GAAV,UAAU,CAAkB;QAC5B,yBAAoB,GAApB,oBAAoB,CAAsB;IACjD,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,GAAmB,EAAE,SAAiB;QACnD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,GAAmB,EACnB,IAAuB,EACvB,YAAqB;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YAElE,IAAI,QAAQ,CAAC,MAAM,KAAK,yBAAiB,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;gBACtF,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YAC/E,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAA;YAEnC,MAAM,MAAM,GAAG;gBACb,GAAG,QAAQ;gBACX,MAAM,EAAE,MAAM;aACf,CAAA;YAED,OAAO,IAAA,aAAI,EAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAA;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,qBAAS,CAAC,CAAA;YAC/C,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC1C,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,GAAmB,EACnB,QAAyB,EACzB,YAAqB,EACrB,eAAuB;QAEvB,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC1C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAA;QAEtD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA,CAAC,qFAAqF;QACnI,CAAC;QAED,IAAI,YAAY,IAAI,eAAe,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,uBAAe,CAAC,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAE/E,OAAO,IAAA,aAAI,EAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,QAAgB;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC9C,CAAC;CACF,CAAA;AA9DY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAGW,qCAAgB;QACN,6CAAoB;GAHzC,iBAAiB,CA8D7B"}

package/src/services/bankid-session.service.d.ts

@@ -0,0 +1,13 @@
+import { RequestContext, CacheService } from '@vendure/core';
+import { InitiateResponse } from '../types';
+import { BankIdSessionData } from '../types';
+export declare class BankIdSessionService {
+    private cacheService;
+    constructor(cacheService: CacheService);
+    save(ctx: RequestContext, bankIdData: InitiateResponse, endUserIp: string): Promise<void>;
+    get(ctx: RequestContext): Promise<BankIdSessionData | undefined>;
+    clear(ctx: RequestContext): Promise<void>;
+    getSessionToken(ctx: RequestContext): Promise<string | undefined>;
+    saveAuthenticatedUser(ctx: RequestContext, ssn: string): Promise<void>;
+    getAuthenticatedUser(ctx: RequestContext): Promise<string | undefined>;
+}

package/src/services/bankid-session.service.js

@@ -0,0 +1,86 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BankIdSessionService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const lodash_1 = require("lodash");
+const crypto_js_1 = __importDefault(require("crypto-js"));
+const CACHE_TTL_MS = 1800000; // 30 minutes
+const ENCRYPTION_KEY = process.env.BANKID_ENCRYPTION_KEY;
+let BankIdSessionService = class BankIdSessionService {
+    cacheService;
+    constructor(cacheService) {
+        this.cacheService = cacheService;
+    }
+    async save(ctx, bankIdData, endUserIp) {
+        const sessionToken = await this.getSessionToken(ctx);
+        const data = {
+            ...(0, lodash_1.pick)(bankIdData, ['orderRef', 'autoStartToken', 'qrStartToken', 'qrStartSecret']),
+            endUserIp,
+        };
+        const cacheKey = `bankid:${sessionToken}:authExtra`;
+        await this.cacheService.set(cacheKey, data, { ttl: CACHE_TTL_MS });
+    }
+    async get(ctx) {
+        const sessionToken = await this.getSessionToken(ctx);
+        if (!sessionToken) {
+            return undefined;
+        }
+        const cacheKey = `bankid:${sessionToken}:authExtra`;
+        return await this.cacheService.get(cacheKey);
+    }
+    async clear(ctx) {
+        const sessionToken = await this.getSessionToken(ctx);
+        const cacheKey = `bankid:${sessionToken}:authExtra`;
+        await this.cacheService.delete(cacheKey);
+    }
+    async getSessionToken(ctx) {
+        return ctx.session?.token;
+    }
+    async saveAuthenticatedUser(ctx, ssn) {
+        const sessionToken = await this.getSessionToken(ctx);
+        if (!ENCRYPTION_KEY) {
+            throw new Error('BANKID_ENCRYPTION_KEY is not set');
+        }
+        const encrypted = crypto_js_1.default.AES.encrypt(ssn, ENCRYPTION_KEY).toString();
+        const cacheKey = `bankid:${sessionToken}:authUser`;
+        await this.cacheService.set(cacheKey, encrypted, { ttl: CACHE_TTL_MS });
+    }
+    async getAuthenticatedUser(ctx) {
+        const sessionToken = await this.getSessionToken(ctx);
+        if (!sessionToken) {
+            return undefined;
+        }
+        const cacheKey = `bankid:${sessionToken}:authUser`;
+        const encrypted = (await this.cacheService.get(cacheKey));
+        if (!encrypted || !ENCRYPTION_KEY) {
+            return undefined;
+        }
+        try {
+            const decrypted = crypto_js_1.default.AES.decrypt(encrypted, ENCRYPTION_KEY).toString(crypto_js_1.default.enc.Utf8);
+            return decrypted;
+        }
+        catch (error) {
+            console.error('error decrypting encrypted ssn', error);
+            return undefined;
+        }
+    }
+};
+exports.BankIdSessionService = BankIdSessionService;
+exports.BankIdSessionService = BankIdSessionService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.CacheService])
+], BankIdSessionService);
+//# sourceMappingURL=bankid-session.service.js.map

package/src/services/bankid-session.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bankid-session.service.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/services/bankid-session.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2C;AAC3C,wCAA4D;AAE5D,mCAA6B;AAC7B,0DAAgC;AAGhC,MAAM,YAAY,GAAG,OAAO,CAAA,CAAC,aAAa;AAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAA;AAGjD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACX;IAApB,YAAoB,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAElD,KAAK,CAAC,IAAI,CAAC,GAAmB,EAAE,UAA4B,EAAE,SAAiB;QAC7E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QACpD,MAAM,IAAI,GAAG;YACX,GAAG,IAAA,aAAI,EAAC,UAAU,EAAE,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;YACpF,SAAS;SACV,CAAA;QACD,MAAM,QAAQ,GAAG,UAAU,YAAY,YAAY,CAAA;QACnD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAmB;QAC3B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,YAAY,YAAY,CAAA;QACnD,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAmB;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QACpD,MAAM,QAAQ,GAAG,UAAU,YAAY,YAAY,CAAA;QACnD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAmB;QACvC,OAAO,GAAG,CAAC,OAAO,EAAE,KAAK,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,GAAmB,EAAE,GAAW;QAC1D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,SAAS,GAAG,mBAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtE,MAAM,QAAQ,GAAG,UAAU,YAAY,WAAW,CAAA;QAClD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAmB;QAC5C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,YAAY,WAAW,CAAA;QAClD,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAW,CAAA;QACnE,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;YAClC,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,mBAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,mBAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC7F,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAA;YACtD,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;CACF,CAAA;AAnEY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAEuB,mBAAY;GADnC,oBAAoB,CAmEhC"}

package/{dist → src}/types.d.ts

@@ -1,4 +1,3 @@
-import { InjectableStrategy, Injector, RequestContext } from '@vendure/core';
 /**
  * @description
  * The plugin can be configured using the following options:
@@ -8,7 +7,9 @@ export interface BankIdAuthPluginOptions {
     clientCert: string;
     privateKey: string;
     caCert: string;
-    postAuthStrategy: PostAuthenticateStrategy;
+}
+export interface GetBankidAuthStatusInput {
+    isSameDevice: boolean;
 }
 export interface InitiateResponse {
     orderRef: string;
@@ -17,8 +18,8 @@ export interface InitiateResponse {
     qrStartSecret: string;
 }
 export interface CollectResponse {
-    orderRef: BankIdOrderStatus.Complete | BankIdOrderStatus.Failed | BankIdOrderStatus.Pending;
-    status: string;
+    orderRef: string;
+    status: BankIdOrderStatus.Complete | BankIdOrderStatus.Failed | BankIdOrderStatus.Pending;
     hintCode: string;
     completionData?: CompletionData;
 }
@@ -39,6 +40,15 @@ export interface AuthResponse {
     userId?: string;
     hintCode?: string;
 }
+export type OrderStatusResponse = {
+    orderRef: string;
+    status: BankIdOrderStatus;
+    hintCode: string;
+    autoStartToken?: string;
+    qrData?: string;
+    user?: User;
+    sessionToken?: string;
+};
 export declare enum BankIdOrderStatus {
     Pending = "pending",
     Complete = "complete",
@@ -48,11 +58,13 @@ export interface BadRequestResponse {
     errorCode: string;
     details: string;
 }
-export interface PostAuthenticateStrategy extends InjectableStrategy {
-    handleSuccess(ctx: RequestContext, injector: Injector, input: {
-        personalNumber: string;
-    }): Promise<AuthenticatedUser>;
-}
 export interface AuthenticatedUser {
     userId: string;
 }
+export type BankIdSessionData = {
+    orderRef: string;
+    autoStartToken: string;
+    qrStartToken: string;
+    qrStartSecret: string;
+    endUserIp: string;
+};

package/{dist → src}/types.js

@@ -1,4 +1,8 @@
 "use strict";
+/**
+ * @description
+ * The plugin can be configured using the following options:
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BankIdOrderStatus = void 0;
 var BankIdOrderStatus;
@@ -6,4 +10,5 @@ var BankIdOrderStatus;
     BankIdOrderStatus["Pending"] = "pending";
     BankIdOrderStatus["Complete"] = "complete";
     BankIdOrderStatus["Failed"] = "failed";
-})(BankIdOrderStatus = exports.BankIdOrderStatus || (exports.BankIdOrderStatus = {}));
+})(BankIdOrderStatus || (exports.BankIdOrderStatus = BankIdOrderStatus = {}));
+//# sourceMappingURL=types.js.map

package/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/types.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA0DH,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,0CAAqB,CAAA;IACrB,sCAAiB,CAAA;AACnB,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B"}

package/src/utils.d.ts

@@ -0,0 +1,12 @@
+import { HttpException } from '@nestjs/common';
+import { AxiosError } from 'axios';
+import { Request } from 'express';
+import { InitiateResponse } from './types';
+export declare function handleBankIdError(error: AxiosError | Error): HttpException;
+export declare function getClientIp(req: Request): string;
+export declare function generateQrData(data: InitiateResponse | null): string;
+export declare class IpMismatchError extends Error {
+    expected: string;
+    actual: string;
+    constructor(expected: string, actual: string);
+}

package/src/utils.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IpMismatchError = void 0;
+exports.handleBankIdError = handleBankIdError;
+exports.getClientIp = getClientIp;
+exports.generateQrData = generateQrData;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const constants_1 = require("./constants");
+const crypto_1 = require("crypto");
+function handleBankIdError(error) {
+    if (error?.isAxiosError) {
+        const axiosError = error;
+        const status = axiosError.response?.status || 500;
+        core_1.Logger.error(`BankID error: ${status} - ${axiosError.message}`, constants_1.loggerCtx);
+        if (status >= 500) {
+            return new common_1.HttpException({
+                message: 'BankID service unavailable',
+                details: axiosError.response?.data,
+            }, status === common_1.HttpStatus.INTERNAL_SERVER_ERROR ? common_1.HttpStatus.BAD_GATEWAY : status);
+        }
+        if (status === 400) {
+            return new common_1.HttpException({
+                message: 'Invalid request to BankID',
+            }, status);
+        }
+    }
+    return new common_1.HttpException({
+        message: 'Unexpected error',
+    }, common_1.HttpStatus.INTERNAL_SERVER_ERROR);
+}
+function getClientIp(req) {
+    // Check various headers for the real client IP
+    const xForwardedFor = req.headers['x-forwarded-for'];
+    const xRealIp = req.headers['x-real-ip'];
+    const cfConnectingIp = req.headers['cf-connecting-ip']; // Cloudflare
+    if (xForwardedFor) {
+        return xForwardedFor.split(',')[0].trim();
+    }
+    if (xRealIp) {
+        return xRealIp;
+    }
+    if (cfConnectingIp) {
+        return cfConnectingIp;
+    }
+    const remoteAddress = req.socket?.remoteAddress;
+    if (remoteAddress) {
+        return remoteAddress;
+    }
+    throw new Error('Could not determine client IP address');
+}
+function generateQrData(data) {
+    if (!data || !data.qrStartToken || !data.qrStartSecret) {
+        throw new Error('BankID data not found');
+    }
+    const orderTimeSeconds = Date.now() / 1000;
+    const qrTime = Math.floor(Date.now() / 1000 - orderTimeSeconds);
+    const qrTimeString = qrTime.toString();
+    const qrAuthCode = (0, crypto_1.createHmac)('sha256', data.qrStartSecret).update(qrTimeString).digest('hex');
+    const qrData = `bankid.${data.qrStartToken}.${qrTimeString}.${qrAuthCode}`;
+    return qrData;
+}
+class IpMismatchError extends Error {
+    expected;
+    actual;
+    constructor(expected, actual) {
+        super(`IP mismatch: expected ${expected}, got ${actual}`);
+        this.expected = expected;
+        this.actual = actual;
+        this.expected = expected;
+        this.actual = actual;
+        this.name = 'IpMismatchError';
+        Object.setPrototypeOf(this, IpMismatchError.prototype);
+    }
+}
+exports.IpMismatchError = IpMismatchError;
+//# sourceMappingURL=utils.js.map

package/src/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/utils.ts"],"names":[],"mappings":";;;AAQA,8CAgCC;AAED,kCAwBC;AAED,wCAeC;AAnFD,2CAA0D;AAC1D,wCAAsC;AAEtC,2CAAuC;AAEvC,mCAAmC;AAGnC,SAAgB,iBAAiB,CAAC,KAAyB;IACzD,IAAK,KAAoB,EAAE,YAAY,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,KAAmB,CAAA;QACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,CAAA;QAEjD,aAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,qBAAS,CAAC,CAAA;QAE1E,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,sBAAa,CACtB;gBACE,OAAO,EAAE,4BAA4B;gBACrC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI;aACnC,EACD,MAAM,KAAK,mBAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAC9E,CAAA;QACH,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,sBAAa,CACtB;gBACE,OAAO,EAAE,2BAA2B;aACrC,EACD,MAAM,CACP,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,sBAAa,CACtB;QACE,OAAO,EAAE,kBAAkB;KAC5B,EACD,mBAAU,CAAC,qBAAqB,CACjC,CAAA;AACH,CAAC;AAED,SAAgB,WAAW,CAAC,GAAY;IACtC,+CAA+C;IAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAW,CAAA;IAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAW,CAAA;IAClD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAW,CAAA,CAAC,aAAa;IAE9E,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3C,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAA;IACvB,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAA;IAC/C,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAA;IACtB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAgB,cAAc,CAAC,IAA6B;IAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,gBAAgB,CAAC,CAAA;IAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;IAEtC,MAAM,UAAU,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAE9F,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,YAAY,IAAI,YAAY,IAAI,UAAU,EAAE,CAAA;IAE1E,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAa,eAAgB,SAAQ,KAAK;IAE/B;IACA;IAFT,YACS,QAAgB,EAChB,MAAc;QAErB,KAAK,CAAC,yBAAyB,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAA;QAHlD,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAGrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC;CACF;AAXD,0CAWC"}

package/dist/bankid-auth.controller.d.ts

@@ -1,19 +0,0 @@
-import { BankIdAuthService } from './services/bankid-auth.service';
-import { CacheService, RequestContext } from '@vendure/core';
-export declare class BankIdAuthController {
-    private bankIdAuthService;
-    private cacheService;
-    constructor(bankIdAuthService: BankIdAuthService, cacheService: CacheService);
-    initiate(ctx: RequestContext): Promise<{
-        data: import("./types").InitiateResponse;
-    }>;
-    authenticate(ctx: RequestContext, body: {
-        orderRef: string;
-        isSameDevice: boolean;
-    }): Promise<{
-        data: import("./types").AuthResponse;
-    }>;
-    cancel(ctx: RequestContext, body: {
-        orderRef: string;
-    }): Promise<void>;
-}

package/dist/index.d.ts

@@ -1 +0,0 @@
-export * from './bankid-auth.plugin';

package/dist/services/bankid-auth.service.d.ts

@@ -1,13 +0,0 @@
-import { ModuleRef } from '@nestjs/core';
-import { RequestContext } from '@vendure/core';
-import { InitiateResponse, AuthResponse, BankIdAuthPluginOptions } from '../types';
-export declare class BankIdAuthService {
-    private options;
-    private moduleRef;
-    private readonly axiosInstance;
-    constructor(options: BankIdAuthPluginOptions, moduleRef: ModuleRef);
-    initiate(ctx: RequestContext, endUserIp: string): Promise<InitiateResponse>;
-    authenticate(ctx: RequestContext, orderRef: string, cachedIpAddress: string, isSameDevice: boolean): Promise<AuthResponse>;
-    cancel(ctx: RequestContext, orderRef: string): Promise<boolean>;
-    private collect;
-}

package/dist/services/bankid-auth.service.js

@@ -1,117 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BankIdAuthService = void 0;
-const common_1 = require("@nestjs/common");
-const core_1 = require("@nestjs/core");
-const core_2 = require("@vendure/core");
-const constants_1 = require("../constants");
-const axios_1 = __importDefault(require("axios"));
-const https_1 = __importDefault(require("https"));
-const types_1 = require("../types");
-const utils_1 = require("../utils");
-let BankIdAuthService = class BankIdAuthService {
-    options;
-    moduleRef;
-    axiosInstance;
-    constructor(options, moduleRef) {
-        this.options = options;
-        this.moduleRef = moduleRef;
-        this.axiosInstance = axios_1.default.create({
-            baseURL: this.options.bankIdApiBaseUrl,
-            httpsAgent: new https_1.default.Agent({
-                cert: this.options.clientCert,
-                key: this.options.privateKey,
-                ca: this.options.caCert,
-                rejectUnauthorized: false,
-            }),
-        });
-    }
-    async initiate(ctx, endUserIp) {
-        try {
-            const response = await this.axiosInstance.post('/auth', { endUserIp });
-            return response.data;
-        }
-        catch (error) {
-            throw error;
-        }
-    }
-    async authenticate(ctx, orderRef, cachedIpAddress, isSameDevice) {
-        try {
-            const response = await this.collect(ctx, orderRef, 2000);
-            if (response.status === types_1.BankIdOrderStatus.Failed) {
-                return { success: false, hintCode: response?.hintCode };
-            }
-            if (response.status === types_1.BankIdOrderStatus.Complete && response.completionData != null) {
-                const { user, device } = response.completionData;
-                if (isSameDevice && cachedIpAddress != device.ipAddress) {
-                    throw new utils_1.IpMismatchError(cachedIpAddress, device.ipAddress);
-                }
-                const { userId } = await this.options.postAuthStrategy.handleSuccess(ctx, new core_2.Injector(this.moduleRef), {
-                    personalNumber: user.personalNumber,
-                });
-                return {
-                    success: true,
-                    userId: userId,
-                };
-            }
-        }
-        catch (error) {
-            throw error;
-        }
-        return { success: false };
-    }
-    async cancel(ctx, orderRef) {
-        try {
-            const response = await this.axiosInstance.post('/cancel', { orderRef });
-            if (response.status !== 200) {
-                throw new Error('Failed to cancel order');
-            }
-            return true;
-        }
-        catch (error) {
-            throw error;
-        }
-    }
-    async collect(ctx, orderRef, pollingIntervalMs) {
-        return new Promise((resolve, reject) => {
-            const interval = setInterval(async () => {
-                try {
-                    const response = await this.axiosInstance.post('/collect', { orderRef });
-                    if (response.data.status === types_1.BankIdOrderStatus.Complete) {
-                        clearInterval(interval);
-                        resolve(response.data);
-                    }
-                    if (response.data.status === types_1.BankIdOrderStatus.Failed) {
-                        clearInterval(interval);
-                        reject(response.data);
-                    }
-                }
-                catch (error) {
-                    clearInterval(interval);
-                    reject(error);
-                }
-            }, pollingIntervalMs);
-        });
-    }
-};
-BankIdAuthService = __decorate([
-    (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(constants_1.BANKID_AUTH_PLUGIN_OPTIONS)),
-    __metadata("design:paramtypes", [Object, core_1.ModuleRef])
-], BankIdAuthService);
-exports.BankIdAuthService = BankIdAuthService;

package/dist/utils.d.ts

@@ -1,9 +0,0 @@
-import { HttpException } from '@nestjs/common';
-import { RequestContext } from '@vendure/core';
-export declare function handleBankIdError(error: any): HttpException;
-export declare function getEndUserIp(ctx: RequestContext): string;
-export declare class IpMismatchError extends Error {
-    expected: string;
-    actual: string;
-    constructor(expected: string, actual: string);
-}

package/dist/utils.js

@@ -1,50 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IpMismatchError = exports.getEndUserIp = exports.handleBankIdError = void 0;
-const common_1 = require("@nestjs/common");
-function handleBankIdError(error) {
-    if (error?.isAxiosError) {
-        const axiosError = error;
-        const status = axiosError.response?.status || 500;
-        if (status >= 500) {
-            return new common_1.HttpException({
-                message: 'BankID service unavailable',
-                details: axiosError.response?.data,
-            }, status === common_1.HttpStatus.INTERNAL_SERVER_ERROR ? common_1.HttpStatus.BAD_GATEWAY : status);
-        }
-        if (status === 400) {
-            return new common_1.HttpException({
-                message: 'Invalid request to BankID',
-            }, status);
-        }
-    }
-    return new common_1.HttpException({
-        message: 'Unexpected error',
-    }, common_1.HttpStatus.INTERNAL_SERVER_ERROR);
-}
-exports.handleBankIdError = handleBankIdError;
-function getEndUserIp(ctx) {
-    const xForwardedFor = ctx.req?.headers['x-forwarded-for'];
-    if (typeof xForwardedFor === 'string') {
-        return xForwardedFor.split(',')[0].trim();
-    }
-    if (Array.isArray(xForwardedFor)) {
-        return xForwardedFor[0];
-    }
-    throw new Error('Could not determine end user IP');
-}
-exports.getEndUserIp = getEndUserIp;
-class IpMismatchError extends Error {
-    expected;
-    actual;
-    constructor(expected, actual) {
-        super(`IP mismatch: expected ${expected}, got ${actual}`);
-        this.expected = expected;
-        this.actual = actual;
-        this.expected = expected;
-        this.actual = actual;
-        this.name = 'IpMismatchError';
-        Object.setPrototypeOf(this, IpMismatchError.prototype);
-    }
-}
-exports.IpMismatchError = IpMismatchError;