@haus-tech/bankid-auth-plugin 1.0.3 → 1.0.5

package/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 1.0.4
+
+### 🩹 Fixes
+
+- **bankid-auth-plugin:** update rejectUnauthorized logic to use environment variable ([62de1e7](https://github.com/WeAreHausTech/haus-tech-vendure-plugins/commit/62de1e7))
+
+## 1.0.3
+
+This was a version bump only for bankid-auth-plugin to align it with other projects, there were no code changes.
+
 ## 1.0.2
 
 ### 🚀 Features

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@haus-tech/bankid-auth-plugin",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Support for authentication via Swedish BankID",
   "main": "src/index.js",
   "types": "src/index.d.ts",

package/src/api/api-extensions.d.ts

@@ -0,0 +1 @@
+export declare const shopSchema: import("graphql").DocumentNode;

package/src/api/api-extensions.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shopSchema = void 0;
+const graphql_tag_1 = require("graphql-tag");
+exports.shopSchema = (0, graphql_tag_1.gql) `
+  extend type Mutation {
+    initiateBankidAuth: InitiateBankidAuthResponse!
+  }
+
+  type InitiateBankidAuthResponse {
+    autoStartToken: String!
+  }
+
+  extend type Mutation {
+    getBankidAuthStatus(input: GetBankidAuthStatusInput!): GetBankidAuthStatusResponse!
+  }
+
+  input GetBankidAuthStatusInput {
+    isSameDevice: Boolean!
+  }
+
+  type GetBankidAuthStatusResponse {
+    status: String!
+    hintCode: String
+    autoStartToken: String
+    qrData: String
+  }
+  extend type Mutation {
+    cancelBankidAuth: Boolean!
+  }
+`;
+//# sourceMappingURL=api-extensions.js.map

package/src/api/api-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-extensions.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/api/api-extensions.ts"],"names":[],"mappings":";;;AAAA,6CAAiC;AAEpB,QAAA,UAAU,GAAG,IAAA,iBAAG,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;CA0B5B,CAAA"}

package/src/bankid-auth.plugin.js

@@ -11,15 +11,15 @@ exports.BankIdAuthPlugin = void 0;
 const core_1 = require("@vendure/core");
 const constants_1 = require("./constants");
 const bankid_auth_service_1 = require("./services/bankid-auth.service");
-const bankid_auth_controller_1 = require("./bankid-auth.controller");
+const bankid_api_service_1 = require("./services/bankid-api.service");
+const bankid_session_service_1 = require("./services/bankid-session.service");
+const api_extensions_1 = require("./api/api-extensions");
+const bankid_auth_resolver_1 = require("./bankid-auth.resolver");
 let BankIdAuthPlugin = class BankIdAuthPlugin {
     static { BankIdAuthPlugin_1 = this; }
     static options;
     static init(options) {
         this.options = options;
-        if (!options.postAuthStrategy) {
-            throw new Error('BankIdAuthPlugin requires a PostAuthenticateStrategy but none was provided');
-        }
         if (!options.bankIdApiBaseUrl) {
             throw new Error('BankIdAuthPlugin requires a bankIdApiBaseUrl but none was provided');
         }
@@ -32,16 +32,17 @@ exports.BankIdAuthPlugin = BankIdAuthPlugin = BankIdAuthPlugin_1 = __decorate([
         imports: [core_1.PluginCommonModule],
         providers: [
             { provide: constants_1.BANKID_AUTH_PLUGIN_OPTIONS, useFactory: () => BankIdAuthPlugin.options },
+            bankid_api_service_1.BankIdApiService,
+            bankid_session_service_1.BankIdSessionService,
             bankid_auth_service_1.BankIdAuthService,
         ],
+        shopApiExtensions: {
+            resolvers: [bankid_auth_resolver_1.BankIdAuthResolver],
+            schema: api_extensions_1.shopSchema,
+        },
         configuration: (config) => {
-            // Plugin-specific configuration
-            // such as custom fields, custom permissions,
-            // strategies etc. can be configured here by
-            // modifying the `config` object.
             return config;
         },
-        controllers: [bankid_auth_controller_1.BankIdAuthController],
         compatibility: '^3.0.0',
     })
 ], BankIdAuthPlugin);

package/src/bankid-auth.plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bankid-auth.plugin.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/bankid-auth.plugin.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,wCAAuE;AAEvE,2CAAwD;AACxD,wEAAkE;AAClE,qEAA+D;AAmBxD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;;IAC3B,MAAM,CAAC,OAAO,CAAyB;IAEvC,MAAM,CAAC,IAAI,CAAC,OAAgC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;QAC/F,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,kBAAgB,CAAA;IACzB,CAAC;CACF,CAAA;AAbY,4CAAgB;2BAAhB,gBAAgB;IAhB5B,IAAA,oBAAa,EAAC;QACb,OAAO,EAAE,CAAC,yBAAkB,CAAC;QAC7B,SAAS,EAAE;YACT,EAAE,OAAO,EAAE,sCAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE;YACnF,uCAAiB;SAClB;QACD,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE;YACxB,gCAAgC;YAChC,6CAA6C;YAC7C,4CAA4C;YAC5C,iCAAiC;YACjC,OAAO,MAAM,CAAA;QACf,CAAC;QACD,WAAW,EAAE,CAAC,6CAAoB,CAAC;QACnC,aAAa,EAAE,QAAQ;KACxB,CAAC;GACW,gBAAgB,CAa5B"}
+{"version":3,"file":"bankid-auth.plugin.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/bankid-auth.plugin.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,wCAAuE;AACvE,2CAAwD;AACxD,wEAAkE;AAClE,sEAAgE;AAChE,8EAAwE;AAExE,yDAAiD;AACjD,iEAA2D;AAmBpD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;;IAC3B,MAAM,CAAC,OAAO,CAAyB;IAEvC,MAAM,CAAC,IAAI,CAAC,OAAgC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,kBAAgB,CAAA;IACzB,CAAC;CACF,CAAA;AAVY,4CAAgB;2BAAhB,gBAAgB;IAjB5B,IAAA,oBAAa,EAAC;QACb,OAAO,EAAE,CAAC,yBAAkB,CAAC;QAC7B,SAAS,EAAE;YACT,EAAE,OAAO,EAAE,sCAA0B,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE;YACnF,qCAAgB;YAChB,6CAAoB;YACpB,uCAAiB;SAClB;QACD,iBAAiB,EAAE;YACjB,SAAS,EAAE,CAAC,yCAAkB,CAAC;YAC/B,MAAM,EAAE,2BAAU;SACnB;QACD,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE;YACxB,OAAO,MAAM,CAAA;QACf,CAAC;QACD,aAAa,EAAE,QAAQ;KACxB,CAAC;GACW,gBAAgB,CAU5B"}

package/src/bankid-auth.resolver.d.ts

@@ -0,0 +1,25 @@
+import { BankIdAuthService } from './services/bankid-auth.service';
+import { BankIdSessionService } from './services/bankid-session.service';
+import { RequestContext } from '@vendure/core';
+import { GetBankidAuthStatusInput } from './types';
+import { Request } from 'express';
+export declare class BankIdAuthResolver {
+    private bankIdAuthService;
+    private bankIdSessionService;
+    constructor(bankIdAuthService: BankIdAuthService, bankIdSessionService: BankIdSessionService);
+    initiateBankidAuth(ctx: RequestContext, req: Request): Promise<Pick<import("./types").InitiateResponse, "autoStartToken">>;
+    getBankidAuthStatus(ctx: RequestContext, args: {
+        input: GetBankidAuthStatusInput;
+    }): Promise<{
+        status: string;
+        hintCode: null;
+        autoStartToken: null;
+        qrData: null;
+    } | {
+        status: import("./types").BankIdOrderStatus;
+        hintCode: string;
+        autoStartToken: string;
+        qrData: string | undefined;
+    }>;
+    cancelBankidAuth(ctx: RequestContext): Promise<boolean>;
+}

package/src/{bankid-auth.controller.js → bankid-auth.resolver.js}

@@ -12,40 +12,55 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BankIdAuthController = void 0;
+exports.BankIdAuthResolver = void 0;
 const common_1 = require("@nestjs/common");
 const bankid_auth_service_1 = require("./services/bankid-auth.service");
+const bankid_session_service_1 = require("./services/bankid-session.service");
 const core_1 = require("@vendure/core");
 const utils_1 = require("./utils");
 const utils_2 = require("./utils");
-let BankIdAuthController = class BankIdAuthController {
+const graphql_1 = require("@nestjs/graphql");
+const graphql_2 = require("@nestjs/graphql");
+const lodash_1 = require("lodash");
+const constants_1 = require("./constants");
+let BankIdAuthResolver = class BankIdAuthResolver {
     bankIdAuthService;
-    cacheService;
-    constructor(bankIdAuthService, cacheService) {
+    bankIdSessionService;
+    constructor(bankIdAuthService, bankIdSessionService) {
         this.bankIdAuthService = bankIdAuthService;
-        this.cacheService = cacheService;
+        this.bankIdSessionService = bankIdSessionService;
     }
-    async initiate(ctx) {
-        const endUserIp = (0, utils_1.getEndUserIp)(ctx);
+    async initiateBankidAuth(ctx, req) {
         try {
+            const endUserIp = (0, utils_1.getClientIp)(req);
             const result = await this.bankIdAuthService.initiate(ctx, endUserIp);
-            const cacheKey = `bankid:session:${result.orderRef}`;
-            this.cacheService.set(cacheKey, endUserIp, { ttl: 120000 });
-            return { data: result };
+            await this.bankIdSessionService.save(ctx, result, endUserIp);
+            return (0, lodash_1.pick)(result, ['autoStartToken']);
         }
         catch (error) {
+            const err = error;
+            core_1.Logger.error(`BankID initiate failed: ${err.message}`, constants_1.loggerCtx, err.stack);
             throw (0, utils_1.handleBankIdError)(error);
         }
     }
-    async authenticate(ctx, body) {
-        if (!body.orderRef) {
-            throw new common_1.HttpException('orderRef is required', common_1.HttpStatus.BAD_REQUEST);
+    async getBankidAuthStatus(ctx, args) {
+        const data = await this.bankIdSessionService.get(ctx);
+        if (!data || !data.orderRef) {
+            return {
+                status: 'NOT_INITIATED',
+                hintCode: null,
+                autoStartToken: null,
+                qrData: null,
+            };
         }
-        const cacheKey = `bankid:session:${body.orderRef}`;
-        const cachedIpAddress = (await this.cacheService.get(cacheKey));
         try {
-            const res = await this.bankIdAuthService.authenticate(ctx, body.orderRef, cachedIpAddress, body.isSameDevice);
-            return { data: res };
+            const statusResponse = await this.bankIdAuthService.getBankidAuthStatus(ctx, data, args.input.isSameDevice);
+            return {
+                status: statusResponse.status,
+                hintCode: statusResponse.hintCode,
+                autoStartToken: data.autoStartToken,
+                qrData: statusResponse.qrData,
+            };
         }
         catch (error) {
             if (error instanceof utils_2.IpMismatchError) {
@@ -54,48 +69,48 @@ let BankIdAuthController = class BankIdAuthController {
             throw (0, utils_1.handleBankIdError)(error);
         }
     }
-    async cancel(ctx, body) {
-        if (!body.orderRef) {
-            throw new common_1.HttpException('orderRef is required', common_1.HttpStatus.BAD_REQUEST);
+    async cancelBankidAuth(ctx) {
+        const data = await this.bankIdSessionService.get(ctx);
+        if (!data || !data.orderRef) {
+            throw new common_1.HttpException('No active BankID order to cancel', common_1.HttpStatus.BAD_REQUEST);
         }
         try {
-            await this.bankIdAuthService.cancel(ctx, body.orderRef);
+            await this.bankIdAuthService.cancel(ctx, data.orderRef);
+            await this.bankIdSessionService.clear(ctx);
+            return true;
         }
         catch (error) {
             throw (0, utils_1.handleBankIdError)(error);
         }
     }
 };
-exports.BankIdAuthController = BankIdAuthController;
+exports.BankIdAuthResolver = BankIdAuthResolver;
 __decorate([
-    (0, common_1.Post)('initiate'),
-    (0, common_1.HttpCode)(common_1.HttpStatus.CREATED),
+    (0, graphql_1.Mutation)(),
     __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_2.Context)('req')),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [core_1.RequestContext]),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
     __metadata("design:returntype", Promise)
-], BankIdAuthController.prototype, "initiate", null);
+], BankIdAuthResolver.prototype, "initiateBankidAuth", null);
 __decorate([
-    (0, common_1.Post)('authenticate'),
-    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, graphql_1.Mutation)(),
     __param(0, (0, core_1.Ctx)()),
-    __param(1, (0, common_1.Body)()),
+    __param(1, (0, graphql_1.Args)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [core_1.RequestContext, Object]),
     __metadata("design:returntype", Promise)
-], BankIdAuthController.prototype, "authenticate", null);
+], BankIdAuthResolver.prototype, "getBankidAuthStatus", null);
 __decorate([
-    (0, common_1.Post)('cancel'),
-    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, graphql_1.Mutation)(),
     __param(0, (0, core_1.Ctx)()),
-    __param(1, (0, common_1.Body)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:paramtypes", [core_1.RequestContext]),
     __metadata("design:returntype", Promise)
-], BankIdAuthController.prototype, "cancel", null);
-exports.BankIdAuthController = BankIdAuthController = __decorate([
-    (0, common_1.Controller)('api/bankid'),
+], BankIdAuthResolver.prototype, "cancelBankidAuth", null);
+exports.BankIdAuthResolver = BankIdAuthResolver = __decorate([
+    (0, graphql_1.Resolver)(),
     __metadata("design:paramtypes", [bankid_auth_service_1.BankIdAuthService,
-        core_1.CacheService])
-], BankIdAuthController);
-//# sourceMappingURL=bankid-auth.controller.js.map
+        bankid_session_service_1.BankIdSessionService])
+], BankIdAuthResolver);
+//# sourceMappingURL=bankid-auth.resolver.js.map

package/src/bankid-auth.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bankid-auth.resolver.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/bankid-auth.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAiF;AACjF,wEAAkE;AAClE,8EAAwE;AACxE,wCAA2D;AAC3D,mCAAwD;AACxD,mCAAyC;AACzC,6CAA0D;AAG1D,6CAAyC;AACzC,mCAA6B;AAE7B,2CAAuC;AAGhC,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEnB;IACA;IAFV,YACU,iBAAoC,EACpC,oBAA0C;QAD1C,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,yBAAoB,GAApB,oBAAoB,CAAsB;IACjD,CAAC;IAGE,AAAN,KAAK,CAAC,kBAAkB,CAAQ,GAAmB,EAAkB,GAAY;QAC/E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAA;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YACpE,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;YAC5D,OAAO,IAAA,aAAI,EAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAc,CAAA;YAC1B,aAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,EAAE,EAAE,qBAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;YAC5E,MAAM,IAAA,yBAAiB,EAAC,KAA2B,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,mBAAmB,CAChB,GAAmB,EAClB,IAAyC;QAEjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAErD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE,eAAe;gBACvB,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,IAAI;gBACpB,MAAM,EAAE,IAAI;aACb,CAAA;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CACrE,GAAG,EACH,IAAI,EACJ,IAAI,CAAC,KAAK,CAAC,YAAY,CACxB,CAAA;YAED,OAAO;gBACL,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,QAAQ,EAAE,cAAc,CAAC,QAAQ;gBACjC,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,MAAM,EAAE,cAAc,CAAC,MAAM;aAC9B,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAe,EAAE,CAAC;gBACrC,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,CAAA;YACxC,CAAC;YACD,MAAM,IAAA,yBAAiB,EAAC,KAA2B,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CAAQ,GAAmB;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAErD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,sBAAa,CAAC,kCAAkC,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAA;QACrF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvD,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC1C,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,yBAAiB,EAAC,KAA2B,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;CACF,CAAA;AAzEY,gDAAkB;AAOvB;IADL,IAAA,kBAAQ,GAAE;IACe,WAAA,IAAA,UAAG,GAAE,CAAA;IAAuB,WAAA,IAAA,iBAAO,EAAC,KAAK,CAAC,CAAA;;qCAA/B,qBAAc;;4DAWlD;AAGK;IADL,IAAA,kBAAQ,GAAE;IAER,WAAA,IAAA,UAAG,GAAE,CAAA;IACL,WAAA,IAAA,cAAI,GAAE,CAAA;;qCADK,qBAAc;;6DAiC3B;AAGK;IADL,IAAA,kBAAQ,GAAE;IACa,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAM,qBAAc;;0DAchD;6BAxEU,kBAAkB;IAD9B,IAAA,kBAAQ,GAAE;qCAGoB,uCAAiB;QACd,6CAAoB;GAHzC,kBAAkB,CAyE9B"}

package/src/index.d.ts

@@ -1 +1,2 @@
 export * from './bankid-auth.plugin';
+export * from './services/bankid-session.service';

package/src/index.js

@@ -15,4 +15,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./bankid-auth.plugin"), exports);
+__exportStar(require("./services/bankid-session.service"), exports);
 //# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAoC;AACpC,oEAAiD"}

package/src/services/bankid-api.service.d.ts

@@ -0,0 +1,10 @@
+import { RequestContext } from '@vendure/core';
+import { InitiateResponse, CollectResponse, BankIdAuthPluginOptions } from '../types';
+export declare class BankIdApiService {
+    private options;
+    private readonly axiosInstance;
+    constructor(options: BankIdAuthPluginOptions);
+    initiate(_ctx: RequestContext, endUserIp: string): Promise<InitiateResponse>;
+    collect(_ctx: RequestContext, orderRef: string): Promise<CollectResponse>;
+    cancel(_ctx: RequestContext, orderRef: string): Promise<boolean>;
+}

package/src/services/bankid-api.service.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BankIdApiService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const constants_1 = require("../constants");
+const constants_2 = require("../constants");
+const axios_1 = __importDefault(require("axios"));
+const https_1 = __importDefault(require("https"));
+let BankIdApiService = class BankIdApiService {
+    options;
+    axiosInstance;
+    constructor(options) {
+        this.options = options;
+        this.axiosInstance = axios_1.default.create({
+            baseURL: this.options.bankIdApiBaseUrl,
+            httpsAgent: new https_1.default.Agent({
+                cert: this.options.clientCert,
+                key: this.options.privateKey,
+                ca: this.options.caCert,
+                rejectUnauthorized: process.env.BANKID_REJECT_UNAUTHORIZED !== 'false',
+            }),
+        });
+    }
+    async initiate(_ctx, endUserIp) {
+        const response = await this.axiosInstance.post('/auth', { endUserIp });
+        return response.data;
+    }
+    async collect(_ctx, orderRef) {
+        try {
+            const response = await this.axiosInstance.post('/collect', { orderRef });
+            return response.data;
+        }
+        catch (error) {
+            core_1.Logger.error('BankID collect error', constants_1.loggerCtx);
+            throw error;
+        }
+    }
+    async cancel(_ctx, orderRef) {
+        const response = await this.axiosInstance.post('/cancel', { orderRef });
+        if (response.status !== 200) {
+            throw new Error('Failed to cancel order');
+        }
+        return true;
+    }
+};
+exports.BankIdApiService = BankIdApiService;
+exports.BankIdApiService = BankIdApiService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(constants_2.BANKID_AUTH_PLUGIN_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], BankIdApiService);
+//# sourceMappingURL=bankid-api.service.js.map

package/src/services/bankid-api.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bankid-api.service.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/services/bankid-api.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAmD;AACnD,wCAAsD;AACtD,4CAAwC;AACxC,4CAAyD;AACzD,kDAA4C;AAC5C,kDAAyB;AAIlB,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAG6B;IAFvC,aAAa,CAAe;IAE7C,YAAwD,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;QACtF,IAAI,CAAC,aAAa,GAAG,eAAK,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;YACtC,UAAU,EAAE,IAAI,eAAK,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBAC7B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBAC5B,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBACvB,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,OAAO;aACvE,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAoB,EAAE,SAAiB;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;QACtE,OAAO,QAAQ,CAAC,IAAI,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,QAAgB;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAkB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;YACzF,OAAO,QAAQ,CAAC,IAAI,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,qBAAS,CAAC,CAAA;YAC/C,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAoB,EAAE,QAAgB;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC3C,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA;AAtCY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAIE,WAAA,IAAA,eAAM,EAAC,sCAA0B,CAAC,CAAA;;GAHpC,gBAAgB,CAsC5B"}

package/src/services/bankid-auth.service.d.ts

@@ -1,13 +1,14 @@
-import { ModuleRef } from '@nestjs/core';
 import { RequestContext } from '@vendure/core';
-import { InitiateResponse, AuthResponse, BankIdAuthPluginOptions } from '../types';
+import { InitiateResponse, OrderStatusResponse, CollectResponse } from '../types';
+import { BankIdApiService } from './bankid-api.service';
+import { BankIdSessionService } from './bankid-session.service';
+import { BankIdSessionData } from '../types';
 export declare class BankIdAuthService {
-    private options;
-    private moduleRef;
-    private readonly axiosInstance;
-    constructor(options: BankIdAuthPluginOptions, moduleRef: ModuleRef);
+    private apiService;
+    private bankIdSessionService;
+    constructor(apiService: BankIdApiService, bankIdSessionService: BankIdSessionService);
     initiate(ctx: RequestContext, endUserIp: string): Promise<InitiateResponse>;
-    authenticate(ctx: RequestContext, orderRef: string, cachedIpAddress: string, isSameDevice: boolean): Promise<AuthResponse>;
+    getBankidAuthStatus(ctx: RequestContext, data: BankIdSessionData, isSameDevice: boolean): Promise<OrderStatusResponse>;
+    handleComplete(ctx: RequestContext, response: CollectResponse, isSameDevice: boolean, cachedIpAddress: string): Promise<Pick<CollectResponse, "orderRef" | "status" | "hintCode">>;
     cancel(ctx: RequestContext, orderRef: string): Promise<boolean>;
-    private collect;
 }

package/src/services/bankid-auth.service.js

@@ -8,111 +8,65 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BankIdAuthService = void 0;
 const common_1 = require("@nestjs/common");
-const core_1 = require("@nestjs/core");
-const core_2 = require("@vendure/core");
+const core_1 = require("@vendure/core");
 const constants_1 = require("../constants");
-const axios_1 = __importDefault(require("axios"));
-const https_1 = require("https");
 const types_1 = require("../types");
 const utils_1 = require("../utils");
+const lodash_1 = require("lodash");
+const bankid_api_service_1 = require("./bankid-api.service");
+const bankid_session_service_1 = require("./bankid-session.service");
 let BankIdAuthService = class BankIdAuthService {
-    options;
-    moduleRef;
-    axiosInstance;
-    constructor(options, moduleRef) {
-        this.options = options;
-        this.moduleRef = moduleRef;
-        this.axiosInstance = axios_1.default.create({
-            baseURL: this.options.bankIdApiBaseUrl,
-            httpsAgent: new https_1.Agent({
-                cert: this.options.clientCert,
-                key: this.options.privateKey,
-                ca: this.options.caCert,
-                rejectUnauthorized: false,
-            }),
-        });
+    apiService;
+    bankIdSessionService;
+    constructor(apiService, bankIdSessionService) {
+        this.apiService = apiService;
+        this.bankIdSessionService = bankIdSessionService;
     }
     async initiate(ctx, endUserIp) {
-        try {
-            const response = await this.axiosInstance.post('/auth', { endUserIp });
-            return response.data;
-        }
-        catch (error) {
-            throw error;
-        }
+        return this.apiService.initiate(ctx, endUserIp);
     }
-    async authenticate(ctx, orderRef, cachedIpAddress, isSameDevice) {
+    async getBankidAuthStatus(ctx, data, isSameDevice) {
         try {
-            const response = await this.collect(ctx, orderRef, 2000);
-            if (response.status === types_1.BankIdOrderStatus.Failed) {
-                return { success: false, hintCode: response?.hintCode };
-            }
+            const response = await this.apiService.collect(ctx, data.orderRef);
             if (response.status === types_1.BankIdOrderStatus.Complete && response.completionData != null) {
-                const { user, device } = response.completionData;
-                if (isSameDevice && cachedIpAddress != device.ipAddress) {
-                    throw new utils_1.IpMismatchError(cachedIpAddress, device.ipAddress);
-                }
-                const { userId } = await this.options.postAuthStrategy.handleSuccess(ctx, new core_2.Injector(this.moduleRef), {
-                    personalNumber: user.personalNumber,
-                });
-                return {
-                    success: true,
-                    userId: userId,
-                };
+                return await this.handleComplete(ctx, response, isSameDevice, data.endUserIp);
             }
+            const qrData = (0, utils_1.generateQrData)(data);
+            const result = {
+                ...response,
+                qrData: qrData,
+            };
+            return (0, lodash_1.pick)(result, ['status', 'hintCode', 'qrData', 'orderRef']);
         }
         catch (error) {
+            core_1.Logger.error('BankID collect error', constants_1.loggerCtx);
+            await this.bankIdSessionService.clear(ctx);
             throw error;
         }
-        return { success: false };
     }
-    async cancel(ctx, orderRef) {
-        try {
-            const response = await this.axiosInstance.post('/cancel', { orderRef });
-            if (response.status !== 200) {
-                throw new Error('Failed to cancel order');
-            }
-            return true;
+    async handleComplete(ctx, response, isSameDevice, cachedIpAddress) {
+        await this.bankIdSessionService.clear(ctx);
+        const { user, device } = response.completionData || {};
+        if (!user || !device) {
+            throw new Error('User or device not found'); // This should never happen since we check for completionData in the collect response
         }
-        catch (error) {
-            throw error;
+        if (isSameDevice && cachedIpAddress != device.ipAddress) {
+            throw new utils_1.IpMismatchError(cachedIpAddress, device.ipAddress);
         }
+        await this.bankIdSessionService.saveAuthenticatedUser(ctx, user.personalNumber);
+        return (0, lodash_1.pick)(response, ['status', 'hintCode', 'orderRef']);
     }
-    async collect(ctx, orderRef, pollingIntervalMs) {
-        return new Promise((resolve, reject) => {
-            const interval = setInterval(async () => {
-                try {
-                    const response = await this.axiosInstance.post('/collect', { orderRef });
-                    if (response.data.status === types_1.BankIdOrderStatus.Complete) {
-                        clearInterval(interval);
-                        resolve(response.data);
-                    }
-                    if (response.data.status === types_1.BankIdOrderStatus.Failed) {
-                        clearInterval(interval);
-                        reject(response.data);
-                    }
-                }
-                catch (error) {
-                    clearInterval(interval);
-                    reject(error);
-                }
-            }, pollingIntervalMs);
-        });
+    async cancel(ctx, orderRef) {
+        return this.apiService.cancel(ctx, orderRef);
     }
 };
 exports.BankIdAuthService = BankIdAuthService;
 exports.BankIdAuthService = BankIdAuthService = __decorate([
     (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(constants_1.BANKID_AUTH_PLUGIN_OPTIONS)),
-    __metadata("design:paramtypes", [Object, core_1.ModuleRef])
+    __metadata("design:paramtypes", [bankid_api_service_1.BankIdApiService,
+        bankid_session_service_1.BankIdSessionService])
 ], BankIdAuthService);
 //# sourceMappingURL=bankid-auth.service.js.map

package/src/services/bankid-auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"bankid-auth.service.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/services/bankid-auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,2CAAmD;AACnD,uCAAwC;AACxC,wCAAiF;AACjF,4CAAyD;AACzD,kDAA4C;AAC5C,iCAA6B;AAC7B,oCAMiB;AACjB,oCAAwD;AAGjD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAGkB;IACpC;IAHO,aAAa,CAAe;IAC7C,YAC8C,OAAgC,EACpE,SAAoB;QADgB,YAAO,GAAP,OAAO,CAAyB;QACpE,cAAS,GAAT,SAAS,CAAW;QAE5B,IAAI,CAAC,aAAa,GAAG,eAAK,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;YACtC,UAAU,EAAE,IAAI,aAAK,CAAC;gBACpB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBAC7B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBAC5B,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBACvB,kBAAkB,EAAE,KAAK;aAC1B,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAmB,EAAE,SAAiB;QACnD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;YAEtE,OAAO,QAAQ,CAAC,IAAI,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,GAAmB,EACnB,QAAgB,EAChB,eAAuB,EACvB,YAAqB;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;YAExD,IAAI,QAAQ,CAAC,MAAM,KAAK,yBAAiB,CAAC,MAAM,EAAE,CAAC;gBACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;YACzD,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,KAAK,yBAAiB,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;gBACtF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAA;gBAChD,IAAI,YAAY,IAAI,eAAe,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACxD,MAAM,IAAI,uBAAe,CAAC,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;gBAC9D,CAAC;gBAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,aAAa,CAClE,GAAG,EACH,IAAI,eAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAC5B;oBACE,cAAc,EAAE,IAAI,CAAC,cAAc;iBACpC,CACF,CAAA;gBACD,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,MAAM;iBACf,CAAA;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,CAAA;QACb,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,QAAgB;QAChD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;YACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;YAC3C,CAAC;YAED,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,GAAmB,EACnB,QAAgB,EAChB,iBAAyB;QAEzB,OAAO,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;gBACtC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAkB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;oBACzF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,yBAAiB,CAAC,QAAQ,EAAE,CAAC;wBACxD,aAAa,CAAC,QAAQ,CAAC,CAAA;wBACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;oBACxB,CAAC;oBACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,yBAAiB,CAAC,MAAM,EAAE,CAAC;wBACtD,aAAa,CAAC,QAAQ,CAAC,CAAA;wBACvB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;oBACvB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,aAAa,CAAC,QAAQ,CAAC,CAAA;oBACvB,MAAM,CAAC,KAAK,CAAC,CAAA;gBACf,CAAC;YACH,CAAC,EAAE,iBAAiB,CAAC,CAAA;QACvB,CAAC,CAAC,CAAA;IACJ,CAAC;CACF,CAAA;AAtGY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,eAAM,EAAC,sCAA0B,CAAC,CAAA;6CAChB,gBAAS;GAJnB,iBAAiB,CAsG7B"}
+{"version":3,"file":"bankid-auth.service.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/services/bankid-auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA2C;AAC3C,wCAAsD;AACtD,4CAAwC;AACxC,oCAAoG;AACpG,oCAA0D;AAC1D,mCAA6B;AAC7B,6DAAuD;AACvD,qEAA+D;AAIxD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAElB;IACA;IAFV,YACU,UAA4B,EAC5B,oBAA0C;QAD1C,eAAU,GAAV,UAAU,CAAkB;QAC5B,yBAAoB,GAApB,oBAAoB,CAAsB;IACjD,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,GAAmB,EAAE,SAAiB;QACnD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,GAAmB,EACnB,IAAuB,EACvB,YAAqB;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YAElE,IAAI,QAAQ,CAAC,MAAM,KAAK,yBAAiB,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;gBACtF,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YAC/E,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAA;YAEnC,MAAM,MAAM,GAAG;gBACb,GAAG,QAAQ;gBACX,MAAM,EAAE,MAAM;aACf,CAAA;YAED,OAAO,IAAA,aAAI,EAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAA;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,qBAAS,CAAC,CAAA;YAC/C,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC1C,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,GAAmB,EACnB,QAAyB,EACzB,YAAqB,EACrB,eAAuB;QAEvB,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC1C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAA;QAEtD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA,CAAC,qFAAqF;QACnI,CAAC;QAED,IAAI,YAAY,IAAI,eAAe,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,uBAAe,CAAC,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAE/E,OAAO,IAAA,aAAI,EAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,QAAgB;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC9C,CAAC;CACF,CAAA;AA9DY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAGW,qCAAgB;QACN,6CAAoB;GAHzC,iBAAiB,CA8D7B"}

package/src/services/bankid-session.service.d.ts

@@ -0,0 +1,13 @@
+import { RequestContext, CacheService } from '@vendure/core';
+import { InitiateResponse } from '../types';
+import { BankIdSessionData } from '../types';
+export declare class BankIdSessionService {
+    private cacheService;
+    constructor(cacheService: CacheService);
+    save(ctx: RequestContext, bankIdData: InitiateResponse, endUserIp: string): Promise<void>;
+    get(ctx: RequestContext): Promise<BankIdSessionData | undefined>;
+    clear(ctx: RequestContext): Promise<void>;
+    getSessionToken(ctx: RequestContext): Promise<string | undefined>;
+    saveAuthenticatedUser(ctx: RequestContext, ssn: string): Promise<void>;
+    getAuthenticatedUser(ctx: RequestContext): Promise<string | undefined>;
+}

package/src/services/bankid-session.service.js

@@ -0,0 +1,86 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BankIdSessionService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const lodash_1 = require("lodash");
+const crypto_js_1 = __importDefault(require("crypto-js"));
+const CACHE_TTL_MS = 1800000; // 30 minutes
+const ENCRYPTION_KEY = process.env.BANKID_ENCRYPTION_KEY;
+let BankIdSessionService = class BankIdSessionService {
+    cacheService;
+    constructor(cacheService) {
+        this.cacheService = cacheService;
+    }
+    async save(ctx, bankIdData, endUserIp) {
+        const sessionToken = await this.getSessionToken(ctx);
+        const data = {
+            ...(0, lodash_1.pick)(bankIdData, ['orderRef', 'autoStartToken', 'qrStartToken', 'qrStartSecret']),
+            endUserIp,
+        };
+        const cacheKey = `bankid:${sessionToken}:authExtra`;
+        await this.cacheService.set(cacheKey, data, { ttl: CACHE_TTL_MS });
+    }
+    async get(ctx) {
+        const sessionToken = await this.getSessionToken(ctx);
+        if (!sessionToken) {
+            return undefined;
+        }
+        const cacheKey = `bankid:${sessionToken}:authExtra`;
+        return await this.cacheService.get(cacheKey);
+    }
+    async clear(ctx) {
+        const sessionToken = await this.getSessionToken(ctx);
+        const cacheKey = `bankid:${sessionToken}:authExtra`;
+        await this.cacheService.delete(cacheKey);
+    }
+    async getSessionToken(ctx) {
+        return ctx.session?.token;
+    }
+    async saveAuthenticatedUser(ctx, ssn) {
+        const sessionToken = await this.getSessionToken(ctx);
+        if (!ENCRYPTION_KEY) {
+            throw new Error('BANKID_ENCRYPTION_KEY is not set');
+        }
+        const encrypted = crypto_js_1.default.AES.encrypt(ssn, ENCRYPTION_KEY).toString();
+        const cacheKey = `bankid:${sessionToken}:authUser`;
+        await this.cacheService.set(cacheKey, encrypted, { ttl: CACHE_TTL_MS });
+    }
+    async getAuthenticatedUser(ctx) {
+        const sessionToken = await this.getSessionToken(ctx);
+        if (!sessionToken) {
+            return undefined;
+        }
+        const cacheKey = `bankid:${sessionToken}:authUser`;
+        const encrypted = (await this.cacheService.get(cacheKey));
+        if (!encrypted || !ENCRYPTION_KEY) {
+            return undefined;
+        }
+        try {
+            const decrypted = crypto_js_1.default.AES.decrypt(encrypted, ENCRYPTION_KEY).toString(crypto_js_1.default.enc.Utf8);
+            return decrypted;
+        }
+        catch (error) {
+            console.error('error decrypting encrypted ssn', error);
+            return undefined;
+        }
+    }
+};
+exports.BankIdSessionService = BankIdSessionService;
+exports.BankIdSessionService = BankIdSessionService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.CacheService])
+], BankIdSessionService);
+//# sourceMappingURL=bankid-session.service.js.map

package/src/services/bankid-session.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bankid-session.service.js","sourceRoot":"","sources":["../../../../../packages/bankid-auth-plugin/src/services/bankid-session.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA2C;AAC3C,wCAA4D;AAE5D,mCAA6B;AAC7B,0DAAgC;AAGhC,MAAM,YAAY,GAAG,OAAO,CAAA,CAAC,aAAa;AAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAA;AAGjD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACX;IAApB,YAAoB,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAElD,KAAK,CAAC,IAAI,CAAC,GAAmB,EAAE,UAA4B,EAAE,SAAiB;QAC7E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QACpD,MAAM,IAAI,GAAG;YACX,GAAG,IAAA,aAAI,EAAC,UAAU,EAAE,CAAC,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;YACpF,SAAS;SACV,CAAA;QACD,MAAM,QAAQ,GAAG,UAAU,YAAY,YAAY,CAAA;QACnD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAmB;QAC3B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,YAAY,YAAY,CAAA;QACnD,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAmB;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QACpD,MAAM,QAAQ,GAAG,UAAU,YAAY,YAAY,CAAA;QACnD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAmB;QACvC,OAAO,GAAG,CAAC,OAAO,EAAE,KAAK,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,GAAmB,EAAE,GAAW;QAC1D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,SAAS,GAAG,mBAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtE,MAAM,QAAQ,GAAG,UAAU,YAAY,WAAW,CAAA;QAClD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAmB;QAC5C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,YAAY,WAAW,CAAA;QAClD,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAW,CAAA;QACnE,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;YAClC,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,mBAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,mBAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC7F,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAA;YACtD,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;CACF,CAAA;AAnEY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAEuB,mBAAY;GADnC,oBAAoB,CAmEhC"}

package/src/types.d.ts

@@ -1,4 +1,3 @@
-import { InjectableStrategy, Injector, RequestContext } from '@vendure/core';
 /**
  * @description
  * The plugin can be configured using the following options:
@@ -8,7 +7,9 @@ export interface BankIdAuthPluginOptions {
     clientCert: string;
     privateKey: string;
     caCert: string;
-    postAuthStrategy: PostAuthenticateStrategy;
+}
+export interface GetBankidAuthStatusInput {
+    isSameDevice: boolean;
 }
 export interface InitiateResponse {
     orderRef: string;
@@ -17,8 +18,8 @@ export interface InitiateResponse {
     qrStartSecret: string;
 }
 export interface CollectResponse {
-    orderRef: BankIdOrderStatus.Complete | BankIdOrderStatus.Failed | BankIdOrderStatus.Pending;
-    status: string;
+    orderRef: string;
+    status: BankIdOrderStatus.Complete | BankIdOrderStatus.Failed | BankIdOrderStatus.Pending;
     hintCode: string;
     completionData?: CompletionData;
 }
@@ -39,6 +40,15 @@ export interface AuthResponse {
     userId?: string;
     hintCode?: string;
 }
+export type OrderStatusResponse = {
+    orderRef: string;
+    status: BankIdOrderStatus;
+    hintCode: string;
+    autoStartToken?: string;
+    qrData?: string;
+    user?: User;
+    sessionToken?: string;
+};
 export declare enum BankIdOrderStatus {
     Pending = "pending",
     Complete = "complete",
@@ -48,11 +58,13 @@ export interface BadRequestResponse {
     errorCode: string;
     details: string;
 }
-export interface PostAuthenticateStrategy extends InjectableStrategy {
-    handleSuccess(ctx: RequestContext, injector: Injector, input: {
-        personalNumber: string;
-    }): Promise<AuthenticatedUser>;
-}
 export interface AuthenticatedUser {
     userId: string;
 }
+export type BankIdSessionData = {
+    orderRef: string;
+    autoStartToken: string;
+    qrStartToken: string;
+    qrStartSecret: string;
+    endUserIp: string;
+};

package/src/types.js

@@ -1,4 +1,8 @@
 "use strict";
+/**
+ * @description
+ * The plugin can be configured using the following options:
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BankIdOrderStatus = void 0;
 var BankIdOrderStatus;

package/src/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/types.ts"],"names":[],"mappings":";;;AAkDA,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,0CAAqB,CAAA;IACrB,sCAAiB,CAAA;AACnB,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/types.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA0DH,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,wCAAmB,CAAA;IACnB,0CAAqB,CAAA;IACrB,sCAAiB,CAAA;AACnB,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B"}

package/src/utils.d.ts

@@ -1,7 +1,10 @@
 import { HttpException } from '@nestjs/common';
-import { RequestContext } from '@vendure/core';
-export declare function handleBankIdError(error: any): HttpException;
-export declare function getEndUserIp(ctx: RequestContext): string;
+import { AxiosError } from 'axios';
+import { Request } from 'express';
+import { InitiateResponse } from './types';
+export declare function handleBankIdError(error: AxiosError | Error): HttpException;
+export declare function getClientIp(req: Request): string;
+export declare function generateQrData(data: InitiateResponse | null): string;
 export declare class IpMismatchError extends Error {
     expected: string;
     actual: string;

package/src/utils.js

@@ -2,12 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IpMismatchError = void 0;
 exports.handleBankIdError = handleBankIdError;
-exports.getEndUserIp = getEndUserIp;
+exports.getClientIp = getClientIp;
+exports.generateQrData = generateQrData;
 const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const constants_1 = require("./constants");
+const crypto_1 = require("crypto");
 function handleBankIdError(error) {
     if (error?.isAxiosError) {
         const axiosError = error;
         const status = axiosError.response?.status || 500;
+        core_1.Logger.error(`BankID error: ${status} - ${axiosError.message}`, constants_1.loggerCtx);
         if (status >= 500) {
             return new common_1.HttpException({
                 message: 'BankID service unavailable',
@@ -24,15 +29,36 @@ function handleBankIdError(error) {
         message: 'Unexpected error',
     }, common_1.HttpStatus.INTERNAL_SERVER_ERROR);
 }
-function getEndUserIp(ctx) {
-    const xForwardedFor = ctx.req?.headers['x-forwarded-for'];
-    if (typeof xForwardedFor === 'string') {
+function getClientIp(req) {
+    // Check various headers for the real client IP
+    const xForwardedFor = req.headers['x-forwarded-for'];
+    const xRealIp = req.headers['x-real-ip'];
+    const cfConnectingIp = req.headers['cf-connecting-ip']; // Cloudflare
+    if (xForwardedFor) {
         return xForwardedFor.split(',')[0].trim();
     }
-    if (Array.isArray(xForwardedFor)) {
-        return xForwardedFor[0];
+    if (xRealIp) {
+        return xRealIp;
     }
-    throw new Error('Could not determine end user IP');
+    if (cfConnectingIp) {
+        return cfConnectingIp;
+    }
+    const remoteAddress = req.socket?.remoteAddress;
+    if (remoteAddress) {
+        return remoteAddress;
+    }
+    throw new Error('Could not determine client IP address');
+}
+function generateQrData(data) {
+    if (!data || !data.qrStartToken || !data.qrStartSecret) {
+        throw new Error('BankID data not found');
+    }
+    const orderTimeSeconds = Date.now() / 1000;
+    const qrTime = Math.floor(Date.now() / 1000 - orderTimeSeconds);
+    const qrTimeString = qrTime.toString();
+    const qrAuthCode = (0, crypto_1.createHmac)('sha256', data.qrStartSecret).update(qrTimeString).digest('hex');
+    const qrData = `bankid.${data.qrStartToken}.${qrTimeString}.${qrAuthCode}`;
+    return qrData;
 }
 class IpMismatchError extends Error {
     expected;

package/src/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/utils.ts"],"names":[],"mappings":";;;AAIA,8CA8BC;AAED,oCAYC;AAhDD,2CAA0D;AAI1D,SAAgB,iBAAiB,CAAC,KAAU;IAC1C,IAAK,KAAoB,EAAE,YAAY,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,KAAmB,CAAA;QACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,CAAA;QAEjD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,sBAAa,CACtB;gBACE,OAAO,EAAE,4BAA4B;gBACrC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI;aACnC,EACD,MAAM,KAAK,mBAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAC9E,CAAA;QACH,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,sBAAa,CACtB;gBACE,OAAO,EAAE,2BAA2B;aACrC,EACD,MAAM,CACP,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,sBAAa,CACtB;QACE,OAAO,EAAE,kBAAkB;KAC5B,EACD,mBAAU,CAAC,qBAAqB,CACjC,CAAA;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,GAAmB;IAC9C,MAAM,aAAa,GAAG,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAEzD,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3C,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAA;IACzB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;AACpD,CAAC;AAED,MAAa,eAAgB,SAAQ,KAAK;IAE/B;IACA;IAFT,YACS,QAAgB,EAChB,MAAc;QAErB,KAAK,CAAC,yBAAyB,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAA;QAHlD,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAGrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC;CACF;AAXD,0CAWC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/utils.ts"],"names":[],"mappings":";;;AAQA,8CAgCC;AAED,kCAwBC;AAED,wCAeC;AAnFD,2CAA0D;AAC1D,wCAAsC;AAEtC,2CAAuC;AAEvC,mCAAmC;AAGnC,SAAgB,iBAAiB,CAAC,KAAyB;IACzD,IAAK,KAAoB,EAAE,YAAY,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,KAAmB,CAAA;QACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,CAAA;QAEjD,aAAM,CAAC,KAAK,CAAC,iBAAiB,MAAM,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,qBAAS,CAAC,CAAA;QAE1E,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,sBAAa,CACtB;gBACE,OAAO,EAAE,4BAA4B;gBACrC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI;aACnC,EACD,MAAM,KAAK,mBAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAU,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAC9E,CAAA;QACH,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,sBAAa,CACtB;gBACE,OAAO,EAAE,2BAA2B;aACrC,EACD,MAAM,CACP,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,sBAAa,CACtB;QACE,OAAO,EAAE,kBAAkB;KAC5B,EACD,mBAAU,CAAC,qBAAqB,CACjC,CAAA;AACH,CAAC;AAED,SAAgB,WAAW,CAAC,GAAY;IACtC,+CAA+C;IAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAW,CAAA;IAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAW,CAAA;IAClD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAW,CAAA,CAAC,aAAa;IAE9E,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3C,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAA;IACvB,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAA;IAC/C,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAA;IACtB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;AAC1D,CAAC;AAED,SAAgB,cAAc,CAAC,IAA6B;IAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,gBAAgB,CAAC,CAAA;IAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;IAEtC,MAAM,UAAU,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAE9F,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,YAAY,IAAI,YAAY,IAAI,UAAU,EAAE,CAAA;IAE1E,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAa,eAAgB,SAAQ,KAAK;IAE/B;IACA;IAFT,YACS,QAAgB,EAChB,MAAc;QAErB,KAAK,CAAC,yBAAyB,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAA;QAHlD,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAGrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC;CACF;AAXD,0CAWC"}

package/src/bankid-auth.controller.d.ts

@@ -1,19 +0,0 @@
-import { BankIdAuthService } from './services/bankid-auth.service';
-import { CacheService, RequestContext } from '@vendure/core';
-export declare class BankIdAuthController {
-    private bankIdAuthService;
-    private cacheService;
-    constructor(bankIdAuthService: BankIdAuthService, cacheService: CacheService);
-    initiate(ctx: RequestContext): Promise<{
-        data: import("./types").InitiateResponse;
-    }>;
-    authenticate(ctx: RequestContext, body: {
-        orderRef: string;
-        isSameDevice: boolean;
-    }): Promise<{
-        data: import("./types").AuthResponse;
-    }>;
-    cancel(ctx: RequestContext, body: {
-        orderRef: string;
-    }): Promise<void>;
-}

package/src/bankid-auth.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bankid-auth.controller.js","sourceRoot":"","sources":["../../../../packages/bankid-auth-plugin/src/bankid-auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAQuB;AACvB,wEAAkE;AAClE,wCAAiE;AACjE,mCAAyD;AACzD,mCAAyC;AAGlC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAErB;IACA;IAFV,YACU,iBAAoC,EACpC,YAA0B;QAD1B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,iBAAY,GAAZ,YAAY,CAAc;IACjC,CAAC;IAIE,AAAN,KAAK,CAAC,QAAQ,CAAQ,GAAmB;QACvC,MAAM,SAAS,GAAG,IAAA,oBAAY,EAAC,GAAG,CAAC,CAAA;QAEnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;YACpE,MAAM,QAAQ,GAAG,kBAAkB,MAAM,CAAC,QAAQ,EAAE,CAAA;YACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;YAE3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,yBAAiB,EAAC,KAAK,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IAIK,AAAN,KAAK,CAAC,YAAY,CACT,GAAmB,EAClB,IAAiD;QAEzD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,sBAAa,CAAC,sBAAsB,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAA;QAClD,MAAM,eAAe,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAW,CAAA;QAEzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CACnD,GAAG,EACH,IAAI,CAAC,QAAQ,EACb,eAAe,EACf,IAAI,CAAC,YAAY,CAClB,CAAA;YAED,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAe,EAAE,CAAC;gBACrC,MAAM,IAAI,8BAAqB,CAAC,KAAK,CAAC,CAAA;YACxC,CAAC;YACD,MAAM,IAAA,yBAAiB,EAAC,KAAK,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAmB,EAAU,IAA0B;QACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,sBAAa,CAAC,sBAAsB,EAAE,mBAAU,CAAC,WAAW,CAAC,CAAA;QACzE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,yBAAiB,EAAC,KAAK,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;CACF,CAAA;AAjEY,oDAAoB;AAQzB;IAFL,IAAA,aAAI,EAAC,UAAU,CAAC;IAChB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,OAAO,CAAC;IACb,WAAA,IAAA,UAAG,GAAE,CAAA;;qCAAM,qBAAc;;oDAYxC;AAIK;IAFL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IAErB,WAAA,IAAA,UAAG,GAAE,CAAA;IACL,WAAA,IAAA,aAAI,GAAE,CAAA;;qCADK,qBAAc;;wDAyB3B;AAIK;IAFL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACd,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACV,WAAA,IAAA,UAAG,GAAE,CAAA;IAAuB,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAvB,qBAAc;;kDAUtC;+BAhEU,oBAAoB;IADhC,IAAA,mBAAU,EAAC,YAAY,CAAC;qCAGM,uCAAiB;QACtB,mBAAY;GAHzB,oBAAoB,CAiEhC"}