@houlak/plexo-sdk 0.1.4 → 0.1.5-fx

package/lib/sdk/helpers/signature/signatureHelper.js

@@ -1,305 +1,175 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (_) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignatureHelper = exports.canonizeJson = void 0;
-var axios_1 = require("axios");
-var fs = require("fs");
-var pem = require("pem");
-var crypto_1 = require("crypto");
-var js_convert_case_1 = require("js-convert-case");
-var util_1 = require("util");
-var logger_lib_1 = require("../../../lib/logger.lib");
-var config_1 = require("../../../config/config");
-var __1 = require("../..");
-var stringifyWithFloats_1 = require("./stringifyWithFloats");
-var client = axios_1.default.create({
-    baseURL: config_1.config.plexoUrl,
-});
-var specialWords = [
-    { word: 'UtcUnixTimeExpiration', substitute: 'UTCUnixTimeExpiration' },
-    { word: 'VatAmount', substitute: 'VATAmount' },
-];
-var canonizeJson = function (object) {
-    var cleanObject = deleteObjectUndefined(object);
-    return sort(cleanObject);
-};
-exports.canonizeJson = canonizeJson;
-var toCamelKeys = function (object) {
-    var parsedObject = (0, js_convert_case_1.camelKeys)(object, { recursive: true, recursiveInArray: true });
-    return parsedObject;
-};
-function substituteWordRecursively(theParsedObject, word, substitute) {
-    var deleteObject = function (obj, key) {
-        delete obj[key];
-    };
-    if (typeof theParsedObject === 'object') {
-        Object.keys(theParsedObject).map(function (key) {
-            if (key === word) {
-                Object.defineProperty(theParsedObject, substitute, Object.getOwnPropertyDescriptor(theParsedObject, word) || '');
-                deleteObject(theParsedObject, word);
-            }
-            if (typeof theParsedObject[key] === 'object') {
-                substituteWordRecursively(theParsedObject[key], word, substitute);
-            }
-        });
-    }
-}
-var toPascalKeys = function (object) {
-    var parsedObject = (0, js_convert_case_1.pascalKeys)(object, { recursive: true, recursiveInArray: true });
-    specialWords.forEach(function (specialWord) {
-        if (JSON.stringify(parsedObject).includes(specialWord.word)) {
-            substituteWordRecursively(parsedObject, specialWord.word, specialWord.substitute);
-        }
-    });
-    return parsedObject;
-};
-var sort = function (object) {
-    if (Array.isArray(object)) {
-        var newArray_1 = [];
-        object.map(function (item) { return newArray_1.push(sort(item)); });
-        return newArray_1;
-    }
-    if (typeof object === 'object') {
-        var newObject_1 = {};
-        Object.keys(object)
-            .sort()
-            .map(function (key) { return (newObject_1[key] = sort(object[key])); });
-        return newObject_1;
-    }
-    return object;
-};
-// TODO:
-// const parseDateToISO = (object: any) => {}
-var deleteObjectUndefined = function (object) {
-    if (Array.isArray(object)) {
-        object = object
-            .filter(function (item) { return item !== undefined || !item.length; })
-            .map(function (item) {
-            return typeof item === 'object' || Array.isArray(item) ? deleteObjectUndefined(item) : null;
-        });
-        return;
-    }
-    if (typeof object === 'object') {
-        Object.keys(object).map(function (key) {
-            if (typeof object[key] === 'object') {
-                if (Object.entries(object[key]).length === 0) {
-                    delete object[key];
-                }
-                deleteObjectUndefined(object[key]);
-            }
-            if ((!object[key] && object[key] !== 0 && typeof object[key] !== 'boolean') ||
-                (!object[key].length && Array.isArray(object[key]))) {
-                delete object[key];
-                return;
-            }
-            if (Array.isArray(object[key]) && object[key].length) {
-                deleteObjectUndefined(object[key]);
-            }
-        });
-    }
-    return object;
-};
-var getFingerprint = function (content, algorithm, inputEncoding, outputEncoding) {
-    if (algorithm === void 0) { algorithm = 'sha1'; }
-    if (inputEncoding === void 0) { inputEncoding = 'utf8'; }
-    if (outputEncoding === void 0) { outputEncoding = 'base64'; }
-    var shaSum = (0, crypto_1.createHash)(algorithm);
-    shaSum.update(content, inputEncoding);
-    var res = shaSum.digest(outputEncoding);
-    return res;
-};
-var getCertificate = function () { return __awaiter(void 0, void 0, void 0, function () {
-    var pathPfx, pfx, certs;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0:
-                pathPfx = config_1.config.plexoClient.certificatePath;
-                pfx = fs.readFileSync(pathPfx);
-                return [4 /*yield*/, new Promise(function (resolve, reject) { return __awaiter(void 0, void 0, void 0, function () {
-                        return __generator(this, function (_a) {
-                            switch (_a.label) {
-                                case 0: return [4 /*yield*/, pem.readPkcs12(pfx, { p12Password: config_1.config.plexoClient.certificatePassword }, function (_err, cert) { return __awaiter(void 0, void 0, void 0, function () {
-                                        var privateKey, stringifiedCert;
-                                        return __generator(this, function (_a) {
-                                            privateKey = cert.key;
-                                            stringifiedCert = cert.cert;
-                                            resolve({ privateKey: privateKey, cert: stringifiedCert });
-                                            return [2 /*return*/];
-                                        });
-                                    }); })];
-                                case 1:
-                                    _a.sent();
-                                    return [2 /*return*/];
-                            }
-                        });
-                    }); })];
-            case 1:
-                certs = _a.sent();
-                return [2 /*return*/, certs];
-        }
-    });
-}); };
-var generateSignature = function (object, privateKey) {
-    var canonizedString = (0, stringifyWithFloats_1.stringifyAmountsWithFloats)(object);
-    logger_lib_1.default.debug('STRING TO SIGN --> ' + canonizedString);
-    var canonizedStringEncoded = new util_1.TextEncoder().encode(canonizedString);
-    var signKey = (0, crypto_1.sign)('SHA512', canonizedStringEncoded, privateKey).toString('base64');
-    return signKey;
-};
-var getSignatureFromPlexo = function (objectToSign) { return __awaiter(void 0, void 0, void 0, function () {
-    var cert, privateKey, stringifiedCert, signedObject, thumbnail, canonizedObject, objectoToPascalKeys, signKey;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0: return [4 /*yield*/, getCertificate()];
-            case 1:
-                cert = _a.sent();
-                logger_lib_1.default.debug({ cert: cert });
-                privateKey = cert.privateKey;
-                stringifiedCert = cert.cert
-                    .toString()
-                    .split('\n')
-                    .filter(function (line) { return !line.includes('-----'); })
-                    .map(function (line) { return line.trim(); })
-                    .join('');
-                signedObject = {
-                    object: objectToSign,
-                    signature: '',
-                };
-                thumbnail = getFingerprint(stringifiedCert, 'sha1', 'base64', 'hex').toUpperCase();
-                objectToSign.fingerprint = thumbnail;
-                canonizedObject = (0, exports.canonizeJson)(objectToSign);
-                objectoToPascalKeys = toPascalKeys(canonizedObject);
-                signKey = generateSignature(objectoToPascalKeys, privateKey);
-                signedObject.signature = signKey;
-                signedObject.object = canonizedObject;
-                return [2 /*return*/, signedObject];
-        }
-    });
-}); };
-var getSignatureFromCallback = function (response) { return __awaiter(void 0, void 0, void 0, function () {
-    var object, stateObject, objectSignature, serverResponse;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0:
-                object = {
-                    client: response.response.client,
-                    request: response,
-                };
-                stateObject = {
-                    fingerprint: '',
-                    utcUnixTimeExpiration: Date.parse(new Date().toString()),
-                    object: object,
-                };
-                return [4 /*yield*/, getSignatureFromPlexo(stateObject)];
-            case 1:
-                objectSignature = _a.sent();
-                serverResponse = {
-                    response: {
-                        object: {
-                            object: {
-                                client: objectSignature.object.object.client,
-                                resultCode: response.resultCode,
-                            },
-                            fingerprint: objectSignature.object.fingerprint,
-                            utcUnixTimeExpiration: objectSignature.object.utcUnixTimeExpiration,
-                        },
-                        signature: objectSignature.signature,
-                    },
-                    resultCode: response.resultCode,
-                    errorMessage: response.errorMessage,
-                    i18ErrorMessages: response.i18ErrorMessages,
-                };
-                return [2 /*return*/, serverResponse];
-        }
-    });
-}); };
-var getPlexoKey = function (fingerprint) { return __awaiter(void 0, void 0, void 0, function () {
-    var plexoResponse;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0: return [4 /*yield*/, client.get("/Key/".concat(fingerprint))];
-            case 1:
-                plexoResponse = _a.sent();
-                if (plexoResponse.status !== 200) {
-                    throw new Error("Invalid or outdated Fingerprint, server returns: ".concat(plexoResponse.data.Object.Object.ErrorMessage));
-                }
-                return [2 /*return*/, plexoResponse.data];
-        }
-    });
-}); };
-var getPlexoSignature = function (fingerprint, response) { return __awaiter(void 0, void 0, void 0, function () {
-    var serverResponse, plexoResponse, err_1, key, objectBuffer, verifySignature;
-    return __generator(this, function (_a) {
-        switch (_a.label) {
-            case 0:
-                _a.trys.push([0, 2, , 3]);
-                return [4 /*yield*/, getPlexoKey(fingerprint)];
-            case 1:
-                plexoResponse = _a.sent();
-                return [3 /*break*/, 3];
-            case 2:
-                err_1 = _a.sent();
-                logger_lib_1.default.error({ err: err_1 }, 'Error getting plexo certificate');
-                serverResponse = {
-                    response: response.object.object,
-                    resultCode: __1.ResultCodes.InvalidFingerprint,
-                    errorMessage: err_1,
-                };
-                return [2 /*return*/, serverResponse];
-            case 3:
-                key = "-----BEGIN CERTIFICATE-----\n".concat(plexoResponse.Object.Object.Response.Key, "\n-----END CERTIFICATE-----");
-                objectBuffer = new util_1.TextEncoder().encode((0, stringifyWithFloats_1.stringifyAmountsWithFloats)(response.object));
-                verifySignature = (0, crypto_1.createVerify)('SHA512')
-                    .update(objectBuffer)
-                    .verify(key, response.signature, 'base64');
-                serverResponse = {
-                    response: response.object.object,
-                    resultCode: verifySignature ? __1.ResultCodes.Ok : __1.ResultCodes.InvalidSignature,
-                    errorMessage: verifySignature ? "Signature do not match" : 'Success',
-                };
-                return [2 /*return*/, serverResponse];
-        }
-    });
-}); };
-exports.SignatureHelper = {
-    getCertificate: getCertificate,
-    getSignatureFromPlexo: getSignatureFromPlexo,
-    getSignatureFromCallback: getSignatureFromCallback,
-    getPlexoSignature: getPlexoSignature,
-    toCamelKeys: toCamelKeys,
-};
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SignatureHelper = void 0;
+var axios_1 = require("axios");
+var crypto_1 = require("crypto");
+var __1 = require("../..");
+var logger_lib_1 = require("../../../lib/logger.lib");
+var utils_1 = require("../../../utils");
+var boolean_utils_1 = require("../../../utils/boolean.utils");
+var signatureUtils_1 = require("./signatureUtils");
+var signRequest = function (objectToSign, plexoCertificatePassword) { return __awaiter(void 0, void 0, void 0, function () {
+    var cert, privateKey, stringifiedCert, signedObject, thumbnail, canonizedObject, objectoToPascalKeys, objectWithStringBooleans, signKey;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, signatureUtils_1.signatureUtils.getCertificate(plexoCertificatePassword)];
+            case 1:
+                cert = _a.sent();
+                privateKey = cert.privateKey;
+                stringifiedCert = cert.cert
+                    .toString()
+                    .split('\n')
+                    .filter(function (line) { return !line.includes('-----'); })
+                    .map(function (line) { return line.trim(); })
+                    .join('');
+                signedObject = {
+                    object: objectToSign,
+                    signature: '',
+                };
+                thumbnail = signatureUtils_1.signatureUtils
+                    .getFingerprint(stringifiedCert, 'sha1', 'base64', 'hex')
+                    .toUpperCase();
+                objectToSign.fingerprint = thumbnail;
+                canonizedObject = signatureUtils_1.signatureUtils.canonizeJson(objectToSign);
+                objectoToPascalKeys = utils_1.caseUtils.toPascalKeys(canonizedObject);
+                objectWithStringBooleans = boolean_utils_1.booleanUtils.stringifyBooleans(objectoToPascalKeys);
+                signKey = signatureUtils_1.signatureUtils.generateSignature(objectWithStringBooleans, privateKey);
+                logger_lib_1.default.debug(objectWithStringBooleans, 'Object to sign');
+                signedObject.signature = signKey;
+                signedObject.object = objectWithStringBooleans;
+                return [2 /*return*/, signedObject];
+        }
+    });
+}); };
+var getPlexoKey = function (fingerprint, plexoUrl) { return __awaiter(void 0, void 0, void 0, function () {
+    var client, plexoResponse;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                client = axios_1.default.create({
+                    baseURL: plexoUrl,
+                });
+                return [4 /*yield*/, client.get("/Key/".concat(fingerprint))];
+            case 1:
+                plexoResponse = _a.sent();
+                if (plexoResponse.status !== 200) {
+                    throw new Error("Invalid or outdated Fingerprint, server returns: ".concat(plexoResponse.data.Object.Object.ErrorMessage));
+                }
+                return [2 /*return*/, plexoResponse.data];
+        }
+    });
+}); };
+var unwrapCallback = function (fingerprint, response, plexoUrl) { return __awaiter(void 0, void 0, void 0, function () {
+    var serverResponse, plexoResponse, err_1, certificate, key, canonizedObject, objectInPascalCase, objectWithStringBooleans, objectSorted, objectBuffer, verifySignature;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                _a.trys.push([0, 2, , 3]);
+                return [4 /*yield*/, getPlexoKey(fingerprint, plexoUrl)];
+            case 1:
+                plexoResponse = _a.sent();
+                return [3 /*break*/, 3];
+            case 2:
+                err_1 = _a.sent();
+                logger_lib_1.default.error({ err: err_1 }, 'Error getting plexo certificate');
+                serverResponse = {
+                    response: response.object.object,
+                    resultCode: __1.ResultCodes.InvalidFingerprint,
+                    errorMessage: err_1,
+                };
+                return [2 /*return*/, serverResponse];
+            case 3:
+                certificate = new crypto_1.X509Certificate(Buffer.from(plexoResponse.Object.Object.Response.Key, 'base64'));
+                key = certificate.publicKey.export({ format: 'pem', type: 'pkcs1' });
+                canonizedObject = signatureUtils_1.signatureUtils.canonizeJson(response.object, [
+                    'CreditLimits',
+                    'creditLimits',
+                ]);
+                objectInPascalCase = utils_1.caseUtils.toPascalKeys(canonizedObject);
+                objectWithStringBooleans = boolean_utils_1.booleanUtils.stringifyBooleans(objectInPascalCase);
+                objectSorted = signatureUtils_1.signatureUtils.sortObject(objectWithStringBooleans);
+                objectBuffer = Buffer.from(JSON.stringify(objectSorted));
+                verifySignature = (0, crypto_1.createVerify)('SHA512')
+                    .update(objectBuffer)
+                    .verify(key, response.signature, 'base64');
+                serverResponse = {
+                    response: response.object.object,
+                    resultCode: verifySignature ? __1.ResultCodes.Ok : __1.ResultCodes.InvalidSignature,
+                    errorMessage: verifySignature ? 'Success' : 'Signature do not match',
+                };
+                return [2 /*return*/, serverResponse];
+        }
+    });
+}); };
+var signCallback = function (response, plexoCertificatePath) { return __awaiter(void 0, void 0, void 0, function () {
+    var clientResponse, stateObject, signedObject, clientSignedResponse;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                clientResponse = {
+                    resultCode: response.resultCode,
+                    errorMessage: response.errorMessage,
+                    client: response.response.client,
+                    i18ErrorMessages: response.i18ErrorMessages,
+                };
+                stateObject = {
+                    fingerprint: '',
+                    object: clientResponse,
+                    utcUnixTimeExpiration: Date.parse(new Date().toString()),
+                };
+                return [4 /*yield*/, signRequest(stateObject, plexoCertificatePath)];
+            case 1:
+                signedObject = _a.sent();
+                clientSignedResponse = {
+                    signature: signedObject.signature,
+                    object: {
+                        fingerprint: signedObject.object.fingerprint,
+                        utcUnixTimeExpiration: signedObject.object.utcUnixTimeExpiration,
+                        object: clientResponse,
+                    },
+                };
+                return [2 /*return*/, clientSignedResponse];
+        }
+    });
+}); };
+exports.SignatureHelper = {
+    signRequest: signRequest,
+    unwrapCallback: unwrapCallback,
+    signCallback: signCallback,
+};

package/lib/sdk/helpers/signature/signatureUtils.d.ts

@@ -0,0 +1,10 @@
+import { BinaryToTextEncoding, Encoding } from 'crypto';
+import { Certificate } from '../../types/signatureHelper.type';
+export declare const signatureUtils: {
+    canonizeJson: <T>(object: T, keysToSkip?: string[]) => T;
+    sortObject: (object: any | any[]) => any | any[];
+    deleteObjectUndefined: (object: any, keysToSkip?: string[]) => any;
+    getFingerprint: (content: string, algorithm?: string, inputEncoding?: Encoding, outputEncoding?: BinaryToTextEncoding) => string;
+    getCertificate: (plexoCertificatePassword: string) => Promise<Certificate>;
+    generateSignature: <T_1 extends object>(object: T_1, privateKey: string) => string;
+};