@hszrdm/core 1.7.0 → 1.8.0

package/.medusa/server/src/api/store/arukereso/backlink/route.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = GET;
+const integration_settings_1 = require("../../../../modules/integration-settings");
+const ALLOWED_HOSTS = new Set([
+    "arukereso.hu",
+    "www.arukereso.hu",
+    "image.arukereso.hu",
+    "static.arukereso.hu",
+    "assets.arukereso.com",
+]);
+async function GET(req, res) {
+    const store = req.scope.resolve(integration_settings_1.INTEGRATION_SETTINGS_MODULE);
+    const resolved = await (0, integration_settings_1.resolvedIntegrationEnvironment)(store, "arukereso");
+    const enabled = resolved.enabled && resolved.env.ARUKERESO_BACKLINK_ENABLED === "true";
+    const code = String(resolved.env.ARUKERESO_BACKLINK_CODE || "").trim();
+    res.setHeader("Cache-Control", "public, max-age=300, stale-while-revalidate=300");
+    if (!enabled || !code) {
+        return res.json({ enabled: false, code: "" });
+    }
+    if (!isAllowedBacklinkCode(code)) {
+        return res.status(422).json({
+            enabled: false,
+            code: "",
+            message: "Az Árukereső backlink kód csak hivatalos Árukereső linket és képet tartalmazhat.",
+        });
+    }
+    return res.json({ enabled: true, code });
+}
+function isAllowedBacklinkCode(code) {
+    if (code.length > 6000)
+        return false;
+    if (/\bon\w+\s*=/i.test(code))
+        return false;
+    if (/javascript\s*:/i.test(code))
+        return false;
+    if (/<(?:script|iframe|form|object|embed)\b/i.test(code))
+        return false;
+    const urls = [...code.matchAll(/(?:src|href)\s*=\s*["']([^"']+)["']/gi)]
+        .map((match) => match[1])
+        .filter(Boolean);
+    if (!urls.length)
+        return false;
+    let hasArukeresoLink = false;
+    for (const value of urls) {
+        let url;
+        try {
+            url = new URL(value, "https://www.arukereso.hu");
+        }
+        catch {
+            return false;
+        }
+        if (url.protocol !== "https:")
+            return false;
+        if (!ALLOWED_HOSTS.has(url.hostname.toLowerCase()))
+            return false;
+        if (/href\s*=\s*["'][^"']+["']/i.test(code) &&
+            ["arukereso.hu", "www.arukereso.hu"].includes(url.hostname.toLowerCase())) {
+            hasArukeresoLink = true;
+        }
+    }
+    if (!hasArukeresoLink)
+        return false;
+    const stripped = code
+        .replace(/<a\b[^>]*>[\s\S]*?<\/a>/gi, "")
+        .replace(/<img\b[^>]*\/?\s*>/gi, "")
+        .replace(/<span\b[^>]*>[\s\S]*?<\/span>/gi, "")
+        .replace(/<div\b[^>]*>[\s\S]*?<\/div>/gi, "")
+        .replace(/<!--([\s\S]*?)-->/g, "")
+        .trim();
+    return stripped === "";
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/arukereso/trusted-shop/[id]/route.d.ts

@@ -0,0 +1,2 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function POST(req: MedusaRequest, res: MedusaResponse): Promise<MedusaResponse>;

package/.medusa/server/src/api/store/arukereso/trusted-shop/[id]/route.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const utils_1 = require("@medusajs/framework/utils");
+const integration_settings_1 = require("../../../../../modules/integration-settings");
+const TOKEN_URL = "https://www.arukereso.hu/t2/TokenRequest.php";
+const PROCESS_URL = "https://www.arukereso.hu/t2/TrustedShop.php";
+const AKU_URL = "https://assets.arukereso.com/aku.min.js";
+async function POST(req, res) {
+    const settingsStore = req.scope.resolve(integration_settings_1.INTEGRATION_SETTINGS_MODULE);
+    const resolved = await (0, integration_settings_1.resolvedIntegrationEnvironment)(settingsStore, "arukereso");
+    const env = resolved.env;
+    const enabled = resolved.enabled && env.ARUKERESO_TRUSTED_SHOP_ENABLED === "true";
+    const webApiKey = String(env.ARUKERESO_TRUSTED_SHOP_WEBAPI_KEY || "").trim();
+    if (!enabled || !webApiKey) {
+        return res.status(204).end();
+    }
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data } = await query.graph({
+        entity: "order",
+        fields: [
+            "id",
+            "email",
+            "items.id",
+            "items.title",
+            "items.product_title",
+            "items.variant_title",
+            "items.variant_id",
+        ],
+        filters: { id: req.params.id },
+    });
+    const order = data[0];
+    if (!order)
+        return res.status(404).json({ message: "Order not found." });
+    const email = String(order.email || "").trim().toLowerCase();
+    if (!email || !email.includes("@")) {
+        return res.status(422).json({ message: "A rendeléshez nem tartozik érvényes e-mail cím." });
+    }
+    const products = (Array.isArray(order.items) ? order.items : [])
+        .map((item) => {
+        const name = String(item.product_title || item.title || item.variant_title || "").trim();
+        if (!name)
+            return null;
+        const id = String(item.variant_id || "").trim();
+        return id ? { Name: name, Id: id } : { Name: name };
+    })
+        .filter(Boolean);
+    if (!products.length) {
+        return res.status(422).json({ message: "A rendelés nem tartalmaz továbbítható terméket." });
+    }
+    const body = new URLSearchParams({
+        Version: "2.0/PHP",
+        WebApiKey: webApiKey,
+        Email: email,
+        Products: JSON.stringify(products),
+    });
+    let response;
+    try {
+        response = await fetch(TOKEN_URL, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body,
+            signal: AbortSignal.timeout(2500),
+        });
+    }
+    catch {
+        return res.status(503).json({ message: "Az Árukereső tokenkérés időtúllépés miatt nem sikerült." });
+    }
+    const payload = (await response.json().catch(() => null));
+    if (!response.ok || !payload?.Token) {
+        return res.status(502).json({
+            message: payload?.ErrorMessage ||
+                `Az Árukereső tokenkérés sikertelen (${response.status}).`,
+        });
+    }
+    res.setHeader("Cache-Control", "no-store");
+    return res.status(200).json({
+        token: payload.Token,
+        web_api_key: webApiKey,
+        process_url: PROCESS_URL,
+        script_url: AKU_URL,
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/arukereso/widget/route.d.ts

@@ -0,0 +1,2 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function GET(req: MedusaRequest, res: MedusaResponse): Promise<MedusaResponse>;

package/.medusa/server/src/api/store/arukereso/widget/route.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = GET;
+const integration_settings_1 = require("../../../../modules/integration-settings");
+const ALLOWED_HOSTS = new Set([
+    "arukereso.hu",
+    "www.arukereso.hu",
+    "assets.arukereso.com",
+    "static.arukereso.hu",
+]);
+async function GET(req, res) {
+    const store = req.scope.resolve(integration_settings_1.INTEGRATION_SETTINGS_MODULE);
+    const resolved = await (0, integration_settings_1.resolvedIntegrationEnvironment)(store, "arukereso");
+    const enabled = resolved.enabled &&
+        resolved.env.ARUKERESO_TRUSTED_SHOP_WIDGET_ENABLED === "true";
+    const code = String(resolved.env.ARUKERESO_TRUSTED_SHOP_WIDGET_CODE || "").trim();
+    res.setHeader("Cache-Control", "public, max-age=300, stale-while-revalidate=300");
+    if (!enabled || !code) {
+        return res.json({ enabled: false, code: "" });
+    }
+    if (!isAllowedWidgetCode(code)) {
+        return res.status(422).json({
+            enabled: false,
+            code: "",
+            message: "Az Árukereső widget kód csak hivatalos arukereso.hu / arukereso.com forrásokat tartalmazhat.",
+        });
+    }
+    return res.json({ enabled: true, code });
+}
+function isAllowedWidgetCode(code) {
+    if (code.length > 12000)
+        return false;
+    if (/\bon\w+\s*=/i.test(code))
+        return false;
+    if (/javascript\s*:/i.test(code))
+        return false;
+    const urls = [...code.matchAll(/(?:src|href)\s*=\s*["']([^"']+)["']/gi)]
+        .map((match) => match[1])
+        .filter(Boolean);
+    if (!urls.length)
+        return false;
+    for (const value of urls) {
+        let url;
+        try {
+            url = new URL(value, "https://www.arukereso.hu");
+        }
+        catch {
+            return false;
+        }
+        if (url.protocol !== "https:")
+            return false;
+        if (!ALLOWED_HOSTS.has(url.hostname.toLowerCase()))
+            return false;
+    }
+    const stripped = code
+        .replace(/<script\b[^>]*>[\s\S]*?<\/script>/gi, "")
+        .replace(/<iframe\b[^>]*>[\s\S]*?<\/iframe>/gi, "")
+        .replace(/<div\b[^>]*>[\s\S]*?<\/div>/gi, "")
+        .replace(/<a\b[^>]*>[\s\S]*?<\/a>/gi, "")
+        .replace(/<!--([\s\S]*?)-->/g, "")
+        .trim();
+    return stripped === "";
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/documents/route.d.ts

@@ -0,0 +1,2 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function GET(req: MedusaRequest, res: MedusaResponse): Promise<MedusaResponse>;

package/.medusa/server/src/api/store/documents/route.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = GET;
+const documents_1 = require("../../../core/documents");
+const core_documents_1 = require("../../../modules/core-documents");
+const DOCUMENT_PAGE_SIZE = 500;
+async function GET(req, res) {
+    try {
+        const service = req.scope.resolve(core_documents_1.CORE_DOCUMENTS_MODULE);
+        const type = text(req.query?.document_type, 120);
+        const locale = text(req.query?.locale, 40);
+        const productId = text(req.query?.product_id, 120);
+        const categoryId = text(req.query?.category_id, 120);
+        const limit = clampInt(req.query?.limit, 200, 1, 500);
+        const filters = { status: "published" };
+        if (type)
+            filters.document_type = type;
+        const assignments = await service.listCoreDocumentAssignments({}, { take: 5000, order: { display_order: "ASC" } });
+        const visible = [];
+        let skip = 0;
+        while (visible.length < limit) {
+            const documents = await service.listCoreDocuments(filters, {
+                skip,
+                take: DOCUMENT_PAGE_SIZE,
+                order: { document_type: "ASC", title: "ASC" },
+            });
+            if (!documents.length)
+                break;
+            for (const document of documents) {
+                if (!(0, documents_1.isCoreDocumentPublic)(document))
+                    continue;
+                if (locale && document.locale && String(document.locale).toLowerCase() !== locale.toLowerCase())
+                    continue;
+                const withTargets = withAssignments(document, assignments);
+                if (productId && !withTargets.product_ids.includes(productId))
+                    continue;
+                if (categoryId && !withTargets.category_ids.includes(categoryId))
+                    continue;
+                visible.push(publicDocument(withTargets));
+                if (visible.length >= limit)
+                    break;
+            }
+            if (documents.length < DOCUMENT_PAGE_SIZE)
+                break;
+            skip += documents.length;
+        }
+        res.setHeader("Cache-Control", "public, max-age=60, stale-while-revalidate=300");
+        return res.json({ documents: visible, count: visible.length });
+    }
+    catch (error) {
+        return res.status(500).json({
+            message: error instanceof Error ? error.message : "A dokumentumok nem tölthetők be.",
+        });
+    }
+}
+function publicDocument(document) {
+    return {
+        id: document.id,
+        title: document.title,
+        description: document.description || null,
+        document_type: document.document_type,
+        file_url: document.file_url,
+        file_name: document.file_name,
+        mime_type: document.mime_type || null,
+        file_size: document.file_size ?? null,
+        locale: document.locale || null,
+        version: document.version || null,
+        valid_from: document.valid_from || null,
+        valid_until: document.valid_until || null,
+        product_ids: document.product_ids,
+        category_ids: document.category_ids,
+    };
+}
+function withAssignments(document, assignments) {
+    const own = assignments.filter((item) => item.document_id === document.id);
+    return {
+        ...document,
+        product_ids: own.filter((item) => item.target_type === "product").map((item) => String(item.target_id)),
+        category_ids: own.filter((item) => item.target_type === "category").map((item) => String(item.target_id)),
+    };
+}
+function text(value, max) { return typeof value === "string" ? value.trim().slice(0, max) : ""; }
+function clampInt(value, fallback, min, max) { const number = Number(value); return Number.isFinite(number) ? Math.max(min, Math.min(max, Math.trunc(number))) : fallback; }
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/google-merchant/oauth/callback/route.d.ts

@@ -0,0 +1,2 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function GET(req: MedusaRequest, res: MedusaResponse): Promise<MedusaResponse>;

package/.medusa/server/src/api/store/google-merchant/oauth/callback/route.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = GET;
+const integration_settings_1 = require("../../../../../modules/integration-settings");
+const google_merchant_1 = require("../../../../../lib/modules/google-merchant");
+async function GET(req, res) {
+    const code = String(req.query.code || "").trim();
+    const state = String(req.query.state || "").trim();
+    const oauthError = String(req.query.error || "").trim();
+    if (oauthError) {
+        return html(res, 400, `Google OAuth hiba: ${escapeHtml(oauthError)}`);
+    }
+    if (!code || !state) {
+        return html(res, 400, "Hiányzó Google OAuth code vagy state.");
+    }
+    try {
+        const statePayload = (0, google_merchant_1.verifyGoogleMerchantOAuthState)(state);
+        const store = req.scope.resolve(integration_settings_1.INTEGRATION_SETTINGS_MODULE);
+        const resolved = await (0, integration_settings_1.resolvedIntegrationEnvironment)(store, "google-merchant");
+        const current = await (0, integration_settings_1.getIntegrationSettingsView)(store, "google-merchant");
+        const token = await (0, google_merchant_1.exchangeGoogleMerchantAuthorizationCode)(resolved.env, code);
+        await (0, integration_settings_1.saveIntegrationSettings)({
+            store,
+            key: "google-merchant",
+            enabled: current.enabled,
+            values: {
+                GOOGLE_MERCHANT_API_REFRESH_TOKEN: token.refresh_token,
+            },
+            actorId: statePayload.actorId || null,
+        });
+        return html(res, 200, "A Google Merchant Center kapcsolat létrejött. Ezt az ablakot bezárhatod, majd az adminban futtasd a kapcsolat tesztelését.");
+    }
+    catch (error) {
+        return html(res, 400, error instanceof Error ? error.message : "A Google OAuth kapcsolat nem hozható létre.");
+    }
+}
+function html(res, status, message) {
+    res.setHeader("Content-Type", "text/html; charset=utf-8");
+    res.setHeader("Cache-Control", "no-store");
+    return res.status(status).send(`<!doctype html><html lang="hu"><head><meta charset="utf-8"><title>Google Merchant OAuth</title></head><body style="font-family:system-ui;padding:32px"><h1>Google Merchant Center</h1><p>${escapeHtml(message)}</p></body></html>`);
+}
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#039;");
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/config.d.ts

@@ -5,8 +5,8 @@ export type HszrdmCommerceConfigOptions = {
 /**
  * Build the Medusa application config for an HSZRDM Commerce backend.
  *
- * The generated application only needs to load its .env file and call this
- * helper. Shared modules, providers and Core plugin resources remain owned by
- * @hszrdm/core; project-specific customizations stay in the host application.
+ * Runtime-configurable providers are registered even when they are not yet
+ * configured. Admin -> Integrációk can therefore enable/rotate them without
+ * rebuilding the Medusa module graph or restarting the backend.
  */
 export declare function createHszrdmCommerceConfig(options?: HszrdmCommerceConfigOptions): import("@medusajs/types").ConfigModule;