@jsm406/medusa-plugin-redsys 1.0.3

package/.medusa/server/src/admin/index.js

@@ -0,0 +1,22 @@
+"use strict";
+const widgetModule = { widgets: [] };
+const routeModule = {
+  routes: []
+};
+const menuItemModule = {
+  menuItems: []
+};
+const formModule = { customFields: {} };
+const displayModule = {
+  displays: {}
+};
+const i18nModule = { resources: {} };
+const plugin = {
+  widgetModule,
+  routeModule,
+  menuItemModule,
+  formModule,
+  displayModule,
+  i18nModule
+};
+module.exports = plugin;

package/.medusa/server/src/admin/index.mjs

@@ -0,0 +1,23 @@
+const widgetModule = { widgets: [] };
+const routeModule = {
+  routes: []
+};
+const menuItemModule = {
+  menuItems: []
+};
+const formModule = { customFields: {} };
+const displayModule = {
+  displays: {}
+};
+const i18nModule = { resources: {} };
+const plugin = {
+  widgetModule,
+  routeModule,
+  menuItemModule,
+  formModule,
+  displayModule,
+  i18nModule
+};
+export {
+  plugin as default
+};

package/.medusa/server/src/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLDBDQUF1QiJ9

package/.medusa/server/src/providers/redsys/index.js

@@ -0,0 +1,11 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@medusajs/framework/utils");
+const service_1 = __importDefault(require("./service"));
+exports.default = (0, utils_1.ModuleProvider)(utils_1.Modules.PAYMENT, {
+    services: [service_1.default],
+});
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvcHJvdmlkZXJzL3JlZHN5cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUFBLHFEQUFtRTtBQUNuRSx3REFBNkM7QUFFN0Msa0JBQWUsSUFBQSxzQkFBYyxFQUFDLGVBQU8sQ0FBQyxPQUFPLEVBQUU7SUFDN0MsUUFBUSxFQUFFLENBQUMsaUJBQXFCLENBQUM7Q0FDbEMsQ0FBQyxDQUFBIn0=

package/.medusa/server/src/providers/redsys/service.js

@@ -0,0 +1,331 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@medusajs/framework/utils");
+const redsys_easy_1 = require("redsys-easy");
+const amount_1 = require("../../utils/amount");
+const currency_1 = require("../../utils/currency");
+const order_id_1 = require("../../utils/order-id");
+const errors_1 = require("../../utils/errors");
+const DEFAULTS = {
+    terminal: "001",
+    transactionType: "0",
+};
+class RedsysProviderService extends utils_1.AbstractPaymentProvider {
+    static validateOptions(options) {
+        if (!options.secretKey || typeof options.secretKey !== "string") {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Redsys secretKey is required and must be a string");
+        }
+        if (!options.merchantCode || typeof options.merchantCode !== "string") {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Redsys merchantCode is required and must be a string");
+        }
+    }
+    constructor(container, options) {
+        super(container, options);
+        this.logger_ = container.logger;
+        this.options_ = options;
+        this.redsysApi = (0, redsys_easy_1.createRedsysAPI)({
+            secretKey: options.secretKey,
+            urls: options.environment === "production" ? redsys_easy_1.PRODUCTION_URLS : redsys_easy_1.SANDBOX_URLS,
+        });
+    }
+    // ---------- Initiate ----------
+    async initiatePayment(input) {
+        const orderId = (0, order_id_1.generateOrderId)();
+        const sessionId = "redsys_" + orderId;
+        const amount = this.assertPositiveAmount(input.amount);
+        const amountStr = String((0, amount_1.getSmallestUnit)(amount, input.currency_code));
+        const currencyNum = (0, currency_1.getCurrencyNum)(input.currency_code);
+        const transactionType = this.options_.transactionType || DEFAULTS.transactionType;
+        const merchantParams = {
+            DS_MERCHANT_MERCHANTCODE: this.options_.merchantCode,
+            DS_MERCHANT_TERMINAL: this.options_.terminal || DEFAULTS.terminal,
+            DS_MERCHANT_ORDER: orderId,
+            DS_MERCHANT_AMOUNT: amountStr,
+            DS_MERCHANT_CURRENCY: currencyNum,
+            DS_MERCHANT_TRANSACTIONTYPE: transactionType,
+            DS_MERCHANT_CONSUMERLANGUAGE: "1",
+        };
+        if (this.options_.notificationUrl) {
+            merchantParams.DS_MERCHANT_MERCHANTURL = this.options_.notificationUrl;
+        }
+        const separator = (url) => url.includes("?") ? "&" : "?";
+        if (this.options_.successUrl) {
+            merchantParams.DS_MERCHANT_URLOK =
+                this.options_.successUrl + separator(this.options_.successUrl) + "orderId=" + orderId;
+        }
+        if (this.options_.errorUrl) {
+            merchantParams.DS_MERCHANT_URLKO =
+                this.options_.errorUrl + separator(this.options_.errorUrl) + "orderId=" + orderId;
+        }
+        merchantParams.DS_MERCHANT_MERCHANTDATA = sessionId + "|" + orderId;
+        const form = await this.redsysApi.createRedirectForm(merchantParams);
+        const sessionData = {
+            orderId,
+            amount: amountStr,
+            currency: currencyNum,
+            status: "pending",
+            transactionType,
+            merchantParams: form.body.Ds_MerchantParameters,
+            signature: form.body.Ds_Signature,
+            signatureVersion: form.body.Ds_SignatureVersion,
+            formUrl: form.url,
+        };
+        this.logger_.info("[REDSYS] Redirect form created for order: " + orderId);
+        return {
+            id: sessionId,
+            data: sessionData,
+        };
+    }
+    // ---------- Authorize ----------
+    async authorizePayment(input) {
+        const sessionData = input.data;
+        if (sessionData?.status === "authorized" ||
+            sessionData?.status === "pending") {
+            return {
+                status: utils_1.PaymentSessionStatus.AUTHORIZED,
+                data: input.data,
+            };
+        }
+        return {
+            status: utils_1.PaymentSessionStatus.PENDING,
+            data: input.data,
+        };
+    }
+    // ---------- Capture ----------
+    async capturePayment(input) {
+        const sessionData = input.data;
+        if (!sessionData?.orderId) {
+            return { data: input.data };
+        }
+        const transactionType = sessionData.transactionType || DEFAULTS.transactionType;
+        if (transactionType !== "1") {
+            return { data: input.data };
+        }
+        const params = {
+            DS_MERCHANT_MERCHANTCODE: this.options_.merchantCode,
+            DS_MERCHANT_TERMINAL: this.options_.terminal || DEFAULTS.terminal,
+            DS_MERCHANT_ORDER: sessionData.orderId,
+            DS_MERCHANT_AMOUNT: sessionData.amount,
+            DS_MERCHANT_CURRENCY: sessionData.currency,
+            DS_MERCHANT_TRANSACTIONTYPE: "2",
+        };
+        const response = await this.redsysApi.restIniciaPeticion(params);
+        if (response.Ds_Response === "0000" ||
+            String(response.Ds_Response).startsWith("00")) {
+            sessionData.authCode = response.Ds_AuthorisationCode;
+            this.logger_.info("[REDSYS] Capture successful for order: " + sessionData.orderId);
+        }
+        else {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.PAYMENT_AUTHORIZATION_ERROR, (0, errors_1.getErrorMessage)(response.Ds_Response));
+        }
+        return {
+            data: sessionData,
+        };
+    }
+    // ---------- Cancel ----------
+    async cancelPayment(input) {
+        const sessionData = input.data;
+        if (!sessionData?.orderId) {
+            return { data: input.data };
+        }
+        if (sessionData.status === "cancelled") {
+            return { data: input.data };
+        }
+        const params = {
+            DS_MERCHANT_MERCHANTCODE: this.options_.merchantCode,
+            DS_MERCHANT_TERMINAL: this.options_.terminal || DEFAULTS.terminal,
+            DS_MERCHANT_ORDER: sessionData.orderId,
+            DS_MERCHANT_AMOUNT: sessionData.amount,
+            DS_MERCHANT_CURRENCY: sessionData.currency,
+            DS_MERCHANT_TRANSACTIONTYPE: "9",
+        };
+        const response = await this.redsysApi.restIniciaPeticion(params);
+        if (response.Ds_Response === "0000" ||
+            String(response.Ds_Response).startsWith("00")) {
+            sessionData.status = "cancelled";
+            this.logger_.info("[REDSYS] Payment cancelled for order: " + sessionData.orderId);
+        }
+        else {
+            this.logger_.warn("[REDSYS] Cancellation responded with code: " +
+                response.Ds_Response);
+        }
+        return {
+            data: sessionData,
+        };
+    }
+    // ---------- Refund ----------
+    async refundPayment(input) {
+        const sessionData = input.data;
+        if (!sessionData?.orderId) {
+            return { data: input.data };
+        }
+        const refundAmount = this.assertPositiveAmount(input.amount);
+        const currencyToAlpha = {
+            "978": "eur",
+            "840": "usd",
+            "826": "gbp",
+            "392": "jpy",
+        };
+        const currencyCode = currencyToAlpha[sessionData.currency] || "eur";
+        const amountStr = String((0, amount_1.getSmallestUnit)(refundAmount, currencyCode));
+        const params = {
+            DS_MERCHANT_MERCHANTCODE: this.options_.merchantCode,
+            DS_MERCHANT_TERMINAL: this.options_.terminal || DEFAULTS.terminal,
+            DS_MERCHANT_ORDER: sessionData.orderId,
+            DS_MERCHANT_AMOUNT: amountStr,
+            DS_MERCHANT_CURRENCY: sessionData.currency,
+            DS_MERCHANT_TRANSACTIONTYPE: "3",
+        };
+        const response = await this.redsysApi.restIniciaPeticion(params);
+        const code = String(response.Ds_Response);
+        if (code === "0000" ||
+            code.startsWith("00") ||
+            code === "0900" ||
+            code === "900") {
+            sessionData.status = "refunded";
+            this.logger_.info("[REDSYS] Refund processed for order: " +
+                sessionData.orderId +
+                " Amount: " +
+                amountStr);
+        }
+        else {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.PAYMENT_AUTHORIZATION_ERROR, (0, errors_1.getErrorMessage)(response.Ds_Response));
+        }
+        return {
+            data: sessionData,
+        };
+    }
+    // ---------- Status ----------
+    async getPaymentStatus(input) {
+        const sessionData = input.data;
+        if (!sessionData?.status) {
+            return { status: utils_1.PaymentSessionStatus.PENDING };
+        }
+        switch (sessionData.status) {
+            case "authorized":
+                return { status: utils_1.PaymentSessionStatus.AUTHORIZED };
+            case "refunded":
+                return { status: utils_1.PaymentSessionStatus.CAPTURED };
+            case "cancelled":
+                return { status: utils_1.PaymentSessionStatus.CANCELED };
+            case "error":
+                return { status: utils_1.PaymentSessionStatus.ERROR };
+            default:
+                return { status: utils_1.PaymentSessionStatus.PENDING };
+        }
+    }
+    // ---------- Retrieve ----------
+    async retrievePayment(input) {
+        return { data: input.data };
+    }
+    // ---------- Update ----------
+    async updatePayment(input) {
+        const sessionData = input.data;
+        const orderId = sessionData?.orderId || (0, order_id_1.generateOrderId)();
+        const sessionId = "redsys_" + orderId;
+        const amount = this.assertPositiveAmount(input.amount);
+        const amountStr = String((0, amount_1.getSmallestUnit)(amount, input.currency_code));
+        const currencyNum = (0, currency_1.getCurrencyNum)(input.currency_code);
+        const transactionType = this.options_.transactionType || DEFAULTS.transactionType;
+        const merchantParams = {
+            DS_MERCHANT_MERCHANTCODE: this.options_.merchantCode,
+            DS_MERCHANT_TERMINAL: this.options_.terminal || DEFAULTS.terminal,
+            DS_MERCHANT_ORDER: orderId,
+            DS_MERCHANT_AMOUNT: amountStr,
+            DS_MERCHANT_CURRENCY: currencyNum,
+            DS_MERCHANT_TRANSACTIONTYPE: transactionType,
+            DS_MERCHANT_CONSUMERLANGUAGE: "1",
+        };
+        if (this.options_.notificationUrl) {
+            merchantParams.DS_MERCHANT_MERCHANTURL = this.options_.notificationUrl;
+        }
+        const separator = (url) => url.includes("?") ? "&" : "?";
+        if (this.options_.successUrl) {
+            merchantParams.DS_MERCHANT_URLOK =
+                this.options_.successUrl + separator(this.options_.successUrl) + "orderId=" + orderId;
+        }
+        if (this.options_.errorUrl) {
+            merchantParams.DS_MERCHANT_URLKO =
+                this.options_.errorUrl + separator(this.options_.errorUrl) + "orderId=" + orderId;
+        }
+        merchantParams.DS_MERCHANT_MERCHANTDATA = sessionId + "|" + orderId;
+        const form = await this.redsysApi.createRedirectForm(merchantParams);
+        const newData = {
+            orderId,
+            amount: amountStr,
+            currency: currencyNum,
+            status: "pending",
+            transactionType,
+            merchantParams: form.body.Ds_MerchantParameters,
+            signature: form.body.Ds_Signature,
+            signatureVersion: form.body.Ds_SignatureVersion,
+            formUrl: form.url,
+        };
+        return {
+            data: newData,
+        };
+    }
+    // ---------- Delete ----------
+    async deletePayment(input) {
+        return {};
+    }
+    // ---------- Webhook ----------
+    async getWebhookActionAndData(payload) {
+        try {
+            const notification = this.redsysApi.processRestNotification(payload.data);
+            if (!notification) {
+                this.logger_.warn("[REDSYS] Webhook: invalid notification data");
+                return { action: utils_1.PaymentActions.NOT_SUPPORTED };
+            }
+            const dsResponse = String(notification.Ds_Response);
+            if (dsResponse === "0000" || dsResponse.startsWith("00")) {
+                this.logger_.info("[REDSYS] Webhook: payment authorized for order: " +
+                    notification.Ds_Order);
+                let sessionId;
+                let orderId = notification.Ds_Order;
+                try {
+                    const merchantData = notification.Ds_MerchantData;
+                    if (merchantData) {
+                        const parts = merchantData.split("|");
+                        if (parts.length >= 3) {
+                            orderId = parts[2];
+                            sessionId = parts[1];
+                        }
+                    }
+                }
+                catch {
+                    // MerchantData parsing is best-effort
+                }
+                return {
+                    action: utils_1.PaymentActions.SUCCESSFUL,
+                    data: {
+                        session_id: sessionId || "redsys_" + orderId,
+                        amount: notification.Ds_Amount || 0,
+                    },
+                };
+            }
+            this.logger_.warn("[REDSYS] Webhook: payment not authorized. Order: " +
+                notification.Ds_Order +
+                " Response: " +
+                dsResponse);
+            return {
+                action: utils_1.PaymentActions.FAILED,
+            };
+        }
+        catch (error) {
+            this.logger_.error("[REDSYS] Webhook error: " + error.message);
+            return { action: utils_1.PaymentActions.NOT_SUPPORTED };
+        }
+    }
+    // ---------- Helpers ----------
+    assertPositiveAmount(amount) {
+        const n = parseFloat(String(amount));
+        if (!Number.isFinite(n) || n <= 0) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "amount must be a positive finite number, got \"" + amount + "\"");
+        }
+        return n;
+    }
+}
+RedsysProviderService.identifier = "redsys";
+exports.default = RedsysProviderService;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/types.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * REDSYS Payment Plugin Types
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedsysResponseCodes = exports.RedsysCurrencyCodes = exports.RedsysTransactionTypes = void 0;
+/**
+ * REDSYS Transaction Types
+ */
+exports.RedsysTransactionTypes = {
+    PAYMENT: "0",
+    PREAUTHORIZATION: "1",
+    CONFIRMATION: "2",
+    REFUND: "3",
+    CANCELLATION: "9",
+};
+/**
+ * REDSYS Currency Codes (ISO 4217 numeric)
+ */
+exports.RedsysCurrencyCodes = {
+    EUR: "978",
+    USD: "840",
+    GBP: "826",
+    JPY: "392",
+    MXN: "484",
+    ARS: "032",
+    CLP: "152",
+    COP: "170",
+    BRL: "986",
+    CHF: "756",
+    DKK: "208",
+    NOK: "578",
+    SEK: "752",
+    PLN: "985",
+    CZK: "203",
+    HUF: "348",
+    RON: "946",
+    BGN: "975",
+    HRK: "191",
+    ISK: "352",
+    TRY: "949",
+    AUD: "036",
+    CAD: "124",
+    CNY: "156",
+    INR: "356",
+    KRW: "410",
+    RUB: "643",
+    ZAR: "710",
+};
+/**
+ * REDSYS Response Codes
+ */
+exports.RedsysResponseCodes = {
+    AUTHORIZED: "0000",
+    AUTHORIZED_BELOW_100: "00",
+    REFUND_APPROVED: "0900",
+    REFUND_APPROVED_BELOW_900: "900",
+};
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/utils/amount.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSmallestUnit = getSmallestUnit;
+/**
+ * Convert amount to smallest currency unit (cents for most currencies)
+ * Redsys expects amounts in the smallest unit (e.g., EUR cents)
+ */
+function getSmallestUnit(amount, currency) {
+    const normalizedCurrency = currency.toLowerCase();
+    // Currencies without decimals (0 decimal places)
+    const zeroDecimal = ["jpy", "krw", "vnd", "isk", "clp"];
+    if (zeroDecimal.includes(normalizedCurrency)) {
+        return Math.round(amount);
+    }
+    // Standard currencies with 2 decimal places
+    return Math.round(amount * 100);
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYW1vdW50LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vc3JjL3V0aWxzL2Ftb3VudC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUlBLDBDQVdDO0FBZkQ7OztHQUdHO0FBQ0gsU0FBZ0IsZUFBZSxDQUFDLE1BQWMsRUFBRSxRQUFnQjtJQUM5RCxNQUFNLGtCQUFrQixHQUFHLFFBQVEsQ0FBQyxXQUFXLEVBQUUsQ0FBQTtJQUVqRCxpREFBaUQ7SUFDakQsTUFBTSxXQUFXLEdBQUcsQ0FBQyxLQUFLLEVBQUUsS0FBSyxFQUFFLEtBQUssRUFBRSxLQUFLLEVBQUUsS0FBSyxDQUFDLENBQUE7SUFDdkQsSUFBSSxXQUFXLENBQUMsUUFBUSxDQUFDLGtCQUFrQixDQUFDLEVBQUUsQ0FBQztRQUM3QyxPQUFPLElBQUksQ0FBQyxLQUFLLENBQUMsTUFBTSxDQUFDLENBQUE7SUFDM0IsQ0FBQztJQUVELDRDQUE0QztJQUM1QyxPQUFPLElBQUksQ0FBQyxLQUFLLENBQUMsTUFBTSxHQUFHLEdBQUcsQ0FBQyxDQUFBO0FBQ2pDLENBQUMifQ==

package/.medusa/server/src/utils/currency.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCurrencyNum = getCurrencyNum;
+exports.getCurrencyCode = getCurrencyCode;
+const types_1 = require("../types");
+/**
+ * Convert ISO 4217 currency code (e.g. "EUR") to Redsys numeric code (e.g. "978")
+ * Falls back to EUR ("978") for unknown currencies.
+ */
+function getCurrencyNum(currencyCode) {
+    const upper = currencyCode?.toUpperCase() || "EUR";
+    return types_1.RedsysCurrencyCodes[upper] || "978";
+}
+/**
+ * Convert Redsys numeric currency code (e.g. "978") to ISO 4217 code (e.g. "EUR")
+ * Falls back to "eur" for unknown codes.
+ */
+function getCurrencyCode(numericCode) {
+    const entries = Object.entries(types_1.RedsysCurrencyCodes);
+    const found = entries.find(([_, value]) => value === numericCode);
+    return found ? found[0].toLowerCase() : "eur";
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/utils/errors.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getErrorMessage = getErrorMessage;
+/**
+ * Human-readable Spanish error messages for REDSYS response codes.
+ */
+function getErrorMessage(code) {
+    const codeStr = String(code);
+    const errorMessages = {
+        "101": "Tarjeta caducada o con límite excedido",
+        "102": "Tarjeta en sospecha de fraude",
+        "104": "Operación no permitida para esta tarjeta",
+        "106": "Tarjeta caducada",
+        "107": "Operación no permitida para este comercio",
+        "109": "Comercio no operativo temporalmente",
+        "110": "Importe excede el límite permitido",
+        "114": "Tipo de operación no permitida",
+        "116": "Saldo insuficiente",
+        "118": "Tarjeta no registrada",
+        "129": "Código de seguridad (CVV2) incorrecto",
+        "180": "Tarjeta no válida",
+        "190": "Denegación sin especificar",
+        "191": "Fecha de caducidad incorrecta",
+        "195": "Requiere autenticación SCA",
+        "202": "Tarjeta en sospecha de fraude con denegación",
+        "904": "Comercio no registrado",
+        "909": "Error de sistema",
+        "913": "Pedido repetido",
+        "944": "Sesión incorrecta",
+        "950": "Operación de devolución no permitida",
+        "9064": "Número de tarjeta incorrecto",
+        "9078": "Tipo de operación no permitida",
+        "9093": "Tarjeta no existente",
+        "9094": "Servicio no disponible para esta tarjeta",
+        "9104": "Comercio no operativo",
+        "9218": "Operación no permitida",
+        "9253": "Tarjeta bloqueada",
+        "9256": "Tarjeta no permite operaciones de preautorización",
+        "9257": "Tarjeta no permite operaciones de devolución",
+        "9261": "Límite de reintentos de pago superado",
+        "9912": "Emisor no disponible",
+        "9915": "Cancelación automática por timeout",
+        "9928": "Anulación de autorización no permitida",
+        "9998": "Operación no permitida (AVS)",
+        "9999": "Autenticación requerida",
+    };
+    return errorMessages[codeStr] || `Transacción denegada (código: ${codeStr})`;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/utils/order-id.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateOrderId = generateOrderId;
+/**
+ * Generate a unique order ID for Redsys.
+ * Redsys requires:
+ * - First 4 characters must be digits
+ * - Max 12 characters
+ * - Alphanumeric (digits + uppercase letters)
+ */
+function generateOrderId() {
+    const prefix = String(Math.floor(Math.random() * 9000 + 1000));
+    const suffix = Math.random()
+        .toString(36)
+        .substring(2, 10)
+        .toUpperCase();
+    return (prefix + suffix).substring(0, 12);
+}
+//# sourceMappingURL=data:application/json;base64,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

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 My Company
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,497 @@
+# medusa-payment-redsys
+
+Redsys / Sermepa TPV Virtual payment provider plugin for [MedusaJS v2](https://medusajs.com/).
+
+This plugin enables payment processing through Redsys' hosted payment page (TPV Virtual) via redirect flow. Customers are redirected to the Redsys secure payment page to complete their transaction.
+
+> **Production-proven**: This plugin is derived from a live production Medusa store processing real Redsys payments.
+
+## Features
+
+- Redsys hosted payment page / TPV Virtual redirect flow
+- Sandbox and production environments
+- One-step payment (immediate capture) and two-step payment (pre-authorization + capture)
+- Full and partial refunds via Redsys API
+- Payment cancellation
+- Webhook handling with HMAC-SHA256 signature verification
+- Spanish error messages for Redsys response codes
+- Zero PCI scope — card data is handled by Redsys' secure page
+
+## Prerequisites
+
+- MedusaJS v2.13.0 or later
+- Node.js v20 or later
+- A [Redsys merchant account](https://comercios.redsys.es/) (or sandbox test credentials)
+- `redsys-easy` v5.3.0+ (installed automatically as a dependency)
+
+## Installation
+
+```bash
+npm install medusa-payment-redsys
+# or
+yarn add medusa-payment-redsys
+# or
+pnpm add medusa-payment-redsys
+```
+
+## Configuration
+
+### Environment Variables
+
+Add the following to your `.env` file:
+
+```env
+REDSYS_SECRET_KEY=sq7Hj....
+REDSYS_MERCHANT_CODE=999008881
+REDSYS_TERMINAL=001
+REDSYS_ENVIRONMENT=sandbox
+REDSYS_NOTIFICATION_URL=https://your-api.com/hooks/payment/redsys_redsys
+REDSYS_SUCCESS_URL=https://your-store.com/checkout/redsys-callback
+REDSYS_ERROR_URL=https://your-store.com/checkout/redsys-callback?error=1
+```
+
+For sandbox testing, use the following test credentials from Redsys:
+
+```
+Merchant Code: 999008881
+Terminal: 001
+Secret Key: sq7Hj.......
+Environment: sandbox
+```
+
+### Medusa Configuration
+
+In your `medusa-config.ts`:
+
+```ts
+import { defineConfig } from "@medusajs/framework/config"
+
+export default defineConfig({
+  modules: [
+    {
+      resolve: "@medusajs/medusa/payment",
+      options: {
+        providers: [
+          {
+            resolve: "medusa-payment-redsys/providers/redsys",
+            id: "redsys",
+            options: {
+              secretKey: process.env.REDSYS_SECRET_KEY,
+              merchantCode: process.env.REDSYS_MERCHANT_CODE,
+              terminal: process.env.REDSYS_TERMINAL || "001",
+              environment:
+                process.env.REDSYS_ENVIRONMENT || "sandbox",
+              notificationUrl:
+                process.env.REDSYS_NOTIFICATION_URL,
+              successUrl: process.env.REDSYS_SUCCESS_URL,
+              errorUrl: process.env.REDSYS_ERROR_URL,
+              transactionType: "0", // "0" = immediate capture, "1" = pre-authorization
+            },
+          },
+        ],
+      },
+    },
+  ],
+})
+```
+
+### Enable in Region
+
+Enable the Redsys provider in your Medusa admin panel under **Settings > Regions** and select **Redsys** as a payment provider.
+
+The provider ID will be:
+
+```
+pp_redsys_redsys
+```
+
+## Options
+
+| Option | Type | Required | Default | Description |
+|---|---|---|---|---|
+| `secretKey` | string | Yes | — | Redsys HMAC-SHA256 secret key |
+| `merchantCode` | string | Yes | — | Redsys merchant code (FUC) |
+| `terminal` | string | No | `"001"` | Terminal number |
+| `environment` | string | No | `"sandbox"` | `"sandbox"` or `"production"` |
+| `notificationUrl` | string | No | — | Webhook URL for Redsys to POST transaction results |
+| `successUrl` | string | No | — | URL to redirect after successful payment (URLOK) |
+| `errorUrl` | string | No | — | URL to redirect after failed payment (URLKO) |
+| `transactionType` | string | No | `"0"` | `"0"` = immediate capture, `"1"` = pre-authorization |
+
+## Payment Flow
+
+1. Customer selects **Redsys** as payment method
+2. `initiatePayment()` creates a signed redirect form with Redsys merchant parameters
+3. Customer clicks "Place Order" → storefront calls `cart.complete()` to create the order, stores a cookie mapping the Redsys internal order ID to the Medusa order ID, then auto-submits the redirect form to Redsys TPV
+4. Customer completes payment on the Redsys hosted payment page
+5. Redsys sends a **webhook notification** to `{backendUrl}/hooks/payment/redsys_redsys`
+6. `getWebhookActionAndData()` validates the HMAC-SHA256 signature and updates the payment status
+7. Redsys redirects the customer's browser to `successUrl` or `errorUrl` with the Redsys order ID as a query parameter
+8. Storefront callback page reads the cookie to resolve the Medusa order ID and redirects to the order confirmation page
+
+### Important: authorizePayment Behavior
+
+This plugin's `authorizePayment` returns `AUTHORIZED` for sessions with status `"pending"` **and** `"authorized"`. This is intentional for the redirect flow: the real authorization happens on Redsys TPV and is confirmed via webhook. Without this, `cart.complete()` would fail with a 400 error because Medusa requires the payment session to be authorized before completing the cart.
+
+### ID Mapping (Redsys → Medusa)
+
+The plugin generates a 12-character alphanumeric `orderId` (e.g. `97727XYIWRRF`) used as Redsys' merchant order reference. When the order is completed via `cart.complete()`, Medusa generates its own order ID (e.g. `order_01KR3B4X...`). These are **different IDs**.
+
+The callback URL from Redsys only contains the Redsys order ID, not the Medusa order ID. To bridge this gap, the storefront stores a cookie `redsys_map_{redsysOrderId}={medusaOrderId}` before redirecting to the TPV. The callback page reads this cookie to resolve the real Medusa order and redirect to the confirmation page.
+
+## Storefront Integration
+
+Redsys is a **redirect-based** payment method (no card input in your storefront — the customer enters card data on Redsys' secure TPV). You must adapt your Medusa Next.js storefront with the changes below.
+
+### 1. `src/lib/constants.tsx` — Register the payment method
+
+Add Redsys to the payment info map and add a helper function:
+
+```tsx
+// Inside paymentInfoMap, add:
+pp_redsys_redsys: {
+  title: "Credit / Debit Card",
+  icon: <CreditCard />,
+},
+
+// Add helper function:
+export const isRedsys = (providerId?: string) => {
+  return providerId?.startsWith("pp_redsys_")
+}
+```
+
+### 2. `src/lib/data/cart.ts` — Add order completion without redirect
+
+Add a `completeCartWithoutRedirect` function. The standard `placeOrder` does a `redirect()` (server-side), but Redsys needs to redirect the browser to the TPV instead. This function completes the cart, creates the order, but returns the result so the client can handle the TPV redirect:
+
+```ts
+export async function completeCartWithoutRedirect(cartId?: string) {
+  const id = cartId || (await getCartId())
+
+  if (!id) {
+    throw new Error("No existing cart found when completing cart")
+  }
+
+  const headers = {
+    ...(await getAuthHeaders()),
+  }
+
+  const cartRes = await sdk.store.cart
+    .complete(id, {}, headers)
+    .then(async (cartRes) => {
+      const cartCacheTag = await getCacheTag("carts")
+      revalidateTag(cartCacheTag)
+      return cartRes
+    })
+    .catch(medusaError)
+
+  if (cartRes?.type === "order") {
+    const orderCacheTag = await getCacheTag("orders")
+    revalidateTag(orderCacheTag)
+    removeCartId()
+  }
+
+  return cartRes
+}
+```
+
+### 3. `src/modules/checkout/components/payment-button/index.tsx` — Redsys payment button
+
+Add a `RedsysPaymentButton` component that:
+1. Reads the payment session data (formUrl, merchantParams, signature) from the cart
+2. Calls `completeCartWithoutRedirect()` to create the order
+3. Stores a cookie mapping the Redsys internal order ID → Medusa order ID (see [ID Mapping](#id-mapping-redsys--medusa))
+4. Dynamically builds and auto-submits a `<form>` to Redsys' TPV
+
+```tsx
+// Add import:
+import { isManual, isRedsys, isStripeLike } from "@lib/constants"
+import { completeCartWithoutRedirect, placeOrder } from "@lib/data/cart"
+
+// Add case in PaymentButton's switch:
+case isRedsys(paymentSession?.provider_id):
+  return (
+    <RedsysPaymentButton
+      notReady={notReady}
+      cart={cart}
+      data-testid={dataTestId}
+    />
+  )
+
+// Add the component:
+const RedsysPaymentButton = ({
+  cart,
+  notReady,
+  "data-testid": dataTestId,
+}: {
+  cart: HttpTypes.StoreCart
+  notReady: boolean
+  "data-testid"?: string
+}) => {
+  const [submitting, setSubmitting] = useState(false)
+  const [errorMessage, setErrorMessage] = useState<string | null>(null)
+
+  const handlePayment = async () => {
+    setSubmitting(true)
+
+    const paymentSession = cart.payment_collection?.payment_sessions?.find(
+      (s) => s.status === "pending" && isRedsys(s.provider_id)
+    )
+
+    const redsysData = paymentSession?.data as Record<string, string> | undefined
+
+    if (!redsysData?.formUrl || !redsysData?.merchantParams || !redsysData?.signature) {
+      setErrorMessage("No se pudieron obtener los datos de pago de Redsys")
+      setSubmitting(false)
+      return
+    }
+
+    const cartRes = await completeCartWithoutRedirect()
+      .catch((err) => {
+        setErrorMessage(err.message)
+        setSubmitting(false)
+        return null
+      })
+
+    if (!cartRes || cartRes.type !== "order") {
+      setErrorMessage(cartRes ? "Error al crear el pedido" : "")
+      setSubmitting(false)
+      return
+    }
+
+    // Store mapping between Redsys internal orderId and Medusa orderId
+    // The callback page uses this cookie to resolve the real order
+    const medusaOrderId = cartRes.order.id
+    const redsysOrderId = redsysData.orderId || ""
+    document.cookie = `redsys_map_${redsysOrderId}=${medusaOrderId}; path=/; max-age=600; SameSite=Lax`
+
+    const form = document.createElement("form")
+    form.method = "POST"
+    form.action = redsysData.formUrl
+
+    const fields: Record<string, string> = {
+      Ds_SignatureVersion: redsysData.signatureVersion,
+      Ds_MerchantParameters: redsysData.merchantParams,
+      Ds_Signature: redsysData.signature,
+    }
+
+    Object.entries(fields).forEach(([name, value]) => {
+      const input = document.createElement("input")
+      input.type = "hidden"
+      input.name = name
+      input.value = value
+      form.appendChild(input)
+    })
+
+    document.body.appendChild(form)
+    form.submit()
+  }
+
+  return (
+    <>
+      <Button
+        disabled={notReady || submitting}
+        isLoading={submitting}
+        onClick={handlePayment}
+        size="large"
+        data-testid={dataTestId}
+      >
+        Place order
+      </Button>
+      <ErrorMessage
+        error={errorMessage}
+        data-testid="redsys-payment-error-message"
+      />
+    </>
+  )
+}
+```
+
+### 4. `src/app/checkout/redsys-callback/page.tsx` — Callback page (new file)
+
+Create the page Redsys redirects to after payment. The `orderId` query param from Redsys contains the **internal Redsys order ID**, not the Medusa order ID. Use the cookie set in step 3 to resolve the real Medusa order and redirect to the confirmation page:
+
+```tsx
+import { retrieveOrder } from "@lib/data/orders"
+import { cookies } from "next/headers"
+import { Metadata } from "next"
+import { redirect } from "next/navigation"
+
+export const metadata: Metadata = {
+  title: "Resultado del pago",
+  description: "Resultado de la operación con Redsys",
+}
+
+type Props = {
+  searchParams: Promise<{ [key: string]: string | undefined }>
+}
+
+export default async function RedsysCallbackPage(props: Props) {
+  const searchParams = await props.searchParams
+
+  const isError = searchParams.error === "1"
+  const redsysOrderId = searchParams.orderId
+
+  if (isError) {
+    return (
+      <div className="flex flex-col items-center justify-center min-h-[50vh] gap-4 p-8">
+        <h1 className="text-2xl font-bold text-red-600">Pago no completado</h1>
+        <p className="text-gray-600">
+          La operación no se ha completado correctamente.
+        </p>
+        <a href="/" className="mt-4 px-6 py-2 bg-blue-600 text-white rounded-md hover:bg-blue-700">
+          Volver a la tienda
+        </a>
+      </div>
+    )
+  }
+
+  if (redsysOrderId) {
+    // Resolve the Medusa order ID from the cookie set by RedsysPaymentButton
+    const cookieStore = await cookies()
+    const medusaOrderId = cookieStore.get(`redsys_map_${redsysOrderId}`)?.value
+    const orderId = medusaOrderId || redsysOrderId
+
+    try {
+      const order = await retrieveOrder(orderId)
+      if (order) {
+        const countryCode = order.shipping_address?.country_code?.toLowerCase() || "dk"
+        return redirect(`/${countryCode}/order/${orderId}/confirmed`)
+      }
+    } catch {
+      // Order not found, show success anyway
+    }
+  }
+
+  return (
+    <div className="flex flex-col items-center justify-center min-h-[50vh] gap-4 p-8">
+      <h1 className="text-2xl font-bold text-green-600">Pago procesado</h1>
+      <p className="text-gray-600">Tu pago ha sido procesado correctamente.</p>
+      <a href="/" className="mt-4 px-6 py-2 bg-blue-600 text-white rounded-md hover:bg-blue-700">
+        Volver a la tienda
+      </a>
+    </div>
+  )
+}
+```
+
+### 5. `src/middleware.ts` — Bypass region redirect
+
+If your storefront uses middleware to enforce region/country code prefixes in URLs (as the default Medusa Next.js storefront does), add a bypass so `/checkout/redsys-callback` is not redirected. Add this early in the `middleware` function:
+
+```ts
+// Redsys callback URL — bypass region redirect
+if (request.nextUrl.pathname.startsWith("/checkout/redsys-callback")) {
+  return NextResponse.next()
+}
+```
+
+### 6. `medusa-config.ts` — CORS
+
+Ensure your storefront domain is allowed in CORS:
+
+```ts
+projectConfig: {
+  http: {
+    storeCors: "http://localhost:8000,https://your-store.com",
+  },
+}
+```
+
+### Session Data Reference
+
+The payment session `data` field returned by `initiatePayment`:
+
+```ts
+{
+  orderId: "1234ABCD5678",
+  amount: "2550",
+  currency: "978",
+  status: "pending",
+  transactionType: "0",
+  merchantParams: "base64...",          // Base64-encoded merchant parameters
+  signature: "hmac...",                 // HMAC-SHA256 signature
+  signatureVersion: "HMAC_SHA256_V1",
+  formUrl: "https://sis-t.redsys.es:25443/sis/realizarPago"
+}
+```
+
+These fields are used in step 3 to build the auto-submitting redirect form.
+
+### Webhook
+
+Medusa automatically exposes a webhook endpoint for the Redsys provider at:
+
+```
+/hooks/payment/redsys_redsys
+```
+
+For local development with sandbox, you must expose your backend to the internet (e.g., via [ngrok](https://ngrok.com/)) so Redsys can reach the webhook. Set `notificationUrl` to the ngrok URL.
+
+**Important**: Redsys sends the notification to `notificationUrl` but the signature verification and payment status update happens through the Medusa webhook handler — make sure `notificationUrl` points to the same endpoint or forward notifications accordingly.
+
+## Test Cards (Sandbox)
+
+| Card Number | Brand | Behavior |
+|---|---|---|
+| 4548810000000003 | VISA | 3DS v2 approved |
+| 5576441563045037 | Mastercard | 3DS v2 approved |
+| 4548814479727229 | VISA | 3DS frictionless |
+| 4548817212493017 | VISA | 3DS challenge |
+| Any + CVV 999 | Any | Payment declined |
+
+## Transaction Types
+
+| Code | Type | Description |
+|---|---|---|
+| `"0"` | Payment | Authorization + immediate capture (default) |
+| `"1"` | Pre-authorization | Reserve funds only |
+| `"2"` | Confirmation | Capture pre-authorized funds |
+| `"3"` | Refund | Full or partial refund |
+| `"9"` | Cancellation | Cancel/void a transaction |
+
+## Security
+
+- **Never log PAN, CVV, or the secret key**. The provider strips sensitive fields from log output.
+- **Always validate signatures server-side**. `getWebhookActionAndData()` uses `redsys-easy`'s `processRestNotification()` for HMAC-SHA256 verification.
+- **Use HTTPS** for all communication with Redsys.
+- **Do not trust client-side payment data**. The webhook with signature verification is the source of truth.
+- The redirect flow keeps you out of PCI scope — card data is handled by Redsys' secure page.
+
+## Currency Support
+
+The plugin includes built-in numeric currency codes for all major currencies. If your currency is not listed, it defaults to EUR (`978`). See `src/types.ts` for the full list.
+
+## Development
+
+```bash
+# Install dependencies
+npm install
+
+# Build
+npm run build
+
+# Run tests
+npm test
+
+# Watch mode (for local plugin development)
+npm run dev
+```
+
+### Local Testing with a Medusa Project
+
+```bash
+# From your plugin directory
+npm run dev
+
+# In your Medusa project directory:
+npx medusa plugin:add ../path-to/medusa-payment-redsys
+```
+
+## License
+
+MIT — see [LICENSE](./LICENSE) file for details.
+
+## Support
+
+For issues and questions, please open an issue on [GitHub](https://github.com/juansoler/medusa-payment-redsys/issues).

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@jsm406/medusa-plugin-redsys",
+  "version": "1.0.3",
+  "description": "Redsys / Sermepa TPV Virtual payment provider plugin for MedusaJS v2",
+  "author": "Juan Soler Márquez",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/juansoler/medusa-payment-redsys.git"
+  },
+  "homepage": "https://github.com/juansoler/medusa-payment-redsys",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    ".medusa/server"
+  ],
+  "exports": {
+    "./package.json": "./package.json",
+    "./providers/*": "./.medusa/server/src/providers/*/index.js",
+    "./*": "./.medusa/server/src/*.js"
+  },
+  "keywords": [
+    "medusa",
+    "medusa-v2",
+    "medusa-plugin",
+    "medusa-plugin-payment",
+    "medusa-plugin-integration",
+    "redsys",
+    "sermepa",
+    "tpv",
+    "tpv-virtual",
+    "payment",
+    "spain",
+    "ecommerce"
+  ],
+  "scripts": {
+    "build": "medusa plugin:build",
+    "dev": "medusa plugin:develop",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "medusa plugin:build"
+  },
+  "dependencies": {
+    "redsys-easy": "^5.3.0"
+  },
+  "peerDependencies": {
+    "@medusajs/framework": "^2.13.0",
+    "@medusajs/medusa": "^2.13.0"
+  },
+  "devDependencies": {
+    "@medusajs/cli": "^2.13.0",
+    "@medusajs/framework": "^2.13.0",
+    "@medusajs/medusa": "^2.13.0",
+    "@swc/core": "^1.15.33",
+    "@types/node": "^20.0.0",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.6.2",
+    "vitest": "^3.0.0"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}