@mj-biz-apps/orders-core-entities-server 5.35.0 → 5.36.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/AccountingBridge.d.ts +6 -7
- package/dist/AccountingBridge.d.ts.map +1 -1
- package/dist/AccountingBridge.js +6 -7
- package/dist/AccountingBridge.js.map +1 -1
- package/dist/AdvanceOrderStateOperation.d.ts +5 -5
- package/dist/AdvanceOrderStateOperation.js +5 -5
- package/dist/BaseInvoiceRail.d.ts +9 -0
- package/dist/BaseInvoiceRail.d.ts.map +1 -1
- package/dist/BaseInvoiceRail.js +8 -0
- package/dist/BaseInvoiceRail.js.map +1 -1
- package/dist/BasePaymentProvider.d.ts +7 -0
- package/dist/BasePaymentProvider.d.ts.map +1 -1
- package/dist/BasePaymentProvider.js.map +1 -1
- package/dist/BillComInvoiceRail.d.ts +5 -0
- package/dist/BillComInvoiceRail.d.ts.map +1 -1
- package/dist/BillComInvoiceRail.js +12 -3
- package/dist/BillComInvoiceRail.js.map +1 -1
- package/dist/CheckoutPublishableKey.d.ts +69 -0
- package/dist/CheckoutPublishableKey.d.ts.map +1 -0
- package/dist/CheckoutPublishableKey.js +122 -0
- package/dist/CheckoutPublishableKey.js.map +1 -0
- package/dist/CheckoutSessionService.d.ts +10 -1
- package/dist/CheckoutSessionService.d.ts.map +1 -1
- package/dist/CheckoutSessionService.js +26 -5
- package/dist/CheckoutSessionService.js.map +1 -1
- package/dist/ConcessionApprovalTask.d.ts +4 -0
- package/dist/ConcessionApprovalTask.d.ts.map +1 -1
- package/dist/ConcessionApprovalTask.js +8 -8
- package/dist/ConcessionApprovalTask.js.map +1 -1
- package/dist/CreateOrderFromProviderPaymentOperation.d.ts.map +1 -1
- package/dist/CreateOrderFromProviderPaymentOperation.js +2 -1
- package/dist/CreateOrderFromProviderPaymentOperation.js.map +1 -1
- package/dist/ExternalInvoiceBehavior.d.ts +6 -0
- package/dist/ExternalInvoiceBehavior.d.ts.map +1 -1
- package/dist/ExternalInvoiceBehavior.js +7 -0
- package/dist/ExternalInvoiceBehavior.js.map +1 -1
- package/dist/IssueExternalInvoiceOperation.d.ts.map +1 -1
- package/dist/IssueExternalInvoiceOperation.js +25 -3
- package/dist/IssueExternalInvoiceOperation.js.map +1 -1
- package/dist/OrderEntityServer.d.ts +26 -0
- package/dist/OrderEntityServer.d.ts.map +1 -1
- package/dist/OrderEntityServer.js +122 -8
- package/dist/OrderEntityServer.js.map +1 -1
- package/dist/OrderReview.d.ts +72 -0
- package/dist/OrderReview.d.ts.map +1 -0
- package/dist/OrderReview.js +611 -0
- package/dist/OrderReview.js.map +1 -0
- package/dist/OrdersSettings.d.ts +58 -0
- package/dist/OrdersSettings.d.ts.map +1 -1
- package/dist/OrdersSettings.js +111 -0
- package/dist/OrdersSettings.js.map +1 -1
- package/dist/PaymentProviderResolver.d.ts +10 -2
- package/dist/PaymentProviderResolver.d.ts.map +1 -1
- package/dist/PaymentProviderResolver.js +16 -5
- package/dist/PaymentProviderResolver.js.map +1 -1
- package/dist/ProductPriceEntityServer.d.ts +2 -2
- package/dist/ProductPriceEntityServer.d.ts.map +1 -1
- package/dist/ProductPriceEntityServer.js +3 -3
- package/dist/ProductPriceEntityServer.js.map +1 -1
- package/dist/RefundAuthority.d.ts +75 -0
- package/dist/RefundAuthority.d.ts.map +1 -0
- package/dist/RefundAuthority.js +155 -0
- package/dist/RefundAuthority.js.map +1 -0
- package/dist/RefundPaymentOperation.d.ts +2 -0
- package/dist/RefundPaymentOperation.d.ts.map +1 -1
- package/dist/RefundPaymentOperation.js +15 -0
- package/dist/RefundPaymentOperation.js.map +1 -1
- package/dist/SystemOrderOrigin.d.ts +40 -0
- package/dist/SystemOrderOrigin.d.ts.map +1 -0
- package/dist/SystemOrderOrigin.js +30 -0
- package/dist/SystemOrderOrigin.js.map +1 -0
- package/dist/index.d.ts +3 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3 -2
- package/dist/index.js.map +1 -1
- package/package.json +22 -22
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"CheckoutPublishableKey.js","sourceRoot":"","sources":["../src/CheckoutPublishableKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAqB,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AAEnG,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AA4BpG,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,GAA8B;IAC1D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAoC;IAC7E,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtF,MAAM,MAAM,GAA2B,WAAW;QAC9C,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE;QAC7C,CAAC,CAAC,SAAS;YACT,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE;YACtC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE3C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,WAAW,GACb,UAAU,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjG,IAAI,OAAO,IAAI,WAAW,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,UAAU;YACpB,CAAC,CAAC,oBAAoB,UAAU,MAAM;YACtC,CAAC,CAAC,iBAAiB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1D,MAAM,IAAI,GACN,MAAM,CAAC,MAAM,KAAK,aAAa;YAC3B,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,iBAAiB;YACpD,CAAC,CAAC,mCAAmC,CAAC;QAC9C,MAAM,CAAC,OAAO;YACV,qBAAqB,MAAM,CAAC,YAAY,IAAI,SAAS,UAAU,WAAW,aAAa,KAAK,aAAa;gBACzG,iCAAiC,IAAI,YAAY,OAAO,2CAA2C;gBACnG,2CAA2C,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,oBAAoB;gBAC7F,MAAM,WAAW,QAAQ,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAC/C,SAAsC,EACtC,UAAkB,EAClB,WAAiC;IAEjC,MAAM,SAAS,GAAG,SAAS,CAAC,oBAAoB,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,SAAS,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7G,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,4BAA4B,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAyC,CAAC;IACpE,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,QAAQ,CACJ,oCAAoC,UAAU,mCAAmC,UAAU,WAAW;YAClG,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,sBAAsB,4BAA4B,CAC/G,CAAC;QACF,OAAO,4BAA4B,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,4BAA4B,CAAC;YACxC,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,WAAW,CAAC,cAAc;YACvC,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,cAAc,EAAE,MAAM,CAAC,cAAc;SACxC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,UAAU,CAAC;gBACP,OAAO,EAAE,WAAW,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE;gBACpD,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,wBAAwB;aACrC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,QAAQ,CACJ,oCAAoC,UAAU,yCAAyC,UAAU,WAAW;YACxG,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACrG,CAAC;QACF,OAAO,4BAA4B,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,SAAS,OAAO,CAAC,cAAyC;IACtD,IAAI,CAAC,cAAc;QAAE,OAAO,kCAAkC,CAAC;IAC/D,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC;AAC5F,CAAC"}
|
|
@@ -213,13 +213,22 @@ export declare class CheckoutSessionService {
|
|
|
213
213
|
* anonymous caller. `Configuration` is admin-authored JSON with an open index signature,
|
|
214
214
|
* so a future secret-shaped key (a webhook secret, an API credential, a server-side
|
|
215
215
|
* payment provider ref) must never ride along to the browser. `stripePublishableKey`
|
|
216
|
-
* is publishable by definition and survives
|
|
216
|
+
* is publishable by definition and survives — but its VALUE is decided by
|
|
217
|
+
* `ResolveCheckoutPublishableKey` (see `clientConfiguration`), not taken from here as is.
|
|
217
218
|
*/
|
|
218
219
|
/**
|
|
219
220
|
* Keys that may cross to an unauthenticated browser. Anything else in the
|
|
220
221
|
* admin-authored Configuration JSON stays on the server (allowlist, not denylist).
|
|
221
222
|
*/
|
|
222
223
|
private static readonly PUBLIC_CONFIGURATION_KEYS;
|
|
224
|
+
/**
|
|
225
|
+
* The Configuration an anonymous browser receives: the allowlisted keys, with
|
|
226
|
+
* `stripePublishableKey` replaced by the resolved key — the payment provider's
|
|
227
|
+
* `<CredentialsRef>_PUBLISHABLE_KEY` when the server has one, else the widget's own value.
|
|
228
|
+
* Every path that hands a browser a widget Configuration goes through here, so the session API
|
|
229
|
+
* and the server-rendered host page cannot disagree about which key to load Stripe.js with.
|
|
230
|
+
*/
|
|
231
|
+
private static clientConfiguration;
|
|
223
232
|
private static sanitizeConfigurationForClient;
|
|
224
233
|
private static idsEqual;
|
|
225
234
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"CheckoutSessionService.d.ts","sourceRoot":"","sources":["../src/CheckoutSessionService.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAiG,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQ/I,OAAO,EAgBH,KAAK,2BAA2B,EAOhC,KAAK,oBAAoB,EASzB,KAAK,oBAAoB,EAC5B,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAwB,KAAK,eAAe,EAA2B,MAAM,+BAA+B,CAAC;
|
|
1
|
+
{"version":3,"file":"CheckoutSessionService.d.ts","sourceRoot":"","sources":["../src/CheckoutSessionService.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAiG,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQ/I,OAAO,EAgBH,KAAK,2BAA2B,EAOhC,KAAK,oBAAoB,EASzB,KAAK,oBAAoB,EAC5B,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAwB,KAAK,eAAe,EAA2B,MAAM,+BAA+B,CAAC;AAWpH,OAAO,EAKH,KAAK,2BAA2B,EACnC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAoB,KAAK,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAkD3F,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,qBAAqB,CAAC;CAC1C;AAED,6FAA6F;AAC7F,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oBAAoB;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAElD,MAAM,WAAW,yBAAyB;IACtC,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,kFAAkF;IAClF,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,kCAAkC;IAClC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACvC,0CAA0C;IAC1C,SAAS,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACvC;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAqBD,MAAM,WAAW,mBAAmB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,mGAAmG;IACnG,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,wEAAwE;IACxE,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,sGAAsG;IACtG,sBAAsB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,2FAA2F;IAC3F,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAClC;AAYD,6FAA6F;AAC7F,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAIlD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAmBvG;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAKnH;AAED,2FAA2F;AAC3F,MAAM,WAAW,4BAA4B;IACzC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACtC,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACrC,UAAU,EAAE,2BAA2B,GAAG,SAAS,GACpD,4BAA4B,EAAE,CAShC;AAuBD,qFAAqF;AACrF,MAAM,WAAW,yBAAyB;IACtC,yFAAyF;IACzF,SAAS,EAAE,OAAO,CAAC;IACnB,0EAA0E;IAC1E,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sGAAsG;IACtG,OAAO,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,qBAAa,sBAAsB;IAC/B;;OAEG;WACiB,iBAAiB,CACjC,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,QAAQ,GACvB,OAAO,CAAC,iBAAiB,CAAC;IAmG7B;;;;;;;;OAQG;WACiB,+BAA+B,CAC/C,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,QAAQ,GACvB,OAAO,CAAC,iBAAiB,CAAC;IAqG7B;;;;OAIG;mBACkB,eAAe;IAmBpC;;;;;;;OAOG;IACH;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CA0B9C;IAEH;;;;;;OAMG;mBACkB,mBAAmB;IAexC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IAU7C,OAAO,CAAC,MAAM,CAAC,QAAQ;IAOvB;;;;;OAKG;mBACkB,wBAAwB;IAwB7C,2EAA2E;WACvD,uBAAuB,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAmChG;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAarC;;;;OAIG;mBACkB,oBAAoB;IAczC;;OAEG;IACH;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,4BAA4B;mBAwCtB,uBAAuB;IA0H5C;;;;;OAKG;mBACkB,qBAAqB;IAqE1C,+EAA+E;IAC/E,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAQhC;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAuBlC,0FAA0F;IAC1F,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAI/B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAuBlC;;OAEG;IACH;;;;;OAKG;mBACkB,qBAAqB;IAuD1C;;;;OAIG;mBACkB,gBAAgB;mBAShB,eAAe;IAepC;;;;OAIG;mBACkB,oBAAoB;IAuEzC,4GAA4G;IAC5G,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAQjC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAWlC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,mBAAmB;IA2BlC;;;;;;;OAOG;WACiB,WAAW,CAC3B,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,iBAAiB,EAAE,EAC1B,cAAc,EAAE,2BAA2B,GAAG,IAAI,GAAG,SAAS,EAC9D,WAAW,CAAC,EAAE,QAAQ,EACtB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;QAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GACpJ,OAAO,CAAC,iBAAiB,CAAC;IA+b7B;;;;;;;;;OASG;WACiB,2BAA2B,CAC3C,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,QAAQ,EACtB,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GACzC,OAAO,CAAC,8BAA8B,CAAC;IAyK1C,+FAA+F;IAC/F,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAS/B;;;;OAIG;mBACkB,qBAAqB;IAuB1C,+FAA+F;IAC/F,OAAO,CAAC,MAAM,CAAC,aAAa;IAK5B;;;;;OAKG;mBACkB,wBAAwB;IAsE7C;;;;;OAKG;mBACkB,sBAAsB;IAqC3C,oFAAoF;mBAC/D,sBAAsB;IAe3C;;;;;;OAMG;mBACkB,yBAAyB;IA6C9C;;;OAGG;mBACkB,SAAS;IAK9B;;;;;;;;OAQG;WACiB,gBAAgB,CAChC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,WAAW,CAAC,EAAE,QAAQ,EACtB,QAAQ,CAAC,EAAE,wBAAwB,GACpC,OAAO,CAAC,sBAAsB,CAAC;IAugBlC,wFAAwF;IACxF,OAAO,CAAC,MAAM,CAAC,YAAY;IAU3B,sGAAsG;IACtG,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAKtC,OAAO,CAAC,MAAM,CAAC,YAAY;IAS3B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IAQ5B,OAAO,CAAC,MAAM,CAAC,UAAU;IAKzB;;;;;;;OAOG;IACH;;;;;OAKG;mBACkB,sBAAsB;mBA6CtB,oBAAoB;mBAkBpB,kBAAkB;IA8BvC;;;;;;;;;OASG;mBACkB,oBAAoB;IAuCzC;;;;;;;;;;;OAWG;WACiB,kCAAkC,CAClD,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,yBAAyB,CAAC;IA8BrC;;;;OAIG;WACiB,aAAa,CAC7B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,QAAQ,EACrB,gBAAgB,EAAE,MAAM,GACzB,OAAO,CAAC,yBAAyB,GAAG,MAAM,CAAC;IAgB9C;;;;;;;OAOG;mBACkB,0BAA0B;IAkL/C;;;OAGG;mBACkB,2BAA2B;mBAoB3B,aAAa;IAqBlC;;;;OAIG;mBACkB,wBAAwB;IA8B7C;;;OAGG;mBACkB,yBAAyB;IAuB9C;;;OAGG;mBACkB,2BAA2B;IA2BhD;;;OAGG;mBACkB,4BAA4B;IA0BjD;;OAEG;mBACkB,uBAAuB;CA0B/C"}
|
|
@@ -18,6 +18,7 @@ import { ExplainMissingCheckoutAttendees, LoadProductsRequiringAttendees } from
|
|
|
18
18
|
import { ResolvePersonByEmail } from './PersonByEmail.js';
|
|
19
19
|
import { OpenPaymentIntent, SUPPORTED_PAYMENT_CURRENCY } from './PaymentIntentService.js';
|
|
20
20
|
import { ResolvePaymentProvider } from './PaymentProviderResolver.js';
|
|
21
|
+
import { ResolveCheckoutPublishableKey } from './CheckoutPublishableKey.js';
|
|
21
22
|
import { FindReusableProviderCustomerRef, SnapshotSellsSubscription, SaveCheckoutInstrumentForRenewals, } from './CheckoutSavedInstrument.js';
|
|
22
23
|
import { CheckoutMemberDiscountNotConfiguredError, DEFAULT_TYPED_CODE_PRECEDENCE, IsRegisteredMemberPromotionCode, ResolveCheckoutMemberDiscountResolver, } from './CheckoutMemberDiscountResolver.js';
|
|
23
24
|
import { CapturePaymentOperation } from './CapturePaymentOperation.js';
|
|
@@ -26,6 +27,7 @@ import { raiseCheckoutCaptureTerminalAlert, raiseCheckoutSettledNotBookedAlert }
|
|
|
26
27
|
import { CheckoutStepLog } from './CheckoutStepLog.js';
|
|
27
28
|
import { isCaptureRefusalRetryable, isTerminalCapturePrecheck, } from './checkoutCaptureRetry.js';
|
|
28
29
|
import { DescribeCheckoutSnapshot, SendOrderDescriptionToGateway } from './IntentDescription.js';
|
|
30
|
+
import { SetSystemOrderOrigin } from './SystemOrderOrigin.js';
|
|
29
31
|
import { LoadRenewalPaymentOrder, PayerOwnsRenewalCustomer, RenewalPaymentAlreadyConfirmed, RenewalPaymentLinkSecret, RenewalPaymentRefusal, RenewalPaymentTokenMessage, VerifyRenewalPaymentToken, } from './CheckoutRenewalPayment.js';
|
|
30
32
|
const CHECKOUT_WIDGET_ENTITY = 'MJ_BizApps_Orders: Checkout Widgets';
|
|
31
33
|
const CHECKOUT_DISTRIBUTION_ENTITY = 'MJ_BizApps_Orders: Checkout Widget Distributions';
|
|
@@ -221,7 +223,7 @@ export class CheckoutSessionService {
|
|
|
221
223
|
WidgetID: widget.ID,
|
|
222
224
|
WidgetName: widget.Name,
|
|
223
225
|
CompanyID: widget.CompanyID,
|
|
224
|
-
Configuration: this.
|
|
226
|
+
Configuration: await this.clientConfiguration(configObj, widget.Name, contextUser),
|
|
225
227
|
CustomCSS: configObj.customUI.css || widget.CustomCSS,
|
|
226
228
|
CustomJS: configObj.customUI.js || widget.CustomJS,
|
|
227
229
|
ExpiresAt: session.ExpiresAt.toISOString()
|
|
@@ -316,7 +318,7 @@ export class CheckoutSessionService {
|
|
|
316
318
|
WidgetID: widget.ID,
|
|
317
319
|
WidgetName: widget.Name,
|
|
318
320
|
CompanyID: widget.CompanyID,
|
|
319
|
-
Configuration: this.
|
|
321
|
+
Configuration: await this.clientConfiguration(configObj, widget.Name, contextUser),
|
|
320
322
|
CustomCSS: configObj.customUI.css || widget.CustomCSS,
|
|
321
323
|
CustomJS: configObj.customUI.js || widget.CustomJS,
|
|
322
324
|
ExpiresAt: session.ExpiresAt.toISOString(),
|
|
@@ -354,7 +356,8 @@ export class CheckoutSessionService {
|
|
|
354
356
|
* anonymous caller. `Configuration` is admin-authored JSON with an open index signature,
|
|
355
357
|
* so a future secret-shaped key (a webhook secret, an API credential, a server-side
|
|
356
358
|
* payment provider ref) must never ride along to the browser. `stripePublishableKey`
|
|
357
|
-
* is publishable by definition and survives
|
|
359
|
+
* is publishable by definition and survives — but its VALUE is decided by
|
|
360
|
+
* `ResolveCheckoutPublishableKey` (see `clientConfiguration`), not taken from here as is.
|
|
358
361
|
*/
|
|
359
362
|
/**
|
|
360
363
|
* Keys that may cross to an unauthenticated browser. Anything else in the
|
|
@@ -387,6 +390,24 @@ export class CheckoutSessionService {
|
|
|
387
390
|
'questions',
|
|
388
391
|
'choiceGroups',
|
|
389
392
|
]); }
|
|
393
|
+
/**
|
|
394
|
+
* The Configuration an anonymous browser receives: the allowlisted keys, with
|
|
395
|
+
* `stripePublishableKey` replaced by the resolved key — the payment provider's
|
|
396
|
+
* `<CredentialsRef>_PUBLISHABLE_KEY` when the server has one, else the widget's own value.
|
|
397
|
+
* Every path that hands a browser a widget Configuration goes through here, so the session API
|
|
398
|
+
* and the server-rendered host page cannot disagree about which key to load Stripe.js with.
|
|
399
|
+
*/
|
|
400
|
+
static async clientConfiguration(configObj, widgetName, contextUser) {
|
|
401
|
+
const client = this.sanitizeConfigurationForClient(configObj);
|
|
402
|
+
const publishable = await ResolveCheckoutPublishableKey(configObj, widgetName, contextUser);
|
|
403
|
+
if (publishable.Key) {
|
|
404
|
+
client.stripePublishableKey = publishable.Key;
|
|
405
|
+
}
|
|
406
|
+
else {
|
|
407
|
+
delete client.stripePublishableKey;
|
|
408
|
+
}
|
|
409
|
+
return client;
|
|
410
|
+
}
|
|
390
411
|
static sanitizeConfigurationForClient(configObj) {
|
|
391
412
|
const sanitized = {};
|
|
392
413
|
for (const [key, value] of Object.entries(configObj)) {
|
|
@@ -1078,7 +1099,7 @@ export class CheckoutSessionService {
|
|
|
1078
1099
|
order.NewRecord();
|
|
1079
1100
|
order.CompanyID = widget.CompanyID;
|
|
1080
1101
|
order.Status = 'Draft';
|
|
1081
|
-
order
|
|
1102
|
+
SetSystemOrderOrigin(order, 'Widget');
|
|
1082
1103
|
order.SourceCheckoutWidgetID = widget.ID;
|
|
1083
1104
|
// Defence-in-depth: the server pre-warms this engine at startup (@RegisterForStartup),
|
|
1084
1105
|
// but that pre-warm only reaches modules already evaluated when Startup() runs, which
|
|
@@ -1899,7 +1920,7 @@ export class CheckoutSessionService {
|
|
|
1899
1920
|
order.CompanyID = widget.CompanyID;
|
|
1900
1921
|
order.BillToPersonID = session.PersonID ?? null;
|
|
1901
1922
|
order.ShipToPersonID = session.PersonID ?? null;
|
|
1902
|
-
order
|
|
1923
|
+
SetSystemOrderOrigin(order, 'Widget');
|
|
1903
1924
|
order.OrderType = 'Sale';
|
|
1904
1925
|
order.SourceCheckoutWidgetID = widget.ID;
|
|
1905
1926
|
// VAT location evidence beside the billing address (#480). Null when the edge has no
|