@mj-biz-apps/orders-server 5.1.0 → 5.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -0
- package/dist/CheckoutServerExtension.d.ts +96 -0
- package/dist/CheckoutServerExtension.d.ts.map +1 -0
- package/dist/CheckoutServerExtension.js +554 -0
- package/dist/CheckoutServerExtension.js.map +1 -0
- package/dist/__tests__/CheckoutServerExtension.test.d.ts +2 -0
- package/dist/__tests__/CheckoutServerExtension.test.d.ts.map +1 -0
- package/dist/__tests__/CheckoutServerExtension.test.js +257 -0
- package/dist/__tests__/CheckoutServerExtension.test.js.map +1 -0
- package/dist/__tests__/checkout-edge-policy.test.d.ts +2 -0
- package/dist/__tests__/checkout-edge-policy.test.d.ts.map +1 -0
- package/dist/__tests__/checkout-edge-policy.test.js +70 -0
- package/dist/__tests__/checkout-edge-policy.test.js.map +1 -0
- package/dist/__tests__/checkout-host-page.test.d.ts +2 -0
- package/dist/__tests__/checkout-host-page.test.d.ts.map +1 -0
- package/dist/__tests__/checkout-host-page.test.js +86 -0
- package/dist/__tests__/checkout-host-page.test.js.map +1 -0
- package/dist/__tests__/server-extensions-manifest.test.d.ts +2 -0
- package/dist/__tests__/server-extensions-manifest.test.d.ts.map +1 -0
- package/dist/__tests__/server-extensions-manifest.test.js +29 -0
- package/dist/__tests__/server-extensions-manifest.test.js.map +1 -0
- package/dist/checkout-edge-policy.d.ts +44 -0
- package/dist/checkout-edge-policy.d.ts.map +1 -0
- package/dist/checkout-edge-policy.js +84 -0
- package/dist/checkout-edge-policy.js.map +1 -0
- package/dist/checkout-host-page.d.ts +43 -0
- package/dist/checkout-host-page.d.ts.map +1 -0
- package/dist/checkout-host-page.js +445 -0
- package/dist/checkout-host-page.js.map +1 -0
- package/dist/generated/generated.d.ts +189 -173
- package/dist/generated/generated.d.ts.map +1 -1
- package/dist/generated/generated.js +1152 -1947
- package/dist/generated/generated.js.map +1 -1
- package/dist/index.d.ts +2 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +13 -1
- package/dist/index.js.map +1 -1
- package/dist/server-extensions-manifest.d.ts +14 -0
- package/dist/server-extensions-manifest.d.ts.map +1 -0
- package/dist/server-extensions-manifest.js +15 -0
- package/dist/server-extensions-manifest.js.map +1 -0
- package/package.json +30 -13
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"CheckoutServerExtension.js","sourceRoot":"","sources":["../src/CheckoutServerExtension.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,UAAU,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAY,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACH,mBAAmB,GAItB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAA0B,MAAM,0CAA0C,CAAC;AAEtH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,aAAa,IAAI,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACnH,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAE3H,iFAAiF;AACjF,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,6EAA6E;AAC7E,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,kFAAkF;AAClF,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEvD,uFAAuF;AACvF,SAAS,yBAAyB;IAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAChE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACL,4BAA4B;IAChC,CAAC;IACD,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC,CAAC;QAC3E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACL,kBAAkB;IACtB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACxC,OAAO,GAAG,CAAC;QACf,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,uEAAuE;AACvE,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,MAAM,uBAAuB,GAAG,sCAAsC,CAAC;AACvE,MAAM,4BAA4B,GAAG,kDAAkD,CAAC;AACxF,MAAM,sBAAsB,GAAG,qCAAqC,CAAC;AAErE,MAAM,oBAAoB,GAAG,2DAA2D,CAAC;AA8BzF,0FAA0F;AAC1F,MAAM,UAAU,mCAAmC,CAC/C,QAA6D,EAC7D,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,QAAQ,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,QAAQ,CAAC,qBAAqB,KAAK,KAAK,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AAClD,CAAC;AAQM,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,mBAAmB;IAAzD;;QACK,aAAQ,GAAyB,EAAE,CAAC;QACpC,gBAAW,GAAG,IAAI,GAAG,EAAkD,CAAC;QACxE,6BAAwB,GAAG,KAAK,CAAC;QACjC,aAAQ,GAAG,WAAW,CAAC;QACvB,eAAU,GAAG,CAAC,CAAC;IAic3B,CAAC;IA/bU,KAAK,CAAC,UAAU,CAAC,GAAgB,EAAE,MAA6B;QACnE,IAAI,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAyB,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC;QAChE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;QAC/C,IAAI,UAAU,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,kBAAkB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBAC7C,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;YACH,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,sBAAsB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;oBACjD,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;gBAChF,CAAC,CAAC,CAAC;YACP,CAAC;YACD,SAAS,CAAC,iDAAiD,UAAU,WAAW,IAAI,kBAAkB,CAAC,CAAC;QAC5G,CAAC;QAED,MAAM,MAAM,GAAoE;YAC5E,CAAC,GAAG,IAAI,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5E,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;SACpE,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;YACnC,iFAAiF;YACjF,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC3B,KAAK,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,KAAmB,EAAE,EAAE;gBACtE,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,IAAI,QAAQ,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAEjF,SAAS,CAAC,4CAA4C,QAAQ,aAAa,IAAI,6CAA6C,CAAC,CAAC;QAC9H,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,iHAAiH;YAC1H,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,QAAQ,EAAE,CAAC;SACnF,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,QAAQ;QACjB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,WAAW;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,OAAO,IAAI;YACP,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE;YAC/C,CAAC,CAAC;gBACI,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,EAAE,MAAM,EAAE,wGAAwG,EAAE;aAChI,CAAC;IACZ,CAAC;IAED,6EAA6E;IAE7E,+FAA+F;IACvF,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,OAAuD;QAC1G,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;YAC9E,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC1F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,sDAAsD,EAAE,CAAC,CAAC;gBAC/G,OAAO;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClB,0EAA0E;gBAC1E,6DAA6D;gBAC7D,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxB,OAAO;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC1C,OAAO,CAAC,oCAAoC;YAChD,CAAC;YAED,IAAI,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBACzD,IAAI,gBAAgB,EAAE,CAAC;oBACnB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CAAC;oBAC3C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;oBACnE,OAAO;gBACX,CAAC;YACL,CAAC;YAED,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,2CAA2C,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACnG,CAAC;QACL,CAAC;IACL,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,eAAe,CAAC,GAAY,EAAE,GAAa;QACrD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,IAAI,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC1B,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1B,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,iBAAiB,CAAC,GAAY;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC;QAEzB,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3F,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAA2C;gBACvE,UAAU,EAAE,4BAA4B;gBACxC,MAAM,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC;gBAClC,WAAW,EAAE,WAAW,UAAU,CAAC,IAAI,CAAC,yBAAyB;gBACjE,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,CAAC;YACT,QAAQ,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,CAAC;aAAM,IAAI,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAA2C;gBACvE,UAAU,EAAE,uBAAuB;gBACnC,MAAM,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC;gBAClC,WAAW,EAAE,SAAS,UAAU,CAAC,SAAS,CAAC,GAAG;gBAC9C,UAAU,EAAE,QAAQ;aACvB,EAAE,IAAI,CAAC,CAAC;YACT,QAAQ,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAA+C;YAC7E,UAAU,EAAE,sBAAsB;YAClC,MAAM,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC;YAC/B,WAAW,EAAE,SAAS,UAAU,CAAC,QAAQ,CAAC,GAAG;YAC7C,UAAU,EAAE,QAAQ;SACvB,EAAE,IAAI,CAAC,CAAC;QACT,MAAM,SAAS,GAAG,SAAS,EAAE,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9G,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAgC,CAAC;YACpE,OAAO;gBACH,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC1I,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,KAAK,IAAI;aACrD,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAED,gFAAgF;IACxE,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,MAAwB;QACzE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,mFAAmF;YACnF,2CAA2C;YAC3C,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,kDAAkD,EAAE,CAAC,CAAC;YAC3G,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,aAAa,CAAC,MAAc,EAAE,MAAwB,EAAE,GAAY;QACxE,OAAO,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChH,CAAC;IAEO,cAAc,CAAC,GAAa,EAAE,MAAc;QAChD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChC,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC9D,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,mFAAmF;IAC3E,oBAAoB,CAAC,GAAY;QACrC,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,eAAe,CAAC,GAAY;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,QAAQ,CAAC,6GAA6G,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,kBAAkB,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC5K,OAAO,CAAC,GAAG,EAAE,sEAAsE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9F,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;aAC1B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAA0B,CAAC;YAClE,OAAO,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,4DAA4D,GAAG,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,EAAE,mEAAmE,CAAC,CAAC;QACtF,CAAC;IACL,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACK,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa;QACnD,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,kCAAkC,CAAC,CAAC;gBACjE,OAAO;YACX,CAAC;YACD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;YAC9E,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC9F,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sDAAsD,CAAC,CAAC;gBACrF,OAAO;YACX,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,mDAAmD,CAAC,CAAC;gBAClF,OAAO;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,iCAAiC,CAAC,CAAC;gBAChE,OAAO;YACX,CAAC;YACD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,GAAG;iBACE,MAAM,CAAC,GAAG,CAAC;iBACX,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC;iBACrD,IAAI,CAAC,sBAAsB,CAAC;gBACzB,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,kBAAkB,CAAC,CAAC,CAAC,SAAS;aAC3F,CAAC,CAAC,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnB,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sCAAsC,CAAC,CAAC;YACzE,CAAC;QACL,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAAa,EAAE,MAAc,EAAE,OAAe;QAChE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1C,GAAG;aACE,MAAM,CAAC,MAAM,CAAC;aACd,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC;aACrD,IAAI,CAAC,2BAA2B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAEO,wBAAwB,CAAC,GAAa,EAAE,KAAa;QACzD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACL,CAAC;IAEO,wBAAwB,CAAC,IAAc;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACtB,KAAK,sBAAsB,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC7E,QAAQ,CAAC,6CAA6C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,WAAW,CAAC,GAAY;QAC5B,IAAI,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,IAAY,EAAE,IAAc;QAC/D,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAiB;YAC7C,UAAU,EAAE,4BAA4B;YACxC,MAAM,EAAE,CAAC,IAAI,CAAC;YACd,WAAW,EAAE,WAAW,UAAU,CAAC,IAAI,CAAC,yBAAyB;YACjE,UAAU,EAAE,QAAQ;SACvB,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,gBAAgB,CAAC,GAAY,EAAE,GAAa;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACxH,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC5F,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAa;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACxH,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,KAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACzG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,GAAY,EAAE,GAAa;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACxH,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,2BAA2B,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3G,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAY,EAAE,GAAa;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC,CAAC;YACxH,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAChG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,4EAA4E;IAE5E,kEAAkE;IAC1D,iBAAiB,CAAC,SAAiB,EAAE,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,2BAA2B;QACjH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,sBAAsB,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBACpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACvB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,KAAK,GAAG,YAAY,CAAC;IACtC,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,GAAY;QACzB,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACK,iBAAiB;QACrB,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACnE,IAAI,KAAK,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;gBAC7F,IAAI,KAAK,EAAE,CAAC;oBACR,OAAO,KAAK,CAAC;gBACjB,CAAC;gBACD,QAAQ,CAAC,qDAAqD,KAAK,iEAAiE,CAAC,CAAC;YAC1I,CAAC;iBAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBACxC,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;gBACrC,SAAS,CAAC,sJAAsJ,CAAC,CAAC;YACtK,CAAC;YACD,OAAO,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,SAAS,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;CACJ,CAAA;AAtcY,uBAAuB;IADnC,aAAa,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;GAC5C,uBAAuB,CAscnC;;AAED,0FAA0F;AAC1F,MAAM,UAAU,2BAA2B;IACvC,sBAAsB;AAC1B,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"CheckoutServerExtension.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/CheckoutServerExtension.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,257 @@
|
|
|
1
|
+
import { beforeEach, describe, expect, it, vi } from 'vitest';
|
|
2
|
+
const mockRunView = vi.fn();
|
|
3
|
+
const mockGetSystemUser = vi.fn();
|
|
4
|
+
vi.mock('@memberjunction/core', () => ({
|
|
5
|
+
LogError: vi.fn(),
|
|
6
|
+
LogStatus: vi.fn(),
|
|
7
|
+
RunView: class {
|
|
8
|
+
constructor() {
|
|
9
|
+
this.RunView = mockRunView;
|
|
10
|
+
}
|
|
11
|
+
},
|
|
12
|
+
}));
|
|
13
|
+
vi.mock('@memberjunction/generic-database-provider', () => ({
|
|
14
|
+
UserCache: {
|
|
15
|
+
Instance: {
|
|
16
|
+
Users: [],
|
|
17
|
+
GetSystemUser: () => mockGetSystemUser(),
|
|
18
|
+
},
|
|
19
|
+
},
|
|
20
|
+
}));
|
|
21
|
+
vi.mock('@memberjunction/global', () => ({
|
|
22
|
+
RegisterClass: () => (cls) => cls,
|
|
23
|
+
}));
|
|
24
|
+
vi.mock('@mj-biz-apps/orders-core-entities-server', () => ({
|
|
25
|
+
CheckoutSessionService: {
|
|
26
|
+
InitializeSession: vi.fn(),
|
|
27
|
+
UpdateDraft: vi.fn(),
|
|
28
|
+
OpenPaymentIntentForSession: vi.fn(),
|
|
29
|
+
CompleteCheckout: vi.fn(),
|
|
30
|
+
ReapExpiredOpenSessions: vi.fn().mockResolvedValue(0),
|
|
31
|
+
},
|
|
32
|
+
EscapeText: (value) => value.replace(/'/g, "''"),
|
|
33
|
+
}));
|
|
34
|
+
import { CheckoutSessionService } from '@mj-biz-apps/orders-core-entities-server';
|
|
35
|
+
import { CheckoutServerExtension, shouldServeCheckoutElementSourceMap } from '../CheckoutServerExtension.js';
|
|
36
|
+
function mockApp() {
|
|
37
|
+
const routes = { get: {}, post: {}, options: {} };
|
|
38
|
+
const app = {
|
|
39
|
+
get: vi.fn((path, handler) => {
|
|
40
|
+
routes.get[path] = handler;
|
|
41
|
+
}),
|
|
42
|
+
post: vi.fn((path, ...handlers) => {
|
|
43
|
+
routes.post[path] = handlers;
|
|
44
|
+
}),
|
|
45
|
+
options: vi.fn((path, handler) => {
|
|
46
|
+
routes.options[path] = handler;
|
|
47
|
+
}),
|
|
48
|
+
};
|
|
49
|
+
return { app, routes };
|
|
50
|
+
}
|
|
51
|
+
function mockRes() {
|
|
52
|
+
const res = {
|
|
53
|
+
statusCode: 200,
|
|
54
|
+
body: '',
|
|
55
|
+
headers: {},
|
|
56
|
+
headersSent: false,
|
|
57
|
+
status(code) {
|
|
58
|
+
this.statusCode = code;
|
|
59
|
+
return this;
|
|
60
|
+
},
|
|
61
|
+
setHeader(name, value) {
|
|
62
|
+
this.headers[name.toLowerCase()] = value;
|
|
63
|
+
return this;
|
|
64
|
+
},
|
|
65
|
+
send(body) {
|
|
66
|
+
this.body = body;
|
|
67
|
+
this.headersSent = true;
|
|
68
|
+
return this;
|
|
69
|
+
},
|
|
70
|
+
json(body) {
|
|
71
|
+
this.body = JSON.stringify(body);
|
|
72
|
+
this.headersSent = true;
|
|
73
|
+
return this;
|
|
74
|
+
},
|
|
75
|
+
end() {
|
|
76
|
+
this.headersSent = true;
|
|
77
|
+
return this;
|
|
78
|
+
},
|
|
79
|
+
};
|
|
80
|
+
return res;
|
|
81
|
+
}
|
|
82
|
+
describe('shouldServeCheckoutElementSourceMap', () => {
|
|
83
|
+
it('defaults off — the public payment route must not publish TypeScript', () => {
|
|
84
|
+
expect(shouldServeCheckoutElementSourceMap({}, {})).toBe(false);
|
|
85
|
+
expect(shouldServeCheckoutElementSourceMap({}, { NODE_ENV: 'development' })).toBe(false);
|
|
86
|
+
expect(shouldServeCheckoutElementSourceMap({}, { NODE_ENV: 'production' })).toBe(false);
|
|
87
|
+
});
|
|
88
|
+
it('opts in via Settings or CHECKOUT_ELEMENT_SOURCEMAP=1', () => {
|
|
89
|
+
expect(shouldServeCheckoutElementSourceMap({ ServeElementSourceMap: true }, {})).toBe(true);
|
|
90
|
+
expect(shouldServeCheckoutElementSourceMap({}, { CHECKOUT_ELEMENT_SOURCEMAP: '1' })).toBe(true);
|
|
91
|
+
expect(shouldServeCheckoutElementSourceMap({ ServeElementSourceMap: false }, { CHECKOUT_ELEMENT_SOURCEMAP: '1' })).toBe(false);
|
|
92
|
+
});
|
|
93
|
+
});
|
|
94
|
+
describe('CheckoutServerExtension', () => {
|
|
95
|
+
beforeEach(() => {
|
|
96
|
+
vi.clearAllMocks();
|
|
97
|
+
mockGetSystemUser.mockReturnValue({ ID: 'sys', Email: 'system@local' });
|
|
98
|
+
mockRunView.mockResolvedValue({ Success: true, Results: [{ ID: 'dist-1', CheckoutWidgetID: 'widget-1' }] });
|
|
99
|
+
});
|
|
100
|
+
it('registers POST verbs plus GET /:slug and reports both in RegisteredRoutes', async () => {
|
|
101
|
+
const { app, routes } = mockApp();
|
|
102
|
+
const ext = new CheckoutServerExtension();
|
|
103
|
+
const result = await ext.Initialize(app, {
|
|
104
|
+
Enabled: true,
|
|
105
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
106
|
+
RootPath: '/checkout',
|
|
107
|
+
Settings: {},
|
|
108
|
+
});
|
|
109
|
+
expect(result.Success).toBe(true);
|
|
110
|
+
expect(Object.keys(routes.post).sort()).toEqual([
|
|
111
|
+
'/checkout/complete',
|
|
112
|
+
'/checkout/draft',
|
|
113
|
+
'/checkout/initialize',
|
|
114
|
+
'/checkout/payment-intent',
|
|
115
|
+
]);
|
|
116
|
+
expect(Object.keys(routes.get).sort()).toEqual(['/checkout/:slug', '/checkout/element/main.js'].sort());
|
|
117
|
+
expect(routes.get['/checkout/element/main.js.map']).toBeUndefined();
|
|
118
|
+
expect(result.RegisteredRoutes).toEqual([
|
|
119
|
+
'POST /checkout/initialize',
|
|
120
|
+
'POST /checkout/draft',
|
|
121
|
+
'POST /checkout/payment-intent',
|
|
122
|
+
'POST /checkout/complete',
|
|
123
|
+
'GET /checkout/:slug',
|
|
124
|
+
]);
|
|
125
|
+
});
|
|
126
|
+
it('GET 404s reserved slugs without looking up a distribution', async () => {
|
|
127
|
+
const { app, routes } = mockApp();
|
|
128
|
+
await new CheckoutServerExtension().Initialize(app, {
|
|
129
|
+
Enabled: true,
|
|
130
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
131
|
+
RootPath: '/checkout',
|
|
132
|
+
Settings: {},
|
|
133
|
+
});
|
|
134
|
+
const res = mockRes();
|
|
135
|
+
await routes.get['/checkout/:slug']({ params: { slug: 'initialize' }, headers: {}, socket: {} }, res);
|
|
136
|
+
expect(res.statusCode).toBe(404);
|
|
137
|
+
expect(res.body).toContain('not valid');
|
|
138
|
+
expect(mockRunView).not.toHaveBeenCalled();
|
|
139
|
+
});
|
|
140
|
+
it('GET 404s an unknown slug', async () => {
|
|
141
|
+
mockRunView.mockResolvedValueOnce({ Success: true, Results: [] });
|
|
142
|
+
const { app, routes } = mockApp();
|
|
143
|
+
await new CheckoutServerExtension().Initialize(app, {
|
|
144
|
+
Enabled: true,
|
|
145
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
146
|
+
RootPath: '/checkout',
|
|
147
|
+
Settings: {},
|
|
148
|
+
});
|
|
149
|
+
const res = mockRes();
|
|
150
|
+
await routes.get['/checkout/:slug']({ params: { slug: 'missing-event' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } }, res);
|
|
151
|
+
expect(res.statusCode).toBe(404);
|
|
152
|
+
expect(res.body).toContain('not available');
|
|
153
|
+
expect(mockRunView).toHaveBeenCalled();
|
|
154
|
+
});
|
|
155
|
+
it('GET 503s when no acting user resolves', async () => {
|
|
156
|
+
mockGetSystemUser.mockReturnValue(undefined);
|
|
157
|
+
const { app, routes } = mockApp();
|
|
158
|
+
await new CheckoutServerExtension().Initialize(app, {
|
|
159
|
+
Enabled: true,
|
|
160
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
161
|
+
RootPath: '/checkout',
|
|
162
|
+
Settings: {},
|
|
163
|
+
});
|
|
164
|
+
const res = mockRes();
|
|
165
|
+
await routes.get['/checkout/:slug']({ params: { slug: 'summit-2027' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } }, res);
|
|
166
|
+
expect(res.statusCode).toBe(503);
|
|
167
|
+
expect(mockRunView).not.toHaveBeenCalled();
|
|
168
|
+
});
|
|
169
|
+
it('GET 200s an Active distribution with escaped slug and no-store HTML', async () => {
|
|
170
|
+
const { app, routes } = mockApp();
|
|
171
|
+
await new CheckoutServerExtension().Initialize(app, {
|
|
172
|
+
Enabled: true,
|
|
173
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
174
|
+
RootPath: '/checkout/',
|
|
175
|
+
Settings: {},
|
|
176
|
+
});
|
|
177
|
+
const res = mockRes();
|
|
178
|
+
await routes.get['/checkout/:slug']({ params: { slug: 'summit-2027' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } }, res);
|
|
179
|
+
expect(res.statusCode).toBe(200);
|
|
180
|
+
expect(res.headers['content-type']).toBe('text/html; charset=utf-8');
|
|
181
|
+
expect(res.headers['cache-control']).toBe('no-store');
|
|
182
|
+
expect(res.headers['x-frame-options']).toBe('DENY');
|
|
183
|
+
expect(res.headers['referrer-policy']).toBe('no-referrer');
|
|
184
|
+
expect(res.headers['content-security-policy']).toContain("frame-ancestors 'none'");
|
|
185
|
+
expect(res.headers['content-security-policy']).toContain("default-src 'none'");
|
|
186
|
+
expect(res.body).toContain('slug="summit-2027"');
|
|
187
|
+
expect(res.body).toContain('api-root="/checkout"');
|
|
188
|
+
expect(res.body).toContain('src="/checkout/element/main.js"');
|
|
189
|
+
const filter = mockRunView.mock.calls[0][0].ExtraFilter;
|
|
190
|
+
expect(filter).toContain("Slug = 'summit-2027'");
|
|
191
|
+
expect(filter).toContain("Status = 'Active'");
|
|
192
|
+
expect(CheckoutSessionService.ReapExpiredOpenSessions).toHaveBeenCalledTimes(1);
|
|
193
|
+
});
|
|
194
|
+
it('does not re-reap within the interval, then reaps again after it elapses', async () => {
|
|
195
|
+
vi.useFakeTimers();
|
|
196
|
+
try {
|
|
197
|
+
vi.setSystemTime(new Date('2026-08-26T12:00:00Z'));
|
|
198
|
+
const { app, routes } = mockApp();
|
|
199
|
+
await new CheckoutServerExtension().Initialize(app, {
|
|
200
|
+
Enabled: true,
|
|
201
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
202
|
+
RootPath: '/checkout',
|
|
203
|
+
Settings: {},
|
|
204
|
+
});
|
|
205
|
+
const req = { params: { slug: 'summit-2027' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } };
|
|
206
|
+
await routes.get['/checkout/:slug'](req, mockRes());
|
|
207
|
+
await routes.get['/checkout/:slug'](req, mockRes());
|
|
208
|
+
expect(CheckoutSessionService.ReapExpiredOpenSessions).toHaveBeenCalledTimes(1);
|
|
209
|
+
vi.setSystemTime(new Date('2026-08-26T12:01:01Z'));
|
|
210
|
+
await routes.get['/checkout/:slug'](req, mockRes());
|
|
211
|
+
expect(CheckoutSessionService.ReapExpiredOpenSessions).toHaveBeenCalledTimes(2);
|
|
212
|
+
}
|
|
213
|
+
finally {
|
|
214
|
+
vi.useRealTimers();
|
|
215
|
+
}
|
|
216
|
+
});
|
|
217
|
+
it('escapes a hostile slug in the GET ExtraFilter', async () => {
|
|
218
|
+
const { app, routes } = mockApp();
|
|
219
|
+
await new CheckoutServerExtension().Initialize(app, {
|
|
220
|
+
Enabled: true,
|
|
221
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
222
|
+
RootPath: '/checkout',
|
|
223
|
+
Settings: {},
|
|
224
|
+
});
|
|
225
|
+
const res = mockRes();
|
|
226
|
+
// Passes the URL-safe pattern but still contains a quote if we ever loosen it —
|
|
227
|
+
// use a valid slug here and assert EscapeText is applied via the apostrophe case
|
|
228
|
+
// by calling with a slug that includes underscore/dot only; SQL quoting is
|
|
229
|
+
// covered by EscapeText unit tests. This asserts the filter is parameterized
|
|
230
|
+
// through EscapeText for the accepted slug.
|
|
231
|
+
await routes.get['/checkout/:slug']({ params: { slug: 'summit_2027' }, headers: {}, socket: { remoteAddress: '127.0.0.1' } }, res);
|
|
232
|
+
expect(mockRunView.mock.calls[0][0].ExtraFilter).toContain("Slug = 'summit_2027'");
|
|
233
|
+
});
|
|
234
|
+
it('does not key rate limits on a spoofed leftmost X-Forwarded-For (default TrustedProxyHops=0)', async () => {
|
|
235
|
+
const { app, routes } = mockApp();
|
|
236
|
+
const ext = new CheckoutServerExtension();
|
|
237
|
+
await ext.Initialize(app, {
|
|
238
|
+
Enabled: true,
|
|
239
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
240
|
+
RootPath: '/checkout',
|
|
241
|
+
Settings: { RateLimitMax: 2, RateLimitMaxGlobal: 2, RateLimitWindowMs: 60_000 },
|
|
242
|
+
});
|
|
243
|
+
const hit = async (xff) => {
|
|
244
|
+
const res = mockRes();
|
|
245
|
+
await routes.get['/checkout/:slug']({
|
|
246
|
+
params: { slug: 'summit-2027' },
|
|
247
|
+
headers: { 'x-forwarded-for': xff },
|
|
248
|
+
socket: { remoteAddress: '10.0.0.9' },
|
|
249
|
+
}, res);
|
|
250
|
+
return res.statusCode;
|
|
251
|
+
};
|
|
252
|
+
expect(await hit('1.1.1.1')).toBe(200);
|
|
253
|
+
expect(await hit('2.2.2.2')).toBe(200);
|
|
254
|
+
expect(await hit('3.3.3.3')).toBe(429);
|
|
255
|
+
});
|
|
256
|
+
});
|
|
257
|
+
//# sourceMappingURL=CheckoutServerExtension.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"CheckoutServerExtension.test.js","sourceRoot":"","sources":["../../src/__tests__/CheckoutServerExtension.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9D,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC5B,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAElC,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;IACjB,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;IAClB,OAAO,EAAE;QAAA;YACL,YAAO,GAAG,WAAW,CAAC;QAC1B,CAAC;KAAA;CACJ,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE;QACP,QAAQ,EAAE;YACN,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE;SAC3C;KACJ;CACJ,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG;CAC7C,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,0CAA0C,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,sBAAsB,EAAE;QACpB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE;QACpC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;QACzB,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;KACxD;IACD,UAAU,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;CAC3D,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAQ7G,SAAS,OAAO;IACZ,MAAM,MAAM,GAAa,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG;QACR,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,OAA8C,EAAE,EAAE;YACxE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QAC/B,CAAC,CAAC;QACF,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,GAAG,QAAmB,EAAE,EAAE;YACjD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QACjC,CAAC,CAAC;QACF,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE;YAC9C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QACnC,CAAC,CAAC;KACqB,CAAC;IAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO;IACZ,MAAM,GAAG,GAAG;QACR,UAAU,EAAE,GAAG;QACf,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAA4B;QACrC,WAAW,EAAE,KAAK;QAClB,MAAM,CAAC,IAAY;YACf,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,SAAS,CAAC,IAAY,EAAE,KAAa;YACjC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;YACzC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAY;YACb,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,IAAa;YACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,GAAG;YACC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;IACF,OAAO,GAAG,CAAC;AACf,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,mCAAmC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5F,MAAM,CAAC,mCAAmC,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChG,MAAM,CAAC,mCAAmC,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE,EAAE,EAAE,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnI,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,iBAAiB,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACxE,WAAW,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE;YACrC,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YAC5C,oBAAoB;YACpB,iBAAiB;YACjB,sBAAsB;YACtB,0BAA0B;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC;YACpC,2BAA2B;YAC3B,sBAAsB;YACtB,+BAA+B;YAC/B,yBAAyB;YACzB,qBAAqB;SACxB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAwB,EACjF,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACtC,WAAW,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,EAChH,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACnD,iBAAiB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,EAC9G,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,EAC9G,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACnF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAqB,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC9C,MAAM,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACrF,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACnD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;gBAChD,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,oBAAoB;gBACjC,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,EAAE;aACf,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,CAAC;YAC3H,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,OAAO,EAAyB,CAAC,CAAC;YAC3E,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,OAAO,EAAyB,CAAC,CAAC;YAC3E,MAAM,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAChF,EAAE,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACnD,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,EAAE,OAAO,EAAyB,CAAC,CAAC;YAC3E,MAAM,CAAC,sBAAsB,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC;gBAAS,CAAC;YACP,EAAE,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE;YAChD,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,gFAAgF;QAChF,iFAAiF;QACjF,2EAA2E;QAC3E,6EAA6E;QAC7E,4CAA4C;QAC5C,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAwB,EAC9G,GAA0B,CAC7B,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,oBAAoB;YACjC,QAAQ,EAAE,WAAW;YACrB,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE;SAClF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAC/B;gBACI,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;gBAC/B,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE;gBACnC,MAAM,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;aAClB,EACvB,GAA0B,CAC7B,CAAC;YACF,OAAO,GAAG,CAAC,UAAU,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkout-edge-policy.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/checkout-edge-policy.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,70 @@
|
|
|
1
|
+
import { describe, expect, it } from 'vitest';
|
|
2
|
+
import { CHECKOUT_RESERVED_SLUGS, isSameOrigin, isValidCheckoutSlug, originAllowed, resolveClientIp, } from '../checkout-edge-policy.js';
|
|
3
|
+
describe('isValidCheckoutSlug', () => {
|
|
4
|
+
it('accepts typical vanity slugs', () => {
|
|
5
|
+
expect(isValidCheckoutSlug('summit-2027')).toBe(true);
|
|
6
|
+
expect(isValidCheckoutSlug('A')).toBe(true);
|
|
7
|
+
expect(isValidCheckoutSlug('event_1.2')).toBe(true);
|
|
8
|
+
});
|
|
9
|
+
it('rejects empty, too long, unsafe, and reserved POST verbs', () => {
|
|
10
|
+
expect(isValidCheckoutSlug('')).toBe(false);
|
|
11
|
+
expect(isValidCheckoutSlug('initialize')).toBe(false);
|
|
12
|
+
expect(isValidCheckoutSlug('Draft')).toBe(false);
|
|
13
|
+
expect(isValidCheckoutSlug('payment-intent')).toBe(false);
|
|
14
|
+
expect(isValidCheckoutSlug('complete')).toBe(false);
|
|
15
|
+
expect(isValidCheckoutSlug('../etc')).toBe(false);
|
|
16
|
+
expect(isValidCheckoutSlug('has space')).toBe(false);
|
|
17
|
+
expect(isValidCheckoutSlug('<script>')).toBe(false);
|
|
18
|
+
expect(isValidCheckoutSlug('a'.repeat(129))).toBe(false);
|
|
19
|
+
});
|
|
20
|
+
it('reserved set covers every POST suffix on the edge', () => {
|
|
21
|
+
expect([...CHECKOUT_RESERVED_SLUGS].sort()).toEqual(['complete', 'draft', 'initialize', 'payment-intent'].sort());
|
|
22
|
+
});
|
|
23
|
+
});
|
|
24
|
+
describe('isSameOrigin', () => {
|
|
25
|
+
it('matches scheme-less Host against Origin host:port', () => {
|
|
26
|
+
expect(isSameOrigin('http://localhost:4103', 'localhost:4103')).toBe(true);
|
|
27
|
+
expect(isSameOrigin('https://api.example.com', 'api.example.com')).toBe(true);
|
|
28
|
+
});
|
|
29
|
+
it('rejects missing values, bad URLs, and different hosts', () => {
|
|
30
|
+
expect(isSameOrigin('', 'localhost:4103')).toBe(false);
|
|
31
|
+
expect(isSameOrigin('http://localhost:4103', undefined)).toBe(false);
|
|
32
|
+
expect(isSameOrigin('not-a-url', 'localhost:4103')).toBe(false);
|
|
33
|
+
expect(isSameOrigin('http://localhost:4103', 'localhost:4303')).toBe(false);
|
|
34
|
+
expect(isSameOrigin('https://evil.example', 'api.example.com')).toBe(false);
|
|
35
|
+
});
|
|
36
|
+
});
|
|
37
|
+
describe('originAllowed', () => {
|
|
38
|
+
it('allows same-origin even when the widget allowlist names another site', () => {
|
|
39
|
+
expect(originAllowed('http://localhost:4103', { allowedOrigins: ['https://events.example.com'] }, 'localhost:4103')).toBe(true);
|
|
40
|
+
});
|
|
41
|
+
it('allows any origin when the allowlist is absent or empty', () => {
|
|
42
|
+
expect(originAllowed('https://anywhere.example', {}, 'api.example.com')).toBe(true);
|
|
43
|
+
expect(originAllowed('https://anywhere.example', { allowedOrigins: [] }, 'api.example.com')).toBe(true);
|
|
44
|
+
});
|
|
45
|
+
it('enforces the allowlist for cross-origin embeds (trailing slash insensitive)', () => {
|
|
46
|
+
const policy = { allowedOrigins: ['https://events.example.com/'] };
|
|
47
|
+
expect(originAllowed('https://events.example.com', policy, 'api.example.com')).toBe(true);
|
|
48
|
+
expect(originAllowed('https://other.example.com', policy, 'api.example.com')).toBe(false);
|
|
49
|
+
});
|
|
50
|
+
});
|
|
51
|
+
describe('resolveClientIp', () => {
|
|
52
|
+
const req = (xff, socket = '10.0.0.9') => ({
|
|
53
|
+
headers: { 'x-forwarded-for': xff },
|
|
54
|
+
socket: { remoteAddress: socket },
|
|
55
|
+
});
|
|
56
|
+
it('ignores X-Forwarded-For when no proxy hops are declared (default)', () => {
|
|
57
|
+
expect(resolveClientIp(req('1.2.3.4, 10.0.0.1'))).toBe('10.0.0.9');
|
|
58
|
+
expect(resolveClientIp(req('1.2.3.4'))).toBe('10.0.0.9');
|
|
59
|
+
});
|
|
60
|
+
it('takes the Nth-from-right hop when TrustedProxyHops is set', () => {
|
|
61
|
+
// client, proxy1, proxy2 — with 1 trusted proxy the last hop is what that proxy saw
|
|
62
|
+
expect(resolveClientIp(req('9.9.9.9, 203.0.113.10'), 1)).toBe('203.0.113.10');
|
|
63
|
+
expect(resolveClientIp(req('9.9.9.9, 198.51.100.2, 203.0.113.10'), 2)).toBe('198.51.100.2');
|
|
64
|
+
});
|
|
65
|
+
it('falls back to the socket when XFF is missing or too short for the declared hop count', () => {
|
|
66
|
+
expect(resolveClientIp(req(undefined), 1)).toBe('10.0.0.9');
|
|
67
|
+
expect(resolveClientIp(req('only-one'), 2)).toBe('10.0.0.9');
|
|
68
|
+
});
|
|
69
|
+
});
|
|
70
|
+
//# sourceMappingURL=checkout-edge-policy.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkout-edge-policy.test.js","sourceRoot":"","sources":["../../src/__tests__/checkout-edge-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACH,uBAAuB,EACvB,YAAY,EACZ,mBAAmB,EACnB,aAAa,EACb,eAAe,GAClB,MAAM,4BAA4B,CAAC;AAEpC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,CAAC,GAAG,uBAAuB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAC/C,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAC/D,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,YAAY,CAAC,yBAAyB,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,YAAY,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC5E,MAAM,CACF,aAAa,CAAC,uBAAuB,EAAE,EAAE,cAAc,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAC/G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,aAAa,CAAC,0BAA0B,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,aAAa,CAAC,0BAA0B,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACnF,MAAM,MAAM,GAAG,EAAE,cAAc,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,aAAa,CAAC,4BAA4B,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,CAAC,aAAa,CAAC,2BAA2B,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC7B,MAAM,GAAG,GAAG,CAAC,GAAuB,EAAE,MAAM,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE;QACnC,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE;KACpC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,oFAAoF;QACpF,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9E,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC5F,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkout-host-page.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/checkout-host-page.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,86 @@
|
|
|
1
|
+
import { describe, expect, it } from 'vitest';
|
|
2
|
+
import { checkoutHostSecurityHeaders, escapeAttr, escapeHtml, renderCheckoutHostErrorPage, renderCheckoutHostPage, } from '../checkout-host-page.js';
|
|
3
|
+
describe('escapeHtml / escapeAttr', () => {
|
|
4
|
+
it('escapes markup and quotes', () => {
|
|
5
|
+
expect(escapeHtml('<script>alert(1)</script>')).toBe('<script>alert(1)</script>');
|
|
6
|
+
expect(escapeAttr('x" onclick="alert(1)')).toBe('x" onclick="alert(1)');
|
|
7
|
+
expect(escapeAttr('a&b<c>')).toBe('a&b<c>');
|
|
8
|
+
});
|
|
9
|
+
});
|
|
10
|
+
describe('renderCheckoutHostPage', () => {
|
|
11
|
+
it('hosts the Angular Element when elementSrc is provided', () => {
|
|
12
|
+
const html = renderCheckoutHostPage({
|
|
13
|
+
slug: 'summit-2027',
|
|
14
|
+
apiRoot: '/checkout',
|
|
15
|
+
elementSrc: '/checkout/element/main.js',
|
|
16
|
+
cspNonce: 'nOnce+/1',
|
|
17
|
+
});
|
|
18
|
+
expect(html).toContain('slug="summit-2027"');
|
|
19
|
+
expect(html).toContain('api-root="/checkout"');
|
|
20
|
+
expect(html).toContain('csp-nonce="nOnce+/1"');
|
|
21
|
+
expect(html).toContain('src="/checkout/element/main.js"');
|
|
22
|
+
expect(html).toContain('type="module"');
|
|
23
|
+
expect(html).toContain('nonce="nOnce+/1"');
|
|
24
|
+
expect(html).not.toContain("post('/initialize'");
|
|
25
|
+
});
|
|
26
|
+
it('bakes slug and api root into data-* attributes, never into the script block', () => {
|
|
27
|
+
const evil = 'summit"</script><script>alert(1)</script>';
|
|
28
|
+
const html = renderCheckoutHostPage({ slug: evil, apiRoot: '/checkout', cspNonce: 'nOnce+/1' });
|
|
29
|
+
expect(html).toContain('data-slug="summit"</script><script>alert(1)</script>"');
|
|
30
|
+
expect(html).toContain('data-api-root="/checkout"');
|
|
31
|
+
const scriptOpen = html.indexOf('<script');
|
|
32
|
+
const scriptTagEnd = html.indexOf('>', scriptOpen);
|
|
33
|
+
const script = html.slice(scriptTagEnd + 1, html.indexOf('</script>'));
|
|
34
|
+
expect(script).not.toContain(evil);
|
|
35
|
+
expect(script).not.toContain('summit"');
|
|
36
|
+
expect(script).toContain("host.getAttribute('data-slug')");
|
|
37
|
+
expect(script).toContain("host.getAttribute('data-api-root')");
|
|
38
|
+
});
|
|
39
|
+
it('drives only the existing POST verbs (no amount/price/provider in the request shape)', () => {
|
|
40
|
+
const html = renderCheckoutHostPage({ slug: 'summit-2027', apiRoot: '/checkout', cspNonce: 'nOnce+/1' });
|
|
41
|
+
expect(html).toContain("post('/initialize'");
|
|
42
|
+
expect(html).toContain("post('/draft'");
|
|
43
|
+
expect(html).toContain("post('/payment-intent'");
|
|
44
|
+
expect(html).toContain("post('/complete'");
|
|
45
|
+
expect(html).toContain('if (stripe) { resolve(stripe); return; }');
|
|
46
|
+
expect(html).toContain('crypto.getRandomValues');
|
|
47
|
+
expect(html).not.toContain('Math.random');
|
|
48
|
+
expect(html).not.toContain('amount:');
|
|
49
|
+
expect(html).not.toContain('UnitPrice');
|
|
50
|
+
expect(html).not.toContain('paymentProviderId');
|
|
51
|
+
});
|
|
52
|
+
it('is a complete HTML document with noindex and utf-8', () => {
|
|
53
|
+
const html = renderCheckoutHostPage({ slug: 'summit-2027', apiRoot: '/checkout', pageTitle: 'Buy <tickets>', cspNonce: 'nOnce+/1' });
|
|
54
|
+
expect(html.startsWith('<!doctype html>')).toBe(true);
|
|
55
|
+
expect(html).toContain('<title>Buy <tickets></title>');
|
|
56
|
+
expect(html).toContain('name="robots" content="noindex"');
|
|
57
|
+
expect(html).toContain('charset="utf-8"');
|
|
58
|
+
});
|
|
59
|
+
});
|
|
60
|
+
describe('renderCheckoutHostErrorPage', () => {
|
|
61
|
+
it('escapes the operator-facing message and has no boot script', () => {
|
|
62
|
+
const html = renderCheckoutHostErrorPage({ message: 'Not <found> & gone', cspNonce: 'nOnce+/1' });
|
|
63
|
+
expect(html).toContain('Not <found> & gone');
|
|
64
|
+
expect(html).not.toContain('<script>');
|
|
65
|
+
expect(html).toContain('role="alert"');
|
|
66
|
+
});
|
|
67
|
+
it('stamps a CSP nonce onto style and script when provided', () => {
|
|
68
|
+
const html = renderCheckoutHostPage({ slug: 's', apiRoot: '/checkout', cspNonce: 'nOnce+/1' });
|
|
69
|
+
expect(html).toContain('nonce="nOnce+/1"');
|
|
70
|
+
expect(html).toMatch(/<style nonce="nOnce\+\/1">/);
|
|
71
|
+
expect(html).toMatch(/<script nonce="nOnce\+\/1">/);
|
|
72
|
+
});
|
|
73
|
+
});
|
|
74
|
+
describe('checkoutHostSecurityHeaders', () => {
|
|
75
|
+
it('denies framing and scopes scripts to the nonce plus Stripe', () => {
|
|
76
|
+
const h = checkoutHostSecurityHeaders('abc123');
|
|
77
|
+
expect(h['X-Frame-Options']).toBe('DENY');
|
|
78
|
+
expect(h['Referrer-Policy']).toBe('no-referrer');
|
|
79
|
+
expect(h['Content-Security-Policy']).toContain("frame-ancestors 'none'");
|
|
80
|
+
expect(h['Content-Security-Policy']).toContain("'nonce-abc123'");
|
|
81
|
+
expect(h['Content-Security-Policy']).toContain("'self'");
|
|
82
|
+
expect(h['Content-Security-Policy']).toContain('https://js.stripe.com');
|
|
83
|
+
expect(h['Content-Security-Policy']).toContain("default-src 'none'");
|
|
84
|
+
});
|
|
85
|
+
});
|
|
86
|
+
//# sourceMappingURL=checkout-host-page.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkout-host-page.test.js","sourceRoot":"","sources":["../../src/__tests__/checkout-host-page.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACH,2BAA2B,EAC3B,UAAU,EACV,UAAU,EACV,2BAA2B,EAC3B,sBAAsB,GACzB,MAAM,0BAA0B,CAAC;AAElC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC9F,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClF,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAG,sBAAsB,CAAC;YAChC,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,2BAA2B;YACvC,QAAQ,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACnF,MAAM,IAAI,GAAG,2CAA2C,CAAC;QACzD,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8EAA8E,CAAC,CAAC;QACvG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC3F,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACrI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,2BAA2B,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACzE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACxE,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server-extensions-manifest.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/server-extensions-manifest.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import { readFileSync } from 'node:fs';
|
|
2
|
+
import { dirname, join } from 'node:path';
|
|
3
|
+
import { fileURLToPath } from 'node:url';
|
|
4
|
+
import { describe, expect, it } from 'vitest';
|
|
5
|
+
import { MJ_SERVER_EXTENSIONS } from '../server-extensions-manifest.js';
|
|
6
|
+
const pkgJsonPath = join(dirname(fileURLToPath(import.meta.url)), '../../package.json');
|
|
7
|
+
describe('MJ_SERVER_EXTENSIONS', () => {
|
|
8
|
+
it('declares the webhook and checkout edge with the same DriverClass/RootPath as mj.config.cjs', () => {
|
|
9
|
+
expect(MJ_SERVER_EXTENSIONS).toEqual([
|
|
10
|
+
{
|
|
11
|
+
Enabled: true,
|
|
12
|
+
DriverClass: 'OrdersPaymentWebhook',
|
|
13
|
+
RootPath: '/webhooks/payments',
|
|
14
|
+
Settings: {},
|
|
15
|
+
},
|
|
16
|
+
{
|
|
17
|
+
Enabled: true,
|
|
18
|
+
DriverClass: 'OrdersCheckoutEdge',
|
|
19
|
+
RootPath: '/checkout',
|
|
20
|
+
Settings: {},
|
|
21
|
+
},
|
|
22
|
+
]);
|
|
23
|
+
});
|
|
24
|
+
it('mirrors package.json memberjunction.serverExtensions so static introspection matches the export', () => {
|
|
25
|
+
const pkg = JSON.parse(readFileSync(pkgJsonPath, 'utf8'));
|
|
26
|
+
expect(pkg.memberjunction?.serverExtensions).toEqual(MJ_SERVER_EXTENSIONS);
|
|
27
|
+
});
|
|
28
|
+
});
|
|
29
|
+
//# sourceMappingURL=server-extensions-manifest.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server-extensions-manifest.test.js","sourceRoot":"","sources":["../../src/__tests__/server-extensions-manifest.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;AAExF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QAClG,MAAM,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;YACjC;gBACI,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,sBAAsB;gBACnC,QAAQ,EAAE,oBAAoB;gBAC9B,QAAQ,EAAE,EAAE;aACf;YACD;gBACI,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,oBAAoB;gBACjC,QAAQ,EAAE,WAAW;gBACrB,QAAQ,EAAE,EAAE;aACf;SACJ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACvG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAEvD,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Pure helpers for the anonymous checkout edge: slug validation and origin allowlist.
|
|
3
|
+
* Extracted so unit tests do not have to boot Express or the ClassFactory.
|
|
4
|
+
*/
|
|
5
|
+
/** POST route suffixes that must never be treated as a distribution slug. */
|
|
6
|
+
export declare const CHECKOUT_RESERVED_SLUGS: ReadonlySet<string>;
|
|
7
|
+
/**
|
|
8
|
+
* Public distribution slugs: short, URL-safe, not colliding with the POST verbs
|
|
9
|
+
* mounted on the same root.
|
|
10
|
+
*/
|
|
11
|
+
export declare function isValidCheckoutSlug(slug: string): boolean;
|
|
12
|
+
/**
|
|
13
|
+
* True when the browser Origin is the same host:port as this request (the
|
|
14
|
+
* first-party `GET /checkout/:slug` page posting back to MJAPI).
|
|
15
|
+
*/
|
|
16
|
+
export declare function isSameOrigin(origin: string, hostHeader: string | undefined): boolean;
|
|
17
|
+
export interface CheckoutOriginPolicy {
|
|
18
|
+
allowedOrigins?: string[];
|
|
19
|
+
}
|
|
20
|
+
/**
|
|
21
|
+
* Widget `allowedOrigins` is a **cross-origin embed** allowlist. Same-origin
|
|
22
|
+
* posts from the MJAPI-hosted public page always pass. When the allowlist is
|
|
23
|
+
* absent or empty, any origin is allowed (the distribution slug remains the
|
|
24
|
+
* access control).
|
|
25
|
+
*/
|
|
26
|
+
/**
|
|
27
|
+
* Client IP for rate limiting and Turnstile.
|
|
28
|
+
*
|
|
29
|
+
* `TrustedProxyHops` is the number of reverse proxies that append to
|
|
30
|
+
* `X-Forwarded-For`. 0 (the default) ignores XFF entirely and uses the socket
|
|
31
|
+
* address — the leftmost XFF hop is client-supplied and must never key a
|
|
32
|
+
* security decision. When hops is N, the Nth-from-the-right entry is used
|
|
33
|
+
* (the address the outermost trusted proxy observed).
|
|
34
|
+
*/
|
|
35
|
+
export declare function resolveClientIp(req: {
|
|
36
|
+
headers: {
|
|
37
|
+
[key: string]: unknown;
|
|
38
|
+
};
|
|
39
|
+
socket?: {
|
|
40
|
+
remoteAddress?: string;
|
|
41
|
+
};
|
|
42
|
+
}, trustedProxyHops?: number): string;
|
|
43
|
+
export declare function originAllowed(origin: string, policy: CheckoutOriginPolicy, hostHeader?: string): boolean;
|
|
44
|
+
//# sourceMappingURL=checkout-edge-policy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkout-edge-policy.d.ts","sourceRoot":"","sources":["../src/checkout-edge-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAKtD,CAAC;AAIH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQzD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAUpF;AAED,MAAM,WAAW,oBAAoB;IACjC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC3B,GAAG,EAAE;IAAE,OAAO,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EACjF,gBAAgB,SAAI,GACrB,MAAM,CAgBR;AAED,wBAAgB,aAAa,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,oBAAoB,EAC5B,UAAU,CAAC,EAAE,MAAM,GACpB,OAAO,CAWT"}
|