@onesub/server 0.15.0 → 0.16.0

package/dist/__tests__/receipt-age.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * productReceiptMaxAgeHours — the one-time-purchase replay window is
+ * configurable (default 72h) so historical receipts can be validated on
+ * purpose (backend migrations, e2e against real store transactions).
+ */
+export {};
+//# sourceMappingURL=receipt-age.test.d.ts.map

package/dist/__tests__/receipt-age.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-age.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/receipt-age.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/index.cjs

@@ -329,7 +329,6 @@ function mockValidateGoogleProduct(receipt, productId) {
 }
 
 // src/providers/apple.ts
-var MAX_CONSUMABLE_RECEIPT_AGE_MS = 72 * 60 * 60 * 1e3;
 function derBase64ToPem(der) {
   return "-----BEGIN CERTIFICATE-----\n" + (der.match(/.{1,64}/g) ?? []).join("\n") + "\n-----END CERTIFICATE-----";
 }
@@ -477,8 +476,9 @@ async function validateAppleConsumableReceipt(signedTransaction, config, expecte
     log.warn("[onesub/apple] Purchase was revoked/refunded");
     return null;
   }
-  if (tx.purchaseDate && Date.now() - tx.purchaseDate > MAX_CONSUMABLE_RECEIPT_AGE_MS) {
-    log.warn("[onesub/apple] Consumable receipt too old (>72h)");
+  const maxAgeMs = (config.productReceiptMaxAgeHours ?? 72) * 60 * 60 * 1e3;
+  if (tx.purchaseDate && Date.now() - tx.purchaseDate > maxAgeMs) {
+    log.warn(`[onesub/apple] Consumable receipt too old (>${config.productReceiptMaxAgeHours ?? 72}h)`);
     return null;
   }
   const transactionId = tx.transactionId ?? tx.originalTransactionId;
@@ -767,7 +767,6 @@ var GOOGLE_NOTIFICATION_TYPE = {
   SUBSCRIPTION_REVOKED: 12,
   SUBSCRIPTION_EXPIRED: 13
 };
-var MAX_PRODUCT_RECEIPT_AGE_MS = 72 * 60 * 60 * 1e3;
 var refreshPromises = /* @__PURE__ */ new Map();
 function googleTokenCacheKey(serviceAccountKey) {
   let hash = 0;
@@ -1044,8 +1043,9 @@ async function validateGoogleProductReceipt(purchaseToken, productId, config, ty
   }
   if (purchase.purchaseTimeMillis) {
     const purchaseTime = parseInt(purchase.purchaseTimeMillis, 10);
-    if (Date.now() - purchaseTime > MAX_PRODUCT_RECEIPT_AGE_MS) {
-      log.warn("[onesub/google] Product receipt too old (>72h)");
+    const maxAgeMs = (config.productReceiptMaxAgeHours ?? 72) * 60 * 60 * 1e3;
+    if (Date.now() - purchaseTime > maxAgeMs) {
+      log.warn(`[onesub/google] Product receipt too old (>${config.productReceiptMaxAgeHours ?? 72}h)`);
       return null;
     }
   }