@onesub/server 0.18.2 → 0.19.0

package/dist/index.js

@@ -325,6 +325,10 @@ function mockValidateGoogleProduct(receipt, productId) {
 }
 
 // src/providers/apple.ts
+var EMPTY_APP_ACCOUNT_TOKEN = "00000000-0000-0000-0000-000000000000";
+function normalizeAppleAppAccountToken(token) {
+  return token === EMPTY_APP_ACCOUNT_TOKEN ? void 0 : token;
+}
 function derBase64ToPem(der) {
   return "-----BEGIN CERTIFICATE-----\n" + (der.match(/.{1,64}/g) ?? []).join("\n") + "\n-----END CERTIFICATE-----";
 }
@@ -400,7 +404,15 @@ function deriveStatus(tx, renewal) {
   return SUBSCRIPTION_STATUS.EXPIRED;
 }
 async function validateAppleReceipt(receipt, config) {
-  if (config.mockMode) return mockValidateAppleSubscription(receipt);
+  if (config.mockMode) {
+    const mock = mockValidateAppleSubscription(receipt);
+    if (mock) {
+      const boundAccountId = normalizeAppleAppAccountToken(mock.boundAccountId);
+      if (boundAccountId) mock.boundAccountId = boundAccountId;
+      else delete mock.boundAccountId;
+    }
+    return mock;
+  }
   let tx;
   try {
     tx = await decodeJws(receipt, config.skipJwsVerification);
@@ -427,6 +439,7 @@ async function validateAppleReceipt(receipt, config) {
   }
   const status = deriveStatus(tx, null);
   const purchasedAt = tx.originalPurchaseDate ?? tx.purchaseDate ?? Date.now();
+  const appAccountToken = normalizeAppleAppAccountToken(tx.appAccountToken);
   return {
     userId: "",
     // caller fills this in from the request body
@@ -438,11 +451,22 @@ async function validateAppleReceipt(receipt, config) {
     purchasedAt: new Date(purchasedAt).toISOString(),
     willRenew: status === SUBSCRIPTION_STATUS.ACTIVE,
     // refined by renewal info in webhook
-    ...tx.appAccountToken ? { boundAccountId: tx.appAccountToken } : {}
+    ...appAccountToken ? { boundAccountId: appAccountToken } : {},
+    // Transient, like boundAccountId: the validate route uses it to decide
+    // whether a sandbox-only test override may apply, then strips it.
+    ...tx.environment === "Sandbox" ? { sandbox: true } : {}
   };
 }
 async function validateAppleConsumableReceipt(signedTransaction, config, expectedProductId) {
-  if (config.mockMode) return mockValidateAppleProduct(signedTransaction, expectedProductId);
+  if (config.mockMode) {
+    const mock = mockValidateAppleProduct(signedTransaction, expectedProductId);
+    if (mock) {
+      const appAccountToken = normalizeAppleAppAccountToken(mock.appAccountToken);
+      if (appAccountToken) mock.appAccountToken = appAccountToken;
+      else delete mock.appAccountToken;
+    }
+    return mock;
+  }
   let tx;
   try {
     tx = await decodeJws(signedTransaction, config.skipJwsVerification);
@@ -495,7 +519,7 @@ async function validateAppleConsumableReceipt(signedTransaction, config, expecte
     transactionId,
     productId: tx.productId,
     purchasedAt: tx.purchaseDate ? new Date(tx.purchaseDate).toISOString() : (/* @__PURE__ */ new Date()).toISOString(),
-    appAccountToken: tx.appAccountToken ?? void 0
+    appAccountToken: normalizeAppleAppAccountToken(tx.appAccountToken)
   };
 }
 async function decodeAppleNotification(payload, skipJwsVerification = false) {
@@ -527,7 +551,7 @@ async function decodeAppleNotification(payload, skipJwsVerification = false) {
     status,
     willRenew,
     expiresAt: tx.expiresDate ? new Date(tx.expiresDate).toISOString() : null,
-    appAccountToken: tx.appAccountToken ?? null,
+    appAccountToken: normalizeAppleAppAccountToken(tx.appAccountToken) ?? null,
     inAppOwnershipType: tx.inAppOwnershipType ?? null
   };
 }
@@ -717,7 +741,7 @@ async function fetchAppleTransactionHistory(originalTransactionId, config, optio
           type: tx.type ?? "Unknown",
           purchasedAt: tx.purchaseDate ? new Date(tx.purchaseDate).toISOString() : (/* @__PURE__ */ new Date()).toISOString(),
           expiresAt: tx.expiresDate ? new Date(tx.expiresDate).toISOString() : null,
-          appAccountToken: tx.appAccountToken ?? null,
+          appAccountToken: normalizeAppleAppAccountToken(tx.appAccountToken) ?? null,
           inAppOwnershipType: tx.inAppOwnershipType ?? null,
           revocationDate: tx.revocationDate ? new Date(tx.revocationDate).toISOString() : null
         });
@@ -1234,6 +1258,21 @@ function peekAppleBundleId(jws) {
   }
 }
 
+// src/test-overrides.ts
+var overrides = /* @__PURE__ */ new Map();
+function setTestOverride(userId, entitled) {
+  overrides.set(userId, entitled);
+}
+function clearTestOverride(userId) {
+  return overrides.delete(userId);
+}
+function getTestOverride(userId) {
+  return overrides.get(userId);
+}
+function listTestOverrides() {
+  return [...overrides].map(([userId, entitled]) => ({ userId, entitled }));
+}
+
 // src/routes/validate.ts
 var NO_SUB = { valid: false, subscription: null };
 var validateSchema = z.object({
@@ -1301,6 +1340,13 @@ function createValidateRouter(config, store) {
         );
         return;
       }
+      const isSandbox = sub.sandbox === true;
+      delete sub.sandbox;
+      if (isSandbox && getTestOverride(userId) === false) {
+        log.warn(`[onesub/validate] sandbox test override active for ${userId}: forcing not-entitled`);
+        sub.status = SUBSCRIPTION_STATUS.EXPIRED;
+        sub.willRenew = false;
+      }
       sub.userId = userId;
       await store.save(sub);
       if (platform === "google" && appConfig.google) {
@@ -2330,6 +2376,42 @@ function createAdminRouter(config, purchaseStore, store, webhookQueue) {
       sendError(res, 500, ONESUB_ERROR_CODE.INTERNAL_ERROR, err2.message ?? "sync error");
     }
   });
+  const overrideParamsSchema = z.object({ userId: z.string().min(1).max(256) });
+  const overrideBodySchema = z.object({ entitled: z.boolean() });
+  router.get(ROUTES.ADMIN_TEST_OVERRIDES, (_req, res) => {
+    res.json({ overrides: listTestOverrides() });
+  });
+  router.put(ROUTES.ADMIN_TEST_OVERRIDE, (req, res) => {
+    let params;
+    let body;
+    try {
+      params = overrideParamsSchema.parse(req.params);
+      body = overrideBodySchema.parse(req.body);
+    } catch (err2) {
+      if (err2 instanceof z.ZodError) {
+        sendZodError(res, err2);
+      } else {
+        sendError(res, 400, ONESUB_ERROR_CODE.INVALID_INPUT, "userId and { entitled: boolean } required");
+      }
+      return;
+    }
+    setTestOverride(params.userId, body.entitled);
+    log.warn(
+      `[onesub/admin] sandbox test override set for ${params.userId}: entitled=${body.entitled}`
+    );
+    res.json({ ok: true, userId: params.userId, entitled: body.entitled, sandboxOnly: true });
+  });
+  router.delete(ROUTES.ADMIN_TEST_OVERRIDE, (req, res) => {
+    let params;
+    try {
+      params = overrideParamsSchema.parse(req.params);
+    } catch {
+      sendError(res, 400, ONESUB_ERROR_CODE.INVALID_INPUT, "userId required");
+      return;
+    }
+    const cleared = clearTestOverride(params.userId);
+    res.json({ ok: true, userId: params.userId, cleared });
+  });
   if (webhookQueue?.listDeadLetters) {
     router.get("/onesub/admin/webhook-deadletters", async (_req, res) => {
       try {
@@ -3493,6 +3575,54 @@ var ONESUB_OPENAPI = {
       }
     },
     // ── admin (mounted when config.adminSecret is set) ───────────────────────
+    [ROUTES.ADMIN_TEST_OVERRIDES]: {
+      get: {
+        summary: "List sandbox-only entitlement overrides (admin).",
+        parameters: [ADMIN_SECRET_PARAM],
+        responses: {
+          200: { description: "OK" },
+          401: err("Invalid admin secret (INVALID_ADMIN_SECRET).")
+        }
+      }
+    },
+    "/onesub/admin/test-overrides/{userId}": {
+      put: {
+        summary: "Force an entitlement verdict for one userId. Honoured ONLY for Sandbox receipts \u2014 a Production receipt ignores it. Exists because Apple cannot cancel a sandbox subscription bought with a real Apple Account, which otherwise locks a tester in.",
+        parameters: [
+          ADMIN_SECRET_PARAM,
+          { in: "path", name: "userId", required: true, schema: { type: "string" } }
+        ],
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: {
+                type: "object",
+                required: ["entitled"],
+                properties: { entitled: { type: "boolean" } }
+              }
+            }
+          }
+        },
+        responses: {
+          200: { description: "OK" },
+          400: err("Invalid input (INVALID_INPUT)."),
+          401: err("Invalid admin secret (INVALID_ADMIN_SECRET).")
+        }
+      },
+      delete: {
+        summary: "Clear the sandbox entitlement override for one userId (admin).",
+        parameters: [
+          ADMIN_SECRET_PARAM,
+          { in: "path", name: "userId", required: true, schema: { type: "string" } }
+        ],
+        responses: {
+          200: { description: "OK" },
+          400: err("Invalid input (INVALID_INPUT)."),
+          401: err("Invalid admin secret (INVALID_ADMIN_SECRET).")
+        }
+      }
+    },
     [ROUTES.ADMIN_SUBSCRIPTIONS]: {
       get: {
         summary: "Filtered, paginated subscription list (admin).",