@onesub/server 0.18.3 → 0.19.0

package/dist/index.js

@@ -451,7 +451,10 @@ async function validateAppleReceipt(receipt, config) {
     purchasedAt: new Date(purchasedAt).toISOString(),
     willRenew: status === SUBSCRIPTION_STATUS.ACTIVE,
     // refined by renewal info in webhook
-    ...appAccountToken ? { boundAccountId: appAccountToken } : {}
+    ...appAccountToken ? { boundAccountId: appAccountToken } : {},
+    // Transient, like boundAccountId: the validate route uses it to decide
+    // whether a sandbox-only test override may apply, then strips it.
+    ...tx.environment === "Sandbox" ? { sandbox: true } : {}
   };
 }
 async function validateAppleConsumableReceipt(signedTransaction, config, expectedProductId) {
@@ -1255,6 +1258,21 @@ function peekAppleBundleId(jws) {
   }
 }
 
+// src/test-overrides.ts
+var overrides = /* @__PURE__ */ new Map();
+function setTestOverride(userId, entitled) {
+  overrides.set(userId, entitled);
+}
+function clearTestOverride(userId) {
+  return overrides.delete(userId);
+}
+function getTestOverride(userId) {
+  return overrides.get(userId);
+}
+function listTestOverrides() {
+  return [...overrides].map(([userId, entitled]) => ({ userId, entitled }));
+}
+
 // src/routes/validate.ts
 var NO_SUB = { valid: false, subscription: null };
 var validateSchema = z.object({
@@ -1322,6 +1340,13 @@ function createValidateRouter(config, store) {
         );
         return;
       }
+      const isSandbox = sub.sandbox === true;
+      delete sub.sandbox;
+      if (isSandbox && getTestOverride(userId) === false) {
+        log.warn(`[onesub/validate] sandbox test override active for ${userId}: forcing not-entitled`);
+        sub.status = SUBSCRIPTION_STATUS.EXPIRED;
+        sub.willRenew = false;
+      }
       sub.userId = userId;
       await store.save(sub);
       if (platform === "google" && appConfig.google) {
@@ -2351,6 +2376,42 @@ function createAdminRouter(config, purchaseStore, store, webhookQueue) {
       sendError(res, 500, ONESUB_ERROR_CODE.INTERNAL_ERROR, err2.message ?? "sync error");
     }
   });
+  const overrideParamsSchema = z.object({ userId: z.string().min(1).max(256) });
+  const overrideBodySchema = z.object({ entitled: z.boolean() });
+  router.get(ROUTES.ADMIN_TEST_OVERRIDES, (_req, res) => {
+    res.json({ overrides: listTestOverrides() });
+  });
+  router.put(ROUTES.ADMIN_TEST_OVERRIDE, (req, res) => {
+    let params;
+    let body;
+    try {
+      params = overrideParamsSchema.parse(req.params);
+      body = overrideBodySchema.parse(req.body);
+    } catch (err2) {
+      if (err2 instanceof z.ZodError) {
+        sendZodError(res, err2);
+      } else {
+        sendError(res, 400, ONESUB_ERROR_CODE.INVALID_INPUT, "userId and { entitled: boolean } required");
+      }
+      return;
+    }
+    setTestOverride(params.userId, body.entitled);
+    log.warn(
+      `[onesub/admin] sandbox test override set for ${params.userId}: entitled=${body.entitled}`
+    );
+    res.json({ ok: true, userId: params.userId, entitled: body.entitled, sandboxOnly: true });
+  });
+  router.delete(ROUTES.ADMIN_TEST_OVERRIDE, (req, res) => {
+    let params;
+    try {
+      params = overrideParamsSchema.parse(req.params);
+    } catch {
+      sendError(res, 400, ONESUB_ERROR_CODE.INVALID_INPUT, "userId required");
+      return;
+    }
+    const cleared = clearTestOverride(params.userId);
+    res.json({ ok: true, userId: params.userId, cleared });
+  });
   if (webhookQueue?.listDeadLetters) {
     router.get("/onesub/admin/webhook-deadletters", async (_req, res) => {
       try {
@@ -3514,6 +3575,54 @@ var ONESUB_OPENAPI = {
       }
     },
     // ── admin (mounted when config.adminSecret is set) ───────────────────────
+    [ROUTES.ADMIN_TEST_OVERRIDES]: {
+      get: {
+        summary: "List sandbox-only entitlement overrides (admin).",
+        parameters: [ADMIN_SECRET_PARAM],
+        responses: {
+          200: { description: "OK" },
+          401: err("Invalid admin secret (INVALID_ADMIN_SECRET).")
+        }
+      }
+    },
+    "/onesub/admin/test-overrides/{userId}": {
+      put: {
+        summary: "Force an entitlement verdict for one userId. Honoured ONLY for Sandbox receipts \u2014 a Production receipt ignores it. Exists because Apple cannot cancel a sandbox subscription bought with a real Apple Account, which otherwise locks a tester in.",
+        parameters: [
+          ADMIN_SECRET_PARAM,
+          { in: "path", name: "userId", required: true, schema: { type: "string" } }
+        ],
+        requestBody: {
+          required: true,
+          content: {
+            "application/json": {
+              schema: {
+                type: "object",
+                required: ["entitled"],
+                properties: { entitled: { type: "boolean" } }
+              }
+            }
+          }
+        },
+        responses: {
+          200: { description: "OK" },
+          400: err("Invalid input (INVALID_INPUT)."),
+          401: err("Invalid admin secret (INVALID_ADMIN_SECRET).")
+        }
+      },
+      delete: {
+        summary: "Clear the sandbox entitlement override for one userId (admin).",
+        parameters: [
+          ADMIN_SECRET_PARAM,
+          { in: "path", name: "userId", required: true, schema: { type: "string" } }
+        ],
+        responses: {
+          200: { description: "OK" },
+          400: err("Invalid input (INVALID_INPUT)."),
+          401: err("Invalid admin secret (INVALID_ADMIN_SECRET).")
+        }
+      }
+    },
     [ROUTES.ADMIN_SUBSCRIPTIONS]: {
       get: {
         summary: "Filtered, paginated subscription list (admin).",