@orangecheck/me-client 0.22.0 → 0.24.0

package/dist/index.mjs

@@ -26,9 +26,11 @@ function clearBearerToken() {
 async function api(path, opts = {}) {
   const headers = {
     "content-type": "application/json",
-    accept: "application/json"
+    accept: "application/json",
+    ...opts.headers ?? {}
   };
-  if (bearerToken) headers["authorization"] = `Bearer ${bearerToken}`;
+  const token = opts.bearerToken ?? bearerToken;
+  if (token) headers["authorization"] = `Bearer ${token}`;
   const res = await fetch(`${origin}${path}`, {
     method: opts.method ?? "GET",
     credentials: "include",
@@ -314,6 +316,23 @@ function validateIntegratorConfig(cfg) {
 }
 
 // src/event.ts
+async function hmacSha256Hex(secret, message) {
+  const enc = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await crypto.subtle.sign("HMAC", key, enc.encode(message));
+  return Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+async function signBody(secret, serializedBody) {
+  const t = Math.floor(Date.now() / 1e3);
+  const mac = await hmacSha256Hex(secret, `${t}.${serializedBody}`);
+  return `t=${t},v1=${mac}`;
+}
 async function fire(options) {
   if (!options.project_key) {
     throw new Error("event.fire requires project_key");
@@ -321,9 +340,28 @@ async function fire(options) {
   if (!options.subtype) {
     throw new Error("event.fire requires subtype");
   }
+  const requestBody = {
+    project_key: options.project_key,
+    subtype: options.subtype
+  };
+  if (options.payment_amount_sats !== void 0)
+    requestBody.payment_amount_sats = options.payment_amount_sats;
+  if (options.action_label !== void 0) requestBody.action_label = options.action_label;
+  if (options.metadata !== void 0) requestBody.metadata = options.metadata;
+  if (options.is_agent !== void 0) requestBody.is_agent = options.is_agent;
+  const headers = {};
+  if (options.idempotencyKey) headers["idempotency-key"] = options.idempotencyKey;
+  if (options.signingSecret) {
+    headers["x-oc-signature"] = await signBody(
+      options.signingSecret,
+      JSON.stringify(requestBody)
+    );
+  }
   return api("/api/integrator/event", {
     method: "POST",
-    body: options
+    body: requestBody,
+    headers,
+    bearerToken: options.bearerToken
   });
 }
 async function fireBatch(options) {
@@ -338,9 +376,19 @@ async function fireBatch(options) {
       `event.fireBatch \xB7 max 100 events per call (got ${options.events.length}). Split client-side.`
     );
   }
+  const requestBody = { project_key: options.project_key, events: options.events };
+  const headers = {};
+  if (options.signingSecret) {
+    headers["x-oc-signature"] = await signBody(
+      options.signingSecret,
+      JSON.stringify(requestBody)
+    );
+  }
   return api("/api/integrator/event/batch", {
     method: "POST",
-    body: options
+    body: requestBody,
+    headers,
+    bearerToken: options.bearerToken
   });
 }
 function verify(envelope, config2, payment_amount_sats) {