@paykit-sdk/paystack 1.2.1 → 1.3.0

package/dist/index.js

@@ -4121,20 +4121,10 @@ var Checkout$inboundSchema = (init, transaction) => {
       type: core.billingModeSchema.optional()
     })
   );
-  if (paykitMeta && typeof paykitMeta === "string") {
-    const parsed = core.parseJSON(
-      paykitMeta,
-      core.Schema.object({
-        item_id: core.Schema.string().optional(),
-        quantity: core.Schema.number().optional(),
-        type: core.billingModeSchema.optional()
-      })
-    );
-    if (parsed) {
-      itemId = parsed.item_id ?? "";
-      quantity = parsed.quantity ?? 1;
-      type = parsed.type ?? null;
-    }
+  if (paykitMeta) {
+    itemId = paykitMeta.item_id ?? "";
+    quantity = paykitMeta.quantity ?? 1;
+    type = paykitMeta.type ?? null;
   }
   let customer = null;
   if (transaction.customer?.email) {
@@ -4293,7 +4283,11 @@ var PaystackProvider = class extends core.AbstractPayKitProvider {
         { provider: this.providerName, method: "createCheckout" }
       );
     }
-    const { amount, currency = "NGN" } = data.provider_metadata ?? {};
+    const { amount, currency = "NGN" } = core.validateRequiredKeys(
+      ["amount", "currency"],
+      data.provider_metadata ?? {},
+      "Missing required provider metadata: {keys}"
+    );
     const metadata = {
       ...core.stringifyMetadataValues(data.metadata ?? {}),
       [core.PAYKIT_METADATA_KEY]: JSON.stringify({
@@ -4304,8 +4298,8 @@ var PaystackProvider = class extends core.AbstractPayKitProvider {
     };
     const body = {
       email: data.customer.email,
-      amount: amount ?? 0,
-      currency,
+      amount: parseInt(amount, 10),
+      currency: currency.toUpperCase(),
       reference: crypto.randomUUID(),
       callback_url: data.success_url,
       metadata: core.stringifyMetadataValues(metadata),
@@ -4617,7 +4611,9 @@ var PaystackProvider = class extends core.AbstractPayKitProvider {
       });
     }
     const expectedSignature = crypto$1.createHmac("sha512", webhookSecret).update(body).digest("hex");
-    if (expectedSignature !== signature) {
+    const expectedBuf = Buffer.from(expectedSignature, "hex");
+    const receivedBuf = Buffer.from(signature, "hex");
+    if (expectedBuf.length !== receivedBuf.length || !crypto$1.timingSafeEqual(expectedBuf, receivedBuf)) {
       throw new core.WebhookError("Invalid Paystack webhook signature", {
         provider: this.providerName
       });

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { schema, AbstractPayKitProvider, HTTPClient, OperationFailedError, createCheckoutSchema, ValidationError, isEmailCustomer, InvalidTypeError, PAYKIT_METADATA_KEY, stringifyMetadataValues, ProviderNotSupportedError, createCustomerSchema, parseCustomerName, isIdCustomer, ResourceNotFoundError, createPaymentSchema, createRefundSchema, WebhookError, paykitEvent$InboundSchema, validateRequiredKeys, parseJSON, Schema, omitInternalMetadata, billingModeSchema } from '@paykit-sdk/core';
-import { createHmac } from 'crypto';
+import { schema, AbstractPayKitProvider, HTTPClient, OperationFailedError, createCheckoutSchema, ValidationError, isEmailCustomer, InvalidTypeError, validateRequiredKeys, PAYKIT_METADATA_KEY, stringifyMetadataValues, ProviderNotSupportedError, createCustomerSchema, parseCustomerName, isIdCustomer, ResourceNotFoundError, createPaymentSchema, createRefundSchema, WebhookError, paykitEvent$InboundSchema, parseJSON, Schema, omitInternalMetadata, billingModeSchema } from '@paykit-sdk/core';
+import { createHmac, timingSafeEqual } from 'crypto';
 
 var __defProp = Object.defineProperty;
 var __export = (target, all) => {
@@ -4119,20 +4119,10 @@ var Checkout$inboundSchema = (init, transaction) => {
       type: billingModeSchema.optional()
     })
   );
-  if (paykitMeta && typeof paykitMeta === "string") {
-    const parsed = parseJSON(
-      paykitMeta,
-      Schema.object({
-        item_id: Schema.string().optional(),
-        quantity: Schema.number().optional(),
-        type: billingModeSchema.optional()
-      })
-    );
-    if (parsed) {
-      itemId = parsed.item_id ?? "";
-      quantity = parsed.quantity ?? 1;
-      type = parsed.type ?? null;
-    }
+  if (paykitMeta) {
+    itemId = paykitMeta.item_id ?? "";
+    quantity = paykitMeta.quantity ?? 1;
+    type = paykitMeta.type ?? null;
   }
   let customer = null;
   if (transaction.customer?.email) {
@@ -4291,7 +4281,11 @@ var PaystackProvider = class extends AbstractPayKitProvider {
         { provider: this.providerName, method: "createCheckout" }
       );
     }
-    const { amount, currency = "NGN" } = data.provider_metadata ?? {};
+    const { amount, currency = "NGN" } = validateRequiredKeys(
+      ["amount", "currency"],
+      data.provider_metadata ?? {},
+      "Missing required provider metadata: {keys}"
+    );
     const metadata = {
       ...stringifyMetadataValues(data.metadata ?? {}),
       [PAYKIT_METADATA_KEY]: JSON.stringify({
@@ -4302,8 +4296,8 @@ var PaystackProvider = class extends AbstractPayKitProvider {
     };
     const body = {
       email: data.customer.email,
-      amount: amount ?? 0,
-      currency,
+      amount: parseInt(amount, 10),
+      currency: currency.toUpperCase(),
       reference: crypto.randomUUID(),
       callback_url: data.success_url,
       metadata: stringifyMetadataValues(metadata),
@@ -4615,7 +4609,9 @@ var PaystackProvider = class extends AbstractPayKitProvider {
       });
     }
     const expectedSignature = createHmac("sha512", webhookSecret).update(body).digest("hex");
-    if (expectedSignature !== signature) {
+    const expectedBuf = Buffer.from(expectedSignature, "hex");
+    const receivedBuf = Buffer.from(signature, "hex");
+    if (expectedBuf.length !== receivedBuf.length || !timingSafeEqual(expectedBuf, receivedBuf)) {
       throw new WebhookError("Invalid Paystack webhook signature", {
         provider: this.providerName
       });

package/dist/paystack-provider.js

@@ -4121,20 +4121,10 @@ var Checkout$inboundSchema = (init, transaction) => {
       type: core.billingModeSchema.optional()
     })
   );
-  if (paykitMeta && typeof paykitMeta === "string") {
-    const parsed = core.parseJSON(
-      paykitMeta,
-      core.Schema.object({
-        item_id: core.Schema.string().optional(),
-        quantity: core.Schema.number().optional(),
-        type: core.billingModeSchema.optional()
-      })
-    );
-    if (parsed) {
-      itemId = parsed.item_id ?? "";
-      quantity = parsed.quantity ?? 1;
-      type = parsed.type ?? null;
-    }
+  if (paykitMeta) {
+    itemId = paykitMeta.item_id ?? "";
+    quantity = paykitMeta.quantity ?? 1;
+    type = paykitMeta.type ?? null;
   }
   let customer = null;
   if (transaction.customer?.email) {
@@ -4293,7 +4283,11 @@ var PaystackProvider = class extends core.AbstractPayKitProvider {
         { provider: this.providerName, method: "createCheckout" }
       );
     }
-    const { amount, currency = "NGN" } = data.provider_metadata ?? {};
+    const { amount, currency = "NGN" } = core.validateRequiredKeys(
+      ["amount", "currency"],
+      data.provider_metadata ?? {},
+      "Missing required provider metadata: {keys}"
+    );
     const metadata = {
       ...core.stringifyMetadataValues(data.metadata ?? {}),
       [core.PAYKIT_METADATA_KEY]: JSON.stringify({
@@ -4304,8 +4298,8 @@ var PaystackProvider = class extends core.AbstractPayKitProvider {
     };
     const body = {
       email: data.customer.email,
-      amount: amount ?? 0,
-      currency,
+      amount: parseInt(amount, 10),
+      currency: currency.toUpperCase(),
       reference: crypto.randomUUID(),
       callback_url: data.success_url,
       metadata: core.stringifyMetadataValues(metadata),
@@ -4617,7 +4611,9 @@ var PaystackProvider = class extends core.AbstractPayKitProvider {
       });
     }
     const expectedSignature = crypto$1.createHmac("sha512", webhookSecret).update(body).digest("hex");
-    if (expectedSignature !== signature) {
+    const expectedBuf = Buffer.from(expectedSignature, "hex");
+    const receivedBuf = Buffer.from(signature, "hex");
+    if (expectedBuf.length !== receivedBuf.length || !crypto$1.timingSafeEqual(expectedBuf, receivedBuf)) {
       throw new core.WebhookError("Invalid Paystack webhook signature", {
         provider: this.providerName
       });

package/dist/paystack-provider.mjs

@@ -1,5 +1,5 @@
-import { schema, AbstractPayKitProvider, HTTPClient, OperationFailedError, createCheckoutSchema, ValidationError, isEmailCustomer, InvalidTypeError, PAYKIT_METADATA_KEY, stringifyMetadataValues, ProviderNotSupportedError, createCustomerSchema, parseCustomerName, isIdCustomer, ResourceNotFoundError, createPaymentSchema, createRefundSchema, WebhookError, paykitEvent$InboundSchema, parseJSON, Schema, omitInternalMetadata, billingModeSchema } from '@paykit-sdk/core';
-import { createHmac } from 'crypto';
+import { schema, AbstractPayKitProvider, HTTPClient, OperationFailedError, createCheckoutSchema, ValidationError, isEmailCustomer, InvalidTypeError, validateRequiredKeys, PAYKIT_METADATA_KEY, stringifyMetadataValues, ProviderNotSupportedError, createCustomerSchema, parseCustomerName, isIdCustomer, ResourceNotFoundError, createPaymentSchema, createRefundSchema, WebhookError, paykitEvent$InboundSchema, parseJSON, Schema, omitInternalMetadata, billingModeSchema } from '@paykit-sdk/core';
+import { createHmac, timingSafeEqual } from 'crypto';
 
 var __defProp = Object.defineProperty;
 var __export = (target, all) => {
@@ -4119,20 +4119,10 @@ var Checkout$inboundSchema = (init, transaction) => {
       type: billingModeSchema.optional()
     })
   );
-  if (paykitMeta && typeof paykitMeta === "string") {
-    const parsed = parseJSON(
-      paykitMeta,
-      Schema.object({
-        item_id: Schema.string().optional(),
-        quantity: Schema.number().optional(),
-        type: billingModeSchema.optional()
-      })
-    );
-    if (parsed) {
-      itemId = parsed.item_id ?? "";
-      quantity = parsed.quantity ?? 1;
-      type = parsed.type ?? null;
-    }
+  if (paykitMeta) {
+    itemId = paykitMeta.item_id ?? "";
+    quantity = paykitMeta.quantity ?? 1;
+    type = paykitMeta.type ?? null;
   }
   let customer = null;
   if (transaction.customer?.email) {
@@ -4291,7 +4281,11 @@ var PaystackProvider = class extends AbstractPayKitProvider {
         { provider: this.providerName, method: "createCheckout" }
       );
     }
-    const { amount, currency = "NGN" } = data.provider_metadata ?? {};
+    const { amount, currency = "NGN" } = validateRequiredKeys(
+      ["amount", "currency"],
+      data.provider_metadata ?? {},
+      "Missing required provider metadata: {keys}"
+    );
     const metadata = {
       ...stringifyMetadataValues(data.metadata ?? {}),
       [PAYKIT_METADATA_KEY]: JSON.stringify({
@@ -4302,8 +4296,8 @@ var PaystackProvider = class extends AbstractPayKitProvider {
     };
     const body = {
       email: data.customer.email,
-      amount: amount ?? 0,
-      currency,
+      amount: parseInt(amount, 10),
+      currency: currency.toUpperCase(),
       reference: crypto.randomUUID(),
       callback_url: data.success_url,
       metadata: stringifyMetadataValues(metadata),
@@ -4615,7 +4609,9 @@ var PaystackProvider = class extends AbstractPayKitProvider {
       });
     }
     const expectedSignature = createHmac("sha512", webhookSecret).update(body).digest("hex");
-    if (expectedSignature !== signature) {
+    const expectedBuf = Buffer.from(expectedSignature, "hex");
+    const receivedBuf = Buffer.from(signature, "hex");
+    if (expectedBuf.length !== receivedBuf.length || !timingSafeEqual(expectedBuf, receivedBuf)) {
       throw new WebhookError("Invalid Paystack webhook signature", {
         provider: this.providerName
       });

package/dist/utils/mapper.js

@@ -76,20 +76,10 @@ var Checkout$inboundSchema = (init, transaction) => {
       type: core.billingModeSchema.optional()
     })
   );
-  if (paykitMeta && typeof paykitMeta === "string") {
-    const parsed = core.parseJSON(
-      paykitMeta,
-      core.Schema.object({
-        item_id: core.Schema.string().optional(),
-        quantity: core.Schema.number().optional(),
-        type: core.billingModeSchema.optional()
-      })
-    );
-    if (parsed) {
-      itemId = parsed.item_id ?? "";
-      quantity = parsed.quantity ?? 1;
-      type = parsed.type ?? null;
-    }
+  if (paykitMeta) {
+    itemId = paykitMeta.item_id ?? "";
+    quantity = paykitMeta.quantity ?? 1;
+    type = paykitMeta.type ?? null;
   }
   let customer = null;
   if (transaction.customer?.email) {

package/dist/utils/mapper.mjs

@@ -74,20 +74,10 @@ var Checkout$inboundSchema = (init, transaction) => {
       type: billingModeSchema.optional()
     })
   );
-  if (paykitMeta && typeof paykitMeta === "string") {
-    const parsed = parseJSON(
-      paykitMeta,
-      Schema.object({
-        item_id: Schema.string().optional(),
-        quantity: Schema.number().optional(),
-        type: billingModeSchema.optional()
-      })
-    );
-    if (parsed) {
-      itemId = parsed.item_id ?? "";
-      quantity = parsed.quantity ?? 1;
-      type = parsed.type ?? null;
-    }
+  if (paykitMeta) {
+    itemId = paykitMeta.item_id ?? "";
+    quantity = paykitMeta.quantity ?? 1;
+    type = paykitMeta.type ?? null;
   }
   let customer = null;
   if (transaction.customer?.email) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paykit-sdk/paystack",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "Paystack provider for PayKit",
   "main": "dist/index.js",
   "module": "dist/index.esm.js",
@@ -11,9 +11,6 @@
   "paykit": {
     "type": "provider"
   },
-  "scripts": {
-    "build": "tsup"
-  },
   "keywords": [
     "paystack",
     "paykit",
@@ -23,13 +20,13 @@
   "author": "Emmanuel Odii",
   "license": "ISC",
   "peerDependencies": {
-    "@paykit-sdk/core": ">=1.2.2"
+    "@paykit-sdk/core": "^1.2.3"
   },
   "devDependencies": {
-    "@paykit-sdk/core": "workspace:*",
     "tsup": "^8.5.0",
     "typescript": "^5.9.2",
-    "zod": "^3.24.2"
+    "zod": "^3.24.2",
+    "@paykit-sdk/core": "1.3.0"
   },
   "publishConfig": {
     "access": "public"
@@ -40,5 +37,10 @@
   },
   "bugs": {
     "url": "https://github.com/usepaykit/paykit-sdk/issues"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run --config ../../vitest.config.ts packages/paystack/src",
+    "typecheck": "tsc --noEmit"
   }
-}
+}