@shopware-ag/app-server-sdk 1.1.29 → 2.0.0

package/dist/commonjs/repository.d.ts

@@ -4,12 +4,35 @@
 export interface ShopInterface {
     getShopId(): string;
     getShopUrl(): string;
+    setShopUrl(url: string): void;
     getShopSecret(): string;
+    setShopSecret(secret: string): void;
+    getPreviousShopSecret(): string | null;
+    setPreviousShopSecret(secret: string | null): void;
+    getPendingShopSecret(): string | null;
+    setPendingShopSecret(secret: string | null): void;
+    getPendingShopUrl(): string | null;
+    setPendingShopUrl(url: string | null): void;
+    getSecretsRotatedAt(): Date | null;
+    setSecretsRotatedAt(rotatedAt: Date | null): void;
     getShopClientId(): string | null;
     getShopClientSecret(): string | null;
     getShopActive(): boolean;
     setShopCredentials(clientId: string, clientSecret: string): void;
     setShopActive(active: boolean): void;
+    /**
+     * Indicates whether at least one registration confirmation has been completed.
+     */
+    isRegistrationConfirmed(): boolean;
+    setRegistrationConfirmed(): void;
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     */
+    setVerifiedWithDoubleSignature(): void;
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     */
+    hasVerifiedWithDoubleSignature(): boolean;
 }
 /**
  * ShopRepositoryInterface is the storage interface for the shops, you should implement this to save the shop data to your database
@@ -28,18 +51,47 @@ export declare class SimpleShop implements ShopInterface {
     private shopId;
     private shopUrl;
     private shopSecret;
+    private previousShopSecret;
+    private pendingShopSecret;
+    private pendingShopUrl;
+    private secretsRotatedAt;
     private shopClientId;
     private shopClientSecret;
     private shopActive;
-    constructor(shopId: string, shopUrl: string, shopSecret: string);
+    private registrationConfirmed;
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     */
+    private verifiedWithDoubleSignature;
+    constructor(shopId: string, shopUrl: string, shopSecret: string, registrationConfirmed?: boolean);
     getShopActive(): boolean;
     setShopActive(active: boolean): void;
     getShopId(): string;
     getShopUrl(): string;
+    setShopUrl(url: string): void;
     getShopSecret(): string;
+    setShopSecret(secret: string): void;
+    getPreviousShopSecret(): string | null;
+    setPreviousShopSecret(secret: string | null): void;
+    getPendingShopSecret(): string | null;
+    setPendingShopSecret(secret: string | null): void;
+    getPendingShopUrl(): string | null;
+    setPendingShopUrl(url: string | null): void;
+    getSecretsRotatedAt(): Date | null;
+    setSecretsRotatedAt(rotatedAt: Date | null): void;
     getShopClientId(): string | null;
     getShopClientSecret(): string | null;
     setShopCredentials(clientId: string, clientSecret: string): void;
+    isRegistrationConfirmed(): boolean;
+    setRegistrationConfirmed(): void;
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     */
+    setVerifiedWithDoubleSignature(): void;
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     */
+    hasVerifiedWithDoubleSignature(): boolean;
 }
 /**
  * InMemoryShopRepository is a simple implementation of the ShopRepositoryInterface, it stores the shop data in memory

package/dist/commonjs/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/repository.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,SAAS,IAAI,MAAM,CAAC;IACpB,UAAU,IAAI,MAAM,CAAC;IACrB,aAAa,IAAI,MAAM,CAAC;IACxB,eAAe,IAAI,MAAM,GAAG,IAAI,CAAC;IACjC,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAAC;IACrC,aAAa,IAAI,OAAO,CAAC;IACzB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB,CACvC,IAAI,SAAS,aAAa,GAAG,aAAa;IAE1C,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAE9C,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,qBAAa,UAAW,YAAW,aAAa;IAC/C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,gBAAgB,CAAgB;IACxC,OAAO,CAAC,UAAU,CAAS;gBAEf,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAQ/D,aAAa,IAAI,OAAO;IAGxB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IAIpC,SAAS,IAAI,MAAM;IAGnB,UAAU,IAAI,MAAM;IAGpB,aAAa,IAAI,MAAM;IAGvB,eAAe,IAAI,MAAM,GAAG,IAAI;IAGhC,mBAAmB,IAAI,MAAM,GAAG,IAAI;IAGpC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;CAIhE;AAED;;GAEG;AACH,qBAAa,sBACZ,YAAW,uBAAuB,CAAC,UAAU,CAAC;IAE9C,OAAO,CAAC,OAAO,CAA0B;;IAMnC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAIlD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAUnD,UAAU,CAAC,IAAI,EAAE,UAAU;IAI3B,UAAU,CAAC,EAAE,EAAE,MAAM;CAG3B"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/repository.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,SAAS,IAAI,MAAM,CAAC;IACpB,UAAU,IAAI,MAAM,CAAC;IACrB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,IAAI,MAAM,CAAC;IACxB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAAC;IACvC,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACnD,oBAAoB,IAAI,MAAM,GAAG,IAAI,CAAC;IACtC,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAClD,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAC5C,mBAAmB,IAAI,IAAI,GAAG,IAAI,CAAC;IACnC,mBAAmB,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAClD,eAAe,IAAI,MAAM,GAAG,IAAI,CAAC;IACjC,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAAC;IACrC,aAAa,IAAI,OAAO,CAAC;IACzB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACrC;;OAEG;IACH,uBAAuB,IAAI,OAAO,CAAC;IACnC,wBAAwB,IAAI,IAAI,CAAC;IAE9B;;OAEG;IACH,8BAA8B,IAAI,IAAI,CAAC;IAEvC;;OAEG;IACH,8BAA8B,IAAI,OAAO,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB,CACvC,IAAI,SAAS,aAAa,GAAG,aAAa;IAE1C,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAE9C,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,qBAAa,UAAW,YAAW,aAAa;IAC/C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,kBAAkB,CAAgB;IAC1C,OAAO,CAAC,iBAAiB,CAAgB;IACzC,OAAO,CAAC,cAAc,CAAgB;IACtC,OAAO,CAAC,gBAAgB,CAAc;IACtC,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,gBAAgB,CAAgB;IACxC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,qBAAqB,CAAU;IACpC;;OAEG;IACN,OAAO,CAAC,2BAA2B,CAAU;gBAG5C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,qBAAqB,UAAQ;IAe9B,aAAa,IAAI,OAAO;IAGxB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI;IAGpC,SAAS,IAAI,MAAM;IAGnB,UAAU,IAAI,MAAM;IAGpB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAG7B,aAAa,IAAI,MAAM;IAGvB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAGnC,qBAAqB,IAAI,MAAM,GAAG,IAAI;IAGtC,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAGlD,oBAAoB,IAAI,MAAM,GAAG,IAAI;IAGrC,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAGjD,iBAAiB,IAAI,MAAM,GAAG,IAAI;IAGlC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAG3C,mBAAmB,IAAI,IAAI,GAAG,IAAI;IAGlC,mBAAmB,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI;IAGjD,eAAe,IAAI,MAAM,GAAG,IAAI;IAGhC,mBAAmB,IAAI,MAAM,GAAG,IAAI;IAGpC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAIhE,uBAAuB,IAAI,OAAO;IAGlC,wBAAwB,IAAI,IAAI;IAG7B;;OAEG;IACH,8BAA8B,IAAI,IAAI;IAGtC;;OAEG;IACH,8BAA8B,IAAI,OAAO;CAG5C;AAED;;GAEG;AACH,qBAAa,sBACZ,YAAW,uBAAuB,CAAC,UAAU,CAAC;IAE9C,OAAO,CAAC,OAAO,CAA0B;;IAMnC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAIlD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAUnD,UAAU,CAAC,IAAI,EAAE,UAAU;IAI3B,UAAU,CAAC,EAAE,EAAE,MAAM;CAG3B"}

package/dist/commonjs/repository.js

@@ -8,15 +8,30 @@ class SimpleShop {
     shopId;
     shopUrl;
     shopSecret;
+    previousShopSecret;
+    pendingShopSecret;
+    pendingShopUrl;
+    secretsRotatedAt;
     shopClientId;
     shopClientSecret;
     shopActive = false;
-    constructor(shopId, shopUrl, shopSecret) {
+    registrationConfirmed;
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     */
+    verifiedWithDoubleSignature;
+    constructor(shopId, shopUrl, shopSecret, registrationConfirmed = false) {
         this.shopId = shopId;
         this.shopUrl = shopUrl;
         this.shopSecret = shopSecret;
+        this.previousShopSecret = null;
+        this.pendingShopSecret = null;
+        this.pendingShopUrl = null;
+        this.secretsRotatedAt = null;
         this.shopClientId = null;
         this.shopClientSecret = null;
+        this.verifiedWithDoubleSignature = false;
+        this.registrationConfirmed = registrationConfirmed;
     }
     getShopActive() {
         return this.shopActive;
@@ -30,9 +45,39 @@ class SimpleShop {
     getShopUrl() {
         return this.shopUrl;
     }
+    setShopUrl(url) {
+        this.shopUrl = url;
+    }
     getShopSecret() {
         return this.shopSecret;
     }
+    setShopSecret(secret) {
+        this.shopSecret = secret;
+    }
+    getPreviousShopSecret() {
+        return this.previousShopSecret;
+    }
+    setPreviousShopSecret(secret) {
+        this.previousShopSecret = secret;
+    }
+    getPendingShopSecret() {
+        return this.pendingShopSecret;
+    }
+    setPendingShopSecret(secret) {
+        this.pendingShopSecret = secret;
+    }
+    getPendingShopUrl() {
+        return this.pendingShopUrl;
+    }
+    setPendingShopUrl(url) {
+        this.pendingShopUrl = url;
+    }
+    getSecretsRotatedAt() {
+        return this.secretsRotatedAt;
+    }
+    setSecretsRotatedAt(rotatedAt) {
+        this.secretsRotatedAt = rotatedAt;
+    }
     getShopClientId() {
         return this.shopClientId;
     }
@@ -43,6 +88,24 @@ class SimpleShop {
         this.shopClientId = clientId;
         this.shopClientSecret = clientSecret;
     }
+    isRegistrationConfirmed() {
+        return this.registrationConfirmed;
+    }
+    setRegistrationConfirmed() {
+        this.registrationConfirmed = true;
+    }
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     */
+    setVerifiedWithDoubleSignature() {
+        this.verifiedWithDoubleSignature = true;
+    }
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     */
+    hasVerifiedWithDoubleSignature() {
+        return this.verifiedWithDoubleSignature;
+    }
 }
 exports.SimpleShop = SimpleShop;
 /**

package/dist/commonjs/repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/repository.ts"],"names":[],"mappings":";;;AA8BA;;GAEG;AACH,MAAa,UAAU;IACd,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,YAAY,CAAgB;IAC5B,gBAAgB,CAAgB;IAChC,UAAU,GAAG,KAAK,CAAC;IAE3B,YAAY,MAAc,EAAE,OAAe,EAAE,UAAkB;QAC9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC9B,CAAC;IAED,aAAa;QACZ,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IACD,aAAa,CAAC,MAAe;QAC5B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,SAAS;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IACD,UAAU;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,aAAa;QACZ,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IACD,eAAe;QACd,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IACD,mBAAmB;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC9B,CAAC;IACD,kBAAkB,CAAC,QAAgB,EAAE,YAAoB;QACxD,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC7B,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC;IACtC,CAAC;CACD;AA1CD,gCA0CC;AAED;;GAEG;AACH,MAAa,sBAAsB;IAG1B,OAAO,CAA0B;IAEzC;QACC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,GAAW,EAAE,MAAc;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAElC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAgB;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;CACD;AA9BD,wDA8BC","sourcesContent":["/**\n * ShopInterface defines the object that given back from the ShopRepository, it should methods to get the shop data and set them\n */\nexport interface ShopInterface {\n\tgetShopId(): string;\n\tgetShopUrl(): string;\n\tgetShopSecret(): string;\n\tgetShopClientId(): string | null;\n\tgetShopClientSecret(): string | null;\n\tgetShopActive(): boolean;\n\tsetShopCredentials(clientId: string, clientSecret: string): void;\n\tsetShopActive(active: boolean): void;\n}\n\n/**\n * ShopRepositoryInterface is the storage interface for the shops, you should implement this to save the shop data to your database\n * For testing cases the InMemoryShopRepository can be used\n */\nexport interface ShopRepositoryInterface<\n\tShop extends ShopInterface = ShopInterface,\n> {\n\tcreateShop(id: string, url: string, secret: string): Promise<void>;\n\n\tgetShopById(id: string): Promise<Shop | null>;\n\n\tupdateShop(shop: Shop): Promise<void>;\n\n\tdeleteShop(id: string): Promise<void>;\n}\n\n/**\n * SimpleShop is a simple implementation of the ShopInterface, it stores the shop data in memory\n */\nexport class SimpleShop implements ShopInterface {\n\tprivate shopId: string;\n\tprivate shopUrl: string;\n\tprivate shopSecret: string;\n\tprivate shopClientId: string | null;\n\tprivate shopClientSecret: string | null;\n\tprivate shopActive = false;\n\n\tconstructor(shopId: string, shopUrl: string, shopSecret: string) {\n\t\tthis.shopId = shopId;\n\t\tthis.shopUrl = shopUrl;\n\t\tthis.shopSecret = shopSecret;\n\t\tthis.shopClientId = null;\n\t\tthis.shopClientSecret = null;\n\t}\n\n\tgetShopActive(): boolean {\n\t\treturn this.shopActive;\n\t}\n\tsetShopActive(active: boolean): void {\n\t\tthis.shopActive = active;\n\t}\n\n\tgetShopId(): string {\n\t\treturn this.shopId;\n\t}\n\tgetShopUrl(): string {\n\t\treturn this.shopUrl;\n\t}\n\tgetShopSecret(): string {\n\t\treturn this.shopSecret;\n\t}\n\tgetShopClientId(): string | null {\n\t\treturn this.shopClientId;\n\t}\n\tgetShopClientSecret(): string | null {\n\t\treturn this.shopClientSecret;\n\t}\n\tsetShopCredentials(clientId: string, clientSecret: string): void {\n\t\tthis.shopClientId = clientId;\n\t\tthis.shopClientSecret = clientSecret;\n\t}\n}\n\n/**\n * InMemoryShopRepository is a simple implementation of the ShopRepositoryInterface, it stores the shop data in memory\n */\nexport class InMemoryShopRepository\n\timplements ShopRepositoryInterface<SimpleShop>\n{\n\tprivate storage: Map<string, SimpleShop>;\n\n\tconstructor() {\n\t\tthis.storage = new Map<string, SimpleShop>();\n\t}\n\n\tasync createShop(id: string, url: string, secret: string) {\n\t\tthis.storage.set(id, new SimpleShop(id, url, secret));\n\t}\n\n\tasync getShopById(id: string): Promise<SimpleShop | null> {\n\t\tconst shop = this.storage.get(id);\n\n\t\tif (shop === undefined) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn shop;\n\t}\n\n\tasync updateShop(shop: SimpleShop) {\n\t\tthis.storage.set(shop.getShopId(), shop);\n\t}\n\n\tasync deleteShop(id: string) {\n\t\tthis.storage.delete(id);\n\t}\n}\n"]}
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/repository.ts"],"names":[],"mappings":";;;AAuDA;;GAEG;AACH,MAAa,UAAU;IACd,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,kBAAkB,CAAgB;IAClC,iBAAiB,CAAgB;IACjC,cAAc,CAAgB;IAC9B,gBAAgB,CAAc;IAC9B,YAAY,CAAgB;IAC5B,gBAAgB,CAAgB;IAChC,UAAU,GAAG,KAAK,CAAC;IACnB,qBAAqB,CAAU;IACpC;;OAEG;IACE,2BAA2B,CAAU;IAE7C,YACC,MAAc,EACd,OAAe,EACf,UAAkB,EAClB,qBAAqB,GAAG,KAAK;QAE7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,2BAA2B,GAAG,KAAK,CAAC;QAC/C,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;IACpD,CAAC;IAED,aAAa;QACZ,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IACD,aAAa,CAAC,MAAe;QAC5B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;IAC1B,CAAC;IACD,SAAS;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IACD,UAAU;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,UAAU,CAAC,GAAW;QACrB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;IACpB,CAAC;IACD,aAAa;QACZ,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IACD,aAAa,CAAC,MAAc;QAC3B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;IAC1B,CAAC;IACD,qBAAqB;QACpB,OAAO,IAAI,CAAC,kBAAkB,CAAC;IAChC,CAAC;IACD,qBAAqB,CAAC,MAAqB;QAC1C,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC;IAClC,CAAC;IACD,oBAAoB;QACnB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAC/B,CAAC;IACD,oBAAoB,CAAC,MAAqB;QACzC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC;IACjC,CAAC;IACD,iBAAiB;QAChB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC5B,CAAC;IACD,iBAAiB,CAAC,GAAkB;QACnC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC;IAC3B,CAAC;IACD,mBAAmB;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC9B,CAAC;IACD,mBAAmB,CAAC,SAAsB;QACzC,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACnC,CAAC;IACD,eAAe;QACd,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IACD,mBAAmB;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC9B,CAAC;IACD,kBAAkB,CAAC,QAAgB,EAAE,YAAoB;QACxD,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC7B,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC;IACtC,CAAC;IACD,uBAAuB;QACtB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACnC,CAAC;IACD,wBAAwB;QACvB,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;IACnC,CAAC;IACE;;OAEG;IACH,8BAA8B;QAC1B,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAC5C,CAAC;IACD;;OAEG;IACH,8BAA8B;QAC1B,OAAO,IAAI,CAAC,2BAA2B,CAAC;IAC5C,CAAC;CACJ;AA7GD,gCA6GC;AAED;;GAEG;AACH,MAAa,sBAAsB;IAG1B,OAAO,CAA0B;IAEzC;QACC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,GAAW,EAAE,MAAc;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAElC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAgB;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;CACD;AA9BD,wDA8BC","sourcesContent":["/**\n * ShopInterface defines the object that given back from the ShopRepository, it should methods to get the shop data and set them\n */\nexport interface ShopInterface {\n\tgetShopId(): string;\n\tgetShopUrl(): string;\n\tsetShopUrl(url: string): void;\n\tgetShopSecret(): string;\n\tsetShopSecret(secret: string): void;\n\tgetPreviousShopSecret(): string | null;\n\tsetPreviousShopSecret(secret: string | null): void;\n\tgetPendingShopSecret(): string | null;\n\tsetPendingShopSecret(secret: string | null): void;\n\tgetPendingShopUrl(): string | null;\n\tsetPendingShopUrl(url: string | null): void;\n\tgetSecretsRotatedAt(): Date | null;\n\tsetSecretsRotatedAt(rotatedAt: Date | null): void;\n\tgetShopClientId(): string | null;\n\tgetShopClientSecret(): string | null;\n\tgetShopActive(): boolean;\n\tsetShopCredentials(clientId: string, clientSecret: string): void;\n\tsetShopActive(active: boolean): void;\n\t/**\n\t * Indicates whether at least one registration confirmation has been completed.\n\t */\n\tisRegistrationConfirmed(): boolean;\n\tsetRegistrationConfirmed(): void;\n\n    /**\n     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.\n     */\n    setVerifiedWithDoubleSignature(): void;\n\n    /**\n     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.\n     */\n    hasVerifiedWithDoubleSignature(): boolean;\n}\n\n/**\n * ShopRepositoryInterface is the storage interface for the shops, you should implement this to save the shop data to your database\n * For testing cases the InMemoryShopRepository can be used\n */\nexport interface ShopRepositoryInterface<\n\tShop extends ShopInterface = ShopInterface,\n> {\n\tcreateShop(id: string, url: string, secret: string): Promise<void>;\n\n\tgetShopById(id: string): Promise<Shop | null>;\n\n\tupdateShop(shop: Shop): Promise<void>;\n\n\tdeleteShop(id: string): Promise<void>;\n}\n\n/**\n * SimpleShop is a simple implementation of the ShopInterface, it stores the shop data in memory\n */\nexport class SimpleShop implements ShopInterface {\n\tprivate shopId: string;\n\tprivate shopUrl: string;\n\tprivate shopSecret: string;\n\tprivate previousShopSecret: string | null;\n\tprivate pendingShopSecret: string | null;\n\tprivate pendingShopUrl: string | null;\n\tprivate secretsRotatedAt: Date | null;\n\tprivate shopClientId: string | null;\n\tprivate shopClientSecret: string | null;\n\tprivate shopActive = false;\n\tprivate registrationConfirmed: boolean;\n    /**\n     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.\n     */\n\tprivate verifiedWithDoubleSignature: boolean;\n\n\tconstructor(\n\t\tshopId: string,\n\t\tshopUrl: string,\n\t\tshopSecret: string,\n\t\tregistrationConfirmed = false,\n\t) {\n\t\tthis.shopId = shopId;\n\t\tthis.shopUrl = shopUrl;\n\t\tthis.shopSecret = shopSecret;\n\t\tthis.previousShopSecret = null;\n\t\tthis.pendingShopSecret = null;\n\t\tthis.pendingShopUrl = null;\n\t\tthis.secretsRotatedAt = null;\n\t\tthis.shopClientId = null;\n\t\tthis.shopClientSecret = null;\n        this.verifiedWithDoubleSignature = false;\n\t\tthis.registrationConfirmed = registrationConfirmed;\n\t}\n\n\tgetShopActive(): boolean {\n\t\treturn this.shopActive;\n\t}\n\tsetShopActive(active: boolean): void {\n\t\tthis.shopActive = active;\n\t}\n\tgetShopId(): string {\n\t\treturn this.shopId;\n\t}\n\tgetShopUrl(): string {\n\t\treturn this.shopUrl;\n\t}\n\tsetShopUrl(url: string): void {\n\t\tthis.shopUrl = url;\n\t}\n\tgetShopSecret(): string {\n\t\treturn this.shopSecret;\n\t}\n\tsetShopSecret(secret: string): void {\n\t\tthis.shopSecret = secret;\n\t}\n\tgetPreviousShopSecret(): string | null {\n\t\treturn this.previousShopSecret;\n\t}\n\tsetPreviousShopSecret(secret: string | null): void {\n\t\tthis.previousShopSecret = secret;\n\t}\n\tgetPendingShopSecret(): string | null {\n\t\treturn this.pendingShopSecret;\n\t}\n\tsetPendingShopSecret(secret: string | null): void {\n\t\tthis.pendingShopSecret = secret;\n\t}\n\tgetPendingShopUrl(): string | null {\n\t\treturn this.pendingShopUrl;\n\t}\n\tsetPendingShopUrl(url: string | null): void {\n\t\tthis.pendingShopUrl = url;\n\t}\n\tgetSecretsRotatedAt(): Date | null {\n\t\treturn this.secretsRotatedAt;\n\t}\n\tsetSecretsRotatedAt(rotatedAt: Date | null): void {\n\t\tthis.secretsRotatedAt = rotatedAt;\n\t}\n\tgetShopClientId(): string | null {\n\t\treturn this.shopClientId;\n\t}\n\tgetShopClientSecret(): string | null {\n\t\treturn this.shopClientSecret;\n\t}\n\tsetShopCredentials(clientId: string, clientSecret: string): void {\n\t\tthis.shopClientId = clientId;\n\t\tthis.shopClientSecret = clientSecret;\n\t}\n\tisRegistrationConfirmed(): boolean {\n\t\treturn this.registrationConfirmed;\n\t}\n\tsetRegistrationConfirmed(): void {\n\t\tthis.registrationConfirmed = true;\n\t}\n    /**\n     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.\n     */\n    setVerifiedWithDoubleSignature(): void {\n        this.verifiedWithDoubleSignature = true;\n    }\n    /**\n     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.\n     */\n    hasVerifiedWithDoubleSignature(): boolean {\n        return this.verifiedWithDoubleSignature;\n    }\n}\n\n/**\n * InMemoryShopRepository is a simple implementation of the ShopRepositoryInterface, it stores the shop data in memory\n */\nexport class InMemoryShopRepository\n\timplements ShopRepositoryInterface<SimpleShop>\n{\n\tprivate storage: Map<string, SimpleShop>;\n\n\tconstructor() {\n\t\tthis.storage = new Map<string, SimpleShop>();\n\t}\n\n\tasync createShop(id: string, url: string, secret: string) {\n\t\tthis.storage.set(id, new SimpleShop(id, url, secret));\n\t}\n\n\tasync getShopById(id: string): Promise<SimpleShop | null> {\n\t\tconst shop = this.storage.get(id);\n\n\t\tif (shop === undefined) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn shop;\n\t}\n\n\tasync updateShop(shop: SimpleShop) {\n\t\tthis.storage.set(shop.getShopId(), shop);\n\t}\n\n\tasync deleteShop(id: string) {\n\t\tthis.storage.delete(id);\n\t}\n}\n"]}

package/dist/esm/app.d.ts

@@ -1,4 +1,5 @@
 import { ContextResolver } from "./context-resolver.js";
+import { DualSignatureVerifier } from "./dual-signature-verifier.js";
 import { Hooks } from "./hooks.js";
 import { HttpClientTokenCacheInterface } from "./http-client.js";
 import { Registration } from "./registration.js";
@@ -14,10 +15,11 @@ export declare class AppServer<Shop extends ShopInterface = ShopInterface> {
     registration: Registration<Shop>;
     contextResolver: ContextResolver<Shop>;
     signer: WebCryptoHmacSigner;
+    requestVerifier: DualSignatureVerifier<Shop>;
     hooks: Hooks<Shop>;
     constructor(cfg: Configuration, repository: ShopRepositoryInterface<Shop>, httpClientTokenCache?: HttpClientTokenCacheInterface);
 }
-interface Configuration {
+export interface Configuration {
     /**
      * Your app name
      */
@@ -30,6 +32,10 @@ interface Configuration {
      * URL to authorize callback url
      */
     authorizeCallbackUrl: string;
+    /**
+     * When true, registration requires both app and shop signatures during re-registration and confirmation.
+     * Defaults to false.
+     */
+    enforceDoubleSignature?: boolean;
 }
-export {};
 //# sourceMappingURL=app.d.ts.map

package/dist/esm/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,6BAA6B,EAAgC,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;;GAEG;AACH,qBAAa,SAAS,CAAC,IAAI,SAAS,aAAa,GAAG,aAAa;IAOxD,GAAG,EAAE,aAAa;IAClB,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC;IACzC,oBAAoB,EAAE,6BAA6B;IARpD,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAGlB,GAAG,EAAE,aAAa,EAClB,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC,EACzC,oBAAoB,GAAE,6BAAkE;CAOhG;AAED,UAAU,aAAa;IACtB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;CAC7B"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,6BAA6B,EAAgC,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;;GAEG;AACH,qBAAa,SAAS,CAAC,IAAI,SAAS,aAAa,GAAG,aAAa;IAQxD,GAAG,EAAE,aAAa;IAClB,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC;IACzC,oBAAoB,EAAE,6BAA6B;IATpD,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,eAAe,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAGlB,GAAG,EAAE,aAAa,EAClB,UAAU,EAAE,uBAAuB,CAAC,IAAI,CAAC,EACzC,oBAAoB,GAAE,6BAAkE;CAQhG;AAED,MAAM,WAAW,aAAa;IAC7B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACjC"}

package/dist/esm/app.js

@@ -1,4 +1,5 @@
 import { ContextResolver } from "./context-resolver.js";
+import { DualSignatureVerifier } from "./dual-signature-verifier.js";
 import { Hooks } from "./hooks.js";
 import { InMemoryHttpClientTokenCache } from "./http-client.js";
 import { Registration } from "./registration.js";
@@ -13,6 +14,7 @@ export class AppServer {
     registration;
     contextResolver;
     signer;
+    requestVerifier;
     hooks;
     constructor(cfg, repository, httpClientTokenCache = new InMemoryHttpClientTokenCache()) {
         this.cfg = cfg;
@@ -21,6 +23,7 @@ export class AppServer {
         this.registration = new Registration(this);
         this.contextResolver = new ContextResolver(this, httpClientTokenCache);
         this.signer = new WebCryptoHmacSigner();
+        this.requestVerifier = new DualSignatureVerifier(this.signer);
         this.hooks = new Hooks();
     }
 }

package/dist/esm/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAiC,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;;GAEG;AACH,MAAM,OAAO,SAAS;IAOb;IACA;IACA;IARD,YAAY,CAAqB;IACjC,eAAe,CAAwB;IACvC,MAAM,CAAsB;IAC5B,KAAK,CAAc;IAE1B,YACQ,GAAkB,EAClB,UAAyC,EACzC,uBAAsD,IAAI,4BAA4B,EAAE;QAFxF,QAAG,GAAH,GAAG,CAAe;QAClB,eAAU,GAAV,UAAU,CAA+B;QACzC,yBAAoB,GAApB,oBAAoB,CAAoE;QAE/F,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAO,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAO,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,EAAQ,CAAC;IAChC,CAAC;CACD","sourcesContent":["import { ContextResolver } from \"./context-resolver.js\";\nimport { Hooks } from \"./hooks.js\";\nimport { HttpClientTokenCacheInterface, InMemoryHttpClientTokenCache } from \"./http-client.js\";\nimport { Registration } from \"./registration.js\";\nimport type { ShopInterface, ShopRepositoryInterface } from \"./repository.js\";\nimport { WebCryptoHmacSigner } from \"./signer.js\";\n\n/**\n * AppServer is the main class, this is where you start your app\n */\nexport class AppServer<Shop extends ShopInterface = ShopInterface> {\n\tpublic registration: Registration<Shop>;\n\tpublic contextResolver: ContextResolver<Shop>;\n\tpublic signer: WebCryptoHmacSigner;\n\tpublic hooks: Hooks<Shop>;\n\n\tconstructor(\n\t\tpublic cfg: Configuration,\n\t\tpublic repository: ShopRepositoryInterface<Shop>,\n\t\tpublic httpClientTokenCache: HttpClientTokenCacheInterface = new InMemoryHttpClientTokenCache()\n\t) {\n\t\tthis.registration = new Registration<Shop>(this);\n\t\tthis.contextResolver = new ContextResolver<Shop>(this, httpClientTokenCache);\n\t\tthis.signer = new WebCryptoHmacSigner();\n\t\tthis.hooks = new Hooks<Shop>();\n\t}\n}\n\ninterface Configuration {\n\t/**\n\t * Your app name\n\t */\n\tappName: string;\n\n\t/**\n\t * Your app secret\n\t */\n\tappSecret: string;\n\n\t/**\n\t * URL to authorize callback url\n\t */\n\tauthorizeCallbackUrl: string;\n}\n"]}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAiC,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;;GAEG;AACH,MAAM,OAAO,SAAS;IAQb;IACA;IACA;IATD,YAAY,CAAqB;IACjC,eAAe,CAAwB;IACvC,MAAM,CAAsB;IAC5B,eAAe,CAA8B;IAC7C,KAAK,CAAc;IAE1B,YACQ,GAAkB,EAClB,UAAyC,EACzC,uBAAsD,IAAI,4BAA4B,EAAE;QAFxF,QAAG,GAAH,GAAG,CAAe;QAClB,eAAU,GAAV,UAAU,CAA+B;QACzC,yBAAoB,GAApB,oBAAoB,CAAoE;QAE/F,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAO,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAO,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,IAAI,qBAAqB,CAAO,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,EAAQ,CAAC;IAChC,CAAC;CACD","sourcesContent":["import { ContextResolver } from \"./context-resolver.js\";\nimport { DualSignatureVerifier } from \"./dual-signature-verifier.js\";\nimport { Hooks } from \"./hooks.js\";\nimport { HttpClientTokenCacheInterface, InMemoryHttpClientTokenCache } from \"./http-client.js\";\nimport { Registration } from \"./registration.js\";\nimport type { ShopInterface, ShopRepositoryInterface } from \"./repository.js\";\nimport { WebCryptoHmacSigner } from \"./signer.js\";\n\n/**\n * AppServer is the main class, this is where you start your app\n */\nexport class AppServer<Shop extends ShopInterface = ShopInterface> {\n\tpublic registration: Registration<Shop>;\n\tpublic contextResolver: ContextResolver<Shop>;\n\tpublic signer: WebCryptoHmacSigner;\n\tpublic requestVerifier: DualSignatureVerifier<Shop>;\n\tpublic hooks: Hooks<Shop>;\n\n\tconstructor(\n\t\tpublic cfg: Configuration,\n\t\tpublic repository: ShopRepositoryInterface<Shop>,\n\t\tpublic httpClientTokenCache: HttpClientTokenCacheInterface = new InMemoryHttpClientTokenCache()\n\t) {\n\t\tthis.registration = new Registration<Shop>(this);\n\t\tthis.contextResolver = new ContextResolver<Shop>(this, httpClientTokenCache);\n\t\tthis.signer = new WebCryptoHmacSigner();\n\t\tthis.requestVerifier = new DualSignatureVerifier<Shop>(this.signer);\n\t\tthis.hooks = new Hooks<Shop>();\n\t}\n}\n\nexport interface Configuration {\n\t/**\n\t * Your app name\n\t */\n\tappName: string;\n\n\t/**\n\t * Your app secret\n\t */\n\tappSecret: string;\n\n\t/**\n\t * URL to authorize callback url\n\t */\n\tauthorizeCallbackUrl: string;\n\n\t/**\n\t * When true, registration requires both app and shop signatures during re-registration and confirmation.\n\t * Defaults to false.\n\t */\n\tenforceDoubleSignature?: boolean;\n}\n"]}

package/dist/esm/context-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-resolver.d.ts","sourceRoot":"","sources":["../../src/context-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,KAAK,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD;;;GAGG;AACH,qBAAa,eAAe,CAAC,IAAI,SAAS,aAAa,GAAG,aAAa;IAC1D,OAAO,CAAC,GAAG;IAAmB,OAAO,CAAC,oBAAoB;gBAAlD,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,EAAU,oBAAoB,EAAE,6BAA6B;IAErG;;OAEG;IACU,OAAO,CAAC,OAAO,GAAG,OAAO,EACrC,GAAG,EAAE,OAAO,GACV,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IA0ClC;;;OAGG;IACU,WAAW,CAAC,OAAO,GAAG,OAAO,EACzC,GAAG,EAAE,OAAO,GACV,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;CA6BlC;AAED;;GAEG;AACH,qBAAa,OAAO,CACnB,IAAI,SAAS,aAAa,GAAG,aAAa,EAC1C,OAAO,GAAG,OAAO;IAGT,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,UAAU;gBAFtB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,UAAU;CAE9B"}
+{"version":3,"file":"context-resolver.d.ts","sourceRoot":"","sources":["../../src/context-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,KAAK,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD;;;GAGG;AACH,qBAAa,eAAe,CAAC,IAAI,SAAS,aAAa,GAAG,aAAa;IAC1D,OAAO,CAAC,GAAG;IAAmB,OAAO,CAAC,oBAAoB;gBAAlD,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,EAAU,oBAAoB,EAAE,6BAA6B;IAErG;;OAEG;IACU,OAAO,CAAC,OAAO,GAAG,OAAO,EACrC,GAAG,EAAE,OAAO,GACV,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IA4BlC;;;OAGG;IACU,WAAW,CAAC,OAAO,GAAG,OAAO,EACzC,GAAG,EAAE,OAAO,GACV,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;CA6BlC;AAED;;GAEG;AACH,qBAAa,OAAO,CACnB,IAAI,SAAS,aAAa,GAAG,aAAa,EAC1C,OAAO,GAAG,OAAO;IAGT,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,UAAU;gBAFtB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,UAAU;CAE9B"}

package/dist/esm/context-resolver.js

@@ -24,13 +24,7 @@ export class ContextResolver {
         if (shop === null) {
             throw new Error(`Cannot find shop by id ${webHookBody.source.shopId}`);
         }
-        const signature = req.headers.get("shopware-shop-signature");
-        if (signature === null) {
-            throw new Error("Missing shopware-shop-signature header");
-        }
-        if (!(await this.app.signer.verify(signature, webHookContent, shop.getShopSecret()))) {
-            throw new Error("Invalid signature");
-        }
+        await this.app.requestVerifier.authenticatePostRequest(req, webHookContent, shop);
         return new Context(shop, webHookBody, new HttpClient(shop, this.httpClientTokenCache));
     }
     /**
@@ -47,7 +41,7 @@ export class ContextResolver {
         if (shop === null) {
             throw new Error(`Cannot find shop by id ${shopId}`);
         }
-        await this.app.signer.verifyGetRequest(req, shop.getShopSecret());
+        await this.app.requestVerifier.authenticateGetRequest(req, shop);
         const paramsObject = {};
         url.searchParams.forEach((value, key) => {
             paramsObject[key] = value;

package/dist/esm/context-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-resolver.js","sourceRoot":"","sources":["../../src/context-resolver.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAsC,MAAM,kBAAkB,CAAC;AAGlF;;;GAGG;AACH,MAAM,OAAO,eAAe;IACP;IAA8B;IAAlD,YAAoB,GAAoB,EAAU,oBAAmD;QAAjF,QAAG,GAAH,GAAG,CAAiB;QAAU,yBAAoB,GAApB,oBAAoB,CAA+B;IAAG,CAAC;IAEzG;;OAEG;IACI,KAAK,CAAC,OAAO,CACnB,GAAY;QAEZ,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAE/C,IACC,WAAW,CAAC,MAAM,KAAK,SAAS;YAChC,WAAW,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EACtC,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CACjD,WAAW,CAAC,MAAM,CAAC,MAAM,CACzB,CAAC;QAEF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,0BAA0B,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAE7D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,IACC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAC7B,SAAS,EACT,cAAc,EACd,IAAI,CAAC,aAAa,EAAE,CACpB,CAAC,EACD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,IAAI,OAAO,CACjB,IAAY,EACZ,WAAW,EACX,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAC/C,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,WAAW,CACvB,GAAY;QAEZ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE3D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAElE,MAAM,YAAY,GAA2B,EAAE,CAAC;QAEhD,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvC,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CACjB,IAAY,EACZ,YAAuB,EACvB,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAC/C,CAAC;IACH,CAAC;CACD;AAED;;GAEG;AACH,MAAM,OAAO,OAAO;IAKX;IACA;IACA;IAHR,YACQ,IAAU,EACV,OAAgB,EAChB,UAAsB;QAFtB,SAAI,GAAJ,IAAI,CAAM;QACV,YAAO,GAAP,OAAO,CAAS;QAChB,eAAU,GAAV,UAAU,CAAY;IAC3B,CAAC;CACJ","sourcesContent":["import type { AppServer } from \"./app.js\";\nimport { HttpClient, type HttpClientTokenCacheInterface } from \"./http-client.js\";\nimport type { ShopInterface } from \"./repository.js\";\n\n/**\n * ContextResolver is a helper class to create a Context object from a request.\n * The context contains the shop, the payload and an instance of the HttpClient\n */\nexport class ContextResolver<Shop extends ShopInterface = ShopInterface> {\n\tconstructor(private app: AppServer<Shop>, private httpClientTokenCache: HttpClientTokenCacheInterface) {}\n\n\t/**\n\t * Create a context from a request body\n\t */\n\tpublic async fromAPI<Payload = unknown>(\n\t\treq: Request,\n\t): Promise<Context<Shop, Payload>> {\n\t\tconst webHookContent = await req.text();\n\t\tconst webHookBody = JSON.parse(webHookContent);\n\n\t\tif (\n\t\t\twebHookBody.source === undefined ||\n\t\t\twebHookBody.source.shopId === undefined\n\t\t) {\n\t\t\tthrow new Error(\"Invalid request\");\n\t\t}\n\n\t\tconst shop = await this.app.repository.getShopById(\n\t\t\twebHookBody.source.shopId,\n\t\t);\n\n\t\tif (shop === null) {\n\t\t\tthrow new Error(`Cannot find shop by id ${webHookBody.source.shopId}`);\n\t\t}\n\n\t\tconst signature = req.headers.get(\"shopware-shop-signature\");\n\n\t\tif (signature === null) {\n\t\t\tthrow new Error(\"Missing shopware-shop-signature header\");\n\t\t}\n\n\t\tif (\n\t\t\t!(await this.app.signer.verify(\n\t\t\t\tsignature,\n\t\t\t\twebHookContent,\n\t\t\t\tshop.getShopSecret(),\n\t\t\t))\n\t\t) {\n\t\t\tthrow new Error(\"Invalid signature\");\n\t\t}\n\n\t\treturn new Context<Shop, Payload>(\n\t\t\tshop as Shop,\n\t\t\twebHookBody,\n\t\t\tnew HttpClient(shop, this.httpClientTokenCache),\n\t\t);\n\t}\n\n\t/**\n\t * Create a context from a request query parameters\n\t * This is usually a module request from the shopware admin\n\t */\n\tpublic async fromBrowser<Payload = unknown>(\n\t\treq: Request,\n\t): Promise<Context<Shop, Payload>> {\n\t\tconst url = new URL(req.url);\n\n\t\tconst shopId = url.searchParams.get(\"shop-id\");\n\n\t\tif (shopId === null) {\n\t\t\tthrow new Error(\"Missing shop-id query parameter\");\n\t\t}\n\n\t\tconst shop = await this.app.repository.getShopById(shopId);\n\n\t\tif (shop === null) {\n\t\t\tthrow new Error(`Cannot find shop by id ${shopId}`);\n\t\t}\n\n\t\tawait this.app.signer.verifyGetRequest(req, shop.getShopSecret());\n\n\t\tconst paramsObject: Record<string, string> = {};\n\n\t\turl.searchParams.forEach((value, key) => {\n\t\t\tparamsObject[key] = value;\n\t\t});\n\n\t\treturn new Context<Shop, Payload>(\n\t\t\tshop as Shop,\n\t\t\tparamsObject as Payload,\n\t\t\tnew HttpClient(shop, this.httpClientTokenCache),\n\t\t);\n\t}\n}\n\n/**\n * Context is the parsed data from the request\n */\nexport class Context<\n\tShop extends ShopInterface = ShopInterface,\n\tPayload = unknown,\n> {\n\tconstructor(\n\t\tpublic shop: Shop,\n\t\tpublic payload: Payload,\n\t\tpublic httpClient: HttpClient,\n\t) {}\n}\n"]}
+{"version":3,"file":"context-resolver.js","sourceRoot":"","sources":["../../src/context-resolver.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAsC,MAAM,kBAAkB,CAAC;AAGlF;;;GAGG;AACH,MAAM,OAAO,eAAe;IACP;IAA8B;IAAlD,YAAoB,GAAoB,EAAU,oBAAmD;QAAjF,QAAG,GAAH,GAAG,CAAiB;QAAU,yBAAoB,GAApB,oBAAoB,CAA+B;IAAG,CAAC;IAEzG;;OAEG;IACI,KAAK,CAAC,OAAO,CACnB,GAAY;QAEZ,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAE/C,IACC,WAAW,CAAC,MAAM,KAAK,SAAS;YAChC,WAAW,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,EACtC,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CACjD,WAAW,CAAC,MAAM,CAAC,MAAM,CACzB,CAAC;QAEF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,0BAA0B,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,uBAAuB,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;QAElF,OAAO,IAAI,OAAO,CACjB,IAAY,EACZ,WAAW,EACX,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAC/C,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,WAAW,CACvB,GAAY;QAEZ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE3D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEjE,MAAM,YAAY,GAA2B,EAAE,CAAC;QAEhD,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvC,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CACjB,IAAY,EACZ,YAAuB,EACvB,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAC/C,CAAC;IACH,CAAC;CACD;AAED;;GAEG;AACH,MAAM,OAAO,OAAO;IAKX;IACA;IACA;IAHR,YACQ,IAAU,EACV,OAAgB,EAChB,UAAsB;QAFtB,SAAI,GAAJ,IAAI,CAAM;QACV,YAAO,GAAP,OAAO,CAAS;QAChB,eAAU,GAAV,UAAU,CAAY;IAC3B,CAAC;CACJ","sourcesContent":["import type { AppServer } from \"./app.js\";\nimport { HttpClient, type HttpClientTokenCacheInterface } from \"./http-client.js\";\nimport type { ShopInterface } from \"./repository.js\";\n\n/**\n * ContextResolver is a helper class to create a Context object from a request.\n * The context contains the shop, the payload and an instance of the HttpClient\n */\nexport class ContextResolver<Shop extends ShopInterface = ShopInterface> {\n\tconstructor(private app: AppServer<Shop>, private httpClientTokenCache: HttpClientTokenCacheInterface) {}\n\n\t/**\n\t * Create a context from a request body\n\t */\n\tpublic async fromAPI<Payload = unknown>(\n\t\treq: Request,\n\t): Promise<Context<Shop, Payload>> {\n\t\tconst webHookContent = await req.text();\n\t\tconst webHookBody = JSON.parse(webHookContent);\n\n\t\tif (\n\t\t\twebHookBody.source === undefined ||\n\t\t\twebHookBody.source.shopId === undefined\n\t\t) {\n\t\t\tthrow new Error(\"Invalid request\");\n\t\t}\n\n\t\tconst shop = await this.app.repository.getShopById(\n\t\t\twebHookBody.source.shopId,\n\t\t);\n\n\t\tif (shop === null) {\n\t\t\tthrow new Error(`Cannot find shop by id ${webHookBody.source.shopId}`);\n\t\t}\n\n\t\tawait this.app.requestVerifier.authenticatePostRequest(req, webHookContent, shop);\n\n\t\treturn new Context<Shop, Payload>(\n\t\t\tshop as Shop,\n\t\t\twebHookBody,\n\t\t\tnew HttpClient(shop, this.httpClientTokenCache),\n\t\t);\n\t}\n\n\t/**\n\t * Create a context from a request query parameters\n\t * This is usually a module request from the shopware admin\n\t */\n\tpublic async fromBrowser<Payload = unknown>(\n\t\treq: Request,\n\t): Promise<Context<Shop, Payload>> {\n\t\tconst url = new URL(req.url);\n\n\t\tconst shopId = url.searchParams.get(\"shop-id\");\n\n\t\tif (shopId === null) {\n\t\t\tthrow new Error(\"Missing shop-id query parameter\");\n\t\t}\n\n\t\tconst shop = await this.app.repository.getShopById(shopId);\n\n\t\tif (shop === null) {\n\t\t\tthrow new Error(`Cannot find shop by id ${shopId}`);\n\t\t}\n\n\t\tawait this.app.requestVerifier.authenticateGetRequest(req, shop);\n\n\t\tconst paramsObject: Record<string, string> = {};\n\n\t\turl.searchParams.forEach((value, key) => {\n\t\t\tparamsObject[key] = value;\n\t\t});\n\n\t\treturn new Context<Shop, Payload>(\n\t\t\tshop as Shop,\n\t\t\tparamsObject as Payload,\n\t\t\tnew HttpClient(shop, this.httpClientTokenCache),\n\t\t);\n\t}\n}\n\n/**\n * Context is the parsed data from the request\n */\nexport class Context<\n\tShop extends ShopInterface = ShopInterface,\n\tPayload = unknown,\n> {\n\tconstructor(\n\t\tpublic shop: Shop,\n\t\tpublic payload: Payload,\n\t\tpublic httpClient: HttpClient,\n\t) {}\n}\n"]}

package/dist/esm/dual-signature-verifier.d.ts

@@ -0,0 +1,31 @@
+import type { ShopInterface } from "./repository.js";
+import { WebCryptoHmacSigner } from "./signer.js";
+export interface DualSignatureConfiguration {
+    appSecret: string;
+    enforceDoubleSignature: boolean;
+}
+export declare class DualSignatureVerifier<Shop extends ShopInterface = ShopInterface> {
+    private readonly signer;
+    private readonly now;
+    constructor(signer: WebCryptoHmacSigner, now?: () => Date);
+    authenticateRegistrationRequest(req: Request, cfg: DualSignatureConfiguration, shop: Shop | null): Promise<void>;
+    authenticateRegistrationConfirmation(req: Request, body: string, shop: Shop, cfg: DualSignatureConfiguration): Promise<void>;
+    authenticatePostRequest(req: Request, body: string, shop: Shop): Promise<void>;
+    authenticateGetRequest(req: Request, shop: Shop): Promise<void>;
+    private verifyRegistrationAppSignature;
+    private verifyRegistrationShopSignature;
+    private verifyPostSignature;
+    private getRegistrationSignatureMessage;
+    private tryAuthenticateWithPreviousSecret;
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     *
+     * 1. If the shop has previously verified with a double signature, it must always do so
+     * 2. If the shop is sending a double signature, then we should also verify it
+     * 3. If the app is configured to enforce double signature, then we should force it
+     */
+    private shouldEnforceDoubleSignature;
+    private shouldEnforceDoubleSignatureForRegister;
+    private shouldEnforceDoubleSignatureForRegisterConfirm;
+}
+//# sourceMappingURL=dual-signature-verifier.d.ts.map

package/dist/esm/dual-signature-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dual-signature-verifier.d.ts","sourceRoot":"","sources":["../../src/dual-signature-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAOlD,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,OAAO,CAAC;CAChC;AAED,qBAAa,qBAAqB,CAAC,IAAI,SAAS,aAAa,GAAG,aAAa;IAE3E,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,MAAM,EAAE,mBAAmB,EAC3B,GAAG,GAAE,MAAM,IAAuB;IAGvC,+BAA+B,CAC3C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,0BAA0B,EAC/B,IAAI,EAAE,IAAI,GAAG,IAAI,GACf,OAAO,CAAC,IAAI,CAAC;IAgBH,oCAAoC,CAChD,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,0BAA0B,GAC7B,OAAO,CAAC,IAAI,CAAC;IAkBH,uBAAuB,CACnC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,IAAI,GACR,OAAO,CAAC,IAAI,CAAC;IAcH,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAc9D,8BAA8B;YAe9B,+BAA+B;YAe/B,mBAAmB;IAmBjC,OAAO,CAAC,+BAA+B;YAazB,iCAAiC;IAqB/C;;;;;;OAMG;IACH,OAAO,CAAC,4BAA4B;IAKpC,OAAO,CAAC,uCAAuC;IAK/C,OAAO,CAAC,8CAA8C;CAItD"}

package/dist/esm/dual-signature-verifier.js

@@ -0,0 +1,132 @@
+const SHOPWARE_SHOP_SIGNATURE_HEADER = "shopware-shop-signature";
+const SHOPWARE_SHOP_SIGNATURE_PREVIOUS_HEADER = "shopware-shop-signature-previous";
+const SHOPWARE_APP_SIGNATURE_HEADER = "shopware-app-signature";
+const INFLIGHT_ALLOWANCE_MS = 60_000;
+export class DualSignatureVerifier {
+    signer;
+    now;
+    constructor(signer, now = () => new Date()) {
+        this.signer = signer;
+        this.now = now;
+    }
+    async authenticateRegistrationRequest(req, cfg, shop) {
+        try {
+            await this.verifyRegistrationAppSignature(req, cfg.appSecret);
+        }
+        catch (error) {
+            throw new Error("invalid-app-signature", { cause: error });
+        }
+        if (shop?.isRegistrationConfirmed() && this.shouldEnforceDoubleSignatureForRegister(cfg, shop, req)) {
+            try {
+                await this.verifyRegistrationShopSignature(req, shop.getShopSecret());
+            }
+            catch (error) {
+                throw new Error("invalid-shop-registration-signature", { cause: error });
+            }
+        }
+    }
+    async authenticateRegistrationConfirmation(req, body, shop, cfg) {
+        const pendingSecret = shop.getPendingShopSecret();
+        if (pendingSecret === null) {
+            throw new Error("Signature could not be verified");
+        }
+        await this.verifyPostSignature(req, body, pendingSecret, SHOPWARE_SHOP_SIGNATURE_HEADER);
+        if (!shop.isRegistrationConfirmed()) {
+            return;
+        }
+        if (this.shouldEnforceDoubleSignatureForRegisterConfirm(cfg, shop, req)) {
+            await this.verifyPostSignature(req, body, shop.getShopSecret(), SHOPWARE_SHOP_SIGNATURE_PREVIOUS_HEADER);
+        }
+    }
+    async authenticatePostRequest(req, body, shop) {
+        try {
+            await this.verifyPostSignature(req, body, shop.getShopSecret(), SHOPWARE_SHOP_SIGNATURE_HEADER);
+        }
+        catch (error) {
+            await this.tryAuthenticateWithPreviousSecret(shop, error, async (secret) => {
+                await this.verifyPostSignature(req, body, secret, SHOPWARE_SHOP_SIGNATURE_HEADER);
+            });
+        }
+    }
+    async authenticateGetRequest(req, shop) {
+        try {
+            await this.signer.verifyGetRequest(req, shop.getShopSecret());
+        }
+        catch (error) {
+            await this.tryAuthenticateWithPreviousSecret(shop, error, async (secret) => {
+                await this.signer.verifyGetRequest(req, secret);
+            });
+        }
+    }
+    async verifyRegistrationAppSignature(req, secret) {
+        const signature = req.headers.get(SHOPWARE_APP_SIGNATURE_HEADER);
+        if (signature === null) {
+            throw new Error("Missing shopware-app-signature header");
+        }
+        const message = this.getRegistrationSignatureMessage(req);
+        const valid = await this.signer.verify(signature, message, secret);
+        if (!valid) {
+            throw new Error("Invalid app signature");
+        }
+    }
+    async verifyRegistrationShopSignature(req, secret) {
+        const signature = req.headers.get(SHOPWARE_SHOP_SIGNATURE_HEADER);
+        if (signature === null) {
+            throw new Error("Missing shopware-shop-signature header");
+        }
+        const message = this.getRegistrationSignatureMessage(req);
+        const valid = await this.signer.verify(signature, message, secret);
+        if (!valid) {
+            throw new Error("Invalid shop signature");
+        }
+    }
+    async verifyPostSignature(req, body, secret, headerName) {
+        const signature = req.headers.get(headerName);
+        if (signature === null) {
+            throw new Error(`Missing ${headerName} header`);
+        }
+        const valid = await this.signer.verify(signature, body, secret);
+        if (!valid) {
+            throw new Error("Invalid signature");
+        }
+    }
+    getRegistrationSignatureMessage(req) {
+        const url = new URL(req.url);
+        const shopId = url.searchParams.get("shop-id");
+        const shopUrl = url.searchParams.get("shop-url");
+        const timestamp = url.searchParams.get("timestamp");
+        if (!shopId || !shopUrl || !timestamp) {
+            throw new Error("Missing required registration parameters");
+        }
+        return `shop-id=${shopId}&shop-url=${shopUrl}&timestamp=${timestamp}`;
+    }
+    async tryAuthenticateWithPreviousSecret(shop, error, verify) {
+        const previousSecret = shop.getPreviousShopSecret();
+        const rotatedAt = shop.getSecretsRotatedAt();
+        if (previousSecret === null || rotatedAt === null) {
+            throw error instanceof Error ? error : new Error("Invalid signature");
+        }
+        const allowanceEnd = rotatedAt.getTime() + INFLIGHT_ALLOWANCE_MS;
+        if (this.now().getTime() >= allowanceEnd) {
+            throw error instanceof Error ? error : new Error("Invalid signature");
+        }
+        await verify(previousSecret);
+    }
+    /**
+     * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.
+     *
+     * 1. If the shop has previously verified with a double signature, it must always do so
+     * 2. If the shop is sending a double signature, then we should also verify it
+     * 3. If the app is configured to enforce double signature, then we should force it
+     */
+    shouldEnforceDoubleSignature(cfg, shop, req, header) {
+        return shop.hasVerifiedWithDoubleSignature() || req.headers.has(header) || cfg.enforceDoubleSignature;
+    }
+    shouldEnforceDoubleSignatureForRegister(cfg, shop, req) {
+        return this.shouldEnforceDoubleSignature(cfg, shop, req, SHOPWARE_SHOP_SIGNATURE_HEADER);
+    }
+    shouldEnforceDoubleSignatureForRegisterConfirm(cfg, shop, req) {
+        return this.shouldEnforceDoubleSignature(cfg, shop, req, SHOPWARE_SHOP_SIGNATURE_PREVIOUS_HEADER);
+    }
+}
+//# sourceMappingURL=dual-signature-verifier.js.map

package/dist/esm/dual-signature-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dual-signature-verifier.js","sourceRoot":"","sources":["../../src/dual-signature-verifier.ts"],"names":[],"mappings":"AAGA,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AACjE,MAAM,uCAAuC,GAAG,kCAAkC,CAAC;AACnF,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AAC/D,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAOrC,MAAM,OAAO,qBAAqB;IAEf;IACA;IAFlB,YACkB,MAA2B,EAC3B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QADlC,WAAM,GAAN,MAAM,CAAqB;QAC3B,QAAG,GAAH,GAAG,CAA+B;IACjD,CAAC;IAEG,KAAK,CAAC,+BAA+B,CAC3C,GAAY,EACZ,GAA+B,EAC/B,IAAiB;QAEjB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,8BAA8B,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,IAAI,EAAE,uBAAuB,EAAE,IAAI,IAAI,CAAC,uCAAuC,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACrG,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,+BAA+B,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC;QACF,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,oCAAoC,CAChD,GAAY,EACZ,IAAY,EACZ,IAAU,EACV,GAA+B;QAE/B,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAElD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,8BAA8B,CAAC,CAAC;QAEzF,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACrC,OAAO;QACR,CAAC;QAED,IAAI,IAAI,CAAC,8CAA8C,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,uCAAuC,CAAC,CAAC;QAC1G,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,uBAAuB,CACnC,GAAY,EACZ,IAAY,EACZ,IAAU;QAEV,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACjG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,iCAAiC,CAC3C,IAAI,EACJ,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,EAAE;gBAChB,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,8BAA8B,CAAC,CAAC;YACnF,CAAC,CACD,CAAC;QACH,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,GAAY,EAAE,IAAU;QAC3D,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,iCAAiC,CAC3C,IAAI,EACJ,KAAK,EACL,KAAK,EAAE,MAAM,EAAE,EAAE;gBAChB,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC,CACD,CAAC;QACH,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAAC,GAAY,EAAE,MAAc;QACxE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAEjE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,+BAA+B,CAAC,GAAY,EAAE,MAAc;QACzE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAElE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3C,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAChC,GAAY,EACZ,IAAY,EACZ,MAAc,EACd,UAAkB;QAElB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE9C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,SAAS,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtC,CAAC;IACF,CAAC;IAEO,+BAA+B,CAAC,GAAY;QACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,WAAW,MAAM,aAAa,OAAO,cAAc,SAAS,EAAE,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,iCAAiC,CAC9C,IAAU,EACV,KAAc,EACd,MAAyC;QAEzC,MAAM,cAAc,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE7C,IAAI,cAAc,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACnD,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC;QAEjE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,YAAY,EAAE,CAAC;YAC1C,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACK,4BAA4B,CAAC,GAA+B,EAAE,IAAU,EAAE,GAAY,EAAE,MAAc;QAE7G,OAAO,IAAI,CAAC,8BAA8B,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,sBAAsB,CAAC;IACvG,CAAC;IAEO,uCAAuC,CAAC,GAA+B,EAAE,IAAU,EAAE,GAAY;QAExG,OAAO,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,8BAA8B,CAAC,CAAC;IAC1F,CAAC;IAEO,8CAA8C,CAAC,GAA+B,EAAE,IAAU,EAAE,GAAY;QAE/G,OAAO,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,uCAAuC,CAAC,CAAC;IACnG,CAAC;CACD","sourcesContent":["import type { ShopInterface } from \"./repository.js\";\nimport { WebCryptoHmacSigner } from \"./signer.js\";\n\nconst SHOPWARE_SHOP_SIGNATURE_HEADER = \"shopware-shop-signature\";\nconst SHOPWARE_SHOP_SIGNATURE_PREVIOUS_HEADER = \"shopware-shop-signature-previous\";\nconst SHOPWARE_APP_SIGNATURE_HEADER = \"shopware-app-signature\";\nconst INFLIGHT_ALLOWANCE_MS = 60_000;\n\nexport interface DualSignatureConfiguration {\n\tappSecret: string;\n\tenforceDoubleSignature: boolean;\n}\n\nexport class DualSignatureVerifier<Shop extends ShopInterface = ShopInterface> {\n\tconstructor(\n\t\tprivate readonly signer: WebCryptoHmacSigner,\n\t\tprivate readonly now: () => Date = () => new Date(),\n\t) {}\n\n\tpublic async authenticateRegistrationRequest(\n\t\treq: Request,\n\t\tcfg: DualSignatureConfiguration,\n\t\tshop: Shop | null,\n\t): Promise<void> {\n\t\ttry {\n\t\t\tawait this.verifyRegistrationAppSignature(req, cfg.appSecret);\n\t\t} catch (error) {\n\t\t\tthrow new Error(\"invalid-app-signature\", { cause: error });\n\t\t}\n\n\t\tif (shop?.isRegistrationConfirmed() && this.shouldEnforceDoubleSignatureForRegister(cfg, shop, req)) {\n\t\t\ttry {\n\t\t\t\tawait this.verifyRegistrationShopSignature(req, shop.getShopSecret());\n\t\t\t} catch (error) {\n\t\t\t\tthrow new Error(\"invalid-shop-registration-signature\", { cause: error });\n\t\t\t}\n\t\t}\n\t}\n\n\tpublic async authenticateRegistrationConfirmation(\n\t\treq: Request,\n\t\tbody: string,\n\t\tshop: Shop,\n\t\tcfg: DualSignatureConfiguration,\n\t): Promise<void> {\n\t\tconst pendingSecret = shop.getPendingShopSecret();\n\n\t\tif (pendingSecret === null) {\n\t\t\tthrow new Error(\"Signature could not be verified\");\n\t\t}\n\n\t\tawait this.verifyPostSignature(req, body, pendingSecret, SHOPWARE_SHOP_SIGNATURE_HEADER);\n\n\t\tif (!shop.isRegistrationConfirmed()) {\n\t\t\treturn;\n\t\t}\n\n\t\tif (this.shouldEnforceDoubleSignatureForRegisterConfirm(cfg, shop, req)) {\n\t\t\tawait this.verifyPostSignature(req, body, shop.getShopSecret(), SHOPWARE_SHOP_SIGNATURE_PREVIOUS_HEADER);\n\t\t}\n\t}\n\n\tpublic async authenticatePostRequest(\n\t\treq: Request,\n\t\tbody: string,\n\t\tshop: Shop,\n\t): Promise<void> {\n\t\ttry {\n\t\t\tawait this.verifyPostSignature(req, body, shop.getShopSecret(), SHOPWARE_SHOP_SIGNATURE_HEADER);\n\t\t} catch (error) {\n\t\t\tawait this.tryAuthenticateWithPreviousSecret(\n\t\t\t\tshop,\n\t\t\t\terror,\n\t\t\t\tasync (secret) => {\n\t\t\t\t\tawait this.verifyPostSignature(req, body, secret, SHOPWARE_SHOP_SIGNATURE_HEADER);\n\t\t\t\t},\n\t\t\t);\n\t\t}\n\t}\n\n\tpublic async authenticateGetRequest(req: Request, shop: Shop): Promise<void> {\n\t\ttry {\n\t\t\tawait this.signer.verifyGetRequest(req, shop.getShopSecret());\n\t\t} catch (error) {\n\t\t\tawait this.tryAuthenticateWithPreviousSecret(\n\t\t\t\tshop,\n\t\t\t\terror,\n\t\t\t\tasync (secret) => {\n\t\t\t\t\tawait this.signer.verifyGetRequest(req, secret);\n\t\t\t\t},\n\t\t\t);\n\t\t}\n\t}\n\n\tprivate async verifyRegistrationAppSignature(req: Request, secret: string): Promise<void> {\n\t\tconst signature = req.headers.get(SHOPWARE_APP_SIGNATURE_HEADER);\n\n\t\tif (signature === null) {\n\t\t\tthrow new Error(\"Missing shopware-app-signature header\");\n\t\t}\n\n\t\tconst message = this.getRegistrationSignatureMessage(req);\n\t\tconst valid = await this.signer.verify(signature, message, secret);\n\n\t\tif (!valid) {\n\t\t\tthrow new Error(\"Invalid app signature\");\n\t\t}\n\t}\n\n\tprivate async verifyRegistrationShopSignature(req: Request, secret: string): Promise<void> {\n\t\tconst signature = req.headers.get(SHOPWARE_SHOP_SIGNATURE_HEADER);\n\n\t\tif (signature === null) {\n\t\t\tthrow new Error(\"Missing shopware-shop-signature header\");\n\t\t}\n\n\t\tconst message = this.getRegistrationSignatureMessage(req);\n\t\tconst valid = await this.signer.verify(signature, message, secret);\n\n\t\tif (!valid) {\n\t\t\tthrow new Error(\"Invalid shop signature\");\n\t\t}\n\t}\n\n\tprivate async verifyPostSignature(\n\t\treq: Request,\n\t\tbody: string,\n\t\tsecret: string,\n\t\theaderName: string,\n\t): Promise<void> {\n\t\tconst signature = req.headers.get(headerName);\n\n\t\tif (signature === null) {\n\t\t\tthrow new Error(`Missing ${headerName} header`);\n\t\t}\n\n\t\tconst valid = await this.signer.verify(signature, body, secret);\n\n\t\tif (!valid) {\n\t\t\tthrow new Error(\"Invalid signature\");\n\t\t}\n\t}\n\n\tprivate getRegistrationSignatureMessage(req: Request): string {\n\t\tconst url = new URL(req.url);\n\t\tconst shopId = url.searchParams.get(\"shop-id\");\n\t\tconst shopUrl = url.searchParams.get(\"shop-url\");\n\t\tconst timestamp = url.searchParams.get(\"timestamp\");\n\n\t\tif (!shopId || !shopUrl || !timestamp) {\n\t\t\tthrow new Error(\"Missing required registration parameters\");\n\t\t}\n\n\t\treturn `shop-id=${shopId}&shop-url=${shopUrl}&timestamp=${timestamp}`;\n\t}\n\n\tprivate async tryAuthenticateWithPreviousSecret(\n\t\tshop: Shop,\n\t\terror: unknown,\n\t\tverify: (secret: string) => Promise<void>,\n\t): Promise<void> {\n\t\tconst previousSecret = shop.getPreviousShopSecret();\n\t\tconst rotatedAt = shop.getSecretsRotatedAt();\n\n\t\tif (previousSecret === null || rotatedAt === null) {\n\t\t\tthrow error instanceof Error ? error : new Error(\"Invalid signature\");\n\t\t}\n\n\t\tconst allowanceEnd = rotatedAt.getTime() + INFLIGHT_ALLOWANCE_MS;\n\n\t\tif (this.now().getTime() >= allowanceEnd) {\n\t\t\tthrow error instanceof Error ? error : new Error(\"Invalid signature\");\n\t\t}\n\n\t\tawait verify(previousSecret);\n\t}\n\n\t/**\n\t * @deprecated tag:v6.0.0 - Will be removed. Double signature verification will always be enforced.\n\t *\n\t * 1. If the shop has previously verified with a double signature, it must always do so\n\t * 2. If the shop is sending a double signature, then we should also verify it\n\t * 3. If the app is configured to enforce double signature, then we should force it\n\t */\n\tprivate shouldEnforceDoubleSignature(cfg: DualSignatureConfiguration, shop: Shop, req: Request, header: string): boolean\n\t{\n\t\treturn shop.hasVerifiedWithDoubleSignature() || req.headers.has(header) || cfg.enforceDoubleSignature;\n\t}\n\n\tprivate shouldEnforceDoubleSignatureForRegister(cfg: DualSignatureConfiguration, shop: Shop, req: Request): boolean\n\t{\n\t\treturn this.shouldEnforceDoubleSignature(cfg, shop, req, SHOPWARE_SHOP_SIGNATURE_HEADER);\n\t}\n\n\tprivate shouldEnforceDoubleSignatureForRegisterConfirm(cfg: DualSignatureConfiguration, shop: Shop, req: Request): boolean\n\t{\n\t\treturn this.shouldEnforceDoubleSignature(cfg, shop, req, SHOPWARE_SHOP_SIGNATURE_PREVIOUS_HEADER);\n\t}\n}\n"]}

package/dist/esm/integration/better-sqlite3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"better-sqlite3.d.ts","sourceRoot":"","sources":["../../../src/integration/better-sqlite3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,uBAAuB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE5E,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,qBAAa,uBACZ,YAAW,uBAAuB,CAAC,UAAU,CAAC;IAE9C,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACV,QAAQ,EAAE,MAAM;IAetB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA0BnD,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAc3C,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3C"}
+{"version":3,"file":"better-sqlite3.d.ts","sourceRoot":"","sources":["../../../src/integration/better-sqlite3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,uBAAuB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE5E,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,qBAAa,uBACZ,YAAW,uBAAuB,CAAC,UAAU,CAAC;IAE9C,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACV,QAAQ,EAAE,MAAM;IAqBtB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAwDnD,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB3C,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3C"}

package/dist/esm/integration/better-sqlite3.js

@@ -6,15 +6,21 @@ export class BetterSqlite3Repository {
         this.db = new Database(fileName);
         this.db.pragma("journal_mode = WAL");
         this.db.exec(`
-        CREATE TABLE IF NOT EXISTS shop (
-          id TEXT PRIMARY KEY,
-          active BOOLEAN DEFAULT 1,
-          url TEXT NOT NULL,
-          secret TEXT NOT NULL,
-          client_id TEXT NULL,
-          client_secret TEXT NULL
-        );
-      `);
+		CREATE TABLE IF NOT EXISTS shop (
+		  id TEXT PRIMARY KEY,
+		  active BOOLEAN DEFAULT 1,
+		  url TEXT NOT NULL,
+		  secret TEXT NOT NULL,
+		  client_id TEXT NULL,
+		  client_secret TEXT NULL,
+		  pending_shop_url TEXT NULL,
+		  pending_shop_secret TEXT NULL,
+		  previous_shop_secret TEXT NULL,
+		  secrets_rotated_at INTEGER NULL,
+		  verified_with_double_signatures BOOLEAN DEFAULT 0,
+		  registration_confirmed BOOLEAN DEFAULT 0
+		);
+	  `);
     }
     async createShop(id, url, secret) {
         const shop = await this.getShopById(id);
@@ -37,12 +43,30 @@ export class BetterSqlite3Repository {
             shop.setShopCredentials(result.client_id, result.client_secret);
         }
         shop.setShopActive(result.active === 1);
+        if (result.pending_shop_url) {
+            shop.setPendingShopUrl(result.pending_shop_url);
+        }
+        if (result.pending_shop_secret) {
+            shop.setPendingShopSecret(result.pending_shop_secret);
+        }
+        if (result.previous_shop_secret) {
+            shop.setPreviousShopSecret(result.previous_shop_secret);
+        }
+        if (result.secrets_rotated_at) {
+            shop.setSecretsRotatedAt(new Date(Number(result.secrets_rotated_at)));
+        }
+        if (result.verified_with_double_signatures === 1) {
+            shop.setVerifiedWithDoubleSignature();
+        }
+        if (result.registration_confirmed === 1) {
+            shop.setRegistrationConfirmed();
+        }
         return shop;
     }
     async updateShop(shop) {
         this.db
-            .prepare("UPDATE shop SET url = ?, secret = ?, client_id = ?, client_secret = ?, active = ? WHERE id = ?")
-            .run(shop.getShopUrl(), shop.getShopSecret(), shop.getShopClientId(), shop.getShopClientSecret(), +shop.getShopActive(), shop.getShopId());
+            .prepare("UPDATE shop SET url = ?, secret = ?, client_id = ?, client_secret = ?, active = ?, pending_shop_url = ?, pending_shop_secret = ?, previous_shop_secret = ?, secrets_rotated_at = ?, verified_with_double_signatures = ?, registration_confirmed = ? WHERE id = ?")
+            .run(shop.getShopUrl(), shop.getShopSecret(), shop.getShopClientId(), shop.getShopClientSecret(), +shop.getShopActive(), shop.getPendingShopUrl(), shop.getPendingShopSecret(), shop.getPreviousShopSecret(), shop.getSecretsRotatedAt()?.getTime() ?? null, +shop.hasVerifiedWithDoubleSignature(), +shop.isRegistrationConfirmed(), shop.getShopId());
     }
     async deleteShop(id) {
         this.db.prepare("DELETE FROM shop where id = ?").run(id);