@things-factory/integration-accounting 9.0.0-beta.8 → 9.0.0

package/dist-server/graphql/resolvers/accounting/xero/refresh-xero-access-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-xero-access-token.js","sourceRoot":"","sources":["../../../../../server/graphql/resolvers/accounting/xero/refresh-xero-access-token.ts"],"names":[],"mappings":";;;;AAAA,oEAA8B;AAE9B,6CAA4C;AAC5C,iDAAqD;AACrD,iDAAgD;AAEhD,mDAA8C;AAE9C,MAAM,UAAU,GAAG,YAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAA;AAC9D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAA;AAExC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,iEAAiE,CAAC,CAAA;AAEpF,QAAA,sBAAsB,GAAG;IACpC,KAAK,CAAC,sBAAsB,CAAC,CAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAwB;QACnE,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,kBAAO,CAAC,CAAA;QACzC,MAAM,OAAO,GAAQ,MAAM,UAAU,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;SACvD,CAAC,CAAA;QAEF,MAAM,kBAAkB,GAAG;YACzB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,OAAO,CAAC,YAAY;SACpC,CAAA;QAED,MAAM,eAAe,GAAG,MAAM,IAAA,oBAAK,EAAC,yCAAyC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAClF,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;iBAChF,IAAI,CAAC,GAAG,CAAC;SACb,CAAC,CAAA;QAEF,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACpF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,CAAA;QACzC,MAAM,EACJ,YAAY,CAAC,gCAAgC,EAC7C,QAAQ,CAAC,mGAAmG,EAC5G,UAAU,CAAC,sDAAsD,EACjE,UAAU,EAAE,SAAS,CAAC,oBAAoB,EAC1C,aAAa;QACb;WACG;UACJ,GAAG,IAAI,CAAA;QAER,MAAM,EAAE,GAAG,EAAE,GAAG,IAAA,gBAAQ,EAAC,YAAY,CAAC,CAAA;QAEtC,IAAI,KAAK,GAAG;YACV,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;YAC3B,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;SAChC,CAAA;QAED,OAAO,MAAM,UAAU,CAAC,IAAI,+CACvB,OAAO,GACP,KAAK,KACR,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,IAC3B,CAAA;IACJ,CAAC;CACF,CAAA","sourcesContent":["import fetch from 'node-fetch'\n\nimport { config } from '@things-factory/env'\nimport { getRepository } from '@things-factory/shell'\nimport { parseJwt } from '@things-factory/utils'\n\nimport { Account } from '../../../../entities'\n\nconst xeroConfig = config.get('accountingIntegrationXero', {})\nconst { apiKey, apiSecret } = xeroConfig\n\nconst debug = require('debug')('things-factory:integration-accounting:refresh-xero-access-token')\n\nexport const refreshXeroAccessToken = {\n  async refreshXeroAccessToken(_: any, { id }, context: ResolverContext) {\n    const repository = getRepository(Account)\n    const account: any = await repository.findOne({\n      where: { domain: { id: context.state.domain.id }, id }\n    })\n\n    const refreshRequestData = {\n      grant_type: 'refresh_token',\n      refresh_token: account.refreshToken\n    }\n\n    const refreshResponse = await fetch(`https://identity.xero.com/connect/token`, {\n      method: 'post',\n      headers: {\n        Authorization: `Basic ${Buffer.from(apiKey + ':' + apiSecret).toString('base64')}`,\n        'Content-Type': 'application/x-www-form-urlencoded'\n      },\n      body: Object.entries(refreshRequestData)\n        .map(([key, value]) => encodeURIComponent(key) + '=' + encodeURIComponent(value))\n        .join('&')\n    })\n\n    if (!refreshResponse.ok) {\n      throw new Error(`get account information failed: ${await refreshResponse.text()}`)\n    }\n\n    const body = await refreshResponse.json()\n    const {\n      access_token /* token used to call the API */,\n      id_token /* token containing user identity details (only returned if OpenID Connect scopes are requested) */,\n      expires_in /* amount of seconds until the access token expires */,\n      token_type: tokenType /* must be Bearer */,\n      refresh_token\n      /* token used to refresh the access token once it has expired (only returned if the offline_access scope is requested).\n       */\n    } = body\n\n    const { exp } = parseJwt(access_token)\n\n    var patch = {\n      accessToken: access_token,\n      refreshToken: refresh_token,\n      tokenType,\n      expiresIn: new Date(exp * 1000)\n    }\n\n    return await repository.save({\n      ...account,\n      ...patch,\n      updater: context.state.user\n    })\n  }\n}\n"]}
+{"version":3,"file":"refresh-xero-access-token.js","sourceRoot":"","sources":["../../../../../server/graphql/resolvers/accounting/xero/refresh-xero-access-token.ts"],"names":[],"mappings":";;;;AAAA,oEAA8B;AAE9B,6CAA4C;AAC5C,iDAAqD;AACrD,iDAAgD;AAEhD,mDAA8C;AAE9C,MAAM,UAAU,GAAG,YAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAA;AAC9D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,CAAA;AAExC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,iEAAiE,CAAC,CAAA;AAEpF,QAAA,sBAAsB,GAAG;IACpC,KAAK,CAAC,sBAAsB,CAAC,CAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAwB;QACnE,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,kBAAO,CAAC,CAAA;QACzC,MAAM,OAAO,GAAQ,MAAM,UAAU,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;SACvD,CAAC,CAAA;QAEF,MAAM,kBAAkB,GAAG;YACzB,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,OAAO,CAAC,YAAY;SACpC,CAAA;QAED,MAAM,eAAe,GAAG,MAAM,IAAA,oBAAK,EAAC,yCAAyC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAClF,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;iBAChF,IAAI,CAAC,GAAG,CAAC;SACb,CAAC,CAAA;QAEF,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACpF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,CAAA;QACzC,MAAM,EACJ,YAAY,CAAC,gCAAgC,EAC7C,QAAQ,CAAC,mGAAmG,EAC5G,UAAU,CAAC,sDAAsD,EACjE,UAAU,EAAE,SAAS,CAAC,oBAAoB,EAC1C,aAAa;QACb;WACG;UACJ,GAAG,IAAI,CAAA;QAER,MAAM,EAAE,GAAG,EAAE,GAAG,IAAA,gBAAQ,EAAC,YAAY,CAAC,CAAA;QAEtC,IAAI,KAAK,GAAG;YACV,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;YAC3B,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;SAChC,CAAA;QAED,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC;YAC3B,GAAG,OAAO;YACV,GAAG,KAAK;YACR,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;SAC5B,CAAC,CAAA;IACJ,CAAC;CACF,CAAA","sourcesContent":["import fetch from 'node-fetch'\n\nimport { config } from '@things-factory/env'\nimport { getRepository } from '@things-factory/shell'\nimport { parseJwt } from '@things-factory/utils'\n\nimport { Account } from '../../../../entities'\n\nconst xeroConfig = config.get('accountingIntegrationXero', {})\nconst { apiKey, apiSecret } = xeroConfig\n\nconst debug = require('debug')('things-factory:integration-accounting:refresh-xero-access-token')\n\nexport const refreshXeroAccessToken = {\n  async refreshXeroAccessToken(_: any, { id }, context: ResolverContext) {\n    const repository = getRepository(Account)\n    const account: any = await repository.findOne({\n      where: { domain: { id: context.state.domain.id }, id }\n    })\n\n    const refreshRequestData = {\n      grant_type: 'refresh_token',\n      refresh_token: account.refreshToken\n    }\n\n    const refreshResponse = await fetch(`https://identity.xero.com/connect/token`, {\n      method: 'post',\n      headers: {\n        Authorization: `Basic ${Buffer.from(apiKey + ':' + apiSecret).toString('base64')}`,\n        'Content-Type': 'application/x-www-form-urlencoded'\n      },\n      body: Object.entries(refreshRequestData)\n        .map(([key, value]) => encodeURIComponent(key) + '=' + encodeURIComponent(value))\n        .join('&')\n    })\n\n    if (!refreshResponse.ok) {\n      throw new Error(`get account information failed: ${await refreshResponse.text()}`)\n    }\n\n    const body = await refreshResponse.json()\n    const {\n      access_token /* token used to call the API */,\n      id_token /* token containing user identity details (only returned if OpenID Connect scopes are requested) */,\n      expires_in /* amount of seconds until the access token expires */,\n      token_type: tokenType /* must be Bearer */,\n      refresh_token\n      /* token used to refresh the access token once it has expired (only returned if the offline_access scope is requested).\n       */\n    } = body\n\n    const { exp } = parseJwt(access_token)\n\n    var patch = {\n      accessToken: access_token,\n      refreshToken: refresh_token,\n      tokenType,\n      expiresIn: new Date(exp * 1000)\n    }\n\n    return await repository.save({\n      ...account,\n      ...patch,\n      updater: context.state.user\n    })\n  }\n}\n"]}

package/dist-server/graphql/resolvers/accounting-api/index.js

@@ -4,6 +4,13 @@ exports.Mutation = exports.Query = void 0;
 const accounting_invoice_1 = require("./accounting-invoice");
 const accounting_item_1 = require("./accounting-item");
 const accounting_purchase_order_1 = require("./accounting-purchase-order");
-exports.Query = Object.assign(Object.assign(Object.assign({}, accounting_invoice_1.queryAccountingInvoice), accounting_item_1.queryAccountingItem), accounting_purchase_order_1.queryAccountingPurchaseOrder);
-exports.Mutation = Object.assign(Object.assign({}, accounting_invoice_1.mutateAccountingInvoice), accounting_item_1.mutateAccountingItem);
+exports.Query = {
+    ...accounting_invoice_1.queryAccountingInvoice,
+    ...accounting_item_1.queryAccountingItem,
+    ...accounting_purchase_order_1.queryAccountingPurchaseOrder
+};
+exports.Mutation = {
+    ...accounting_invoice_1.mutateAccountingInvoice,
+    ...accounting_item_1.mutateAccountingItem
+};
 //# sourceMappingURL=index.js.map

package/dist-server/graphql/resolvers/accounting-api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/accounting-api/index.ts"],"names":[],"mappings":";;;AAAA,6DAAsF;AACtF,uDAA6E;AAC7E,2EAA0E;AAE7D,QAAA,KAAK,iDACb,2CAAsB,GACtB,qCAAmB,GACnB,wDAA4B,EAChC;AAEY,QAAA,QAAQ,mCAChB,4CAAuB,GACvB,sCAAoB,EACxB","sourcesContent":["import { queryAccountingInvoice, mutateAccountingInvoice } from './accounting-invoice'\nimport { queryAccountingItem, mutateAccountingItem } from './accounting-item'\nimport { queryAccountingPurchaseOrder } from './accounting-purchase-order'\n\nexport const Query = {\n  ...queryAccountingInvoice,\n  ...queryAccountingItem,\n  ...queryAccountingPurchaseOrder\n}\n\nexport const Mutation = {\n  ...mutateAccountingInvoice,\n  ...mutateAccountingItem\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/graphql/resolvers/accounting-api/index.ts"],"names":[],"mappings":";;;AAAA,6DAAsF;AACtF,uDAA6E;AAC7E,2EAA0E;AAE7D,QAAA,KAAK,GAAG;IACnB,GAAG,2CAAsB;IACzB,GAAG,qCAAmB;IACtB,GAAG,wDAA4B;CAChC,CAAA;AAEY,QAAA,QAAQ,GAAG;IACtB,GAAG,4CAAuB;IAC1B,GAAG,sCAAoB;CACxB,CAAA","sourcesContent":["import { queryAccountingInvoice, mutateAccountingInvoice } from './accounting-invoice'\nimport { queryAccountingItem, mutateAccountingItem } from './accounting-item'\nimport { queryAccountingPurchaseOrder } from './accounting-purchase-order'\n\nexport const Query = {\n  ...queryAccountingInvoice,\n  ...queryAccountingItem,\n  ...queryAccountingPurchaseOrder\n}\n\nexport const Mutation = {\n  ...mutateAccountingInvoice,\n  ...mutateAccountingItem\n}\n"]}

package/dist-server/routers/xero-private-router.js

@@ -5,13 +5,13 @@ const tslib_1 = require("tslib");
 const koa_router_1 = tslib_1.__importDefault(require("koa-router"));
 const env_1 = require("@things-factory/env");
 const shell_1 = require("@things-factory/shell");
-const isPathBaseDomain = !env_1.config.get('subdomain') && !env_1.config.get('useVirtualHostBasedDomain');
+const isPathBaseDomain = !env_1.config.get('subdomain');
 const debug = require('debug')('things-factory:integration-accounting:xero-router');
 exports.xeroPrivateRouter = new koa_router_1.default();
-exports.xeroPrivateRouter.get(`${isPathBaseDomain ? '/domain/:domain' : ''}/callback-private-xero`, async (context, next) => {
+exports.xeroPrivateRouter.get(`${isPathBaseDomain ? `/${(0, shell_1.getRoutePrefixForDomainType)()}/:domain` : ''}/callback-private-xero`, async (context, next) => {
     const { domain } = context.state;
     const xeroAccountingCookies = context.cookies.get('xero-accounting');
     const { id, status, message } = JSON.parse(xeroAccountingCookies);
-    context.redirect(`${(0, shell_1.getRedirectSubdomainPath)(context, domain.subdomain)}account-xero/${id}/connect-callback?status=${status}&message=${message}`);
+    context.redirect(`${(0, shell_1.getRedirectSubdomainPath)(context, domain)}account-xero/${id}/connect-callback?status=${status}&message=${message}`);
 });
 //# sourceMappingURL=xero-private-router.js.map

package/dist-server/routers/xero-private-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"xero-private-router.js","sourceRoot":"","sources":["../../server/routers/xero-private-router.ts"],"names":[],"mappings":";;;;AAAA,oEAA+B;AAE/B,6CAA4C;AAC5C,iDAAgE;AAEhE,MAAM,gBAAgB,GAAG,CAAC,YAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,YAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAA;AAE7F,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,mDAAmD,CAAC,CAAA;AAEtE,QAAA,iBAAiB,GAAG,IAAI,oBAAM,EAAE,CAAA;AAE7C,yBAAiB,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAClH,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAEhC,MAAM,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACpE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAEjE,OAAO,CAAC,QAAQ,CACd,GAAG,IAAA,gCAAwB,EACzB,OAAO,EACP,MAAM,CAAC,SAAS,CACjB,gBAAgB,EAAE,4BAA4B,MAAM,YAAY,OAAO,EAAE,CAC3E,CAAA;AACH,CAAC,CAAC,CAAA","sourcesContent":["import Router from 'koa-router'\n\nimport { config } from '@things-factory/env'\nimport { getRedirectSubdomainPath } from '@things-factory/shell'\n\nconst isPathBaseDomain = !config.get('subdomain') && !config.get('useVirtualHostBasedDomain')\n\nconst debug = require('debug')('things-factory:integration-accounting:xero-router')\n\nexport const xeroPrivateRouter = new Router()\n\nxeroPrivateRouter.get(`${isPathBaseDomain ? '/domain/:domain' : ''}/callback-private-xero`, async (context, next) => {\n  const { domain } = context.state\n\n  const xeroAccountingCookies = context.cookies.get('xero-accounting')\n  const { id, status, message } = JSON.parse(xeroAccountingCookies)\n\n  context.redirect(\n    `${getRedirectSubdomainPath(\n      context,\n      domain.subdomain\n    )}account-xero/${id}/connect-callback?status=${status}&message=${message}`\n  )\n})\n"]}
+{"version":3,"file":"xero-private-router.js","sourceRoot":"","sources":["../../server/routers/xero-private-router.ts"],"names":[],"mappings":";;;;AAAA,oEAA+B;AAE/B,6CAA4C;AAC5C,iDAA6F;AAE7F,MAAM,gBAAgB,GAAG,CAAC,YAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;AAEjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,mDAAmD,CAAC,CAAA;AAEtE,QAAA,iBAAiB,GAAG,IAAI,oBAAM,EAAE,CAAA;AAE7C,yBAAiB,CAAC,GAAG,CACnB,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,IAAA,mCAA2B,GAAE,UAAU,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAC9F,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAEhC,MAAM,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACpE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAEjE,OAAO,CAAC,QAAQ,CACd,GAAG,IAAA,gCAAwB,EACzB,OAAO,EACP,MAAM,CACP,gBAAgB,EAAE,4BAA4B,MAAM,YAAY,OAAO,EAAE,CAC3E,CAAA;AACH,CAAC,CACF,CAAA","sourcesContent":["import Router from 'koa-router'\n\nimport { config } from '@things-factory/env'\nimport { getRedirectSubdomainPath, getRoutePrefixForDomainType } from '@things-factory/shell'\n\nconst isPathBaseDomain = !config.get('subdomain')\n\nconst debug = require('debug')('things-factory:integration-accounting:xero-router')\n\nexport const xeroPrivateRouter = new Router()\n\nxeroPrivateRouter.get(\n  `${isPathBaseDomain ? `/${getRoutePrefixForDomainType()}/:domain` : ''}/callback-private-xero`,\n  async (context, next) => {\n    const { domain } = context.state\n\n    const xeroAccountingCookies = context.cookies.get('xero-accounting')\n    const { id, status, message } = JSON.parse(xeroAccountingCookies)\n\n    context.redirect(\n      `${getRedirectSubdomainPath(\n        context,\n        domain\n      )}account-xero/${id}/connect-callback?status=${status}&message=${message}`\n    )\n  }\n)\n"]}

package/dist-server/routers/xero-router.js

@@ -85,8 +85,15 @@ exports.xeroRouter.get('/callback-xero', async (context, next) => {
             expiresIn: new Date(exp * 1000)
         };
         var user = await (0, shell_1.getRepository)(auth_base_1.User).findOneBy({ id: userId });
-        account = await (0, shell_1.getRepository)(entities_1.Account).save(Object.assign(Object.assign(Object.assign({}, account), patch), { updater: user }));
-        context.cookies.set('xero-accounting', JSON.stringify(Object.assign(Object.assign({}, account), { message: 'success to activate' })), {
+        account = await (0, shell_1.getRepository)(entities_1.Account).save({
+            ...account,
+            ...patch,
+            updater: user
+        });
+        context.cookies.set('xero-accounting', JSON.stringify({
+            ...account,
+            message: 'success to activate'
+        }), {
             httpOnly: true
         });
         context.redirect((0, shell_1.getUrlFromContext)(context, '/callback-private-xero'));
@@ -94,7 +101,10 @@ exports.xeroRouter.get('/callback-xero', async (context, next) => {
     catch (err) {
         var message = err.message;
         if (account) {
-            context.cookies.set('xero-accounting', JSON.stringify(Object.assign(Object.assign({}, account), { message })), {
+            context.cookies.set('xero-accounting', JSON.stringify({
+                ...account,
+                message
+            }), {
                 httpOnly: true
             });
             context.redirect((0, shell_1.getUrlFromContext)(context, '/callback-private-xero'));

package/dist-server/routers/xero-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"xero-router.js","sourceRoot":"","sources":["../../server/routers/xero-router.ts"],"names":[],"mappings":";;;;AAAA,oEAA+B;AAC/B,oEAA8B;AAE9B,yDAA0F;AAC1F,6CAA4C;AAC5C,iDAAwE;AACxE,iDAAgD;AAEhD,kEAAgF;AAChF,0CAAqC;AAErC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAA;AAE3G,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,mDAAmD,CAAC,CAAA;AAEtE,QAAA,UAAU,GAAG,IAAI,oBAAM,EAAE,CAAA;AAEtC,kBAAU,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAE5C,MAAM,2BAA2B,GAAG,IAAA,qBAAa,EAAC,6BAAiB,CAAC,CAAA;QAEpE,IAAI,YAAY,GAAsB,MAAM,2BAA2B,CAAC,OAAO,CAAC;YAC9E,KAAK,EAAE;gBACL,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,iCAAqB,CAAC,oBAAoB;aACjD;SACF,CAAC,CAAA;QAEF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,YAAY,CAAA;QAEtD,MAAM,2BAA2B,CAAC,MAAM,CAAC;YACvC,MAAM;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,iCAAqB,CAAC,oBAAoB;SACjD,CAAC,CAAA;QAEF,IAAI,OAAO,GAAG,MAAM,8BAAa,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;QAC1D,MAAM,kBAAkB,GAAG;YACzB,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY;SACb,CAAA;QAED,MAAM,eAAe,GAAG,MAAM,IAAA,oBAAK,EAAC,yCAAyC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAClF,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;iBAChF,IAAI,CAAC,GAAG,CAAC;SACb,CAAC,CAAA;QAEF,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACpF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,CAAA;QACzC,MAAM,EACJ,YAAY,CAAC,gCAAgC,EAC7C,QAAQ,CAAC,mGAAmG,EAC5G,UAAU,CAAC,sDAAsD,EACjE,UAAU,EAAE,SAAS,CAAC,oBAAoB,EAC1C,aAAa;QACb;WACG;UACJ,GAAG,IAAI,CAAA;QAER,8CAA8C;QAC9C,MAAM,UAAU,GAAG,IAAA,gBAAQ,EAAC,YAAY,CAAC,CAAA;QACzC,MAAM,EAAE,uBAAuB,EAAE,GAAG,EAAE,GAAG,UAAU,CAAA;QAEnD,yDAAyD;QACzD,MAAM,mBAAmB,GAAG,MAAM,IAAA,oBAAK,EAAC,gDAAgD,uBAAuB,EAAE,EAAE;YACjH,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,YAAY,EAAE;gBACvC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,+BAA+B,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC9G,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAA;QACpD,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QAEjC,IAAI,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAA;QAClE,CAAC;QAED,IAAI,KAAK,GAAG;YACV,IAAI,EAAE,UAAU,CAAC,UAAU;YAC3B,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;YAC3B,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,SAAS,EAAE,UAAU,CAAC,QAAQ;YAC9B,MAAM,EAAE,kCAAiB,CAAC,MAAM;YAChC,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;SAChC,CAAA;QAED,IAAI,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,gBAAI,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAE9D,OAAO,GAAG,MAAM,IAAA,qBAAa,EAAC,kBAAO,CAAC,CAAC,IAAI,+CACtC,OAAO,GACP,KAAK,KACR,OAAO,EAAE,IAAI,IACb,CAAA;QAEF,OAAO,CAAC,OAAO,CAAC,GAAG,CACjB,iBAAiB,EACjB,IAAI,CAAC,SAAS,iCACT,OAAO,KACV,OAAO,EAAE,qBAAqB,IAC9B,EACF;YACE,QAAQ,EAAE,IAAI;SACf,CACF,CAAA;QAED,OAAO,CAAC,QAAQ,CAAC,IAAA,yBAAiB,EAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAA;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAW,GAAG,CAAC,OAAO,CAAA;QAEjC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,CAAC,GAAG,CACjB,iBAAiB,EACjB,IAAI,CAAC,SAAS,iCACT,OAAO,KACV,OAAO,IACP,EACF;gBACE,QAAQ,EAAE,IAAI;aACf,CACF,CAAA;YAED,OAAO,CAAC,QAAQ,CAAC,IAAA,yBAAiB,EAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAA;YACtE,OAAM;QACR,CAAC;QAED,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,kBAAU,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IACvD,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;AACtB,CAAC,CAAC,CAAA","sourcesContent":["import Router from 'koa-router'\nimport fetch from 'node-fetch'\n\nimport { User, VerificationToken, VerificationTokenType } from '@things-factory/auth-base'\nimport { config } from '@things-factory/env'\nimport { getRepository, getUrlFromContext } from '@things-factory/shell'\nimport { parseJwt } from '@things-factory/utils'\n\nimport { ACCOUNTING_STATUS, AccountingAPI } from '../controllers/accounting-api'\nimport { Account } from '../entities'\n\nconst { apiKey, apiSecret, hostname, callback: redirect_uri } = config.get('accountingIntegrationXero', {})\n\nconst debug = require('debug')('things-factory:integration-accounting:xero-router')\n\nexport const xeroRouter = new Router()\n\nxeroRouter.get('/callback-xero', async (context, next) => {\n  try {\n    const { code, state: nonce } = context.query\n\n    const verificationTokenRepository = getRepository(VerificationToken)\n\n    var verification: VerificationToken = await verificationTokenRepository.findOne({\n      where: {\n        token: nonce,\n        type: VerificationTokenType.REQUEST_ACCESS_TOKEN\n      }\n    })\n\n    const { userId, suppliment: accountId } = verification\n\n    await verificationTokenRepository.delete({\n      userId,\n      token: nonce,\n      type: VerificationTokenType.REQUEST_ACCESS_TOKEN\n    })\n\n    var account = await AccountingAPI.getAccounting(accountId)\n    const connectRequestData = {\n      grant_type: 'authorization_code',\n      code,\n      redirect_uri\n    }\n\n    const connectResponse = await fetch(`https://identity.xero.com/connect/token`, {\n      method: 'post',\n      headers: {\n        Authorization: `Basic ${Buffer.from(apiKey + ':' + apiSecret).toString('base64')}`,\n        'Content-Type': 'application/x-www-form-urlencoded'\n      },\n      body: Object.entries(connectRequestData)\n        .map(([key, value]) => encodeURIComponent(key) + '=' + encodeURIComponent(value))\n        .join('&')\n    })\n\n    if (!connectResponse.ok) {\n      throw new Error(`get account information failed: ${await connectResponse.text()}`)\n    }\n\n    const body = await connectResponse.json()\n    const {\n      access_token /* token used to call the API */,\n      id_token /* token containing user identity details (only returned if OpenID Connect scopes are requested) */,\n      expires_in /* amount of seconds until the access token expires */,\n      token_type: tokenType /* must be Bearer */,\n      refresh_token\n      /* token used to refresh the access token once it has expired (only returned if the offline_access scope is requested).\n       */\n    } = body\n\n    /* decode access_token to get auth-event-id */\n    const accessInfo = parseJwt(access_token)\n    const { authentication_event_id, exp } = accessInfo\n\n    /* get connections through the authentication_event_id */\n    const connectionsResponse = await fetch(`https://api.xero.com/connections?authEventId=${authentication_event_id}`, {\n      method: 'get',\n      headers: {\n        Authorization: `Bearer ${access_token}`,\n        'Content-Type': 'application/json'\n      }\n    })\n\n    if (!connectionsResponse.ok) {\n      context.throw(connectionsResponse.status, `get connection list failed: ${await connectionsResponse.text()}`)\n    }\n\n    const connections = await connectionsResponse.json()\n    debug('connections', connections)\n\n    var connection = connections[0]\n    if (!connection) {\n      context.throw(400, 'connection not found for this access token')\n    }\n\n    var patch = {\n      name: connection.tenantName,\n      accessToken: access_token,\n      refreshToken: refresh_token,\n      accessInfo: JSON.stringify(accessInfo, null, 2),\n      accountInfo: JSON.stringify(connection, null, 2),\n      accountId: connection.tenantId,\n      status: ACCOUNTING_STATUS.ACTIVE,\n      tokenType,\n      expiresIn: new Date(exp * 1000)\n    }\n\n    var user = await getRepository(User).findOneBy({ id: userId })\n\n    account = await getRepository(Account).save({\n      ...account,\n      ...patch,\n      updater: user\n    })\n\n    context.cookies.set(\n      'xero-accounting',\n      JSON.stringify({\n        ...account,\n        message: 'success to activate'\n      }),\n      {\n        httpOnly: true\n      }\n    )\n\n    context.redirect(getUrlFromContext(context, '/callback-private-xero'))\n  } catch (err) {\n    var message: string = err.message\n\n    if (account) {\n      context.cookies.set(\n        'xero-accounting',\n        JSON.stringify({\n          ...account,\n          message\n        }),\n        {\n          httpOnly: true\n        }\n      )\n\n      context.redirect(getUrlFromContext(context, '/callback-private-xero'))\n      return\n    }\n\n    throw err\n  }\n})\n\nxeroRouter.post('/webhook-xero', async (context, next) => {\n  context.status = 200\n})\n"]}
+{"version":3,"file":"xero-router.js","sourceRoot":"","sources":["../../server/routers/xero-router.ts"],"names":[],"mappings":";;;;AAAA,oEAA+B;AAC/B,oEAA8B;AAE9B,yDAA0F;AAC1F,6CAA4C;AAC5C,iDAAwE;AACxE,iDAAgD;AAEhD,kEAAgF;AAChF,0CAAqC;AAErC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAA;AAE3G,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,mDAAmD,CAAC,CAAA;AAEtE,QAAA,UAAU,GAAG,IAAI,oBAAM,EAAE,CAAA;AAEtC,kBAAU,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAE5C,MAAM,2BAA2B,GAAG,IAAA,qBAAa,EAAC,6BAAiB,CAAC,CAAA;QAEpE,IAAI,YAAY,GAAsB,MAAM,2BAA2B,CAAC,OAAO,CAAC;YAC9E,KAAK,EAAE;gBACL,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,iCAAqB,CAAC,oBAAoB;aACjD;SACF,CAAC,CAAA;QAEF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,YAAY,CAAA;QAEtD,MAAM,2BAA2B,CAAC,MAAM,CAAC;YACvC,MAAM;YACN,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,iCAAqB,CAAC,oBAAoB;SACjD,CAAC,CAAA;QAEF,IAAI,OAAO,GAAG,MAAM,8BAAa,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;QAC1D,MAAM,kBAAkB,GAAG;YACzB,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY;SACb,CAAA;QAED,MAAM,eAAe,GAAG,MAAM,IAAA,oBAAK,EAAC,yCAAyC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBAClF,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;iBAChF,IAAI,CAAC,GAAG,CAAC;SACb,CAAC,CAAA;QAEF,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACpF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,CAAA;QACzC,MAAM,EACJ,YAAY,CAAC,gCAAgC,EAC7C,QAAQ,CAAC,mGAAmG,EAC5G,UAAU,CAAC,sDAAsD,EACjE,UAAU,EAAE,SAAS,CAAC,oBAAoB,EAC1C,aAAa;QACb;WACG;UACJ,GAAG,IAAI,CAAA;QAER,8CAA8C;QAC9C,MAAM,UAAU,GAAG,IAAA,gBAAQ,EAAC,YAAY,CAAC,CAAA;QACzC,MAAM,EAAE,uBAAuB,EAAE,GAAG,EAAE,GAAG,UAAU,CAAA;QAEnD,yDAAyD;QACzD,MAAM,mBAAmB,GAAG,MAAM,IAAA,oBAAK,EAAC,gDAAgD,uBAAuB,EAAE,EAAE;YACjH,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,YAAY,EAAE;gBACvC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAA;QAEF,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,+BAA+B,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC9G,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAA;QACpD,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;QAEjC,IAAI,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAA;QAClE,CAAC;QAED,IAAI,KAAK,GAAG;YACV,IAAI,EAAE,UAAU,CAAC,UAAU;YAC3B,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,aAAa;YAC3B,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,SAAS,EAAE,UAAU,CAAC,QAAQ;YAC9B,MAAM,EAAE,kCAAiB,CAAC,MAAM;YAChC,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;SAChC,CAAA;QAED,IAAI,IAAI,GAAG,MAAM,IAAA,qBAAa,EAAC,gBAAI,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QAE9D,OAAO,GAAG,MAAM,IAAA,qBAAa,EAAC,kBAAO,CAAC,CAAC,IAAI,CAAC;YAC1C,GAAG,OAAO;YACV,GAAG,KAAK;YACR,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;QAEF,OAAO,CAAC,OAAO,CAAC,GAAG,CACjB,iBAAiB,EACjB,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,OAAO;YACV,OAAO,EAAE,qBAAqB;SAC/B,CAAC,EACF;YACE,QAAQ,EAAE,IAAI;SACf,CACF,CAAA;QAED,OAAO,CAAC,QAAQ,CAAC,IAAA,yBAAiB,EAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAA;IACxE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAW,GAAG,CAAC,OAAO,CAAA;QAEjC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,CAAC,GAAG,CACjB,iBAAiB,EACjB,IAAI,CAAC,SAAS,CAAC;gBACb,GAAG,OAAO;gBACV,OAAO;aACR,CAAC,EACF;gBACE,QAAQ,EAAE,IAAI;aACf,CACF,CAAA;YAED,OAAO,CAAC,QAAQ,CAAC,IAAA,yBAAiB,EAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAA;YACtE,OAAM;QACR,CAAC;QAED,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,kBAAU,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IACvD,OAAO,CAAC,MAAM,GAAG,GAAG,CAAA;AACtB,CAAC,CAAC,CAAA","sourcesContent":["import Router from 'koa-router'\nimport fetch from 'node-fetch'\n\nimport { User, VerificationToken, VerificationTokenType } from '@things-factory/auth-base'\nimport { config } from '@things-factory/env'\nimport { getRepository, getUrlFromContext } from '@things-factory/shell'\nimport { parseJwt } from '@things-factory/utils'\n\nimport { ACCOUNTING_STATUS, AccountingAPI } from '../controllers/accounting-api'\nimport { Account } from '../entities'\n\nconst { apiKey, apiSecret, hostname, callback: redirect_uri } = config.get('accountingIntegrationXero', {})\n\nconst debug = require('debug')('things-factory:integration-accounting:xero-router')\n\nexport const xeroRouter = new Router()\n\nxeroRouter.get('/callback-xero', async (context, next) => {\n  try {\n    const { code, state: nonce } = context.query\n\n    const verificationTokenRepository = getRepository(VerificationToken)\n\n    var verification: VerificationToken = await verificationTokenRepository.findOne({\n      where: {\n        token: nonce,\n        type: VerificationTokenType.REQUEST_ACCESS_TOKEN\n      }\n    })\n\n    const { userId, suppliment: accountId } = verification\n\n    await verificationTokenRepository.delete({\n      userId,\n      token: nonce,\n      type: VerificationTokenType.REQUEST_ACCESS_TOKEN\n    })\n\n    var account = await AccountingAPI.getAccounting(accountId)\n    const connectRequestData = {\n      grant_type: 'authorization_code',\n      code,\n      redirect_uri\n    }\n\n    const connectResponse = await fetch(`https://identity.xero.com/connect/token`, {\n      method: 'post',\n      headers: {\n        Authorization: `Basic ${Buffer.from(apiKey + ':' + apiSecret).toString('base64')}`,\n        'Content-Type': 'application/x-www-form-urlencoded'\n      },\n      body: Object.entries(connectRequestData)\n        .map(([key, value]) => encodeURIComponent(key) + '=' + encodeURIComponent(value))\n        .join('&')\n    })\n\n    if (!connectResponse.ok) {\n      throw new Error(`get account information failed: ${await connectResponse.text()}`)\n    }\n\n    const body = await connectResponse.json()\n    const {\n      access_token /* token used to call the API */,\n      id_token /* token containing user identity details (only returned if OpenID Connect scopes are requested) */,\n      expires_in /* amount of seconds until the access token expires */,\n      token_type: tokenType /* must be Bearer */,\n      refresh_token\n      /* token used to refresh the access token once it has expired (only returned if the offline_access scope is requested).\n       */\n    } = body\n\n    /* decode access_token to get auth-event-id */\n    const accessInfo = parseJwt(access_token)\n    const { authentication_event_id, exp } = accessInfo\n\n    /* get connections through the authentication_event_id */\n    const connectionsResponse = await fetch(`https://api.xero.com/connections?authEventId=${authentication_event_id}`, {\n      method: 'get',\n      headers: {\n        Authorization: `Bearer ${access_token}`,\n        'Content-Type': 'application/json'\n      }\n    })\n\n    if (!connectionsResponse.ok) {\n      context.throw(connectionsResponse.status, `get connection list failed: ${await connectionsResponse.text()}`)\n    }\n\n    const connections = await connectionsResponse.json()\n    debug('connections', connections)\n\n    var connection = connections[0]\n    if (!connection) {\n      context.throw(400, 'connection not found for this access token')\n    }\n\n    var patch = {\n      name: connection.tenantName,\n      accessToken: access_token,\n      refreshToken: refresh_token,\n      accessInfo: JSON.stringify(accessInfo, null, 2),\n      accountInfo: JSON.stringify(connection, null, 2),\n      accountId: connection.tenantId,\n      status: ACCOUNTING_STATUS.ACTIVE,\n      tokenType,\n      expiresIn: new Date(exp * 1000)\n    }\n\n    var user = await getRepository(User).findOneBy({ id: userId })\n\n    account = await getRepository(Account).save({\n      ...account,\n      ...patch,\n      updater: user\n    })\n\n    context.cookies.set(\n      'xero-accounting',\n      JSON.stringify({\n        ...account,\n        message: 'success to activate'\n      }),\n      {\n        httpOnly: true\n      }\n    )\n\n    context.redirect(getUrlFromContext(context, '/callback-private-xero'))\n  } catch (err) {\n    var message: string = err.message\n\n    if (account) {\n      context.cookies.set(\n        'xero-accounting',\n        JSON.stringify({\n          ...account,\n          message\n        }),\n        {\n          httpOnly: true\n        }\n      )\n\n      context.redirect(getUrlFromContext(context, '/callback-private-xero'))\n      return\n    }\n\n    throw err\n  }\n})\n\nxeroRouter.post('/webhook-xero', async (context, next) => {\n  context.status = 200\n})\n"]}