@unchainedshop/plugins 2.8.15 → 2.8.17

package/lib/plugins-index.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugins-index.js","sourceRoot":"","sources":["../src/plugins-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAEtF,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,WAAW;AACX,OAAO,oBAAoB,CAAC;AAC5B,OAAO,wBAAwB,CAAC;AAChC,OAAO,4BAA4B,CAAC;AACpC,OAAO,sBAAsB,CAAC;AAE9B,UAAU;AACV,OAAO,sBAAsB,CAAC;AAC9B,OAAO,8BAA8B,CAAC;AACtC,OAAO,8BAA8B,CAAC;AACtC,OAAO,uCAAuC,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,cAAc;AACd,OAAO,wBAAwB,CAAC;AAChC,OAAO,6BAA6B,CAAC;AAErC,UAAU;AACV,OAAO,yCAAyC,CAAC;AACjD,OAAO,+BAA+B,CAAC;AACvC,OAAO,2BAA2B,CAAC;AACnC,OAAO,4BAA4B,CAAC;AACpC,OAAO,0BAA0B,CAAC;AAClC,OAAO,6BAA6B,CAAC;AACrC,OAAO,6BAA6B,CAAC;AACrC,OAAO,4BAA4B,CAAC;AACpC,OAAO,oCAAoC,CAAC;AAC5C,OAAO,2CAA2C,CAAC;AACnD,OAAO,+BAA+B,CAAC;AACvC,OAAO,gCAAgC,CAAC;AACxC,OAAO,iCAAiC,CAAC;AAEzC,kBAAkB;AAClB,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AAEnC,aAAa;AACb,OAAO,wBAAwB,CAAC;AAEhC,cAAc;AACd,OAAO,2BAA2B,CAAC;AAEnC,cAAc;AACd,OAAO,gCAAgC,CAAC;AAExC,UAAU;AACV,OAAO,yBAAyB,CAAC;AACjC,OAAO,2BAA2B,CAAC;AACnC,OAAO,qBAAqB,CAAC;AAC7B,OAAO,sBAAsB,CAAC;AAC9B,OAAO,0BAA0B,CAAC;AAClC,OAAO,uBAAuB,CAAC;AAC/B,OAAO,mBAAmB,CAAC;AAC3B,OAAO,iBAAiB,CAAC;AACzB,OAAO,+BAA+B,CAAC;AACvC,OAAO,8BAA8B,CAAC;AACtC,OAAO,iCAAiC,CAAC;AACzC,OAAO,mCAAmC,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,mBAAmB;AACnB,OAAO,kCAAkC,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,4BAA4B,CAAC;AACpC,OAAO,8BAA8B,CAAC;AAEtC,MAAM,EACJ,sBAAsB,GAAG,oBAAoB,EAC7C,mBAAmB,GAAG,iBAAiB,EACvC,oBAAoB,GAAG,kBAAkB,EACzC,uBAAuB,GAAG,+BAA+B,EACzD,sBAAsB,GAAG,4BAA4B,EACrD,sBAAsB,GAAG,oBAAoB;AAC7C,oCAAoC;AACpC,sBAAsB,GAAG,SAAS,GACnC,GAAG,OAAO,CAAC,GAAG,CAAC;AAEhB,wCAAwC;AACxC,8DAA8D;AAE9D,MAAM,CAAC,MAAM,cAAc,GAKvB;IACF,iBAAiB,EAAE;QACjB,SAAS,EAAE,gCAAgC;KAC5C;IACD,iBAAiB,EAAE;QACjB,SAAS,EAAE,+BAA+B;KAC3C;IACD,SAAS,EAAE;QACT,SAAS,EAAE,wBAAwB;KACpC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,GAAG,EACH,EAAE,YAAY,EAAmC,EACjD,EAAE;IACF,+BAA+B,CAAC,GAAG,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAC;IAE5E,+BAA+B,CAAC,GAAG,EAAE,sBAAsB,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAE/F,+BAA+B,CAC7B,GAAG,EACH,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EACzC,aAAa,CACd,CAAC;IAEF,+BAA+B,CAC7B,GAAG,EACH,uBAAuB,EACvB,OAAO,CAAC,IAAI,EAAE,EACd,0BAA0B,CAC3B,CAAC;IAEF,+BAA+B,CAC7B,GAAG,EACH,sBAAsB,EACtB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC,EACF,gBAAgB,CACjB,CAAC;IAEF,+BAA+B,CAC7B,GAAG,EACH,sBAAsB,EACtB,OAAO,CAAC,IAAI,CAAC;QACX,MAAM,EAAE,KAAK;KACd,CAAC,EACF,eAAe,CAChB,CAAC;IAEF,+BAA+B,CAC7B,GAAG,EACH,oBAAoB,EACpB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAC1C,cAAc,CACf,CAAC;IAEF,mCAAmC;IACnC,SAAS;IACT,2BAA2B;IAC3B,mBAAmB;IACnB,qBAAqB;IACrB,QAAQ;IACR,iBAAiB;IACjB,KAAK;IAEL,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnC,6BAA6B,CAAC,YAAY,CAAC,CAAC;IAC5C,oCAAoC,EAAE,CAAC;AACzC,CAAC,CAAC"}
+{"version":3,"file":"plugins-index.js","sourceRoot":"","sources":["../src/plugins-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAEtF,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,WAAW;AACX,OAAO,oBAAoB,CAAC;AAC5B,OAAO,wBAAwB,CAAC;AAChC,OAAO,4BAA4B,CAAC;AACpC,OAAO,sBAAsB,CAAC;AAE9B,UAAU;AACV,OAAO,sBAAsB,CAAC;AAC9B,OAAO,8BAA8B,CAAC;AACtC,OAAO,8BAA8B,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,mCAAmC,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,cAAc;AACd,OAAO,wBAAwB,CAAC;AAChC,OAAO,6BAA6B,CAAC;AAErC,UAAU;AACV,OAAO,yCAAyC,CAAC;AACjD,OAAO,+BAA+B,CAAC;AACvC,OAAO,2BAA2B,CAAC;AACnC,OAAO,4BAA4B,CAAC;AACpC,OAAO,0BAA0B,CAAC;AAClC,OAAO,6BAA6B,CAAC;AACrC,OAAO,6BAA6B,CAAC;AACrC,OAAO,4BAA4B,CAAC;AACpC,OAAO,oCAAoC,CAAC;AAC5C,OAAO,2CAA2C,CAAC;AACnD,OAAO,+BAA+B,CAAC;AACvC,OAAO,gCAAgC,CAAC;AACxC,OAAO,iCAAiC,CAAC;AAEzC,kBAAkB;AAClB,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AAEnC,aAAa;AACb,OAAO,wBAAwB,CAAC;AAEhC,cAAc;AACd,OAAO,2BAA2B,CAAC;AAEnC,cAAc;AACd,OAAO,gCAAgC,CAAC;AAExC,UAAU;AACV,OAAO,yBAAyB,CAAC;AACjC,OAAO,2BAA2B,CAAC;AACnC,OAAO,qBAAqB,CAAC;AAC7B,OAAO,sBAAsB,CAAC;AAC9B,OAAO,0BAA0B,CAAC;AAClC,OAAO,uBAAuB,CAAC;AAC/B,OAAO,mBAAmB,CAAC;AAC3B,OAAO,iBAAiB,CAAC;AACzB,OAAO,+BAA+B,CAAC;AACvC,OAAO,8BAA8B,CAAC;AACtC,OAAO,iCAAiC,CAAC;AACzC,OAAO,mCAAmC,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,mBAAmB;AACnB,OAAO,kCAAkC,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,4BAA4B,CAAC;AACpC,OAAO,8BAA8B,CAAC;AAEtC,MAAM,EACJ,sBAAsB,GAAG,oBAAoB,EAC7C,mBAAmB,GAAG,iBAAiB,EACvC,oBAAoB,GAAG,kBAAkB,EACzC,uBAAuB,GAAG,+BAA+B,EACzD,sBAAsB,GAAG,4BAA4B,EACrD,sBAAsB,GAAG,oBAAoB;AAC7C,oCAAoC;AACpC,sBAAsB,GAAG,SAAS,EAClC,qBAAqB,GAAG,2BAA2B,GACpD,GAAG,OAAO,CAAC,GAAG,CAAC;AAEhB,wCAAwC;AACxC,8DAA8D;AAE9D,MAAM,CAAC,MAAM,cAAc,GAKvB;IACF,iBAAiB,EAAE;QACjB,SAAS,EAAE,gCAAgC;KAC5C;IACD,oBAAoB,EAAE;QACpB,SAAS,EAAE,mCAAmC;KAC/C;IACD,iBAAiB,EAAE;QACjB,SAAS,EAAE,+BAA+B;KAC3C;IACD,SAAS,EAAE;QACT,SAAS,EAAE,wBAAwB;KACpC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,GAAG,EACH,EAAE,YAAY,EAAmC,EACjD,EAAE;IACF,+BAA+B,CAAC,GAAG,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAC;IAE5E,+BAA+B,CAAC,GAAG,EAAE,sBAAsB,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAE/F,+BAA+B,CAC7B,GAAG,EACH,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EACzC,aAAa,CACd,CAAC;IAEF,+BAA+B,CAC7B,GAAG,EACH,uBAAuB,EACvB,OAAO,CAAC,IAAI,EAAE,EACd,0BAA0B,CAC3B,CAAC;IAEF,+BAA+B,CAC7B,GAAG,EACH,sBAAsB,EACtB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC,EACF,gBAAgB,CACjB,CAAC;IAEF,+BAA+B,CAC7B,GAAG,EACH,sBAAsB,EACtB,OAAO,CAAC,IAAI,CAAC;QACX,MAAM,EAAE,KAAK;KACd,CAAC,EACF,eAAe,CAChB,CAAC;IAEF,+BAA+B,CAC7B,GAAG,EACH,oBAAoB,EACpB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAC1C,cAAc,CACf,CAAC;IAEF,+BAA+B,CAAC,GAAG,EAAE,qBAAqB,EAAE,eAAe,CAAC,CAAC;IAE7E,mCAAmC;IACnC,SAAS;IACT,2BAA2B;IAC3B,mBAAmB;IACnB,qBAAqB;IACrB,QAAQ;IACR,iBAAiB;IACjB,KAAK;IAEL,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnC,6BAA6B,CAAC,YAAY,CAAC,CAAC;IAC5C,oCAAoC,EAAE,CAAC;AACzC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unchainedshop/plugins",
-  "version": "2.8.15",
+  "version": "2.8.17",
   "main": "lib/plugins-index.js",
   "types": "lib/plugins-index.d.ts",
   "exports": {
@@ -75,7 +75,7 @@
     "@redis/client": "^1.5.8",
     "bip32": "^4.0.0",
     "escape-string-regexp": "^5.0.0",
-    "ethers": "^6.12.0",
+    "ethers": "^6.12.1",
     "express": "^4.18.2",
     "lru-cache": "^10.0.0",
     "open": "^10.0.0",
@@ -87,30 +87,30 @@
   },
   "devDependencies": {
     "@redis/client": "^1.5.14",
-    "@types/node": "^20.12.7",
-    "@unchainedshop/api": "^2.8.15",
-    "@unchainedshop/core-delivery": "^2.8.15",
-    "@unchainedshop/core-enrollments": "^2.8.15",
-    "@unchainedshop/core-filters": "^2.8.15",
-    "@unchainedshop/core-messaging": "^2.8.15",
-    "@unchainedshop/core-orders": "^2.8.15",
-    "@unchainedshop/core-payment": "^2.8.15",
-    "@unchainedshop/core-products": "^2.8.15",
-    "@unchainedshop/core-quotations": "^2.8.15",
-    "@unchainedshop/core-warehousing": "^2.8.15",
-    "@unchainedshop/core-worker": "^2.8.15",
-    "@unchainedshop/events": "^2.8.15",
-    "@unchainedshop/file-upload": "^2.8.15",
-    "@unchainedshop/logger": "^2.8.15",
-    "@unchainedshop/types": "^2.8.15",
-    "@unchainedshop/utils": "^2.8.15",
+    "@types/node": "^20.12.12",
+    "@unchainedshop/api": "^2.8.17",
+    "@unchainedshop/core-delivery": "^2.8.17",
+    "@unchainedshop/core-enrollments": "^2.8.17",
+    "@unchainedshop/core-filters": "^2.8.17",
+    "@unchainedshop/core-messaging": "^2.8.17",
+    "@unchainedshop/core-orders": "^2.8.17",
+    "@unchainedshop/core-payment": "^2.8.17",
+    "@unchainedshop/core-products": "^2.8.17",
+    "@unchainedshop/core-quotations": "^2.8.17",
+    "@unchainedshop/core-warehousing": "^2.8.17",
+    "@unchainedshop/core-worker": "^2.8.17",
+    "@unchainedshop/events": "^2.8.17",
+    "@unchainedshop/file-upload": "^2.8.17",
+    "@unchainedshop/logger": "^2.8.17",
+    "@unchainedshop/types": "^2.8.17",
+    "@unchainedshop/utils": "^2.8.17",
     "bluebird": "^3.7.2",
     "event-iterator": "^2.0.0",
     "express": "^4.19.2",
     "jest": "^29.7.0",
     "JSONStream": "^1.3.5",
-    "lru-cache": "^10.2.0",
-    "minio": "^7.1.3",
+    "lru-cache": "^10.2.2",
+    "minio": "^7.1.4",
     "node-sheets": "^1.2.0",
     "nodemailer": "^6.9.13",
     "open": "^10.1.0",

package/src/payment/saferpay/adapter.ts

@@ -0,0 +1,255 @@
+import { IPaymentAdapter } from '@unchainedshop/types/payments.js';
+import { PaymentAdapter, PaymentDirector, PaymentError } from '@unchainedshop/core-payment';
+import { UnchainedCore } from '@unchainedshop/types/core.js';
+import { mongodb } from '@unchainedshop/mongodb';
+import { PaymentPageInitializeInput, SaferpayClient } from './api/index.js';
+import { buildSignature } from './buildSignature.js';
+import { SaferpayTransactionsModule } from './module/configureSaferpayTransactionsModule.js';
+
+export * from './middleware.js';
+
+const {
+  SAFERPAY_BASE_URL = 'https://test.saferpay.com/api',
+  SAFERPAY_CUSTOMER_ID,
+  SAFERPAY_WEBHOOK_PATH = '/payment/saferpay/webhook',
+  SAFERPAY_RETURN_PATH = '/saferpay/return',
+  ROOT_URL = 'http://localhost:4010',
+  EMAIL_WEBSITE_URL,
+  SAFERPAY_USER,
+  SAFERPAY_PW,
+} = process.env;
+
+const newSaferpayError = ({ code, message }: { code: string; message?: string }) => {
+  const error = new Error(message || code);
+  error.name = `SAFERPAY_${code}`;
+  return error;
+};
+
+const addTransactionId = (urlString, saferpayTransactionId) => {
+  const urlWithTransactionId = new URL(urlString);
+  urlWithTransactionId.searchParams.append('transactionId', saferpayTransactionId.toString('hex'));
+  return urlWithTransactionId.href;
+};
+
+export const WordlineSaferpay: IPaymentAdapter = {
+  ...PaymentAdapter,
+
+  key: 'shop.unchained.payment.saferpay',
+  label: 'Worldline Saferpay API',
+  version: '1.40.0',
+
+  typeSupported(type) {
+    return type === 'GENERIC';
+  },
+
+  actions: (params) => {
+    const { modules } = params.context as UnchainedCore & {
+      modules: { saferpayTransactions: SaferpayTransactionsModule };
+    };
+
+    const createSaferPayClient = () => {
+      if (!SAFERPAY_CUSTOMER_ID || !SAFERPAY_USER || !SAFERPAY_PW)
+        throw new Error('Credentials not Set');
+      const saferpayClient = new SaferpayClient(
+        SAFERPAY_BASE_URL,
+        SAFERPAY_CUSTOMER_ID,
+        SAFERPAY_USER,
+        SAFERPAY_PW,
+      );
+      return saferpayClient;
+    };
+
+    const adapter = {
+      ...PaymentAdapter.actions(params),
+
+      getTerminalId() {
+        return params.config.find((item) => item.key === 'terminalId')?.value;
+      },
+
+      // eslint-disable-next-line
+      configurationError() {
+        // eslint-disable-line
+        if (
+          !SAFERPAY_BASE_URL ||
+          !SAFERPAY_CUSTOMER_ID ||
+          !SAFERPAY_USER ||
+          !SAFERPAY_PW ||
+          !adapter.getTerminalId()
+        ) {
+          return PaymentError.INCOMPLETE_CONFIGURATION;
+        }
+        return null as unknown as PaymentError;
+      },
+
+      isActive() {
+        if (adapter.configurationError() === null) return true;
+        return false;
+      },
+
+      isPayLaterAllowed() {
+        return false;
+      },
+
+      sign: async (transactionContext: any = {}) => {
+        const { orderPayment, order } = params.paymentContext;
+
+        if (!orderPayment || !order) {
+          throw new Error('orderPayment or order not found');
+        }
+        const pricing = modules.orders.pricingSheet(order);
+        const totalAmount = pricing?.total({ useNetPrice: false }).amount;
+
+        const saferpayTransactionId = await modules.saferpayTransactions.createTransaction(
+          orderPayment._id,
+        );
+
+        const signature = await buildSignature(saferpayTransactionId.toString('hex'), orderPayment._id);
+        const paymentPageInitInput: PaymentPageInitializeInput = {
+          ...(transactionContext || {}),
+          TerminalId: adapter.getTerminalId(),
+          Payment: {
+            Amount: {
+              Value: totalAmount.toString(),
+              CurrencyCode: order.currency,
+            },
+            OrderId: order._id,
+            Description: transactionContext.description || 'Bestellung',
+            ...(transactionContext?.Payment || {}),
+          },
+          ReturnUrl: {
+            Url: `${EMAIL_WEBSITE_URL || ROOT_URL}${SAFERPAY_RETURN_PATH}`,
+            ...(transactionContext?.ReturnUrl || {}),
+          },
+          Notification: {
+            SuccessNotifyUrl: `${ROOT_URL}${SAFERPAY_WEBHOOK_PATH}?orderPaymentId=${orderPayment._id}&signature=${signature}`,
+          },
+        };
+
+        paymentPageInitInput.ReturnUrl.Url = addTransactionId(
+          paymentPageInitInput.ReturnUrl.Url,
+          saferpayTransactionId,
+        );
+
+        paymentPageInitInput.Notification.SuccessNotifyUrl = addTransactionId(
+          paymentPageInitInput.Notification.SuccessNotifyUrl,
+          saferpayTransactionId,
+        );
+
+        const api = createSaferPayClient();
+        const paymentPageInit = await api.paymentPageInitialize(orderPayment, paymentPageInitInput);
+
+        await modules.saferpayTransactions.setToken(saferpayTransactionId, paymentPageInit.Token);
+
+        return JSON.stringify({
+          location: paymentPageInit.RedirectUrl,
+          token: paymentPageInit.Token,
+          transactionId: saferpayTransactionId.toString('hex'),
+        });
+      },
+
+      charge: async ({ transactionId }: { transactionId: string }) => {
+        const { orderPayment, order } = params.paymentContext;
+
+        if (!orderPayment || !order) {
+          throw new Error('orderPayment or order not found');
+        }
+        const pricing = modules.orders.pricingSheet(order);
+        const totalAmount = pricing.total({ useNetPrice: false }).amount;
+
+        const saferpayTransaction = await modules.saferpayTransactions.findTransactionById(
+          mongodb.ObjectId.createFromHexString(transactionId),
+        );
+
+        const api = createSaferPayClient();
+        const paymentPageAssert = await api.paymentPageAssert(orderPayment, {
+          Token: saferpayTransaction.token,
+        });
+
+        const success =
+          !paymentPageAssert.ErrorMessage &&
+          paymentPageAssert.Transaction.Amount.Value === totalAmount.toString() &&
+          paymentPageAssert.Transaction.Amount.CurrencyCode === order.currency &&
+          (paymentPageAssert.Transaction.Status === 'AUTHORIZED' ||
+            paymentPageAssert.Transaction.Status === 'CAPTURED');
+        if (success) {
+          return {
+            transactionId,
+            settledTransaction: paymentPageAssert.Transaction,
+            // arbitraryFields,
+            // credentials,
+          };
+        }
+
+        throw newSaferpayError({
+          code: paymentPageAssert.ErrorName || `WRONG_STATUS_${paymentPageAssert.Transaction.Status}`,
+          message: paymentPageAssert.ErrorMessage,
+        });
+      },
+
+      async confirm() {
+        const { orderPayment } = params.paymentContext;
+
+        if (!orderPayment) {
+          throw new Error('orderPayment not found');
+        }
+        const { transactionId } = orderPayment;
+        if (!transactionId) return false;
+
+        const saferpayTransaction = await modules.saferpayTransactions.findTransactionById(
+          mongodb.ObjectId.createFromHexString(transactionId),
+        );
+
+        const api = createSaferPayClient();
+        const paymentPageAssert = await api.paymentPageAssert(orderPayment, {
+          Token: saferpayTransaction.token,
+        });
+
+        if (paymentPageAssert.Behavior === 'DO_NOT_RETRY') return false;
+
+        if (paymentPageAssert.Transaction.Status !== 'AUTHORIZED') return false;
+        const transactionCaptureRes = await api.transactionCapture(orderPayment, {
+          TransactionReference: {
+            TransactionId: paymentPageAssert.Transaction.Id,
+          },
+        });
+
+        return transactionCaptureRes.Status === 'CAPTURED';
+      },
+
+      cancel: async () => {
+        const { orderPayment } = params.paymentContext;
+
+        if (!orderPayment) {
+          throw new Error('orderPayment not found');
+        }
+
+        const { transactionId } = orderPayment;
+        if (!transactionId) return false;
+
+        const saferpayTransaction = await modules.saferpayTransactions.findTransactionById(
+          mongodb.ObjectId.createFromHexString(transactionId),
+        );
+
+        const api = createSaferPayClient();
+        const paymentPageAssert = await api.paymentPageAssert(orderPayment, {
+          Token: saferpayTransaction.token,
+        });
+
+        if (paymentPageAssert.Behavior === 'DO_NOT_RETRY') return false;
+
+        if (paymentPageAssert.Transaction.Status !== 'AUTHORIZED') return false;
+        const transactionCancelRes = await api.transactionCancel(orderPayment, {
+          TransactionReference: {
+            TransactionId: paymentPageAssert.Transaction.Id,
+          },
+        });
+
+        return transactionCancelRes.TransactionId === transactionId;
+      },
+    };
+
+    return adapter;
+  },
+};
+
+PaymentDirector.registerAdapter(WordlineSaferpay);

package/src/payment/saferpay/api/api/SaferpayClient.ts

@@ -0,0 +1,79 @@
+import { OrderPayment } from '@unchainedshop/types/orders.payments.js';
+import { TransactionCancelInput, TransactionCancelResponse } from '../models/TransactionCancel.js';
+import { TransactionCaptureInput, TransactionCaptureResponse } from '../models/TransactionCapture.js';
+import { PaymentPageAssertInput, PaymentPageAssertResponse } from '../models/PaymentPageAssert.js';
+import {
+  PaymentPageInitializeInput,
+  PaymentPageInitializeResponse,
+} from '../models/PaymentPageInitialize.js';
+import { RequestHeader } from '../models/Request.js';
+import { SaferpayConnection } from './SaferpayConnection.js';
+
+export class SaferpayClient {
+  private conn: SaferpayConnection;
+
+  private customerId: string;
+
+  private specVersion: string;
+
+  public constructor(
+    baseUrl: string,
+    customerId: string,
+    user: string,
+    password: string,
+    specVersion?: string,
+  ) {
+    this.customerId = customerId;
+    this.specVersion = specVersion || '1.40';
+    this.conn = new SaferpayConnection(baseUrl, user, password);
+  }
+
+  public buildRequestHeader(requestId: string, retryIndicator: number): RequestHeader {
+    return {
+      SpecVersion: this.specVersion,
+      CustomerId: this.customerId,
+      RequestId: requestId,
+      RetryIndicator: retryIndicator,
+    };
+  }
+
+  public async paymentPageInitialize(
+    orderPayment: OrderPayment,
+    input: Omit<PaymentPageInitializeInput, 'RequestHeader'>,
+  ): Promise<PaymentPageInitializeResponse> {
+    return this.conn.post('/Payment/v1/PaymentPage/Initialize', {
+      ...input,
+      RequestHeader: this.buildRequestHeader(orderPayment._id, 0),
+    }) as Promise<PaymentPageInitializeResponse>;
+  }
+
+  public async paymentPageAssert(
+    orderPayment: OrderPayment,
+    input: Omit<PaymentPageAssertInput, 'RequestHeader'>,
+  ): Promise<PaymentPageAssertResponse> {
+    return this.conn.post('/Payment/v1/PaymentPage/Assert', {
+      ...input,
+      RequestHeader: this.buildRequestHeader(orderPayment._id, 0),
+    }) as Promise<PaymentPageAssertResponse>;
+  }
+
+  public async transactionCancel(
+    orderPayment: OrderPayment,
+    input: Omit<TransactionCancelInput, 'RequestHeader'>,
+  ): Promise<TransactionCancelResponse> {
+    return this.conn.post('/Payment/v1/Transaction/Cancel', {
+      ...input,
+      RequestHeader: this.buildRequestHeader(orderPayment._id, 0),
+    }) as Promise<TransactionCancelResponse>;
+  }
+
+  public async transactionCapture(
+    orderPayment: OrderPayment,
+    input: Omit<TransactionCaptureInput, 'RequestHeader'>,
+  ): Promise<TransactionCaptureResponse> {
+    return this.conn.post('/Payment/v1/Transaction/Capture', {
+      ...input,
+      RequestHeader: this.buildRequestHeader(orderPayment._id, 0),
+    }) as Promise<TransactionCaptureResponse>;
+  }
+}

package/src/payment/{worldline-saferpay/worldline-saferpay-client → saferpay/api}/api/SaferpayConnection.ts

@@ -18,7 +18,8 @@ export class SaferpayConnection {
 
   private getHeaders() {
     return {
-      'Content-Type': 'application/json',
+      'Content-Type': 'application/json; charset=utf-8',
+      Accept: 'application/json',
       Authorization: `Basic ${Buffer.from(`${this.user}:${this.password}`, 'binary').toString(
         'base64',
       )}`,
@@ -29,9 +30,6 @@ export class SaferpayConnection {
     const res = await fetch(this.buildUrl(uri), {
       method: 'POST',
       body: JSON.stringify(data),
-      // eslint-disable-next-line
-      // @ts-ignore
-      duplex: 'half',
       headers: this.getHeaders(),
     });
     return res.json();

package/src/payment/{worldline-saferpay/worldline-saferpay-client → saferpay/api}/models/PaymentPageInitialize.ts

@@ -32,19 +32,22 @@ export interface PaymentPageInitializeInput extends Request {
   Wallets?: string[];
   Payer?: {
     IpAddress?: string;
+    Ipv6Address?: string;
     LanguageCode?: string;
+    BillingAddress?: Map<string, string>;
+    DeliveryAddress?: Map<string, string>;
   };
-  BillingAddress?: Map<string, string>;
-  DeliveryAddress?: Map<string, string>;
   RegisterAlias?: {
     IdGenerator: 'MANUAL' | 'RANDOM' | 'RANDOM_UNIQUE';
     Id?: string;
     Lifetime?: number;
   };
-  ReturnUrls: {
-    Success: string;
-    Fail: string;
-    Abort?: string;
+  ReturnUrl: {
+    Url: string;
+  };
+  Notification?: {
+    SuccessNotifyUrl?: string;
+    FailNotifyUrl?: string;
   };
 }
 

package/src/payment/{worldline-saferpay/worldline-saferpay-client → saferpay/api}/models/Response.ts

@@ -5,5 +5,5 @@ export interface Response {
   };
   ErrorName?: string;
   ErrorMessage?: string;
-  Behavior?: 'ABORT' | 'OTHER_MEANS' | 'RETRY' | 'RETRY_LATER';
+  Behavior?: 'ABORT' | 'OTHER_MEANS' | 'RETRY' | 'RETRY_LATER' | 'DO_NOT_RETRY';
 }

package/src/payment/saferpay/api/models/TransactionCapture.ts

@@ -0,0 +1,20 @@
+import { Response } from './Response.js';
+import { Request } from './Request.js';
+import type { TransactionAmount } from './Transaction.js';
+
+export interface TransactionCaptureInput extends Request {
+  TransactionReference: {
+    TransactionId: string;
+    OrderId?: string;
+  };
+  Amount?: TransactionAmount;
+  Marketplace?: any; // TODO: Implement Marketplace type
+}
+
+export interface TransactionCaptureResponse extends Response {
+  CaptureId: string;
+  Status: 'PENDING' | 'CAPTURED';
+  OrderId?: string;
+  Date: string;
+  Invoice?: any;
+}

package/src/payment/saferpay/buildSignature.ts

@@ -0,0 +1,9 @@
+export const buildSignature = async (transactionId, orderPaymentId) => {
+  const payload = [transactionId, orderPaymentId, process.env.SAFERPAY_PW].filter(Boolean).join(':');
+
+  const msgUint8 = new TextEncoder().encode(payload);
+  const hashBuffer = await crypto.subtle.digest('SHA-256', msgUint8);
+  const hashArray = Array.from(new Uint8Array(hashBuffer));
+  const hashHex = hashArray.map((b) => b.toString(16).padStart(2, '0')).join('');
+  return hashHex;
+};

package/src/payment/saferpay/db/SaferpayTransactionsCollection.ts

@@ -0,0 +1,13 @@
+import { mongodb } from '@unchainedshop/mongodb';
+import { TimestampFields } from '@unchainedshop/types/common.js';
+
+export type SaferpayTransaction = {
+  orderPaymentId: any;
+  token?: string;
+} & TimestampFields;
+
+export const SaferpayTransactionsCollection = async (db: mongodb.Db) => {
+  const SaferpayTransactions = db.collection<SaferpayTransaction>('payment_saferpay_transactions');
+
+  return SaferpayTransactions;
+};

package/src/payment/saferpay/getReturnPath.ts

@@ -0,0 +1,10 @@
+const {
+  ROOT_URL,
+  SAFERPAY_WEBHOOK_PATH = '/payment/saferpay/webhook',
+  SAFERPAY_RETURN_PATH = '/saferpay/return',
+} = process.env;
+
+export const webhookPath = (orderPaymentId) =>
+  `${ROOT_URL}${SAFERPAY_WEBHOOK_PATH}?orderPaymentId=${orderPaymentId}`;
+
+export default (): string => `${ROOT_URL}${SAFERPAY_RETURN_PATH}`;

package/src/payment/saferpay/index.ts

@@ -0,0 +1,3 @@
+export * from './adapter.js';
+export * from './module/configureSaferpayTransactionsModule.js';
+export * from './middleware.js';

package/src/payment/saferpay/middleware.ts

@@ -0,0 +1,74 @@
+import { Context } from '@unchainedshop/types/api.js';
+import { createLogger } from '@unchainedshop/logger';
+import { buildSignature } from './buildSignature.js';
+import { SaferpayTransactionsModule } from './module/configureSaferpayTransactionsModule.js';
+
+const logger = createLogger('unchained:core-payment:saferpay:webhook');
+
+export const saferpayHandler = async (request, response) => {
+  const resolvedContext = request.unchainedContext as Context & {
+    modules: { saferpayTransactions: SaferpayTransactionsModule };
+  };
+  const { modules } = resolvedContext;
+
+  const { orderPaymentId, signature, transactionId } = request.query;
+  const isValidRequest =
+    typeof orderPaymentId === 'string' &&
+    typeof signature === 'string' &&
+    typeof transactionId === 'string' &&
+    orderPaymentId &&
+    transactionId &&
+    signature;
+
+  if ((request.method !== 'GET' && request.method !== 'HEAD') || !isValidRequest) {
+    logger.warn(`unhandled http method ${request.method} or orderPaymentId missing in query`);
+    response.writeHead(404);
+    response.end();
+    return;
+  }
+
+  try {
+    logger.verbose(`checkout with orderPaymentId: ${orderPaymentId}`);
+    const orderPayment = await modules.orders.payments.findOrderPayment({
+      orderPaymentId,
+    });
+    if (!orderPayment) {
+      throw new Error(`order payment not found with orderPaymentId: ${orderPaymentId}`);
+    }
+
+    const correctSignature = await buildSignature(transactionId, orderPaymentId);
+
+    if (correctSignature !== signature) {
+      throw new Error('Invalid signature');
+    }
+
+    const order = await modules.orders.checkout(
+      orderPayment.orderId,
+      {
+        paymentContext: {
+          transactionId,
+        },
+      },
+      resolvedContext,
+    );
+    logger.info(`checkout successful`, {
+      orderPaymentId,
+      orderId: order._id,
+    });
+    response.writeHead(200);
+    response.end(
+      JSON.stringify({
+        message: 'checkout successful',
+        orderPaymentId,
+        orderId: order._id,
+      }),
+    );
+  } catch (error) {
+    logger.error(error, {
+      orderPaymentId,
+      transactionId,
+    });
+    response.writeHead(500);
+    response.end(error.message);
+  }
+};

package/src/payment/saferpay/module/configureSaferpayTransactionsModule.ts

@@ -0,0 +1,33 @@
+import { mongodb } from '@unchainedshop/mongodb';
+import { SaferpayTransactionsCollection } from '../db/SaferpayTransactionsCollection.js';
+
+export const configureSaferpayTransactionsModule = async ({ db }: { db: mongodb.Db }) => {
+  const SaferpayTransactions = await SaferpayTransactionsCollection(db);
+
+  return {
+    findTransactionById: async (_id: mongodb.ObjectId) => {
+      return SaferpayTransactions.findOne({
+        _id,
+      });
+    },
+
+    createTransaction: async (orderPaymentId) => {
+      const result = await SaferpayTransactions.insertOne({
+        created: new Date(),
+        orderPaymentId,
+      });
+      return result.insertedId;
+    },
+
+    setToken: async (_id: mongodb.ObjectId, token: string) => {
+      await SaferpayTransactions.updateOne(
+        { _id },
+        {
+          $set: { token, updated: new Date() },
+        },
+      );
+    },
+  };
+};
+
+export type SaferpayTransactionsModule = Awaited<ReturnType<typeof configureSaferpayTransactionsModule>>;