@unchainedshop/plugins 5.0.0-alpha.3 → 5.0.0-alpha.4

package/lib/files/gridfs/handler-express.js

@@ -18,8 +18,9 @@ const gridfsHandler = async (req, res) => {
         const directoryName = decodeURIComponent(directoryNameRaw);
         const fileName = decodeURIComponent(fileNameRaw);
         res.setHeader('Access-Control-Allow-Methods', 'GET, PUT');
-        res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+        res.setHeader('Access-Control-Allow-Headers', req.get('Access-Control-Request-Headers') || 'Content-Type');
         res.setHeader('Access-Control-Allow-Origin', '*');
+        res.setHeader('Vary', 'Access-Control-Request-Headers');
         if (req.method === 'OPTIONS') {
             res.status(200).end();
             return;

package/lib/files/gridfs/handler-fastify.js

@@ -15,8 +15,9 @@ const gridfsHandler = async (req, reply) => {
         const { services, modules } = req.unchainedContext;
         const { directoryName, fileName } = req.params;
         reply.header('Access-Control-Allow-Methods', 'GET, PUT');
-        reply.header('Access-Control-Allow-Headers', 'content-type');
+        reply.header('Access-Control-Allow-Headers', req.headers['access-control-request-headers'] || 'content-type');
         reply.header('Access-Control-Allow-Origin', '*');
+        reply.header('Vary', 'Access-Control-Request-Headers');
         if (req.method === 'OPTIONS') {
             reply.status(200);
             return reply.send();

package/lib/payment/saferpay/adapter.js

@@ -22,11 +22,13 @@ export const WordlineSaferpay = {
     },
     actions: (config, context) => {
         const { modules } = context;
-        const { SAFERPAY_BASE_URL = 'https://test.saferpay.com/api', SAFERPAY_CUSTOMER_ID, SAFERPAY_WEBHOOK_PATH = '/payment/saferpay/webhook', SAFERPAY_RETURN_PATH = '/saferpay/return', ROOT_URL = 'http://localhost:4010', EMAIL_WEBSITE_URL, SAFERPAY_USER, SAFERPAY_PW, } = process.env;
+        const { SAFERPAY_BASE_URL = 'https://test.saferpay.com/api', SAFERPAY_CUSTOMER_ID, SAFERPAY_WEBHOOK_PATH = '/payment/saferpay/webhook', SAFERPAY_RETURN_PATH = '/saferpay/return', ROOT_URL = 'http://localhost:4010', EMAIL_WEBSITE_URL, SAFERPAY_API_USER, SAFERPAY_API_PASSWORD, SAFERPAY_USER, SAFERPAY_PW, } = process.env;
+        const apiUser = SAFERPAY_API_USER || SAFERPAY_USER;
+        const apiPassword = SAFERPAY_API_PASSWORD || SAFERPAY_PW;
         const createSaferPayClient = () => {
-            if (!SAFERPAY_CUSTOMER_ID || !SAFERPAY_USER || !SAFERPAY_PW)
+            if (!SAFERPAY_CUSTOMER_ID || !apiUser || !apiPassword)
                 throw new Error('Credentials not Set');
-            const saferpayClient = new SaferpayClient(SAFERPAY_BASE_URL, SAFERPAY_CUSTOMER_ID, SAFERPAY_USER, SAFERPAY_PW);
+            const saferpayClient = new SaferpayClient(SAFERPAY_BASE_URL, SAFERPAY_CUSTOMER_ID, apiUser, apiPassword);
             return saferpayClient;
         };
         const adapter = {
@@ -37,8 +39,8 @@ export const WordlineSaferpay = {
             configurationError() {
                 if (!SAFERPAY_BASE_URL ||
                     !SAFERPAY_CUSTOMER_ID ||
-                    !SAFERPAY_USER ||
-                    !SAFERPAY_PW ||
+                    !apiUser ||
+                    !apiPassword ||
                     !adapter.getTerminalId()) {
                     return PaymentError.INCOMPLETE_CONFIGURATION;
                 }

package/lib/payment/saferpay/buildSignature.js

@@ -1,5 +1,6 @@
 export const buildSignature = async (transactionId, orderPaymentId) => {
-    const payload = [transactionId, orderPaymentId, process.env.SAFERPAY_PW].filter(Boolean).join(':');
+    const secret = process.env.SAFERPAY_API_PASSWORD || process.env.SAFERPAY_PW;
+    const payload = [transactionId, orderPaymentId, secret].filter(Boolean).join(':');
     const msgUint8 = new TextEncoder().encode(payload);
     const hashBuffer = await crypto.subtle.digest('SHA-256', msgUint8);
     const hashArray = Array.from(new Uint8Array(hashBuffer));

package/lib/payment/saferpay/index.js

@@ -18,8 +18,11 @@ export const SaferpayPlugin = {
         },
     ],
     onRegister: () => {
-        const { SAFERPAY_CUSTOMER_ID, SAFERPAY_TERMINAL_ID, SAFERPAY_API_USER, SAFERPAY_API_PASSWORD } = process.env;
-        if (!SAFERPAY_CUSTOMER_ID || !SAFERPAY_TERMINAL_ID || !SAFERPAY_API_USER || !SAFERPAY_API_PASSWORD) {
+        const { SAFERPAY_CUSTOMER_ID, SAFERPAY_TERMINAL_ID, SAFERPAY_API_USER, SAFERPAY_API_PASSWORD, SAFERPAY_USER, SAFERPAY_PW, } = process.env;
+        if (!SAFERPAY_CUSTOMER_ID ||
+            !SAFERPAY_TERMINAL_ID ||
+            !(SAFERPAY_API_USER || SAFERPAY_USER) ||
+            !(SAFERPAY_API_PASSWORD || SAFERPAY_PW)) {
             throw new Error('Saferpay environment variables not fully configured');
         }
     },

package/lib/payment/stripe/stripe.js

@@ -7,7 +7,7 @@ if (STRIPE_SECRET) {
     try {
         const { default: Stripe } = await import('stripe');
         stripe = new Stripe(STRIPE_SECRET, {
-            apiVersion: '2026-07-29.dahlia',
+            apiVersion: '2026-08-26.dahlia',
         });
     }
     catch {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@unchainedshop/plugins",
   "description": "Official plugin collection for the Unchained Engine with payment, delivery, and pricing adapters",
-  "version": "5.0.0-alpha.3",
+  "version": "5.0.0-alpha.4",
   "main": "lib/plugins-index.js",
   "types": "lib/plugins-index.d.ts",
   "exports": {
@@ -137,7 +137,7 @@
     "minio": "^8.0.5",
     "nodemailer": "^9.0.0",
     "stripe": "^22.5.0",
-    "typescript": "^5.8.3",
+    "typescript": "^6.0.3",
     "web-push": "^3.6.7",
     "xml-js": "^1.6.11"
   }