@unchainedshop/ticketing 3.0.0 → 3.1.0

package/lib/magic-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"magic-key.d.ts","sourceRoot":"","sources":["../src/magic-key.ts"],"names":[],"mappings":";AAoCA,wBAIE"}
+{"version":3,"file":"magic-key.d.ts","sourceRoot":"","sources":["../src/magic-key.ts"],"names":[],"mappings":";AAsCA,wBAIE"}

package/lib/magic-key.js

@@ -7,7 +7,8 @@ const isMagicKeyValidForOrder = async (obj, { orderId }, { modules, getHeader })
     const magicKey = await modules.passes.buildMagicKey(order._id);
     return magicKey === getHeader('x-magic-key');
 };
-const isMagicKeyValidForToken = async (obj, { tokenId }, { modules, getHeader }) => {
+const isMagicKeyValidForToken = async (root, params, { modules, getHeader }) => {
+    const tokenId = params?.tokenId || (root && 'chainTokenId' in root && root._id) || null;
     const token = await modules.warehousing.findToken({ tokenId });
     // always return true if tokenId leads to nothing to show potentially allowed actions
     if (!token)

package/lib/magic-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"magic-key.js","sourceRoot":"","sources":["../src/magic-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,MAAM,uBAAuB,GAAG,KAAK,EACnC,GAAQ,EACR,EAAE,OAAO,EAAuB,EAChC,EAAE,OAAO,EAAE,SAAS,EAA0B,EAC9C,EAAE;IACF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,qFAAqF;IACrF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,QAAQ,KAAK,SAAS,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,KAAK,EACnC,GAAQ,EACR,EAAE,OAAO,EAAuB,EAChC,EAAE,OAAO,EAAE,SAAS,EAA0B,EAC9C,EAAE;IACF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,qFAAqF;IACrF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,6FAA6F;IAC7F,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,QAAQ,KAAK,SAAS,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,eAAe,GAAG,EAAE;IAClB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC3E,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC3E,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;AAC/E,CAAC,CAAC"}
+{"version":3,"file":"magic-key.js","sourceRoot":"","sources":["../src/magic-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,MAAM,uBAAuB,GAAG,KAAK,EACnC,GAAQ,EACR,EAAE,OAAO,EAAuB,EAChC,EAAE,OAAO,EAAE,SAAS,EAA0B,EAC9C,EAAE;IACF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1D,qFAAqF;IACrF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,QAAQ,KAAK,SAAS,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,KAAK,EACnC,IAAS,EACT,MAAkC,EAClC,EAAE,OAAO,EAAE,SAAS,EAA0B,EAC9C,EAAE;IACF,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,IAAI,cAAc,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAExF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,qFAAqF;IACrF,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,6FAA6F;IAC7F,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAEhD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,QAAQ,KAAK,SAAS,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,eAAe,GAAG,EAAE;IAClB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC3E,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC3E,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;AAC/E,CAAC,CAAC"}

package/lib/mobile-tickets/apple-webservice.d.ts

@@ -0,0 +1,7 @@
+import { Request, Response } from 'express';
+import { TicketingAPI } from '../types.js';
+export declare const appleWalletHandler: (req: Request & {
+    unchainedContext: TicketingAPI;
+}, res: Response) => Promise<void>;
+export default function loadAppleWalletHandler(app: any): void;
+//# sourceMappingURL=apple-webservice.d.ts.map

package/lib/mobile-tickets/apple-webservice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple-webservice.d.ts","sourceRoot":"","sources":["../../src/mobile-tickets/apple-webservice.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAW3C,eAAO,MAAM,kBAAkB,QACxB,OAAO,GAAG;IAAE,gBAAgB,EAAE,YAAY,CAAA;CAAE,OAC5C,QAAQ,kBAyNd,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAG,KAAA,QASjD"}

package/lib/mobile-tickets/apple-webservice.js

@@ -0,0 +1,177 @@
+import { createLogger } from '@unchainedshop/logger';
+import { useMiddlewareWithCurrentContext } from '@unchainedshop/api/express/index.js';
+import express from 'express';
+const logger = createLogger('unchained:apple-wallet-webservice');
+const { APPLE_WALLET_WEBSERVICE_PATH = '/rest/apple-wallet' } = process.env;
+const isAuthenticationTokenCorrect = (req, authenticationToken) => {
+    const expectedAuthorizationValue = `ApplePass ${authenticationToken}`;
+    return req.headers.authorization === expectedAuthorizationValue;
+};
+export const appleWalletHandler = async (req, res) => {
+    const resolvedContext = req.unchainedContext;
+    const { modules } = resolvedContext;
+    logger.info(`${req.path} (${JSON.stringify(req.query)})`);
+    if (req.path.startsWith('/download/')) {
+        try {
+            const [, , passFileName] = req.path.split('/');
+            const [tokenId] = passFileName.split('.pkpass');
+            if (!tokenId) {
+                res.writeHead(404);
+                res.end();
+                return;
+            }
+            const token = await modules.warehousing.findToken({
+                tokenId,
+            });
+            if (!token) {
+                res.writeHead(404);
+                res.end('Token not found');
+                return;
+            }
+            const { hash } = req.query;
+            const correctHash = await modules.warehousing.buildAccessKeyForToken(tokenId);
+            if (hash !== correctHash) {
+                res.writeHead(403);
+                res.end('Token hash invalid for current owner');
+                return;
+            }
+            const passFile = await modules.passes.upsertAppleWalletPass(token, resolvedContext);
+            const url = await modules.files.getUrl(passFile, {});
+            const response = await fetch(url);
+            const data = await response.arrayBuffer();
+            const uint8View = new Uint8Array(data);
+            res.status(200);
+            res.setHeader('Content-Type', 'application/vnd.apple.pkpass');
+            res.setHeader('Content-Disposition', `attachment; filename=${tokenId}.pkpass`);
+            res.end(uint8View);
+            return;
+        }
+        catch (e) {
+            console.error(e);
+        }
+        res.writeHead(500);
+        res.end();
+        return;
+    }
+    const [, apiVersion, endpoint, ...pathComponents] = req.path.split("/"); /* eslint-disable-line */
+    if (endpoint === 'devices') {
+        if (req.method === 'POST') {
+            // Register Device
+            const [deviceLibraryIdentifier, , passTypeIdentifier, serialNumber] = pathComponents;
+            const { pushToken } = req.body;
+            const pass = await modules.passes.findAppleWalletPass(passTypeIdentifier, serialNumber);
+            if (pass) {
+                if (!isAuthenticationTokenCorrect(req, pass.meta.rawData._id || pass.meta.rawData.tokenId)) {
+                    res.writeHead(401);
+                    res.end();
+                    return;
+                }
+                const newRegistration = await modules.passes.registerDeviceForAppleWalletPass(passTypeIdentifier, serialNumber, {
+                    deviceLibraryIdentifier,
+                    pushToken,
+                });
+                if (!newRegistration) {
+                    res.writeHead(200);
+                    res.end();
+                    return;
+                }
+                res.writeHead(201);
+                res.end();
+                return;
+            }
+        }
+        else if (req.method === 'GET') {
+            // Get the List of Updatable Passes
+            const lastUpdated = new Date();
+            const [deviceLibraryIdentifier, , passTypeIdentifier] = pathComponents;
+            const passesUpdatedSince = req.query?.passesUpdatedSince && new Date(req.query.passesUpdatedSince);
+            const passes = await modules.passes.findUpdatedAppleWalletPasses(passTypeIdentifier, deviceLibraryIdentifier, passesUpdatedSince);
+            const serialNumbers = passes.map((t) => t.meta.serialNumber);
+            if (serialNumbers?.length) {
+                res.writeHead(200, {
+                    'Content-Type': 'application/json',
+                });
+                res.write(JSON.stringify({
+                    serialNumbers,
+                    lastUpdated,
+                }));
+                res.end();
+                return;
+            }
+            res.writeHead(204);
+            res.end();
+            return;
+        }
+        else if (req.method === 'DELETE') {
+            // Unregister Device
+            const [deviceLibraryIdentifier, , passTypeIdentifier, serialNumber] = pathComponents;
+            const pass = await modules.passes.findAppleWalletPass(passTypeIdentifier, serialNumber);
+            if (pass) {
+                if (!isAuthenticationTokenCorrect(req, pass.meta.rawData._id || pass.meta.rawData.tokenId)) {
+                    res.writeHead(401);
+                    res.end();
+                    return;
+                }
+                await modules.passes.unregisterDeviceForAppleWalletPass(passTypeIdentifier, serialNumber, deviceLibraryIdentifier);
+                // Unregistered
+                res.writeHead(200);
+                res.end();
+                return;
+            }
+        }
+    }
+    else if (endpoint === 'log') {
+        // Log Mesage
+        const { logs } = req.body;
+        logs?.forEach((log) => {
+            if (typeof log === 'string') {
+                logger.info(log);
+            }
+        });
+        res.writeHead(200);
+        res.end();
+        return;
+    }
+    else if (endpoint === 'passes') {
+        if (req.method === 'GET') {
+            // Get an updated Pass
+            const [passTypeIdentifier, serialNumber] = pathComponents;
+            const pass = await modules.passes.findAppleWalletPass(passTypeIdentifier, serialNumber);
+            if (pass) {
+                if (!isAuthenticationTokenCorrect(req, pass.meta.rawData._id || pass.meta.rawData.tokenId)) {
+                    res.writeHead(401);
+                    res.end();
+                    return;
+                }
+                const { updated, created } = pass;
+                const lastModifiedDate = new Date(updated || created);
+                lastModifiedDate.setMilliseconds(0);
+                const ifModifiedSinceDate = new Date(req.header('if-modified-since'));
+                ifModifiedSinceDate.setMilliseconds(0);
+                if (ifModifiedSinceDate.getTime() >= lastModifiedDate.getTime()) {
+                    res.writeHead(304);
+                    res.end();
+                    return;
+                }
+                const url = modules.files.getUrl(pass, {});
+                const result = await fetch(url);
+                const data = await result.arrayBuffer();
+                const uint8View = new Uint8Array(data);
+                res.writeHead(200, {
+                    'Content-Type': 'application/vnd.apple.pkpass',
+                    'Last-Modified': lastModifiedDate.toUTCString(),
+                });
+                res.end(uint8View);
+                return;
+            }
+        }
+    }
+    res.writeHead(404);
+    res.end();
+};
+export default function loadAppleWalletHandler(app) {
+    useMiddlewareWithCurrentContext(app, APPLE_WALLET_WEBSERVICE_PATH, express.json({
+        type: 'application/json',
+    }), appleWalletHandler);
+}
+//# sourceMappingURL=apple-webservice.js.map

package/lib/mobile-tickets/apple-webservice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple-webservice.js","sourceRoot":"","sources":["../../src/mobile-tickets/apple-webservice.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,OAA8B,MAAM,SAAS,CAAC;AAGrD,MAAM,MAAM,GAAG,YAAY,CAAC,mCAAmC,CAAC,CAAC;AAEjE,MAAM,EAAE,4BAA4B,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;AAE5E,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE;IAChE,MAAM,0BAA0B,GAAG,aAAa,mBAAmB,EAAE,CAAC;IACtE,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,0BAA0B,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,GAAiD,EACjD,GAAa,EACb,EAAE;IACF,MAAM,eAAe,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC;IACpC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE1D,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,AAAD,EAAG,YAAY,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAEhD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;gBAChD,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YAC3B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YAEpF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;YAEvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,8BAA8B,CAAC,CAAC;YAC9D,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,wBAAwB,OAAO,SAAS,CAAC,CAAC;YAC/E,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,yBAAyB;IAClG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,kBAAkB;YAClB,MAAM,CAAC,uBAAuB,EAAE,AAAD,EAAG,kBAAkB,EAAE,YAAY,CAAC,GAAG,cAAc,CAAC;YACrF,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAExF,IAAI,IAAI,EAAE,CAAC;gBACT,IACE,CAAC,4BAA4B,CAC3B,GAAG,EACF,IAAI,CAAC,IAAI,CAAC,OAAe,CAAC,GAAG,IAAK,IAAI,CAAC,IAAI,CAAC,OAAe,CAAC,OAAO,CACrE,EACD,CAAC;oBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,gCAAgC,CAC3E,kBAAkB,EAClB,YAAY,EACZ;oBACE,uBAAuB;oBACvB,SAAS;iBACV,CACF,CAAC;gBAEF,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAChC,mCAAmC;YACnC,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,uBAAuB,EAAE,AAAD,EAAG,kBAAkB,CAAC,GAAG,cAAc,CAAC;YACvE,MAAM,kBAAkB,GACtB,GAAG,CAAC,KAAK,EAAE,kBAAkB,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kBAA4B,CAAC,CAAC;YAEpF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAC9D,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,CACnB,CAAC;YACF,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAE7D,IAAI,aAAa,EAAE,MAAM,EAAE,CAAC;gBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,cAAc,EAAE,kBAAkB;iBACnC,CAAC,CAAC;gBACH,GAAG,CAAC,KAAK,CACP,IAAI,CAAC,SAAS,CAAC;oBACb,aAAa;oBACb,WAAW;iBACZ,CAAC,CACH,CAAC;gBACF,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,oBAAoB;YACpB,MAAM,CAAC,uBAAuB,EAAE,AAAD,EAAG,kBAAkB,EAAE,YAAY,CAAC,GAAG,cAAc,CAAC;YAErF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAExF,IAAI,IAAI,EAAE,CAAC;gBACT,IACE,CAAC,4BAA4B,CAC3B,GAAG,EACF,IAAI,CAAC,IAAI,CAAC,OAAe,CAAC,GAAG,IAAK,IAAI,CAAC,IAAI,CAAC,OAAe,CAAC,OAAO,CACrE,EACD,CAAC;oBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,CAAC,MAAM,CAAC,kCAAkC,CACrD,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,CACxB,CAAC;gBAEF,eAAe;gBACf,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,aAAa;QACb,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC1B,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,sBAAsB;YACtB,MAAM,CAAC,kBAAkB,EAAE,YAAY,CAAC,GAAG,cAAc,CAAC;YAE1D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAExF,IAAI,IAAI,EAAE,CAAC;gBACT,IACE,CAAC,4BAA4B,CAC3B,GAAG,EACF,IAAI,CAAC,IAAI,CAAC,OAAe,CAAC,GAAG,IAAK,IAAI,CAAC,IAAI,CAAC,OAAe,CAAC,OAAO,CACrE,EACD,CAAC;oBACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;gBAElC,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;gBACtD,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAEpC,MAAM,mBAAmB,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACtE,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAEvC,IAAI,mBAAmB,CAAC,OAAO,EAAE,IAAI,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;oBAChE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;gBAEvC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,cAAc,EAAE,8BAA8B;oBAC9C,eAAe,EAAE,gBAAgB,CAAC,WAAW,EAAE;iBAChD,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAG;IAChD,+BAA+B,CAC7B,GAAG,EACH,4BAA4B,EAC5B,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC,EACF,kBAAkB,CACnB,CAAC;AACJ,CAAC"}

package/lib/mobile-tickets/google-webservice.d.ts

@@ -0,0 +1,7 @@
+import { Request, Response } from 'express';
+import { TicketingAPI } from '../types.js';
+export declare const googleWalletHandler: (req: Request & {
+    unchainedContext: TicketingAPI;
+}, res: Response) => Promise<void>;
+export default function loadGoogleWalletHandler(app: any): void;
+//# sourceMappingURL=google-webservice.d.ts.map

package/lib/mobile-tickets/google-webservice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-webservice.d.ts","sourceRoot":"","sources":["../../src/mobile-tickets/google-webservice.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3C,eAAO,MAAM,mBAAmB,QACzB,OAAO,GAAG;IAAE,gBAAgB,EAAE,YAAY,CAAA;CAAE,OAC5C,QAAQ,kBA+Cd,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,uBAAuB,CAAC,GAAG,KAAA,QASlD"}

package/lib/mobile-tickets/google-webservice.js

@@ -0,0 +1,52 @@
+import { createLogger } from '@unchainedshop/logger';
+import { useMiddlewareWithCurrentContext } from '@unchainedshop/api/express/index.js';
+import express from 'express';
+const logger = createLogger('unchained:google-wallet-webservice');
+const { GOOGLE_WALLET_WEBSERVICE_PATH = '/rest/google-wallet' } = process.env;
+export const googleWalletHandler = async (req, res) => {
+    const resolvedContext = req.unchainedContext;
+    const { modules } = resolvedContext;
+    logger.info(`${req.path} (${JSON.stringify(req.query)})`);
+    if (req.path.startsWith('/download/')) {
+        try {
+            const [, , tokenId] = req.path.split('/');
+            if (!tokenId) {
+                res.writeHead(404);
+                res.end();
+                return;
+            }
+            const token = await modules.warehousing.findToken({
+                tokenId,
+            });
+            if (!token) {
+                res.writeHead(404);
+                res.end('Token not found');
+                return;
+            }
+            const { hash } = req.query;
+            const correctHash = await modules.warehousing.buildAccessKeyForToken(tokenId);
+            if (hash !== correctHash) {
+                res.writeHead(403);
+                res.end('Token hash invalid for current owner');
+                return;
+            }
+            const pass = await modules.passes.upsertGoogleWalletPass(token, resolvedContext);
+            res.redirect(await pass.asURL());
+            return;
+        }
+        catch (e) {
+            console.error(e);
+        }
+        res.writeHead(500);
+        res.end();
+        return;
+    }
+    res.writeHead(404);
+    res.end();
+};
+export default function loadGoogleWalletHandler(app) {
+    useMiddlewareWithCurrentContext(app, GOOGLE_WALLET_WEBSERVICE_PATH, express.json({
+        type: 'application/json',
+    }), googleWalletHandler);
+}
+//# sourceMappingURL=google-webservice.js.map

package/lib/mobile-tickets/google-webservice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-webservice.js","sourceRoot":"","sources":["../../src/mobile-tickets/google-webservice.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,OAA8B,MAAM,SAAS,CAAC;AAGrD,MAAM,MAAM,GAAG,YAAY,CAAC,oCAAoC,CAAC,CAAC;AAElE,MAAM,EAAE,6BAA6B,GAAG,qBAAqB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,GAAiD,EACjD,GAAa,EACb,EAAE;IACF,MAAM,eAAe,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC;IACpC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE1D,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,AAAD,EAAG,OAAO,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE1C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;gBAChD,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YAC3B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YAEjF,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,uBAAuB,CAAC,GAAG;IACjD,+BAA+B,CAC7B,GAAG,EACH,6BAA6B,EAC7B,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC,EACF,mBAAmB,CACpB,CAAC;AACJ,CAAC"}

package/lib/pdf-tickets/print-webservice.d.ts

@@ -0,0 +1,7 @@
+import { Request, Response } from 'express';
+import { Context } from '@unchainedshop/types/api.js';
+export declare function printTicketsHandler(req: Request & {
+    unchainedContext: Context;
+}, res: Response): Promise<void>;
+export default function connectPrintWebservice(app: any): void;
+//# sourceMappingURL=print-webservice.d.ts.map

package/lib/pdf-tickets/print-webservice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"print-webservice.d.ts","sourceRoot":"","sources":["../../src/pdf-tickets/print-webservice.ts"],"names":[],"mappings":"AAGA,OAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAKtD,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,gBAAgB,EAAE,OAAO,CAAA;CAAE,EAAE,GAAG,EAAE,QAAQ,iBAsBpG;AAED,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAG,KAAA,QASjD"}

package/lib/pdf-tickets/print-webservice.js

@@ -0,0 +1,31 @@
+import { useMiddlewareWithCurrentContext } from '@unchainedshop/api/express/index.js';
+import { checkAction } from '@unchainedshop/api/acl.js';
+import { actions } from '@unchainedshop/api/roles/index.js';
+import express from 'express';
+import { RendererTypes, getRenderer } from '../template-registry.js';
+const { UNCHAINED_PDF_PRINT_HANDLER_PATH = '/rest/print_tickets' } = process.env;
+export async function printTicketsHandler(req, res) {
+    const { variant, orderId, otp } = req.query || {};
+    try {
+        if (typeof orderId !== 'string' ||
+            typeof otp !== 'string' ||
+            (variant && typeof variant !== 'string'))
+            throw new Error('Invalid query parameter');
+        await checkAction(req.unchainedContext, actions.viewOrder, [undefined, { orderId, otp }]);
+        const render = getRenderer(RendererTypes.ORDER_PDF);
+        const pdfStream = await render({ orderId, variant: variant }, req.unchainedContext);
+        res.setHeader('Content-Type', 'application/pdf');
+        pdfStream.pipe(res);
+    }
+    catch (error) {
+        console.error(error);
+        res.status(403);
+        res.end();
+    }
+}
+export default function connectPrintWebservice(app) {
+    useMiddlewareWithCurrentContext(app, UNCHAINED_PDF_PRINT_HANDLER_PATH, express.json({
+        type: 'application/json',
+    }), printTicketsHandler);
+}
+//# sourceMappingURL=print-webservice.js.map

package/lib/pdf-tickets/print-webservice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"print-webservice.js","sourceRoot":"","sources":["../../src/pdf-tickets/print-webservice.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAC5D,OAAO,OAA8B,MAAM,SAAS,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAErE,MAAM,EAAE,gCAAgC,GAAG,qBAAqB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAA4C,EAAE,GAAa;IACnG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAElD,IAAI,CAAC;QACH,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC;YAExC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAE7C,MAAM,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAE1F,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAiB,EAAE,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9F,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QACjD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAG;IAChD,+BAA+B,CAC7B,GAAG,EACH,gCAAgC,EAChC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC,EACF,mBAAmB,CACpB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unchainedshop/ticketing",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "type": "module",
@@ -31,14 +31,14 @@
   },
   "homepage": "https://github.com/unchainedshop/unchained#readme",
   "dependencies": {
-    "@unchainedshop/api": "^3.0.0",
-    "@unchainedshop/core": "^3.0.0",
-    "@unchainedshop/core-files": "^3.0.0",
-    "@unchainedshop/core-warehousing": "^3.0.0",
-    "@unchainedshop/core-worker": "^3.0.0",
-    "@unchainedshop/events": "^3.0.0",
-    "@unchainedshop/logger": "^3.0.0",
-    "@unchainedshop/mongodb": "^3.0.0"
+    "@unchainedshop/api": "^3.1.0",
+    "@unchainedshop/core": "^3.1.0",
+    "@unchainedshop/core-files": "^3.1.0",
+    "@unchainedshop/core-warehousing": "^3.1.0",
+    "@unchainedshop/core-worker": "^3.1.0",
+    "@unchainedshop/events": "^3.1.0",
+    "@unchainedshop/logger": "^3.1.0",
+    "@unchainedshop/mongodb": "^3.1.0"
   },
   "peerDependencies": {
     "@hyperlink/node-apn": ">= 5.1",
@@ -58,7 +58,7 @@
   },
   "devDependencies": {
     "@types/express": "^5.0.0",
-    "@types/node": "^22.10.5",
+    "@types/node": "^22.13.1",
     "express": "^5.0.1",
     "fastify": "^5.2.1",
     "jest": "^29.7.0",

package/src/magic-key.ts

@@ -16,10 +16,12 @@ const isMagicKeyValidForOrder = async (
 };
 
 const isMagicKeyValidForToken = async (
-  obj: any,
-  { tokenId }: { tokenId: string },
+  root: any,
+  params: { tokenId: string } | null,
   { modules, getHeader }: Context & TicketingAPI,
 ) => {
+  const tokenId = params?.tokenId || (root && 'chainTokenId' in root && root._id) || null;
+
   const token = await modules.warehousing.findToken({ tokenId });
   // always return true if tokenId leads to nothing to show potentially allowed actions
   if (!token) return true;