@unchainedshop/ticketing 4.0.0-rc.2 → 4.0.0-rc.21

package/lib/pdf-tickets/print-webservice.js

@@ -0,0 +1,31 @@
+import { useMiddlewareWithCurrentContext } from '@unchainedshop/api/express/index.js';
+import { checkAction } from '@unchainedshop/api/acl.js';
+import { actions } from '@unchainedshop/api/roles/index.js';
+import express from 'express';
+import { RendererTypes, getRenderer } from '../template-registry.js';
+const { UNCHAINED_PDF_PRINT_HANDLER_PATH = '/rest/print_tickets' } = process.env;
+export async function printTicketsHandler(req, res) {
+    const { variant, orderId, otp } = req.query || {};
+    try {
+        if (typeof orderId !== 'string' ||
+            typeof otp !== 'string' ||
+            (variant && typeof variant !== 'string'))
+            throw new Error('Invalid query parameter');
+        await checkAction(req.unchainedContext, actions.viewOrder, [undefined, { orderId, otp }]);
+        const render = getRenderer(RendererTypes.ORDER_PDF);
+        const pdfStream = await render({ orderId, variant: variant }, req.unchainedContext);
+        res.setHeader('Content-Type', 'application/pdf');
+        pdfStream.pipe(res);
+    }
+    catch (error) {
+        console.error(error);
+        res.status(403);
+        res.end();
+    }
+}
+export default function connectPrintWebservice(app) {
+    useMiddlewareWithCurrentContext(app, UNCHAINED_PDF_PRINT_HANDLER_PATH, express.json({
+        type: 'application/json',
+    }), printTicketsHandler);
+}
+//# sourceMappingURL=print-webservice.js.map

package/lib/pdf-tickets/print-webservice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"print-webservice.js","sourceRoot":"","sources":["../../src/pdf-tickets/print-webservice.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAC5D,OAAO,OAA8B,MAAM,SAAS,CAAC;AAErD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAErE,MAAM,EAAE,gCAAgC,GAAG,qBAAqB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;AAEjF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAA4C,EAAE,GAAa;IACnG,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAElD,IAAI,CAAC;QACH,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC;YAExC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAE7C,MAAM,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAE1F,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAiB,EAAE,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9F,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QACjD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,sBAAsB,CAAC,GAAG;IAChD,+BAA+B,CAC7B,GAAG,EACH,gCAAgC,EAChC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,kBAAkB;KACzB,CAAC,EACF,mBAAmB,CACpB,CAAC;AACJ,CAAC"}

package/lib/template-registry.d.ts

@@ -5,8 +5,8 @@ export type PDFRenderer = ({ orderId, variant, }: {
     variant?: string;
 }, context: UnchainedCore) => Promise<NodeJS.ReadableStream>;
 export type PassRenderer = (token: TokenSurrogate, context: UnchainedCore) => Promise<{
-    asURL?: () => Promise<string>;
-    asBuffer?: () => Promise<Buffer>;
+    asURL: () => Promise<string>;
+    asBuffer: () => Promise<Buffer>;
     serialNumber?: string;
     passTypeIdentifier?: string;
 }>;

package/lib/template-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template-registry.d.ts","sourceRoot":"","sources":["../src/template-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,MAAM,MAAM,WAAW,GAAG,CACxB,EACE,OAAO,EACP,OAAO,GACR,EAAE;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,EACD,OAAO,EAAE,aAAa,KACnB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAEpC,MAAM,MAAM,YAAY,GAAG,CACzB,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,aAAa,KACnB,OAAO,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAEH,oBAAY,aAAa;IACvB,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;IAC7B,SAAS,UAAU;CACpB;AAED,eAAO,MAAM,SAAS,yCAAgD,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,KAAK,IAAI,CAAC,GAC/F,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,GAAG,aAAa,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC;AAErG,eAAO,MAAM,gBAAgB,EAAE,kBAK9B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,KAAK,WAAW,CAAC,GAC1E,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,GAAG,aAAa,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;AAErF,eAAO,MAAM,WAAW,EAAE,aAEzB,CAAC"}
+{"version":3,"file":"template-registry.d.ts","sourceRoot":"","sources":["../src/template-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,MAAM,MAAM,WAAW,GAAG,CACxB,EACE,OAAO,EACP,OAAO,GACR,EAAE;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,EACD,OAAO,EAAE,aAAa,KACnB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAEpC,MAAM,MAAM,YAAY,GAAG,CACzB,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,aAAa,KACnB,OAAO,CAAC;IACX,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAEH,oBAAY,aAAa;IACvB,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;IAC7B,SAAS,UAAU;CACpB;AAED,eAAO,MAAM,SAAS,yCAAgD,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,KAAK,IAAI,CAAC,GAC/F,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,GAAG,aAAa,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC;AAErG,eAAO,MAAM,gBAAgB,EAAE,kBAK9B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,KAAK,WAAW,CAAC,GAC1E,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,GAAG,aAAa,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;AAErF,eAAO,MAAM,WAAW,EAAE,aAEzB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unchainedshop/ticketing",
-  "version": "4.0.0-rc.2",
+  "version": "4.0.0-rc.21",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "type": "module",
@@ -31,22 +31,22 @@
   },
   "homepage": "https://github.com/unchainedshop/unchained#readme",
   "dependencies": {
-    "@unchainedshop/api": "^4.0.0-rc.2",
-    "@unchainedshop/core": "^4.0.0-rc.2",
-    "@unchainedshop/core-files": "^4.0.0-rc.2",
-    "@unchainedshop/core-warehousing": "^4.0.0-rc.2",
-    "@unchainedshop/core-worker": "^4.0.0-rc.2",
-    "@unchainedshop/events": "^4.0.0-rc.2",
-    "@unchainedshop/logger": "^4.0.0-rc.2",
-    "@unchainedshop/mongodb": "^4.0.0-rc.2"
+    "@unchainedshop/api": "^4.0.0-rc.21",
+    "@unchainedshop/core": "^4.0.0-rc.21",
+    "@unchainedshop/core-files": "^4.0.0-rc.21",
+    "@unchainedshop/core-warehousing": "^4.0.0-rc.21",
+    "@unchainedshop/core-worker": "^4.0.0-rc.21",
+    "@unchainedshop/events": "^4.0.0-rc.21",
+    "@unchainedshop/logger": "^4.0.0-rc.21",
+    "@unchainedshop/mongodb": "^4.0.0-rc.21"
   },
   "peerDependencies": {
-    "@hyperlink/node-apn": "^5.1.4",
+    "@parse/node-apn": "^6.5.0",
     "express": "5.x",
     "fastify": ">= 5.2 < 6"
   },
   "peerDependenciesMeta": {
-    "@hyperlink/node-apn": {
+    "@parse/node-apn": {
       "optional": false
     },
     "express": {
@@ -57,10 +57,10 @@
     }
   },
   "devDependencies": {
-    "@types/express": "^5.0.1",
-    "@types/node": "^22.15.3",
+    "@types/express": "^5.0.3",
+    "@types/node": "^24.0.13",
     "express": "^5.1.0",
-    "fastify": "^5.3.2",
+    "fastify": "^5.4.0",
     "typescript": "^5.8.3"
   }
 }

package/readme.md

@@ -105,7 +105,7 @@ export default async (token, unchainedAPI: UnchainedCore) => {
   // upsert object
 
   const asURL = async () =>
-    createJwtNewObjects(issuerId, product._id, token.chainTokenId);
+    createJwtNewObjects(issuerId, product._id, token.tokenSerialNumber);
 
   return { asURL };
 };

package/src/fastify.ts

@@ -18,13 +18,13 @@ export default (app: FastifyInstance) => {
 
   app.route({
     url: `${GOOGLE_WALLET_WEBSERVICE_PATH}/*`,
-    method: 'POST',
+    method: 'GET',
     handler: googleWalletHandler,
   });
 
   app.route({
     url: `${UNCHAINED_PDF_PRINT_HANDLER_PATH}/*`,
-    method: 'POST',
+    method: 'GET',
     handler: printTicketsHandler,
   });
 };

package/src/magic-key.ts

@@ -20,7 +20,7 @@ const isMagicKeyValidForToken = async (
   params: { tokenId: string } | null,
   { modules, getHeader }: Context & TicketingAPI,
 ) => {
-  const tokenId = params?.tokenId || (root && 'chainTokenId' in root && root._id) || null;
+  const tokenId = params?.tokenId || (root && 'tokenSerialNumber' in root && root._id) || null;
 
   const token = await modules.warehousing.findToken({ tokenId });
   // always return true if tokenId leads to nothing to show potentially allowed actions
@@ -37,7 +37,7 @@ const isMagicKeyValidForToken = async (
 };
 
 export default () => {
-  roles.allRoles.ALL.allow(roles.actions.viewOrder, isMagicKeyValidForOrder);
-  roles.allRoles.ALL.allow(roles.actions.viewToken, isMagicKeyValidForToken);
-  roles.allRoles.ALL.allow(roles.actions.updateToken, isMagicKeyValidForToken);
+  roles.allRoles?.ALL?.allow(roles.actions.viewOrder, isMagicKeyValidForOrder);
+  roles.allRoles?.ALL?.allow(roles.actions.viewToken, isMagicKeyValidForToken);
+  roles.allRoles?.ALL?.allow(roles.actions.updateToken, isMagicKeyValidForToken);
 };

package/src/mobile-tickets/apple-handler-express.ts

@@ -21,8 +21,7 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
       const [tokenId] = passFileName.split('.pkpass');
 
       if (!tokenId) {
-        res.writeHead(404);
-        res.end();
+        res.status(404).end();
         return;
       }
 
@@ -31,16 +30,14 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
       });
 
       if (!token) {
-        res.writeHead(404);
-        res.end('Token not found');
+        res.status(404).send('Token not found');
         return;
       }
 
       const { hash } = req.query;
       const correctHash = await modules.warehousing.buildAccessKeyForToken(tokenId);
-      if (hash !== correctHash) {
-        res.writeHead(403);
-        res.end('Token hash invalid for current owner');
+      if (!hash || hash !== correctHash) {
+        res.status(403).send('Token hash invalid for current owner');
         return;
       }
 
@@ -50,6 +47,16 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
       const signedUrl = await fileUploadAdapter.createDownloadURL(passFile);
       const url = signedUrl && (await modules.files.normalizeUrl(signedUrl, {}));
 
+      if (!url) {
+        res.status(500);
+        res.send({
+          success: false,
+          message: 'Could not create download URL',
+          name: 'URL_SIGNING_FAILED',
+        });
+        return;
+      }
+
       const response = await fetch(url);
       const data = await response.arrayBuffer();
       const uint8View = new Uint8Array(data);
@@ -57,13 +64,12 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
       res.status(200);
       res.setHeader('Content-Type', 'application/vnd.apple.pkpass');
       res.setHeader('Content-Disposition', `attachment; filename=${tokenId}.pkpass`);
-      res.end(uint8View);
+      res.send(uint8View);
       return;
     } catch (e) {
-      console.error(e);
+      logger.error(e);
     }
-    res.writeHead(500);
-    res.end();
+    res.status(500).end();
     return;
   }
 
@@ -80,11 +86,10 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
         if (
           !isAuthenticationTokenCorrect(
             req,
-            (pass.meta.rawData as any)._id || (pass.meta.rawData as any).tokenId,
+            (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
           )
         ) {
-          res.writeHead(401);
-          res.end();
+          res.status(401).end();
           return;
         }
 
@@ -98,13 +103,11 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
         );
 
         if (!newRegistration) {
-          res.writeHead(200);
-          res.end();
+          res.status(200).end();
           return;
         }
 
-        res.writeHead(201);
-        res.end();
+        res.status(201).end();
         return;
       }
     } else if (req.method === 'GET') {
@@ -119,24 +122,14 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
         deviceLibraryIdentifier,
         passesUpdatedSince,
       );
-      const serialNumbers = passes.map((t) => t.meta.serialNumber);
+      const serialNumbers = passes.map((t) => t.meta?.serialNumber).filter(Boolean) as string[];
 
       if (serialNumbers?.length) {
-        res.writeHead(200, {
-          'Content-Type': 'application/json',
-        });
-        res.write(
-          JSON.stringify({
-            serialNumbers,
-            lastUpdated,
-          }),
-        );
-        res.end();
+        res.status(200).send({ serialNumbers, lastUpdated });
         return;
       }
 
-      res.writeHead(204);
-      res.end();
+      res.status(204).end();
       return;
     } else if (req.method === 'DELETE') {
       // Unregister Device
@@ -148,11 +141,10 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
         if (
           !isAuthenticationTokenCorrect(
             req,
-            (pass.meta.rawData as any)._id || (pass.meta.rawData as any).tokenId,
+            (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
           )
         ) {
-          res.writeHead(401);
-          res.end();
+          res.status(401).end();
           return;
         }
 
@@ -163,8 +155,7 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
         );
 
         // Unregistered
-        res.writeHead(200);
-        res.end();
+        res.status(200).end();
         return;
       }
     }
@@ -176,8 +167,7 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
         logger.info(log);
       }
     });
-    res.writeHead(200);
-    res.end();
+    res.status(200).end();
     return;
   } else if (endpoint === 'passes') {
     if (req.method === 'GET') {
@@ -186,52 +176,62 @@ const appleWalletHandler = async (req: Request & { unchainedContext: TicketingAP
 
       const pass = await modules.passes.findAppleWalletPass(passTypeIdentifier, serialNumber);
 
-      if (pass) {
-        if (
-          !isAuthenticationTokenCorrect(
-            req,
-            (pass.meta.rawData as any)._id || (pass.meta.rawData as any).tokenId,
-          )
-        ) {
-          res.writeHead(401);
-          res.end();
-          return;
-        }
+      if (!pass) {
+        res.status(404).end();
+        return;
+      }
 
-        const { updated, created } = pass;
+      if (
+        !isAuthenticationTokenCorrect(
+          req,
+          (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
+        )
+      ) {
+        res.status(401).end();
+        return;
+      }
 
-        const lastModifiedDate = new Date(updated || created);
-        lastModifiedDate.setMilliseconds(0);
+      const { updated, created } = pass;
 
-        const ifModifiedSinceDate = new Date(req.header('if-modified-since'));
-        ifModifiedSinceDate.setMilliseconds(0);
+      const lastModifiedDate = new Date(updated || created);
+      lastModifiedDate.setMilliseconds(0);
 
-        if (ifModifiedSinceDate.getTime() >= lastModifiedDate.getTime()) {
-          res.writeHead(304);
-          res.end();
-          return;
-        }
+      const ifModifiedSinceDate = new Date(req.header('if-modified-since')!);
+      ifModifiedSinceDate.setMilliseconds(0);
 
-        const fileUploadAdapter = getFileAdapter();
-        const signedUrl = await fileUploadAdapter.createDownloadURL(pass);
-        const url = signedUrl && (await modules.files.normalizeUrl(signedUrl, {}));
+      if (ifModifiedSinceDate.getTime() >= lastModifiedDate.getTime()) {
+        res.status(304).end();
+        return;
+      }
 
-        const result = await fetch(url);
-        const data = await result.arrayBuffer();
-        const uint8View = new Uint8Array(data);
+      const fileUploadAdapter = getFileAdapter();
+      const signedUrl = await fileUploadAdapter.createDownloadURL(pass);
+      const url = signedUrl && (await modules.files.normalizeUrl(signedUrl, {}));
 
-        res.writeHead(200, {
-          'Content-Type': 'application/vnd.apple.pkpass',
-          'Last-Modified': lastModifiedDate.toUTCString(),
+      if (!url) {
+        res.status(500);
+        res.send({
+          success: false,
+          message: 'Could not create download URL',
+          name: 'URL_SIGNING_FAILED',
         });
-        res.end(uint8View);
         return;
       }
+
+      const result = await fetch(url);
+      const data = await result.arrayBuffer();
+      const uint8View = new Uint8Array(data);
+
+      res.writeHead(200, {
+        'Content-Type': 'application/vnd.apple.pkpass',
+        'Last-Modified': lastModifiedDate.toUTCString(),
+      });
+      res.send(uint8View);
+      return;
     }
   }
 
-  res.writeHead(404);
-  res.end();
+  res.status(404).end();
 };
 
 export default appleWalletHandler;

package/src/mobile-tickets/apple-handler-fastify.ts

@@ -38,15 +38,21 @@ const appleWalletHandler: RouteHandlerMethod = async (
       });
 
       if (!token) {
+        logger.error('Token not found', { tokenId });
         reply.status(404);
-        return reply.send('Token not found');
+        return reply.send();
       }
 
       const { hash } = req.query as Record<string, string>;
       const correctHash = await modules.warehousing.buildAccessKeyForToken(tokenId);
-      if (hash !== correctHash) {
+      if (!hash || hash !== correctHash) {
+        logger.error('Token hash invalid for current owner', { tokenId });
         reply.status(403);
-        return reply.send('Token hash invalid for current owner');
+        return reply.send({
+          success: false,
+          message: 'Token hash invalid for current owner',
+          name: 'HASH_MISMATCH',
+        });
       }
 
       const passFile = await modules.passes.upsertAppleWalletPass(token, resolvedContext);
@@ -55,6 +61,15 @@ const appleWalletHandler: RouteHandlerMethod = async (
       const signedUrl = await fileUploadAdapter.createDownloadURL(passFile);
       const url = signedUrl && (await modules.files.normalizeUrl(signedUrl, {}));
 
+      if (!url) {
+        reply.status(500);
+        return reply.send({
+          success: false,
+          message: 'Could not create download URL',
+          name: 'URL_SIGNING_FAILED',
+        });
+      }
+
       const response = await fetch(url);
       const data = await response.arrayBuffer();
       const uint8View = new Uint8Array(data);
@@ -64,10 +79,14 @@ const appleWalletHandler: RouteHandlerMethod = async (
       reply.header('Content-Disposition', `attachment; filename=${tokenId}.pkpass`);
       return reply.send(uint8View);
     } catch (e) {
-      console.error(e);
+      logger.error(e);
+      reply.status(500);
+      return reply.send({
+        success: false,
+        message: 'Error generating pass',
+        name: 'PASS_GENERATION_ERROR',
+      });
     }
-    reply.status(500);
-    return reply.send();
   }
 
   const [, apiVersion, endpoint, ...pathComponents] = path.split("/"); /* eslint-disable-line */
@@ -83,9 +102,10 @@ const appleWalletHandler: RouteHandlerMethod = async (
         if (
           !isAuthenticationTokenCorrect(
             req,
-            (pass.meta.rawData as any)._id || (pass.meta.rawData as any).tokenId,
+            (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
           )
         ) {
+          logger.error('Unauthorized', { passTypeIdentifier, serialNumber });
           reply.status(401);
           return reply.send();
         }
@@ -101,11 +121,15 @@ const appleWalletHandler: RouteHandlerMethod = async (
 
         if (!newRegistration) {
           reply.status(200);
-          return reply.send();
+          return reply.send({
+            success: true,
+          });
         }
 
         reply.status(201);
-        return reply.send();
+        return reply.send({
+          success: true,
+        });
       }
     } else if (req.method === 'GET') {
       // Get the List of Updatable Passes
@@ -120,21 +144,19 @@ const appleWalletHandler: RouteHandlerMethod = async (
         deviceLibraryIdentifier,
         passesUpdatedSince,
       );
-      const serialNumbers = passes.map((t) => t.meta.serialNumber);
+      const serialNumbers = passes.map((t) => t.meta?.serialNumber).filter(Boolean) as string[];
 
       if (serialNumbers?.length) {
         reply.status(200);
-        reply.header('content-type', 'application/json');
-        return reply.send(
-          JSON.stringify({
-            serialNumbers,
-            lastUpdated,
-          }),
-        );
+        return reply.send({
+          success: true,
+          serialNumbers,
+          lastUpdated,
+        });
       }
 
       reply.status(204);
-      return reply.send();
+      return reply.send({ success: true });
     } else if (req.method === 'DELETE') {
       // Unregister Device
       const [deviceLibraryIdentifier, , passTypeIdentifier, serialNumber] = pathComponents;
@@ -145,11 +167,16 @@ const appleWalletHandler: RouteHandlerMethod = async (
         if (
           !isAuthenticationTokenCorrect(
             req,
-            (pass.meta.rawData as any)._id || (pass.meta.rawData as any).tokenId,
+            (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
           )
         ) {
+          logger.error('Unauthorized', { passTypeIdentifier, serialNumber });
           reply.status(401);
-          return reply.send();
+          return reply.send({
+            success: false,
+            message: 'Unauthorized',
+            name: 'UNAUTHORIZED',
+          });
         }
 
         await modules.passes.unregisterDeviceForAppleWalletPass(
@@ -160,7 +187,9 @@ const appleWalletHandler: RouteHandlerMethod = async (
 
         // Unregistered
         reply.status(200);
-        return reply.send();
+        return reply.send({
+          success: true,
+        });
       }
     }
   } else if (endpoint === 'log') {
@@ -172,7 +201,9 @@ const appleWalletHandler: RouteHandlerMethod = async (
       }
     });
     reply.status(200);
-    return reply.send();
+    return reply.send({
+      success: true,
+    });
   } else if (endpoint === 'passes') {
     if (req.method === 'GET') {
       // Get an updated Pass
@@ -180,43 +211,64 @@ const appleWalletHandler: RouteHandlerMethod = async (
 
       const pass = await modules.passes.findAppleWalletPass(passTypeIdentifier, serialNumber);
 
-      if (pass) {
-        if (
-          !isAuthenticationTokenCorrect(
-            req,
-            (pass.meta.rawData as any)._id || (pass.meta.rawData as any).tokenId,
-          )
-        ) {
-          reply.status(401);
-          return reply.send();
-        }
+      if (!pass) {
+        reply.status(404);
+        return reply.send();
+      }
 
-        const { updated, created } = pass;
+      if (
+        !isAuthenticationTokenCorrect(
+          req,
+          (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
+        )
+      ) {
+        logger.error('Unauthorized', { passTypeIdentifier, serialNumber });
+        reply.status(401);
+        return reply.send({
+          success: false,
+          message: 'Unauthorized',
+          name: 'UNAUTHORIZED',
+        });
+      }
 
-        const lastModifiedDate = new Date(updated || created);
-        lastModifiedDate.setMilliseconds(0);
+      const { updated, created } = pass;
 
-        const ifModifiedSinceDate = new Date(req.headers['if-modified-since']);
-        ifModifiedSinceDate.setMilliseconds(0);
+      const lastModifiedDate = new Date(updated || created);
+      lastModifiedDate.setMilliseconds(0);
 
-        if (ifModifiedSinceDate.getTime() >= lastModifiedDate.getTime()) {
-          reply.status(304);
-          return reply.send();
-        }
+      const ifModifiedSinceDate = new Date(req.headers['if-modified-since']!);
+      ifModifiedSinceDate.setMilliseconds(0);
 
-        const fileUploadAdapter = getFileAdapter();
-        const signedUrl = await fileUploadAdapter.createDownloadURL(pass);
-        const url = signedUrl && (await modules.files.normalizeUrl(signedUrl, {}));
+      if (ifModifiedSinceDate.getTime() >= lastModifiedDate.getTime()) {
+        reply.status(304);
+        return reply.send({
+          success: true,
+          message: 'Not modified',
+          name: 'NOT_MODIFIED',
+        });
+      }
 
-        const result = await fetch(url);
-        const data = await result.arrayBuffer();
-        const uint8View = new Uint8Array(data);
+      const fileUploadAdapter = getFileAdapter();
+      const signedUrl = await fileUploadAdapter.createDownloadURL(pass);
+      const url = signedUrl && (await modules.files.normalizeUrl(signedUrl, {}));
 
-        reply.status(200);
-        reply.header('content-type', 'application/vnd.apple.pkpass');
-        reply.header('last-modified', lastModifiedDate.toUTCString());
-        return reply.send(uint8View);
+      if (!url) {
+        reply.status(500);
+        return reply.send({
+          success: false,
+          message: 'Could not create download URL',
+          name: 'URL_SIGNING_FAILED',
+        });
       }
+
+      const result = await fetch(url);
+      const data = await result.arrayBuffer();
+      const uint8View = new Uint8Array(data);
+
+      reply.status(200);
+      reply.header('content-type', 'application/vnd.apple.pkpass');
+      reply.header('last-modified', lastModifiedDate.toUTCString());
+      return reply.send(uint8View);
     }
   }