@unchainedshop/ticketing 4.3.3 → 4.4.0

package/src/mobile-tickets/apple-handler-fastify.ts

@@ -1,279 +0,0 @@
-import { createLogger } from '@unchainedshop/logger';
-import { TicketingAPI } from '../types.js';
-import { getFileAdapter } from '@unchainedshop/core-files';
-import type { FastifyRequest, RouteHandlerMethod } from 'fastify';
-
-const logger = createLogger('unchained:apple-wallet-webservice');
-
-const isAuthenticationTokenCorrect = (req, authenticationToken) => {
-  const expectedAuthorizationValue = `ApplePass ${authenticationToken}`;
-  return req.headers.authorization === expectedAuthorizationValue;
-};
-
-const appleWalletHandler: RouteHandlerMethod = async (
-  req: FastifyRequest & {
-    unchainedContext: TicketingAPI;
-  },
-  reply,
-) => {
-  const resolvedContext = req.unchainedContext;
-  const { modules } = resolvedContext;
-
-  const path = req.url;
-
-  logger.info(`${path} (${JSON.stringify(req.query)})`);
-
-  if (path.startsWith('/download/')) {
-    try {
-      const [, , passFileName] = path.split('/');
-      const [tokenId] = passFileName.split('.pkpass');
-
-      if (!tokenId) {
-        reply.status(404);
-        return reply.send();
-      }
-
-      const token = await modules.warehousing.findToken({
-        tokenId,
-      });
-
-      if (!token) {
-        logger.error('Token not found', { tokenId });
-        reply.status(404);
-        return reply.send();
-      }
-
-      const { hash } = req.query as Record<string, string>;
-      const correctHash = await modules.warehousing.buildAccessKeyForToken(tokenId);
-      if (!hash || hash !== correctHash) {
-        logger.error('Token hash invalid for current owner', { tokenId });
-        reply.status(403);
-        return reply.send({
-          success: false,
-          message: 'Token hash invalid for current owner',
-          name: 'HASH_MISMATCH',
-        });
-      }
-
-      const passFile = await modules.passes.upsertAppleWalletPass(token, resolvedContext);
-
-      const fileUploadAdapter = getFileAdapter();
-      const signedUrl = await fileUploadAdapter.createDownloadURL(passFile);
-      const url = signedUrl && (await modules.files.normalizeUrl(signedUrl, {}));
-
-      if (!url) {
-        reply.status(500);
-        return reply.send({
-          success: false,
-          message: 'Could not create download URL',
-          name: 'URL_SIGNING_FAILED',
-        });
-      }
-
-      const response = await fetch(url);
-      const data = await response.arrayBuffer();
-      const uint8View = new Uint8Array(data);
-
-      reply.status(200);
-      reply.header('content-type', 'application/vnd.apple.pkpass');
-      reply.header('Content-Disposition', `attachment; filename=${tokenId}.pkpass`);
-      return reply.send(uint8View);
-    } catch (e) {
-      logger.error(e);
-      reply.status(500);
-      return reply.send({
-        success: false,
-        message: 'Error generating pass',
-        name: 'PASS_GENERATION_ERROR',
-      });
-    }
-  }
-
-  const [, apiVersion, endpoint, ...pathComponents] = path.split("/"); /* eslint-disable-line */
-  if (endpoint === 'devices') {
-    if (req.method === 'POST') {
-      // Register Device
-      const [deviceLibraryIdentifier, , passTypeIdentifier, serialNumber] = pathComponents;
-      const { pushToken } = req.body as Record<string, any>;
-
-      const pass = await modules.passes.findAppleWalletPass(passTypeIdentifier, serialNumber);
-
-      if (pass) {
-        if (
-          !isAuthenticationTokenCorrect(
-            req,
-            (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
-          )
-        ) {
-          logger.error('Unauthorized', { passTypeIdentifier, serialNumber });
-          reply.status(401);
-          return reply.send();
-        }
-
-        const newRegistration = await modules.passes.registerDeviceForAppleWalletPass(
-          passTypeIdentifier,
-          serialNumber,
-          {
-            deviceLibraryIdentifier,
-            pushToken,
-          },
-        );
-
-        if (!newRegistration) {
-          reply.status(200);
-          return reply.send({
-            success: true,
-          });
-        }
-
-        reply.status(201);
-        return reply.send({
-          success: true,
-        });
-      }
-    } else if (req.method === 'GET') {
-      // Get the List of Updatable Passes
-      const lastUpdated = new Date();
-      const [deviceLibraryIdentifier, , passTypeIdentifier] = pathComponents;
-      const passesUpdatedSince =
-        (req.query as Record<string, string>)?.passesUpdatedSince &&
-        new Date((req.query as Record<string, string>).passesUpdatedSince as string);
-
-      const passes = await modules.passes.findUpdatedAppleWalletPasses(
-        passTypeIdentifier,
-        deviceLibraryIdentifier,
-        passesUpdatedSince,
-      );
-      const serialNumbers = passes.map((t) => t.meta?.serialNumber).filter(Boolean) as string[];
-
-      if (serialNumbers?.length) {
-        reply.status(200);
-        return reply.send({
-          success: true,
-          serialNumbers,
-          lastUpdated,
-        });
-      }
-
-      reply.status(204);
-      return reply.send({ success: true });
-    } else if (req.method === 'DELETE') {
-      // Unregister Device
-      const [deviceLibraryIdentifier, , passTypeIdentifier, serialNumber] = pathComponents;
-
-      const pass = await modules.passes.findAppleWalletPass(passTypeIdentifier, serialNumber);
-
-      if (pass) {
-        if (
-          !isAuthenticationTokenCorrect(
-            req,
-            (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
-          )
-        ) {
-          logger.error('Unauthorized', { passTypeIdentifier, serialNumber });
-          reply.status(401);
-          return reply.send({
-            success: false,
-            message: 'Unauthorized',
-            name: 'UNAUTHORIZED',
-          });
-        }
-
-        await modules.passes.unregisterDeviceForAppleWalletPass(
-          passTypeIdentifier,
-          serialNumber,
-          deviceLibraryIdentifier,
-        );
-
-        // Unregistered
-        reply.status(200);
-        return reply.send({
-          success: true,
-        });
-      }
-    }
-  } else if (endpoint === 'log') {
-    // Log Mesage
-    const { logs } = req.body as Record<string, any>;
-    logs?.forEach((log) => {
-      if (typeof log === 'string') {
-        logger.info(log);
-      }
-    });
-    reply.status(200);
-    return reply.send({
-      success: true,
-    });
-  } else if (endpoint === 'passes') {
-    if (req.method === 'GET') {
-      // Get an updated Pass
-      const [passTypeIdentifier, serialNumber] = pathComponents;
-
-      const pass = await modules.passes.findAppleWalletPass(passTypeIdentifier, serialNumber);
-
-      if (!pass) {
-        reply.status(404);
-        return reply.send();
-      }
-
-      if (
-        !isAuthenticationTokenCorrect(
-          req,
-          (pass.meta?.rawData as any)?._id || (pass.meta?.rawData as any)?.tokenId,
-        )
-      ) {
-        logger.error('Unauthorized', { passTypeIdentifier, serialNumber });
-        reply.status(401);
-        return reply.send({
-          success: false,
-          message: 'Unauthorized',
-          name: 'UNAUTHORIZED',
-        });
-      }
-
-      const { updated, created } = pass;
-
-      const lastModifiedDate = new Date(updated || created);
-      lastModifiedDate.setMilliseconds(0);
-
-      const ifModifiedSinceDate = new Date(req.headers['if-modified-since']!);
-      ifModifiedSinceDate.setMilliseconds(0);
-
-      if (ifModifiedSinceDate.getTime() >= lastModifiedDate.getTime()) {
-        reply.status(304);
-        return reply.send({
-          success: true,
-          message: 'Not modified',
-          name: 'NOT_MODIFIED',
-        });
-      }
-
-      const fileUploadAdapter = getFileAdapter();
-      const signedUrl = await fileUploadAdapter.createDownloadURL(pass);
-      const url = signedUrl && (await modules.files.normalizeUrl(signedUrl, {}));
-
-      if (!url) {
-        reply.status(500);
-        return reply.send({
-          success: false,
-          message: 'Could not create download URL',
-          name: 'URL_SIGNING_FAILED',
-        });
-      }
-
-      const result = await fetch(url);
-      const data = await result.arrayBuffer();
-      const uint8View = new Uint8Array(data);
-
-      reply.status(200);
-      reply.header('content-type', 'application/vnd.apple.pkpass');
-      reply.header('last-modified', lastModifiedDate.toUTCString());
-      return reply.send(uint8View);
-    }
-  }
-
-  reply.status(404);
-  return reply.send();
-};
-
-export default appleWalletHandler;

package/src/mobile-tickets/apple-wallet.ts

@@ -1,31 +0,0 @@
-import apn from '@parse/node-apn';
-import { Readable } from 'node:stream';
-
-export const pushToApplePushNotificationService = async (deviceTokens) => {
-  const apnProvider = new apn.Provider({
-    cert: process.env.PASS_CERTIFICATE_PATH,
-    key: process.env.PASS_CERTIFICATE_PATH,
-    passphrase: process.env.PASS_CERTIFICATE_SECRET,
-    production: true,
-  });
-
-  const note = new apn.Notification({});
-  return apnProvider.send(note, deviceTokens);
-};
-
-export const buildPassBinary = async (
-  tokenSerialNumber: string,
-  pass: {
-    serialNumber: string;
-    asBuffer: () => Promise<Buffer>;
-  },
-) => {
-  const passBuffer = await pass.asBuffer();
-  const rawFile = {
-    _id: pass.serialNumber,
-    filename: `${tokenSerialNumber}-${new Date().getTime()}.pkpass`,
-    createReadStream: () => Readable.from(passBuffer),
-    mimetype: 'application/vnd.apple.pkpass',
-  };
-  return rawFile;
-};

package/src/mobile-tickets/google-handler-express.ts

@@ -1,57 +0,0 @@
-import { createLogger } from '@unchainedshop/logger';
-import type { Request, Response } from 'express';
-import { TicketingAPI } from '../types.js';
-
-const logger = createLogger('unchained:google-wallet-webservice');
-
-export const googleWalletHandler = async (
-  req: Request & { unchainedContext: TicketingAPI },
-  res: Response,
-) => {
-  const resolvedContext = req.unchainedContext;
-  const { modules } = resolvedContext;
-  logger.info(`${req.path} (${JSON.stringify(req.query)})`);
-
-  if (req.path.includes('/download/')) {
-    try {
-      const { tokenId } = req.params as { tokenId: string };
-      const { hash } = req.query as { hash?: string };
-
-      if (!tokenId) {
-        res.status(404).end();
-        return;
-      }
-
-      const token = await modules.warehousing.findToken({
-        tokenId,
-      });
-
-      if (!token) {
-        res.status(404).send('Token not found');
-        return;
-      }
-
-      const correctHash = await modules.warehousing.buildAccessKeyForToken(tokenId);
-      if (!hash || hash !== correctHash) {
-        res.status(403).send('Token hash invalid for current owner');
-        return;
-      }
-
-      const pass = await modules.passes.upsertGoogleWalletPass(token, resolvedContext);
-
-      if (!pass) {
-        throw new Error('Could not create Google Wallet pass');
-      }
-
-      res.redirect(await pass.asURL());
-      return;
-    } catch (e) {
-      logger.error(e);
-    }
-    res.status(500).end();
-    return;
-  }
-  res.status(404).end();
-};
-
-export default googleWalletHandler;

package/src/mobile-tickets/google-handler-fastify.ts

@@ -1,69 +0,0 @@
-import { createLogger } from '@unchainedshop/logger';
-import { TicketingAPI } from '../types.js';
-import type { FastifyRequest, RouteHandlerMethod } from 'fastify';
-
-const logger = createLogger('unchained:google-wallet-webservice');
-
-const googleWalletHandler: RouteHandlerMethod = async (
-  req: FastifyRequest & {
-    unchainedContext: TicketingAPI;
-  },
-  reply,
-) => {
-  const resolvedContext = req.unchainedContext;
-  const { modules } = resolvedContext;
-
-  const path = req.url;
-
-  logger.info(`${path} (${JSON.stringify(req.query)})`);
-  if (path.includes('/download/')) {
-    try {
-      const { tokenId } = req.params as { tokenId: string };
-      const { hash } = req.query as { hash?: string };
-      if (!tokenId) {
-        reply.status(404);
-        return reply.send();
-      }
-
-      const token = await modules.warehousing.findToken({
-        tokenId,
-      });
-
-      if (!token) {
-        logger.error('Token not found', { tokenId });
-        reply.status(404);
-        return reply.send('Token not found');
-      }
-      const correctHash = await modules.warehousing.buildAccessKeyForToken(tokenId);
-      if (!hash || hash !== correctHash) {
-        logger.error('Token hash invalid for current owner', { tokenId });
-        reply.status(403);
-        return reply.send({
-          success: false,
-          message: 'Token hash invalid for current owner',
-          name: 'HASH_MISMATCH',
-        });
-      }
-
-      const pass = await modules.passes.upsertGoogleWalletPass(token, resolvedContext);
-
-      if (!pass) {
-        throw new Error('Could not create Google Wallet pass');
-      }
-
-      return reply.redirect(await pass.asURL());
-    } catch (e) {
-      logger.error(e);
-      reply.status(500);
-      return reply.send({
-        success: false,
-        message: 'Error generating pass',
-        name: 'PASS_GENERATION_ERROR',
-      });
-    }
-  }
-  reply.status(404);
-  return reply.send();
-};
-
-export default googleWalletHandler;

package/src/module.ts

@@ -1,251 +0,0 @@
-import { createLogger } from '@unchainedshop/logger';
-import { buildDbIndexes, ModuleInput } from '@unchainedshop/mongodb';
-import { MediaObjectsCollection } from '@unchainedshop/core-files';
-import { TokenSurrogateCollection } from '@unchainedshop/core-warehousing';
-import { UnchainedCore } from '@unchainedshop/core';
-import { TokenSurrogate } from '@unchainedshop/core-warehousing';
-import { File } from '@unchainedshop/core-files';
-
-import { RendererTypes, getRenderer } from './template-registry.js';
-import { buildPassBinary, pushToApplePushNotificationService } from './mobile-tickets/apple-wallet.js';
-
-export const APPLE_WALLET_PASSES_FILE_DIRECTORY = 'apple-wallet-passes';
-
-const logger = createLogger('unchained:apple-wallet-webservice');
-
-const configurePasses = async ({ db }: ModuleInput<Record<string, never>>) => {
-  const MediaObjects = await MediaObjectsCollection(db);
-  const TokenSurrogates = await TokenSurrogateCollection(db);
-
-  await buildDbIndexes(TokenSurrogates as any, [
-    { index: { 'meta.cancelled': 1 }, options: { sparse: true } },
-  ]);
-
-  await buildDbIndexes(MediaObjects as any, [
-    { index: { path: 1, 'meta.passTypeIdentifier': 1, 'meta.serialNumber': 1 } },
-    {
-      index: {
-        path: 1,
-        'meta.passTypeIdentifier': 1,
-        'meta.registrations.deviceLibraryIdentifier': 1,
-      },
-    } as any,
-  ]);
-
-  const upsertAppleWalletPass = async (token: TokenSurrogate, unchainedAPI: UnchainedCore) => {
-    const createAppleWalletPass = getRenderer(RendererTypes.APPLE_WALLET);
-    const pass = await createAppleWalletPass(token, unchainedAPI);
-    const rawFile = Promise.resolve(
-      // wrap in promise to make stream upload work
-      await buildPassBinary(token.tokenSerialNumber, pass as any),
-    );
-
-    const previousFile = await MediaObjects.findOne({
-      path: APPLE_WALLET_PASSES_FILE_DIRECTORY,
-      'meta.passTypeIdentifier': pass.passTypeIdentifier,
-      'meta.serialNumber': pass.serialNumber,
-    });
-
-    const registrations: any = previousFile?.meta?.registrations || [];
-    const pkpassFile = await unchainedAPI.services.files.uploadFileFromStream({
-      directoryName: APPLE_WALLET_PASSES_FILE_DIRECTORY,
-      rawFile,
-      meta: {
-        rawData: token,
-        passTypeIdentifier: pass.passTypeIdentifier,
-        serialNumber: pass.serialNumber,
-        registrations,
-      },
-    });
-
-    if (previousFile) {
-      await unchainedAPI.services.files.removeFiles({
-        fileIds: [previousFile._id],
-      });
-    }
-
-    // Push updates!
-    if (registrations?.length) {
-      try {
-        const pushTokens = registrations.map(({ pushToken }) => pushToken);
-        logger.info(`Send update pass notification to ${pushTokens.join(',')}`);
-        await pushToApplePushNotificationService(pushTokens);
-      } catch (e) {
-        logger.error(e);
-      }
-    }
-
-    return pkpassFile;
-  };
-
-  const upsertGoogleWalletPass = async (token: TokenSurrogate, unchainedAPI: UnchainedCore) => {
-    const createGoogleWalletPass = getRenderer(RendererTypes.GOOGLE_WALLET);
-    const pass = await createGoogleWalletPass(token, unchainedAPI);
-    return pass;
-  };
-
-  const findAppleWalletPass = async (passTypeIdentifier, serialNumber) => {
-    const mediaObject = await MediaObjects.findOne({
-      path: APPLE_WALLET_PASSES_FILE_DIRECTORY,
-      'meta.passTypeIdentifier': passTypeIdentifier,
-      'meta.serialNumber': serialNumber,
-    });
-    return mediaObject;
-  };
-
-  const registerDeviceForAppleWalletPass = async (
-    passTypeIdentifier,
-    serialNumber,
-    { deviceLibraryIdentifier, pushToken },
-  ) => {
-    const result = await MediaObjects.updateOne(
-      {
-        path: APPLE_WALLET_PASSES_FILE_DIRECTORY,
-        'meta.passTypeIdentifier': passTypeIdentifier,
-        'meta.serialNumber': serialNumber,
-        'meta.registrations.deviceLibraryIdentifier': {
-          $ne: deviceLibraryIdentifier,
-        },
-      },
-      {
-        $push: {
-          'meta.registrations': {
-            deviceLibraryIdentifier,
-            pushToken,
-          },
-        },
-      },
-    );
-    return Boolean(result.modifiedCount);
-  };
-
-  const unregisterDeviceForAppleWalletPass = async (
-    passTypeIdentifier,
-    serialNumber,
-    deviceLibraryIdentifier,
-  ) => {
-    const result = await MediaObjects.updateOne(
-      {
-        path: APPLE_WALLET_PASSES_FILE_DIRECTORY,
-        'meta.passTypeIdentifier': passTypeIdentifier,
-        'meta.serialNumber': serialNumber,
-        'meta.registrations.deviceLibraryIdentifier': deviceLibraryIdentifier,
-      },
-      {
-        $pull: {
-          'meta.registrations': {
-            deviceLibraryIdentifier,
-          },
-        },
-      },
-    );
-    return Boolean(result.modifiedCount);
-  };
-
-  const findUpdatedAppleWalletPasses = async (
-    passTypeIdentifier,
-    deviceLibraryIdentifier,
-    passesUpdatedSince,
-  ): Promise<File[]> => {
-    const selector = {
-      $or: [
-        {
-          updated: passesUpdatedSince ? { $gt: passesUpdatedSince } : { $exists: true },
-        },
-        {
-          created: passesUpdatedSince ? { $gt: passesUpdatedSince } : { $exists: true },
-        },
-      ],
-      'meta.registrations.deviceLibraryIdentifier': deviceLibraryIdentifier,
-      'meta.passTypeIdentifier': passTypeIdentifier,
-      path: APPLE_WALLET_PASSES_FILE_DIRECTORY,
-    };
-    const updatedPasses = await MediaObjects.find(selector).toArray();
-    return updatedPasses;
-  };
-
-  const invalidateAppleWalletPasses = async (unchainedAPI: UnchainedCore) => {
-    const allPasses = await MediaObjects.find({
-      path: APPLE_WALLET_PASSES_FILE_DIRECTORY,
-    }).toArray();
-    const allTokens = await TokenSurrogates.find({}).toArray();
-
-    for (const pass of allPasses) {
-      // Check if binary is already invalidated, if so, skip
-      const rawData = pass.meta?.rawData as TokenSurrogate;
-      if (rawData.invalidatedDate) continue;
-
-      const redeemedToken = allTokens.find((t) => t._id === rawData._id && t.invalidatedDate);
-
-      // Find invalidated token for the binary, if found, invalidate binary
-      if (redeemedToken) {
-        logger.info('Ticket redeemed, void pass', rawData);
-        await upsertAppleWalletPass(redeemedToken, unchainedAPI);
-      }
-    }
-  };
-
-  const buildMagicKey = async (orderId: string) => {
-    const msgUint8 = new TextEncoder().encode([orderId, process.env.UNCHAINED_SECRET].join(''));
-    const hashBuffer = await crypto.subtle.digest('SHA-256', msgUint8);
-    // Convert ArrayBuffer to hex string without using Buffer
-    return Array.from(new Uint8Array(hashBuffer))
-      .map((b) => b.toString(16).padStart(2, '0'))
-      .join('');
-  };
-
-  const cancelTicket = async (tokenId: string) => {
-    return TokenSurrogates.findOneAndUpdate(
-      { _id: tokenId },
-      { $set: { 'meta.cancelled': true } },
-      {
-        returnDocument: 'after',
-      },
-    );
-  };
-
-  const isTicketCancelled = (token: TokenSurrogate) => {
-    return Boolean(token.meta?.cancelled);
-  };
-
-  const getTicketsCreated = async (
-    {
-      productId,
-    }: {
-      productId: string;
-    },
-    { skipCancelled }: { skipCancelled?: boolean } = {},
-  ): Promise<number> => {
-    const selector: any = {
-      productId,
-    };
-    if (skipCancelled) {
-      selector['meta.cancelled'] = null;
-    }
-    return TokenSurrogates.countDocuments(selector);
-  };
-
-  return {
-    upsertAppleWalletPass,
-    findAppleWalletPass,
-    registerDeviceForAppleWalletPass,
-    unregisterDeviceForAppleWalletPass,
-    findUpdatedAppleWalletPasses,
-    invalidateAppleWalletPasses,
-    upsertGoogleWalletPass,
-    buildMagicKey,
-    cancelTicket,
-    isTicketCancelled,
-    getTicketsCreated,
-  };
-};
-
-export interface TicketingModule {
-  passes: Awaited<ReturnType<typeof configurePasses>>;
-}
-
-export default {
-  passes: {
-    configure: configurePasses,
-  },
-};