@vario-software/vario-app-framework-backend 2026.15.2 → 2026.17.0

package/api/Api.js

@@ -206,7 +206,7 @@ class Api
         request: {
           requestUrl: this.fullPath,
           requestOptions: this.requestOptions,
-          body: this.body,
+          body: this.secret ? maskSpecificKey(this.body, this.secretsToMask) : this.body,
         },
         response: this.secret ? maskSpecificKey(response, this.secretsToMask) : response,
         duration: `${(performance.now() - this.timer).toFixed(2)}ms`,
@@ -262,7 +262,7 @@ class Api
 
   async onError(error)
   {
-    const maskedBody = this.suppressLogs ? '[secret]' : this.body;
+    const maskedBody = this.suppressLogs ? '[secret]' : (this.secret ? maskSpecificKey(this.body, this.secretsToMask) : this.body);
 
     const message = {
       request: {
@@ -489,7 +489,7 @@ function maskSpecificKey(response, secretsToMask = ['value'], mask = '[secret]')
 
 function expandUrl(template, params)
 {
-  return template.replace(/:([a-zA-Z_]\w*)/g, (match, key) =>
+  return template.replace(/:([a-zA-Z_-]+)/g, (match, key) =>
   {
     if (!(key in params))
     {

package/app.js

@@ -92,7 +92,7 @@ const VarioCloudApp = class
 
     return new Promise((resolve, reject) =>
     {
-      this.express.listen(this.port, error =>
+      this.httpServer = this.express.listen(this.port, error =>
       {
         if (error)
         {
@@ -102,6 +102,11 @@ const VarioCloudApp = class
 
         this.serverListening = true;
 
+        if (typeof this.onServerStarted === 'function')
+        {
+          this.onServerStarted(this.httpServer);
+        }
+
         resolve(this);
       });
     });
@@ -125,8 +130,12 @@ function validateClient(client)
 
   if (typeof client.appJWK === 'string')
   {
-    try { client.appJWK = JSON.parse(client.appJWK); }
-    catch { /* handled below */ }
+    try
+    {
+      client.appJWK = JSON.parse(client.appJWK);
+    }
+    catch
+    { /* handled below */ }
   }
 
   if (typeof client.appJWK !== 'object' || client.appJWK === null)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vario-software/vario-app-framework-backend",
-  "version": "2026.15.2",
+  "version": "2026.17.0",
   "repository": "https://github.com/vario-software/vario-app-framework",
   "author": "VARIO Software AG",
   "homepage": "https://www.vario.ag",

package/utils/migrator.js

@@ -1,4 +1,5 @@
 const { getApp, getContext, getRequest } = require('#backend/utils/context.js');
+const { checkLicense } = require('#backend/utils/licenses.js');
 const ErpApi = require('#backend/api/ErpApi.js');
 
 const Migrator = class
@@ -350,6 +351,34 @@ const Migrator = class
       return finance;
     },
 
+    createBankBackend: async (label, backendType = 'APP') =>
+    {
+      const { data: bankBackend } = await this.ApiAdapter.fetch('/erp/bank/backend', {
+        method: 'POST',
+        body: JSON.stringify({
+          label,
+          appId: this.app.client.appIdentifier,
+          backendType,
+        }),
+      });
+
+      await this.methods.log(`Bank Backend with id "${bankBackend.id}" successfully created\n`);
+
+      return bankBackend;
+    },
+
+    changeBankBackend: async (id, body) =>
+    {
+      const { data: bankBackend } = await this.ApiAdapter.fetch(`/erp/bank/backend/${id}`, {
+        method: 'PUT',
+        body: JSON.stringify(body),
+      });
+
+      await this.methods.log(`Bank Backend with id "${bankBackend.id}" successfully updated\n`);
+
+      return bankBackend;
+    },
+
     getMultipartImportPreset: async id =>
     {
       const { data: importMultipartPreset } = await this.ApiAdapter.fetch(
@@ -510,32 +539,6 @@ const Migrator = class
         await this.methods.log(`Script-Module-Presetting "${name}" created (ID: ${scriptModule.id})\n`);
 
         scriptModuleRef = { id: scriptModule.id };
-
-        // Migrate existing inline script as user script on the new module
-        if (existingInlineScript)
-        {
-          const inlineScriptContent = typeof existingInlineScript === 'string'
-            ? existingInlineScript
-            : JSON.stringify(existingInlineScript);
-
-          const { data: createdModule } = await this.ApiAdapter.fetch(
-            `/cmn/scripting/modules/${scriptModule.id}`,
-            { method: 'GET' },
-          );
-
-          await this.ApiAdapter.fetch(
-            `/cmn/scripting/modules/${scriptModule.id}`,
-            {
-              method: 'PUT',
-              body: {
-                ...createdModule,
-                script: inlineScriptContent,
-              },
-            },
-          );
-
-          await this.methods.log(`Migrated existing inline script for "${name}" to script module\n`);
-        }
       }
 
       const existingProxyId = await this.methods.getAppScriptingTriggerId(name);
@@ -557,6 +560,34 @@ const Migrator = class
         await this.methods.log(`App-Script-Proxy for "${name}" successfully created\n`);
       }
 
+      if (existingInlineScript && await checkLicense('scripting_license', true))
+      {
+        const { data: currentModule } = await this.ApiAdapter.fetch(
+          `/cmn/scripting/modules/${scriptModuleRef.id}`,
+          { method: 'GET' },
+        );
+
+        if (currentModule.sameAsPresettingScript)
+        {
+          const inlineScriptContent = typeof existingInlineScript === 'string'
+            ? existingInlineScript
+            : JSON.stringify(existingInlineScript);
+
+          await this.ApiAdapter.fetch(
+            `/cmn/scripting/modules/${scriptModuleRef.id}`,
+            {
+              method: 'PUT',
+              body: {
+                ...currentModule,
+                script: inlineScriptContent,
+              },
+            },
+          );
+
+          await this.methods.log(`Migrated existing inline script for "${name}" to script module\n`);
+        }
+      }
+
       return scriptModuleRef;
     },