@wiicode/youcanpay-sdk 1.0.0

package/dist/security/validators.js

@@ -0,0 +1,183 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUPPORTED_CURRENCIES = void 0;
+exports.validateAmount = validateAmount;
+exports.validateCurrency = validateCurrency;
+exports.validateRedirectURL = validateRedirectURL;
+exports.validateOrderId = validateOrderId;
+exports.validateIP = validateIP;
+exports.validateEmail = validateEmail;
+exports.validatePaymentInput = validatePaymentInput;
+exports.sanitizeString = sanitizeString;
+exports.toCentimes = toCentimes;
+exports.fromCentimes = fromCentimes;
+exports.formatAmount = formatAmount;
+exports.SUPPORTED_CURRENCIES = ['MAD', 'USD', 'EUR'];
+function validateAmount(amount, options = {}) {
+    const { min = 100, max = 100000000, currency = 'centimes' } = options;
+    if (amount === null || amount === undefined) {
+        return { valid: false, error: 'Amount is required' };
+    }
+    if (typeof amount !== 'number') {
+        return { valid: false, error: 'Amount must be a number' };
+    }
+    const numAmount = amount;
+    if (!Number.isInteger(numAmount)) {
+        return { valid: false, error: 'Amount must be an integer (in centimes)' };
+    }
+    if (numAmount < min) {
+        return { valid: false, error: `Amount must be at least ${min} ${currency}` };
+    }
+    if (numAmount > max) {
+        return { valid: false, error: `Amount must not exceed ${max} ${currency}` };
+    }
+    return { valid: true };
+}
+function validateCurrency(currency) {
+    if (!currency || typeof currency !== 'string') {
+        return { valid: false, error: 'Currency is required' };
+    }
+    const upperCurrency = currency.toUpperCase();
+    if (!exports.SUPPORTED_CURRENCIES.includes(upperCurrency)) {
+        return {
+            valid: false,
+            error: `Currency must be one of: ${exports.SUPPORTED_CURRENCIES.join(', ')}`,
+        };
+    }
+    return { valid: true };
+}
+function validateRedirectURL(url, options = {}) {
+    const { protocols = ['https', 'http'], allowedDomains, blockedDomains = [], allowLocalhost = true, requireTLD = false, } = options;
+    if (!url) {
+        return { valid: true };
+    }
+    if (typeof url !== 'string') {
+        return { valid: false, error: 'URL must be a string' };
+    }
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return { valid: false, error: 'Invalid URL format' };
+    }
+    const protocol = parsed.protocol.replace(':', '');
+    if (!protocols.includes(protocol)) {
+        return {
+            valid: false,
+            error: `URL protocol must be one of: ${protocols.join(', ')}`,
+        };
+    }
+    const hostname = parsed.hostname.toLowerCase();
+    const isLocalhost = hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '::1';
+    if (isLocalhost && !allowLocalhost) {
+        return { valid: false, error: 'Localhost URLs are not allowed' };
+    }
+    if (!isLocalhost && requireTLD) {
+        const hasTLD = hostname.includes('.') && !hostname.endsWith('.');
+        if (!hasTLD) {
+            return { valid: false, error: 'URL must have a valid domain with TLD' };
+        }
+    }
+    for (const blocked of blockedDomains) {
+        if (hostname === blocked || hostname.endsWith(`.${blocked}`)) {
+            return { valid: false, error: `Domain "${blocked}" is not allowed` };
+        }
+    }
+    if (allowedDomains && allowedDomains.length > 0) {
+        const isAllowed = allowedDomains.some((domain) => hostname === domain || hostname.endsWith(`.${domain}`));
+        if (!isAllowed) {
+            return {
+                valid: false,
+                error: `Domain must be one of: ${allowedDomains.join(', ')}`,
+            };
+        }
+    }
+    if (parsed.username || parsed.password) {
+        return { valid: false, error: 'URL must not contain credentials' };
+    }
+    return { valid: true };
+}
+function validateOrderId(orderId) {
+    if (!orderId || typeof orderId !== 'string') {
+        return { valid: false, error: 'Order ID is required' };
+    }
+    if (orderId.length < 1 || orderId.length > 255) {
+        return { valid: false, error: 'Order ID must be between 1 and 255 characters' };
+    }
+    const safePattern = /^[a-zA-Z0-9_\-:.]+$/;
+    if (!safePattern.test(orderId)) {
+        return {
+            valid: false,
+            error: 'Order ID contains invalid characters (allowed: alphanumeric, _, -, :, .)',
+        };
+    }
+    return { valid: true };
+}
+function validateIP(ip) {
+    if (!ip || typeof ip !== 'string') {
+        return { valid: false, error: 'IP address is required' };
+    }
+    const ipv4Pattern = /^(\d{1,3}\.){3}\d{1,3}$/;
+    const ipv6Pattern = /^([0-9a-fA-F]{0,4}:){2,7}[0-9a-fA-F]{0,4}$/;
+    if (!ipv4Pattern.test(ip) && !ipv6Pattern.test(ip) && ip !== '::1') {
+        return { valid: false, error: 'Invalid IP address format' };
+    }
+    if (ipv4Pattern.test(ip)) {
+        const octets = ip.split('.').map(Number);
+        if (octets.some((octet) => octet > 255)) {
+            return { valid: false, error: 'Invalid IP address: octet out of range' };
+        }
+    }
+    return { valid: true };
+}
+function validateEmail(email) {
+    if (!email) {
+        return { valid: true };
+    }
+    if (typeof email !== 'string') {
+        return { valid: false, error: 'Email must be a string' };
+    }
+    const emailPattern = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+    if (!emailPattern.test(email)) {
+        return { valid: false, error: 'Invalid email format' };
+    }
+    if (email.length > 254) {
+        return { valid: false, error: 'Email is too long' };
+    }
+    return { valid: true };
+}
+function validatePaymentInput(input) {
+    const checks = [
+        validateAmount(input.amount),
+        validateCurrency(input.currency),
+        input.orderId !== undefined ? validateOrderId(input.orderId) : { valid: true },
+        input.customerIp !== undefined ? validateIP(input.customerIp) : { valid: true },
+        validateRedirectURL(input.successUrl),
+        validateRedirectURL(input.errorUrl),
+        validateEmail(input.customerEmail),
+    ];
+    const failed = checks.find((check) => !check.valid);
+    if (failed) {
+        return failed;
+    }
+    return { valid: true };
+}
+function sanitizeString(input) {
+    return input
+        .replace(/[<>]/g, '')
+        .replace(/javascript:/gi, '')
+        .replace(/data:/gi, '')
+        .trim();
+}
+function toCentimes(amount) {
+    return Math.round(amount * 100);
+}
+function fromCentimes(centimes) {
+    return centimes / 100;
+}
+function formatAmount(centimes, currency) {
+    const amount = fromCentimes(centimes);
+    return `${amount.toFixed(2)} ${currency}`;
+}
+//# sourceMappingURL=validators.js.map

package/dist/security/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/security/validators.ts"],"names":[],"mappings":";;;AA6CA,wCA6BC;AAKD,4CAeC;AAKD,kDA8EC;AAKD,0CAmBC;AAKD,gCAuBC;AAKD,sCAoBC;AAKD,oDAyBC;AAKD,wCAMC;AAKD,gCAEC;AAKD,oCAEC;AAKD,oCAGC;AA1TY,QAAA,oBAAoB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AA0CnE,SAAgB,cAAc,CAC5B,MAAe,EACf,UAAmC,EAAE;IAErC,MAAM,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,GAAG,SAAS,EAAE,QAAQ,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;IAEtE,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC;IAEzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;IAC5E,CAAC;IAED,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,GAAG,IAAI,QAAQ,EAAE,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,GAAG,IAAI,QAAQ,EAAE,EAAE,CAAC;IAC9E,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAKD,SAAgB,gBAAgB,CAAC,QAAiB;IAChD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE7C,IAAI,CAAC,4BAAoB,CAAC,QAAQ,CAAC,aAAkC,CAAC,EAAE,CAAC;QACvE,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,4BAA4B,4BAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAKD,SAAgB,mBAAmB,CACjC,GAAY,EACZ,UAAgC,EAAE;IAElC,MAAM,EACJ,SAAS,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,EAC7B,cAAc,EACd,cAAc,GAAG,EAAE,EACnB,cAAc,GAAG,IAAI,EACrB,UAAU,GAAG,KAAK,GACnB,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACvD,CAAC;IAGD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,gCAAgC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAG/C,MAAM,WAAW,GAAG,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,CAAC;IAC/F,IAAI,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IACnE,CAAC;IAGD,IAAI,CAAC,WAAW,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,OAAO,kBAAkB,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAGD,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CACnC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CACnE,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,0BAA0B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC7D,CAAC;QACJ,CAAC;IACH,CAAC;IAGD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IACrE,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAKD,SAAgB,eAAe,CAAC,OAAgB;IAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IAClF,CAAC;IAGD,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,0EAA0E;SAClF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAKD,SAAgB,UAAU,CAAC,EAAW;IACpC,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC3D,CAAC;IAGD,MAAM,WAAW,GAAG,yBAAyB,CAAC;IAE9C,MAAM,WAAW,GAAG,4CAA4C,CAAC;IAEjE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;QACnE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC9D,CAAC;IAGD,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAKD,SAAgB,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC3D,CAAC;IAGD,MAAM,YAAY,GAAG,4BAA4B,CAAC;IAClD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAKD,SAAgB,oBAAoB,CAAC,KAQpC;IACC,MAAM,MAAM,GAAG;QACb,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QAC9E,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QAC/E,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC;QACrC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;KACnC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAKD,SAAgB,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK;SACT,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,IAAI,EAAE,CAAC;AACZ,CAAC;AAKD,SAAgB,UAAU,CAAC,MAAc;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAClC,CAAC;AAKD,SAAgB,YAAY,CAAC,QAAgB;IAC3C,OAAO,QAAQ,GAAG,GAAG,CAAC;AACxB,CAAC;AAKD,SAAgB,YAAY,CAAC,QAAgB,EAAE,QAAgB;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;AAC5C,CAAC"}

package/dist/security/webhook.d.ts

@@ -0,0 +1,80 @@
+export interface YouCanPayRawWebhook {
+    id: string;
+    event_name: string;
+    sandbox: boolean;
+    payload: {
+        transaction: {
+            id: string;
+            status: number;
+            order_id: string;
+            amount: string | number;
+            currency: string;
+            base_currency?: string | null;
+            base_amount?: string | null;
+            created_at: string;
+        };
+        payment_method?: {
+            id: number;
+            name: string;
+            card?: {
+                id: string;
+                country_code?: string | null;
+                brand?: string | null;
+                last_digits: string;
+                fingerprint: string;
+                is_3d_secure: boolean;
+            };
+        };
+        token?: {
+            id: string;
+        };
+        customer?: {
+            id: string;
+            email?: string | null;
+            name?: string | null;
+            address?: string | null;
+            phone?: string | null;
+            country_code?: string | null;
+            city?: string | null;
+            state?: string | null;
+            zip_code?: string | null;
+        };
+        metadata?: Record<string, string> | unknown[];
+    };
+}
+export interface ParsedWebhookPayload {
+    webhookId: string;
+    eventName: string;
+    sandbox: boolean;
+    transactionId: string;
+    orderId: string;
+    amount: number;
+    currency: string;
+    rawStatus: number;
+    status: 'paid' | 'failed' | 'refunded' | 'unknown';
+    isSuccess: boolean;
+    tokenId?: string;
+    cardLastDigits?: string;
+    cardBrand?: string;
+    is3DSecure?: boolean;
+    customerEmail?: string;
+    createdAt: string;
+    raw: YouCanPayRawWebhook;
+}
+export interface WebhookVerifyOptions {
+    secret: string;
+    query?: Record<string, string>;
+    headers?: Record<string, string>;
+    signatureHeader?: string;
+    secretParam?: string;
+}
+export declare function parseWebhookPayload(payload: unknown): ParsedWebhookPayload;
+export declare function verifyWebhookSecret(options: WebhookVerifyOptions): boolean;
+export declare function verifyWebhookHMAC(payload: string | Buffer, signature: string, secret: string, algorithm?: 'sha256' | 'sha512'): boolean;
+export declare function createWebhookSignature(payload: string | object, secret: string, algorithm?: 'sha256' | 'sha512'): string;
+export declare class WebhookParseError extends Error {
+    constructor(message: string);
+}
+export declare class WebhookVerifyError extends Error {
+    constructor(message: string);
+}

package/dist/security/webhook.js

@@ -0,0 +1,146 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookVerifyError = exports.WebhookParseError = void 0;
+exports.parseWebhookPayload = parseWebhookPayload;
+exports.verifyWebhookSecret = verifyWebhookSecret;
+exports.verifyWebhookHMAC = verifyWebhookHMAC;
+exports.createWebhookSignature = createWebhookSignature;
+const crypto = __importStar(require("crypto"));
+function parseWebhookPayload(payload) {
+    if (!payload || typeof payload !== 'object') {
+        throw new WebhookParseError('Invalid webhook payload: not an object');
+    }
+    const p = payload;
+    if (!p['id'] || !p['event_name'] || !p['payload']) {
+        throw new WebhookParseError('Invalid webhook payload: missing required fields (id, event_name, payload)');
+    }
+    const rawPayload = p;
+    const transaction = rawPayload.payload?.transaction;
+    if (!transaction) {
+        throw new WebhookParseError('Invalid webhook payload: missing transaction data');
+    }
+    if (!transaction.id || !transaction.order_id) {
+        throw new WebhookParseError('Invalid webhook payload: missing transaction_id or order_id');
+    }
+    const eventName = rawPayload.event_name;
+    const rawStatus = Number(transaction.status);
+    let status;
+    if (rawStatus === 1 || eventName === 'transaction.paid') {
+        status = 'paid';
+    }
+    else if (eventName === 'transaction.failed') {
+        status = 'failed';
+    }
+    else if (eventName === 'refund.success' || eventName === 'transaction.refunded') {
+        status = 'refunded';
+    }
+    else {
+        status = 'unknown';
+    }
+    const isSuccess = status === 'paid';
+    return {
+        webhookId: rawPayload.id,
+        eventName,
+        sandbox: rawPayload.sandbox,
+        transactionId: transaction.id,
+        orderId: transaction.order_id,
+        amount: Number(transaction.amount),
+        currency: transaction.currency,
+        rawStatus,
+        status,
+        isSuccess,
+        tokenId: rawPayload.payload.token?.id,
+        cardLastDigits: rawPayload.payload.payment_method?.card?.last_digits,
+        cardBrand: rawPayload.payload.payment_method?.card?.brand || undefined,
+        is3DSecure: rawPayload.payload.payment_method?.card?.is_3d_secure,
+        customerEmail: rawPayload.payload.customer?.email || undefined,
+        createdAt: transaction.created_at,
+        raw: rawPayload,
+    };
+}
+function verifyWebhookSecret(options) {
+    const { secret, query, headers, secretParam = 'secret', signatureHeader = 'x-ycp-signature' } = options;
+    if (!secret) {
+        throw new WebhookVerifyError('Webhook secret is required');
+    }
+    if (headers) {
+        const signature = headers[signatureHeader] || headers[signatureHeader.toLowerCase()];
+        if (signature && signature === secret) {
+            return true;
+        }
+    }
+    if (query) {
+        const querySecret = query[secretParam];
+        if (querySecret && querySecret === secret) {
+            return true;
+        }
+    }
+    return false;
+}
+function verifyWebhookHMAC(payload, signature, secret, algorithm = 'sha256') {
+    const expectedSignature = crypto
+        .createHmac(algorithm, secret)
+        .update(payload)
+        .digest('hex');
+    try {
+        return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expectedSignature));
+    }
+    catch {
+        return false;
+    }
+}
+function createWebhookSignature(payload, secret, algorithm = 'sha256') {
+    const data = typeof payload === 'string' ? payload : JSON.stringify(payload);
+    return crypto
+        .createHmac(algorithm, secret)
+        .update(data)
+        .digest('hex');
+}
+class WebhookParseError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WebhookParseError';
+    }
+}
+exports.WebhookParseError = WebhookParseError;
+class WebhookVerifyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WebhookVerifyError';
+    }
+}
+exports.WebhookVerifyError = WebhookVerifyError;
+//# sourceMappingURL=webhook.js.map

package/dist/security/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/security/webhook.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6GA,kDA2DC;AAKD,kDAwBC;AAKD,8CAoBC;AAKD,wDAUC;AA7OD,+CAAiC;AA6GjC,SAAgB,mBAAmB,CAAC,OAAgB;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,CAAC,GAAG,OAAkC,CAAC;IAG7C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,iBAAiB,CAAC,4EAA4E,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,UAAU,GAAG,CAAmC,CAAC;IACvD,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC;IAEpD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,iBAAiB,CAAC,mDAAmD,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,iBAAiB,CAAC,6DAA6D,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAG7C,IAAI,MAAkD,CAAC;IACvD,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACxD,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;SAAM,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;QAC9C,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,IAAI,SAAS,KAAK,gBAAgB,IAAI,SAAS,KAAK,sBAAsB,EAAE,CAAC;QAClF,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,MAAM,CAAC;IAEpC,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,EAAE;QACxB,SAAS;QACT,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,aAAa,EAAE,WAAW,CAAC,EAAE;QAC7B,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QAClC,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,SAAS;QACT,MAAM;QACN,SAAS;QACT,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE;QACrC,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,WAAW;QACpE,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,KAAK,IAAI,SAAS;QACtE,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,YAAY;QACjE,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,IAAI,SAAS;QAC9D,SAAS,EAAE,WAAW,CAAC,UAAU;QACjC,GAAG,EAAE,UAAU;KAChB,CAAC;AACJ,CAAC;AAKD,SAAgB,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,GAAG,QAAQ,EAAE,eAAe,GAAG,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAExG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;IAC7D,CAAC;IAGD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC;QACrF,IAAI,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAGD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,WAAW,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAKD,SAAgB,iBAAiB,CAC/B,OAAwB,EACxB,SAAiB,EACjB,MAAc,EACd,YAAiC,QAAQ;IAEzC,MAAM,iBAAiB,GAAG,MAAM;SAC7B,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC;SAC7B,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,KAAK,CAAC,CAAC;IAGjB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EACtB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAC/B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAKD,SAAgB,sBAAsB,CACpC,OAAwB,EACxB,MAAc,EACd,YAAiC,QAAQ;IAEzC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,MAAM;SACV,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC;SAC7B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAKD,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAKD,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC"}