@yosle/tropipayjs 0.2.1 → 0.2.2

package/README.md

@@ -133,6 +133,33 @@ console.log(paylink.shortUrl);
 
 For more examples, please refer to the [Documentation](https://github.com/yosle/tropipayjs/blob/master/docs/)
 
+### Refunding a Transaction
+
+The library provides two methods for handling refunds with 2FA confirmation:
+
+#### Request a Security Code (Production only)
+
+In **Production** mode, you must first request a 2FA code via SMS:
+
+```javascript
+await tpp.requestSecurityCode();
+// An SMS with the code will be sent to your phone
+```
+
+#### Refund a Movement
+
+Once you have the security code (or in Development mode), you can refund a transaction:
+
+```javascript
+// Development mode — use the default test code
+const result = await tpp.refundMovement("ORD-123456", 5000, "123456");
+
+// Production mode — pass the code received via SMS
+const result = await tpp.refundMovement("ORD-123456", 5000, "847291");
+```
+
+**Note:** The refund endpoint requires the `ALLOW_REFUND` scope and 2FA to be enabled on your Tropipay account. In Development mode the default 2FA code is `123456` unless you have configured the Authenticator app.
+
 # Contributing
 
 If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!

package/api/TropipayAPI.d.ts

@@ -5,19 +5,17 @@
  *
  */
 import { Axios } from "axios";
-import { TropipayConfig, AccountBalance, Country, PaymentLink, MediationPaymentCardConfig, LoginResponse } from "../interfaces";
+import { TropipayConfig, AccountBalance, Country, PaymentLink, MediationPaymentCardConfig, LoginResponse, RefundResponse } from "../interfaces";
 type ServerMode = "Development" | "Production";
 import TropipayHooks from "../hooks/TropipayHooks";
 import PaymentCard from "../paymentcard/PaymentCard";
 import MediationPaymentCard from "../mediationPaymentCard/MediationPaymentCard";
 import DepositAccounts from "../depositAccount/depositAccounts";
-import Accounts from "../accounts/accounts";
 export declare class Tropipay {
     readonly clientId: string;
     readonly clientSecret: string;
     readonly scopes: String[];
     request: Axios;
-    loginRequest: Axios;
     static accessToken: string | null;
     static refreshToken: string | null;
     static expiresIn: number | null;
@@ -26,7 +24,6 @@ export declare class Tropipay {
     paymentCards: PaymentCard;
     depositAccounts: DepositAccounts;
     mediationPaymentCard: MediationPaymentCard;
-    accounts: Accounts;
     /**
      * Initializes a new instance of the Tropipay class.
      *
@@ -85,10 +82,39 @@ export declare class Tropipay {
      * belonging or not to the TropiPay platform with the particularity
      * that the payment will be held in custody or retained until it is
      * released with the approval of the payer.
+     * @deprecated This method is no longer supported and may be removed in a future release.
      * @see https://tpp.stoplight.io/docs/tropipay-api-doc/12a128ff971e4-creating-a-mediation-payment-card
      * @param config Payload with the payment details
      */
     createMediationPaymentCard(config: MediationPaymentCardConfig): Promise<PaymentLink>;
+    /**
+     * Refund a completed transaction.
+     * Requires 2FA enabled and ALLOW_REFUND permission on the Tropipay account.
+     *
+     * In Development mode, `securityCode` defaults to `"123456"` when omitted.
+     * In Production mode, you must first call `requestSecurityCode()` to receive
+     * the 2FA code via SMS, then pass it as the `securityCode` parameter.
+     *
+     * @see https://doc.tropipay.com/docs/api-reference/movements#refund-a-transaction
+     * @param orderCode Code of the order/transaction to refund (e.g. "ORD-123456")
+     * @param amount Amount to refund in cents (e.g. 5000 = 50.00 USD/EUR)
+     * @param securityCode 2FA confirmation code. Use "123456" in Development or
+     * the code received via SMS in Production (obtained via requestSecurityCode()).
+     */
+    refundMovement(orderCode: string, amount: number, securityCode: string): Promise<RefundResponse>;
+    /**
+     * Request a 2FA security code to be sent via SMS for confirming sensitive
+     * operations like refunds.
+     *
+     * In Production mode, you must call this method first to trigger an SMS with
+     * the code, then use the received code when calling `refundMovement()`.
+     * In Development mode this is not required as the default code "123456"
+     * is used automatically.
+     *
+     * @see https://doc.tropipay.com/docs/api-reference/movements#refund-a-transaction
+     * @returns The API response confirming the code was sent
+     */
+    requestSecurityCode(type?: "sms" | "email"): Promise<any>;
 }
 export declare class ClientSideUtils {
     constructor(tropipayInstance: Tropipay);
@@ -102,5 +128,6 @@ export declare const Scopes: {
     ALLOW_GET_BALANCE: string;
     ALLOW_GET_MOVEMENT_LIST: string;
     ALLOW_GET_CREDENTIAL: string;
+    ALLOW_REFUND: string;
 };
 export {};

package/index.d.ts

@@ -39,71 +39,36 @@ interface UserHookSubscribed extends UserHook {
     createdAt: string;
     updatedAt: string;
 }
-/**
- * Interface for creating payment links/cards
- * @see https://tpp.stoplight.io/docs/tropipay-api-doc/b3A6ODgyNTM3OQ-create-a-new-pay-link-charge
- */
 interface PaymentLinkPayload {
-    /** Account ID where the funds will be received if compatible */
-    accountId?: number;
-    /** Reference code for the payment, preferred to be unique */
     reference: string;
-    /** Short description of the payment */
     concept: string;
-    /** Whether to mark this payment link as favorite */
     favorite: boolean;
-    /** Amount to charge in the specified currency */
     amount: number;
-    /** Currency code (EUR, USD, etc.) */
     currency: string;
-    /** Detailed description of the payment */
     description: string;
-    /** If true, the payment link can only be used once */
     singleUse: boolean;
-    /** Reason ID for the payment */
     reasonId: number;
-    /** Number of days until the payment link expires */
     expirationDays: number;
-    /** Language code for the payment page (en, es, etc.) */
     lang: string;
-    /** URL to redirect after successful payment */
     urlSuccess: string;
-    /** URL to redirect after failed payment */
     urlFailed: string;
-    /** Webhook URL for payment notifications */
     urlNotification: string;
-    /** Date when the service will be provided (ISO format) */
     serviceDate: string;
-    /** Client information for the payment */
     client?: {
-        /** Client's first name */
         name?: string;
-        /** Client's last name */
         lastName?: string;
-        /** Client's address */
         address?: string;
-        /** Client's phone number */
         phone?: string;
-        /** Client's email address */
         email?: string;
-        /** Client's country ID */
         countryId?: number;
-        /** Client's country ISO code */
         countryIso?: string;
-        /** Client's city */
         city: string;
-        /** Client's postal code */
         postCode: string;
-        /** Whether client accepted terms and conditions */
         termsAndConditions: boolean;
     } | null;
-    /** @deprecated If true, redirects directly to payment page */
     directPayment: boolean;
-    /** List of allowed payment methods */
     paymentMethods?: string[];
-    /** Base64 encoded image for the payment page */
     imageBase?: string;
-    /** Whether to save the payment token for future use */
     saveToken?: boolean;
 }
 interface PaymentLink extends PaymentLinkPayload {
@@ -203,6 +168,16 @@ type AccountDeposits = {
     count: number;
     rows: Deposit[];
 };
+type RefundResponse = {
+    id: number;
+    orderCode: string;
+    amount: number;
+    currency: string;
+    state: string;
+    type: string;
+    createdAt: string;
+    completedAt: string;
+};
 
 declare class TropipayHooks {
     private tropipay;
@@ -354,58 +329,6 @@ declare class DepositAccounts {
     delete(id: number): Promise<any>;
 }
 
-interface PaymentMethod {
-    slug: string;
-    name: string;
-    enabled: boolean;
-    allowedCurrencies: string[];
-}
-interface ServiceLimit {
-    value: number | null;
-    currency: string;
-}
-interface ServiceLimits {
-    min: ServiceLimit;
-    max: ServiceLimit;
-}
-interface Service {
-    slug: string;
-    enabled: boolean;
-    allowed_currencies: string[];
-    limits: ServiceLimits;
-}
-interface TropiCard {
-}
-interface Account {
-    id: number;
-    accountNumber: string;
-    userId: string;
-    alias: string;
-    balance: number;
-    pendingIn: number;
-    pendingOut: number;
-    state: number;
-    paymentEntityId: number;
-    currency: string;
-    type: number;
-    createdAt: string;
-    updatedAt: string;
-    isDefault: boolean;
-    groupId: number | null;
-    TropiCards: TropiCard[];
-    services: Service[];
-    paymentMethods: PaymentMethod[];
-}
-declare class Accounts {
-    private tropipay;
-    constructor(tropipayInstance: Tropipay);
-    /**
-     * List all accounts of the authenticated user
-     * @returns Array of Account objects
-     */
-    list(): Promise<Account[]>;
-}
-
 /**
  * Tropipayjs is a Typescript/Javascript library for the Tropipay API.
  *
@@ -420,7 +343,6 @@ declare class Tropipay {
     readonly clientSecret: string;
     readonly scopes: String[];
     request: Axios;
-    loginRequest: Axios;
     static accessToken: string | null;
     static refreshToken: string | null;
     static expiresIn: number | null;
@@ -429,7 +351,6 @@ declare class Tropipay {
     paymentCards: PaymentCard;
     depositAccounts: DepositAccounts;
     mediationPaymentCard: MediationPaymentCard;
-    accounts: Accounts;
     /**
      * Initializes a new instance of the Tropipay class.
      *
@@ -488,10 +409,39 @@ declare class Tropipay {
      * belonging or not to the TropiPay platform with the particularity
      * that the payment will be held in custody or retained until it is
      * released with the approval of the payer.
+     * @deprecated This method is no longer supported and may be removed in a future release.
      * @see https://tpp.stoplight.io/docs/tropipay-api-doc/12a128ff971e4-creating-a-mediation-payment-card
      * @param config Payload with the payment details
      */
     createMediationPaymentCard(config: MediationPaymentCardConfig): Promise<PaymentLink>;
+    /**
+     * Refund a completed transaction.
+     * Requires 2FA enabled and ALLOW_REFUND permission on the Tropipay account.
+     *
+     * In Development mode, `securityCode` defaults to `"123456"` when omitted.
+     * In Production mode, you must first call `requestSecurityCode()` to receive
+     * the 2FA code via SMS, then pass it as the `securityCode` parameter.
+     *
+     * @see https://doc.tropipay.com/docs/api-reference/movements#refund-a-transaction
+     * @param orderCode Code of the order/transaction to refund (e.g. "ORD-123456")
+     * @param amount Amount to refund in cents (e.g. 5000 = 50.00 USD/EUR)
+     * @param securityCode 2FA confirmation code. Use "123456" in Development or
+     * the code received via SMS in Production (obtained via requestSecurityCode()).
+     */
+    refundMovement(orderCode: string, amount: number, securityCode: string): Promise<RefundResponse>;
+    /**
+     * Request a 2FA security code to be sent via SMS for confirming sensitive
+     * operations like refunds.
+     *
+     * In Production mode, you must call this method first to trigger an SMS with
+     * the code, then use the received code when calling `refundMovement()`.
+     * In Development mode this is not required as the default code "123456"
+     * is used automatically.
+     *
+     * @see https://doc.tropipay.com/docs/api-reference/movements#refund-a-transaction
+     * @returns The API response confirming the code was sent
+     */
+    requestSecurityCode(type?: "sms" | "email"): Promise<any>;
 }
 declare class ClientSideUtils {
     constructor(tropipayInstance: Tropipay);
@@ -501,9 +451,7 @@ declare class ServerSideUtils {
     private tropipay;
     constructor(tropipayInstance: Tropipay);
     /**
-     * DEPRECATED Verify Topipay's signature on API V2 webhooks.
-     * @deprecated This method is deprecated and will be removed in future versions.
-     * Use the `verifySignatureV3` method from the `ServerSideUtils` class instead.
+     * Verify Topipay's signature on webhooks.
      * @param credentials Credential object or Tropipay instance
      * @param {String} originalCurrencyAmount
      * @param bankOrderCode
@@ -542,19 +490,8 @@ declare class ServerSideUtils {
      * @return {Promise<string>} the valid base64 image
      */
     static isValidImage(base64Image: string): boolean;
-    /**
-     * Verify Topipay's signature on API V3 webhooks.
-     * @param {string} originalCurrencyAmount
-     * @param {string} bankOrderCode
-     * @param {string} signature signaturev3 field to be verified
-     * @returns {boolean}
-     */
-    static verifySignatureV3(credentials: {
-        clientId: string;
-        clientSecret: string;
-    } | Tropipay, originalCurrencyAmount: string, bankOrderCode: string, signature: string): boolean;
 }
 
 declare const SERVER_MODE: ServerMode$1;
 
-export { AccountBalance, AccountDeposits, ClientSideUtils, Country, Deposit, HookEventType, HookTargetType, LoginError, LoginResponse, MAX_IMAGE_SIZE_MB, MediationPaymentCardConfig, PaymentLink, PaymentLinkPayload, SERVER_MODE, ServerMode$1 as ServerMode, ServerSideUtils, Tropipay, TropipayConfig, TropipayCredentials, UserHook, UserHookSubscribed };
+export { AccountBalance, AccountDeposits, ClientSideUtils, Country, Deposit, HookEventType, HookTargetType, LoginError, LoginResponse, MAX_IMAGE_SIZE_MB, MediationPaymentCardConfig, PaymentLink, PaymentLinkPayload, RefundResponse, SERVER_MODE, ServerMode$1 as ServerMode, ServerSideUtils, Tropipay, TropipayConfig, TropipayCredentials, UserHook, UserHookSubscribed };

package/index.js

@@ -220,7 +220,7 @@ class PaymentCard {
             await this.tropipay.login();
         }
         try {
-            const paylink = await this.tropipay.request.post("/api/v3/paymentcards", payload, {
+            const paylink = await this.tropipay.request.post("/api/v2/paymentcards", payload, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -243,7 +243,7 @@ class PaymentCard {
             await this.tropipay.login();
         }
         try {
-            const paymentcards = await this.tropipay.request.get(`/api/v3/paymentcards`, {
+            const paymentcards = await this.tropipay.request.get(`/api/v2/paymentcards`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -268,7 +268,7 @@ class PaymentCard {
             await this.tropipay.login();
         }
         try {
-            const paymentcard = await this.tropipay.request.get(`/api/v3/paymentcards/${id}`, {
+            const paymentcard = await this.tropipay.request.get(`/api/v2/paymentcards/${id}`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -294,7 +294,7 @@ class PaymentCard {
             await this.tropipay.login();
         }
         try {
-            const paymentcard = await this.tropipay.request.delete(`/api/v3/paymentcards/`, {
+            const paymentcard = await this.tropipay.request.delete(`/api/v2/paymentcards/`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -360,7 +360,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.get(`/api/v3/deposit_accounts`, {
+            const deposit = await this.tropipay.request.get(`/api/v2/deposit_accounts`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -383,7 +383,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.post("/api/v3/deposit_accounts", depositAccountObj, {
+            const deposit = await this.tropipay.request.post("/api/v2/deposit_accounts", depositAccountObj, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -407,7 +407,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.get(`/api/v3/deposit_accounts/${id}`, {
+            const deposit = await this.tropipay.request.get(`/api/v2/deposit_accounts/${id}`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -430,7 +430,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.put(`/api/v3/deposit_accounts/`, {
+            const deposit = await this.tropipay.request.put(`/api/v2/deposit_accounts/`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -453,7 +453,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.delete(`/api/v3/deposit_accounts/${id}`, {
+            const deposit = await this.tropipay.request.delete(`/api/v2/deposit_accounts/${id}`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -468,35 +468,6 @@ class DepositAccounts {
     }
 }
 
-class Accounts {
-    tropipay;
-    constructor(tropipayInstance) {
-        this.tropipay = tropipayInstance;
-    }
-    /**
-     * List all accounts of the authenticated user
-     * @returns Array of Account objects
-     */
-    async list() {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
-        try {
-            const accounts = await this.tropipay.request.get(`/api/v3/accounts/`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
-            return accounts.data;
-        }
-        catch (error) {
-            throw handleExceptions(error);
-        }
-    }
-}
-
 /**
  * Tropipayjs is a Typescript/Javascript library for the Tropipay API.
  *
@@ -508,7 +479,6 @@ class Tropipay {
     clientSecret;
     scopes;
     request;
-    loginRequest;
     static accessToken;
     static refreshToken;
     static expiresIn;
@@ -517,7 +487,6 @@ class Tropipay {
     paymentCards;
     depositAccounts;
     mediationPaymentCard;
-    accounts;
     /**
      * Initializes a new instance of the Tropipay class.
      *
@@ -536,6 +505,7 @@ class Tropipay {
                 "ALLOW_GET_BALANCE",
                 "ALLOW_GET_MOVEMENT_LIST",
                 "ALLOW_GET_CREDENTIAL",
+                "ALLOW_REFUND",
             ];
         }
         else {
@@ -549,7 +519,7 @@ class Tropipay {
         this.serverMode = config.serverMode || "Development";
         const tpp_env = this.serverMode === "Production"
             ? "https://www.tropipay.com"
-            : "https://sandbox.tropipay.me";
+            : "https://tropipay-dev.herokuapp.com";
         this.request = axios__default["default"].create({
             baseURL: config.customTropipayUrl || tpp_env,
             headers: {
@@ -558,28 +528,21 @@ class Tropipay {
                 Authorization: `Bearer ${Tropipay.accessToken}`,
             },
         });
-        // Create a separate instance for login requests
-        this.loginRequest = axios__default["default"].create({
-            baseURL: config.customTropipayUrl || tpp_env,
-            headers: {
-                "Content-Type": "application/json",
-                Accept: "application/json",
-            },
-        });
         // Add request interceptor for Token expired
         this.request.interceptors.request.use(async (config) => {
-            const currentTimestamp = Math.floor(Date.now() / 1000);
+            const currentTimestamp = Math.floor(Date.now() / 1000); // Current time in seconds
             if (Tropipay.expiresIn && Tropipay.expiresIn < currentTimestamp) {
-                console.debug("Token expired, attempting to log in");
+                // Token has expired, attempt to refresh it
                 try {
                     await this.login();
                 }
                 catch (error) {
+                    // Handle token refresh error
+                    Tropipay.accessToken = null;
+                    Tropipay.refreshToken = null;
                     throw handleExceptions(error);
                 }
             }
-            // Update the Authorization header in the config
-            config.headers.Authorization = `Bearer ${Tropipay.accessToken}`;
             return config;
         }, (error) => {
             return Promise.reject(error);
@@ -588,12 +551,25 @@ class Tropipay {
         this.paymentCards = new PaymentCard(this);
         this.mediationPaymentCard = new MediationPaymentCard(this);
         this.depositAccounts = new DepositAccounts(this);
-        this.accounts = new Accounts(this);
     }
     async login() {
         try {
+            if (Tropipay.refreshToken) {
+                const { data } = await this.request.post("/api/v2/access/token", {
+                    client_id: this.clientId,
+                    client_secret: this.clientSecret,
+                    grant_type: "refresh_token",
+                    refresh_token: Tropipay.refreshToken,
+                }, {
+                    headers: {
+                        "Content-Type": "application/json",
+                        Accept: "application/json",
+                    },
+                });
+                return data;
+            }
             // normal credetials login
-            const { data } = await this.loginRequest.post("/api/v3/access/token", {
+            const { data } = await this.request.post("/api/v2/access/token", {
                 client_id: this.clientId,
                 client_secret: this.clientSecret,
                 grant_type: "client_credentials",
@@ -605,6 +581,7 @@ class Tropipay {
                 },
             });
             Tropipay.accessToken = data.access_token;
+            Tropipay.refreshToken = data.refresh_token;
             Tropipay.expiresIn = data.expires_in;
             return data;
         }
@@ -612,7 +589,6 @@ class Tropipay {
             Tropipay.accessToken = null;
             Tropipay.refreshToken = null;
             Tropipay.expiresIn = null;
-            Tropipay.expiresIn = null;
             throw handleExceptions(error);
         }
     }
@@ -764,6 +740,7 @@ class Tropipay {
      * belonging or not to the TropiPay platform with the particularity
      * that the payment will be held in custody or retained until it is
      * released with the approval of the payer.
+     * @deprecated This method is no longer supported and may be removed in a future release.
      * @see https://tpp.stoplight.io/docs/tropipay-api-doc/12a128ff971e4-creating-a-mediation-payment-card
      * @param config Payload with the payment details
      */
@@ -784,6 +761,71 @@ class Tropipay {
             throw handleExceptions(error);
         }
     }
+    /**
+     * Refund a completed transaction.
+     * Requires 2FA enabled and ALLOW_REFUND permission on the Tropipay account.
+     *
+     * In Development mode, `securityCode` defaults to `"123456"` when omitted.
+     * In Production mode, you must first call `requestSecurityCode()` to receive
+     * the 2FA code via SMS, then pass it as the `securityCode` parameter.
+     *
+     * @see https://doc.tropipay.com/docs/api-reference/movements#refund-a-transaction
+     * @param orderCode Code of the order/transaction to refund (e.g. "ORD-123456")
+     * @param amount Amount to refund in cents (e.g. 5000 = 50.00 USD/EUR)
+     * @param securityCode 2FA confirmation code. Use "123456" in Development or
+     * the code received via SMS in Production (obtained via requestSecurityCode()).
+     */
+    async refundMovement(orderCode, amount, securityCode) {
+        if (!Tropipay.accessToken) {
+            await this.login();
+        }
+        if (!this.scopes.includes("ALLOW_REFUND")) {
+            throw new TropipayJSException("The credential does not have the ALLOW_REFUND scope required to perform refunds. If you believe your account should have this permission, please contact Tropipay support.", 403, null);
+        }
+        try {
+            const response = await this.request.post("/api/v3/movements/in/refund", { orderCode, amount, securityCode }, {
+                headers: {
+                    "Content-Type": "application/json",
+                    Accept: "application/json",
+                    Authorization: `Bearer ${Tropipay.accessToken}`,
+                },
+            });
+            return response.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * Request a 2FA security code to be sent via SMS for confirming sensitive
+     * operations like refunds.
+     *
+     * In Production mode, you must call this method first to trigger an SMS with
+     * the code, then use the received code when calling `refundMovement()`.
+     * In Development mode this is not required as the default code "123456"
+     * is used automatically.
+     *
+     * @see https://doc.tropipay.com/docs/api-reference/movements#refund-a-transaction
+     * @returns The API response confirming the code was sent
+     */
+    async requestSecurityCode(type = "sms") {
+        if (!Tropipay.accessToken) {
+            await this.login();
+        }
+        try {
+            const response = await this.request.post("/api/v3/users/sendSecurityCode", { type }, {
+                headers: {
+                    "Content-Type": "application/json",
+                    Accept: "application/json",
+                    Authorization: `Bearer ${Tropipay.accessToken}`,
+                },
+            });
+            return response.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
 }
 class ClientSideUtils {
     constructor(tropipayInstance) {
@@ -799,9 +841,7 @@ class ServerSideUtils {
         this.tropipay = tropipayInstance;
     }
     /**
-     * DEPRECATED Verify Topipay's signature on API V2 webhooks.
-     * @deprecated This method is deprecated and will be removed in future versions.
-     * Use the `verifySignatureV3` method from the `ServerSideUtils` class instead.
+     * Verify Topipay's signature on webhooks.
      * @param credentials Credential object or Tropipay instance
      * @param {String} originalCurrencyAmount
      * @param bankOrderCode
@@ -891,28 +931,6 @@ class ServerSideUtils {
             throw new Error(`Error checking base64 image`);
         }
     }
-    /**
-     * Verify Topipay's signature on API V3 webhooks.
-     * @param {string} originalCurrencyAmount
-     * @param {string} bankOrderCode
-     * @param {string} signature signaturev3 field to be verified
-     * @returns {boolean}
-     */
-    static verifySignatureV3(credentials, originalCurrencyAmount, bankOrderCode, signature) {
-        const sha1Secret = crypto__namespace
-            .createHash("sha1")
-            .update(credentials.clientSecret)
-            .digest("hex");
-        const dataToHash = bankOrderCode +
-            credentials.clientId +
-            sha1Secret +
-            originalCurrencyAmount;
-        const localSignature = crypto__namespace
-            .createHash("sha256")
-            .update(dataToHash)
-            .digest("hex");
-        return localSignature === signature;
-    }
 }
 
 const SERVER_MODE = "Development"; // Move the constant here