@yosle/tropipayjs 0.2.1 → 0.2.3

package/index.js

@@ -1,15 +1,10 @@
 'use strict';
 
-Object.defineProperty(exports, '__esModule', { value: true });
-
 var axios = require('axios');
 var crypto = require('crypto');
 var fs = require('fs/promises');
 
-function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
-
-function _interopNamespace(e) {
-    if (e && e.__esModule) return e;
+function _interopNamespaceDefault(e) {
     var n = Object.create(null);
     if (e) {
         Object.keys(e).forEach(function (k) {
@@ -22,13 +17,11 @@ function _interopNamespace(e) {
             }
         });
     }
-    n["default"] = e;
+    n.default = e;
     return Object.freeze(n);
 }
 
-var axios__default = /*#__PURE__*/_interopDefaultLegacy(axios);
-var crypto__namespace = /*#__PURE__*/_interopNamespace(crypto);
-var fs__default = /*#__PURE__*/_interopDefaultLegacy(fs);
+var crypto__namespace = /*#__PURE__*/_interopNamespaceDefault(crypto);
 
 function handleExceptions(error) {
     if (error instanceof axios.AxiosError) {
@@ -220,7 +213,7 @@ class PaymentCard {
             await this.tropipay.login();
         }
         try {
-            const paylink = await this.tropipay.request.post("/api/v3/paymentcards", payload, {
+            const paylink = await this.tropipay.request.post("/api/v2/paymentcards", payload, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -243,7 +236,7 @@ class PaymentCard {
             await this.tropipay.login();
         }
         try {
-            const paymentcards = await this.tropipay.request.get(`/api/v3/paymentcards`, {
+            const paymentcards = await this.tropipay.request.get(`/api/v2/paymentcards`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -268,7 +261,7 @@ class PaymentCard {
             await this.tropipay.login();
         }
         try {
-            const paymentcard = await this.tropipay.request.get(`/api/v3/paymentcards/${id}`, {
+            const paymentcard = await this.tropipay.request.get(`/api/v2/paymentcards/${id}`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -294,7 +287,7 @@ class PaymentCard {
             await this.tropipay.login();
         }
         try {
-            const paymentcard = await this.tropipay.request.delete(`/api/v3/paymentcards/`, {
+            const paymentcard = await this.tropipay.request.delete(`/api/v2/paymentcards/`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -360,7 +353,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.get(`/api/v3/deposit_accounts`, {
+            const deposit = await this.tropipay.request.get(`/api/v2/deposit_accounts`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -383,7 +376,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.post("/api/v3/deposit_accounts", depositAccountObj, {
+            const deposit = await this.tropipay.request.post("/api/v2/deposit_accounts", depositAccountObj, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -407,7 +400,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.get(`/api/v3/deposit_accounts/${id}`, {
+            const deposit = await this.tropipay.request.get(`/api/v2/deposit_accounts/${id}`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -430,7 +423,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.put(`/api/v3/deposit_accounts/`, {
+            const deposit = await this.tropipay.request.put(`/api/v2/deposit_accounts/`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -453,7 +446,7 @@ class DepositAccounts {
             await this.tropipay.login();
         }
         try {
-            const deposit = await this.tropipay.request.delete(`/api/v3/deposit_accounts/${id}`, {
+            const deposit = await this.tropipay.request.delete(`/api/v2/deposit_accounts/${id}`, {
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${Tropipay.accessToken}`,
@@ -468,35 +461,6 @@ class DepositAccounts {
     }
 }
 
-class Accounts {
-    tropipay;
-    constructor(tropipayInstance) {
-        this.tropipay = tropipayInstance;
-    }
-    /**
-     * List all accounts of the authenticated user
-     * @returns Array of Account objects
-     */
-    async list() {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
-        try {
-            const accounts = await this.tropipay.request.get(`/api/v3/accounts/`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
-            return accounts.data;
-        }
-        catch (error) {
-            throw handleExceptions(error);
-        }
-    }
-}
-
 /**
  * Tropipayjs is a Typescript/Javascript library for the Tropipay API.
  *
@@ -508,7 +472,6 @@ class Tropipay {
     clientSecret;
     scopes;
     request;
-    loginRequest;
     static accessToken;
     static refreshToken;
     static expiresIn;
@@ -517,7 +480,6 @@ class Tropipay {
     paymentCards;
     depositAccounts;
     mediationPaymentCard;
-    accounts;
     /**
      * Initializes a new instance of the Tropipay class.
      *
@@ -536,6 +498,7 @@ class Tropipay {
                 "ALLOW_GET_BALANCE",
                 "ALLOW_GET_MOVEMENT_LIST",
                 "ALLOW_GET_CREDENTIAL",
+                "ALLOW_REFUND",
             ];
         }
         else {
@@ -549,8 +512,8 @@ class Tropipay {
         this.serverMode = config.serverMode || "Development";
         const tpp_env = this.serverMode === "Production"
             ? "https://www.tropipay.com"
-            : "https://sandbox.tropipay.me";
-        this.request = axios__default["default"].create({
+            : "https://tropipay-dev.herokuapp.com";
+        this.request = axios.create({
             baseURL: config.customTropipayUrl || tpp_env,
             headers: {
                 "Content-Type": "application/json",
@@ -558,28 +521,21 @@ class Tropipay {
                 Authorization: `Bearer ${Tropipay.accessToken}`,
             },
         });
-        // Create a separate instance for login requests
-        this.loginRequest = axios__default["default"].create({
-            baseURL: config.customTropipayUrl || tpp_env,
-            headers: {
-                "Content-Type": "application/json",
-                Accept: "application/json",
-            },
-        });
         // Add request interceptor for Token expired
         this.request.interceptors.request.use(async (config) => {
-            const currentTimestamp = Math.floor(Date.now() / 1000);
+            const currentTimestamp = Math.floor(Date.now() / 1000); // Current time in seconds
             if (Tropipay.expiresIn && Tropipay.expiresIn < currentTimestamp) {
-                console.debug("Token expired, attempting to log in");
+                // Token has expired, attempt to refresh it
                 try {
                     await this.login();
                 }
                 catch (error) {
+                    // Handle token refresh error
+                    Tropipay.accessToken = null;
+                    Tropipay.refreshToken = null;
                     throw handleExceptions(error);
                 }
             }
-            // Update the Authorization header in the config
-            config.headers.Authorization = `Bearer ${Tropipay.accessToken}`;
             return config;
         }, (error) => {
             return Promise.reject(error);
@@ -588,12 +544,25 @@ class Tropipay {
         this.paymentCards = new PaymentCard(this);
         this.mediationPaymentCard = new MediationPaymentCard(this);
         this.depositAccounts = new DepositAccounts(this);
-        this.accounts = new Accounts(this);
     }
     async login() {
         try {
+            if (Tropipay.refreshToken) {
+                const { data } = await this.request.post("/api/v2/access/token", {
+                    client_id: this.clientId,
+                    client_secret: this.clientSecret,
+                    grant_type: "refresh_token",
+                    refresh_token: Tropipay.refreshToken,
+                }, {
+                    headers: {
+                        "Content-Type": "application/json",
+                        Accept: "application/json",
+                    },
+                });
+                return data;
+            }
             // normal credetials login
-            const { data } = await this.loginRequest.post("/api/v3/access/token", {
+            const { data } = await this.request.post("/api/v2/access/token", {
                 client_id: this.clientId,
                 client_secret: this.clientSecret,
                 grant_type: "client_credentials",
@@ -605,6 +574,7 @@ class Tropipay {
                 },
             });
             Tropipay.accessToken = data.access_token;
+            Tropipay.refreshToken = data.refresh_token;
             Tropipay.expiresIn = data.expires_in;
             return data;
         }
@@ -612,7 +582,6 @@ class Tropipay {
             Tropipay.accessToken = null;
             Tropipay.refreshToken = null;
             Tropipay.expiresIn = null;
-            Tropipay.expiresIn = null;
             throw handleExceptions(error);
         }
     }
@@ -764,6 +733,7 @@ class Tropipay {
      * belonging or not to the TropiPay platform with the particularity
      * that the payment will be held in custody or retained until it is
      * released with the approval of the payer.
+     * @deprecated This method is no longer supported and may be removed in a future release.
      * @see https://tpp.stoplight.io/docs/tropipay-api-doc/12a128ff971e4-creating-a-mediation-payment-card
      * @param config Payload with the payment details
      */
@@ -784,6 +754,71 @@ class Tropipay {
             throw handleExceptions(error);
         }
     }
+    /**
+     * Refund a completed transaction.
+     * Requires 2FA enabled and ALLOW_REFUND permission on the Tropipay account.
+     *
+     * In Development mode, `securityCode` defaults to `"123456"` when omitted.
+     * In Production mode, you must first call `requestSecurityCode()` to receive
+     * the 2FA code via SMS, then pass it as the `securityCode` parameter.
+     *
+     * @see https://doc.tropipay.com/docs/api-reference/movements#refund-a-transaction
+     * @param orderCode Code of the order/transaction to refund (e.g. "ORD-123456")
+     * @param amount Amount to refund in cents (e.g. 5000 = 50.00 USD/EUR)
+     * @param securityCode 2FA confirmation code. Use "123456" in Development or
+     * the code received via SMS in Production (obtained via requestSecurityCode()).
+     */
+    async refundMovement(orderCode, amount, securityCode) {
+        if (!Tropipay.accessToken) {
+            await this.login();
+        }
+        if (!this.scopes.includes("ALLOW_REFUND")) {
+            throw new TropipayJSException("The credential does not have the ALLOW_REFUND scope required to perform refunds. If you believe your account should have this permission, please contact Tropipay support.", 403, null);
+        }
+        try {
+            const response = await this.request.post("/api/v3/movements/in/refund", { orderCode, amount, securityCode }, {
+                headers: {
+                    "Content-Type": "application/json",
+                    Accept: "application/json",
+                    Authorization: `Bearer ${Tropipay.accessToken}`,
+                },
+            });
+            return response.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * Request a 2FA security code to be sent via SMS for confirming sensitive
+     * operations like refunds.
+     *
+     * In Production mode, you must call this method first to trigger an SMS with
+     * the code, then use the received code when calling `refundMovement()`.
+     * In Development mode this is not required as the default code "123456"
+     * is used automatically.
+     *
+     * @see https://doc.tropipay.com/docs/api-reference/movements#refund-a-transaction
+     * @returns The API response confirming the code was sent
+     */
+    async requestSecurityCode(type = "sms") {
+        if (!Tropipay.accessToken) {
+            await this.login();
+        }
+        try {
+            const response = await this.request.post("/api/v3/users/sendSecurityCode", { type }, {
+                headers: {
+                    "Content-Type": "application/json",
+                    Accept: "application/json",
+                    Authorization: `Bearer ${Tropipay.accessToken}`,
+                },
+            });
+            return response.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
 }
 class ClientSideUtils {
     constructor(tropipayInstance) {
@@ -799,9 +834,7 @@ class ServerSideUtils {
         this.tropipay = tropipayInstance;
     }
     /**
-     * DEPRECATED Verify Topipay's signature on API V2 webhooks.
-     * @deprecated This method is deprecated and will be removed in future versions.
-     * Use the `verifySignatureV3` method from the `ServerSideUtils` class instead.
+     * Verify Topipay's signature on webhooks.
      * @param credentials Credential object or Tropipay instance
      * @param {String} originalCurrencyAmount
      * @param bankOrderCode
@@ -845,7 +878,7 @@ class ServerSideUtils {
      * @return {Promise<string>} a Promise that resolves to the base64 representation of the file content
      */
     static async fileToBase64(filepath) {
-        const contents = await fs__default["default"].readFile(filepath);
+        const contents = await fs.readFile(filepath);
         let base64content = contents.toString("base64");
         const ext = filepath.split(".").pop();
         return `data:image/${ext};base64,` + base64content;
@@ -857,7 +890,7 @@ class ServerSideUtils {
      * @return {Promise<string>} the base64 representation of the file
      */
     static async getBase64FromFileUrl(url) {
-        const response = await axios__default["default"].get(url, {
+        const response = await axios.get(url, {
             responseType: "arraybuffer",
             maxRedirects: 5,
         });
@@ -891,28 +924,6 @@ class ServerSideUtils {
             throw new Error(`Error checking base64 image`);
         }
     }
-    /**
-     * Verify Topipay's signature on API V3 webhooks.
-     * @param {string} originalCurrencyAmount
-     * @param {string} bankOrderCode
-     * @param {string} signature signaturev3 field to be verified
-     * @returns {boolean}
-     */
-    static verifySignatureV3(credentials, originalCurrencyAmount, bankOrderCode, signature) {
-        const sha1Secret = crypto__namespace
-            .createHash("sha1")
-            .update(credentials.clientSecret)
-            .digest("hex");
-        const dataToHash = bankOrderCode +
-            credentials.clientId +
-            sha1Secret +
-            originalCurrencyAmount;
-        const localSignature = crypto__namespace
-            .createHash("sha256")
-            .update(dataToHash)
-            .digest("hex");
-        return localSignature === signature;
-    }
 }
 
 const SERVER_MODE = "Development"; // Move the constant here

package/interfaces/index.d.ts

@@ -35,71 +35,36 @@ export interface UserHookSubscribed extends UserHook {
     createdAt: string;
     updatedAt: string;
 }
-/**
- * Interface for creating payment links/cards
- * @see https://tpp.stoplight.io/docs/tropipay-api-doc/b3A6ODgyNTM3OQ-create-a-new-pay-link-charge
- */
 export interface PaymentLinkPayload {
-    /** Account ID where the funds will be received if compatible */
-    accountId?: number;
-    /** Reference code for the payment, preferred to be unique */
     reference: string;
-    /** Short description of the payment */
     concept: string;
-    /** Whether to mark this payment link as favorite */
     favorite: boolean;
-    /** Amount to charge in the specified currency */
     amount: number;
-    /** Currency code (EUR, USD, etc.) */
     currency: string;
-    /** Detailed description of the payment */
     description: string;
-    /** If true, the payment link can only be used once */
     singleUse: boolean;
-    /** Reason ID for the payment */
     reasonId: number;
-    /** Number of days until the payment link expires */
     expirationDays: number;
-    /** Language code for the payment page (en, es, etc.) */
     lang: string;
-    /** URL to redirect after successful payment */
     urlSuccess: string;
-    /** URL to redirect after failed payment */
     urlFailed: string;
-    /** Webhook URL for payment notifications */
     urlNotification: string;
-    /** Date when the service will be provided (ISO format) */
     serviceDate: string;
-    /** Client information for the payment */
     client?: {
-        /** Client's first name */
         name?: string;
-        /** Client's last name */
         lastName?: string;
-        /** Client's address */
         address?: string;
-        /** Client's phone number */
         phone?: string;
-        /** Client's email address */
         email?: string;
-        /** Client's country ID */
         countryId?: number;
-        /** Client's country ISO code */
         countryIso?: string;
-        /** Client's city */
         city: string;
-        /** Client's postal code */
         postCode: string;
-        /** Whether client accepted terms and conditions */
         termsAndConditions: boolean;
     } | null;
-    /** @deprecated If true, redirects directly to payment page */
     directPayment: boolean;
-    /** List of allowed payment methods */
     paymentMethods?: string[];
-    /** Base64 encoded image for the payment page */
     imageBase?: string;
-    /** Whether to save the payment token for future use */
     saveToken?: boolean;
 }
 export interface PaymentLink extends PaymentLinkPayload {
@@ -199,3 +164,13 @@ export type AccountDeposits = {
     count: number;
     rows: Deposit[];
 };
+export type RefundResponse = {
+    id: number;
+    orderCode: string;
+    amount: number;
+    currency: string;
+    state: string;
+    type: string;
+    createdAt: string;
+    completedAt: string;
+};

package/interfaces/paymentlink/index.d.ts

@@ -46,7 +46,6 @@ declare enum Reasons {
     SENDING_YOU_A_KISS = 80
 }
 export interface PaymentLinkPayload {
-    accountId: number;
     reference: string;
     concept: string;
     favorite: boolean;
@@ -61,6 +60,9 @@ export interface PaymentLinkPayload {
     urlFailed: string;
     urlNotification: string;
     serviceDate: string;
+    /**
+     * fgfsgdfgdfgd
+     */
     client?: {
         name: string;
         lastName: string;

package/package.json

@@ -1,18 +1,21 @@
 {
   "name": "@yosle/tropipayjs",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Javascript / Typescript SDK for the Tropipay API",
   "main": "index.js",
   "scripts": {
     "test": "jest --passWithNoTests --updateSnapshot --coverage",
-    "_clear": "rimraf src/dist/*",
+    "_clear": "rimraf src/dist",
     "_tsc": "tsc",
     "_make-bundle": "rollup --config",
     "build": "npm run _clear && npm run _tsc && npm run _make-bundle"
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/yosle/tropipayjs"
+    "url": "git+https://github.com/yosle/tropipayjs.git"
+  },
+  "publishConfig": {
+    "access": "public"
   },
   "keywords": [
     "Javascript",
@@ -25,22 +28,21 @@
   "author": "Yosleivy Baez Acosta <yosle007@gmail.com>",
   "license": "MIT",
   "dependencies": {
-    "axios": "^1.6.0",
-    "tslib": "^2.4.0"
+    "axios": "^1.18.1",
+    "tslib": "^2.8.1"
   },
   "devDependencies": {
-    "@rollup/plugin-typescript": "^8.5.0",
+    "@rollup/plugin-typescript": "^12.3.0",
     "@types/jest": "^29.5.12",
     "@types/node": "^20.12.7",
     "@types/tough-cookie": "^4.0.5",
     "babel-jest": "^29.7.0",
     "jest": "^29.7.0",
-    "rimraf": "^3.0.2",
-    "rollup": "^2.79.1",
-    "rollup-plugin-dts": "^4.2.2",
-    "run-s": "^0.0.0",
-    "ts-jest": "^29.1.2",
-    "typescript": "^5.4.5"
+    "rimraf": "^6.1.3",
+    "rollup": "^4.62.2",
+    "rollup-plugin-dts": "^6.4.1",
+    "ts-jest": "^29.4.11",
+    "typescript": "^6.0.3"
   },
   "funding": {
     "type": "individual",

package/paymentcard/paymentcard.spec.d.ts

@@ -0,0 +1 @@
+declare function sum(a: number, b: number): number;

package/rollup.config.js

@@ -1,6 +1,5 @@
-// Contents of the file /rollup.config.js
-import typescript from "@rollup/plugin-typescript";
-import dts from "rollup-plugin-dts";
+import { dts } from "rollup-plugin-dts";
+
 const config = [
   {
     input: "dist/index.js",
@@ -10,7 +9,6 @@ const config = [
       sourcemap: true,
     },
     external: ["axios", "crypto", "fs/promises"],
-    plugins: [typescript()],
   },
   {
     input: "dist/index.d.ts",
@@ -21,4 +19,5 @@ const config = [
     plugins: [dts()],
   },
 ];
+
 export default config;