@youidian/pay-sdk 1.0.0

package/dist/server.js

@@ -0,0 +1,168 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+
+// src/server.ts
+var server_exports = {};
+__export(server_exports, {
+  PaymentClient: () => PaymentClient
+});
+module.exports = __toCommonJS(server_exports);
+var import_crypto = __toESM(require("crypto"));
+var PaymentClient = class {
+  constructor(options) {
+    __publicField(this, "appId");
+    __publicField(this, "appSecret");
+    __publicField(this, "baseUrl");
+    if (!options.appId) throw new Error("appId is required");
+    if (!options.appSecret) throw new Error("appSecret is required");
+    if (!options.baseUrl) throw new Error("baseUrl is required");
+    this.appId = options.appId;
+    this.appSecret = options.appSecret;
+    this.baseUrl = options.baseUrl.replace(/\/$/, "");
+  }
+  /**
+   * Generate SHA256 signature for the request
+   * Logic: SHA256(appId + appSecret + timestamp)
+   */
+  generateSignature(timestamp) {
+    const str = `${this.appId}${this.appSecret}${timestamp}`;
+    return import_crypto.default.createHash("sha256").update(str).digest("hex");
+  }
+  /**
+   * Internal request helper for Gateway API
+   */
+  async request(method, path, body) {
+    const timestamp = Date.now();
+    const signature = this.generateSignature(timestamp);
+    const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Pay-Timestamp": timestamp.toString(),
+      "X-Pay-Sign": signature
+    };
+    const options = {
+      method,
+      headers,
+      body: body ? JSON.stringify(body) : void 0
+    };
+    const response = await fetch(url, options);
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);
+    }
+    const json = await response.json();
+    if (json.error) {
+      throw new Error(`Payment API Error: ${json.error}`);
+    }
+    return json.data;
+  }
+  /**
+   * Decrypts the callback notification payload using AES-256-GCM.
+   * @param notification - The encrypted notification from payment webhook
+   * @returns Decrypted payment callback data
+   */
+  decryptCallback(notification) {
+    try {
+      const { iv, encryptedData, authTag } = notification;
+      const key = import_crypto.default.createHash("sha256").update(this.appSecret).digest();
+      const decipher = import_crypto.default.createDecipheriv(
+        "aes-256-gcm",
+        key,
+        Buffer.from(iv, "hex")
+      );
+      decipher.setAuthTag(Buffer.from(authTag, "hex"));
+      let decrypted = decipher.update(encryptedData, "hex", "utf8");
+      decrypted += decipher.final("utf8");
+      return JSON.parse(decrypted);
+    } catch (error) {
+      throw new Error("Failed to decrypt payment callback: Invalid secret or tampered data.");
+    }
+  }
+  /**
+   * Fetch products for the configured app.
+   */
+  async getProducts(options) {
+    const params = new URLSearchParams();
+    params.append("appId", this.appId);
+    if (options?.locale) params.append("locale", options.locale);
+    if (options?.currency) params.append("currency", options.currency);
+    const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;
+    const res = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Content-Type": "application/json",
+        "Accept": "application/json"
+      }
+    });
+    if (!res.ok) {
+      throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);
+    }
+    const json = await res.json();
+    return json.data?.products || [];
+  }
+  /**
+   * Create a new order
+   * @param params - Order creation parameters
+   * @returns Order details with payment parameters
+   */
+  async createOrder(params) {
+    return this.request("POST", "/orders", params);
+  }
+  /**
+   * Pay for an existing order
+   * @param orderId - The order ID to pay
+   * @param params - Payment parameters including channel
+   */
+  async payOrder(orderId, params) {
+    return this.request("POST", `/orders/${orderId}/pay`, params);
+  }
+  /**
+   * Query order status
+   * @param orderId - The order ID to query
+   */
+  async getOrderStatus(orderId) {
+    return this.request("GET", `/orders/${orderId}`);
+  }
+  /**
+   * Generate checkout URL for client-side payment
+   * @param productId - Product ID
+   * @param priceId - Price ID
+   * @returns Checkout page URL
+   */
+  getCheckoutUrl(productId, priceId) {
+    return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PaymentClient
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Youidian Payment SDK - Server Module\n * 用于服务端集成，包含签名、订单创建、回调解密等功能\n */\n\nimport crypto from \"crypto\";\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Product Entitlements\n */\nexport interface ProductEntitlements {\n    [key: string]: any;\n}\n\n/**\n * Product Price\n */\nexport interface ProductPrice {\n    id: string;\n    currency: string;\n    amount: number;\n    displayAmount: string;\n    locale: string | null;\n    isDefault: boolean;\n}\n\n/**\n * Product Data\n */\nexport interface Product {\n    id: string;\n    code: string;\n    type: string;\n    name: string;\n    description?: string;\n    entitlements: ProductEntitlements;\n    prices: ProductPrice[];\n}\n\n/**\n * SDK Client Options\n */\nexport interface PaymentClientOptions {\n    /** Application ID (Required) */\n    appId: string;\n    /** Application Secret (Required for server-side operations) */\n    appSecret: string;\n    /** API Base URL (e.g. https://pay.youidian.com) */\n    baseUrl: string;\n}\n\n/**\n * Create Order Parameters\n */\nexport interface CreateOrderParams {\n    productId?: string;\n    priceId?: string;\n    channel?: string;\n    userId: string;\n    returnUrl?: string;\n    metadata?: Record<string, any>;\n    merchantOrderId?: string;\n    openid?: string;\n}\n\n/**\n * Create Order Response\n */\nexport interface CreateOrderResponse {\n    orderId: string;\n    internalId: string;\n    amount: number;\n    currency: string;\n    payParams: any;\n}\n\n/**\n * Payment Callback Notification\n */\nexport interface PaymentNotification {\n    iv: string;\n    encryptedData: string;\n    authTag: string;\n}\n\n/**\n * Decrypted Payment Callback Data\n */\nexport interface PaymentCallbackData {\n    orderId: string;\n    merchantOrderId?: string;\n    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    amount: number;\n    currency: string;\n    paidAt: string;\n    channelTransactionId?: string;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Server-side Payment Client\n * 服务端支付客户端，用于创建订单、查询状态、解密回调\n */\nexport class PaymentClient {\n    private appId: string;\n    private appSecret: string;\n    private baseUrl: string;\n\n    constructor(options: PaymentClientOptions) {\n        if (!options.appId) throw new Error(\"appId is required\");\n        if (!options.appSecret) throw new Error(\"appSecret is required\");\n        if (!options.baseUrl) throw new Error(\"baseUrl is required\");\n\n        this.appId = options.appId;\n        this.appSecret = options.appSecret;\n        this.baseUrl = options.baseUrl.replace(/\\/$/, ''); // Remove trailing slash\n    }\n\n    /**\n     * Generate SHA256 signature for the request\n     * Logic: SHA256(appId + appSecret + timestamp)\n     */\n    private generateSignature(timestamp: number): string {\n        const str = `${this.appId}${this.appSecret}${timestamp}`;\n        return crypto.createHash(\"sha256\").update(str).digest(\"hex\");\n    }\n\n    /**\n     * Internal request helper for Gateway API\n     */\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\n        const timestamp = Date.now();\n        const signature = this.generateSignature(timestamp);\n\n        const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;\n\n        const headers: HeadersInit = {\n            \"Content-Type\": \"application/json\",\n            \"X-Pay-Timestamp\": timestamp.toString(),\n            \"X-Pay-Sign\": signature,\n        };\n\n        const options: RequestInit = {\n            method,\n            headers,\n            body: body ? JSON.stringify(body) : undefined,\n        };\n\n        const response = await fetch(url, options);\n\n        if (!response.ok) {\n            const errorText = await response.text();\n            throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);\n        }\n\n        const json = await response.json();\n        if (json.error) {\n            throw new Error(`Payment API Error: ${json.error}`);\n        }\n\n        return json.data as T;\n    }\n\n    /**\n     * Decrypts the callback notification payload using AES-256-GCM.\n     * @param notification - The encrypted notification from payment webhook\n     * @returns Decrypted payment callback data\n     */\n    decryptCallback(notification: PaymentNotification): PaymentCallbackData {\n        try {\n            const { iv, encryptedData, authTag } = notification;\n            const key = crypto.createHash('sha256').update(this.appSecret).digest();\n            const decipher = crypto.createDecipheriv(\n                'aes-256-gcm',\n                key,\n                Buffer.from(iv, 'hex')\n            );\n\n            decipher.setAuthTag(Buffer.from(authTag, 'hex'));\n\n            let decrypted = decipher.update(encryptedData, 'hex', 'utf8');\n            decrypted += decipher.final('utf8');\n\n            return JSON.parse(decrypted);\n        } catch (error) {\n            throw new Error(\"Failed to decrypt payment callback: Invalid secret or tampered data.\");\n        }\n    }\n\n    /**\n     * Fetch products for the configured app.\n     */\n    async getProducts(options?: {\n        locale?: string;\n        currency?: string;\n    }): Promise<Product[]> {\n        const params = new URLSearchParams();\n        params.append('appId', this.appId);\n        if (options?.locale) params.append('locale', options.locale);\n        if (options?.currency) params.append('currency', options.currency);\n\n        const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;\n\n        const res = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n                'Accept': 'application/json'\n            }\n        });\n\n        if (!res.ok) {\n            throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);\n        }\n\n        const json = await res.json();\n        return json.data?.products || [];\n    }\n\n    /**\n     * Create a new order\n     * @param params - Order creation parameters\n     * @returns Order details with payment parameters\n     */\n    async createOrder(params: CreateOrderParams): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", \"/orders\", params);\n    }\n\n    /**\n     * Pay for an existing order\n     * @param orderId - The order ID to pay\n     * @param params - Payment parameters including channel\n     */\n    async payOrder(orderId: string, params: {\n        channel: string;\n        returnUrl?: string;\n        openid?: string;\n        [key: string]: any;\n    }): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", `/orders/${orderId}/pay`, params);\n    }\n\n    /**\n     * Query order status\n     * @param orderId - The order ID to query\n     */\n    async getOrderStatus(orderId: string): Promise<OrderStatus> {\n        return this.request(\"GET\", `/orders/${orderId}`);\n    }\n\n    /**\n     * Generate checkout URL for client-side payment\n     * @param productId - Product ID\n     * @param priceId - Price ID\n     * @returns Checkout page URL\n     */\n    getCheckoutUrl(productId: string, priceId: string): string {\n        return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,oBAAmB;AA4GZ,IAAM,gBAAN,MAAoB;AAAA,EAKvB,YAAY,SAA+B;AAJ3C,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGJ,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAI,MAAM,mBAAmB;AACvD,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,qBAAqB;AAE3D,SAAK,QAAQ,QAAQ;AACrB,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,WAA2B;AACjD,UAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,SAAS,GAAG,SAAS;AACtD,WAAO,cAAAA,QAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,YAAY,KAAK,kBAAkB,SAAS;AAElD,UAAM,MAAM,GAAG,KAAK,OAAO,mBAAmB,KAAK,KAAK,GAAG,IAAI;AAE/D,UAAM,UAAuB;AAAA,MACzB,gBAAgB;AAAA,MAChB,mBAAmB,UAAU,SAAS;AAAA,MACtC,cAAc;AAAA,IAClB;AAEA,UAAM,UAAuB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACxC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,OAAO;AAEzC,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,sBAAsB,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAC1E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,KAAK,OAAO;AACZ,YAAM,IAAI,MAAM,sBAAsB,KAAK,KAAK,EAAE;AAAA,IACtD;AAEA,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,cAAwD;AACpE,QAAI;AACA,YAAM,EAAE,IAAI,eAAe,QAAQ,IAAI;AACvC,YAAM,MAAM,cAAAA,QAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,OAAO;AACtE,YAAM,WAAW,cAAAA,QAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI,KAAK;AAAA,MACzB;AAEA,eAAS,WAAW,OAAO,KAAK,SAAS,KAAK,CAAC;AAE/C,UAAI,YAAY,SAAS,OAAO,eAAe,OAAO,MAAM;AAC5D,mBAAa,SAAS,MAAM,MAAM;AAElC,aAAO,KAAK,MAAM,SAAS;AAAA,IAC/B,SAAS,OAAO;AACZ,YAAM,IAAI,MAAM,sEAAsE;AAAA,IAC1F;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAGK;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,OAAO,SAAS,KAAK,KAAK;AACjC,QAAI,SAAS,OAAQ,QAAO,OAAO,UAAU,QAAQ,MAAM;AAC3D,QAAI,SAAS,SAAU,QAAO,OAAO,YAAY,QAAQ,QAAQ;AAEjE,UAAM,MAAM,GAAG,KAAK,OAAO,wBAAwB,OAAO,SAAS,CAAC;AAEpE,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MACzB,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,IAC/E;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,QAAyD;AACvE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAAiB,QAKC;AAC7B,WAAO,KAAK,QAAQ,QAAQ,WAAW,OAAO,QAAQ,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAe,SAAuC;AACxD,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,EAAE;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,WAAmB,SAAyB;AACvD,WAAO,GAAG,KAAK,OAAO,aAAa,KAAK,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,EACzE;AACJ;","names":["crypto"]}

package/dist/server.mjs

@@ -0,0 +1,135 @@
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+
+// src/server.ts
+import crypto from "crypto";
+var PaymentClient = class {
+  constructor(options) {
+    __publicField(this, "appId");
+    __publicField(this, "appSecret");
+    __publicField(this, "baseUrl");
+    if (!options.appId) throw new Error("appId is required");
+    if (!options.appSecret) throw new Error("appSecret is required");
+    if (!options.baseUrl) throw new Error("baseUrl is required");
+    this.appId = options.appId;
+    this.appSecret = options.appSecret;
+    this.baseUrl = options.baseUrl.replace(/\/$/, "");
+  }
+  /**
+   * Generate SHA256 signature for the request
+   * Logic: SHA256(appId + appSecret + timestamp)
+   */
+  generateSignature(timestamp) {
+    const str = `${this.appId}${this.appSecret}${timestamp}`;
+    return crypto.createHash("sha256").update(str).digest("hex");
+  }
+  /**
+   * Internal request helper for Gateway API
+   */
+  async request(method, path, body) {
+    const timestamp = Date.now();
+    const signature = this.generateSignature(timestamp);
+    const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;
+    const headers = {
+      "Content-Type": "application/json",
+      "X-Pay-Timestamp": timestamp.toString(),
+      "X-Pay-Sign": signature
+    };
+    const options = {
+      method,
+      headers,
+      body: body ? JSON.stringify(body) : void 0
+    };
+    const response = await fetch(url, options);
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);
+    }
+    const json = await response.json();
+    if (json.error) {
+      throw new Error(`Payment API Error: ${json.error}`);
+    }
+    return json.data;
+  }
+  /**
+   * Decrypts the callback notification payload using AES-256-GCM.
+   * @param notification - The encrypted notification from payment webhook
+   * @returns Decrypted payment callback data
+   */
+  decryptCallback(notification) {
+    try {
+      const { iv, encryptedData, authTag } = notification;
+      const key = crypto.createHash("sha256").update(this.appSecret).digest();
+      const decipher = crypto.createDecipheriv(
+        "aes-256-gcm",
+        key,
+        Buffer.from(iv, "hex")
+      );
+      decipher.setAuthTag(Buffer.from(authTag, "hex"));
+      let decrypted = decipher.update(encryptedData, "hex", "utf8");
+      decrypted += decipher.final("utf8");
+      return JSON.parse(decrypted);
+    } catch (error) {
+      throw new Error("Failed to decrypt payment callback: Invalid secret or tampered data.");
+    }
+  }
+  /**
+   * Fetch products for the configured app.
+   */
+  async getProducts(options) {
+    const params = new URLSearchParams();
+    params.append("appId", this.appId);
+    if (options?.locale) params.append("locale", options.locale);
+    if (options?.currency) params.append("currency", options.currency);
+    const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;
+    const res = await fetch(url, {
+      method: "GET",
+      headers: {
+        "Content-Type": "application/json",
+        "Accept": "application/json"
+      }
+    });
+    if (!res.ok) {
+      throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);
+    }
+    const json = await res.json();
+    return json.data?.products || [];
+  }
+  /**
+   * Create a new order
+   * @param params - Order creation parameters
+   * @returns Order details with payment parameters
+   */
+  async createOrder(params) {
+    return this.request("POST", "/orders", params);
+  }
+  /**
+   * Pay for an existing order
+   * @param orderId - The order ID to pay
+   * @param params - Payment parameters including channel
+   */
+  async payOrder(orderId, params) {
+    return this.request("POST", `/orders/${orderId}/pay`, params);
+  }
+  /**
+   * Query order status
+   * @param orderId - The order ID to query
+   */
+  async getOrderStatus(orderId) {
+    return this.request("GET", `/orders/${orderId}`);
+  }
+  /**
+   * Generate checkout URL for client-side payment
+   * @param productId - Product ID
+   * @param priceId - Price ID
+   * @returns Checkout page URL
+   */
+  getCheckoutUrl(productId, priceId) {
+    return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;
+  }
+};
+export {
+  PaymentClient
+};
+//# sourceMappingURL=server.mjs.map

package/dist/server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Youidian Payment SDK - Server Module\n * 用于服务端集成，包含签名、订单创建、回调解密等功能\n */\n\nimport crypto from \"crypto\";\n\n/**\n * Order status response\n */\nexport interface OrderStatus {\n    orderId: string;\n    status: 'PENDING' | 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    paidAt?: string;\n    channelTransactionId?: string;\n}\n\n/**\n * Product Entitlements\n */\nexport interface ProductEntitlements {\n    [key: string]: any;\n}\n\n/**\n * Product Price\n */\nexport interface ProductPrice {\n    id: string;\n    currency: string;\n    amount: number;\n    displayAmount: string;\n    locale: string | null;\n    isDefault: boolean;\n}\n\n/**\n * Product Data\n */\nexport interface Product {\n    id: string;\n    code: string;\n    type: string;\n    name: string;\n    description?: string;\n    entitlements: ProductEntitlements;\n    prices: ProductPrice[];\n}\n\n/**\n * SDK Client Options\n */\nexport interface PaymentClientOptions {\n    /** Application ID (Required) */\n    appId: string;\n    /** Application Secret (Required for server-side operations) */\n    appSecret: string;\n    /** API Base URL (e.g. https://pay.youidian.com) */\n    baseUrl: string;\n}\n\n/**\n * Create Order Parameters\n */\nexport interface CreateOrderParams {\n    productId?: string;\n    priceId?: string;\n    channel?: string;\n    userId: string;\n    returnUrl?: string;\n    metadata?: Record<string, any>;\n    merchantOrderId?: string;\n    openid?: string;\n}\n\n/**\n * Create Order Response\n */\nexport interface CreateOrderResponse {\n    orderId: string;\n    internalId: string;\n    amount: number;\n    currency: string;\n    payParams: any;\n}\n\n/**\n * Payment Callback Notification\n */\nexport interface PaymentNotification {\n    iv: string;\n    encryptedData: string;\n    authTag: string;\n}\n\n/**\n * Decrypted Payment Callback Data\n */\nexport interface PaymentCallbackData {\n    orderId: string;\n    merchantOrderId?: string;\n    status: 'PAID' | 'CANCELLED' | 'REFUNDED' | 'FAILED';\n    amount: number;\n    currency: string;\n    paidAt: string;\n    channelTransactionId?: string;\n    metadata?: Record<string, any>;\n}\n\n/**\n * Server-side Payment Client\n * 服务端支付客户端，用于创建订单、查询状态、解密回调\n */\nexport class PaymentClient {\n    private appId: string;\n    private appSecret: string;\n    private baseUrl: string;\n\n    constructor(options: PaymentClientOptions) {\n        if (!options.appId) throw new Error(\"appId is required\");\n        if (!options.appSecret) throw new Error(\"appSecret is required\");\n        if (!options.baseUrl) throw new Error(\"baseUrl is required\");\n\n        this.appId = options.appId;\n        this.appSecret = options.appSecret;\n        this.baseUrl = options.baseUrl.replace(/\\/$/, ''); // Remove trailing slash\n    }\n\n    /**\n     * Generate SHA256 signature for the request\n     * Logic: SHA256(appId + appSecret + timestamp)\n     */\n    private generateSignature(timestamp: number): string {\n        const str = `${this.appId}${this.appSecret}${timestamp}`;\n        return crypto.createHash(\"sha256\").update(str).digest(\"hex\");\n    }\n\n    /**\n     * Internal request helper for Gateway API\n     */\n    private async request<T>(method: string, path: string, body?: any): Promise<T> {\n        const timestamp = Date.now();\n        const signature = this.generateSignature(timestamp);\n\n        const url = `${this.baseUrl}/api/v1/gateway/${this.appId}${path}`;\n\n        const headers: HeadersInit = {\n            \"Content-Type\": \"application/json\",\n            \"X-Pay-Timestamp\": timestamp.toString(),\n            \"X-Pay-Sign\": signature,\n        };\n\n        const options: RequestInit = {\n            method,\n            headers,\n            body: body ? JSON.stringify(body) : undefined,\n        };\n\n        const response = await fetch(url, options);\n\n        if (!response.ok) {\n            const errorText = await response.text();\n            throw new Error(`Payment SDK Error (${response.status}): ${errorText}`);\n        }\n\n        const json = await response.json();\n        if (json.error) {\n            throw new Error(`Payment API Error: ${json.error}`);\n        }\n\n        return json.data as T;\n    }\n\n    /**\n     * Decrypts the callback notification payload using AES-256-GCM.\n     * @param notification - The encrypted notification from payment webhook\n     * @returns Decrypted payment callback data\n     */\n    decryptCallback(notification: PaymentNotification): PaymentCallbackData {\n        try {\n            const { iv, encryptedData, authTag } = notification;\n            const key = crypto.createHash('sha256').update(this.appSecret).digest();\n            const decipher = crypto.createDecipheriv(\n                'aes-256-gcm',\n                key,\n                Buffer.from(iv, 'hex')\n            );\n\n            decipher.setAuthTag(Buffer.from(authTag, 'hex'));\n\n            let decrypted = decipher.update(encryptedData, 'hex', 'utf8');\n            decrypted += decipher.final('utf8');\n\n            return JSON.parse(decrypted);\n        } catch (error) {\n            throw new Error(\"Failed to decrypt payment callback: Invalid secret or tampered data.\");\n        }\n    }\n\n    /**\n     * Fetch products for the configured app.\n     */\n    async getProducts(options?: {\n        locale?: string;\n        currency?: string;\n    }): Promise<Product[]> {\n        const params = new URLSearchParams();\n        params.append('appId', this.appId);\n        if (options?.locale) params.append('locale', options.locale);\n        if (options?.currency) params.append('currency', options.currency);\n\n        const url = `${this.baseUrl}/api/v1/pay/products?${params.toString()}`;\n\n        const res = await fetch(url, {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n                'Accept': 'application/json'\n            }\n        });\n\n        if (!res.ok) {\n            throw new Error(`Failed to fetch products: ${res.status} ${res.statusText}`);\n        }\n\n        const json = await res.json();\n        return json.data?.products || [];\n    }\n\n    /**\n     * Create a new order\n     * @param params - Order creation parameters\n     * @returns Order details with payment parameters\n     */\n    async createOrder(params: CreateOrderParams): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", \"/orders\", params);\n    }\n\n    /**\n     * Pay for an existing order\n     * @param orderId - The order ID to pay\n     * @param params - Payment parameters including channel\n     */\n    async payOrder(orderId: string, params: {\n        channel: string;\n        returnUrl?: string;\n        openid?: string;\n        [key: string]: any;\n    }): Promise<CreateOrderResponse> {\n        return this.request(\"POST\", `/orders/${orderId}/pay`, params);\n    }\n\n    /**\n     * Query order status\n     * @param orderId - The order ID to query\n     */\n    async getOrderStatus(orderId: string): Promise<OrderStatus> {\n        return this.request(\"GET\", `/orders/${orderId}`);\n    }\n\n    /**\n     * Generate checkout URL for client-side payment\n     * @param productId - Product ID\n     * @param priceId - Price ID\n     * @returns Checkout page URL\n     */\n    getCheckoutUrl(productId: string, priceId: string): string {\n        return `${this.baseUrl}/checkout/${this.appId}/${productId}/${priceId}`;\n    }\n}\n"],"mappings":";;;;;AAKA,OAAO,YAAY;AA4GZ,IAAM,gBAAN,MAAoB;AAAA,EAKvB,YAAY,SAA+B;AAJ3C,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGJ,QAAI,CAAC,QAAQ,MAAO,OAAM,IAAI,MAAM,mBAAmB;AACvD,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,uBAAuB;AAC/D,QAAI,CAAC,QAAQ,QAAS,OAAM,IAAI,MAAM,qBAAqB;AAE3D,SAAK,QAAQ,QAAQ;AACrB,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,kBAAkB,WAA2B;AACjD,UAAM,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,SAAS,GAAG,SAAS;AACtD,WAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QAAW,QAAgB,MAAc,MAAwB;AAC3E,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,YAAY,KAAK,kBAAkB,SAAS;AAElD,UAAM,MAAM,GAAG,KAAK,OAAO,mBAAmB,KAAK,KAAK,GAAG,IAAI;AAE/D,UAAM,UAAuB;AAAA,MACzB,gBAAgB;AAAA,MAChB,mBAAmB,UAAU,SAAS;AAAA,MACtC,cAAc;AAAA,IAClB;AAEA,UAAM,UAAuB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACxC;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,OAAO;AAEzC,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,sBAAsB,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAC1E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,KAAK,OAAO;AACZ,YAAM,IAAI,MAAM,sBAAsB,KAAK,KAAK,EAAE;AAAA,IACtD;AAEA,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,cAAwD;AACpE,QAAI;AACA,YAAM,EAAE,IAAI,eAAe,QAAQ,IAAI;AACvC,YAAM,MAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,OAAO;AACtE,YAAM,WAAW,OAAO;AAAA,QACpB;AAAA,QACA;AAAA,QACA,OAAO,KAAK,IAAI,KAAK;AAAA,MACzB;AAEA,eAAS,WAAW,OAAO,KAAK,SAAS,KAAK,CAAC;AAE/C,UAAI,YAAY,SAAS,OAAO,eAAe,OAAO,MAAM;AAC5D,mBAAa,SAAS,MAAM,MAAM;AAElC,aAAO,KAAK,MAAM,SAAS;AAAA,IAC/B,SAAS,OAAO;AACZ,YAAM,IAAI,MAAM,sEAAsE;AAAA,IAC1F;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,SAGK;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,OAAO,SAAS,KAAK,KAAK;AACjC,QAAI,SAAS,OAAQ,QAAO,OAAO,UAAU,QAAQ,MAAM;AAC3D,QAAI,SAAS,SAAU,QAAO,OAAO,YAAY,QAAQ,QAAQ;AAEjE,UAAM,MAAM,GAAG,KAAK,OAAO,wBAAwB,OAAO,SAAS,CAAC;AAEpE,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MACzB,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,UAAU;AAAA,MACd;AAAA,IACJ,CAAC;AAED,QAAI,CAAC,IAAI,IAAI;AACT,YAAM,IAAI,MAAM,6BAA6B,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,IAC/E;AAEA,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,YAAY,CAAC;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,YAAY,QAAyD;AACvE,WAAO,KAAK,QAAQ,QAAQ,WAAW,MAAM;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,SAAS,SAAiB,QAKC;AAC7B,WAAO,KAAK,QAAQ,QAAQ,WAAW,OAAO,QAAQ,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAe,SAAuC;AACxD,WAAO,KAAK,QAAQ,OAAO,WAAW,OAAO,EAAE;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,WAAmB,SAAyB;AACvD,WAAO,GAAG,KAAK,OAAO,aAAa,KAAK,KAAK,IAAI,SAAS,IAAI,OAAO;AAAA,EACzE;AACJ;","names":[]}

package/package.json

@@ -0,0 +1,54 @@
+{
+    "name": "@youidian/pay-sdk",
+    "version": "1.0.0",
+    "description": "Youidian Payment SDK - 统一支付集成 SDK",
+    "author": "Youidian",
+    "license": "MIT",
+    "main": "./dist/index.js",
+    "module": "./dist/index.mjs",
+    "types": "./dist/index.d.ts",
+    "publishConfig": {
+        "access": "public"
+    },
+    "exports": {
+        ".": {
+            "types": "./dist/index.d.ts",
+            "import": "./dist/index.mjs",
+            "require": "./dist/index.js"
+        },
+        "./client": {
+            "types": "./dist/client.d.ts",
+            "import": "./dist/client.mjs",
+            "require": "./dist/client.js"
+        },
+        "./server": {
+            "types": "./dist/server.d.ts",
+            "import": "./dist/server.mjs",
+            "require": "./dist/server.js"
+        }
+    },
+    "files": [
+        "dist"
+    ],
+    "scripts": {
+        "build": "tsup",
+        "prepublishOnly": "npm run build"
+    },
+    "dependencies": {},
+    "devDependencies": {
+        "@repo/typescript-config": "*",
+        "tsup": "^8.0.0",
+        "typescript": "^5.9.3"
+    },
+    "keywords": [
+        "payment",
+        "sdk",
+        "paypal",
+        "wechat-pay",
+        "alipay"
+    ],
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/youidian/youidian-pay"
+    }
+}