aba-payway-sdk-unofficial 1.2.2 → 1.4.0

package/dist/index.cjs

@@ -23,7 +23,9 @@ __export(index_exports, {
   ABAPayWay: () => ABAPayWay,
   encodeItemsForABA: () => encodeItemsForABA,
   encodeReturnDeeplinkForABA: () => encodeReturnDeeplinkForABA,
+  encryptRsaChunks: () => encryptRsaChunks,
   formatPhoneForABA: () => formatPhoneForABA,
+  formatRsaPublicKey: () => formatRsaPublicKey,
   generateABAHash: () => generateABAHash,
   generateKHQR: () => generateKHQR,
   generateTransactionId: () => generateTransactionId,
@@ -82,9 +84,15 @@ function readAbaStatus(data) {
     const nested = raw;
     code = nested.code == null ? "" : String(nested.code);
     message = firstString(nested.message, body.description);
-  } else {
+  } else if (raw !== void 0) {
     code = raw == null ? "" : String(raw);
     message = firstString(body.description, body.message);
+  } else if (body.code !== void 0) {
+    code = String(body.code);
+    message = firstString(body.message, body.description);
+  } else {
+    code = "";
+    message = firstString(body.description, body.message);
   }
   return { code, ok: isSuccessCode(code), message: message || "Unknown error" };
 }
@@ -99,6 +107,41 @@ function firstString(...values) {
   return "";
 }
 
+// src/rsa.ts
+var import_node_crypto = require("crypto");
+function formatRsaPublicKey(key) {
+  const trimmed = key.trim();
+  if (trimmed.includes("-----BEGIN")) {
+    return trimmed;
+  }
+  return `-----BEGIN PUBLIC KEY-----
+${trimmed}
+-----END PUBLIC KEY-----`;
+}
+function encryptRsaChunks(data, rsaPublicKey, chunkSize = 117) {
+  if (!data) {
+    throw new Error("Data to encrypt cannot be empty");
+  }
+  if (!rsaPublicKey || !rsaPublicKey.trim()) {
+    throw new Error("RSA public key is required for encryption");
+  }
+  const pemKey = formatRsaPublicKey(rsaPublicKey);
+  const dataBuffer = Buffer.from(data, "utf8");
+  const encryptedChunks = [];
+  for (let offset = 0; offset < dataBuffer.length; offset += chunkSize) {
+    const chunk = dataBuffer.subarray(offset, Math.min(offset + chunkSize, dataBuffer.length));
+    const encrypted = (0, import_node_crypto.publicEncrypt)(
+      {
+        key: pemKey,
+        padding: import_node_crypto.constants.RSA_PKCS1_PADDING
+      },
+      chunk
+    );
+    encryptedChunks.push(encrypted);
+  }
+  return Buffer.concat(encryptedChunks).toString("base64");
+}
+
 // src/utils.ts
 function generateTransactionId() {
   const timestamp = Date.now().toString(36).toUpperCase();
@@ -326,6 +369,325 @@ var ABAPayWay = class {
       return failure(err instanceof Error ? err.message : "Unknown error");
     }
   }
+  async closeTransaction(transactionId) {
+    const failure = (error, code, message) => ({
+      success: false,
+      transactionId: transactionId ?? "",
+      code,
+      message: message ?? error,
+      error
+    });
+    if (!transactionId || !transactionId.trim()) {
+      return failure("transactionId is required");
+    }
+    const reqTime = getABATimestamp();
+    const hash = await hmacSha512Base64(
+      `${reqTime}${this.config.merchantId}${transactionId}`,
+      this.config.apiKey
+    );
+    const body = JSON.stringify({
+      req_time: reqTime,
+      merchant_id: this.config.merchantId,
+      tran_id: transactionId,
+      hash
+    });
+    const url = `${this.config.baseUrl}/api/payment-gateway/v1/payments/close-transaction`;
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body
+      });
+      const parsed = await parseAbaJson(response);
+      if (parsed.error) return failure(parsed.error);
+      const status = readAbaStatus(parsed.data);
+      if (!status.ok) return failure(status.message, status.code || void 0, status.message);
+      return {
+        success: true,
+        transactionId: parsed.data?.status?.tran_id ?? transactionId,
+        code: status.code,
+        message: status.message
+      };
+    } catch (err) {
+      return failure(err instanceof Error ? err.message : "Unknown error");
+    }
+  }
+  async refund(request) {
+    const failure = (error, code, message) => ({
+      success: false,
+      transactionId: request?.transactionId ?? "",
+      refundAmount: request?.refundAmount ?? 0,
+      code,
+      message: message ?? error,
+      error
+    });
+    if (!request?.transactionId || !request.transactionId.trim()) {
+      return failure("transactionId is required");
+    }
+    if (typeof request?.refundAmount !== "number" || !Number.isFinite(request.refundAmount) || request.refundAmount <= 0) {
+      return failure("refundAmount must be a positive number");
+    }
+    const rsaPublicKey = request.rsaPublicKey ?? this.config.rsaPublicKey;
+    if (!rsaPublicKey || !rsaPublicKey.trim()) {
+      return failure(
+        "RSA public key is required for refund. Provide rsaPublicKey in config or request."
+      );
+    }
+    const reqTime = getABATimestamp();
+    let merchantAuth;
+    try {
+      const authPayload = JSON.stringify({
+        mc_id: this.config.merchantId,
+        tran_id: request.transactionId,
+        refund_amount: request.refundAmount
+      });
+      merchantAuth = encryptRsaChunks(authPayload, rsaPublicKey);
+    } catch (err) {
+      return failure(
+        err instanceof Error ? err.message : "RSA encryption failed"
+      );
+    }
+    const hash = await hmacSha512Base64(
+      `${reqTime}${this.config.merchantId}${merchantAuth}`,
+      this.config.apiKey
+    );
+    const body = JSON.stringify({
+      request_time: reqTime,
+      merchant_id: this.config.merchantId,
+      merchant_auth: merchantAuth,
+      hash
+    });
+    const url = `${this.config.baseUrl}/api/merchant-portal/merchant-access/online-transaction/refund`;
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body
+      });
+      const parsed = await parseAbaJson(response);
+      if (parsed.error) return failure(parsed.error);
+      const status = readAbaStatus(parsed.data);
+      if (!status.ok) {
+        return failure(status.message, status.code || void 0, status.message);
+      }
+      return {
+        success: true,
+        transactionId: request.transactionId,
+        refundAmount: request.refundAmount,
+        grandTotal: toNumber(parsed.data?.grand_total),
+        totalRefunded: toNumber(parsed.data?.total_refunded),
+        currency: parsed.data?.currency,
+        transactionStatus: parsed.data?.transaction_status,
+        code: status.code,
+        message: status.message
+      };
+    } catch (err) {
+      return failure(err instanceof Error ? err.message : "Unknown error");
+    }
+  }
+  async getExchangeRates() {
+    const failure = (error, code) => ({
+      success: false,
+      error,
+      code
+    });
+    const reqTime = getABATimestamp();
+    const hash = await hmacSha512Base64(
+      `${reqTime}${this.config.merchantId}`,
+      this.config.apiKey
+    );
+    const body = JSON.stringify({
+      req_time: reqTime,
+      merchant_id: this.config.merchantId,
+      hash
+    });
+    const url = `${this.config.baseUrl}/api/payment-gateway/v1/exchange-rate`;
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body
+      });
+      const parsed = await parseAbaJson(response);
+      if (parsed.error) return failure(parsed.error);
+      const status = readAbaStatus(parsed.data);
+      if (!status.ok) return failure(status.message, status.code || void 0);
+      const rates = {};
+      const collectRates = (obj) => {
+        if (!obj || typeof obj !== "object") return;
+        for (const [key, val] of Object.entries(obj)) {
+          if (val && typeof val === "object" && "buy" in val && "sell" in val) {
+            rates[key.toLowerCase()] = {
+              buy: String(val.buy),
+              sell: String(val.sell)
+            };
+          }
+        }
+      };
+      collectRates(parsed.data);
+      collectRates(parsed.data?.exchange_rates);
+      return {
+        success: true,
+        rates,
+        code: status.code,
+        message: status.message
+      };
+    } catch (err) {
+      return failure(err instanceof Error ? err.message : "Unknown error");
+    }
+  }
+  async getTransactionDetail(transactionId) {
+    const failure = (error, code, message) => ({
+      success: false,
+      transactionId: transactionId ?? "",
+      status: "ERROR",
+      code,
+      message: message ?? error,
+      error
+    });
+    if (!transactionId || !transactionId.trim()) {
+      return failure("transactionId is required");
+    }
+    const reqTime = getABATimestamp();
+    const hash = await hmacSha512Base64(
+      `${reqTime}${this.config.merchantId}${transactionId}`,
+      this.config.apiKey
+    );
+    const body = JSON.stringify({
+      req_time: reqTime,
+      merchant_id: this.config.merchantId,
+      tran_id: transactionId,
+      hash
+    });
+    const url = `${this.config.baseUrl}/api/payment-gateway/v1/payments/transaction-detail`;
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body
+      });
+      const parsed = await parseAbaJson(response);
+      if (parsed.error) return failure(parsed.error);
+      const detail = parsed.data?.data ?? parsed.data ?? {};
+      const status = readAbaStatus(detail?.status ?? parsed.data?.status);
+      if (!status.ok) {
+        return failure(status.message, status.code || void 0, status.message);
+      }
+      const operations = Array.isArray(
+        detail.transaction_operations
+      ) ? detail.transaction_operations.map((op) => ({
+        status: String(op.status ?? ""),
+        amount: toNumber(op.amount) ?? 0,
+        transactionDate: String(op.transaction_date ?? ""),
+        bankRef: op.bank_ref ? String(op.bank_ref) : void 0
+      })) : [];
+      return {
+        success: true,
+        transactionId: String(detail.transaction_id ?? transactionId),
+        status: mapPaymentStatus(detail.payment_status),
+        statusCode: typeof detail.payment_status_code === "number" ? detail.payment_status_code : void 0,
+        originalAmount: toNumber(detail.original_amount),
+        originalCurrency: detail.original_currency ? String(detail.original_currency) : void 0,
+        paymentAmount: toNumber(detail.payment_amount),
+        paymentCurrency: detail.payment_currency ? String(detail.payment_currency) : void 0,
+        totalAmount: toNumber(detail.total_amount),
+        refundAmount: toNumber(detail.refund_amount),
+        discountAmount: toNumber(detail.discount_amount),
+        apv: detail.apv ? String(detail.apv) : void 0,
+        transactionDate: detail.transaction_date ? String(detail.transaction_date) : void 0,
+        firstName: detail.first_name ? String(detail.first_name) : void 0,
+        lastName: detail.last_name ? String(detail.last_name) : void 0,
+        email: detail.email ? String(detail.email) : void 0,
+        phone: detail.phone ? String(detail.phone) : void 0,
+        bankRef: detail.bank_ref ? String(detail.bank_ref) : void 0,
+        paymentType: detail.payment_type ? String(detail.payment_type) : void 0,
+        payerAccount: detail.payer_account ? String(detail.payer_account) : void 0,
+        bankName: detail.bank_name ? String(detail.bank_name) : void 0,
+        cardSource: detail.card_source ? String(detail.card_source) : void 0,
+        operations: operations.length > 0 ? operations : void 0,
+        code: status.code,
+        message: status.message
+      };
+    } catch (err) {
+      return failure(err instanceof Error ? err.message : "Unknown error");
+    }
+  }
+  async listTransactions(filter = {}) {
+    const failure = (error, code) => ({
+      success: false,
+      transactions: [],
+      error,
+      code
+    });
+    const reqTime = getABATimestamp();
+    const fromDate = filter.fromDate ?? "";
+    const toDate = filter.toDate ?? "";
+    const fromAmount = filter.fromAmount !== void 0 ? String(filter.fromAmount) : "";
+    const toAmount = filter.toAmount !== void 0 ? String(filter.toAmount) : "";
+    const statusVal = filter.status ?? "";
+    const page = filter.page !== void 0 ? String(filter.page) : "1";
+    const pagination = filter.pagination !== void 0 ? String(filter.pagination) : "40";
+    const hashSequence = `${reqTime}${this.config.merchantId}${fromDate}${toDate}${fromAmount}${toAmount}${statusVal}${page}${pagination}`;
+    const hash = await hmacSha512Base64(hashSequence, this.config.apiKey);
+    const body = JSON.stringify({
+      req_time: reqTime,
+      merchant_id: this.config.merchantId,
+      from_date: fromDate || null,
+      to_date: toDate || null,
+      from_amount: fromAmount || null,
+      to_amount: toAmount || null,
+      status: statusVal || null,
+      page,
+      pagination,
+      hash
+    });
+    const url = `${this.config.baseUrl}/api/payment-gateway/v1/payments/transaction-list-2`;
+    try {
+      const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body
+      });
+      const parsed = await parseAbaJson(response);
+      if (parsed.error) return failure(parsed.error);
+      const status = readAbaStatus(parsed.data);
+      if (!status.ok) return failure(status.message, status.code || void 0);
+      const rawItems = Array.isArray(parsed.data?.data) ? parsed.data.data : [];
+      const transactions = rawItems.map((item) => ({
+        transactionId: String(item.transaction_id ?? ""),
+        transactionDate: String(item.transaction_date ?? ""),
+        apv: item.apv ? String(item.apv) : void 0,
+        paymentStatus: mapPaymentStatus(item.payment_status),
+        paymentStatusCode: typeof item.payment_status_code === "number" ? item.payment_status_code : void 0,
+        originalAmount: toNumber(item.original_amount),
+        originalCurrency: item.original_currency ? String(item.original_currency) : void 0,
+        totalAmount: toNumber(item.total_amount),
+        discountAmount: toNumber(item.discount_amount),
+        refundAmount: toNumber(item.refund_amount),
+        paymentAmount: toNumber(item.payment_amount),
+        paymentCurrency: item.payment_currency ? String(item.payment_currency) : void 0,
+        firstName: item.first_name ? String(item.first_name) : void 0,
+        lastName: item.last_name ? String(item.last_name) : void 0,
+        email: item.email ? String(item.email) : void 0,
+        phone: item.phone ? String(item.phone) : void 0,
+        bankRef: item.bank_ref ? String(item.bank_ref) : void 0,
+        payerAccount: item.payer_account ? String(item.payer_account) : void 0,
+        bankName: item.bank_name ? String(item.bank_name) : void 0,
+        cardSource: item.card_source ? String(item.card_source) : void 0,
+        paymentType: item.payment_type ? String(item.payment_type) : void 0
+      }));
+      return {
+        success: true,
+        transactions,
+        page: parsed.data?.page ? String(parsed.data.page) : page,
+        pagination: parsed.data?.pagination ? String(parsed.data.pagination) : pagination,
+        code: status.code,
+        message: status.message
+      };
+    } catch (err) {
+      return failure(err instanceof Error ? err.message : "Unknown error");
+    }
+  }
   /**
    * Verify an ABA pushback (callback) against its `X-PayWay-HMAC-SHA512`
    * header. Returns false for anything it cannot positively verify — a bad
@@ -390,6 +752,7 @@ function mapPaymentStatus(raw) {
   if (normalized === "APPROVED") return "APPROVED";
   if (normalized === "DECLINED") return "DECLINED";
   if (normalized === "REFUNDED") return "REFUNDED";
+  if (normalized === "CANCELLED" || normalized === "CANCELED") return "CANCELLED";
   if (normalized === "PENDING") return "PENDING";
   return "ERROR";
 }
@@ -482,7 +845,9 @@ async function generateKHQR(options) {
   ABAPayWay,
   encodeItemsForABA,
   encodeReturnDeeplinkForABA,
+  encryptRsaChunks,
   formatPhoneForABA,
+  formatRsaPublicKey,
   generateABAHash,
   generateKHQR,
   generateTransactionId,