connect-sdk-nodejs 4.16.0 → 4.18.0

package/lib/webhooks/validation.js

@@ -0,0 +1,63 @@
+"use strict";
+const crypto = require("crypto");
+const compare = require("secure-compare");
+let secretKeyStore = {
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    getSecretKey(_keyId, _cb) {
+        throw new Error("getSecretKey not initialized yet");
+    }
+};
+function getHeaderValue(requestHeaders, headerName) {
+    const lowerCaseHeaderName = headerName.toLowerCase();
+    for (const name in requestHeaders) {
+        if (name != null && lowerCaseHeaderName === name.toLowerCase()) {
+            const value = requestHeaders[name];
+            if (typeof value === "string") {
+                return value;
+            }
+            if (typeof value === "undefined") {
+                throw new Error("could not find header '" + headerName + "'");
+            }
+            throw new Error("found multiple values for header '" + headerName + "'");
+        }
+    }
+    throw new Error("could not find header '" + headerName + "'");
+}
+function validate(body, requestHeaders, cb) {
+    try {
+        const signature = getHeaderValue(requestHeaders, "X-GCS-Signature");
+        const keyId = getHeaderValue(requestHeaders, "X-GCS-KeyId");
+        secretKeyStore.getSecretKey(keyId, (error, secretKey) => {
+            if (error) {
+                cb(error);
+            }
+            else {
+                const expectedSignature = crypto
+                    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+                    .createHmac("sha256", secretKey) // if error is falsy, secretKey isn't
+                    .update(body)
+                    .digest("base64");
+                if (compare(signature, expectedSignature)) {
+                    cb(null);
+                }
+                else {
+                    cb(new Error("failed to validate signature '" + signature + "'"));
+                }
+            }
+        });
+    }
+    catch (e) {
+        cb(e);
+    }
+}
+const validator = {
+    init: store => {
+        if (!store || typeof store.getSecretKey !== "function") {
+            throw new Error("no valid secret key store given");
+        }
+        secretKeyStore = store;
+    },
+    validate: validate
+};
+module.exports = validator;
+//# sourceMappingURL=validation.js.map

package/lib/webhooks/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/webhooks/validation.ts"],"names":[],"mappings":";AAAA,iCAAkC;AAClC,0CAA2C;AAG3C,IAAI,cAAc,GAAmB;IACnC,6DAA6D;IAC7D,YAAY,CAAC,MAAc,EAAE,GAAsB;QACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;CACF,CAAC;AAEF,SAAS,cAAc,CAAC,cAA8B,EAAE,UAAkB;IACxE,MAAM,mBAAmB,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE;QACjC,IAAI,IAAI,IAAI,IAAI,IAAI,mBAAmB,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE;YAC9D,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;gBAC7B,OAAO,KAAK,CAAC;aACd;YACD,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE;gBAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC;aAC/D;YACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC;SAC1E;KACF;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,UAAU,GAAG,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAqB,EAAE,cAA8B,EAAE,EAAoB;IAC3F,IAAI;QACF,MAAM,SAAS,GAAG,cAAc,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,cAAc,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;QAE5D,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YACtD,IAAI,KAAK,EAAE;gBACT,EAAE,CAAC,KAAK,CAAC,CAAC;aACX;iBAAM;gBACL,MAAM,iBAAiB,GAAG,MAAM;oBAC9B,oEAAoE;qBACnE,UAAU,CAAC,QAAQ,EAAE,SAAU,CAAC,CAAC,qCAAqC;qBACtE,MAAM,CAAC,IAAI,CAAC;qBACZ,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACpB,IAAI,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE;oBACzC,EAAE,CAAC,IAAI,CAAC,CAAC;iBACV;qBAAM;oBACL,EAAE,CAAC,IAAI,KAAK,CAAC,gCAAgC,GAAG,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC;iBACnE;aACF;QACH,CAAC,CAAC,CAAC;KACJ;IAAC,OAAO,CAAC,EAAE;QACV,EAAE,CAAC,CAAU,CAAC,CAAC;KAChB;AACH,CAAC;AAED,MAAM,SAAS,GAAuB;IACpC,IAAI,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,UAAU,EAAE;YACtD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;SACpD;QACD,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,QAAQ,EAAE,QAAQ;CACnB,CAAC;AACF,iBAAS,SAAS,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "connect-sdk-nodejs",
-  "version": "4.16.0",
+  "version": "4.18.0",
   "description": "SDK to communicate with the Ingenico ePayments platform using the Ingenico Connect Server API",
   "homepage": "https://github.com/Ingenico-ePayments/connect-sdk-nodejs#readme",
   "bugs": {

package/schemas/hostedcheckout/CreateHostedCheckoutRequest.json

@@ -435,6 +435,9 @@
     "CardPaymentMethodSpecificInputBase" : {
       "type" : "object",
       "properties" : {
+        "acquirerPromotionCode" : {
+          "type" : "string"
+        },
         "authorizationMode" : {
           "type" : "string"
         },
@@ -1657,9 +1660,6 @@
     "SdkDataInput" : {
       "type" : "object",
       "properties" : {
-        "deviceInfo" : {
-          "type" : "string"
-        },
         "deviceRenderOptions" : {
           "$ref" : "#/definitions/DeviceRenderOptions"
         },

package/schemas/payment/CreatePaymentRequest.json

@@ -492,6 +492,9 @@
     "CardPaymentMethodSpecificInput" : {
       "type" : "object",
       "properties" : {
+        "acquirerPromotionCode" : {
+          "type" : "string"
+        },
         "authorizationMode" : {
           "type" : "string"
         },
@@ -2001,9 +2004,6 @@
     "SdkDataInput" : {
       "type" : "object",
       "properties" : {
-        "deviceInfo" : {
-          "type" : "string"
-        },
         "deviceRenderOptions" : {
           "$ref" : "#/definitions/DeviceRenderOptions"
         },