myxl-core 1.0.0

package/README.md

@@ -0,0 +1,15 @@
+# myxl-core
+
+To install dependencies:
+
+```bash
+bun install
+```
+
+To run:
+
+```bash
+bun run index.ts
+```
+
+This project was created using `bun init` in bun v1.3.14. [Bun](https://bun.com) is a fast all-in-one JavaScript runtime.

package/dist/@types/payment.d.ts

@@ -0,0 +1,10 @@
+export declare enum PaymentMethodEnum {
+    Pulsa = "BALANCE",
+    EWallet = "EWALLET",
+    QRIS = "QRIS",
+    PulsaDecoy = "BALANCE_DECOY",
+    PulsaDecoyV2 = "BALANCE_DECOY_V2",
+    QRISDecoy = "QRIS_DECOY",
+    QRISDecoyV2 = "QRIS_DECOY_V2",
+    PulsaN = "BALANCE_N"
+}

package/dist/auth.d.ts

@@ -0,0 +1,20 @@
+import type { AuthToken } from "./ciam";
+type OtpResponse = {
+    expires_in: number;
+    max_validation_attempt_suspend_duration: number;
+    max_validation_attempt: number;
+    next_resend_allowed_at: number;
+    max_validation_suspend_duration: number;
+    max_request_attempt: number;
+    max_request_suspend_duration: number;
+    subscriber_id: string;
+    type: string;
+};
+export declare function getOtp(contact: string, axDeviceId: string, axFingerprint: string): Promise<OtpResponse>;
+type IContactType = "SMS" | "DEVICEID";
+export declare function submitOtp(contactType: IContactType, contact: string, code: string, axDeviceId: string, axFingerprint: string): Promise<AuthToken>;
+/**
+ * Submit SMS OTP only, using same CIAM flow as above.
+ */
+export declare function submitSmsOtp(contact: string, code: string, axDeviceId: string, axFingerprint: string): Promise<any>;
+export {};

package/dist/auth.js

@@ -0,0 +1,157 @@
+// @bun
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/lib/encrypt-helper.ts
+import crypto from "crypto";
+function makeAxApiSignature(tsForSign, contact, code, contactType) {
+  const preimage = `${tsForSign}password${contactType}${contact}${code}openid`;
+  const digest = crypto.createHmac("sha256", Buffer.from(AX_API_SIG_KEY, "ascii")).update(preimage).digest();
+  return digest.toString("base64");
+}
+var init_encrypt_helper = __esm(() => {
+  init_config();
+});
+
+// src/encrypt.ts
+var init_encrypt = __esm(() => {
+  init_config();
+  init_encrypt_helper();
+  init_encrypt_helper();
+});
+
+// src/lib/utils.ts
+import axios from "axios";
+import { v4 as uuidv4 } from "uuid";
+import { DateTime } from "luxon";
+function javaLikeTimestamp(dt = DateTime.now()) {
+  return dt.toMillis().toString();
+}
+function base64Encode(str) {
+  return Buffer.from(str, "utf-8").toString("base64");
+}
+function tsGmt7WithoutColon(date) {
+  let formatted = date.toFormat("yyyy-MM-dd'T'HH:mm:ss.SSSZZ");
+  if (formatted.endsWith("+07:00")) {
+    formatted = formatted.replace("+07:00", "+0700");
+  }
+  return formatted;
+}
+function unseal(getter, fallback) {
+  try {
+    const hex = getter();
+    if (!hex || typeof __SEED__ === "undefined")
+      return fallback;
+    const seed = Buffer.from(__SEED__, "hex");
+    const data = Buffer.from(hex, "hex");
+    return Buffer.from(data.map((b, i) => b ^ seed[i % seed.length])).toString("utf8");
+  } catch {
+    return fallback;
+  }
+}
+var init_utils = __esm(() => {
+  init_config();
+  init_encrypt();
+});
+
+// src/config.ts
+var BASE_API_URL, BASE_CIAM_URL, BASIC_AUTH, AX_FP_KEY, UA, API_KEY, ENCRYPTED_FIELD_KEY, XDATA_KEY, AX_API_SIG_KEY, X_API_BASE_SECRET, CIRCLE_MSISDN_KEY;
+var init_config = __esm(() => {
+  init_utils();
+  BASE_API_URL = unseal(() => __E_BASE_API_URL__, "https://api.myxl.xlaxiata.co.id");
+  BASE_CIAM_URL = unseal(() => __E_BASE_CIAM_URL__, "https://gede.ciam.xlaxiata.co.id");
+  BASIC_AUTH = unseal(() => __E_BASIC_AUTH__, "OWZjOTdlZDEtNmEzMC00OGQ1LTk1MTYtNjBjNTNjZTNhMTM1OllEV21GNExKajlYSUt3UW56eTJlMmxiMHRKUWIyOW8z");
+  AX_FP_KEY = unseal(() => __E_AX_FP_KEY__, "18b4d589826af50241177961590e6693");
+  UA = unseal(() => __E_UA__, "myXL / 8.9.0(1202); com.android.vending; (samsung; SM-N935F; SDK 33; Android 13)");
+  API_KEY = unseal(() => __E_API_KEY__, "vT8tINqHaOxXbGE7eOWAhA==");
+  ENCRYPTED_FIELD_KEY = unseal(() => __E_ENCRYPTED_FIELD_KEY__, "5dccbf08920a5527");
+  XDATA_KEY = unseal(() => __E_XDATA_KEY__, "5dccbf08920a5527b99e222789c34bb7");
+  AX_API_SIG_KEY = unseal(() => __E_AX_API_SIG_KEY__, "18b4d589826af50241177961590e6693");
+  X_API_BASE_SECRET = unseal(() => __E_X_API_BASE_SECRET__, "mU1Y4n1vBjf3M7tMnRkFU08mVyUJHed8B5En3EAniu1mXLixeuASmBmKnkyzVziOye7rG5nIekMdthensbQMcOJ6SLnrkGyfXALD7mrBC6vuWv6G01pmD3XlU5rT7Tzx");
+  CIRCLE_MSISDN_KEY = unseal(() => __E_CIRCLE_MSISDN_KEY__, "5dccbf08920a5527");
+});
+
+// src/auth.ts
+init_config();
+init_utils();
+init_encrypt();
+import axios2 from "axios";
+import { v4 as uuidv42 } from "uuid";
+import { DateTime as DateTime2, FixedOffsetZone } from "luxon";
+import * as crypto2 from "crypto";
+async function getOtp(contact, axDeviceId, axFingerprint) {
+  const url = BASE_CIAM_URL + "/realms/xl-ciam/auth/otp";
+  const querystring = {
+    contact,
+    contactType: "SMS",
+    alternateContact: "false"
+  };
+  const gmt7Zone = FixedOffsetZone.instance(420);
+  const now = DateTime2.now().setZone(gmt7Zone);
+  const ax_request_at = javaLikeTimestamp(now);
+  const ax_request_id = uuidv42();
+  const headers = {
+    "Accept-Encoding": "gzip, deflate, br",
+    Authorization: `Basic ${BASIC_AUTH}`,
+    "Ax-Device-Id": axDeviceId,
+    "Ax-Fingerprint": axFingerprint,
+    "Ax-Request-At": ax_request_at,
+    "Ax-Request-Device": "samsung",
+    "Ax-Request-Device-Model": "SM-N935F",
+    "Ax-Request-Id": ax_request_id,
+    "Ax-Substype": "PREPAID",
+    "Content-Type": "application/json",
+    Host: BASE_CIAM_URL.replace(/^https?:\/\//, ""),
+    "User-Agent": UA
+  };
+  const { data } = await axios2.get(url, {
+    headers,
+    params: querystring,
+    timeout: 30000
+  });
+  return data;
+}
+async function submitOtp(contactType, contact, code, axDeviceId, axFingerprint) {
+  let finalContact = "";
+  let finalCode = "";
+  if (contactType === "SMS") {
+    finalContact = contact;
+    finalCode = code;
+  } else if (contactType === "DEVICEID") {
+    finalContact = base64Encode(contact);
+    finalCode = code;
+  }
+  const url = BASE_CIAM_URL + "/realms/xl-ciam/protocol/openid-connect/token";
+  const now = DateTime2.now().setZone("Asia/Jakarta");
+  const ts_for_sign = tsGmt7WithoutColon(now);
+  const ts_header = tsGmt7WithoutColon(now.minus({ minutes: 5 }));
+  const signature = await makeAxApiSignature(ts_for_sign, finalContact, code, contactType);
+  const payload = `contactType=${encodeURIComponent(contactType)}&code=${encodeURIComponent(finalCode)}&grant_type=password&contact=${encodeURIComponent(finalContact)}&scope=openid`;
+  const axRequestId = crypto2.randomUUID();
+  const headers = {
+    "Accept-Encoding": "gzip, deflate, br",
+    Authorization: `Basic ${BASIC_AUTH}`,
+    "Ax-Api-Signature": signature,
+    "Ax-Device-Id": axDeviceId,
+    "Ax-Fingerprint": axFingerprint,
+    "Ax-Request-At": ts_header,
+    "Ax-Request-Device": "samsung",
+    "Ax-Request-Device-Model": "SM-N935F",
+    "Ax-Request-Id": axRequestId,
+    "Ax-Substype": "PREPAID",
+    "Content-Type": "application/x-www-form-urlencoded",
+    "User-Agent": UA
+  };
+  const response = await axios2.post(url, payload, {
+    headers,
+    timeout: 30000
+  });
+  return response.data;
+}
+async function submitSmsOtp(contact, code, axDeviceId, axFingerprint) {
+  return submitOtp("SMS", contact, code, axDeviceId, axFingerprint);
+}
+export {
+  submitSmsOtp,
+  submitOtp,
+  getOtp
+};

package/dist/ciam.d.ts

@@ -0,0 +1,259 @@
+export type AuthToken = {
+    access_token: string;
+    expires_in: number;
+    refresh_expires_in: number;
+    refresh_token: string;
+    token_type: string;
+    id_token: string;
+    'not-before-policy': number;
+    session_state: string;
+    scope: string;
+};
+export declare function getNewToken(refreshToken: string, axDeviceId: string, axFingerprint: string): Promise<AuthToken>;
+export type Profile = {
+    age: number;
+    alternate_phone_number: string;
+    avatar: string;
+    card_id_editable: boolean;
+    dob: string;
+    dob_modified: number;
+    email: string;
+    login_email: string;
+    msisdn: string;
+    name: string;
+    registered_address: string;
+    registered_name: string;
+    subscriber_id: string;
+    subscription_type: string;
+};
+export type ProfileResponse = {
+    code: string;
+    data: {
+        profile: Profile;
+    };
+    status: string;
+};
+export declare function getProfile(accessToken: string, idToken: string): Promise<Profile>;
+export type Balance = {
+    remaining: number;
+    expired_at: number;
+};
+export type PrioFlexBalance = {
+    remaining: number;
+    has_prio_flex: boolean;
+};
+export type CurrentCycle = {
+    start_date: string;
+    end_date: string;
+};
+export type BalanceAndCredit = {
+    subscription_status: string;
+    suspended_status: string;
+    balance: Balance;
+    prio_flex_balance: PrioFlexBalance;
+    credit_limit: number;
+    is_spend_limit_activated: boolean;
+    limit_percentage: number;
+    can_change_spend_limit: boolean;
+    is_spend_limit_reached: boolean;
+    current_cycle: CurrentCycle;
+    prio_x_status: string;
+    enterprise_type: string;
+    grace_end_date: number;
+};
+export type ExternalBalanceAndCreditResponse = {
+    code: string;
+    status: string;
+    data: BalanceAndCredit;
+};
+export declare function getBalance(idToken: string): Promise<ExternalBalanceAndCreditResponse>;
+export type TieringInfo = {
+    code: string;
+    status: string;
+    data: {
+        tier: number;
+        current_spending: number;
+        current_point: number;
+        latest_tier_up_date: number;
+        flag_upgrade_downgrade: string;
+    };
+};
+export declare function getTieringInfo(idToken: string): Promise<TieringInfo>;
+export type Redeemable = {
+    action_param: string;
+    action_type: string;
+    banner_information: string;
+    bonus_type: string;
+    category_code: string;
+    image_url: string;
+    is_sent: boolean;
+    is_voucher: boolean;
+    name: string;
+    order: number;
+    price: number;
+    program_id: string;
+    ribbon_icon_url: string;
+    ribbon_label: string;
+    star_category: string;
+    status: string;
+    valid_until: number;
+    validity_label: string;
+};
+export type RedeemableCategory = {
+    category_code: string;
+    category_name: string;
+    icon_url: string;
+    order: number;
+    redeemables: Redeemable[];
+};
+export type ExternalRedeemablesResponse = {
+    code: string;
+    data: {
+        categories: RedeemableCategory[];
+    };
+    status: string;
+};
+export declare function getRedeemables({ idToken, isEnterprise }: {
+    idToken: string;
+    isEnterprise: boolean;
+}): Promise<ExternalRedeemablesResponse>;
+export type ExternalProfileResponse = {
+    success: boolean;
+    code: string;
+    message: string;
+    data: {
+        subs_info: {
+            msisdn: string;
+            operator: string;
+            id_verified: string;
+            net_type: string;
+            tenure: string;
+            exp_date: string;
+            grace_until: string;
+            volte: {
+                device: boolean;
+                area: boolean;
+                simcard: boolean;
+            };
+        };
+        package_info: {
+            error_message: string | null;
+            packages: Array<{
+                name: string;
+                expiry: string;
+                timestamp: number;
+                quotas: Array<{
+                    name: string;
+                    percent: number;
+                    total: string;
+                    remaining: string;
+                }>;
+            }>;
+        };
+    };
+};
+export declare function checkQuota(msisdn: string): Promise<ExternalProfileResponse>;
+export type QuotaBenefit = {
+    id: string;
+    name: string;
+    icon: string;
+    information: string;
+    data_type: string;
+    total: number;
+    remaining: number;
+    is_unlimited: boolean;
+    index: number;
+    is_shared: boolean;
+    is_usage_limit: boolean;
+    benefit_type: string;
+    benefit_category: string;
+    is_fup: boolean;
+    can_be_transfer: boolean;
+};
+export type QuotaPackageFamily = {
+    name: string;
+    package_family_code: string;
+    package_family_type: string;
+    is_family_plan: boolean;
+    flag: string;
+    payment_method: string;
+    plan_type: string;
+    background_color: string;
+    roaming: {
+        is_roaming: boolean;
+        is_hajj: boolean;
+        roaming_countries: string[];
+    };
+    flashsale_banner_url: string;
+    flashsale_background_image_url: string;
+    flashsale_countdown: number;
+    flashsale_live_duration: number;
+    flashsale_status: string;
+    rc_banner_information: string;
+    rc_banner_information_icon_url: string;
+    rc_bonus_type: string;
+    rc_valid_until: number;
+};
+export type QuotaPackageVariants = {
+    name: string;
+    package_variant_code: string;
+    image: string;
+    image_url: string;
+};
+export type QuotaAdditionalBenefitInfo = {
+    title: string;
+    icon: string;
+    content: string;
+};
+export type Quota = {
+    quota_code: string;
+    name: string;
+    icon: string;
+    expired_at: number;
+    is_expiration_unlimited: boolean;
+    is_unsubscribable: boolean;
+    benefits: QuotaBenefit[];
+    promo_code: string;
+    product_domain: string;
+    product_subscription_type: string;
+    action_message: string | null;
+    xcf_action_message: string | null;
+    subtitle: string;
+    package_family: QuotaPackageFamily;
+    package_family_plan_type: string;
+    package_variants: QuotaPackageVariants;
+    active_date: number;
+    recurring_date: number;
+    recurring_date_summary: number;
+    end_date: number;
+    group_name: string;
+    group_code: string;
+    is_recurring: boolean;
+    remaining_contract_month: number;
+    family_member_id: string;
+    family_plan_role: string;
+    transferable: string;
+    quota_transfer_specs: string[];
+    migrateable: boolean;
+    fup_limit_rule: string;
+    fup_limit_notice: string;
+    status_resubscribe: string;
+    subscribed_packages: null;
+    payment_method: string;
+    additional_benefit_info: QuotaAdditionalBenefitInfo;
+    additional_notice: string;
+    is_can_exchange_quota: boolean;
+    is_autobuy_eligible: boolean;
+};
+export type MyPackagesResponse = {
+    code: string;
+    status: string;
+    data: {
+        quotas: Quota[];
+        static_banners: string;
+        show_autobuy_banner: boolean;
+    };
+};
+export declare function fetchMyPackages({ idToken }: {
+    idToken: string;
+}): Promise<MyPackagesResponse>;