simplepay-js-sdk 0.11.2 → 0.12.1

package/README.md

@@ -95,12 +95,45 @@ A `response` a következő tulajdonságokkal rendelkezik:
 #### IPN végpont
 
 A SimplePay `POST` kérést küld az IPN URL-re, és válaszolnunk kell rá.
-Ennél a végpontnál a következőket kell tenned:
+
+**Ajánlott megközelítés a `handleIpnRequest` függvénnyel:**
+
+```typescript
+import { handleIpnRequest } from 'simplepay-js-sdk'
+
+// Az IPN végpont kezelőjében (pl. Express, Next.js, stb.)
+const ipnBody = await request.text() // A nyers body stringként (FONTOS: használd a .text()-et, ne a JSON.parse()-t)
+const incomingSignature = request.headers.get('Signature')
+const { MERCHANT_KEY } = getSimplePayConfig('HUF') // vagy a te valutád
+
+const { responseBody, signature } = handleIpnRequest(ipnBody, incomingSignature, MERCHANT_KEY)
+
+// KRITIKUS: A responseBody-t pontosan úgy küldd el, ahogy visszaadódott, NE módosítsd!
+// NE:
+// - Formázd újra vagy "szépítsd" a JSON-t
+// - Parse-old és stringify-zd újra a JSON-t
+// - Adj hozzá szóközöket vagy formázást
+// Bármilyen módosítás érvényteleníti az aláírást!
+
+// Válasz küldése HTTP 200 státusszal
+return new Response(responseBody, {
+  status: 200,
+  headers: {
+    'Content-Type': 'application/json',
+    'Signature': signature
+  }
+})
+```
+
+**Manuális megközelítés:**
+
+Ha manuálisan szeretnéd kezelni:
 
 - ellenőrizd az aláírás érvényességét - használd a `checkSignature(ipnBody, signatureHeader, SIMPLEPAY_MERCHANT_KEY_HUF)` függvényt
-- adj hozzá egy `receiveDate` tulajdonságot a kapott JSON-hoz
+- adj hozzá egy `receiveDate` tulajdonságot a kapott JSON-hoz (ISO 8601 formátumban, pl. `2025-10-06T07:00:34+02:00`)
 - számítsd ki az új aláírást - használd a `generateSignature(responseText, SIMPLEPAY_MERCHANT_KEY_HUF)` függvényt
-- küldd el a `response`-t az új `signature`-rel
+- küldd el a `response`-t az új `signature`-rel a HTTP fejlécben (ne a JSON body-ban)
+- **Fontos**: A válasz JSON-nak tömörnek kell lennie (szóközmentes). A `JSON.stringify()` alapból tömör JSON-t ad vissza.
 
 ### Ismétlődő fizetés
 

package/dist/index.d.ts

@@ -10,6 +10,50 @@ export declare const generateSignature: (body: string, merchantKey: string) => s
 
 export declare const getPaymentResponse: (r: string, signature: string) => SimplePayResult;
 
+/**
+ * Handles IPN (Instant Payment Notification) request and generates response
+ *
+ * This function implements the IPN flow according to SimplePay requirements:
+ * 1. Validates the incoming signature
+ * 2. Adds receiveDate property to the response (preserving original field order and data types)
+ * 3. Generates response signature
+ *
+ * **IMPORTANT**: The responseBody must be sent EXACTLY as returned, without any modifications.
+ * Do NOT:
+ * - Re-format or pretty-print the JSON
+ * - Parse and re-stringify the JSON
+ * - Add any whitespace or formatting
+ * - Modify the Content-Type header (must be 'application/json')
+ *
+ * The signature is calculated on the exact string that will be sent in the HTTP body.
+ * Any modification to the responseBody will invalidate the signature.
+ *
+ * @param ipnBody - The raw IPN request body as string (must be the exact string received, not parsed JSON)
+ * @param incomingSignature - The signature from the 'Signature' HTTP header
+ * @param merchantKey - The merchant secret key for signature validation and generation
+ * @returns Object containing the response JSON string and signature to send back
+ *
+ * @example
+ * // In your IPN endpoint handler:
+ * const ipnBody = await request.text() // Get raw body as string (IMPORTANT: use .text(), not JSON.parse())
+ * const incomingSignature = request.headers.get('Signature')
+ * const { responseBody, signature } = handleIpnRequest(ipnBody, incomingSignature, MERCHANT_KEY)
+ *
+ * // Send response with HTTP 200 status
+ * // CRITICAL: Send responseBody exactly as returned, do not modify it!
+ * return new Response(responseBody, {
+ *   status: 200,
+ *   headers: {
+ *     'Content-Type': 'application/json',
+ *     'Signature': signature
+ *   }
+ * })
+ */
+export declare const handleIpnRequest: (ipnBody: string, incomingSignature: string, merchantKey: string) => {
+    responseBody: string;
+    signature: string;
+};
+
 declare type ISO8601DateString = string;
 
 export declare type Language = typeof LANGUAGES[number];

package/dist/index.js

@@ -1,10 +1,10 @@
-import S from "crypto";
+import l from "crypto";
 const d = ["HUF", "HUF_SZEP", "EUR", "USD"], i = (...e) => {
   process.env.SIMPLEPAY_LOGGER === "true" && console.log("👉 ", ...e);
 }, E = (e) => {
   if (!d.includes(e))
     throw new Error(`Unsupported currency: ${e}`);
-  const n = "https://secure.simplepay.hu/payment/v2", r = "https://sandbox.simplepay.hu/payment/v2", t = "SimplePay_Rrd_0.11.1", s = process.env[`SIMPLEPAY_MERCHANT_KEY_${e}`], c = process.env[`SIMPLEPAY_MERCHANT_ID_${e}`], o = process.env.SIMPLEPAY_PRODUCTION === "true" ? n : r, u = o + "/start", R = o + "/dorecurring", a = o + "/cardcancel";
+  const n = "https://secure.simplepay.hu/payment/v2", r = "https://sandbox.simplepay.hu/payment/v2", t = "SimplePay_Rrd_0.12.0", s = process.env[`SIMPLEPAY_MERCHANT_KEY_${e}`], c = process.env[`SIMPLEPAY_MERCHANT_ID_${e}`], o = process.env.SIMPLEPAY_PRODUCTION === "true" ? n : r, u = o + "/start", R = o + "/dorecurring", a = o + "/cardcancel";
   return {
     MERCHANT_KEY: s,
     MERCHANT_ID: c,
@@ -14,16 +14,16 @@ const d = ["HUF", "HUF_SZEP", "EUR", "USD"], i = (...e) => {
     SDK_VERSION: t
   };
 }, g = (e) => JSON.stringify(e).replace(/\//g, "\\/"), m = (e, n) => {
-  const r = S.createHmac("sha384", n.trim());
+  const r = l.createHmac("sha384", n.trim());
   return r.update(e, "utf8"), r.digest("base64");
-}, _ = (e, n, r) => n === m(e, r), P = (e) => e.toISOString().replace(/\.\d{3}Z$/, "+00:00"), A = (e) => {
+}, _ = (e, n, r) => n === m(e, r), S = (e) => e.toISOString().replace(/\.\d{3}Z$/, "+00:00"), p = (e) => {
   const n = Object.entries(process.env).find(
     ([r, t]) => r.startsWith("SIMPLEPAY_MERCHANT_ID_") && t === e
   )?.[0]?.replace("SIMPLEPAY_MERCHANT_ID_", "");
   if (!n)
     throw new Error(`Merchant id not found in the environment: ${e}`);
   return n;
-}, p = async (e, n, r) => l(e, n, r, "oneTime"), I = async (e, n, r) => l(e, n, r, "recurring"), f = async (e, n, r) => l(e, n, r, "token"), h = async (e, n, r) => l(e, n, r, "cancelCard"), l = async (e, n, r, t) => {
+}, A = async (e, n, r) => P(e, n, r, "oneTime"), I = async (e, n, r) => P(e, n, r, "recurring"), f = async (e, n, r) => P(e, n, r, "token"), h = async (e, n, r) => P(e, n, r, "cancelCard"), P = async (e, n, r, t) => {
   const s = g(n), c = m(s, r);
   i({ function: `SimplePay/makeRequest/${t}`, bodyString: s, signature: c });
   try {
@@ -51,7 +51,7 @@ const d = ["HUF", "HUF_SZEP", "EUR", "USD"], i = (...e) => {
   }
 }, U = (e, n) => {
   i({ function: "SimplePay/getPaymentResponse", r: e, signature: n }), n = decodeURIComponent(n);
-  const r = Buffer.from(e, "base64").toString("utf-8"), t = JSON.parse(r), s = A(t.m), { MERCHANT_KEY: c } = E(s);
+  const r = Buffer.from(e, "base64").toString("utf-8"), t = JSON.parse(r), s = p(t.m), { MERCHANT_KEY: c } = E(s);
   if (!_(r, n, c || ""))
     throw i({ function: "SimplePay/getPaymentResponse", rDecoded: r, signature: n }), new Error("Invalid response signature");
   const o = JSON.parse(r);
@@ -63,13 +63,22 @@ const d = ["HUF", "HUF_SZEP", "EUR", "USD"], i = (...e) => {
     orderRef: o.o,
     tokens: o.tokens
   };
-}, w = async (e, n = {}) => {
+}, w = (e, n, r) => {
+  if (i({ function: "SimplePay/handleIpnRequest", ipnBody: e, incomingSignature: n }), !_(e, n, r))
+    throw new Error("Invalid IPN request signature");
+  JSON.parse(e);
+  const t = S(/* @__PURE__ */ new Date()), s = e.replace("}", `,"receiveDate":"${t}"}`), c = m(s, r);
+  return i({ function: "SimplePay/handleIpnRequest", responseBody: s, responseSignature: c }), {
+    responseBody: s,
+    signature: c
+  };
+}, L = async (e, n = {}) => {
   i({ function: "SimplePay/startPayment", paymentData: e });
   const r = e.currency || "HUF", { MERCHANT_KEY: t, MERCHANT_ID: s, API_URL_PAYMENT: c, SDK_VERSION: o } = E(r);
   if (i({ function: "SimplePay/startPayment", MERCHANT_KEY: t, MERCHANT_ID: s, API_URL_PAYMENT: c }), !t || !s)
     throw new Error(`Missing SimplePay configuration for ${r}`);
   const u = {
-    salt: S.randomBytes(16).toString("hex"),
+    salt: l.randomBytes(16).toString("hex"),
     merchant: s,
     orderRef: e.orderRef,
     currency: r.replace("_SZEP", ""),
@@ -78,18 +87,18 @@ const d = ["HUF", "HUF_SZEP", "EUR", "USD"], i = (...e) => {
     sdkVersion: o,
     methods: [e.method || "CARD"],
     total: String(e.total),
-    timeout: P(new Date(Date.now() + 1800 * 1e3)),
+    timeout: S(new Date(Date.now() + 1800 * 1e3)),
     url: n.redirectUrl || process.env.SIMPLEPAY_REDIRECT_URL || "http://url.to.redirect",
     invoice: e.invoice
   };
-  return p(c, u, t);
-}, y = 6, C = new Date(Date.now() + y * 30 * 24 * 60 * 60 * 1e3), M = 12e3, N = 3, L = async (e) => {
+  return A(c, u, t);
+}, y = 6, C = new Date(Date.now() + y * 30 * 24 * 60 * 60 * 1e3), M = 12e3, N = 3, H = async (e) => {
   i({ function: "SimplePay/startRecurringPayment", paymentData: e });
   const n = e.currency || "HUF", { MERCHANT_KEY: r, MERCHANT_ID: t, API_URL_PAYMENT: s, SDK_VERSION: c } = E(n);
   if (i({ function: "SimplePay/startRecurringPayment", MERCHANT_KEY: r, MERCHANT_ID: t, API_URL_PAYMENT: s }), !r || !t)
     throw new Error(`Missing SimplePay configuration for ${n}`);
   const o = {
-    salt: S.randomBytes(16).toString("hex"),
+    salt: l.randomBytes(16).toString("hex"),
     merchant: t,
     orderRef: e.orderRef,
     currency: n.replace("_SZEP", ""),
@@ -100,23 +109,23 @@ const d = ["HUF", "HUF_SZEP", "EUR", "USD"], i = (...e) => {
     methods: ["CARD"],
     recurring: {
       times: e.recurring.times || N,
-      until: e.recurring.until || P(C),
+      until: e.recurring.until || S(C),
       maxAmount: e.recurring.maxAmount || M
     },
     threeDSReqAuthMethod: "02",
     total: String(e.total),
-    timeout: P(new Date(Date.now() + 1800 * 1e3)),
+    timeout: S(new Date(Date.now() + 1800 * 1e3)),
     url: process.env.SIMPLEPAY_REDIRECT_URL || "http://url.to.redirect",
     invoice: e.invoice
   };
   return I(s, o, r);
-}, H = async (e) => {
+}, k = async (e) => {
   i({ function: "SimplePay/startTokenPayment", paymentData: e });
   const n = e.currency || "HUF", { MERCHANT_KEY: r, MERCHANT_ID: t, API_URL_RECURRING: s, SDK_VERSION: c } = E(n);
   if (i({ function: "SimplePay/startTokenPayment", MERCHANT_KEY: r, MERCHANT_ID: t, API_URL_RECURRING: s }), !r || !t)
     throw new Error(`Missing SimplePay configuration for ${n}`);
   const o = {
-    salt: S.randomBytes(16).toString("hex"),
+    salt: l.randomBytes(16).toString("hex"),
     merchant: t,
     orderRef: e.orderRef,
     currency: n.replace("_SZEP", ""),
@@ -129,18 +138,18 @@ const d = ["HUF", "HUF_SZEP", "EUR", "USD"], i = (...e) => {
     type: "MIT",
     threeDSReqAuthMethod: "02",
     total: String(e.total),
-    timeout: P(new Date(Date.now() + 1800 * 1e3)),
+    timeout: S(new Date(Date.now() + 1800 * 1e3)),
     url: process.env.SIMPLEPAY_REDIRECT_URL || "http://recurring.url.to.redirect",
     invoice: e.invoice
   };
   return f(s, o, r);
-}, k = async (e) => {
+}, v = async (e) => {
   i({ function: "SimplePay/cancelCard", cardId: e });
   const { API_URL_CARD_CANCEL: n, MERCHANT_KEY: r, MERCHANT_ID: t, SDK_VERSION: s } = E("HUF");
   if (!r || !t)
     throw new Error("Missing SimplePay configuration for HUF");
   const c = {
-    salt: S.randomBytes(16).toString("hex"),
+    salt: l.randomBytes(16).toString("hex"),
     cardId: e,
     merchant: t,
     sdkVersion: s
@@ -148,13 +157,14 @@ const d = ["HUF", "HUF_SZEP", "EUR", "USD"], i = (...e) => {
   return h(n, c, r);
 };
 export {
-  k as cancelCard,
+  v as cancelCard,
   _ as checkSignature,
   m as generateSignature,
   U as getPaymentResponse,
-  w as startPayment,
-  L as startRecurringPayment,
-  H as startTokenPayment,
-  P as toISO8601DateString
+  w as handleIpnRequest,
+  L as startPayment,
+  H as startRecurringPayment,
+  k as startTokenPayment,
+  S as toISO8601DateString
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/types.ts","../src/utils.ts","../src/oneTime.ts","../src/recurring.ts"],"sourcesContent":["export type PaymentMethod = 'CARD' | 'WIRE'\n\nexport const CURRENCIES = ['HUF', 'HUF_SZEP', 'EUR', 'USD'] as const\nexport type Currency = typeof CURRENCIES[number]\n\nexport const LANGUAGES = [\n    'AR', // Arabic\n    'BG', // Bulgarian\n    'CS', // Czech\n    'DE', // German\n    'EN', // English\n    'ES', // Spanish\n    'FR', // French\n    'IT', // Italian\n    'HR', // Croatian\n    'HU', // Hungarian\n    'PL', // Polish\n    'RO', // Romanian\n    'RU', // Russian\n    'SK', // Slovak\n    'TR', // Turkish\n    'ZH', // Chinese\n] as const\nexport type Language = typeof LANGUAGES[number]\n\nexport interface PaymentData {\n    orderRef: string\n    total: number | string\n    customerEmail: string\n    currency?: Currency\n    language?: Language\n    method?: PaymentMethod\n    invoice?: {\n        name: string\n        country: string\n        state: string\n        city: string\n        zip: string\n        address: string\n        address2?: string\n        phone?: string\n    }\n}\n\nexport interface PaymentConfig {\n    redirectUrl?: string\n}\n\nexport type ISO8601DateString = string\nexport interface Recurring {\n    times: number,\n    until: ISO8601DateString,\n    maxAmount: number\n}\nexport interface RecurringPaymentData extends PaymentData {\n    customer: string,\n    recurring: Recurring\n}\n\nexport interface TokenPaymentData extends Omit<PaymentData, 'method'> {\n    method: 'CARD',\n    customer: string,\n    token: string\n}\n\nexport interface SimplePayRequestBody extends Omit<PaymentData, 'total'> {\n    total: string\n    salt: string\n    merchant: string\n    sdkVersion: string\n    methods: PaymentMethod[]\n    timeout: string\n    url: string\n}\n\nexport interface SimplePayRecurringRequestBody extends SimplePayRequestBody {\n    customer: string\n    recurring: Recurring\n    threeDSReqAuthMethod: '02'  // only registered users can use this\n}\n\nexport interface SimplePayTokenRequestBody extends SimplePayRequestBody {\n    customer: string\n    token: string\n    threeDSReqAuthMethod: '02'  // only registered users can use this\n    type: 'MIT' // Merchant Initiated Transaction\n}\n\nexport interface SimplePayCancelCardRequestBody {\n    salt: string\n    cardId: string\n    merchant: string\n    sdkVersion: string\n}\n\nexport interface SimplePayResponse {\n    salt: string\n    merchant: string\n    orderRef: string\n    currency: Currency\n    transactionId: string\n    timeout: ISO8601DateString\n    total: string\n    paymentUrl: string\n    errorCodes?: string[]\n}\n\nexport interface SimplePayRecurringResponse extends SimplePayResponse {\n    tokens: string[]\n}\n\nexport interface SimplePayTokenResponse extends Omit<SimplePayResponse, 'paymentUrl' | 'timeout'> { }\n\nexport interface SimplePayCancelCardResponse {\n    salt: string\n    merchant: string\n    cardId: string\n    status: 'DISABLED'\n    expiry: string\n}\n\nexport type SimplePayEvents = 'SUCCESS' | 'FAIL' | 'TIMEOUT' | 'CANCEL'\n\nexport interface SimplePayAPIResult {\n    r: number   // response code\n    t: string   // transaction id\n    e: SimplePayEvents   // event\n    m: string   // merchant id\n    o: string   // order id\n}\n\nexport interface SimplePayResult {\n    responseCode: number,\n    transactionId: string,\n    event: SimplePayEvents,\n    merchantId: string,\n    orderRef: string,\n    tokens?: string[],\n}\n","import crypto from 'crypto'\nimport { CURRENCIES, Currency, ISO8601DateString, SimplePayAPIResult, SimplePayCancelCardRequestBody, SimplePayCancelCardResponse, SimplePayRecurringRequestBody, SimplePayRecurringResponse, SimplePayRequestBody, SimplePayResponse, SimplePayResult, SimplePayTokenRequestBody, SimplePayTokenResponse } from \"./types\"\n\nexport const simplepayLogger = (...args: any[]) => {\n    if (process.env.SIMPLEPAY_LOGGER !== 'true') {\n        return\n    }\n\n    console.log('👉 ', ...args)\n}\n\nexport const getSimplePayConfig = (currency: Currency) => {\n    if (!CURRENCIES.includes(currency)) {\n        throw new Error(`Unsupported currency: ${currency}`)\n    }\n\n    const SIMPLEPAY_API_URL = 'https://secure.simplepay.hu/payment/v2'\n    const SIMPLEPAY_SANDBOX_URL = 'https://sandbox.simplepay.hu/payment/v2'\n    const SDK_VERSION = 'SimplePay_Rrd_0.11.1'\n    const MERCHANT_KEY = process.env[`SIMPLEPAY_MERCHANT_KEY_${currency}`]\n    const MERCHANT_ID = process.env[`SIMPLEPAY_MERCHANT_ID_${currency}`]\n\n    const API_URL = process.env.SIMPLEPAY_PRODUCTION === 'true' ? SIMPLEPAY_API_URL : SIMPLEPAY_SANDBOX_URL\n    const API_URL_PAYMENT = API_URL + '/start'\n    const API_URL_RECURRING = API_URL + '/dorecurring'\n    const API_URL_CARD_CANCEL = API_URL + '/cardcancel'\n    return {\n        MERCHANT_KEY,\n        MERCHANT_ID,\n        API_URL_PAYMENT,\n        API_URL_RECURRING,\n        API_URL_CARD_CANCEL,\n        SDK_VERSION\n    }\n}\n\n// escaping slashes for the request body to prevent strange SimplePay API errors (eg Missing Signature)\nexport const prepareRequestBody = (body: any) =>\n    JSON.stringify(body).replace(/\\//g, '\\\\/')\n\nexport const generateSignature = (body: string, merchantKey: string) => {\n    const hmac = crypto.createHmac('sha384', merchantKey.trim())\n    hmac.update(body, 'utf8')\n    return hmac.digest('base64')\n}\n\nexport const checkSignature = (responseText: string, signature: string, merchantKey: string) =>\n    signature === generateSignature(responseText, merchantKey)\n\nexport const toISO8601DateString = (date: Date): ISO8601DateString => date.toISOString().replace(/\\.\\d{3}Z$/, '+00:00')\n\nexport const getCurrencyFromMerchantId = (merchantId: string) => {\n    const currency = Object.entries(process.env)\n        .find(([key, value]) =>\n            key.startsWith('SIMPLEPAY_MERCHANT_ID_') && value === merchantId\n        )?.[0]?.replace('SIMPLEPAY_MERCHANT_ID_', '') as Currency\n\n    if (!currency) {\n        throw new Error(`Merchant id not found in the environment: ${merchantId}`)\n    }\n\n    return currency\n}\n\nexport const makeSimplePayRequest = async (apiUrl: string, requestBody: SimplePayRequestBody, merchantKey: string) => {\n    return makeRequest(apiUrl, requestBody, merchantKey, 'oneTime') as Promise<SimplePayResponse>\n}\n\nexport const makeSimplePayRecurringRequest = async (apiUrl: string, requestBody: SimplePayRecurringRequestBody, merchantKey: string) => {\n    return makeRequest(apiUrl, requestBody, merchantKey, 'recurring') as Promise<SimplePayRecurringResponse>\n}\n\nexport const makeSimplePayTokenRequest = async (apiUrl: string, requestBody: SimplePayTokenRequestBody, merchantKey: string) => {\n    return makeRequest(apiUrl, requestBody, merchantKey, 'token') as Promise<SimplePayTokenResponse>\n}\n\nexport const makeSimplePayCancelCardRequest = async (apiUrl: string, requestBody: SimplePayCancelCardRequestBody, merchantKey: string) => {\n    return makeRequest(apiUrl, requestBody, merchantKey, 'cancelCard') as Promise<SimplePayCancelCardResponse>\n}\n\nconst makeRequest = async (apiUrl: string, requestBody: SimplePayRequestBody | SimplePayRecurringRequestBody | SimplePayTokenRequestBody | SimplePayCancelCardRequestBody, merchantKey: string, type: 'oneTime' | 'recurring' | 'token' | 'cancelCard') => {\n    const bodyString = prepareRequestBody(requestBody)\n    const signature = generateSignature(bodyString, merchantKey)\n    simplepayLogger({ function: `SimplePay/makeRequest/${type}`, bodyString, signature })\n\n    try {\n        const response = await fetch(apiUrl, {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n                'Signature': signature,\n            },\n            body: bodyString,\n        })\n\n        simplepayLogger({ function: `SimplePay/makeRequest/${type}`, response })\n\n        if (!response.ok) {\n            throw new Error(`SimplePay API error: ${response.status}`)\n        }\n\n        const responseSignature = response.headers.get('Signature')\n        simplepayLogger({ function: `SimplePay/makeRequest/${type}`, responseSignature })\n        if (!responseSignature) {\n            throw new Error('Missing response signature')\n        }\n\n        const responseText = await response.text()\n        const responseJSON = JSON.parse(responseText) as { errorCodes?: string[] }\n        simplepayLogger({ function: `SimplePay/makeRequest/${type}`, responseText, responseJSON })\n\n        if (responseJSON.errorCodes) {\n            throw new Error(`SimplePay API error: ${responseJSON.errorCodes}`)\n        }\n\n        if (!checkSignature(responseText, responseSignature, merchantKey)) {\n            throw new Error('Invalid response signature')\n        }\n\n        return responseJSON\n\n    } catch (error) {\n        throw error\n    }\n}\n\nexport const getPaymentResponse = (r: string, signature: string) => {\n    simplepayLogger({ function: 'SimplePay/getPaymentResponse', r, signature })\n    signature = decodeURIComponent(signature)\n    const rDecoded = Buffer.from(r, 'base64').toString('utf-8')\n    const rDecodedJSON = JSON.parse(rDecoded) as SimplePayAPIResult\n    const currency = getCurrencyFromMerchantId(rDecodedJSON.m)\n    const { MERCHANT_KEY } = getSimplePayConfig(currency as Currency)\n\n    if (!checkSignature(rDecoded, signature, MERCHANT_KEY || '')) {\n        simplepayLogger({ function: 'SimplePay/getPaymentResponse', rDecoded, signature })\n        throw new Error('Invalid response signature')\n    }\n\n    const responseJson = JSON.parse(rDecoded)\n    const response: SimplePayResult = {\n        responseCode: responseJson.r,\n        transactionId: responseJson.t,\n        event: responseJson.e,\n        merchantId: responseJson.m,\n        orderRef: responseJson.o,\n        tokens: responseJson.tokens,\n    }\n\n    return response\n}\n","import crypto from 'crypto'\nimport { Currency, PaymentConfig, PaymentData, SimplePayRequestBody } from './types'\nimport { simplepayLogger, getSimplePayConfig, toISO8601DateString, makeSimplePayRequest } from './utils'\n\nconst startPayment = async (paymentData: PaymentData, config: PaymentConfig = {}) => {\n    simplepayLogger({ function: 'SimplePay/startPayment', paymentData })\n    const currency = paymentData.currency || 'HUF'\n    const { MERCHANT_KEY, MERCHANT_ID, API_URL_PAYMENT, SDK_VERSION } = getSimplePayConfig(currency)\n    simplepayLogger({ function: 'SimplePay/startPayment', MERCHANT_KEY, MERCHANT_ID, API_URL_PAYMENT })\n\n    if (!MERCHANT_KEY || !MERCHANT_ID) {\n        throw new Error(`Missing SimplePay configuration for ${currency}`)\n    }\n\n    const requestBody: SimplePayRequestBody = {\n        salt: crypto.randomBytes(16).toString('hex'),\n        merchant: MERCHANT_ID,\n        orderRef: paymentData.orderRef,\n        currency: currency.replace('_SZEP', '') as Currency,\n        customerEmail: paymentData.customerEmail,\n        language: paymentData.language || 'HU',\n        sdkVersion: SDK_VERSION,\n        methods: [paymentData.method || 'CARD'],\n        total: String(paymentData.total),\n        timeout: toISO8601DateString(new Date(Date.now() + 30 * 60 * 1000)),\n        url: config.redirectUrl || process.env.SIMPLEPAY_REDIRECT_URL || 'http://url.to.redirect',\n        invoice: paymentData.invoice,\n    }\n\n    return makeSimplePayRequest(API_URL_PAYMENT, requestBody, MERCHANT_KEY)\n}\n\nexport { startPayment }\n","import crypto from 'crypto'\nimport { SimplePayRecurringRequestBody, RecurringPaymentData, TokenPaymentData, SimplePayTokenRequestBody, SimplePayCancelCardRequestBody, Currency} from './types'\nimport { getSimplePayConfig, simplepayLogger, toISO8601DateString, makeSimplePayTokenRequest, makeSimplePayRecurringRequest, makeSimplePayRequest, makeSimplePayCancelCardRequest} from './utils'\n\nconst INTERVAL_IN_MONTHS = 6\nconst DEFAULT_UNTIL = new Date(Date.now() + INTERVAL_IN_MONTHS * 30 * 24 * 60 * 60 * 1000)\nconst DEFAULT_MAX_AMOUNT = 12000\nconst DEFAULT_TIMES = 3\n\nconst startRecurringPayment = async (paymentData: RecurringPaymentData) => {\n    simplepayLogger({ function: 'SimplePay/startRecurringPayment', paymentData })\n    const currency = paymentData.currency || 'HUF'\n    const { MERCHANT_KEY, MERCHANT_ID, API_URL_PAYMENT, SDK_VERSION } = getSimplePayConfig(currency)\n    simplepayLogger({ function: 'SimplePay/startRecurringPayment', MERCHANT_KEY, MERCHANT_ID, API_URL_PAYMENT })\n\n    if (!MERCHANT_KEY || !MERCHANT_ID) {\n        throw new Error(`Missing SimplePay configuration for ${currency}`)\n    }\n\n    const requestBody: SimplePayRecurringRequestBody = {\n        salt: crypto.randomBytes(16).toString('hex'),\n        merchant: MERCHANT_ID,\n        orderRef: paymentData.orderRef,\n        currency: currency.replace('_SZEP', '') as Currency,\n        customer: paymentData.customer,\n        customerEmail: paymentData.customerEmail,\n        language: paymentData.language || 'HU',\n        sdkVersion: SDK_VERSION,\n        methods: ['CARD'],\n        recurring: {\n            times: paymentData.recurring.times || DEFAULT_TIMES,\n            until: paymentData.recurring.until || toISO8601DateString(DEFAULT_UNTIL),\n            maxAmount: paymentData.recurring.maxAmount || DEFAULT_MAX_AMOUNT\n        },\n        threeDSReqAuthMethod: '02', \n        total: String(paymentData.total),\n        timeout: toISO8601DateString(new Date(Date.now() + 30 * 60 * 1000)),\n        url: process.env.SIMPLEPAY_REDIRECT_URL || 'http://url.to.redirect',\n        invoice: paymentData.invoice,\n    }\n\n   return makeSimplePayRecurringRequest(API_URL_PAYMENT, requestBody, MERCHANT_KEY)\n}\n\nconst startTokenPayment = async (paymentData: TokenPaymentData) => {\n    simplepayLogger({ function: 'SimplePay/startTokenPayment', paymentData })\n    const currency = paymentData.currency || 'HUF'\n    const { MERCHANT_KEY, MERCHANT_ID, API_URL_RECURRING, SDK_VERSION } = getSimplePayConfig(currency)\n    simplepayLogger({ function: 'SimplePay/startTokenPayment', MERCHANT_KEY, MERCHANT_ID, API_URL_RECURRING })\n\n    if (!MERCHANT_KEY || !MERCHANT_ID) {\n        throw new Error(`Missing SimplePay configuration for ${currency}`)\n    }\n\n    const requestBody: SimplePayTokenRequestBody = {\n        salt: crypto.randomBytes(16).toString('hex'),\n        merchant: MERCHANT_ID,\n        orderRef: paymentData.orderRef,\n        currency: currency.replace('_SZEP', '') as Currency,\n        customer: paymentData.customer,\n        customerEmail: paymentData.customerEmail,\n        language: paymentData.language || 'HU',\n        sdkVersion: SDK_VERSION,\n        methods: ['CARD'],\n        token: paymentData.token,\n        type: 'MIT',\n        threeDSReqAuthMethod: '02',\n        total: String(paymentData.total),\n        timeout: toISO8601DateString(new Date(Date.now() + 30 * 60 * 1000)),\n        url: process.env.SIMPLEPAY_REDIRECT_URL || 'http://recurring.url.to.redirect',\n        invoice: paymentData.invoice,\n    }\n\n  return makeSimplePayTokenRequest(API_URL_RECURRING, requestBody, MERCHANT_KEY)\n}\n\nconst cancelCard = async (cardId: string) => {\n    simplepayLogger({ function: 'SimplePay/cancelCard', cardId })\n    const {API_URL_CARD_CANCEL, MERCHANT_KEY, MERCHANT_ID, SDK_VERSION} = getSimplePayConfig('HUF')\n\n    if (!MERCHANT_KEY || !MERCHANT_ID) {\n        throw new Error(`Missing SimplePay configuration for HUF`)\n    }\n\n    const requestBody: SimplePayCancelCardRequestBody = {\n        salt: crypto.randomBytes(16).toString('hex'),\n        cardId,\n        merchant: MERCHANT_ID,\n        sdkVersion: SDK_VERSION,\n    }\n    return makeSimplePayCancelCardRequest(API_URL_CARD_CANCEL, requestBody, MERCHANT_KEY)\n}\n\nexport { startRecurringPayment, startTokenPayment , cancelCard}\n"],"names":["CURRENCIES","simplepayLogger","args","getSimplePayConfig","currency","SIMPLEPAY_API_URL","SIMPLEPAY_SANDBOX_URL","SDK_VERSION","MERCHANT_KEY","MERCHANT_ID","API_URL","API_URL_PAYMENT","API_URL_RECURRING","API_URL_CARD_CANCEL","prepareRequestBody","body","generateSignature","merchantKey","hmac","crypto","checkSignature","responseText","signature","toISO8601DateString","date","getCurrencyFromMerchantId","merchantId","key","value","makeSimplePayRequest","apiUrl","requestBody","makeRequest","makeSimplePayRecurringRequest","makeSimplePayTokenRequest","makeSimplePayCancelCardRequest","type","bodyString","response","responseSignature","responseJSON","error","getPaymentResponse","r","rDecoded","rDecodedJSON","responseJson","startPayment","paymentData","config","INTERVAL_IN_MONTHS","DEFAULT_UNTIL","DEFAULT_MAX_AMOUNT","DEFAULT_TIMES","startRecurringPayment","startTokenPayment","cancelCard","cardId"],"mappings":";AAEO,MAAMA,IAAa,CAAC,OAAO,YAAY,OAAO,KAAK,GCC7CC,IAAkB,IAAIC,MAAgB;AAC/C,EAAI,QAAQ,IAAI,qBAAqB,UAIrC,QAAQ,IAAI,OAAO,GAAGA,CAAI;AAC9B,GAEaC,IAAqB,CAACC,MAAuB;AACtD,MAAI,CAACJ,EAAW,SAASI,CAAQ;AAC7B,UAAM,IAAI,MAAM,yBAAyBA,CAAQ,EAAE;AAGvD,QAAMC,IAAoB,0CACpBC,IAAwB,2CACxBC,IAAc,wBACdC,IAAe,QAAQ,IAAI,0BAA0BJ,CAAQ,EAAE,GAC/DK,IAAc,QAAQ,IAAI,yBAAyBL,CAAQ,EAAE,GAE7DM,IAAU,QAAQ,IAAI,yBAAyB,SAASL,IAAoBC,GAC5EK,IAAkBD,IAAU,UAC5BE,IAAoBF,IAAU,gBAC9BG,IAAsBH,IAAU;AACtC,SAAO;AAAA,IACH,cAAAF;AAAA,IACA,aAAAC;AAAA,IACA,iBAAAE;AAAA,IACA,mBAAAC;AAAA,IACA,qBAAAC;AAAA,IACA,aAAAN;AAAA,EAAA;AAER,GAGaO,IAAqB,CAACC,MAC/B,KAAK,UAAUA,CAAI,EAAE,QAAQ,OAAO,KAAK,GAEhCC,IAAoB,CAACD,GAAcE,MAAwB;AACpE,QAAMC,IAAOC,EAAO,WAAW,UAAUF,EAAY,MAAM;AAC3D,SAAAC,EAAK,OAAOH,GAAM,MAAM,GACjBG,EAAK,OAAO,QAAQ;AAC/B,GAEaE,IAAiB,CAACC,GAAsBC,GAAmBL,MACpEK,MAAcN,EAAkBK,GAAcJ,CAAW,GAEhDM,IAAsB,CAACC,MAAkCA,EAAK,cAAc,QAAQ,aAAa,QAAQ,GAEzGC,IAA4B,CAACC,MAAuB;AAC7D,QAAMtB,IAAW,OAAO,QAAQ,QAAQ,GAAG,EACtC;AAAA,IAAK,CAAC,CAACuB,GAAKC,CAAK,MACdD,EAAI,WAAW,wBAAwB,KAAKC,MAAUF;AAAA,EAAA,IACtD,CAAC,GAAG,QAAQ,0BAA0B,EAAE;AAEhD,MAAI,CAACtB;AACD,UAAM,IAAI,MAAM,6CAA6CsB,CAAU,EAAE;AAG7E,SAAOtB;AACX,GAEayB,IAAuB,OAAOC,GAAgBC,GAAmCd,MACnFe,EAAYF,GAAQC,GAAad,GAAa,SAAS,GAGrDgB,IAAgC,OAAOH,GAAgBC,GAA4Cd,MACrGe,EAAYF,GAAQC,GAAad,GAAa,WAAW,GAGvDiB,IAA4B,OAAOJ,GAAgBC,GAAwCd,MAC7Fe,EAAYF,GAAQC,GAAad,GAAa,OAAO,GAGnDkB,IAAiC,OAAOL,GAAgBC,GAA6Cd,MACvGe,EAAYF,GAAQC,GAAad,GAAa,YAAY,GAG/De,IAAc,OAAOF,GAAgBC,GAAgId,GAAqBmB,MAA2D;AACvP,QAAMC,IAAavB,EAAmBiB,CAAW,GAC3CT,IAAYN,EAAkBqB,GAAYpB,CAAW;AAC3D,EAAAhB,EAAgB,EAAE,UAAU,yBAAyBmC,CAAI,IAAI,YAAAC,GAAY,WAAAf,GAAW;AAEpF,MAAI;AACA,UAAMgB,IAAW,MAAM,MAAMR,GAAQ;AAAA,MACjC,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,WAAaR;AAAA,MAAA;AAAA,MAEjB,MAAMe;AAAA,IAAA,CACT;AAID,QAFApC,EAAgB,EAAE,UAAU,yBAAyBmC,CAAI,IAAI,UAAAE,GAAU,GAEnE,CAACA,EAAS;AACV,YAAM,IAAI,MAAM,wBAAwBA,EAAS,MAAM,EAAE;AAG7D,UAAMC,IAAoBD,EAAS,QAAQ,IAAI,WAAW;AAE1D,QADArC,EAAgB,EAAE,UAAU,yBAAyBmC,CAAI,IAAI,mBAAAG,GAAmB,GAC5E,CAACA;AACD,YAAM,IAAI,MAAM,4BAA4B;AAGhD,UAAMlB,IAAe,MAAMiB,EAAS,KAAA,GAC9BE,IAAe,KAAK,MAAMnB,CAAY;AAG5C,QAFApB,EAAgB,EAAE,UAAU,yBAAyBmC,CAAI,IAAI,cAAAf,GAAc,cAAAmB,GAAc,GAErFA,EAAa;AACb,YAAM,IAAI,MAAM,wBAAwBA,EAAa,UAAU,EAAE;AAGrE,QAAI,CAACpB,EAAeC,GAAckB,GAAmBtB,CAAW;AAC5D,YAAM,IAAI,MAAM,4BAA4B;AAGhD,WAAOuB;AAAA,EAEX,SAASC,GAAO;AACZ,UAAMA;AAAA,EACV;AACJ,GAEaC,IAAqB,CAACC,GAAWrB,MAAsB;AAChE,EAAArB,EAAgB,EAAE,UAAU,gCAAgC,GAAA0C,GAAG,WAAArB,GAAW,GAC1EA,IAAY,mBAAmBA,CAAS;AACxC,QAAMsB,IAAW,OAAO,KAAKD,GAAG,QAAQ,EAAE,SAAS,OAAO,GACpDE,IAAe,KAAK,MAAMD,CAAQ,GAClCxC,IAAWqB,EAA0BoB,EAAa,CAAC,GACnD,EAAE,cAAArC,EAAA,IAAiBL,EAAmBC,CAAoB;AAEhE,MAAI,CAACgB,EAAewB,GAAUtB,GAAWd,KAAgB,EAAE;AACvD,UAAAP,EAAgB,EAAE,UAAU,gCAAgC,UAAA2C,GAAU,WAAAtB,GAAW,GAC3E,IAAI,MAAM,4BAA4B;AAGhD,QAAMwB,IAAe,KAAK,MAAMF,CAAQ;AAUxC,SATkC;AAAA,IAC9B,cAAcE,EAAa;AAAA,IAC3B,eAAeA,EAAa;AAAA,IAC5B,OAAOA,EAAa;AAAA,IACpB,YAAYA,EAAa;AAAA,IACzB,UAAUA,EAAa;AAAA,IACvB,QAAQA,EAAa;AAAA,EAAA;AAI7B,GClJMC,IAAe,OAAOC,GAA0BC,IAAwB,OAAO;AACjF,EAAAhD,EAAgB,EAAE,UAAU,0BAA0B,aAAA+C,EAAA,CAAa;AACnE,QAAM5C,IAAW4C,EAAY,YAAY,OACnC,EAAE,cAAAxC,GAAc,aAAAC,GAAa,iBAAAE,GAAiB,aAAAJ,EAAA,IAAgBJ,EAAmBC,CAAQ;AAG/F,MAFAH,EAAgB,EAAE,UAAU,0BAA0B,cAAAO,GAAc,aAAAC,GAAa,iBAAAE,GAAiB,GAE9F,CAACH,KAAgB,CAACC;AAClB,UAAM,IAAI,MAAM,uCAAuCL,CAAQ,EAAE;AAGrE,QAAM2B,IAAoC;AAAA,IACtC,MAAMZ,EAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA,IAC3C,UAAUV;AAAA,IACV,UAAUuC,EAAY;AAAA,IACtB,UAAU5C,EAAS,QAAQ,SAAS,EAAE;AAAA,IACtC,eAAe4C,EAAY;AAAA,IAC3B,UAAUA,EAAY,YAAY;AAAA,IAClC,YAAYzC;AAAA,IACZ,SAAS,CAACyC,EAAY,UAAU,MAAM;AAAA,IACtC,OAAO,OAAOA,EAAY,KAAK;AAAA,IAC/B,SAASzB,EAAoB,IAAI,KAAK,KAAK,QAAQ,OAAU,GAAI,CAAC;AAAA,IAClE,KAAK0B,EAAO,eAAe,QAAQ,IAAI,0BAA0B;AAAA,IACjE,SAASD,EAAY;AAAA,EAAA;AAGzB,SAAOnB,EAAqBlB,GAAiBoB,GAAavB,CAAY;AAC1E,GC1BM0C,IAAqB,GACrBC,IAAgB,IAAI,KAAK,KAAK,IAAA,IAAQD,IAAqB,KAAK,KAAK,KAAK,KAAK,GAAI,GACnFE,IAAqB,MACrBC,IAAgB,GAEhBC,IAAwB,OAAON,MAAsC;AACvE,EAAA/C,EAAgB,EAAE,UAAU,mCAAmC,aAAA+C,EAAA,CAAa;AAC5E,QAAM5C,IAAW4C,EAAY,YAAY,OACnC,EAAE,cAAAxC,GAAc,aAAAC,GAAa,iBAAAE,GAAiB,aAAAJ,EAAA,IAAgBJ,EAAmBC,CAAQ;AAG/F,MAFAH,EAAgB,EAAE,UAAU,mCAAmC,cAAAO,GAAc,aAAAC,GAAa,iBAAAE,GAAiB,GAEvG,CAACH,KAAgB,CAACC;AAClB,UAAM,IAAI,MAAM,uCAAuCL,CAAQ,EAAE;AAGrE,QAAM2B,IAA6C;AAAA,IAC/C,MAAMZ,EAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA,IAC3C,UAAUV;AAAA,IACV,UAAUuC,EAAY;AAAA,IACtB,UAAU5C,EAAS,QAAQ,SAAS,EAAE;AAAA,IACtC,UAAU4C,EAAY;AAAA,IACtB,eAAeA,EAAY;AAAA,IAC3B,UAAUA,EAAY,YAAY;AAAA,IAClC,YAAYzC;AAAA,IACZ,SAAS,CAAC,MAAM;AAAA,IAChB,WAAW;AAAA,MACP,OAAOyC,EAAY,UAAU,SAASK;AAAA,MACtC,OAAOL,EAAY,UAAU,SAASzB,EAAoB4B,CAAa;AAAA,MACvE,WAAWH,EAAY,UAAU,aAAaI;AAAA,IAAA;AAAA,IAElD,sBAAsB;AAAA,IACtB,OAAO,OAAOJ,EAAY,KAAK;AAAA,IAC/B,SAASzB,EAAoB,IAAI,KAAK,KAAK,QAAQ,OAAU,GAAI,CAAC;AAAA,IAClE,KAAK,QAAQ,IAAI,0BAA0B;AAAA,IAC3C,SAASyB,EAAY;AAAA,EAAA;AAG1B,SAAOf,EAA8BtB,GAAiBoB,GAAavB,CAAY;AAClF,GAEM+C,IAAoB,OAAOP,MAAkC;AAC/D,EAAA/C,EAAgB,EAAE,UAAU,+BAA+B,aAAA+C,EAAA,CAAa;AACxE,QAAM5C,IAAW4C,EAAY,YAAY,OACnC,EAAE,cAAAxC,GAAc,aAAAC,GAAa,mBAAAG,GAAmB,aAAAL,EAAA,IAAgBJ,EAAmBC,CAAQ;AAGjG,MAFAH,EAAgB,EAAE,UAAU,+BAA+B,cAAAO,GAAc,aAAAC,GAAa,mBAAAG,GAAmB,GAErG,CAACJ,KAAgB,CAACC;AAClB,UAAM,IAAI,MAAM,uCAAuCL,CAAQ,EAAE;AAGrE,QAAM2B,IAAyC;AAAA,IAC3C,MAAMZ,EAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA,IAC3C,UAAUV;AAAA,IACV,UAAUuC,EAAY;AAAA,IACtB,UAAU5C,EAAS,QAAQ,SAAS,EAAE;AAAA,IACtC,UAAU4C,EAAY;AAAA,IACtB,eAAeA,EAAY;AAAA,IAC3B,UAAUA,EAAY,YAAY;AAAA,IAClC,YAAYzC;AAAA,IACZ,SAAS,CAAC,MAAM;AAAA,IAChB,OAAOyC,EAAY;AAAA,IACnB,MAAM;AAAA,IACN,sBAAsB;AAAA,IACtB,OAAO,OAAOA,EAAY,KAAK;AAAA,IAC/B,SAASzB,EAAoB,IAAI,KAAK,KAAK,QAAQ,OAAU,GAAI,CAAC;AAAA,IAClE,KAAK,QAAQ,IAAI,0BAA0B;AAAA,IAC3C,SAASyB,EAAY;AAAA,EAAA;AAG3B,SAAOd,EAA0BtB,GAAmBmB,GAAavB,CAAY;AAC/E,GAEMgD,IAAa,OAAOC,MAAmB;AACzC,EAAAxD,EAAgB,EAAE,UAAU,wBAAwB,QAAAwD,EAAA,CAAQ;AAC5D,QAAM,EAAC,qBAAA5C,GAAqB,cAAAL,GAAc,aAAAC,GAAa,aAAAF,EAAA,IAAeJ,EAAmB,KAAK;AAE9F,MAAI,CAACK,KAAgB,CAACC;AAClB,UAAM,IAAI,MAAM,yCAAyC;AAG7D,QAAMsB,IAA8C;AAAA,IAChD,MAAMZ,EAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA,IAC3C,QAAAsC;AAAA,IACA,UAAUhD;AAAA,IACV,YAAYF;AAAA,EAAA;AAEhB,SAAO4B,EAA+BtB,GAAqBkB,GAAavB,CAAY;AACxF;"}
+{"version":3,"file":"index.js","sources":["../src/types.ts","../src/utils.ts","../src/oneTime.ts","../src/recurring.ts"],"sourcesContent":["export type PaymentMethod = 'CARD' | 'WIRE'\n\nexport const CURRENCIES = ['HUF', 'HUF_SZEP', 'EUR', 'USD'] as const\nexport type Currency = typeof CURRENCIES[number]\n\nexport const LANGUAGES = [\n    'AR', // Arabic\n    'BG', // Bulgarian\n    'CS', // Czech\n    'DE', // German\n    'EN', // English\n    'ES', // Spanish\n    'FR', // French\n    'IT', // Italian\n    'HR', // Croatian\n    'HU', // Hungarian\n    'PL', // Polish\n    'RO', // Romanian\n    'RU', // Russian\n    'SK', // Slovak\n    'TR', // Turkish\n    'ZH', // Chinese\n] as const\nexport type Language = typeof LANGUAGES[number]\n\nexport interface PaymentData {\n    orderRef: string\n    total: number | string\n    customerEmail: string\n    currency?: Currency\n    language?: Language\n    method?: PaymentMethod\n    invoice?: {\n        name: string\n        country: string\n        state: string\n        city: string\n        zip: string\n        address: string\n        address2?: string\n        phone?: string\n    }\n}\n\nexport interface PaymentConfig {\n    redirectUrl?: string\n}\n\nexport type ISO8601DateString = string\nexport interface Recurring {\n    times: number,\n    until: ISO8601DateString,\n    maxAmount: number\n}\nexport interface RecurringPaymentData extends PaymentData {\n    customer: string,\n    recurring: Recurring\n}\n\nexport interface TokenPaymentData extends Omit<PaymentData, 'method'> {\n    method: 'CARD',\n    customer: string,\n    token: string\n}\n\nexport interface SimplePayRequestBody extends Omit<PaymentData, 'total'> {\n    total: string\n    salt: string\n    merchant: string\n    sdkVersion: string\n    methods: PaymentMethod[]\n    timeout: string\n    url: string\n}\n\nexport interface SimplePayRecurringRequestBody extends SimplePayRequestBody {\n    customer: string\n    recurring: Recurring\n    threeDSReqAuthMethod: '02'  // only registered users can use this\n}\n\nexport interface SimplePayTokenRequestBody extends SimplePayRequestBody {\n    customer: string\n    token: string\n    threeDSReqAuthMethod: '02'  // only registered users can use this\n    type: 'MIT' // Merchant Initiated Transaction\n}\n\nexport interface SimplePayCancelCardRequestBody {\n    salt: string\n    cardId: string\n    merchant: string\n    sdkVersion: string\n}\n\nexport interface SimplePayResponse {\n    salt: string\n    merchant: string\n    orderRef: string\n    currency: Currency\n    transactionId: string\n    timeout: ISO8601DateString\n    total: string\n    paymentUrl: string\n    errorCodes?: string[]\n}\n\nexport interface SimplePayRecurringResponse extends SimplePayResponse {\n    tokens: string[]\n}\n\nexport interface SimplePayTokenResponse extends Omit<SimplePayResponse, 'paymentUrl' | 'timeout'> { }\n\nexport interface SimplePayCancelCardResponse {\n    salt: string\n    merchant: string\n    cardId: string\n    status: 'DISABLED'\n    expiry: string\n}\n\nexport type SimplePayEvents = 'SUCCESS' | 'FAIL' | 'TIMEOUT' | 'CANCEL'\n\nexport interface SimplePayAPIResult {\n    r: number   // response code\n    t: string   // transaction id\n    e: SimplePayEvents   // event\n    m: string   // merchant id\n    o: string   // order id\n}\n\nexport interface SimplePayResult {\n    responseCode: number,\n    transactionId: string,\n    event: SimplePayEvents,\n    merchantId: string,\n    orderRef: string,\n    tokens?: string[],\n}\n","import crypto from 'crypto'\nimport { CURRENCIES, Currency, ISO8601DateString, SimplePayAPIResult, SimplePayCancelCardRequestBody, SimplePayCancelCardResponse, SimplePayRecurringRequestBody, SimplePayRecurringResponse, SimplePayRequestBody, SimplePayResponse, SimplePayResult, SimplePayTokenRequestBody, SimplePayTokenResponse } from \"./types\"\n\nexport const simplepayLogger = (...args: any[]) => {\n    if (process.env.SIMPLEPAY_LOGGER !== 'true') {\n        return\n    }\n\n    console.log('👉 ', ...args)\n}\n\nexport const getSimplePayConfig = (currency: Currency) => {\n    if (!CURRENCIES.includes(currency)) {\n        throw new Error(`Unsupported currency: ${currency}`)\n    }\n\n    const SIMPLEPAY_API_URL = 'https://secure.simplepay.hu/payment/v2'\n    const SIMPLEPAY_SANDBOX_URL = 'https://sandbox.simplepay.hu/payment/v2'\n    const SDK_VERSION = 'SimplePay_Rrd_0.12.0'\n    const MERCHANT_KEY = process.env[`SIMPLEPAY_MERCHANT_KEY_${currency}`]\n    const MERCHANT_ID = process.env[`SIMPLEPAY_MERCHANT_ID_${currency}`]\n\n    const API_URL = process.env.SIMPLEPAY_PRODUCTION === 'true' ? SIMPLEPAY_API_URL : SIMPLEPAY_SANDBOX_URL\n    const API_URL_PAYMENT = API_URL + '/start'\n    const API_URL_RECURRING = API_URL + '/dorecurring'\n    const API_URL_CARD_CANCEL = API_URL + '/cardcancel'\n    return {\n        MERCHANT_KEY,\n        MERCHANT_ID,\n        API_URL_PAYMENT,\n        API_URL_RECURRING,\n        API_URL_CARD_CANCEL,\n        SDK_VERSION\n    }\n}\n\n// escaping slashes for the request body to prevent strange SimplePay API errors (eg Missing Signature)\nexport const prepareRequestBody = (body: any) =>\n    JSON.stringify(body).replace(/\\//g, '\\\\/')\n\nexport const generateSignature = (body: string, merchantKey: string) => {\n    const hmac = crypto.createHmac('sha384', merchantKey.trim())\n    hmac.update(body, 'utf8')\n    return hmac.digest('base64')\n}\n\nexport const checkSignature = (responseText: string, signature: string, merchantKey: string) =>\n    signature === generateSignature(responseText, merchantKey)\n\nexport const toISO8601DateString = (date: Date): ISO8601DateString => date.toISOString().replace(/\\.\\d{3}Z$/, '+00:00')\n\nexport const getCurrencyFromMerchantId = (merchantId: string) => {\n    const currency = Object.entries(process.env)\n        .find(([key, value]) =>\n            key.startsWith('SIMPLEPAY_MERCHANT_ID_') && value === merchantId\n        )?.[0]?.replace('SIMPLEPAY_MERCHANT_ID_', '') as Currency\n\n    if (!currency) {\n        throw new Error(`Merchant id not found in the environment: ${merchantId}`)\n    }\n\n    return currency\n}\n\nexport const makeSimplePayRequest = async (apiUrl: string, requestBody: SimplePayRequestBody, merchantKey: string) => {\n    return makeRequest(apiUrl, requestBody, merchantKey, 'oneTime') as Promise<SimplePayResponse>\n}\n\nexport const makeSimplePayRecurringRequest = async (apiUrl: string, requestBody: SimplePayRecurringRequestBody, merchantKey: string) => {\n    return makeRequest(apiUrl, requestBody, merchantKey, 'recurring') as Promise<SimplePayRecurringResponse>\n}\n\nexport const makeSimplePayTokenRequest = async (apiUrl: string, requestBody: SimplePayTokenRequestBody, merchantKey: string) => {\n    return makeRequest(apiUrl, requestBody, merchantKey, 'token') as Promise<SimplePayTokenResponse>\n}\n\nexport const makeSimplePayCancelCardRequest = async (apiUrl: string, requestBody: SimplePayCancelCardRequestBody, merchantKey: string) => {\n    return makeRequest(apiUrl, requestBody, merchantKey, 'cancelCard') as Promise<SimplePayCancelCardResponse>\n}\n\nconst makeRequest = async (apiUrl: string, requestBody: SimplePayRequestBody | SimplePayRecurringRequestBody | SimplePayTokenRequestBody | SimplePayCancelCardRequestBody, merchantKey: string, type: 'oneTime' | 'recurring' | 'token' | 'cancelCard') => {\n    const bodyString = prepareRequestBody(requestBody)\n    const signature = generateSignature(bodyString, merchantKey)\n    simplepayLogger({ function: `SimplePay/makeRequest/${type}`, bodyString, signature })\n\n    try {\n        const response = await fetch(apiUrl, {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n                'Signature': signature,\n            },\n            body: bodyString,\n        })\n\n        simplepayLogger({ function: `SimplePay/makeRequest/${type}`, response })\n\n        if (!response.ok) {\n            throw new Error(`SimplePay API error: ${response.status}`)\n        }\n\n        const responseSignature = response.headers.get('Signature')\n        simplepayLogger({ function: `SimplePay/makeRequest/${type}`, responseSignature })\n        if (!responseSignature) {\n            throw new Error('Missing response signature')\n        }\n\n        const responseText = await response.text()\n        const responseJSON = JSON.parse(responseText) as { errorCodes?: string[] }\n        simplepayLogger({ function: `SimplePay/makeRequest/${type}`, responseText, responseJSON })\n\n        if (responseJSON.errorCodes) {\n            throw new Error(`SimplePay API error: ${responseJSON.errorCodes}`)\n        }\n\n        if (!checkSignature(responseText, responseSignature, merchantKey)) {\n            throw new Error('Invalid response signature')\n        }\n\n        return responseJSON\n\n    } catch (error) {\n        throw error\n    }\n}\n\nexport const getPaymentResponse = (r: string, signature: string) => {\n    simplepayLogger({ function: 'SimplePay/getPaymentResponse', r, signature })\n    signature = decodeURIComponent(signature)\n    const rDecoded = Buffer.from(r, 'base64').toString('utf-8')\n    const rDecodedJSON = JSON.parse(rDecoded) as SimplePayAPIResult\n    const currency = getCurrencyFromMerchantId(rDecodedJSON.m)\n    const { MERCHANT_KEY } = getSimplePayConfig(currency as Currency)\n\n    if (!checkSignature(rDecoded, signature, MERCHANT_KEY || '')) {\n        simplepayLogger({ function: 'SimplePay/getPaymentResponse', rDecoded, signature })\n        throw new Error('Invalid response signature')\n    }\n\n    const responseJson = JSON.parse(rDecoded)\n    const response: SimplePayResult = {\n        responseCode: responseJson.r,\n        transactionId: responseJson.t,\n        event: responseJson.e,\n        merchantId: responseJson.m,\n        orderRef: responseJson.o,\n        tokens: responseJson.tokens,\n    }\n\n    return response\n}\n\n/**\n * Handles IPN (Instant Payment Notification) request and generates response\n * \n * This function implements the IPN flow according to SimplePay requirements:\n * 1. Validates the incoming signature\n * 2. Adds receiveDate property to the response (preserving original field order and data types)\n * 3. Generates response signature\n * \n * **IMPORTANT**: The responseBody must be sent EXACTLY as returned, without any modifications.\n * Do NOT:\n * - Re-format or pretty-print the JSON\n * - Parse and re-stringify the JSON\n * - Add any whitespace or formatting\n * - Modify the Content-Type header (must be 'application/json')\n * \n * The signature is calculated on the exact string that will be sent in the HTTP body.\n * Any modification to the responseBody will invalidate the signature.\n * \n * @param ipnBody - The raw IPN request body as string (must be the exact string received, not parsed JSON)\n * @param incomingSignature - The signature from the 'Signature' HTTP header\n * @param merchantKey - The merchant secret key for signature validation and generation\n * @returns Object containing the response JSON string and signature to send back\n * \n * @example\n * // In your IPN endpoint handler:\n * const ipnBody = await request.text() // Get raw body as string (IMPORTANT: use .text(), not JSON.parse())\n * const incomingSignature = request.headers.get('Signature')\n * const { responseBody, signature } = handleIpnRequest(ipnBody, incomingSignature, MERCHANT_KEY)\n * \n * // Send response with HTTP 200 status\n * // CRITICAL: Send responseBody exactly as returned, do not modify it!\n * return new Response(responseBody, {\n *   status: 200,\n *   headers: {\n *     'Content-Type': 'application/json',\n *     'Signature': signature\n *   }\n * })\n */\nexport const handleIpnRequest = (ipnBody: string, incomingSignature: string, merchantKey: string) => {\n    simplepayLogger({ function: 'SimplePay/handleIpnRequest', ipnBody, incomingSignature })\n    \n    // Step 1: Validate incoming signature\n    if (!checkSignature(ipnBody, incomingSignature, merchantKey)) {\n        throw new Error('Invalid IPN request signature')\n    }\n    \n    // Step 2: Validate it's valid JSON (but don't use parsed object to preserve field order and data types)\n    JSON.parse(ipnBody) // Just validate, don't use the result\n    \n    // Step 3: Add receiveDate to the original JSON string while preserving:\n    // - Exact field order\n    // - Exact data types (numeric vs string)\n    // - No whitespace (compact JSON)\n    // \n    // Use the same simple approach as the working solution:\n    // Replace the closing brace with: ,\"receiveDate\":\"${receiveDate}\"}\n    // This preserves the exact original format and field order\n    const receiveDate = toISO8601DateString(new Date())\n    \n    // Simple string replacement: replace the first (and only) closing brace\n    // This is the same approach as the working solution\n    const responseBody = ipnBody.replace('}', `,\"receiveDate\":\"${receiveDate}\"}`)\n    \n    // Step 4: Generate response signature using SHA384 HMAC + Base64\n    // The signature must be calculated on the exact string that will be sent\n    const responseSignature = generateSignature(responseBody, merchantKey)\n    \n    simplepayLogger({ function: 'SimplePay/handleIpnRequest', responseBody, responseSignature })\n    \n    return {\n        responseBody,\n        signature: responseSignature\n    }\n}\n","import crypto from 'crypto'\nimport { Currency, PaymentConfig, PaymentData, SimplePayRequestBody } from './types'\nimport { simplepayLogger, getSimplePayConfig, toISO8601DateString, makeSimplePayRequest } from './utils'\n\nconst startPayment = async (paymentData: PaymentData, config: PaymentConfig = {}) => {\n    simplepayLogger({ function: 'SimplePay/startPayment', paymentData })\n    const currency = paymentData.currency || 'HUF'\n    const { MERCHANT_KEY, MERCHANT_ID, API_URL_PAYMENT, SDK_VERSION } = getSimplePayConfig(currency)\n    simplepayLogger({ function: 'SimplePay/startPayment', MERCHANT_KEY, MERCHANT_ID, API_URL_PAYMENT })\n\n    if (!MERCHANT_KEY || !MERCHANT_ID) {\n        throw new Error(`Missing SimplePay configuration for ${currency}`)\n    }\n\n    const requestBody: SimplePayRequestBody = {\n        salt: crypto.randomBytes(16).toString('hex'),\n        merchant: MERCHANT_ID,\n        orderRef: paymentData.orderRef,\n        currency: currency.replace('_SZEP', '') as Currency,\n        customerEmail: paymentData.customerEmail,\n        language: paymentData.language || 'HU',\n        sdkVersion: SDK_VERSION,\n        methods: [paymentData.method || 'CARD'],\n        total: String(paymentData.total),\n        timeout: toISO8601DateString(new Date(Date.now() + 30 * 60 * 1000)),\n        url: config.redirectUrl || process.env.SIMPLEPAY_REDIRECT_URL || 'http://url.to.redirect',\n        invoice: paymentData.invoice,\n    }\n\n    return makeSimplePayRequest(API_URL_PAYMENT, requestBody, MERCHANT_KEY)\n}\n\nexport { startPayment }\n","import crypto from 'crypto'\nimport { SimplePayRecurringRequestBody, RecurringPaymentData, TokenPaymentData, SimplePayTokenRequestBody, SimplePayCancelCardRequestBody, Currency} from './types'\nimport { getSimplePayConfig, simplepayLogger, toISO8601DateString, makeSimplePayTokenRequest, makeSimplePayRecurringRequest, makeSimplePayRequest, makeSimplePayCancelCardRequest} from './utils'\n\nconst INTERVAL_IN_MONTHS = 6\nconst DEFAULT_UNTIL = new Date(Date.now() + INTERVAL_IN_MONTHS * 30 * 24 * 60 * 60 * 1000)\nconst DEFAULT_MAX_AMOUNT = 12000\nconst DEFAULT_TIMES = 3\n\nconst startRecurringPayment = async (paymentData: RecurringPaymentData) => {\n    simplepayLogger({ function: 'SimplePay/startRecurringPayment', paymentData })\n    const currency = paymentData.currency || 'HUF'\n    const { MERCHANT_KEY, MERCHANT_ID, API_URL_PAYMENT, SDK_VERSION } = getSimplePayConfig(currency)\n    simplepayLogger({ function: 'SimplePay/startRecurringPayment', MERCHANT_KEY, MERCHANT_ID, API_URL_PAYMENT })\n\n    if (!MERCHANT_KEY || !MERCHANT_ID) {\n        throw new Error(`Missing SimplePay configuration for ${currency}`)\n    }\n\n    const requestBody: SimplePayRecurringRequestBody = {\n        salt: crypto.randomBytes(16).toString('hex'),\n        merchant: MERCHANT_ID,\n        orderRef: paymentData.orderRef,\n        currency: currency.replace('_SZEP', '') as Currency,\n        customer: paymentData.customer,\n        customerEmail: paymentData.customerEmail,\n        language: paymentData.language || 'HU',\n        sdkVersion: SDK_VERSION,\n        methods: ['CARD'],\n        recurring: {\n            times: paymentData.recurring.times || DEFAULT_TIMES,\n            until: paymentData.recurring.until || toISO8601DateString(DEFAULT_UNTIL),\n            maxAmount: paymentData.recurring.maxAmount || DEFAULT_MAX_AMOUNT\n        },\n        threeDSReqAuthMethod: '02', \n        total: String(paymentData.total),\n        timeout: toISO8601DateString(new Date(Date.now() + 30 * 60 * 1000)),\n        url: process.env.SIMPLEPAY_REDIRECT_URL || 'http://url.to.redirect',\n        invoice: paymentData.invoice,\n    }\n\n   return makeSimplePayRecurringRequest(API_URL_PAYMENT, requestBody, MERCHANT_KEY)\n}\n\nconst startTokenPayment = async (paymentData: TokenPaymentData) => {\n    simplepayLogger({ function: 'SimplePay/startTokenPayment', paymentData })\n    const currency = paymentData.currency || 'HUF'\n    const { MERCHANT_KEY, MERCHANT_ID, API_URL_RECURRING, SDK_VERSION } = getSimplePayConfig(currency)\n    simplepayLogger({ function: 'SimplePay/startTokenPayment', MERCHANT_KEY, MERCHANT_ID, API_URL_RECURRING })\n\n    if (!MERCHANT_KEY || !MERCHANT_ID) {\n        throw new Error(`Missing SimplePay configuration for ${currency}`)\n    }\n\n    const requestBody: SimplePayTokenRequestBody = {\n        salt: crypto.randomBytes(16).toString('hex'),\n        merchant: MERCHANT_ID,\n        orderRef: paymentData.orderRef,\n        currency: currency.replace('_SZEP', '') as Currency,\n        customer: paymentData.customer,\n        customerEmail: paymentData.customerEmail,\n        language: paymentData.language || 'HU',\n        sdkVersion: SDK_VERSION,\n        methods: ['CARD'],\n        token: paymentData.token,\n        type: 'MIT',\n        threeDSReqAuthMethod: '02',\n        total: String(paymentData.total),\n        timeout: toISO8601DateString(new Date(Date.now() + 30 * 60 * 1000)),\n        url: process.env.SIMPLEPAY_REDIRECT_URL || 'http://recurring.url.to.redirect',\n        invoice: paymentData.invoice,\n    }\n\n  return makeSimplePayTokenRequest(API_URL_RECURRING, requestBody, MERCHANT_KEY)\n}\n\nconst cancelCard = async (cardId: string) => {\n    simplepayLogger({ function: 'SimplePay/cancelCard', cardId })\n    const {API_URL_CARD_CANCEL, MERCHANT_KEY, MERCHANT_ID, SDK_VERSION} = getSimplePayConfig('HUF')\n\n    if (!MERCHANT_KEY || !MERCHANT_ID) {\n        throw new Error(`Missing SimplePay configuration for HUF`)\n    }\n\n    const requestBody: SimplePayCancelCardRequestBody = {\n        salt: crypto.randomBytes(16).toString('hex'),\n        cardId,\n        merchant: MERCHANT_ID,\n        sdkVersion: SDK_VERSION,\n    }\n    return makeSimplePayCancelCardRequest(API_URL_CARD_CANCEL, requestBody, MERCHANT_KEY)\n}\n\nexport { startRecurringPayment, startTokenPayment , cancelCard}\n"],"names":["CURRENCIES","simplepayLogger","args","getSimplePayConfig","currency","SIMPLEPAY_API_URL","SIMPLEPAY_SANDBOX_URL","SDK_VERSION","MERCHANT_KEY","MERCHANT_ID","API_URL","API_URL_PAYMENT","API_URL_RECURRING","API_URL_CARD_CANCEL","prepareRequestBody","body","generateSignature","merchantKey","hmac","crypto","checkSignature","responseText","signature","toISO8601DateString","date","getCurrencyFromMerchantId","merchantId","key","value","makeSimplePayRequest","apiUrl","requestBody","makeRequest","makeSimplePayRecurringRequest","makeSimplePayTokenRequest","makeSimplePayCancelCardRequest","type","bodyString","response","responseSignature","responseJSON","error","getPaymentResponse","r","rDecoded","rDecodedJSON","responseJson","handleIpnRequest","ipnBody","incomingSignature","receiveDate","responseBody","startPayment","paymentData","config","INTERVAL_IN_MONTHS","DEFAULT_UNTIL","DEFAULT_MAX_AMOUNT","DEFAULT_TIMES","startRecurringPayment","startTokenPayment","cancelCard","cardId"],"mappings":";AAEO,MAAMA,IAAa,CAAC,OAAO,YAAY,OAAO,KAAK,GCC7CC,IAAkB,IAAIC,MAAgB;AAC/C,EAAI,QAAQ,IAAI,qBAAqB,UAIrC,QAAQ,IAAI,OAAO,GAAGA,CAAI;AAC9B,GAEaC,IAAqB,CAACC,MAAuB;AACtD,MAAI,CAACJ,EAAW,SAASI,CAAQ;AAC7B,UAAM,IAAI,MAAM,yBAAyBA,CAAQ,EAAE;AAGvD,QAAMC,IAAoB,0CACpBC,IAAwB,2CACxBC,IAAc,wBACdC,IAAe,QAAQ,IAAI,0BAA0BJ,CAAQ,EAAE,GAC/DK,IAAc,QAAQ,IAAI,yBAAyBL,CAAQ,EAAE,GAE7DM,IAAU,QAAQ,IAAI,yBAAyB,SAASL,IAAoBC,GAC5EK,IAAkBD,IAAU,UAC5BE,IAAoBF,IAAU,gBAC9BG,IAAsBH,IAAU;AACtC,SAAO;AAAA,IACH,cAAAF;AAAA,IACA,aAAAC;AAAA,IACA,iBAAAE;AAAA,IACA,mBAAAC;AAAA,IACA,qBAAAC;AAAA,IACA,aAAAN;AAAA,EAAA;AAER,GAGaO,IAAqB,CAACC,MAC/B,KAAK,UAAUA,CAAI,EAAE,QAAQ,OAAO,KAAK,GAEhCC,IAAoB,CAACD,GAAcE,MAAwB;AACpE,QAAMC,IAAOC,EAAO,WAAW,UAAUF,EAAY,MAAM;AAC3D,SAAAC,EAAK,OAAOH,GAAM,MAAM,GACjBG,EAAK,OAAO,QAAQ;AAC/B,GAEaE,IAAiB,CAACC,GAAsBC,GAAmBL,MACpEK,MAAcN,EAAkBK,GAAcJ,CAAW,GAEhDM,IAAsB,CAACC,MAAkCA,EAAK,cAAc,QAAQ,aAAa,QAAQ,GAEzGC,IAA4B,CAACC,MAAuB;AAC7D,QAAMtB,IAAW,OAAO,QAAQ,QAAQ,GAAG,EACtC;AAAA,IAAK,CAAC,CAACuB,GAAKC,CAAK,MACdD,EAAI,WAAW,wBAAwB,KAAKC,MAAUF;AAAA,EAAA,IACtD,CAAC,GAAG,QAAQ,0BAA0B,EAAE;AAEhD,MAAI,CAACtB;AACD,UAAM,IAAI,MAAM,6CAA6CsB,CAAU,EAAE;AAG7E,SAAOtB;AACX,GAEayB,IAAuB,OAAOC,GAAgBC,GAAmCd,MACnFe,EAAYF,GAAQC,GAAad,GAAa,SAAS,GAGrDgB,IAAgC,OAAOH,GAAgBC,GAA4Cd,MACrGe,EAAYF,GAAQC,GAAad,GAAa,WAAW,GAGvDiB,IAA4B,OAAOJ,GAAgBC,GAAwCd,MAC7Fe,EAAYF,GAAQC,GAAad,GAAa,OAAO,GAGnDkB,IAAiC,OAAOL,GAAgBC,GAA6Cd,MACvGe,EAAYF,GAAQC,GAAad,GAAa,YAAY,GAG/De,IAAc,OAAOF,GAAgBC,GAAgId,GAAqBmB,MAA2D;AACvP,QAAMC,IAAavB,EAAmBiB,CAAW,GAC3CT,IAAYN,EAAkBqB,GAAYpB,CAAW;AAC3D,EAAAhB,EAAgB,EAAE,UAAU,yBAAyBmC,CAAI,IAAI,YAAAC,GAAY,WAAAf,GAAW;AAEpF,MAAI;AACA,UAAMgB,IAAW,MAAM,MAAMR,GAAQ;AAAA,MACjC,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,WAAaR;AAAA,MAAA;AAAA,MAEjB,MAAMe;AAAA,IAAA,CACT;AAID,QAFApC,EAAgB,EAAE,UAAU,yBAAyBmC,CAAI,IAAI,UAAAE,GAAU,GAEnE,CAACA,EAAS;AACV,YAAM,IAAI,MAAM,wBAAwBA,EAAS,MAAM,EAAE;AAG7D,UAAMC,IAAoBD,EAAS,QAAQ,IAAI,WAAW;AAE1D,QADArC,EAAgB,EAAE,UAAU,yBAAyBmC,CAAI,IAAI,mBAAAG,GAAmB,GAC5E,CAACA;AACD,YAAM,IAAI,MAAM,4BAA4B;AAGhD,UAAMlB,IAAe,MAAMiB,EAAS,KAAA,GAC9BE,IAAe,KAAK,MAAMnB,CAAY;AAG5C,QAFApB,EAAgB,EAAE,UAAU,yBAAyBmC,CAAI,IAAI,cAAAf,GAAc,cAAAmB,GAAc,GAErFA,EAAa;AACb,YAAM,IAAI,MAAM,wBAAwBA,EAAa,UAAU,EAAE;AAGrE,QAAI,CAACpB,EAAeC,GAAckB,GAAmBtB,CAAW;AAC5D,YAAM,IAAI,MAAM,4BAA4B;AAGhD,WAAOuB;AAAA,EAEX,SAASC,GAAO;AACZ,UAAMA;AAAA,EACV;AACJ,GAEaC,IAAqB,CAACC,GAAWrB,MAAsB;AAChE,EAAArB,EAAgB,EAAE,UAAU,gCAAgC,GAAA0C,GAAG,WAAArB,GAAW,GAC1EA,IAAY,mBAAmBA,CAAS;AACxC,QAAMsB,IAAW,OAAO,KAAKD,GAAG,QAAQ,EAAE,SAAS,OAAO,GACpDE,IAAe,KAAK,MAAMD,CAAQ,GAClCxC,IAAWqB,EAA0BoB,EAAa,CAAC,GACnD,EAAE,cAAArC,EAAA,IAAiBL,EAAmBC,CAAoB;AAEhE,MAAI,CAACgB,EAAewB,GAAUtB,GAAWd,KAAgB,EAAE;AACvD,UAAAP,EAAgB,EAAE,UAAU,gCAAgC,UAAA2C,GAAU,WAAAtB,GAAW,GAC3E,IAAI,MAAM,4BAA4B;AAGhD,QAAMwB,IAAe,KAAK,MAAMF,CAAQ;AAUxC,SATkC;AAAA,IAC9B,cAAcE,EAAa;AAAA,IAC3B,eAAeA,EAAa;AAAA,IAC5B,OAAOA,EAAa;AAAA,IACpB,YAAYA,EAAa;AAAA,IACzB,UAAUA,EAAa;AAAA,IACvB,QAAQA,EAAa;AAAA,EAAA;AAI7B,GAyCaC,IAAmB,CAACC,GAAiBC,GAA2BhC,MAAwB;AAIjG,MAHAhB,EAAgB,EAAE,UAAU,8BAA8B,SAAA+C,GAAS,mBAAAC,GAAmB,GAGlF,CAAC7B,EAAe4B,GAASC,GAAmBhC,CAAW;AACvD,UAAM,IAAI,MAAM,+BAA+B;AAInD,OAAK,MAAM+B,CAAO;AAUlB,QAAME,IAAc3B,EAAoB,oBAAI,MAAM,GAI5C4B,IAAeH,EAAQ,QAAQ,KAAK,mBAAmBE,CAAW,IAAI,GAItEX,IAAoBvB,EAAkBmC,GAAclC,CAAW;AAErE,SAAAhB,EAAgB,EAAE,UAAU,8BAA8B,cAAAkD,GAAc,mBAAAZ,GAAmB,GAEpF;AAAA,IACH,cAAAY;AAAA,IACA,WAAWZ;AAAA,EAAA;AAEnB,GC9NMa,IAAe,OAAOC,GAA0BC,IAAwB,OAAO;AACjF,EAAArD,EAAgB,EAAE,UAAU,0BAA0B,aAAAoD,EAAA,CAAa;AACnE,QAAMjD,IAAWiD,EAAY,YAAY,OACnC,EAAE,cAAA7C,GAAc,aAAAC,GAAa,iBAAAE,GAAiB,aAAAJ,EAAA,IAAgBJ,EAAmBC,CAAQ;AAG/F,MAFAH,EAAgB,EAAE,UAAU,0BAA0B,cAAAO,GAAc,aAAAC,GAAa,iBAAAE,GAAiB,GAE9F,CAACH,KAAgB,CAACC;AAClB,UAAM,IAAI,MAAM,uCAAuCL,CAAQ,EAAE;AAGrE,QAAM2B,IAAoC;AAAA,IACtC,MAAMZ,EAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA,IAC3C,UAAUV;AAAA,IACV,UAAU4C,EAAY;AAAA,IACtB,UAAUjD,EAAS,QAAQ,SAAS,EAAE;AAAA,IACtC,eAAeiD,EAAY;AAAA,IAC3B,UAAUA,EAAY,YAAY;AAAA,IAClC,YAAY9C;AAAA,IACZ,SAAS,CAAC8C,EAAY,UAAU,MAAM;AAAA,IACtC,OAAO,OAAOA,EAAY,KAAK;AAAA,IAC/B,SAAS9B,EAAoB,IAAI,KAAK,KAAK,QAAQ,OAAU,GAAI,CAAC;AAAA,IAClE,KAAK+B,EAAO,eAAe,QAAQ,IAAI,0BAA0B;AAAA,IACjE,SAASD,EAAY;AAAA,EAAA;AAGzB,SAAOxB,EAAqBlB,GAAiBoB,GAAavB,CAAY;AAC1E,GC1BM+C,IAAqB,GACrBC,IAAgB,IAAI,KAAK,KAAK,IAAA,IAAQD,IAAqB,KAAK,KAAK,KAAK,KAAK,GAAI,GACnFE,IAAqB,MACrBC,IAAgB,GAEhBC,IAAwB,OAAON,MAAsC;AACvE,EAAApD,EAAgB,EAAE,UAAU,mCAAmC,aAAAoD,EAAA,CAAa;AAC5E,QAAMjD,IAAWiD,EAAY,YAAY,OACnC,EAAE,cAAA7C,GAAc,aAAAC,GAAa,iBAAAE,GAAiB,aAAAJ,EAAA,IAAgBJ,EAAmBC,CAAQ;AAG/F,MAFAH,EAAgB,EAAE,UAAU,mCAAmC,cAAAO,GAAc,aAAAC,GAAa,iBAAAE,GAAiB,GAEvG,CAACH,KAAgB,CAACC;AAClB,UAAM,IAAI,MAAM,uCAAuCL,CAAQ,EAAE;AAGrE,QAAM2B,IAA6C;AAAA,IAC/C,MAAMZ,EAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA,IAC3C,UAAUV;AAAA,IACV,UAAU4C,EAAY;AAAA,IACtB,UAAUjD,EAAS,QAAQ,SAAS,EAAE;AAAA,IACtC,UAAUiD,EAAY;AAAA,IACtB,eAAeA,EAAY;AAAA,IAC3B,UAAUA,EAAY,YAAY;AAAA,IAClC,YAAY9C;AAAA,IACZ,SAAS,CAAC,MAAM;AAAA,IAChB,WAAW;AAAA,MACP,OAAO8C,EAAY,UAAU,SAASK;AAAA,MACtC,OAAOL,EAAY,UAAU,SAAS9B,EAAoBiC,CAAa;AAAA,MACvE,WAAWH,EAAY,UAAU,aAAaI;AAAA,IAAA;AAAA,IAElD,sBAAsB;AAAA,IACtB,OAAO,OAAOJ,EAAY,KAAK;AAAA,IAC/B,SAAS9B,EAAoB,IAAI,KAAK,KAAK,QAAQ,OAAU,GAAI,CAAC;AAAA,IAClE,KAAK,QAAQ,IAAI,0BAA0B;AAAA,IAC3C,SAAS8B,EAAY;AAAA,EAAA;AAG1B,SAAOpB,EAA8BtB,GAAiBoB,GAAavB,CAAY;AAClF,GAEMoD,IAAoB,OAAOP,MAAkC;AAC/D,EAAApD,EAAgB,EAAE,UAAU,+BAA+B,aAAAoD,EAAA,CAAa;AACxE,QAAMjD,IAAWiD,EAAY,YAAY,OACnC,EAAE,cAAA7C,GAAc,aAAAC,GAAa,mBAAAG,GAAmB,aAAAL,EAAA,IAAgBJ,EAAmBC,CAAQ;AAGjG,MAFAH,EAAgB,EAAE,UAAU,+BAA+B,cAAAO,GAAc,aAAAC,GAAa,mBAAAG,GAAmB,GAErG,CAACJ,KAAgB,CAACC;AAClB,UAAM,IAAI,MAAM,uCAAuCL,CAAQ,EAAE;AAGrE,QAAM2B,IAAyC;AAAA,IAC3C,MAAMZ,EAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA,IAC3C,UAAUV;AAAA,IACV,UAAU4C,EAAY;AAAA,IACtB,UAAUjD,EAAS,QAAQ,SAAS,EAAE;AAAA,IACtC,UAAUiD,EAAY;AAAA,IACtB,eAAeA,EAAY;AAAA,IAC3B,UAAUA,EAAY,YAAY;AAAA,IAClC,YAAY9C;AAAA,IACZ,SAAS,CAAC,MAAM;AAAA,IAChB,OAAO8C,EAAY;AAAA,IACnB,MAAM;AAAA,IACN,sBAAsB;AAAA,IACtB,OAAO,OAAOA,EAAY,KAAK;AAAA,IAC/B,SAAS9B,EAAoB,IAAI,KAAK,KAAK,QAAQ,OAAU,GAAI,CAAC;AAAA,IAClE,KAAK,QAAQ,IAAI,0BAA0B;AAAA,IAC3C,SAAS8B,EAAY;AAAA,EAAA;AAG3B,SAAOnB,EAA0BtB,GAAmBmB,GAAavB,CAAY;AAC/E,GAEMqD,IAAa,OAAOC,MAAmB;AACzC,EAAA7D,EAAgB,EAAE,UAAU,wBAAwB,QAAA6D,EAAA,CAAQ;AAC5D,QAAM,EAAC,qBAAAjD,GAAqB,cAAAL,GAAc,aAAAC,GAAa,aAAAF,EAAA,IAAeJ,EAAmB,KAAK;AAE9F,MAAI,CAACK,KAAgB,CAACC;AAClB,UAAM,IAAI,MAAM,yCAAyC;AAG7D,QAAMsB,IAA8C;AAAA,IAChD,MAAMZ,EAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA,IAC3C,QAAA2C;AAAA,IACA,UAAUrD;AAAA,IACV,YAAYF;AAAA,EAAA;AAEhB,SAAO4B,EAA+BtB,GAAqBkB,GAAavB,CAAY;AACxF;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "simplepay-js-sdk",
-  "version": "0.11.2",
+  "version": "0.12.1",
   "description": "A Node.js utility for SimplePay payment integration",
   "repository": {
     "type": "git",

package/src/index.ts

@@ -1,12 +1,12 @@
 import { startPayment } from './oneTime'
 import { startRecurringPayment, startTokenPayment, cancelCard} from './recurring'
 import type { Currency, Language, PaymentMethod, SimplePayResponse, SimplePayRecurringResponse, SimplePayTokenResponse, SimplePayCancelCardResponse, SimplePayResult } from './types'
-import { checkSignature, generateSignature, getPaymentResponse, toISO8601DateString } from './utils'
+import { checkSignature, generateSignature, getPaymentResponse, handleIpnRequest, toISO8601DateString } from './utils'
 
 export {
     Currency, Language, PaymentMethod,
     SimplePayResponse, SimplePayRecurringResponse, SimplePayTokenResponse, SimplePayCancelCardResponse, SimplePayResult,
-    checkSignature, generateSignature, toISO8601DateString, getPaymentResponse,
+    checkSignature, generateSignature, toISO8601DateString, getPaymentResponse, handleIpnRequest,
     startPayment,     
     startRecurringPayment, startTokenPayment, cancelCard
 }

package/src/utils.spec.ts

@@ -1,6 +1,6 @@
 import { describe, it, expect, beforeEach } from 'vitest'
 import { Currency } from './types'
-import { checkSignature, generateSignature, getCurrencyFromMerchantId, getSimplePayConfig } from './utils'
+import { checkSignature, generateSignature, getCurrencyFromMerchantId, getSimplePayConfig, handleIpnRequest } from './utils'
 
 const setEnv = () => {
     process.env.SIMPLEPAY_MERCHANT_ID_HUF = 'testId'
@@ -140,4 +140,233 @@ describe('SimplePay Utils Tests', () => {
             expect(currencySzep).toBe('HUF_SZEP')
         })
     })
+
+    describe('IPN Response Signature', () => {
+        it('should generate valid signature for IPN response after adding receiveDate', () => {
+            setEnv()
+            const merchantKey = 'testKey'
+            
+            // Simulate incoming IPN request body (compact JSON, no whitespace)
+            const ipnRequestBody = {
+                r: 0,
+                t: '504233881',
+                e: 'SUCCESS',
+                m: 'testId',
+                o: 'test-order-123'
+            }
+            
+            // JSON.stringify produces compact JSON by default (no whitespace)
+            const ipnBodyString = JSON.stringify(ipnRequestBody)
+            
+            // Generate valid incoming signature (as if from SimplePay)
+            const incomingSignature = generateSignature(ipnBodyString, merchantKey)
+            
+            // Step 1: Verify incoming signature is valid
+            const isIncomingSignatureValid = checkSignature(ipnBodyString, incomingSignature, merchantKey)
+            expect(isIncomingSignatureValid).toBeTruthy()
+            
+            // Step 2: Add receiveDate property (as per IPN flow)
+            const ipnResponseBody = {
+                ...ipnRequestBody,
+                receiveDate: new Date().toISOString().replace(/\.\d{3}Z$/, '+00:00')
+            }
+            
+            // JSON.stringify produces compact JSON (no whitespace) - required by SimplePay
+            const ipnResponseBodyString = JSON.stringify(ipnResponseBody)
+            
+            // Step 3: Generate response signature
+            const responseSignature = generateSignature(ipnResponseBodyString, merchantKey)
+            
+            // Step 4: Verify the response signature is valid
+            const isResponseSignatureValid = checkSignature(ipnResponseBodyString, responseSignature, merchantKey)
+            expect(isResponseSignatureValid).toBeTruthy()
+            
+            // Verify response signature is different from incoming signature (since body changed)
+            expect(responseSignature).not.toBe(incomingSignature)
+            
+            // Verify JSON is compact (no whitespace)
+            expect(ipnResponseBodyString).not.toMatch(/\s/)
+        })
+
+        it('should handle IPN request using handleIpnRequest function', () => {
+            setEnv()
+            const merchantKey = 'testKey'
+            
+            // Simulate incoming IPN request body (compact JSON, no whitespace)
+            // Use a specific field order to test that it's preserved
+            const ipnBodyString = '{"r":0,"t":"504233881","e":"SUCCESS","m":"testId","o":"test-order-123"}'
+            const incomingSignature = generateSignature(ipnBodyString, merchantKey)
+            
+            // Use handleIpnRequest function
+            const { responseBody, signature } = handleIpnRequest(ipnBodyString, incomingSignature, merchantKey)
+            
+            // Verify response contains receiveDate
+            const responseData = JSON.parse(responseBody)
+            expect(responseData).toHaveProperty('receiveDate')
+            expect(responseData.r).toBe(0)
+            expect(responseData.t).toBe('504233881')
+            expect(responseData.e).toBe('SUCCESS')
+            expect(responseData.m).toBe('testId')
+            expect(responseData.o).toBe('test-order-123')
+            
+            // Verify response signature is valid
+            const isSignatureValid = checkSignature(responseBody, signature, merchantKey)
+            expect(isSignatureValid).toBeTruthy()
+            
+            // Verify JSON is compact (no whitespace) - required by SimplePay
+            expect(responseBody).not.toMatch(/\s/)
+            
+            // Verify receiveDate is in ISO 8601 format (e.g., 2025-10-06T07:00:34+02:00)
+            expect(responseData.receiveDate).toMatch(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}[+-]\d{2}:\d{2}$/)
+            
+            // Verify field order is preserved: original fields come first, receiveDate is last
+            const responseBodyString = responseBody
+            expect(responseBodyString).toMatch(/^\{.*"r":0,.*"t":".*",.*"e":".*",.*"m":".*",.*"o":".*",.*"receiveDate":".*"\}$/)
+            // Verify receiveDate is the last field before closing brace
+            expect(responseBodyString).toMatch(/"receiveDate":"[^"]*"\}$/)
+        })
+
+        it('should preserve field order in IPN response', () => {
+            setEnv()
+            const merchantKey = 'testKey'
+            
+            // Test with a specific field order
+            const ipnBodyString = '{"r":0,"t":"123","e":"SUCCESS","m":"merchantId","o":"order123"}'
+            const incomingSignature = generateSignature(ipnBodyString, merchantKey)
+            
+            const { responseBody } = handleIpnRequest(ipnBodyString, incomingSignature, merchantKey)
+            
+            // Verify the original fields are in the same order
+            const rIndex = responseBody.indexOf('"r":')
+            const tIndex = responseBody.indexOf('"t":')
+            const eIndex = responseBody.indexOf('"e":')
+            const mIndex = responseBody.indexOf('"m":')
+            const oIndex = responseBody.indexOf('"o":')
+            const receiveDateIndex = responseBody.indexOf('"receiveDate":')
+            
+            // Verify order: r < t < e < m < o < receiveDate
+            expect(rIndex).toBeLessThan(tIndex)
+            expect(tIndex).toBeLessThan(eIndex)
+            expect(eIndex).toBeLessThan(mIndex)
+            expect(mIndex).toBeLessThan(oIndex)
+            expect(oIndex).toBeLessThan(receiveDateIndex)
+            
+            // Verify receiveDate is the last field
+            const lastFieldIndex = Math.max(rIndex, tIndex, eIndex, mIndex, oIndex, receiveDateIndex)
+            expect(lastFieldIndex).toBe(receiveDateIndex)
+        })
+
+        it('should preserve numeric data types in IPN response', () => {
+            setEnv()
+            const merchantKey = 'testKey'
+            
+            // Test with numeric transactionId (not string)
+            // This is critical: SimplePay sends numeric values, they must stay numeric
+            const ipnBodyString = '{"r":0,"t":508163884,"e":"SUCCESS","m":"testId","o":"order123"}'
+            const incomingSignature = generateSignature(ipnBodyString, merchantKey)
+            
+            const { responseBody, signature } = handleIpnRequest(ipnBodyString, incomingSignature, merchantKey)
+            
+            // Verify numeric transactionId stays numeric (no quotes around the number)
+            expect(responseBody).toMatch(/"t":508163884,/)
+            expect(responseBody).not.toMatch(/"t":"508163884",/)
+            
+            // Verify response signature is valid
+            const isSignatureValid = checkSignature(responseBody, signature, merchantKey)
+            expect(isSignatureValid).toBeTruthy()
+            
+            // Verify the response can be parsed and numeric value is preserved
+            const parsed = JSON.parse(responseBody)
+            expect(typeof parsed.t).toBe('number')
+            expect(parsed.t).toBe(508163884)
+        })
+
+        it('should preserve string data types in IPN response', () => {
+            setEnv()
+            const merchantKey = 'testKey'
+            
+            // Test with string transactionId
+            const ipnBodyString = '{"r":0,"t":"504233881","e":"SUCCESS","m":"testId","o":"order123"}'
+            const incomingSignature = generateSignature(ipnBodyString, merchantKey)
+            
+            const { responseBody, signature } = handleIpnRequest(ipnBodyString, incomingSignature, merchantKey)
+            
+            // Verify string transactionId stays string (with quotes)
+            expect(responseBody).toMatch(/"t":"504233881",/)
+            expect(responseBody).not.toMatch(/"t":504233881,/)
+            
+            // Verify response signature is valid
+            const isSignatureValid = checkSignature(responseBody, signature, merchantKey)
+            expect(isSignatureValid).toBeTruthy()
+            
+            // Verify the response can be parsed and string value is preserved
+            const parsed = JSON.parse(responseBody)
+            expect(typeof parsed.t).toBe('string')
+            expect(parsed.t).toBe('504233881')
+        })
+
+        it('should throw error for invalid incoming IPN signature', () => {
+            setEnv()
+            const merchantKey = 'testKey'
+            
+            const ipnBodyString = JSON.stringify({ r: 0, t: '123', e: 'SUCCESS', m: 'testId', o: 'test-order' })
+            const invalidSignature = 'invalid-signature'
+            
+            expect(() => {
+                handleIpnRequest(ipnBodyString, invalidSignature, merchantKey)
+            }).toThrow('Invalid IPN request signature')
+        })
+
+        it('should generate valid signature for IPN response with different currencies', () => {
+            setEnv()
+            
+            const testCases = [
+                { currency: 'HUF' as Currency, merchantKey: 'testKey', merchantId: 'testId' },
+                { currency: 'EUR' as Currency, merchantKey: 'secretEuroKey', merchantId: 'merchantEuroId' },
+                { currency: 'HUF_SZEP' as Currency, merchantKey: 'testKeySzep', merchantId: 'testIdSzep' }
+            ]
+            
+            testCases.forEach(({ currency, merchantKey, merchantId }) => {
+                // Use specific field order to test preservation
+                const ipnBodyString = `{"r":0,"t":"504233881","e":"SUCCESS","m":"${merchantId}","o":"test-order-${currency}"}`
+                const incomingSignature = generateSignature(ipnBodyString, merchantKey)
+                
+                // Verify incoming signature
+                expect(checkSignature(ipnBodyString, incomingSignature, merchantKey)).toBeTruthy()
+                
+                // Use handleIpnRequest function
+                const { responseBody, signature } = handleIpnRequest(ipnBodyString, incomingSignature, merchantKey)
+                
+                // Verify response signature
+                expect(checkSignature(responseBody, signature, merchantKey)).toBeTruthy()
+                
+                // Verify JSON is compact (no whitespace)
+                expect(responseBody).not.toMatch(/\s/)
+                
+                // Verify field order is preserved
+                expect(responseBody).toMatch(/^\{.*"r":0,.*"t":".*",.*"e":".*",.*"m":".*",.*"o":".*",.*"receiveDate":".*"\}$/)
+            })
+        })
+
+        it('should reject IPN response with invalid signature', () => {
+            setEnv()
+            const merchantKey = 'testKey'
+            
+            const ipnRequestBody = {
+                r: 0,
+                t: '504233881',
+                e: 'SUCCESS',
+                m: 'testId',
+                o: 'test-order-123',
+                receiveDate: new Date().toISOString().replace(/\.\d{3}Z$/, '+00:00')
+            }
+            
+            // JSON.stringify produces compact JSON (no whitespace)
+            const ipnResponseBodyString = JSON.stringify(ipnRequestBody)
+            const invalidSignature = 'invalid-signature'
+            
+            const isValid = checkSignature(ipnResponseBodyString, invalidSignature, merchantKey)
+            expect(isValid).toBeFalsy()
+        })
+    })
 })

package/src/utils.ts

@@ -16,7 +16,7 @@ export const getSimplePayConfig = (currency: Currency) => {
 
     const SIMPLEPAY_API_URL = 'https://secure.simplepay.hu/payment/v2'
     const SIMPLEPAY_SANDBOX_URL = 'https://sandbox.simplepay.hu/payment/v2'
-    const SDK_VERSION = 'SimplePay_Rrd_0.11.2'
+    const SDK_VERSION = 'SimplePay_Rrd_0.12.1'
     const MERCHANT_KEY = process.env[`SIMPLEPAY_MERCHANT_KEY_${currency}`]
     const MERCHANT_ID = process.env[`SIMPLEPAY_MERCHANT_ID_${currency}`]
 
@@ -149,3 +149,79 @@ export const getPaymentResponse = (r: string, signature: string) => {
 
     return response
 }
+
+/**
+ * Handles IPN (Instant Payment Notification) request and generates response
+ * 
+ * This function implements the IPN flow according to SimplePay requirements:
+ * 1. Validates the incoming signature
+ * 2. Adds receiveDate property to the response (preserving original field order and data types)
+ * 3. Generates response signature
+ * 
+ * **IMPORTANT**: The responseBody must be sent EXACTLY as returned, without any modifications.
+ * Do NOT:
+ * - Re-format or pretty-print the JSON
+ * - Parse and re-stringify the JSON
+ * - Add any whitespace or formatting
+ * - Modify the Content-Type header (must be 'application/json')
+ * 
+ * The signature is calculated on the exact string that will be sent in the HTTP body.
+ * Any modification to the responseBody will invalidate the signature.
+ * 
+ * @param ipnBody - The raw IPN request body as string (must be the exact string received, not parsed JSON)
+ * @param incomingSignature - The signature from the 'Signature' HTTP header
+ * @param merchantKey - The merchant secret key for signature validation and generation
+ * @returns Object containing the response JSON string and signature to send back
+ * 
+ * @example
+ * // In your IPN endpoint handler:
+ * const ipnBody = await request.text() // Get raw body as string (IMPORTANT: use .text(), not JSON.parse())
+ * const incomingSignature = request.headers.get('Signature')
+ * const { responseBody, signature } = handleIpnRequest(ipnBody, incomingSignature, MERCHANT_KEY)
+ * 
+ * // Send response with HTTP 200 status
+ * // CRITICAL: Send responseBody exactly as returned, do not modify it!
+ * return new Response(responseBody, {
+ *   status: 200,
+ *   headers: {
+ *     'Content-Type': 'application/json',
+ *     'Signature': signature
+ *   }
+ * })
+ */
+export const handleIpnRequest = (ipnBody: string, incomingSignature: string, merchantKey: string) => {
+    simplepayLogger({ function: 'SimplePay/handleIpnRequest', ipnBody, incomingSignature })
+    
+    // Step 1: Validate incoming signature
+    if (!checkSignature(ipnBody, incomingSignature, merchantKey)) {
+        throw new Error('Invalid IPN request signature')
+    }
+    
+    // Step 2: Validate it's valid JSON (but don't use parsed object to preserve field order and data types)
+    JSON.parse(ipnBody) // Just validate, don't use the result
+    
+    // Step 3: Add receiveDate to the original JSON string while preserving:
+    // - Exact field order
+    // - Exact data types (numeric vs string)
+    // - No whitespace (compact JSON)
+    // 
+    // Use the same simple approach as the working solution:
+    // Replace the closing brace with: ,"receiveDate":"${receiveDate}"}
+    // This preserves the exact original format and field order
+    const receiveDate = toISO8601DateString(new Date())
+    
+    // Simple string replacement: replace the first (and only) closing brace
+    // This is the same approach as the working solution
+    const responseBody = ipnBody.replace('}', `,"receiveDate":"${receiveDate}"}`)
+    
+    // Step 4: Generate response signature using SHA384 HMAC + Base64
+    // The signature must be calculated on the exact string that will be sent
+    const responseSignature = generateSignature(responseBody, merchantKey)
+    
+    simplepayLogger({ function: 'SimplePay/handleIpnRequest', responseBody, responseSignature })
+    
+    return {
+        responseBody,
+        signature: responseSignature
+    }
+}