strapi-plugin-payone-provider 1.0.1

package/server/controllers/payone.js

@@ -0,0 +1,134 @@
+"use strict";
+
+module.exports = ({ strapi }) => ({
+  async getSettings(ctx) {
+    try {
+      const settings = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .getSettings();
+
+      if (settings && settings.key) {
+        settings.key = "***HIDDEN***";
+      }
+
+      ctx.body = { data: settings };
+    } catch (error) {
+      ctx.throw(500, error);
+    }
+  },
+
+  async updateSettings(ctx) {
+    try {
+      const { body } = ctx.request;
+
+      const currentSettings = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .getSettings();
+
+      if (body.key === "***HIDDEN***" || !body.key) {
+        body.key = currentSettings.key;
+      }
+
+      const settings = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .updateSettings(body);
+
+      if (settings && settings.key) {
+        settings.key = "***HIDDEN***";
+      }
+
+      ctx.body = { data: settings };
+    } catch (error) {
+      ctx.throw(500, error);
+    }
+  },
+
+  async preauthorization(ctx) {
+    try {
+      const params = ctx.request.body;
+      const result = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .preauthorization(params);
+
+      ctx.body = { data: result };
+    } catch (error) {
+      ctx.throw(500, error);
+    }
+  },
+
+  async authorization(ctx) {
+    try {
+      const params = ctx.request.body;
+      strapi.log.info("Payone authorization controller called with:", params);
+
+      const result = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .authorization(params);
+
+      ctx.body = { data: result };
+    } catch (error) {
+      strapi.log.error("Payone authorization error:", error);
+      ctx.throw(500, error);
+    }
+  },
+
+  async capture(ctx) {
+    try {
+      const params = ctx.request.body;
+      const result = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .capture(params);
+
+      ctx.body = { data: result };
+    } catch (error) {
+      ctx.throw(500, error);
+    }
+  },
+
+  async refund(ctx) {
+    try {
+      const params = ctx.request.body;
+      const result = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .refund(params);
+
+      ctx.body = { data: result };
+    } catch (error) {
+      ctx.throw(500, error);
+    }
+  },
+
+  async getTransactionHistory(ctx) {
+    try {
+      const filters = ctx.query || {};
+      const history = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .getTransactionHistory(filters);
+
+      ctx.body = { data: history };
+    } catch (error) {
+      ctx.throw(500, error);
+    }
+  },
+
+  async testConnection(ctx) {
+    try {
+      const result = await strapi
+        .plugin("payone-provider")
+        .service("payone")
+        .testConnection();
+
+      ctx.body = { data: result };
+    } catch (error) {
+      ctx.throw(500, error);
+    }
+  }
+});

package/server/destroy.js

@@ -0,0 +1,5 @@
+"use strict";
+
+module.exports = ({ strapi }) => {
+  // Cleanup when plugin is destroyed
+};

package/server/index.js

@@ -0,0 +1,21 @@
+"use strict";
+
+const register = require("./register");
+const bootstrap = require("./bootstrap");
+const destroy = require("./destroy");
+const config = require("./config");
+const controllers = require("./controllers");
+const routes = require("./routes");
+const services = require("./services");
+const policies = require("./policies");
+
+module.exports = {
+  register,
+  bootstrap,
+  destroy,
+  config,
+  controllers,
+  routes,
+  services,
+  policies
+};

package/server/policies/index.js

@@ -0,0 +1,6 @@
+"use strict";
+
+module.exports = {
+  isSuperAdmin: require("./isSuperAdmin"),
+  isAuth: require("./isAuth")
+};

package/server/policies/isAuth.js

@@ -0,0 +1,23 @@
+"use strict";
+
+module.exports = async (ctx, config, { strapi }) => {
+  const { authorization } = ctx.request.header || {};
+
+  if (authorization && authorization.startsWith("Bearer ")) {
+    const token = authorization.split(" ")[1];
+
+    try {
+      const apiTokenService = strapi.services["admin::api-token"];
+      const accessKey = await apiTokenService.hash(token);
+      const storedToken = await apiTokenService.getBy({ accessKey });
+
+      if (storedToken) {
+        return true;
+      }
+    } catch (e) {
+      strapi.log.warn("payone-provider isAuth policy error:", e.message);
+    }
+  }
+
+  return false;
+};

package/server/policies/isSuperAdmin.js

@@ -0,0 +1,18 @@
+"use strict";
+
+module.exports = async (ctx, next) => {
+  const adminUser = ctx.state && ctx.state.user;
+
+  if (!adminUser) {
+    return ctx.unauthorized("Admin authentication required");
+  }
+
+  const roles = Array.isArray(adminUser.roles) ? adminUser.roles : [];
+  const isSuperAdmin = roles.some((role) => role.code === "strapi-super-admin");
+
+  if (!isSuperAdmin) {
+    return ctx.forbidden("Only super admins can access this resource");
+  }
+
+  return next();
+};

package/server/register.js

@@ -0,0 +1,5 @@
+"use strict";
+
+module.exports = ({ strapi }) => {
+  // Register the plugin with Strapi
+};

package/server/routes/index.js

@@ -0,0 +1,124 @@
+"use strict";
+
+module.exports = {
+  admin: {
+    type: "admin",
+    routes: [
+      {
+        method: "GET",
+        path: "/settings",
+        handler: "payone.getSettings",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      },
+      {
+        method: "PUT",
+        path: "/settings",
+        handler: "payone.updateSettings",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      },
+      {
+        method: "GET",
+        path: "/transaction-history",
+        handler: "payone.getTransactionHistory",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      },
+      {
+        method: "POST",
+        path: "/test-connection",
+        handler: "payone.testConnection",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      },
+
+      {
+        method: "POST",
+        path: "/preauthorization",
+        handler: "payone.preauthorization",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      },
+      {
+        method: "POST",
+        path: "/authorization",
+        handler: "payone.authorization",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      },
+      {
+        method: "POST",
+        path: "/capture",
+        handler: "payone.capture",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      },
+      {
+        method: "POST",
+        path: "/refund",
+        handler: "payone.refund",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      }
+    ]
+  },
+  "content-api": {
+    type: "content-api",
+    routes: [
+      {
+        method: "POST",
+        path: "/preauthorization",
+        handler: "payone.preauthorization",
+        config: {
+          policies: ["plugin::payone-provider.isAuth"],
+          auth: false
+        }
+      },
+      {
+        method: "POST",
+        path: "/authorization",
+        handler: "payone.authorization",
+        config: {
+          policies: ["plugin::payone-provider.isAuth"],
+          auth: false
+        }
+      },
+      {
+        method: "POST",
+        path: "/capture",
+        handler: "payone.capture",
+        config: {
+          policies: ["plugin::payone-provider.isAuth"],
+          auth: false
+        }
+      },
+      {
+        method: "POST",
+        path: "/refund",
+        handler: "payone.refund",
+        config: {
+          policies: ["plugin::payone-provider.isAuth"],
+          auth: false
+        }
+      },
+      {
+        method: "POST",
+        path: "/test-connection",
+        handler: "payone.testConnection",
+        config: {
+          policies: ["plugin::payone-provider.isAuth"],
+          auth: false
+        }
+      }
+    ]
+  }
+};

package/server/services/index.js

@@ -0,0 +1,7 @@
+"use strict";
+
+const payone = require("./payone");
+
+module.exports = {
+  payone
+};