strapi-plugin-payone-provider 5.6.18 → 5.7.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "strapi-plugin-payone-provider",
-  "version": "5.6.18",
+  "version": "5.7.19",
   "description": "Strapi plugin for Payone payment gateway integration",
   "license": "MIT",
   "maintainers": [

package/server/config/index.js

@@ -20,7 +20,7 @@ module.exports = {
       enableGooglePay: false,
       enableApplePay: false,
       enableSofort: false,
-      enableSepaDirectDebit: false
+      enableSepaDirectDebit: false,
     }
   },
   validator(config) {
@@ -49,7 +49,7 @@ module.exports = {
           enableGooglePay: yup.boolean().optional(),
           enableApplePay: yup.boolean().optional(),
           enableSofort: yup.boolean().optional(),
-          enableSepaDirectDebit: yup.boolean().optional()
+          enableSepaDirectDebit: yup.boolean().optional(),
         })
         .defined()
     });

package/server/controllers/payone.js

@@ -1,5 +1,6 @@
 "use strict";
 
+const crypto = require("crypto");
 const PLUGIN_NAME = "strapi-plugin-payone-provider";
 const { rowsToCsv, csvToRows, TRANSACTION_ATTRS } = require("../utils/csvTransactions");
 
@@ -391,5 +392,38 @@ module.exports = ({ strapi }) => ({
     ctx.status = 200;
     ctx.body = "TSOK";
     ctx.type = "text/plain";
+  },
+
+  async hash384(ctx) {
+    try {
+      // Get settings
+      const settings = await getPayoneService(strapi).getSettings();
+      const hmacKey = settings?.key || "";
+
+      if (!hmacKey) {
+        ctx.throw(400, "Payone key is not configured in plugin settings");
+      }
+
+      // Validate required settings
+      if (!settings?.aid || !settings?.mid || !settings?.portalid || !settings?.mode) {
+        ctx.throw(400, "Required settings (aid, mid, portalid, mode) are not configured");
+      }
+
+      // Construct the string from settings values
+      // Format: ${aid}UTF-8${mid}${mode}${portalid}creditcardcheckJSONyes
+      const textToHash = `${settings.aid}UTF-8${settings.mid}${settings.mode}${settings.portalid}creditcardcheckJSONyes`;
+
+      // Create HMAC SHA-384 hash
+      const hmac = crypto.createHmac("sha384", hmacKey);
+      hmac.update(textToHash);
+      const hash = hmac.digest("hex");
+
+      ctx.body = {
+        hash,
+        text: textToHash
+      };
+    } catch (error) {
+      handleError(ctx, error);
+    }
   }
 });

package/server/routes/index.js

@@ -99,6 +99,14 @@ module.exports = {
         config: {
           policies: ["admin::isAuthenticatedAdmin"]
         }
+      },
+      {
+        method: "POST",
+        path: "/hash384",
+        handler: "payone.hash384",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
       }
     ]
   },
@@ -178,7 +186,15 @@ module.exports = {
           auth: false
         }
       },
-
+      {
+        method: "POST",
+        path: "/hash384",
+        handler: "payone.hash384",
+        config: {
+          policies: ["plugin::strapi-plugin-payone-provider.is-auth"],
+          auth: false
+        }
+      },
       {
         method: "POST",
         path: "/transaction-status",
@@ -187,8 +203,7 @@ module.exports = {
           // policies: ["plugin::strapi-plugin-payone-provider.is-payone-notification"],
           auth: false
         }
-      },
-
+      }
     ]
   }
 };

package/server/utils/requestBuilder.js

@@ -10,7 +10,7 @@ const buildClientRequestParams = (settings, params, logger = null) => {
     aid: settings.aid,
     mid: settings.mid,
     portalid: settings.portalid,
-    mode: settings.mode || "test",
+    mode: params.testOrder ? "test" : settings.mode || "test",
     encoding: "UTF-8",
     ...params
   };