strapi-plugin-payone-provider 5.7.21 → 5.7.22

package/admin/src/pages/App/components/configuration/ConfigurationFields.jsx

@@ -5,6 +5,7 @@ import {
   CardBody,
   Flex,
   Typography,
+  Accordion
 } from "@strapi/design-system";
 import { Cog } from "@strapi/icons";
 import RenderInput from "../RenderInput";
@@ -39,110 +40,110 @@ const ConfigurationFields = ({
         }}
       >
         <Flex direction="column" alignItems={"stretch"} gap={6}>
-          <Flex direction="row" gap={2}>
-            <RenderInput
-              label={t("config.fields.aid", "Account ID (aid)")}
-              name="aid"
-              value={settings.aid}
-              onChange={(e) => onInputChange("aid", e.target.value)}
-              required
-              inputType="textInput"
-              tooltipContent={t("config.fields.aidTooltip", "Your Payone account ID")}
-            />
-            <RenderInput
-              label={t("config.fields.portalid", "Portal ID")}
-              name="portalid"
-              value={settings.portalid}
-              onChange={(e) => onInputChange("portalid", e.target.value)}
-              required
-              inputType="textInput"
-              tooltipContent={t("config.fields.portalidTooltip", "Your Payone portal ID")}
-            />
-          </Flex>
-          <Flex direction="row" gap={2}>
-            <RenderInput
-              label={t("config.fields.mid", "Merchant ID (mid)")}
-              name="mid"
-              value={settings.mid}
-              onChange={(e) => onInputChange("mid", e.target.value)}
-              required
-              inputType="textInput"
-              tooltipContent={t("config.fields.midTooltip", "Your Payone merchant ID")}
-            />
-            <RenderInput
-              label={t("config.fields.key", "Portal Key")}
-              name="key"
-              type="password"
-              value={settings.key}
-              onChange={(e) => onInputChange("key", e.target.value)}
-              required
-              inputType="textInput"
-              tooltipContent={t("config.fields.keyTooltip", "Your Payone portal key (will be encrypted)")}
-            />
-          </Flex>
-          <Flex direction="row" gap={2}>
-            <RenderInput
-              label={t("config.fields.domainName", "Domain Name")}
-              name="domainName"
-              value={settings.domainName}
-              onChange={(e) => onInputChange("domainName", e.target.value)}
-              inputType="textInput"
-              tooltipContent={t("config.fields.domainNameTooltip", "Your Payone domain name")}
-            />
-            <RenderInput
-              label={t("config.fields.displayName", "Display Name")}
-              name="displayName"
-              value={settings.displayName}
-              onChange={(e) => onInputChange("displayName", e.target.value)}
-              inputType="textInput"
-              tooltipContent={t("config.fields.displayNameTooltip", "Display name for payment methods (optional)")}
-            />
-          </Flex>
-          <Flex direction="row" gap={2}>
-            <RenderInput
-              label={t("config.fields.mode", "Mode")}
-              name="mode"
-              value={settings.mode || "test"}
-              onChange={(e) => onInputChange("mode", e.target.value)}
-              required
-              inputType="select"
-              tooltipContent={t("config.fields.modeTooltip", "Select the API mode")}
-              options={[
-                { value: "test", label: t("config.fields.modeTest", "Test") },
-                { value: "live", label: t("config.fields.modeLive", "Live") },
-              ]}
-            />
-            <RenderInput
-              label={t("config.fields.enable3DSecure", "Enable 3D Secure")}
-              name="enable3DSecure"
-              value={settings.enable3DSecure ? "yes" : "no"}
-              onChange={(e) =>
-                onInputChange("enable3DSecure", e.target.value === "yes")
-              }
-              required
-              inputType="select"
-              tooltipContent={t("config.fields.enable3DSecureTooltip", "Enable 3D Secure authentication for credit card payments")}
-              options={[
-                { value: "yes", label: t("config.fields.enabled", "Enabled") },
-                { value: "no", label: t("config.fields.disabled", "Disabled") },
-              ]}
-            />
-          </Flex>
-          <Flex direction="row">
-            <RenderInput
-              label={t("config.fields.apiVersion", "API Version")}
-              name="api_version"
-              value={settings.api_version || "3.10"}
-              onChange={(e) => onInputChange("api_version", e.target.value)}
-              required
-              inputType="textInput"
-              tooltipContent={t("config.fields.apiVersionTooltip", "Payone API version")}
-            />
-          </Flex>
+                  <Flex direction="row" gap={2}>
+                    <RenderInput
+                      label={t("config.fields.aid", "Account ID (aid)")}
+                      name="aid"
+                      value={settings.aid}
+                      onChange={(e) => onInputChange("aid", e.target.value)}
+                      required
+                      inputType="textInput"
+                      tooltipContent={t("config.fields.aidTooltip", "Your Payone account ID")}
+                    />
+                    <RenderInput
+                      label={t("config.fields.portalid", "Portal ID")}
+                      name="portalid"
+                      value={settings.portalid}
+                      onChange={(e) => onInputChange("portalid", e.target.value)}
+                      required
+                      inputType="textInput"
+                      tooltipContent={t("config.fields.portalidTooltip", "Your Payone portal ID")}
+                    />
+                  </Flex>
+                  <Flex direction="row" gap={2}>
+                    <RenderInput
+                      label={t("config.fields.mid", "Merchant ID (mid)")}
+                      name="mid"
+                      value={settings.mid}
+                      onChange={(e) => onInputChange("mid", e.target.value)}
+                      required
+                      inputType="textInput"
+                      tooltipContent={t("config.fields.midTooltip", "Your Payone merchant ID")}
+                    />
+                    <RenderInput
+                      label={t("config.fields.key", "Portal Key")}
+                      name="key"
+                      type="password"
+                      value={settings.key}
+                      onChange={(e) => onInputChange("key", e.target.value)}
+                      required
+                      inputType="textInput"
+                      tooltipContent={t("config.fields.keyTooltip", "Your Payone portal key (will be encrypted)")}
+                    />
+                  </Flex>
+                  <Flex direction="row" gap={2}>
+                    <RenderInput
+                      label={t("config.fields.domainName", "Domain Name")}
+                      name="domainName"
+                      value={settings.domainName}
+                      onChange={(e) => onInputChange("domainName", e.target.value)}
+                      inputType="textInput"
+                      tooltipContent={t("config.fields.domainNameTooltip", "Your Payone domain name")}
+                    />
+                    <RenderInput
+                      label={t("config.fields.displayName", "Display Name")}
+                      name="displayName"
+                      value={settings.displayName}
+                      onChange={(e) => onInputChange("displayName", e.target.value)}
+                      inputType="textInput"
+                      tooltipContent={t("config.fields.displayNameTooltip", "Display name for payment methods (optional)")}
+                    />
+                  </Flex>
+                  <Flex direction="row" gap={2}>
+                    <RenderInput
+                      label={t("config.fields.mode", "Mode")}
+                      name="mode"
+                      value={settings.mode || "test"}
+                      onChange={(e) => onInputChange("mode", e.target.value)}
+                      required
+                      inputType="select"
+                      tooltipContent={t("config.fields.modeTooltip", "Select the API mode")}
+                      options={[
+                        { value: "test", label: t("config.fields.modeTest", "Test") },
+                        { value: "live", label: t("config.fields.modeLive", "Live") },
+                      ]}
+                    />
+                    <RenderInput
+                      label={t("config.fields.enable3DSecure", "Enable 3D Secure")}
+                      name="enable3DSecure"
+                      value={settings.enable3DSecure ? "yes" : "no"}
+                      onChange={(e) =>
+                        onInputChange("enable3DSecure", e.target.value === "yes")
+                      }
+                      required
+                      inputType="select"
+                      tooltipContent={t("config.fields.enable3DSecureTooltip", "Enable 3D Secure authentication for credit card payments")}
+                      options={[
+                        { value: "yes", label: t("config.fields.enabled", "Enabled") },
+                        { value: "no", label: t("config.fields.disabled", "Disabled") },
+                      ]}
+                    />
+                  </Flex>
+                  <Flex direction="row">
+                    <RenderInput
+                      label={t("config.fields.apiVersion", "API Version")}
+                      name="api_version"
+                      value={settings.api_version || "3.10"}
+                      onChange={(e) => onInputChange("api_version", e.target.value)}
+                      required
+                      inputType="textInput"
+                      tooltipContent={t("config.fields.apiVersionTooltip", "Payone API version")}
+                    />
+                  </Flex>
         </Flex>
 
-        <Flex direction="column" alignItems="stretch" gap={4} marginTop={6}>
-          <Typography variant="pi" textColor="neutral600" marginBottom={4}>
+        <Flex direction="column" alignItems="stretch" height={"100%"} gap={4} marginTop={6}> 
+          <Typography variant="pi" textColor="neutral600" marginBottom={8}>
             {t("config.paymentMethods.title", "Enable or disable payment methods for your Payone integration")}
           </Typography>
 
@@ -194,7 +195,7 @@ const ConfigurationFields = ({
             labelStyle={{ fontSize: "16px" }}
             tooltipContent={t("config.paymentMethods.applePayTooltip", "Enable or disable Apple Pay payments")}
           />
-          <RenderInput
+          {/* <RenderInput
             label={t("config.paymentMethods.sofort", "Sofort Banking")}
             name="enableSofort"
             value={settings.enableSofort === true}
@@ -205,7 +206,7 @@ const ConfigurationFields = ({
             labelDirection="row"
             labelStyle={{ fontSize: "16px" }}
             tooltipContent={t("config.paymentMethods.sofortTooltip", "Enable or disable Sofort Banking payments")}
-          />
+          /> */}
           <RenderInput
             label={t("config.paymentMethods.sepa", "SEPA Direct Debit")}
             name="enableSepaDirectDebit"
@@ -219,7 +220,7 @@ const ConfigurationFields = ({
             tooltipContent={t("config.paymentMethods.sepaTooltip", "Enable or disable SEPA Direct Debit payments")}
           />
 
-          <Flex direction="row" gap={2} marginTop={10}>
+          <Flex direction="row" gap={2} style={{marginTop: "8rem"}}>
             <Button
               variant="secondary"
               startIcon={<Cog />}

package/admin/src/pages/App/components/transaction-history/TransactionTable.jsx

@@ -7,6 +7,7 @@ import {
   Checkbox,
   SimpleMenu,
   MenuItem,
+  Accordion,
 } from "@strapi/design-system";
 import { Table, Pagination } from "@strapi/strapi/admin";
 import { ChevronDownIcon, ChevronUpIcon } from "../icons";
@@ -189,12 +190,21 @@ const TransactionTable = () => {
 
   return (
     <Flex direction="column" alignItems="stretch" gap={4} minHeight={"800px"}>
-      <FiltersPanel
-        filters={filters}
-        handleFiltersChange={handleFiltersChange}
-        loadTransactionHistory={loadTransactionHistory}
-      />
-
+   
+    <Accordion.Root type="multiple">
+      <Accordion.Item value="filters">
+        <Accordion.Header>
+          <Accordion.Trigger>Filters</Accordion.Trigger>
+        </Accordion.Header>
+        <Accordion.Content style={{padding:"16px"}}>
+          <FiltersPanel
+            filters={filters}
+            handleFiltersChange={handleFiltersChange}
+            loadTransactionHistory={loadTransactionHistory}
+          />
+        </Accordion.Content>
+      </Accordion.Item>
+    </Accordion.Root>
       <Flex
         justifyContent="flex-end"
         gap={3}
@@ -211,24 +221,32 @@ const TransactionTable = () => {
           {toggleableHeaders.map((header) => (
             <MenuItem
               key={header.name}
-              to={undefined}
-              href={undefined}
-              onClick={() => toggleColumn(header.name)}
+              onClick={(e) => {
+                e?.preventDefault?.();
+                toggleColumn(header.name);
+              }}
             >
               <Flex alignItems="center" gap={2}>
-                <Checkbox
-                  name={`column-${header.name}`}
-                  checked={visibleColumns[header.name]}
-                  onCheckedChange={() => toggleColumn(header.name)}
-                />
+                <span
+                  onClick={(e) => {
+                    e?.stopPropagation?.();
+                  }}
+                >
+                  <Checkbox
+                    name={`column-${header.name}`}
+                    checked={visibleColumns[header.name]}
+                    onCheckedChange={() => toggleColumn(header.name)}
+                  />
+                </span>
                 <span>{header.label}</span>
               </Flex>
             </MenuItem>
           ))}
           <MenuItem
-            to={undefined}
-            href={undefined}
-            onClick={showAllColumns}
+            onClick={(e) => {
+              e?.preventDefault?.();
+              showAllColumns();
+            }}
           >
             {t("table.showAllColumns", "Show all columns")}
           </MenuItem>

package/admin/src/pages/hooks/useSettings.js

@@ -11,6 +11,13 @@ const useSettings = () => {
     key: "",
     mode: "test",
     api_version: "3.10",
+    serverApiMerchantId: "",
+    serverApiKeyId: "",
+    serverApiSecret: "",
+    serverApiVersionPath: "/v2",
+    defaultCountryCode: "DE",
+    defaultCurrencyCode: "EUR",
+    defaultLocale: "de_DE",
     enable3DSecure: false,
     enableCreditCard: false,
     enablePayPal: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "strapi-plugin-payone-provider",
-  "version": "5.7.21",
+  "version": "5.7.22",
   "description": "Strapi plugin for Payone payment gateway integration",
   "license": "MIT",
   "maintainers": [

package/server/config/index.js

@@ -11,6 +11,19 @@ module.exports = {
       key: "",
       mode: "test",
       api_version: "3.10",
+      // PAYONE Server API (Hosted Tokenization / Server-to-server)
+      // merchantId/PSPID used in REST endpoints: /v2/{merchantId}/...
+      serverApiMerchantId: "",
+      // API Key ID + Secret used for HMAC auth (GCS v1HMAC)
+      serverApiKeyId: "",
+      serverApiSecret: "",
+      // Keep configurable, default PAYONE REST version path
+      serverApiVersionPath: "/v2",
+
+      // Defaults (Germany)
+      defaultCountryCode: "DE",
+      defaultCurrencyCode: "EUR",
+      defaultLocale: "de_DE",
       merchantName: "",
       displayName: "",
       domainName: "",
@@ -40,6 +53,14 @@ module.exports = {
             .string()
             .matches(/^\d+\.\d+$/)
             .defined(),
+          serverApiMerchantId: yup.string().optional(),
+          serverApiKeyId: yup.string().optional(),
+          serverApiSecret: yup.string().optional(),
+          serverApiVersionPath: yup.string().optional(),
+
+          defaultCountryCode: yup.string().optional(),
+          defaultCurrencyCode: yup.string().optional(),
+          defaultLocale: yup.string().optional(),
           merchantName: yup.string().optional(),
           displayName: yup.string().optional(),
           domainName: yup.string().optional(),

package/server/controllers/payone.js

@@ -1,6 +1,5 @@
 "use strict";
 
-const crypto = require("crypto");
 const PLUGIN_NAME = "strapi-plugin-payone-provider";
 const { rowsToCsv, csvToRows, TRANSACTION_ATTRS } = require("../utils/csvTransactions");
 
@@ -8,6 +7,10 @@ const getPayoneService = (strapi) => {
   return strapi.plugin(PLUGIN_NAME).service("payone");
 };
 
+const getNewHostedTokenizationService = (strapi) => {
+  return strapi.plugin(PLUGIN_NAME).service("newHostedTokenizationService");
+};
+
 const buildFiltersFromQuery = (rawFilters = {}) => {
   const filters = {};
   if (rawFilters && typeof rawFilters === "object") {
@@ -45,6 +48,9 @@ const hideKey = (settings) => {
   if (settings && settings.key) {
     settings.key = "***HIDDEN***";
   }
+  if (settings && settings.serverApiSecret) {
+    settings.serverApiSecret = "***HIDDEN***";
+  }
   return settings;
 };
 
@@ -71,7 +77,6 @@ module.exports = ({ strapi }) => ({
           displayName: settings?.displayName || null,
           portalid: settings?.portalid || null,
           accountId: settings?.aid || null,
-          portalKey: settings?.key || null,
           paymentMethods: {
             creditCard: settings?.enableCreditCard,
             paypal: settings?.enablePayPal,
@@ -100,6 +105,9 @@ module.exports = ({ strapi }) => ({
       if (bodyData.key === "***HIDDEN***" || !bodyData.key) {
         bodyData.key = currentSettings?.key;
       }
+      if (bodyData.serverApiSecret === "***HIDDEN***" || !bodyData.serverApiSecret) {
+        bodyData.serverApiSecret = currentSettings?.serverApiSecret;
+      }
 
       const settings = await getPayoneService(strapi).updateSettings(bodyData);
       ctx.body = { ...hideKey(settings) };
@@ -394,36 +402,17 @@ module.exports = ({ strapi }) => ({
     ctx.type = "text/plain";
   },
 
-  async hash384(ctx) {
+  async hostedTokenizationJwt(ctx) {
     try {
-      // Get settings
-      const settings = await getPayoneService(strapi).getSettings();
-      const hmacKey = settings?.key || "";
-
-      if (!hmacKey) {
-        ctx.throw(400, "Payone key is not configured in plugin settings");
-      }
-
-      // Validate required settings
-      if (!settings?.aid || !settings?.mid || !settings?.portalid || !settings?.mode) {
-        ctx.throw(400, "Required settings (aid, mid, portalid, mode) are not configured");
-      }
-
-      // Construct the string from settings values
-      // Format: ${aid}UTF-8${mid}${mode}${portalid}creditcardcheckJSONyes
-      const textToHash = `${settings.aid}UTF-8${settings.mid}${settings.mode}${settings.portalid}creditcardcheckJSONyes`;
-
-      // Create HMAC SHA-384 hash
-      const hmac = crypto.createHmac("sha384", hmacKey);
-      hmac.update(textToHash);
-      const hash = hmac.digest("hex");
-
+      const result = await getNewHostedTokenizationService(strapi).createHostedTokenizationJwt();
       ctx.body = {
-        hash,
-        text: textToHash
+        data: {
+          token: result?.token || null,
+          expirationDate: result?.expirationDate || null,
+        },
       };
     } catch (error) {
       handleError(ctx, error);
     }
-  }
+  },
 });

package/server/routes/index.js

@@ -100,14 +100,7 @@ module.exports = {
           policies: ["admin::isAuthenticatedAdmin"]
         }
       },
-      {
-        method: "POST",
-        path: "/hash384",
-        handler: "payone.hash384",
-        config: {
-          policies: ["admin::isAuthenticatedAdmin"]
-        }
-      }
+      // legacy hosted-iFrame endpoints removed
     ]
   },
 
@@ -188,8 +181,8 @@ module.exports = {
       },
       {
         method: "POST",
-        path: "/hash384",
-        handler: "payone.hash384",
+        path: "/hosted-tokenization/jwt",
+        handler: "payone.hostedTokenizationJwt",
         config: {
           policies: ["plugin::strapi-plugin-payone-provider.is-auth"],
           auth: false

package/server/services/index.js

@@ -1,7 +1,9 @@
 "use strict";
 
 const payone = require("./payone");
+const newHostedTokenizationService = require("./newHostedTokenizationService");
 
 module.exports = {
-  payone
+  payone,
+  newHostedTokenizationService,
 };

package/server/services/newHostedTokenizationService.js

@@ -0,0 +1,59 @@
+"use strict";
+
+const axios = require("axios");
+const crypto = require("crypto");
+const settingsService = require("./settingsService");
+
+const PAYONE_POST_GATEWAY_URL = "https://api.pay1.de/post-gateway/";
+
+function sha384HexLower(value) {
+  return crypto.createHash("sha384").update(String(value), "utf8").digest("hex").toLowerCase();
+}
+
+function portalKeyToJwtKey(portalKeyOrHash) {
+  const key = String(portalKeyOrHash || "").trim();
+  if (/^[0-9a-f]{96}$/i.test(key)) return key.toLowerCase();
+  return sha384HexLower(key);
+}
+
+async function getSettingsOrThrow(strapi) {
+  const settings = await settingsService.getSettings(strapi);
+  if (!settings) {
+    const err = new Error("PAYONE plugin settings missing");
+    err.status = 400;
+    throw err;
+  }
+  return settings;
+}
+
+async function createHostedTokenizationJwt(strapi) {
+  const settings = await getSettingsOrThrow(strapi);
+
+  const { mid, portalid, key } = settings;
+  if (!mid || !portalid || !key) {
+    const err = new Error("Missing required settings for getJWT (mid, portalid, key)");
+    err.status = 400;
+    throw err;
+  }
+
+  const form = new URLSearchParams();
+  form.append("request", "getJWT");
+  form.append("mid", String(mid));
+  form.append("portalid", String(portalid));
+  form.append("key", portalKeyToJwtKey(key));
+
+  const response = await axios.post(PAYONE_POST_GATEWAY_URL, form.toString(), {
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      Accept: "application/json",
+    },
+    timeout: 30000,
+  });
+
+  return response.data;
+}
+
+module.exports = ({ strapi }) => ({
+  createHostedTokenizationJwt: async () => createHostedTokenizationJwt(strapi),
+});
+

package/server/services/payone.js

@@ -73,6 +73,6 @@ module.exports = ({ strapi }) => ({
   // TransactionStatus Notification
   async processTransactionStatus(notificationData) {
     return await transactionStatusService.processTransactionStatus(strapi, notificationData);
-  }
+  },
 
 });

package/server/services/settingsService.js

@@ -35,7 +35,18 @@ const updateSettings = async (strapi, settings) => {
 };
 
 const validateSettings = (settings) => {
-  return !!(settings && settings.aid && settings.portalid && settings.key);
+  // Legacy post-gateway (PAY1): requires aid/portalid/key
+  const hasPostGateway = !!(settings && settings.aid && settings.portalid && settings.key);
+
+  // PAYONE Server API (Hosted Tokenization / REST): requires merchantId + apiKeyId + apiSecret
+  const hasServerApi = !!(
+    settings &&
+    (settings.serverApiMerchantId || settings.mid) &&
+    settings.serverApiKeyId &&
+    settings.serverApiSecret
+  );
+
+  return hasPostGateway || hasServerApi;
 };
 
 module.exports = {

package/server/utils/sanitize.js

@@ -14,7 +14,20 @@ const SENSITIVE_KEYS = [
   "accessname",
   "token",
   "redirecturl",
-  "Identifier"
+  "Identifier",
+  "pseudocardpan",
+  "aid",
+  "mid",
+  "portalid",
+  "portalId",
+  "creditcardtoken",
+  "creditcardtokenid",
+  "creditcardtokenvalue",
+  "creditcardtokentype",
+  "creditcardtokenexpiry",
+  "creditcardtokencvv",
+  "creditcardtokenholder",
+  "creditcardtokenbank",
 ];
 
 const maskValue = (val) => {