strapi-plugin-payone-provider 5.7.23 → 5.7.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "strapi-plugin-payone-provider",
-  "version": "5.7.23",
+  "version": "5.7.25",
   "description": "Strapi plugin for Payone payment gateway integration",
   "license": "MIT",
   "maintainers": [

package/server/controllers/payone.js

@@ -1,5 +1,6 @@
 "use strict";
 
+const crypto = require("crypto");
 const PLUGIN_NAME = "strapi-plugin-payone-provider";
 const { rowsToCsv, csvToRows, TRANSACTION_ATTRS } = require("../utils/csvTransactions");
 
@@ -415,4 +416,37 @@ module.exports = ({ strapi }) => ({
       handleError(ctx, error);
     }
   },
+
+  async hash384(ctx) {
+    try {
+      // Get settings
+      const settings = await getPayoneService(strapi).getSettings();
+      const hmacKey = settings?.key || "";
+
+      if (!hmacKey) {
+        ctx.throw(400, "Payone key is not configured in plugin settings");
+      }
+
+      // Validate required settings
+      if (!settings?.aid || !settings?.mid || !settings?.portalid || !settings?.mode) {
+        ctx.throw(400, "Required settings (aid, mid, portalid, mode) are not configured");
+      }
+
+      // Construct the string from settings values
+      // Format: ${aid}UTF-8${mid}${mode}${portalid}creditcardcheckJSONyes
+      const textToHash = `${settings.aid}UTF-8${settings.mid}${settings.mode}${settings.portalid}creditcardcheckJSONyes`;
+
+      // Create HMAC SHA-384 hash
+      const hmac = crypto.createHmac("sha384", hmacKey);
+      hmac.update(textToHash);
+      const hash = hmac.digest("hex");
+
+      ctx.body = {
+        hash,
+        text: textToHash
+      };
+    } catch (error) {
+      handleError(ctx, error);
+    }
+  }
 });

package/server/routes/index.js

@@ -100,7 +100,14 @@ module.exports = {
           policies: ["admin::isAuthenticatedAdmin"]
         }
       },
-      // legacy hosted-iFrame endpoints removed
+      {
+        method: "POST",
+        path: "/hash384",
+        handler: "payone.hash384",
+        config: {
+          policies: ["admin::isAuthenticatedAdmin"]
+        }
+      }
     ]
   },
 
@@ -188,6 +195,15 @@ module.exports = {
           auth: false
         }
       },
+      {
+        method: "POST",
+        path: "/hash384",
+        handler: "payone.hash384",
+        config: {
+          policies: ["plugin::strapi-plugin-payone-provider.is-auth"],
+          auth: false
+        }
+      },
       {
         method: "POST",
         path: "/transaction-status",