Merge pull request #93 from mollie/chore/without-ca-2

Chore: Add Oauth

.gitignore

@@ -7,4 +7,6 @@ dist
 .idea
 build/
 processor/.env
-processor/junit-report.xml
+processor/junit-report.xml
+application/.env
+application/*/.env

CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## v1.0.4
+
+Added
+
+- Add configuration to enable authorization mode
+- OAuth middleware for securing connector endpoint
+
+## v1.0.3
+
+Added
+
+- Add docs for status checking endpoint
+
 ## v1.0.2
 
 Fixes
@@ -29,15 +42,15 @@ Added
 - Package version for requests
 - Log mechanism
 - Supporting payment methods namely:
-    - [Apple pay](https://docs.mollie.com/docs/apple-pay)
-    - [Bancontact](https://docs.mollie.com/docs/bancontact)
-    - [BLIK](https://docs.mollie.com/docs/blik)
-    - [Credit/debit card](https://docs.mollie.com/docs/cards)
-    - [Gift cards](https://docs.mollie.com/docs/giftcards)
-    - [iDEAL](https://docs.mollie.com/docs/ideal)
-    - [KBC/CBC](https://docs.mollie.com/docs/kbc)
-    - [Paypal](https://docs.mollie.com/docs/paypal)
-    - [Przelewy24](https://docs.mollie.com/docs/przelewy24)
+  - [Apple pay](https://docs.mollie.com/docs/apple-pay)
+  - [Bancontact](https://docs.mollie.com/docs/bancontact)
+  - [BLIK](https://docs.mollie.com/docs/blik)
+  - [Credit/debit card](https://docs.mollie.com/docs/cards)
+  - [Gift cards](https://docs.mollie.com/docs/giftcards)
+  - [iDEAL](https://docs.mollie.com/docs/ideal)
+  - [KBC/CBC](https://docs.mollie.com/docs/kbc)
+  - [Paypal](https://docs.mollie.com/docs/paypal)
+  - [Przelewy24](https://docs.mollie.com/docs/przelewy24)
 - Supporting for [Apply pay direct](https://docs.mollie.com/docs/direct-integration-of-apple-pay) & [Mollie card component](https://docs.mollie.com/docs/mollie-components)
 - Filter options for listing payment methods
 - Create/cancel payment via Payment API

connect.yaml

@@ -11,6 +11,10 @@ deployAs:
           description: Commercetools Composable Commerce API region
           required: true
           default: "europe-west1.gcp"
+        - key: CTP_AUTH_URL
+          description: Commercetools Auth URL
+          default: https://auth.europe-west1.gcp.commercetools.com
+          required: true
         - key: MOLLIE_CARD_COMPONENT
           description: Enable Mollie cart component (0 or 1)
           required: false
@@ -26,6 +30,10 @@ deployAs:
         - key: MOLLIE_BANK_TRANSFER_DUE_DATE
           description: Payment method Bank Transfer due date (1d -> 100d)
           default: "14d"
+        - key: AUTHENTICATION_MODE
+          description: To enable secure mode for connector requests using OAuth authentication (0 or 1)
+          required: true
+          default: "0"
       securedConfiguration:
         - key: MOLLIE_API_TEST_KEY
           description: Mollie PSP test API key

docs/Authorization.md

@@ -4,6 +4,29 @@
 
 This guide explains how to connect to the Mollie client and verify the connection. The initial connection setup will be used across various features requiring Mollie integration.
 
+## Securing connector endpoints
+
+To called our connector endpoint esp. the processor endpoint (/processor/*), a valid access token (with client credentials grant type) is required. This token must be updated into the extension destination.
+
+``` MD
+CREAT/UPDATE Extension 
+{
+    ...
+    "destination": {
+        "type": "HTTP",
+        "url": "https://efd6-115-74-115-119.ngrok-free.app/processor",
+        "authorization": {
+            "type": "AuthorizationHeader",
+            "headerValue": "***tAjsIR2!srt"
+        }
+    }
+    ...
+}
+
+```
+
+Kindly recheck your extension record if facing unauthorized error when communicating with the connector. Also the token do expire after a time, please consider to implement a scheduled job to update this token.
+
 ## Connecting to Mollie
 
 To connect to the Mollie account, you must specify the `MOLLIE_API_TEST_KEY` and `MOLLIE_API_LIVE_KEY` in your .env file. You can get the API key from your Mollie Dashboard.

processor/.env.example

@@ -4,6 +4,7 @@ CTP_CLIENT_SECRET=<YOUR_CTP_CLIENT_SECRET>
 CTP_PROJECT_KEY=<YOUR_CTP_PROJECT_KEY>
 CTP_SCOPE=<YOUR_CTP_PROJECT_SCOPE> 
 CTP_REGION=<YOUR_CTP_REGION>
+AUTHENTICATION_MODE=<YOUR_AUTHENTICATION_MODE>
 
 ## Commercetools API URLs
 CTP_AUTH_URL=https://auth.<YOUR_CTP_REGION>.commercetools.com

processor/.env.jest

@@ -5,6 +5,8 @@ CTP_CLIENT_SECRET=12345678901234567890123456789012
 CTP_PROJECT_KEY=TEST
 CTP_SCOPE=TEST
 CTP_REGION=europe-west1.gcp
+CTP_AUTH_URL=https://auth.europe-west1.gcp.commercetools.com
+AUTHENTICATION_MODE=0
 ## MOLLIE vars
 MOLLIE_PROFILE_ID=pfl_12345
 DEBUG=0