Feature/mol 487/pict 262 resolved develop

.gitignore

@@ -7,4 +7,6 @@ dist
 .idea
 build/
 processor/.env
-processor/junit-report.xml
+processor/junit-report.xml
+application/.env
+application/*/.env

CHANGELOG.md

@@ -10,6 +10,13 @@ Added
 
 - Mollie custom application initialization
 
+## v1.1.2
+
+Added
+
+- Add configuration to enable authorization mode
+- OAuth middleware for securing connector endpoint
+
 ## v1.1.1
 
 Fixes
@@ -27,6 +34,7 @@ Added
 
 Added
 
+- Add docs for status checking endpoint
 - Endpoints for checking connector statuses
 
 ## v1.0.2
@@ -54,15 +62,15 @@ Added
 - Package version for requests
 - Log mechanism
 - Supporting payment methods namely:
-    - [Apple pay](https://docs.mollie.com/docs/apple-pay)
-    - [Bancontact](https://docs.mollie.com/docs/bancontact)
-    - [BLIK](https://docs.mollie.com/docs/blik)
-    - [Credit/debit card](https://docs.mollie.com/docs/cards)
-    - [Gift cards](https://docs.mollie.com/docs/giftcards)
-    - [iDEAL](https://docs.mollie.com/docs/ideal)
-    - [KBC/CBC](https://docs.mollie.com/docs/kbc)
-    - [Paypal](https://docs.mollie.com/docs/paypal)
-    - [Przelewy24](https://docs.mollie.com/docs/przelewy24)
+  - [Apple pay](https://docs.mollie.com/docs/apple-pay)
+  - [Bancontact](https://docs.mollie.com/docs/bancontact)
+  - [BLIK](https://docs.mollie.com/docs/blik)
+  - [Credit/debit card](https://docs.mollie.com/docs/cards)
+  - [Gift cards](https://docs.mollie.com/docs/giftcards)
+  - [iDEAL](https://docs.mollie.com/docs/ideal)
+  - [KBC/CBC](https://docs.mollie.com/docs/kbc)
+  - [Paypal](https://docs.mollie.com/docs/paypal)
+  - [Przelewy24](https://docs.mollie.com/docs/przelewy24)
 - Supporting for [Apply pay direct](https://docs.mollie.com/docs/direct-integration-of-apple-pay) & [Mollie card component](https://docs.mollie.com/docs/mollie-components)
 - Filter options for listing payment methods
 - Create/cancel payment via Payment API

connect.yaml

@@ -26,6 +26,10 @@ deployAs:
         - key: MOLLIE_BANK_TRANSFER_DUE_DATE
           description: Payment method Bank Transfer due date (1d -> 100d)
           default: "14d"
+        - key: AUTHENTICATION_MODE
+          description: To enable secure mode for connector requests using OAuth authentication (0 or 1)
+          required: true
+          default: "0"
       securedConfiguration:
         - key: MOLLIE_API_TEST_KEY
           description: Mollie PSP test API key

docs/Authorization.md

@@ -4,6 +4,29 @@
 
 This guide explains how to connect to the Mollie client and verify the connection. The initial connection setup will be used across various features requiring Mollie integration.
 
+## Securing connector endpoints
+
+To called our connector endpoint esp. the processor endpoint (/processor/*), a valid access token (with client credentials grant type) is required. This token must be updated into the extension destination.
+
+``` MD
+CREAT/UPDATE Extension 
+{
+    ...
+    "destination": {
+        "type": "HTTP",
+        "url": "https://efd6-115-74-115-119.ngrok-free.app/processor",
+        "authorization": {
+            "type": "AuthorizationHeader",
+            "headerValue": "_token_"
+        }
+    }
+    ...
+}
+
+```
+
+Kindly recheck your extension record if facing unauthorized error when communicating with the connector. Also the token do expire after a time, please consider to implement a scheduled job to update this token.
+
 ## Connecting to Mollie
 
 To connect to the Mollie account, you must specify the `MOLLIE_API_TEST_KEY` and `MOLLIE_API_LIVE_KEY` in your .env file. You can get the API key from your Mollie Dashboard.

processor/.env.example

@@ -4,6 +4,7 @@ CTP_CLIENT_SECRET=<YOUR_CTP_CLIENT_SECRET>
 CTP_PROJECT_KEY=<YOUR_CTP_PROJECT_KEY>
 CTP_SCOPE=<YOUR_CTP_PROJECT_SCOPE> 
 CTP_REGION=<YOUR_CTP_REGION>
+AUTHENTICATION_MODE=<YOUR_AUTHENTICATION_MODE>
 
 ## Commercetools API URLs
 CTP_AUTH_URL=https://auth.<YOUR_CTP_REGION>.commercetools.com

processor/.env.jest

@@ -5,6 +5,7 @@ CTP_CLIENT_SECRET=12345678901234567890123456789012
 CTP_PROJECT_KEY=TEST
 CTP_SCOPE=TEST
 CTP_REGION=europe-west1.gcp
+AUTHENTICATION_MODE=0
 CTP_SESSION_AUDIENCE=https://mc.europe-west1.gcp.commercetools.com
 CTP_SESSION_ISSUER=gcp-eu
 ## MOLLIE vars