various modular fixes

Add toTransferXML method
Add encryptedOrderData method
Clean some lines

.eslintrc

@@ -1,5 +1,5 @@
 {
-	"extends": "airbnb",
+	"extends": "airbnb-base",
 	"env": {
 		"node": true
 	},

LICENSE

@@ -1,21 +1,674 @@
-MIT License
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
 
-Copyright (c) 2018 eCollect
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
 
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
+                            Preamble
 
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
+  The GNU General Public License is a free, copyleft license for
+software and other kinds of works.
 
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+the GNU General Public License is intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.  We, the Free Software Foundation, use the
+GNU General Public License for most of our software; it applies also to
+any other work released this way by its authors.  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  To protect your rights, we need to prevent others from denying you
+these rights or asking you to surrender the rights.  Therefore, you have
+certain responsibilities if you distribute copies of the software, or if
+you modify it: responsibilities to respect the freedom of others.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must pass on to the recipients the same
+freedoms that you received.  You must make sure that they, too, receive
+or can get the source code.  And you must show them these terms so they
+know their rights.
+
+  Developers that use the GNU GPL protect your rights with two steps:
+(1) assert copyright on the software, and (2) offer you this License
+giving you legal permission to copy, distribute and/or modify it.
+
+  For the developers' and authors' protection, the GPL clearly explains
+that there is no warranty for this free software.  For both users' and
+authors' sake, the GPL requires that modified versions be marked as
+changed, so that their problems will not be attributed erroneously to
+authors of previous versions.
+
+  Some devices are designed to deny users access to install or run
+modified versions of the software inside them, although the manufacturer
+can do so.  This is fundamentally incompatible with the aim of
+protecting users' freedom to change the software.  The systematic
+pattern of such abuse occurs in the area of products for individuals to
+use, which is precisely where it is most unacceptable.  Therefore, we
+have designed this version of the GPL to prohibit the practice for those
+products.  If such problems arise substantially in other domains, we
+stand ready to extend this provision to those domains in future versions
+of the GPL, as needed to protect the freedom of users.
+
+  Finally, every program is threatened constantly by software patents.
+States should not allow patents to restrict development and use of
+software on general-purpose computers, but in those that do, we wish to
+avoid the special danger that patents applied to a free program could
+make it effectively proprietary.  To prevent this, the GPL assures that
+patents cannot be used to render the program non-free.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Use with the GNU Affero General Public License.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU Affero General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the special requirements of the GNU Affero General Public License,
+section 13, concerning interaction through a network will apply to the
+combination as such.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If the program does terminal interaction, make it output a short
+notice like this when it starts in an interactive mode:
+
+    <program>  Copyright (C) <year>  <name of author>
+    This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, your program's commands
+might be different; for a GUI interface, you would use an "about box".
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU GPL, see
+<http://www.gnu.org/licenses/>.
+
+  The GNU General Public License does not permit incorporating your program
+into proprietary programs.  If your program is a subroutine library, you
+may consider it more useful to permit linking proprietary applications with
+the library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.  But first, please read
+<http://www.gnu.org/philosophy/why-not-lgpl.html>.

README.md

@@ -1,20 +1,24 @@
-# node-ebics-client v0.0.3
+# node-ebics-client v0.0.35
 ---
 
-Pure node.js ( >=8 ) implementation of the [EBICS](https://en.wikipedia.org/wiki/Electronic_Banking_Internet_Communication_Standard) (Electronic Banking Internet Communication).
+Pure node.js ( >=8 ) implementation of [EBICS](https://en.wikipedia.org/wiki/Electronic_Banking_Internet_Communication_Standard) ( Electronic Banking Internet Communication ).
+
+The client is aimed to be 100% [ISO 20022](https://www.iso20022.org) compliant, and supports the complete initializations process ( INI, HIA, HPB orders ) and HTML letter generation.
 
-The client is aimed to be 100% ISO 20022 complient, and supports complete initilizations process ( INI, HIA, HPB orders ) and HTML letter generation.
 
 ## Supported Banks
-The client is tested and verified to work with the following banks:
-* Credit Suisse
-* Zürcher Kantonalbank
-* Raiffeisenbank
+The client is currently tested and verified to work with the following banks:
+
+* [Credit Suisse (Schweiz) AG](https://www.credit-suisse.com/ch/en.html)
+* [Zürcher Kantonalbank](https://www.zkb.ch/en/lg/ew.html)
+* [Raiffeisen Schweiz](https://www.raiffeisen.ch/rch/de.html)
 
 
 ## Inspiration
 
-A lot of the concepts in this library are inspired from the [EPICS](https://github.com/railslove/epics) library.
+The basic concept of this library was inspired by the [EPICS](https://github.com/railslove/epics) library from the Railslove Team.
+
 
 ## Copyright
-Copyright (c) 2017 eCollect.
+
+Copyright: eCollect AG, 2018.

index.js

@@ -1,4 +1,5 @@
 'use strict';
 
 const Client = require('./lib/Client');
-module.exports = Client;
+
+module.exports = Client;

lib/BankLetter.js

@@ -1,66 +1,55 @@
 'use strict';
 
-const fs = require('fs');
-
-const moment     = require('moment');
+const moment = require('moment');
 const handlebars = require('handlebars');
-const BN         = require("bn.js");
+const BN = require('bn.js');
 
+const registerHelpers = () => {
+	handlebars.registerHelper('today', () => moment().format('DD.MM.YYYY'));
+
+	handlebars.registerHelper('now', () => moment().format('HH:mm:ss'));
+
+	handlebars.registerHelper('keyExponentBits', k => Buffer.byteLength(new BN(k.key.keyPair.e).toBuffer()) * 8);
+
+	handlebars.registerHelper('keyModulusBits', k => k.key.getKeySize());
+	// return Buffer.byteLength(new BN(k.key.keyPair.e).toBuffer()) * 8;
+
+	handlebars.registerHelper('keyExponent', k => k.e());
+
+	handlebars.registerHelper('keyModulus', k => k.n().toUpperCase().match(/.{1,2}/g).join(' '));
+
+	handlebars.registerHelper('sha256', (k) => {
+		const digest = Buffer.from(k.publicDigest(), 'base64').toString('HEX');
+
+		return digest.toUpperCase().match(/.{1,2}/g).join(' ');
+	});
+};
 module.exports = class BankLetter {
-	constructor(client, bankName) {
-		this.client         = client;
-		this.bankName       = bankName;
-		this.pathToTemplate = './app/ebics/ini.hbs';
-	};
+	constructor({
+		client,
+		bankName,
+		template,
+	}) {
+		this.client = client;
+		this.bankName = bankName;
+		this.template = template;
+	}
 
-	_registerHelpers() {
-		handlebars.registerHelper("today", () => {
-			return moment().format('DD.MM.YYYY');
-		});
-
-		handlebars.registerHelper("now", () => {
-			return moment().format('HH:mm:ss');
-		});
-
-		handlebars.registerHelper("keyExponentBits", (k) => {
-			return Buffer.byteLength(new BN(k.key.keyPair.e).toBuffer()) * 8;
-		});
-
-		handlebars.registerHelper("keyModulusBits", (k) => {
-			return k.key.getKeySize();
-			// return Buffer.byteLength(new BN(k.key.keyPair.e).toBuffer()) * 8;
-		});
-
-		handlebars.registerHelper("keyExponent", (k) => {
-			return k.e();
-		});
-
-		handlebars.registerHelper("keyModulus", (k) => {
-			return k.n().toUpperCase().match(/.{1,2}/g).join(' ');
-		});
-
-		handlebars.registerHelper("sha256", (k) => {
-			const digest = Buffer(k.publicDigest(), 'base64').toString('HEX');
-
-			return digest.toUpperCase().match(/.{1,2}/g).join(' ');
-		});
-	};
 
 	generate() {
-		this._registerHelpers();
+		registerHelpers();
 
-		const str   = fs.readFileSync(this.pathToTemplate).toString();
-		const templ = handlebars.compile(str);
+		const templ = handlebars.compile(this.template);
 
 		const data = {
-			bankName : this.bankName,
-			userId   : this.client.userId,
+			bankName: this.bankName,
+			userId: this.client.userId,
 			partnerId: this.client.partnerId,
-			A006     : this.client.a(),
-			X002     : this.client.x(),
-			E002     : this.client.e(),
+			A006: this.client.a(),
+			X002: this.client.x(),
+			E002: this.client.e(),
 		};
 
 		return templ(data);
 	}
-}
+};

lib/Client.js

@@ -1,26 +1,30 @@
 'use strict';
 
-const fs       		= require("fs");
-const crypto   		= require("crypto");
-const $request 		= require("request");
+const fs = require('fs');
+const path = require('path');
 
-const BN            = require('bn.js');
-const xpath         = require("xpath");
-const NodeRSA 		= require("node-rsa");
+const crypto = require('crypto');
+const $request = require('request');
 
+const BN = require('bn.js');
+const xpath = require('xpath');
+const NodeRSA 		= require('node-rsa');
+const { DOMParser } = require('xmldom');
 
-const Key           = require('./Key');
-const XMLSign       = require('./middleware/XMLSign');
+const Key = require('./Key');
+const XMLSign = require('./middleware/XMLSign');
 const ParseResponse = require('./middleware/ParseResponse');
-const BankLetter    = require('./BankLetter');
-const EBICSINI      = require('./orders/INI');
-const EBICSHIA      = require('./orders/HIA');
-const EBICSHPB      = require('./orders/HPB');
-const EBICSHKD      = require('./orders/HKD');
-const EBICSHAA      = require('./orders/HAA');
-const EBICSHAC      = require('./orders/HAC');
-const EBICSHTD      = require('./orders/HTD');
-const EBICSC52		= require('./orders/C52');
+const BankLetter = require('./BankLetter');
+const EBICSINI = require('./orders/INI');
+const EBICSHIA = require('./orders/HIA');
+const EBICSHPB = require('./orders/HPB');
+const EBICSHKD = require('./orders/HKD');
+const EBICSHAA = require('./orders/HAA');
+const EBICSHAC = require('./orders/HAC');
+const EBICSHTD = require('./orders/HTD');
+const EBICSC52 = require('./orders/C52');
+
+const defaultIniTemplatePath = path.join(__dirname, '../templates/ini.hbs');
 
 const utils = {
 	exponent: {
@@ -31,31 +35,31 @@ const utils = {
 		// str = AQAB => 65537
 		fromBase64(str) {
 			return new BN(Buffer.from(str, 'base64'), 2).toNumber();
-		}
-	}
-}
+		},
+	},
+};
 module.exports = class Client {
-    constructor(keysContent, passphrase, url, hostId, userId, partnerId) {
-        this.keysContent      = keysContent;
-        this.passphrase       = passphrase;
-        this.url              = url;
-        this.hostId           = hostId;
-        this.userId           = userId;
-        this.partnerId        = partnerId;
-        this.encryptAlgorithm = 'aes-256-cbc';
-        this.keys             = keysContent ? this.extractKeys() : {};
-    };
+	constructor(keysContent, passphrase, url, hostId, userId, partnerId) {
+		this.keysContent = keysContent;
+		this.passphrase = passphrase;
+		this.url = url;
+		this.hostId = hostId;
+		this.userId = userId;
+		this.partnerId = partnerId;
+		this.encryptAlgorithm = 'aes-256-cbc';
+		this.keys = keysContent ? this.extractKeys() : {};
+	}
 
-    a() {
-        return this.keys["A006"];
-    };
+	a() {
+		return this.keys.A006;
+	}
 
-    e() {
-        return this.keys["E002"];
-    };
+	e() {
+		return this.keys.E002;
+	}
 
-    x() {
-        return this.keys["X002"];
+	x() {
+		return this.keys.X002;
 	}
 
 	bankX() {
@@ -67,66 +71,74 @@ module.exports = class Client {
 	}
 
 	encrypt(data) {
-		const cipher    = crypto.createCipher(this.encryptAlgorithm, this.passphrase);
+		const cipher = crypto.createCipher(this.encryptAlgorithm, this.passphrase);
 		const encrypted = cipher.update(data, 'utf8', 'hex') + cipher.final('hex');
 
 		return Buffer.from(encrypted).toString('base64');
-	};
+	}
 
 	decrypt(data) {
-		data = (new Buffer(data, 'base64')).toString();
+		data = (new Buffer(data, 'base64')).toString(); // eslint-disable-line no-buffer-constructor
 
-		const decipher  = crypto.createDecipher(this.encryptAlgorithm, this.passphrase);
+		const decipher = crypto.createDecipher(this.encryptAlgorithm, this.passphrase);
 		const decrypted = decipher.update(data, 'hex', 'utf8') + decipher.final('utf8');
 
 		return decrypted;
-	};
+	}
 
-    static setup(passphrase, url, hostId, userId, partnerId, keysize = 2048) {
+	static setup(passphrase, url, hostId, userId, partnerId, keysize = 2048) {
 		const client = new Client(null, passphrase, url, hostId, userId, partnerId);
 
-        for (let key in {A006: '', X002: '', E002: ''}) {
-		 	client.keys[key] = new Key(new NodeRSA({ b: keysize }));
-		}
+		Object.keys({ A006: '', X002: '', E002: '' }).forEach((key) => {
+			client.keys[key] = new Key(new NodeRSA({ b: keysize }));
+		});
+		// for (const key in Object.keys({ A006: '', X002: '', E002: '' }))
+		// 	client.keys[key] = new Key(new NodeRSA({ b: keysize }));
+
 
 		return client;
-    };
+	}
 
-	saveIniLetter(bankName, path) {
-		const letter = new BankLetter(this, bankName);
+	saveIniLetter(bankName, target, template) {
+		const letter = new BankLetter({
+			client: this,
+			bankName,
+			template: template || fs.readFileSync(defaultIniTemplatePath, { encoding: 'utf8' }),
+		});
 
 		try {
-			fs.writeFileSync(path, letter.generate());
-			console.log("Data written to file");
+			fs.writeFileSync(target, letter.generate());
 		} catch (error) {
-			console.log(error);
 			throw error;
 		}
-	};
+	}
 
-    saveKeys(path) {
-        const data = {};
+	saveKeys(target) {
+		const data = {};
 
-        for (let key in this.keys) {
-            data[key] = this.encrypt(this.keys[key].toPem());
-		};
+		Object.keys(this.keys).forEach((key) => {
+			data[key] = this.encrypt(this.keys[key].toPem());
+		});
+		// for (const key in this.keys)
+		// 	data[key] = this.encrypt(this.keys[key].toPem());
 
 		try {
-			fs.writeFileSync(path, JSON.stringify(data));
-			console.log("Data written to file");
-		} catch(error) {
-			console.log(error);
+			fs.writeFileSync(target, JSON.stringify(data));
+		} catch (error) {
 			throw error;
 		}
-	};
+	}
 
 	extractKeys() {
-		const keys     = {};
+		const keys = {};
 		const jsonData = JSON.parse(this.keysContent);
 
-		for (let key in jsonData) {
+		Object.keys(jsonData).forEach((key) => {
 			keys[key] = new Key(this.decrypt(jsonData[key]));
-		}
+		});
+		// for (const key in jsonData)
+		// 	keys[key] = new Key(this.decrypt(jsonData[key]));
+
 
 		return keys;
 	}
@@ -134,68 +146,71 @@ module.exports = class Client {
 	async download(order) {
 		const res = await this.ebicsRequest(order.toXML());
 
-		const ttt = res.toXML();										// keep this for debugging purposes
+		const ttt = res.toXML();										// TODO: keep this for debugging purposes
 
 		order.transactionId = res.transactionId();
 
 		if (res.isSegmented() && res.isLastSegment()) {
 			const receipt = await this.ebicsRequest(order.toReceiptXML());
 
-			const receiptXML = order.toReceiptXML(); 					// keep this for debugging purposes
-			const rX = receipt.toXML(); 								// keep this for debugging purposes
+			const receiptXML = order.toReceiptXML(); 					// TODO: keep this for debugging purposes
+			const rX = receipt.toXML(); 								// TODO: keep this for debugging purposes
 		}
 
 		return res.orderData();
-	};
+	}
 
-	async downloadAndUnzip(order) {
+	async upload(order) {
+		let res = await this.ebicsRequest(order.toXML());
+		order.transactionId = res.transactionId();
+		// const orderId = res.orderId();
+
+		res = await this.ebicsRequest(order.toTransferXML());
+
+		return res.transactionId();
+	}
+
+	async downloadAndUnzip(order) { // eslint-disable-line
 
 	}
 
 	ebicsRequest(order) {
 		return new Promise((resolve, reject) => {
-			const bbb = XMLSign.go(this, order);
 			$request.post({
-				url    : this.url,
-				body   : bbb,
-				headers: { 'Content-Type': 'text/xml' }
-			}, (err, res, data) => {
-				const b    = data; 										// keep this for debugging purposes
-				const r    = ParseResponse.go(this, data); 				// keep this for debugging purposes
-				const rXML = r.toXML(); 								// keep this for debugging purposes
-
-				return err ? reject(err): resolve(ParseResponse.go(this, data));
-			});
+				url: this.url,
+				body: XMLSign.go(this, order),
+				headers: { 'content-type': 'text/xml;charset=UTF-8' },
+			}, (err, res, data) => (err ? reject(err) : resolve(ParseResponse.go(this, data))));
 		});
-	};
+	}
 
-    async INI() {
+	async INI() {
 		return this.ebicsRequest((new EBICSINI(this)).toXML());
-    };
+	}
 
-    async HIA() {
+	async HIA() {
 		return this.ebicsRequest((new EBICSHIA(this)).toXML());
-	};
+	}
 
 	async HPB() {
 		const data = await this.download(new EBICSHPB(this));
 
-		const doc      = new DOMParser().parseFromString(data, 'text/xml');
-		const sel      = xpath.useNamespaces({'xmlns': "urn:org:ebics:H004"});
-		const keyNodes = sel("//xmlns:PubKeyValue", doc);
+		const doc = new DOMParser().parseFromString(data, 'text/xml');
+		const sel = xpath.useNamespaces({ xmlns: 'urn:org:ebics:H004' });
+		const keyNodes = sel('//xmlns:PubKeyValue', doc);
 		// console.log(keyNodes);
 
-		function xmlLastChild (node) {
+		function xmlLastChild(node) {
 			let y = node.lastChild;
 
-			while (y.nodeType != 1) y = y.previousSibling;
+			while (y.nodeType !== 1) y = y.previousSibling;
 
 			return y;
-		};
+		}
 
 		for (let i = 0; i < keyNodes.length; i++) {
-			const type     = xmlLastChild(keyNodes[i].parentNode).textContent;
-			const modulus  = xpath.select("//*[local-name(.)='Modulus']", keyNodes[i])[0].textContent;
+			const type = xmlLastChild(keyNodes[i].parentNode).textContent;
+			const modulus = xpath.select("//*[local-name(.)='Modulus']", keyNodes[i])[0].textContent;
 			const exponent = xpath.select("//*[local-name(.)='Exponent']", keyNodes[i])[0].textContent;
 
 			const mod = new BN(Buffer.from(modulus, 'base64'), 2).toBuffer();
@@ -209,23 +224,23 @@ module.exports = class Client {
 		}
 
 		return [this.bankX(), this.bankE()];
-	};
+	}
 
 	HKD() {
 		return this.download(new EBICSHKD(this));
-	};
+	}
 
 	HAA() {
 		return this.download(new EBICSHAA(this));
-	};
+	}
 
 	HTD() {
 		return this.download(new EBICSHTD(this));
-	};
+	}
 
 	HAC(from = null, to = null) {
 		return this.download(new EBICSHAC(this, from, to));
-	};
+	}
 
 	C52(from, to) {
 		return this.downloadAndUnzip(new EBICSC52(this, from, to));

lib/Key.js

@@ -2,37 +2,75 @@
 
 const crypto = require('crypto');
 
-const NodeRSA = require("node-rsa");
-const BN      = require('bn.js');
+const BN = require('bn.js');
+const NodeRSA = require('node-rsa');
+
+const mgf1 = require('./MGF1');
 
 module.exports = class Key {
-    constructor(encodedKey, passphrase = null) {
-        if (encodedKey instanceof NodeRSA) {
-            this.key = encodedKey
-        } else {
-            this.key = new NodeRSA(encodedKey);
-        }
-	};
+	constructor(encodedKey/* , passphrase = null */) {
+		this.key = (encodedKey instanceof NodeRSA) ? encodedKey : new NodeRSA(encodedKey);
+	}
 
 	publicDigest() {
-		const str = [this.e().replace(/^(0+)/g, ''), this.n().replace(/^(0+)/g, '')].map((x) => x.toLowerCase()).join(' ');
+		const str = [this.e().replace(/^(0+)/g, ''), this.n().replace(/^(0+)/g, '')].map(x => x.toLowerCase()).join(' ');
 
 		return crypto.createHash('sha256').update(str).digest('base64').trim();
-	};
-
-	publicEncrypt(str) {
-		return this.key.encrypt(str);
 	}
 
-    n() {
-        return this.key.exportKey("components-public").n.toString("hex", 1);
-	};
+	publicEncrypt(buf) {
+		return crypto.publicEncrypt({
+			key: this.toPem(),
+			padding: crypto.constants.RSA_PKCS1_PADDING,
+		}, buf);
+	}
+
+	n() {
+		return this.key.exportKey('components-public').n.toString('hex', 1);
+	}
 
 	e() {
-		return new BN(this.key.exportKey("components-public").e).toBuffer().toString('hex');
-	};
+		return new BN(this.key.exportKey('components-public').e).toBuffer().toString('hex');
+	}
 
 	toPem() {
-		return this.key.isPrivate() ? this.key.exportKey("pkcs1-private-pem") : this.key.exportKey("pkcs8-public-pem");
+		return this.key.isPrivate() ? this.key.exportKey('pkcs1-private-pem') : this.key.exportKey('pkcs8-public-pem');
+	}
+
+	sign(msg, salt = crypto.randomBytes(32)) {
+		const base = new BN(Key._emsaPSS(msg, salt));
+		const power = new BN(this.key.keyPair.d.toBuffer());
+		const mod = new BN(this.key.keyPair.n.toBuffer());
+
+		return (Key._modPow(base, power, mod)).toBuffer().toString('base64');
+	}
+
+	static _emsaPSS(msg, salt) {
+		const eightNullBytes = Buffer.from('\x00'.repeat(8));
+		const digestedMsg = crypto.createHash('sha256').update(msg).digest();
+		const mTickHash = crypto.createHash('sha256').update(Buffer.concat([eightNullBytes, digestedMsg, salt]), 'binary').digest();
+
+		const ps = Buffer.from('\x00'.repeat(190));
+		const db = Buffer.concat([ps, Buffer.from('\x01'), salt]);
+
+		const dbMask = mgf1.generate(mTickHash, db.length);
+		const maskedDb = mgf1.xor(db, dbMask); // so far so good
+
+		let maskedDbMsb = mgf1.rjust(new BN(maskedDb.slice(0, 1), 2).toString(2), 8, '0');
+
+		maskedDbMsb = `0${maskedDbMsb.substr(1)}`;
+		maskedDb[0] = (new BN(maskedDbMsb, 2).toBuffer())[0]; // eslint-disable-line
+
+		return Buffer.concat([maskedDb, mTickHash, Buffer.from('BC', 'hex')]);
+	}
+
+	static _modPow(base, power, mod) {
+		let result = new BN(1);
+		while (power > 0) {
+			result = power.and(new BN(1)) === 1 ? (result.mul(base)).mod(mod) : result;
+			base = (base.mul(base)).mod(mod);
+			power = power.shrn(1);
+		}
+		return result;
 	}
 };

lib/MGF1.js

@@ -0,0 +1,48 @@
+'use strict';
+
+const crypto = require('crypto');
+const BN = require('bn.js');
+
+const MFG_LEN = 32;
+
+const divceil = (a, b) => ~~(((a + b) - 1) / b); // eslint-disable-line no-bitwise
+const rjust = (string, width, padding) => {
+	padding = padding || ' ';
+	padding = padding.substr(0, 1);
+	if (string.length < width)
+		return padding.repeat(width - string.length) + string;
+	return string;
+};
+const xor = (a, b) => {
+	if (a.length !== b.length)
+		throw new Error('Different length for a and b');
+
+	for (let i = 0; i < a.length; i++)
+		a[i] ^= b[i]; // eslint-disable-line no-bitwise
+
+	return a;
+};
+const i2osp = (x, len) => {
+	if (x >= 256 ** len)
+		throw new Error('Integer too large');
+
+	return Buffer.from(rjust((Buffer.from((new BN(x)).toArray('be', 4)).toString()).replace(/\x00/gi, ''), len, '\x00')); // eslint-disable-line no-control-regex
+};
+
+module.exports = {
+	generate(seed, masklen) {
+		if (masklen > 4294967296 * MFG_LEN)
+			throw new Error('Mask too long');
+
+
+		const b = [];
+
+		for (let i = 0; i < divceil(masklen, MFG_LEN); i++)
+			b[i] = crypto.createHash('sha256').update(Buffer.concat([seed, i2osp(i, 4)])).digest();
+
+
+		return (Buffer.concat(b)).slice(0, masklen);
+	},
+	xor,
+	rjust,
+};

lib/Response.js

@@ -1,52 +1,52 @@
 'use strict';
 
-const zlib   = require('zlib');
-const crypto = require("crypto");
+const zlib = require('zlib');
+const crypto = require('crypto');
 
-const DOMParser     = require("xmldom").DOMParser;
-const XMLSerializer = require("xmldom").XMLSerializer;
-const xpath = require("xpath");
+const { DOMParser, XMLSerializer } = require('xmldom');
+const xpath = require('xpath');
 
+const DEFAULT_IV = Buffer.from(Array(16).fill(0, 0, 15));
 module.exports = class Response {
 	constructor(client, data) {
 		this.client = client;
-		this.doc    = new DOMParser().parseFromString(data, 'text/xml');
-	};
+		this.doc = new DOMParser().parseFromString(data, 'text/xml');
+	}
 
 	isSegmented() {
-		const select = xpath.useNamespaces({'xmlns': "urn:org:ebics:H004"});
-		const node   = select("//xmlns:header/xmlns:mutable/xmlns:SegmentNumber", this.doc);
+		const select = xpath.useNamespaces({ xmlns: 'urn:org:ebics:H004' });
+		const node = select('//xmlns:header/xmlns:mutable/xmlns:SegmentNumber', this.doc);
 
-		return node.length ? true: false;
+		return !!node.length;
 	}
 
 	isLastSegment() {
-		const select = xpath.useNamespaces({'xmlns': "urn:org:ebics:H004"});
+		const select = xpath.useNamespaces({ xmlns: 'urn:org:ebics:H004' });
 		const node = select("//xmlns:header/xmlns:mutable/*[@lastSegment='true']", this.doc);
 
-		return node.length ? true: false;
+		return !!node.length;
 	}
 
 	orderData() {
-		const orderData = this.doc.getElementsByTagNameNS("urn:org:ebics:H004", "OrderData")[0].textContent;
-		const decipher  = crypto.createDecipheriv('aes-128-cbc', this.transactionKey(), Buffer.from([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,])).setAutoPadding(false);
-		const data      = Buffer.from(decipher.update(orderData, 'base64', 'binary') + decipher.final('binary'), 'binary');
+		const orderData = this.doc.getElementsByTagNameNS('urn:org:ebics:H004', 'OrderData')[0].textContent;
+		const decipher = crypto.createDecipheriv('aes-128-cbc', this.transactionKey(), DEFAULT_IV).setAutoPadding(false);
+		const data = Buffer.from(decipher.update(orderData, 'base64', 'binary') + decipher.final('binary'), 'binary');
 
 		return zlib.inflateSync(data).toString();
 	}
 
 	transactionKey() {
-		const keyNodeText = this.doc.getElementsByTagNameNS("urn:org:ebics:H004", "TransactionKey")[0].textContent;
+		const keyNodeText = this.doc.getElementsByTagNameNS('urn:org:ebics:H004', 'TransactionKey')[0].textContent;
 		const tkEncrypted = Buffer.from(keyNodeText, 'base64');
 
-		this.client.e().key.setOptions({encryptionScheme: 'pkcs1'});
+		this.client.e().key.setOptions({ encryptionScheme: 'pkcs1' });
 
 		return this.client.e().key.decrypt(tkEncrypted);
 	}
 
 	transactionId() {
-		const select = xpath.useNamespaces({'xmlns': "urn:org:ebics:H004"});
-		const node   = select("//xmlns:header/xmlns:static/xmlns:TransactionID", this.doc);
+		const select = xpath.useNamespaces({ xmlns: 'urn:org:ebics:H004' });
+		const node = select('//xmlns:header/xmlns:static/xmlns:TransactionID', this.doc);
 
 		return node.length ? node[0].textContent : '';
 	}

lib/Signer.js

@@ -1,11 +1,10 @@
 'use strict';
 
-const crypto = require("crypto");
+const crypto = require('crypto');
 
-const DOMParser = require("xmldom").DOMParser;
-const XMLSerializer = require("xmldom").XMLSerializer;
-const select = require("xpath.js");
-const c14n = require('xml-crypto/lib/c14n-canonicalization').C14nCanonicalization;
+const { DOMParser, XMLSerializer } = require('xmldom');
+const select = require('xpath.js');
+const C14n = require('xml-crypto/lib/c14n-canonicalization').C14nCanonicalization;
 
 
 module.exports = class Signer {
@@ -67,30 +66,29 @@ module.exports = class Signer {
 
 	digest() {
 		// get the xml node, where the digested value is supposed to be
-		const nodeDigestValue = this.doc.getElementsByTagName("ds:DigestValue")[0];
+		const nodeDigestValue = this.doc.getElementsByTagName('ds:DigestValue')[0];
 
-		const nodes = select(this.doc, "//*[@authenticate='true']");
+		// const nodes = select(this.doc, "//*[@authenticate='true']");
 
 		// canonicalize the node that has authenticate='true' attribute
+		// const contentToDigest = select(this.doc, '//*[@authenticate="true"]')
 		const contentToDigest = select(this.doc, "//*[@authenticate='true']")
-			.map(x => {
-				const aaaa = x.toString();
-				return new c14n().process(x)
-			}).join("");
+			.map(x => new C14n().process(x)).join('');
 
+		console.log('digest', 'contentToDigest', contentToDigest);
 		// fix the canonicalization
 		const fixedContent = contentToDigest.replace(/xmlns="urn:org:ebics:H004"/g, 'xmlns="urn:org:ebics:H004" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"');
 
-		if (nodeDigestValue) {
+		if (nodeDigestValue)
 			nodeDigestValue.textContent = crypto.createHash('sha256').update(fixedContent).digest('base64').trim();
-		}
-	};
+	}
 
 	sign() {
-		const nodeSignatureValue = this.doc.getElementsByTagName("ds:SignatureValue")[0];
+		const nodeSignatureValue = this.doc.getElementsByTagName('ds:SignatureValue')[0];
 
+		console.log('sign =>');
 		if (nodeSignatureValue) {
-			const contentToSign = (new c14n().process(select(this.doc, "//ds:SignedInfo")[0])).replace('xmlns:ds="http://www.w3.org/2000/09/xmldsig#"', 'xmlns="urn:org:ebics:H004" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"');
+			const contentToSign = (new C14n().process(select(this.doc, '//ds:SignedInfo')[0])).replace('xmlns:ds="http://www.w3.org/2000/09/xmldsig#"', 'xmlns="urn:org:ebics:H004" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"');
 
 			nodeSignatureValue.textContent = this.client.x().key.sign(contentToSign, 'base64');
 		}
@@ -99,5 +97,4 @@ module.exports = class Signer {
 	toXML() {
 		return new XMLSerializer().serializeToString(this.doc);
 	}
-
 };

lib/consts.js

@@ -3,10 +3,10 @@
 const packageJson = require('../package.json');
 
 const name = 'eCollect Node Ebics Client';
-const version = packageJson.version;  
+const { version } = packageJson;
 
 module.exports = {
-    name,
-    version,
-    productString: `${name} ${version}`,
-};
+	name,
+	version,
+	productString: `${name} ${version}`,
+};

lib/middleware/ParseResponse.js

@@ -6,10 +6,10 @@ module.exports = class ParseResponse {
 	constructor(client, data) {
 		this.client = client;
 		this.data = data;
-	};
+	}
 
-	static go (client, data) {
-		const parseRensponse = new ParseResponse(client, data);
+	static go(client, data) {
+		// const parseRensponse = new ParseResponse(client, data);
 		const response = new Response(client, data);
 
 		// TODO:

lib/middleware/XMLSign.js

@@ -6,10 +6,10 @@ module.exports = class XMLSign {
 	constructor(client, data) {
 		this.client = client;
 		this.data = data;
-	};
+	}
 
-	static go (client, data) {
-		const xmlSigner = new XMLSign(client, data);
+	static go(client, data) {
+		// const xmlSigner = new XMLSign(client, data);
 		const signer = new Signer(client, data);
 
 		signer.digest();

lib/orders/C52.js

@@ -3,48 +3,58 @@
 const GenericOrder = require('./GenericOrder');
 
 module.exports = class C52 extends GenericOrder {
-	constructor (client, from, to) {
+	constructor(client, from, to) {
 		super(client);
 		this._from = from;
-		this._to   = to;
+		this._to = to;
 
 		this._schema.header = {
-			"@"   : { authenticate: true },
+			'@': {
+				authenticate: true,
+			},
 			static: {
-				HostID   : this.hostId,
-				Nonce    : this.nonce(),
+				HostID: this.hostId,
+				Nonce: this.nonce(),
 				Timestamp: this.timestamp(),
 				PartnerID: this.partnerId,
-				UserID   : this.userId,
-				Product  : {
-					"@": { Language: "de" },
-					"#": this.productString,
+				UserID: this.userId,
+				Product: {
+					'@': {
+						Language: 'de',
+					},
+					'#': this.productString,
 				},
 				OrderDetails: {
-					OrderType          : "C52",
-					OrderAttribute     : "DZHNN",
+					OrderType: 'C52',
+					OrderAttribute: 'DZHNN',
 					StandardOrderParams: {
 						DateRange: {
 							Start: this._from,
-							End  : this._to
-						}
+							End: this._to,
+						},
 					},
 				},
 				BankPubKeyDigests: {
 					Authentication: {
-						"@": { Version: "X002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankX().publicDigest()
+						'@': {
+							Version: 'X002',
+							Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256',
+						},
+						'#': this.client.bankX().publicDigest(),
 					},
 					Encryption: {
-						"@": { Version: "E002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankE().publicDigest()
-					}
+						'@': {
+							Version: 'E002',
+							Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256',
+						},
+						'#': this.client.bankE().publicDigest(),
+					},
 				},
-				SecurityMedium: "0000"
+				SecurityMedium: '0000',
 			},
 			mutable: {
-				TransactionPhase: "Initialisation"
-			}
+				TransactionPhase: 'Initialisation',
+			},
 		};
-	};
+	}
 };

lib/orders/GenericOrder.js

@@ -1,10 +1,47 @@
 'use strict';
 
 // const randHex = require('../../lib/utils').randHex;
-const crypto = require("crypto");
+const crypto = require('crypto');
 const js2xmlparser = require('js2xmlparser');
 const consts = require('../consts');
 
+const authSignature = () => {
+	return {
+		'ds:SignedInfo': {
+			'ds:CanonicalizationMethod': {
+				'@': {
+					Algorithm:
+						'http://www.w3.org/TR/2001/REC-xml-c14n-20010315',
+				},
+			},
+			'ds:SignatureMethod': {
+				'@': {
+					Algorithm:
+						'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256',
+				},
+			},
+			'ds:Reference': {
+				'@': { URI: "#xpointer(//*[@authenticate='true'])" },
+				'ds:Transforms': {
+					'ds:Transform': {
+						'@': {
+							Algorithm:
+								'http://www.w3.org/TR/2001/REC-xml-c14n-20010315',
+						},
+					},
+				},
+				'ds:DigestMethod': {
+					'@': {
+						Algorithm:
+							'http://www.w3.org/2001/04/xmlenc#sha256',
+					},
+				},
+				'ds:DigestValue': {},
+			},
+		},
+		'ds:SignatureValue': {},
+	};
+};
 module.exports = class GenericOrder {
 	constructor(client) {
 		this.client = client;
@@ -18,69 +55,29 @@ module.exports = class GenericOrder {
 		this.xmlOptions = {
 			declaration: {
 				include: true,
-				encoding: "utf-8"
+				encoding: 'utf-8',
 			},
 			format: {
 				doubleQuotes: true,
 				indent: '',
 				newline: '',
-				// indent: "\t",
-				// newline: "\r\n",
-				pretty: true
-			}
+				pretty: true,
+			},
 		};
 
 		this._schema = {
-			"@": {
-				"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#",
-				xmlns: "urn:org:ebics:H004",
-				Version: "H004",
-				Revision: "1"
+			'@': {
+				'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',
+				xmlns: 'urn:org:ebics:H004',
+				Version: 'H004',
+				Revision: '1',
 			},
 
 			header: {},
 
-			AuthSignature: this.authSignature(),
+			AuthSignature: authSignature(),
 
-			body: {}
-		};
-	}
-
-	authSignature() {
-		return {
-			"ds:SignedInfo": {
-				"ds:CanonicalizationMethod": {
-					"@": {
-						Algorithm:
-							"http://www.w3.org/TR/2001/REC-xml-c14n-20010315"
-					}
-				},
-				"ds:SignatureMethod": {
-					"@": {
-						Algorithm:
-							"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"
-					}
-				},
-				"ds:Reference": {
-					"@": { URI: "#xpointer(//*[@authenticate='true'])" },
-					"ds:Transforms": {
-						"ds:Transform": {
-							"@": {
-								Algorithm:
-									"http://www.w3.org/TR/2001/REC-xml-c14n-20010315"
-							}
-						}
-					},
-					"ds:DigestMethod": {
-						"@": {
-							Algorithm:
-								"http://www.w3.org/2001/04/xmlenc#sha256"
-						}
-					},
-					"ds:DigestValue": {}
-				}
-			},
-			"ds:SignatureValue": {}
+			body: {},
 		};
 	}
 
@@ -88,55 +85,96 @@ module.exports = class GenericOrder {
 		return this._schema;
 	}
 
-	get productString() {
+	static get productString() {
 		return consts.productString;
 	}
 
-	nonce() {
+	static nonce() {
 		return crypto.randomBytes(16).toString('hex');
 	}
 
-	timestamp() {
+	// TODO: remove eslint-disable-line
+	timestamp() { // eslint-disable-line
 		return new Date().toISOString();
 	}
 
-	root() {
-		return "ebicsRequest";
+	root() { // eslint-disable-line class-methods-use-this
+		return 'ebicsRequest';
 	}
 
 	toReceiptXML() {
 		const xmlObj = {
-			"@": {
-				"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#",
-				xmlns: "urn:org:ebics:H004",
-				Version: "H004",
-				Revision: "1"
+			'@': {
+				'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',
+				xmlns: 'urn:org:ebics:H004',
+				Version: 'H004',
+				Revision: '1',
 			},
 
 			header: {
-				"@": { authenticate: true },
+				'@': { authenticate: true },
 				static: {
 					HostID: this.hostId,
-					TransactionID: this.transactionId
+					TransactionID: this.transactionId,
 				},
 				mutable: {
 					TransactionPhase: 'Receipt',
-				}
+				},
 			},
 
 			AuthSignature: this.authSignature(),
 
 			body: {
 				TransferReceipt: {
-					"@": { authenticate: true },
-					ReceiptCode: 0
-				}
-			}
+					'@': { authenticate: true },
+					ReceiptCode: 0,
+				},
+			},
 		};
 
 		return js2xmlparser.parse(this.root(), xmlObj, this.xmlOptions);
 	}
 
+	toTransferXML() {
+		const xmlObj = {
+			'@': {
+				'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',
+				xmlns: 'urn:org:ebics:H004',
+				Version: 'H004',
+				Revision: '1',
+			},
+
+			header: {
+				'@': { authenticate: true },
+				static: {
+					HostID: this.hostId,
+					TransactionID: this.transactionId,
+				},
+				mutable: {
+					TransactionPhase: 'Transfer',
+					SegmentNumber: {
+						'@': { lastSegment: true },
+						'#': 1,
+					},
+				},
+			},
+
+			AuthSignature: this.authSignature(),
+
+			body: {
+				DataTransfer: {
+					OrderData: this.encryptedOrderData(),
+				},
+			},
+		};
+
+		return js2xmlparser.parse(this.root(), xmlObj, this.xmlOptions);
+	}
+
+	encryptedOrderData() { // eslint-disable-line class-methods-use-this
+		return null;
+	}
+
 	toXML() {
 		return js2xmlparser.parse(this.root(), this._schema, this.xmlOptions);
 	}

lib/orders/GenericUploadOrder.js

@@ -1,11 +1,19 @@
 'use strict';
 
 const zlib = require('zlib');
-const crypto = require("crypto");
+const crypto = require('crypto');
+
 const js2xmlparser = require('js2xmlparser');
 
 const GenericOrder = require('./GenericOrder');
 
+const pad = (d) => {
+	const dLen = d.length;
+	const len = 16 * (Math.trunc(dLen / 16) + 1);
+
+	return Buffer.concat([d, Buffer.from(Buffer.from([0]).toString().repeat(len - dLen - 1)), Buffer.from([len - dLen])]);
+};
+
 module.exports = class GenericUploadOrder extends GenericOrder {
 	constructor(client, document) {
 		super(client);
@@ -16,48 +24,56 @@ module.exports = class GenericUploadOrder extends GenericOrder {
 		this._schema.body = {
 			DataTransfer: {
 				DataEncryptionInfo: {
-					"@": { authenticate: true },
+					'@': { authenticate: true },
 					EncryptionPubKeyDigest: {
-						"@": { Version: "E002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankE().publicDigest()
+						'@': { Version: 'E002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankE().publicDigest(),
 					},
-					TransactionKey: Buffer.from(this.client.bankE().publicEncrypt(this._key)).toString('base64'),
+					TransactionKey: this.client.bankE().publicEncrypt(this._key).toString('base64'),
 				},
 				SignatureData: {
-					"@": { authenticate: true },
-					"#": this.encryptedOrderSignature()
-				}
-			}
+					'@': { authenticate: true },
+					'#': this.encryptedOrderSignature(),
+				},
+			},
 		};
-	};
+	}
 
 	orderSignature() {
 		const xmlObj = {
-			"@": {
-				xmlns: "http://www.ebics.org/S001",
-				"xmlns:xsi": "http://www.w3.org/2001/XMLSchema-instance",
-				"xsi:schemaLocation": "http://www.ebics.org/S001 http://www.ebics.org/S001/ebics_signature.xsd"
+			'@': {
+				xmlns: 'http://www.ebics.org/S001',
+				'xmlns:xsi': 'http://www.w3.org/2001/XMLSchema-instance',
+				'xsi:schemaLocation': 'http://www.ebics.org/S001 http://www.ebics.org/S001/ebics_signature.xsd',
 			},
 			OrderSignatureData: {
-				SignatureVersion: "A006",
+				SignatureVersion: 'A006',
 				SignatureValue: this.signatureValue(),
 				PartnerID: this.partnerId,
-				UserID: this.userId
-			}
+				UserID: this.userId,
+			},
 		};
 
 		return js2xmlparser.parse('UserSignatureData', xmlObj, this.xmlOptions);
-	};
+	}
 
 	signatureValue() {
-		const digested = crypto.createHash('sha256').update(this._document).digest();
-	};
+		const digested = crypto.createHash('sha256').update(this._document.replace(/\n|\r/g, '')).digest();
+
+		return this.client.a().sign(digested);
+	}
+
+	encryptedOrderData() {
+		const dst = zlib.deflateSync(this._document.replace(/\r|\n/g, ''));
+		const cipher = crypto.createCipheriv('aes-128-cbc', this._key, Buffer.from([0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0])).setAutoPadding(false);
+
+		return Buffer.concat([cipher.update(pad(dst)), cipher.final()]).toString('base64');
+	}
 
 	encryptedOrderSignature() {
 		const dst = zlib.deflateSync(this.orderSignature());
-		const cipher  = crypto.createCipheriv('aes-128-cbc', this._key, Buffer.from([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,])).setAutoPadding(false);
-		const encrypted = cipher.update(dst) + cipher.final();
+		const cipher = crypto.createCipheriv('aes-128-cbc', this._key, Buffer.from([0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0])).setAutoPadding(false);
 
-		return Buffer.from(encrypted).toString('base64');
-	};
+		return Buffer.concat([cipher.update(pad(dst)), cipher.final()]).toString('base64');
+	}
 };

lib/orders/HAA.js

@@ -3,11 +3,11 @@
 const GenericOrder = require('./GenericOrder');
 
 module.exports = class HAA extends GenericOrder {
-	constructor (client) {
+	constructor(client) {
 		super(client);
 
 		this._schema.header = {
-			"@": { authenticate: true },
+			'@': { authenticate: true },
 			static: {
 				HostID: this.hostId,
 				Nonce: this.nonce(),
@@ -15,29 +15,29 @@ module.exports = class HAA extends GenericOrder {
 				PartnerID: this.partnerId,
 				UserID: this.userId,
 				Product: {
-					"@": { Language: "de" },
-					"#": this.productString
+					'@': { Language: 'de' },
+					'#': this.productString,
 				},
 				OrderDetails: {
-					OrderType: "HAA",
-					OrderAttribute: "DZHNN",
-					StandardOrderParams: ""
+					OrderType: 'HAA',
+					OrderAttribute: 'DZHNN',
+					StandardOrderParams: '',
 				},
 				BankPubKeyDigests: {
 					Authentication: {
-						"@": { Version: "X002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankX().publicDigest()
+						'@': { Version: 'X002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankX().publicDigest(),
 					},
 					Encryption: {
-						"@": { Version: "E002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankE().publicDigest()
-					}
+						'@': { Version: 'E002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankE().publicDigest(),
+					},
 				},
-				SecurityMedium: "0000"
+				SecurityMedium: '0000',
 			},
 			mutable: {
-				TransactionPhase: "Initialisation"
-			}
+				TransactionPhase: 'Initialisation',
+			},
 		};
-	};
+	}
 };

lib/orders/HAC.js

@@ -3,50 +3,50 @@
 const GenericOrder = require('./GenericOrder');
 
 module.exports = class HAC extends GenericOrder {
-	constructor (client, from = null, to = null) {
+	constructor(client, from = null, to = null) {
 		super(client);
 		this._from = from;
-		this._to   = to;
+		this._to = to;
 
 		this._schema.header = {
-			"@"   : { authenticate: true },
+			'@': { authenticate: true },
 			static: {
-				HostID   : this.hostId,
-				Nonce    : this.nonce(),
+				HostID: this.hostId,
+				Nonce: this.nonce(),
 				Timestamp: this.timestamp(),
 				PartnerID: this.partnerId,
-				UserID   : this.userId,
-				Product  : {
-					"@": { Language: "de" },
-					"#": this.productString,
+				UserID: this.userId,
+				Product: {
+					'@': { Language: 'de' },
+					'#': this.productString,
 				},
 				OrderDetails: {
-					OrderType          : "HAC",
-					OrderAttribute     : "DZHNN",
+					OrderType: 'HAC',
+					OrderAttribute: 'DZHNN',
 					StandardOrderParams: this._hasDateRange() ? {
 						DateRange: {
 							Start: this._from,
-							End  : this._to
-						}
-					} : ""
+							End: this._to,
+						},
+					} : '',
 				},
 				BankPubKeyDigests: {
 					Authentication: {
-						"@": { Version: "X002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankX().publicDigest()
+						'@': { Version: 'X002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankX().publicDigest(),
 					},
 					Encryption: {
-						"@": { Version: "E002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankE().publicDigest()
-					}
+						'@': { Version: 'E002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankE().publicDigest(),
+					},
 				},
-				SecurityMedium: "0000"
+				SecurityMedium: '0000',
 			},
 			mutable: {
-				TransactionPhase: "Initialisation"
-			}
+				TransactionPhase: 'Initialisation',
+			},
 		};
-	};
+	}
 
 	_hasDateRange() {
 		return this._from && this._to;

lib/orders/HIA.js

@@ -10,76 +10,76 @@ module.exports = class HIA extends GenericOrder {
 		super(client);
 
 		this._schema = {
-			"@": {
-				"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#",
-				xmlns: "urn:org:ebics:H004",
-				Version: "H004",
-				Revision: "1"
+			'@': {
+				'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',
+				xmlns: 'urn:org:ebics:H004',
+				Version: 'H004',
+				Revision: '1',
 			},
 
 			header: {
-				"@": { authenticate: true },
+				'@': { authenticate: true },
 				static: {
 					HostID: this.hostId,
 					PartnerID: this.partnerId,
 					UserID: this.userId,
 					Product: {
-						"@": { Language: "de" },
-						"#": this.productString,
+						'@': { Language: 'de' },
+						'#': this.productString,
 					},
 					OrderDetails: {
-						OrderType: "HIA",
-						OrderAttribute: "DZNNN"
+						OrderType: 'HIA',
+						OrderAttribute: 'DZNNN',
 					},
-					SecurityMedium: "0000"
+					SecurityMedium: '0000',
 				},
-				mutable: {}
+				mutable: {},
 			},
 
 			body: {
 				DataTransfer: {
-					OrderData: Buffer.from(zlib.deflateSync(this.orderData())).toString('base64')
-				}
-			}
+					OrderData: Buffer.from(zlib.deflateSync(this.orderData())).toString('base64'),
+				},
+			},
 		};
 	}
 
-	root() {
-		return "ebicsUnsecuredRequest";
-	};
+	root() { // eslint-disable-line class-methods-use-this
+		return 'ebicsUnsecuredRequest';
+	}
 
 	orderData() {
 		const xmlOrderData = {
-			"@": {
-				"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#",
-				xmlns: "urn:org:ebics:H004"
+			'@': {
+				'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',
+				xmlns: 'urn:org:ebics:H004',
 			},
 			AuthenticationPubKeyInfo: {
 				PubKeyValue: {
-					"ds:RSAKeyValue": {
-						"ds:Modulus": Buffer.from(this.client.x().n(), 'HEX').toString('base64'),
-						"ds:Exponent": "AQAB"
+					'ds:RSAKeyValue': {
+						'ds:Modulus': Buffer.from(this.client.x().n(), 'HEX').toString('base64'),
+						'ds:Exponent': 'AQAB',
 					},
 				},
-				AuthenticationVersion: "X002"
+				AuthenticationVersion: 'X002',
 			},
 			EncryptionPubKeyInfo: {
 				PubKeyValue: {
-					"ds:RSAKeyValue": {
-						"ds:Modulus": Buffer.from(this.client.e().n(), 'HEX').toString('base64'),
-						"ds:Exponent": "AQAB"
+					'ds:RSAKeyValue': {
+						'ds:Modulus': Buffer.from(this.client.e().n(), 'HEX').toString('base64'),
+						'ds:Exponent': 'AQAB',
 					},
 				},
-				EncryptionVersion: "E002"
+				EncryptionVersion: 'E002',
 			},
 			PartnerID: this.partnerId,
-			UserID: this.userId
+			UserID: this.userId,
 		};
 
-		return js2xmlparser.parse("HIARequestOrderData", xmlOrderData, this.xmlOptions);
-	};
+		return js2xmlparser.parse('HIARequestOrderData', xmlOrderData, this.xmlOptions);
+	}
 
 	toXML() {
 		return js2xmlparser.parse(this.root(), this._schema, this.xmlOptions);
-	};
+	}
 };

lib/orders/HKD.js

@@ -3,11 +3,11 @@
 const GenericOrder = require('./GenericOrder');
 
 module.exports = class HKD extends GenericOrder {
-	constructor (client) {
+	constructor(client) {
 		super(client);
 
 		this._schema.header = {
-			"@": { authenticate: true },
+			'@': { authenticate: true },
 			static: {
 				HostID: this.hostId,
 				Nonce: this.nonce(),
@@ -15,29 +15,29 @@ module.exports = class HKD extends GenericOrder {
 				PartnerID: this.partnerId,
 				UserID: this.userId,
 				Product: {
-					"@": { Language: "de" },
-					"#": this.productString,
+					'@': { Language: 'de' },
+					'#': this.productString,
 				},
 				OrderDetails: {
-					OrderType: "HKD",
-					OrderAttribute: "DZHNN",
-					StandardOrderParams: ""
+					OrderType: 'HKD',
+					OrderAttribute: 'DZHNN',
+					StandardOrderParams: '',
 				},
 				BankPubKeyDigests: {
 					Authentication: {
-						"@": { Version: "X002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankX().publicDigest()
+						'@': { Version: 'X002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankX().publicDigest(),
 					},
 					Encryption: {
-						"@": { Version: "E002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankE().publicDigest()
-					}
+						'@': { Version: 'E002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankE().publicDigest(),
+					},
 				},
-				SecurityMedium: "0000"
+				SecurityMedium: '0000',
 			},
 			mutable: {
-				TransactionPhase: "Initialisation"
-			}
+				TransactionPhase: 'Initialisation',
+			},
 		};
-	};
+	}
 };

lib/orders/HPB.js

@@ -3,11 +3,11 @@
 const GenericOrder = require('./GenericOrder');
 
 module.exports = class HPB extends GenericOrder {
-	constructor (client) {
+	constructor(client) {
 		super(client);
 
 		this._schema.header = {
-			"@": { authenticate: true },
+			'@': { authenticate: true },
 			static: {
 				HostID: this.hostId,
 				Nonce: this.nonce(),
@@ -15,20 +15,20 @@ module.exports = class HPB extends GenericOrder {
 				PartnerID: this.partnerId,
 				UserID: this.userId,
 				Product: {
-					"@": { Language: "de" },
-					"#": this.productString,
+					'@': { Language: 'de' },
+					'#': this.productString,
 				},
 				OrderDetails: {
-					OrderType: "HPB",
-					OrderAttribute: "DZHNN"
+					OrderType: 'HPB',
+					OrderAttribute: 'DZHNN',
 				},
-				SecurityMedium: "0000"
+				SecurityMedium: '0000',
 			},
-			mutable: {}
+			mutable: {},
 		};
-	};
+	}
 
-	root() {
-		return "ebicsNoPubKeyDigestsRequest";
-	};
+	root() { // eslint-disable-line class-methods-use-this
+		return 'ebicsNoPubKeyDigestsRequest';
+	}
 };

lib/orders/HTD.js

@@ -3,11 +3,11 @@
 const GenericOrder = require('./GenericOrder');
 
 module.exports = class HTD extends GenericOrder {
-	constructor (client) {
+	constructor(client) {
 		super(client);
 
 		this._schema.header = {
-			"@": { authenticate: true },
+			'@': { authenticate: true },
 			static: {
 				HostID: this.hostId,
 				Nonce: this.nonce(),
@@ -15,29 +15,29 @@ module.exports = class HTD extends GenericOrder {
 				PartnerID: this.partnerId,
 				UserID: this.userId,
 				Product: {
-					"@": { Language: "de" },
-					"#": this.productString,
+					'@': { Language: 'de' },
+					'#': this.productString,
 				},
 				OrderDetails: {
-					OrderType: "HTD",
-					OrderAttribute: "DZHNN",
-					StandardOrderParams: ""
+					OrderType: 'HTD',
+					OrderAttribute: 'DZHNN',
+					StandardOrderParams: '',
 				},
 				BankPubKeyDigests: {
 					Authentication: {
-						"@": { Version: "X002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankX().publicDigest()
+						'@': { Version: 'X002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankX().publicDigest(),
 					},
 					Encryption: {
-						"@": { Version: "E002", Algorithm: "http://www.w3.org/2001/04/xmlenc#sha256" },
-						"#": this.client.bankE().publicDigest()
-					}
+						'@': { Version: 'E002', Algorithm: 'http://www.w3.org/2001/04/xmlenc#sha256' },
+						'#': this.client.bankE().publicDigest(),
+					},
 				},
-				SecurityMedium: "0000"
+				SecurityMedium: '0000',
 			},
 			mutable: {
-				TransactionPhase: "Initialisation"
-			}
+				TransactionPhase: 'Initialisation',
+			},
 		};
-	};
+	}
 };

lib/orders/INI.js

@@ -6,70 +6,70 @@ const js2xmlparser = require('js2xmlparser');
 const GenericOrder = require('./GenericOrder');
 
 module.exports = class INI extends GenericOrder {
-	constructor (client) {
+	constructor(client) {
 		super(client);
 
 		this._schema = {
-			"@": {
-				"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#",
-				xmlns: "urn:org:ebics:H004",
-				Version: "H004",
-				Revision: "1"
+			'@': {
+				'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',
+				xmlns: 'urn:org:ebics:H004',
+				Version: 'H004',
+				Revision: '1',
 			},
 
 			header: {
-				"@": { authenticate: true },
+				'@': { authenticate: true },
 				static: {
 					HostID: this.hostId,
 					PartnerID: this.partnerId,
 					UserID: this.userId,
 					Product: {
-						"@": { Language: "de" },
-						"#": this.productString,
+						'@': { Language: 'de' },
+						'#': this.productString,
 					},
 					OrderDetails: {
-						OrderType: "INI",
-						OrderAttribute: "DZNNN"
+						OrderType: 'INI',
+						OrderAttribute: 'DZNNN',
 					},
-					SecurityMedium: "0000"
+					SecurityMedium: '0000',
 				},
-				mutable: {}
+				mutable: {},
 			},
 
 			body: {
 				DataTransfer: {
-					OrderData: Buffer.from(zlib.deflateSync(this.keySignature())).toString('base64')
-				}
-			}
+					OrderData: Buffer.from(zlib.deflateSync(this.keySignature())).toString('base64'),
+				},
+			},
 		};
 	}
 
-	root() {
-		return "ebicsUnsecuredRequest";
-	};
+	root() { // eslint-disable-line class-methods-use-this
+		return 'ebicsUnsecuredRequest';
+	}
 
 	keySignature() {
 		const xmlOrderData = {
-			"@": {
-				"xmlns:ds": "http://www.w3.org/2000/09/xmldsig#",
-				xmlns: "http://www.ebics.org/S001"
+			'@': {
+				'xmlns:ds': 'http://www.w3.org/2000/09/xmldsig#',
+				xmlns: 'http://www.ebics.org/S001',
 			},
 			SignaturePubKeyInfo: {
 				PubKeyValue: {
-					"ds:RSAKeyValue": {
-						"ds:Modulus": Buffer.from(this.client.a().n(), 'HEX').toString('base64'),
-						"ds:Exponent": "AQAB"
+					'ds:RSAKeyValue': {
+						'ds:Modulus': Buffer.from(this.client.a().n(), 'HEX').toString('base64'),
+						'ds:Exponent': 'AQAB',
 					},
-					TimeStamp: this.timestamp()
+					TimeStamp: this.timestamp(),
 				},
-				SignatureVersion: "A006"
+				SignatureVersion: 'A006',
 			},
 			PartnerID: this.partnerId,
-			UserID: this.userId
+			UserID: this.userId,
 		};
 
-		return js2xmlparser.parse("SignaturePubKeyOrderData", xmlOrderData, this.xmlOptions);
-	};
+		return js2xmlparser.parse('SignaturePubKeyOrderData', xmlOrderData, this.xmlOptions);
+	}
 
 	toXML() {
 		return js2xmlparser.parse(this.root(), this._schema, this.xmlOptions);

package.json

@@ -1,36 +1,39 @@
 {
-  "name": "node-ebics-client",
-  "version": "0.0.3",
-  "description": "Node.js ISO 20022 Compliant EBICS Client",
-  "main": "index.js",
-  "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
-  },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/eCollect/node-ebics-client"
-  },
-  "keywords": [
-    "EBICS",
-    "ISO20022",
-    "nodejs",
-    "api"
-  ],
-  "author": "eCollect Sofia Tech Team",
-  "license": "MIT",
-  "dependencies": {
-    "bn.js": "^4.11.8",
-    "handlebars": "^4.0.11",
-    "js2xmlparser": "^3.0.0",
-    "moment": "^2.22.1",
-    "node-rsa": "^0.4.2",
-    "xml-c14n": "0.0.6",
-    "xmldom": "^0.1.27",
-    "xpath": "0.0.27"
-  },
-  "devDependencies": {
-    "eslint": "^4.19.1",
-    "eslint-config-airbnb-base": "^12.1.0",
-    "eslint-plugin-import": "^2.12.0"
+	"name": "ebics-client",
+	"version": "0.0.36",
+	"description": "Node.js ISO 20022 Compliant EBICS Client",
+	"main": "index.js",
+	"scripts": {
+		"test": "echo \"Error: no test specified\" && exit 1"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/eCollect/node-ebics-client"
+	},
+	"keywords": [
+		"EBICS",
+		"ISO20022",
+		"nodejs",
+		"api"
+	],
+	"author": "eCollect Sofia Tech Team",
+	"license": "MIT",
+	"dependencies": {
+		"bn.js": "^4.11.8",
+		"handlebars": "^4.0.11",
+		"js2xmlparser": "^3.0.0",
+		"moment": "^2.22.1",
+		"node-rsa": "^0.4.2",
+		"request": "^2.87.0",
+		"xml-c14n": "0.0.6",
+		"xml-crypto": "^0.10.1",
+		"xmldom": "^0.1.27",
+		"xpath": "0.0.27",
+		"xpath.js": "^1.1.0"
+	},
+	"devDependencies": {
+		"eslint": "^4.19.1",
+		"eslint-config-airbnb-base": "^12.1.0",
+		"eslint-plugin-import": "^2.12.0"
 	}
 }