activemerchant 1.42.6 → 1.90.0

data/lib/active_merchant/billing/gateways/credorax.rb

@@ -0,0 +1,356 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    class CredoraxGateway < Gateway
+      class_attribute :test_url, :live_na_url, :live_eu_url
+
+      self.display_name = 'Credorax Gateway'
+      self.homepage_url = 'https://www.credorax.com/'
+
+      self.test_url = 'https://intconsole.credorax.com/intenv/service/gateway'
+
+      # The live URL is assigned on a per merchant basis once certification has passed
+      # See the Credorax remote tests for the full certification test suite
+      #
+      # Once you have your assigned subdomain, you can override the live URL in your application via:
+      # ActiveMerchant::Billing::CredoraxGateway.live_url = "https://assigned-subdomain.credorax.net/crax_gate/service/gateway"
+      self.live_url = 'https://assigned-subdomain.credorax.net/crax_gate/service/gateway'
+
+      self.supported_countries = %w(DE GB FR IT ES PL NL BE GR CZ PT SE HU RS AT CH BG DK FI SK NO IE HR BA AL LT MK SI LV EE ME LU MT IS AD MC LI SM)
+      self.default_currency = 'EUR'
+      self.currencies_without_fractions = %w(CLP JPY KRW PYG VND)
+      self.currencies_with_three_decimal_places = %w(BHD JOD KWD OMR RSD TND)
+
+      self.money_format = :cents
+      self.supported_cardtypes = [:visa, :master, :maestro]
+
+      RESPONSE_MESSAGES = {
+        '00' => 'Approved or completed successfully',
+        '01' => 'Refer to card issuer',
+        '02' => 'Refer to card issuer special condition',
+        '03' => 'Invalid merchant',
+        '04' => 'Pick up card',
+        '05' => 'Do not Honour',
+        '06' => 'Error',
+        '07' => 'Pick up card special condition',
+        '08' => 'Honour with identification',
+        '09' => 'Request in progress',
+        '10' => 'Approved for partial amount',
+        '11' => 'Approved (VIP)',
+        '12' => 'Invalid transaction',
+        '13' => 'Invalid amount',
+        '14' => 'Invalid card number',
+        '15' => 'No such issuer',
+        '16' => 'Approved, update track 3',
+        '17' => 'Customer cancellation',
+        '18' => 'Customer dispute',
+        '19' => 'Re-enter transaction',
+        '20' => 'Invalid response',
+        '21' => 'No action taken',
+        '22' => 'Suspected malfunction',
+        '23' => 'Unacceptable transaction fee',
+        '24' => 'File update not supported by receiver',
+        '25' => 'No such record',
+        '26' => 'Duplicate record update, old record replaced',
+        '27' => 'File update field edit error',
+        '28' => 'File locked out while update',
+        '29' => 'File update error, contact acquirer',
+        '30' => 'Format error',
+        '31' => 'Issuer signed-off',
+        '32' => 'Completed partially',
+        '33' => 'Pick-up, expired card',
+        '34' => 'Suspect Fraud',
+        '35' => 'Pick-up, card acceptor contact acquirer',
+        '36' => 'Pick up, card restricted',
+        '37' => 'Pick up, call acquirer security',
+        '38' => 'Pick up, Allowable PIN tries exceeded',
+        '39' => 'Transaction Not Allowed',
+        '40' => 'Requested function not supported',
+        '41' => 'Lost Card, Pickup',
+        '42' => 'No universal account',
+        '43' => 'Pick up, stolen card',
+        '44' => 'No investment account',
+        '50' => 'Do not renew',
+        '51' => 'Not sufficient funds',
+        '52' => 'No checking Account',
+        '53' => 'No savings account',
+        '54' => 'Expired card',
+        '55' => 'Pin incorrect',
+        '56' => 'No card record',
+        '57' => 'Transaction not allowed for cardholder',
+        '58' => 'Transaction not allowed for merchant',
+        '59' => 'Suspected Fraud',
+        '60' => 'Card acceptor contact acquirer',
+        '61' => 'Exceeds withdrawal amount limit',
+        '62' => 'Restricted card',
+        '63' => 'Security violation',
+        '64' => 'Wrong original amount',
+        '65' => 'Activity count limit exceeded',
+        '66' => 'Call acquirers security department',
+        '67' => 'Card to be picked up at ATM',
+        '68' => 'Response received too late.',
+        '70' => 'Invalid transaction; contact card issuer',
+        '71' => 'Decline PIN not changed',
+        '75' => 'Pin tries exceeded',
+        '76' => 'Wrong PIN, number of PIN tries exceeded',
+        '77' => 'Wrong Reference No.',
+        '78' => 'Record Not Found',
+        '79' => 'Already reversed',
+        '80' => 'Network error',
+        '81' => 'Foreign network error / PIN cryptographic error',
+        '82' => 'Time out at issuer system',
+        '83' => 'Transaction failed',
+        '84' => 'Pre-authorization timed out',
+        '85' => 'No reason to decline',
+        '86' => 'Cannot verify pin',
+        '87' => 'Purchase amount only, no cashback allowed',
+        '88' => 'MAC sync Error',
+        '89' => 'Authentication failure',
+        '91' => 'Issuer not available',
+        '92' => 'Unable to route at acquirer Module',
+        '93' => 'Cannot be completed, violation of law',
+        '94' => 'Duplicate Transmission',
+        '95' => 'Reconcile error / Auth Not found',
+        '96' => 'System malfunction',
+        'R0' => 'Stop Payment Order',
+        'R1' => 'Revocation of Authorisation Order',
+        'R3' => 'Revocation of all Authorisations Order'
+      }
+
+      def initialize(options={})
+        requires!(options, :merchant_id, :cipher_key)
+        super
+      end
+
+      def purchase(amount, payment_method, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_payment_method(post, payment_method)
+        add_customer_data(post, options)
+        add_email(post, options)
+        add_3d_secure(post, options)
+        add_echo(post, options)
+        add_submerchant_id(post, options)
+        add_transaction_type(post, options)
+
+        commit(:purchase, post)
+      end
+
+      def authorize(amount, payment_method, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_payment_method(post, payment_method)
+        add_customer_data(post, options)
+        add_email(post, options)
+        add_3d_secure(post, options)
+        add_echo(post, options)
+        add_submerchant_id(post, options)
+        add_transaction_type(post, options)
+
+        commit(:authorize, post)
+      end
+
+      def capture(amount, authorization, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_reference(post, authorization)
+        add_customer_data(post, options)
+        add_echo(post, options)
+        add_submerchant_id(post, options)
+
+        commit(:capture, post)
+      end
+
+      def void(authorization, options={})
+        post = {}
+        add_customer_data(post, options)
+        reference_action = add_reference(post, authorization)
+        add_echo(post, options)
+        add_submerchant_id(post, options)
+        post[:a1] = generate_unique_id
+
+        commit(:void, post, reference_action)
+      end
+
+      def refund(amount, authorization, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_reference(post, authorization)
+        add_customer_data(post, options)
+        add_echo(post, options)
+        add_submerchant_id(post, options)
+
+        commit(:refund, post)
+      end
+
+      def credit(amount, payment_method, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_payment_method(post, payment_method)
+        add_customer_data(post, options)
+        add_email(post, options)
+        add_echo(post, options)
+        add_submerchant_id(post, options)
+        add_transaction_type(post, options)
+
+        commit(:credit, post)
+      end
+
+      def verify(credit_card, options={})
+        MultiResponse.run(:use_first_response) do |r|
+          r.process { authorize(100, credit_card, options) }
+          r.process(:ignore_result) { void(r.authorization, options) }
+        end
+      end
+
+      def supports_scrubbing?
+        true
+      end
+
+      def scrub(transcript)
+        transcript.
+          gsub(%r((b1=)\d+), '\1[FILTERED]').
+          gsub(%r((b5=)\d+), '\1[FILTERED]')
+      end
+
+      private
+
+      def add_invoice(post, money, options)
+        currency = options[:currency] || currency(money)
+
+        post[:a4] = localized_amount(money, currency)
+        post[:a1] = generate_unique_id
+        post[:a5] = currency
+        post[:h9] = options[:order_id]
+        post[:i2] = options[:billing_descriptor] if options[:billing_descriptor]
+      end
+
+      CARD_TYPES = {
+        'visa' => '1',
+        'mastercard' => '2',
+        'maestro' => '9'
+      }
+
+      def add_payment_method(post, payment_method)
+        post[:c1] = payment_method.name
+        post[:b2] = CARD_TYPES[payment_method.brand] || ''
+        post[:b1] = payment_method.number
+        post[:b5] = payment_method.verification_value
+        post[:b4] = format(payment_method.year, :two_digits)
+        post[:b3] = format(payment_method.month, :two_digits)
+      end
+
+      def add_customer_data(post, options)
+        post[:d1] = options[:ip] || '127.0.0.1'
+        if (billing_address = options[:billing_address])
+          post[:c5] = billing_address[:address1]
+          post[:c7] = billing_address[:city]
+          post[:c10] = billing_address[:zip]
+          post[:c8] = billing_address[:state]
+          post[:c9] = billing_address[:country]
+          post[:c2] = billing_address[:phone]
+        end
+      end
+
+      def add_reference(post, authorization)
+        response_id, authorization_code, request_id, action = authorization.split(';')
+        post[:g2] = response_id
+        post[:g3] = authorization_code
+        post[:g4] = request_id
+        action || :authorize
+      end
+
+      def add_email(post, options)
+        post[:c3] = options[:email] || 'unspecified@example.com'
+      end
+
+      def add_3d_secure(post, options)
+        return unless options[:eci] && options[:xid]
+        post[:i8] = "#{options[:eci]}:#{(options[:cavv] || "none")}:#{options[:xid]}"
+      end
+
+      def add_echo(post, options)
+        # The d2 parameter is used during the certification process
+        # See remote tests for full certification test suite
+        post[:d2] = options[:echo] unless options[:echo].blank?
+      end
+
+      def add_submerchant_id(post, options)
+        post[:h3] = options[:submerchant_id] if options[:submerchant_id]
+      end
+
+      def add_transaction_type(post, options)
+        post[:a9] = options[:transaction_type] if options[:transaction_type]
+      end
+
+      ACTIONS = {
+        purchase: '1',
+        authorize: '2',
+        capture: '3',
+        authorize_void: '4',
+        refund: '5',
+        credit: '6',
+        purchase_void: '7',
+        refund_void: '8',
+        capture_void: '9'
+      }
+
+      def commit(action, params, reference_action = nil)
+        raw_response = ssl_post(url, post_data(action, params, reference_action))
+        response = parse(raw_response)
+
+        Response.new(
+          success_from(response),
+          message_from(response),
+          response,
+          authorization: "#{response["Z1"]};#{response["Z4"]};#{response["A1"]};#{action}",
+          avs_result: AVSResult.new(code: response['Z9']),
+          cvv_result: CVVResult.new(response['Z14']),
+          test: test?
+        )
+      end
+
+      def sign_request(params)
+        params = params.sort
+        params.each { |param| param[1].gsub!(/[<>()\\]/, ' ') }
+        values = params.map { |param| param[1].strip }
+        Digest::MD5.hexdigest(values.join + @options[:cipher_key])
+      end
+
+      def post_data(action, params, reference_action)
+        params.keys.each { |key| params[key] = params[key].to_s }
+        params[:M] = @options[:merchant_id]
+        params[:O] = request_action(action, reference_action)
+        params[:K] = sign_request(params)
+        params.map { |k, v| "#{k}=#{CGI.escape(v.to_s)}" }.join('&')
+      end
+
+      def request_action(action, reference_action)
+        if reference_action
+          ACTIONS["#{reference_action}_#{action}".to_sym]
+        else
+          ACTIONS[action]
+        end
+      end
+
+      def url
+        test? ? test_url : live_url
+      end
+
+      def parse(body)
+        Hash[CGI::parse(body).map { |k, v| [k.upcase, v.first] }]
+      end
+
+      def success_from(response)
+        response['Z2'] == '0'
+      end
+
+      def message_from(response)
+        if success_from(response)
+          'Succeeded'
+        else
+          RESPONSE_MESSAGES[response['Z6']] || response['Z3'] || 'Unable to read error message'
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/gateways/ct_payment.rb

@@ -0,0 +1,268 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    class CtPaymentGateway < Gateway
+      self.test_url = 'https://test.ctpaiement.ca/v1/'
+      self.live_url = 'https://www.ctpaiement.com/v1/'
+
+      self.supported_countries = ['US', 'CA']
+      self.default_currency = 'CAD'
+      self.supported_cardtypes = [:visa, :master, :american_express, :discover, :diners_club]
+
+      self.homepage_url = 'http://www.ct-payment.com/'
+      self.display_name = 'CT Payment'
+
+      STANDARD_ERROR_CODE_MAPPING = {
+        '14' => STANDARD_ERROR_CODE[:invalid_number],
+        '05' => STANDARD_ERROR_CODE[:card_declined],
+        'M6' => STANDARD_ERROR_CODE[:card_declined],
+        '9068' => STANDARD_ERROR_CODE[:incorrect_number],
+        '9067' => STANDARD_ERROR_CODE[:incorrect_number]
+      }
+      CARD_BRAND = {
+        'american_express' => 'A',
+        'master' => 'M',
+        'diners_club' => 'I',
+        'visa' => 'V',
+        'discover' => 'O'
+      }
+
+      def initialize(options={})
+        requires!(options, :api_key, :company_number, :merchant_number)
+        super
+      end
+
+      def purchase(money, payment, options={})
+        requires!(options, :order_id)
+        post = {}
+        add_terminal_number(post, options)
+        add_money(post, money)
+        add_operator_id(post, options)
+        add_invoice(post, money, options)
+        add_payment(post, payment)
+        add_address(post, payment, options)
+        add_customer_data(post, options)
+
+        payment.is_a?(String) ? commit('purchaseWithToken', post) : commit('purchase', post)
+      end
+
+      def authorize(money, payment, options={})
+        requires!(options, :order_id)
+        post = {}
+        add_money(post, money)
+        add_terminal_number(post, options)
+        add_operator_id(post, options)
+        add_invoice(post, money, options)
+        add_payment(post, payment)
+        add_address(post, payment, options)
+        add_customer_data(post, options)
+
+        payment.is_a?(String) ? commit('preAuthorizationWithToken', post) : commit('preAuthorization', post)
+      end
+
+      def capture(money, authorization, options={})
+        requires!(options, :order_id)
+        post = {}
+        add_invoice(post, money, options)
+        add_money(post, money)
+        add_customer_data(post, options)
+        transaction_number, authorization_number, invoice_number = split_authorization(authorization)
+        post[:OriginalTransactionNumber] = transaction_number
+        post[:OriginalAuthorizationNumber] = authorization_number
+        post[:OriginalInvoiceNumber] = invoice_number
+
+        commit('completion', post)
+      end
+
+      def refund(money, authorization, options={})
+        requires!(options, :order_id)
+        post = {}
+        add_invoice(post, money, options)
+        add_money(post, money)
+        add_customer_data(post, options)
+        transaction_number, _, invoice_number = split_authorization(authorization)
+        post[:OriginalTransactionNumber] = transaction_number
+        post[:OriginalInvoiceNumber] = invoice_number
+
+        commit('refundWithoutCard', post)
+      end
+
+      def credit(money, payment, options={})
+        requires!(options, :order_id)
+        post = {}
+        add_terminal_number(post, options)
+        add_money(post, money)
+        add_operator_id(post, options)
+        add_invoice(post, money, options)
+        add_payment(post, payment)
+        add_address(post, payment, options)
+        add_customer_data(post, options)
+
+        payment.is_a?(String) ? commit('refundWithToken', post) : commit('refund', post)
+      end
+
+      def void(authorization, options={})
+        post = {}
+        post[:InputType] = 'I'
+        post[:LanguageCode] = 'E'
+        transaction_number, _, invoice_number = split_authorization(authorization)
+        post[:OriginalTransactionNumber] = transaction_number
+        post[:OriginalInvoiceNumber] = invoice_number
+        add_operator_id(post, options)
+        add_customer_data(post, options)
+
+        commit('void', post)
+      end
+
+      def verify(credit_card, options={})
+        requires!(options, :order_id)
+        post = {}
+        add_terminal_number(post, options)
+        add_operator_id(post, options)
+        add_invoice(post, 0, options)
+        add_payment(post, credit_card)
+        add_address(post, credit_card, options)
+        add_customer_data(post, options)
+
+        commit('verifyAccount', post)
+      end
+
+      def store(credit_card, options={})
+        requires!(options, :email)
+        post = {
+          LanguageCode: 'E',
+          Name: credit_card.name.rjust(50, ' '),
+          Email: options[:email].rjust(240, ' ')
+        }
+        add_operator_id(post, options)
+        add_payment(post, credit_card)
+        add_customer_data(post, options)
+
+        commit('recur/AddUser', post)
+      end
+
+      def supports_scrubbing?
+        true
+      end
+
+      def scrub(transcript)
+        transcript.
+          gsub(%r((&?auth-api-key=)[^&]*)i, '\1[FILTERED]').
+          gsub(%r((&?payload=)[a-zA-Z%0-9=]+)i, '\1[FILTERED]').
+          gsub(%r((&?token:)[^&]*)i, '\1[FILTERED]').
+          gsub(%r((&?cardNumber:)[^&]*)i, '\1[FILTERED]')
+      end
+
+      private
+
+      def add_terminal_number(post, options)
+        post[:MerchantTerminalNumber] = options[:merchant_terminal_number] || ' ' * 5
+      end
+
+      def add_money(post, money)
+        post[:Amount] = money.to_s.rjust(11, '0')
+      end
+
+      def add_operator_id(post, options)
+        post[:OperatorID] = options[:operator_id] || '0' * 8
+      end
+
+      def add_customer_data(post, options)
+        post[:CustomerNumber] = options[:customer_number] || '0' * 8
+      end
+
+      def add_address(post, creditcard, options)
+        if address = options[:billing_address] || options[:address]
+          post[:CardHolderAddress] = "#{address[:address1]} #{address[:address2]} #{address[:city]} #{address[:state]}".rjust(20, ' ')
+          post[:CardHolderPostalCode] = address[:zip].gsub(/\s+/, '').rjust(9, ' ')
+        end
+      end
+
+      def add_invoice(post, money,  options)
+        post[:CurrencyCode] = options[:currency] || (currency(money) if money)
+        post[:InvoiceNumber] = options[:order_id].rjust(12, '0')
+        post[:InputType] = 'I'
+        post[:LanguageCode] = 'E'
+      end
+
+      def add_payment(post, payment)
+        if payment.is_a?(String)
+          post[:Token] = split_authorization(payment)[3].strip
+        else
+          post[:CardType] = CARD_BRAND[payment.brand] || ' '
+          post[:CardNumber] = payment.number.rjust(40, ' ')
+          post[:ExpirationDate] = expdate(payment)
+          post[:Cvv2Cvc2Number] = payment.verification_value
+        end
+      end
+
+      def parse(body)
+        JSON.parse(body)
+      end
+
+      def split_authorization(authorization)
+        authorization.split(';')
+      end
+
+      def commit_raw(action, parameters)
+        url = (test? ? test_url : live_url) + action
+        response = parse(ssl_post(url, post_data(action, parameters)))
+
+        Response.new(
+          success_from(response),
+          message_from(response),
+          response,
+          authorization: authorization_from(response),
+          avs_result: AVSResult.new(code: response['avsStatus']),
+          cvv_result: CVVResult.new(response['cvv2Cvc2Status']),
+          test: test?,
+          error_code: error_code_from(response)
+        )
+      end
+
+      def commit(action, parameters)
+        if action == 'void'
+          commit_raw(action, parameters)
+        else
+          MultiResponse.run(true) do |r|
+            r.process { commit_raw(action, parameters) }
+            r.process {
+              split_auth = split_authorization(r.authorization)
+              auth =  (action.include?('recur')? split_auth[4] : split_auth[0])
+              action.include?('recur') ? commit_raw('recur/ack', {ID: auth}) : commit_raw('ack', {TransactionNumber: auth})
+            }
+          end
+        end
+      end
+
+      def success_from(response)
+        return true if response['returnCode'] == '  00'
+        return true if response['returnCode'] == 'true'
+        return true if response['recurReturnCode'] == '  00'
+        return false
+      end
+
+      def message_from(response)
+        response['errorDescription'] || response['terminalDisp']&.strip
+      end
+
+      def authorization_from(response)
+        "#{response['transactionNumber']};#{response['authorizationNumber']};"\
+        "#{response['invoiceNumber']};#{response['token']};#{response['id']}"
+      end
+
+      def post_data(action, parameters = {})
+        parameters[:CompanyNumber] = @options[:company_number]
+        parameters[:MerchantNumber] = @options[:merchant_number]
+        parameters = parameters.collect do |key, value|
+          "#{key}=#{value}" unless value.nil? || value.empty?
+        end.join('&')
+        payload = Base64.strict_encode64(parameters)
+        "auth-api-key=#{@options[:api_key]}&payload=#{payload}".strip
+      end
+
+      def error_code_from(response)
+        STANDARD_ERROR_CODE_MAPPING[response['returnCode'].strip || response['recurReturnCode'.strip]] unless success_from(response)
+      end
+    end
+  end
+end