activemerchant 1.42.6 → 1.90.0

data/lib/active_merchant/billing/gateways/pac_net_raven.rb

@@ -1,15 +1,39 @@
 module ActiveMerchant #:nodoc:
   module Billing #:nodoc:
     class PacNetRavenGateway < Gateway
-      self.test_url = 'https://demo.deepcovelabs.com/realtime/'
-      self.live_url = 'https://raven.pacnetservices.com/realtime/'
+
+      AVS_ADDRESS_CODES = {
+        'avs_address_unavailable'   => 'X',
+        'avs_address_not_checked'   => 'X',
+        'avs_address_matched'       => 'Y',
+        'avs_address_not_matched'   => 'N',
+        'avs_address_partial_match' => 'N'
+      }
+
+      AVS_POSTAL_CODES = {
+        'avs_postal_unavailable'   => 'X',
+        'avs_postal_not_checked'   => 'X',
+        'avs_postal_matched'       => 'Y',
+        'avs_postal_not_matched'   => 'N',
+        'avs_postal_partial_match' => 'N'
+      }
+
+      CVV2_CODES = {
+        'cvv2_matched'     => 'Y',
+        'cvv2_not_matched' => 'N',
+        'cvv2_unavailable' => 'X',
+        'cvv2_not_checked' => 'X'
+      }
+
+      self.live_url = 'https://raven.deepcovelabs.net/realtime/'
+      self.test_url = self.live_url
 
       self.supported_countries = ['US']
-      self.supported_cardtypes = [:visa, :master, :american_express, :discover]
+      self.supported_cardtypes = [:visa, :master]
       self.money_format = :cents
       self.default_currency = 'USD'
-      self.homepage_url = 'http://www.pacnetservices.com/'
-      self.display_name = 'Raven PacNet'
+      self.homepage_url = 'https://www.deepcovelabs.com/raven'
+      self.display_name = 'Raven'
 
       def initialize(options = {})
         requires!(options, :user, :secret, :prn)
@@ -39,7 +63,7 @@ module ActiveMerchant #:nodoc:
       def void(authorization, options = {})
         post = {}
         post['TrackingNumber'] = authorization
-        post['PymtType'] = options[:pymt_type] || 'cc_debit'
+        post['PymtType'] = options[:pymt_type]
 
         commit('void', nil, post)
       end
@@ -83,7 +107,7 @@ module ActiveMerchant #:nodoc:
       end
 
       def parse(body)
-        Hash[body.split('&').map{|x| x.split('=').map{|x| CGI.unescape(x)}}]
+        Hash[body.split('&').map { |x| x.split('=').map { |y| CGI.unescape(y) } }]
       end
 
       def commit(action, money, parameters)
@@ -102,8 +126,11 @@ module ActiveMerchant #:nodoc:
           :test => test_mode,
           :authorization => response['TrackingNumber'],
           :fraud_review => fraud_review?(response),
-          :avs_result => { :postal_match => response['AVSPostalResponseCode'], :street_match => response['AVSAddressResponseCode'] },
-          :cvv_result => response['CVV2ResponseCode']
+          :avs_result => {
+                          :postal_match => AVS_POSTAL_CODES[response['AVSPostalResponseCode']],
+                          :street_match => AVS_ADDRESS_CODES[response['AVSAddressResponseCode']]
+                         },
+          :cvv_result => CVV2_CODES[response['CVV2ResponseCode']]
         )
       end
 
@@ -132,11 +159,11 @@ module ActiveMerchant #:nodoc:
         return response['Message'] if response['Message']
 
         if response['Status'] == 'Approved'
-          "This transaction has been approved"
+          'This transaction has been approved'
         elsif response['Status'] == 'Declined'
-          "This transaction has been declined"
+          'This transaction has been declined'
         elsif response['Status'] == 'Voided'
-          "This transaction has been voided"
+          'This transaction has been voided'
         else
           response['Status']
         end
@@ -152,36 +179,28 @@ module ActiveMerchant #:nodoc:
         post['RequestID']     = request_id
         post['Signature']     = signature(action, post, parameters)
 
-        request = post.merge(parameters).collect { |key, value| "#{key}=#{CGI.escape(value.to_s)}" }.join("&")
+        request = post.merge(parameters).collect { |key, value| "#{key}=#{CGI.escape(value.to_s)}" }.join('&')
         request
       end
 
       def timestamp
-        Time.now.strftime("%Y-%m-%dT%H:%M:%S.Z")
+        Time.now.strftime('%Y-%m-%dT%H:%M:%S.Z')
       end
 
       def request_id
-        (0...21).map{(65+rand(26)).chr}.join.downcase
+        SecureRandom.uuid
       end
 
       def signature(action, post, parameters = {})
         string = if %w(cc_settle cc_debit cc_preauth cc_refund).include?(action)
-          post['UserName'] + post['Timestamp'] + post['RequestID'] + post['PymtType'] + parameters['Amount'].to_s + parameters['Currency']
-        elsif action == 'void'
-          post['UserName'] + post['Timestamp'] + post['RequestID'] + parameters['TrackingNumber']
-        else
-          post['UserName']
+                   post['UserName'] + post['Timestamp'] + post['RequestID'] + post['PymtType'] + parameters['Amount'].to_s + parameters['Currency']
+                 elsif action == 'void'
+                   post['UserName'] + post['Timestamp'] + post['RequestID'] + parameters['TrackingNumber']
+                 else
+                   post['UserName']
         end
-        Digest::HMAC.hexdigest(string, @options[:secret], Digest::SHA1)
-      end
-
-      def expdate(creditcard)
-        year  = sprintf("%.4i", creditcard.year)
-        month = sprintf("%.2i", creditcard.month)
-
-        "#{month}#{year[-2..-1]}"
+        OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA1.new(@options[:secret]), @options[:secret], string)
       end
     end
   end
 end
-

data/lib/active_merchant/billing/gateways/pagarme.rb

@@ -0,0 +1,246 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    class PagarmeGateway < Gateway
+      self.live_url = 'https://api.pagar.me/1/'
+
+      self.supported_countries = ['BR']
+      self.default_currency = 'BRL'
+      self.money_format = :cents
+      self.supported_cardtypes = [:visa, :master, :american_express, :discover, :diners_club]
+
+      self.homepage_url = 'https://pagar.me/'
+      self.display_name = 'Pagar.me'
+
+      STANDARD_ERROR_CODE_MAPPING = {
+        'refused' => STANDARD_ERROR_CODE[:card_declined],
+        'processing_error' => STANDARD_ERROR_CODE[:processing_error],
+      }
+
+      def initialize(options={})
+        requires!(options, :api_key)
+        @api_key = options[:api_key]
+
+        super
+      end
+
+      def purchase(money, payment_method, options={})
+        post = {}
+        add_amount(post, money)
+        add_payment_method(post, payment_method)
+        add_metadata(post, options)
+
+        commit(:post, 'transactions', post)
+      end
+
+      def authorize(money, payment_method, options={})
+        post = {}
+        add_amount(post, money)
+        add_payment_method(post, payment_method)
+        add_metadata(post, options)
+
+        post[:capture] = false
+
+        commit(:post, 'transactions', post)
+      end
+
+      def capture(money, authorization, options={})
+        if authorization.nil?
+          return Response.new(false, 'Não é possível capturar uma transação sem uma prévia autorização.')
+        end
+
+        post = {}
+        commit(:post, "transactions/#{authorization}/capture", post)
+      end
+
+      def refund(money, authorization, options={})
+        if authorization.nil?
+          return Response.new(false, 'Não é possível estornar uma transação sem uma prévia captura.')
+        end
+
+        void(authorization, options)
+      end
+
+      def void(authorization, options={})
+        if authorization.nil?
+          return Response.new(false, 'Não é possível estornar uma transação autorizada sem uma prévia autorização.')
+        end
+
+        post = {}
+        commit(:post, "transactions/#{authorization}/refund", post)
+      end
+
+      def verify(payment_method, options={})
+        MultiResponse.run(:use_first_response) do |r|
+          r.process { authorize(127, payment_method, options) }
+          r.process(:ignore_result) { void(r.authorization, options) }
+        end
+      end
+
+      def supports_scrubbing?
+        true
+      end
+
+      def scrub(transcript)
+        transcript.
+          gsub(%r((Authorization: Basic )\w+), '\1[FILTERED]').
+          gsub(%r((card_number=)\d+), '\1[FILTERED]').
+          gsub(%r((card_cvv=)\d+), '\1[FILTERED]')
+      end
+
+      private
+
+      def add_amount(post, money)
+        post[:amount] = amount(money)
+      end
+
+      def add_payment_method(post, payment_method)
+        post[:payment_method] = 'credit_card'
+        add_credit_card(post, payment_method)
+      end
+
+      def add_credit_card(post, credit_card)
+        post[:card_number] = credit_card.number
+        post[:card_holder_name] = credit_card.name
+        post[:card_expiration_date] = "#{credit_card.month}/#{credit_card.year}"
+        post[:card_cvv] = credit_card.verification_value
+      end
+
+      def add_metadata(post, options={})
+        post[:metadata] = {}
+        post[:metadata][:order_id] = options[:order_id]
+        post[:metadata][:ip] = options[:ip]
+        post[:metadata][:customer] = options[:customer]
+        post[:metadata][:invoice] = options[:invoice]
+        post[:metadata][:merchant] = options[:merchant]
+        post[:metadata][:description] = options[:description]
+        post[:metadata][:email] = options[:email]
+      end
+
+      def parse(body)
+        JSON.parse(body)
+      end
+
+      def post_data(params)
+        return nil unless params
+
+        params.map do |key, value|
+          next if value != false && value.blank?
+          if value.is_a?(Hash)
+            h = {}
+            value.each do |k, v|
+              h["#{key}[#{k}]"] = v unless v.blank?
+            end
+            post_data(h)
+          elsif value.is_a?(Array)
+            value.map { |v| "#{key}[]=#{CGI.escape(v.to_s)}" }.join('&')
+          else
+            "#{key}=#{CGI.escape(value.to_s)}"
+          end
+        end.compact.join('&')
+      end
+
+      def headers(options = {})
+        {
+          'Authorization' => 'Basic ' + Base64.encode64(@api_key.to_s + ':x').strip,
+          'User-Agent' => "Pagar.me/1 ActiveMerchant/#{ActiveMerchant::VERSION}",
+          'Accept-Encoding' => 'deflate'
+        }
+      end
+
+      def api_request(method, endpoint, parameters = nil, options = {})
+        raw_response = response = nil
+        begin
+          raw_response = ssl_request(method, self.live_url + endpoint, post_data(parameters), headers(options))
+          response = parse(raw_response)
+        rescue ResponseError => e
+          raw_response = e.response.body
+          response = response_error(raw_response)
+        rescue JSON::ParserError
+          response = json_error(raw_response)
+        end
+        response
+      end
+
+      def commit(method, url, parameters, options = {})
+        response = api_request(method, url, parameters, options)
+
+        Response.new(
+          success_from(response),
+          message_from(response),
+          response,
+          authorization: authorization_from(response),
+          test: test?,
+          error_code: error_code_from(response)
+        )
+      end
+
+      def response_error(raw_response)
+        parse(raw_response)
+      rescue JSON::ParserError
+        json_error(raw_response)
+      end
+
+      def json_error(raw_response)
+        msg = 'Resposta inválida retornada pela API do Pagar.me. Por favor entre em contato com suporte@pagar.me se você continuar recebendo essa mensagem.'
+        msg += "  (A resposta retornada pela API foi #{raw_response.inspect})"
+        {
+          'errors' => [{
+            'message' => msg
+          }]
+        }
+      end
+
+      def success_from(response)
+        success_purchase = response.key?('status') && response['status'] == 'paid'
+        success_authorize = response.key?('status') && response['status'] == 'authorized'
+        success_refund = response.key?('status') && response['status'] == 'refunded'
+
+        success_purchase || success_authorize || success_refund
+      end
+
+      def failure_from(response)
+        response.key?('status') && response['status'] == 'refused'
+      end
+
+      def message_from(response)
+        if success_from(response)
+          case response['status']
+          when 'paid'
+            'Transação aprovada'
+          when 'authorized'
+            'Transação autorizada'
+          when 'refunded'
+            'Transação estornada'
+          else
+            "Transação com status '#{response["status"]}'"
+          end
+        elsif failure_from(response)
+          'Transação recusada'
+        elsif response.key?('errors')
+          response['errors'][0]['message']
+        else
+          msg = json_error(response)
+          msg['errors'][0]['message']
+        end
+      end
+
+      def authorization_from(response)
+        if success_from(response)
+          response['id']
+        end
+      end
+
+      def test?
+        @api_key.start_with?('ak_test')
+      end
+
+      def error_code_from(response)
+        if failure_from(response)
+          STANDARD_ERROR_CODE_MAPPING['refused']
+        elsif response.key?('errors')
+          STANDARD_ERROR_CODE_MAPPING['processing_error']
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/gateways/pago_facil.rb

@@ -0,0 +1,122 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    class PagoFacilGateway < Gateway
+      self.test_url = 'https://www.pagofacil.net/st/public/Wsrtransaccion/index/format/json?'
+      self.live_url = 'https://www.pagofacil.net/ws/public/Wsrtransaccion/index/format/json?'
+
+      self.supported_countries = ['MX']
+      self.default_currency = 'MXN'
+      self.supported_cardtypes = [:visa, :master, :american_express, :jcb]
+
+      self.homepage_url = 'http://www.pagofacil.net/'
+      self.display_name = 'PagoFacil'
+
+      def initialize(options={})
+        requires!(options, :branch_id, :merchant_id, :service_id)
+        super
+      end
+
+      def purchase(money, credit_card, options={})
+        post = {}
+        add_invoice(post, money, options)
+        add_payment(post, credit_card)
+        add_address(post, options)
+        add_customer_data(post, options)
+        add_merchant_data(post)
+
+        commit(post)
+      end
+
+      private
+
+      def add_customer_data(post, options)
+        post[:email] = options[:email]
+        post[:celular] = options[:cellphone]
+      end
+
+      def add_address(post, options)
+        address = options.fetch(:billing_address, {})
+        post[:calleyNumero] = address[:address1]
+        post[:colonia] = address[:address2]
+        post[:municipio] = address[:city]
+        post[:estado] = address[:state]
+        post[:pais] = address[:country]
+        post[:telefono] = address[:phone]
+        post[:cp] = address[:zip]
+      end
+
+      def add_invoice(post, money, options)
+        post[:monto] = amount(money)
+        post[:idPedido] = options[:order_id]
+        add_currency(post, money, options)
+      end
+
+      def add_currency(post, money, options)
+        currency = options.fetch(:currency, currency(money))
+        unless currency == self.class.default_currency
+          post[:divisa] = currency
+        end
+      end
+
+      def add_payment(post, credit_card)
+        post[:nombre] = credit_card.first_name
+        post[:apellidos] = credit_card.last_name
+        post[:numeroTarjeta] = credit_card.number
+        post[:cvt] = credit_card.verification_value
+        post[:mesExpiracion] = sprintf('%02d', credit_card.month)
+        post[:anyoExpiracion] = credit_card.year.to_s.slice(-2, 2)
+      end
+
+      def add_merchant_data(post)
+        post[:idSucursal] = options.fetch(:branch_id)
+        post[:idUsuario] = options.fetch(:merchant_id)
+        post[:idServicio] = options.fetch(:service_id)
+      end
+
+      def parse(body)
+        JSON.parse(body)['WebServices_Transacciones']['transaccion']
+      rescue JSON::ParserError
+        json_error(body)
+      end
+
+      def commit(parameters)
+        url = (test? ? test_url : live_url)
+        response = parse(ssl_post(url, post_data(parameters)))
+        Response.new(
+          success_from(response),
+          message_from(response),
+          response,
+          authorization: authorization_from(response),
+          test: test?
+        )
+      end
+
+      def success_from(response)
+        response['autorizado'] == '1' ||
+          response['autorizado'] == true
+      end
+
+      def message_from(response)
+        response['texto']
+      end
+
+      def authorization_from(response)
+        response['autorizacion']
+      end
+
+      def post_data(parameters = {})
+        {
+          method: 'transaccion',
+          data: parameters
+        }.to_query
+      end
+
+      def json_error(response)
+        {
+          'texto' => 'Invalid response received from the PagoFacil API.',
+          'raw_response' => response
+        }
+      end
+    end
+  end
+end