activemerchant 1.42.6 → 1.90.0

data/lib/active_merchant/billing/gateways/quickbooks.rb

@@ -0,0 +1,290 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    class QuickbooksGateway < Gateway
+      self.test_url = 'https://sandbox.api.intuit.com'
+      self.live_url = 'https://api.intuit.com'
+
+      self.supported_countries = ['US']
+      self.default_currency = 'USD'
+      self.supported_cardtypes = [:visa, :master, :american_express, :discover, :diners]
+
+      self.homepage_url = 'http://payments.intuit.com'
+      self.display_name = 'QuickBooks Payments'
+      ENDPOINT =  '/quickbooks/v4/payments/charges'
+      OAUTH_ENDPOINTS = {
+        site: 'https://oauth.intuit.com',
+        request_token_path: '/oauth/v1/get_request_token',
+        authorize_url: 'https://appcenter.intuit.com/Connect/Begin',
+        access_token_path: '/oauth/v1/get_access_token'
+      }
+
+      # https://developer.intuit.com/docs/0150_payments/0300_developer_guides/error_handling
+
+      STANDARD_ERROR_CODE_MAPPING = {
+        # Fraud Warnings
+        'PMT-1000' => STANDARD_ERROR_CODE[:processing_error],   # payment was accepted, but refund was unsuccessful
+        'PMT-1001' => STANDARD_ERROR_CODE[:invalid_cvc],        # payment processed, but cvc was invalid
+        'PMT-1002' => STANDARD_ERROR_CODE[:incorrect_address],  # payment processed, incorrect address info
+        'PMT-1003' => STANDARD_ERROR_CODE[:processing_error],   # payment processed, address info couldn't be validated
+
+        # Fraud Errors
+        'PMT-2000' => STANDARD_ERROR_CODE[:incorrect_cvc],      # Incorrect CVC
+        'PMT-2001' => STANDARD_ERROR_CODE[:invalid_cvc],        # CVC check unavaliable
+        'PMT-2002' => STANDARD_ERROR_CODE[:incorrect_address],  # Incorrect address
+        'PMT-2003' => STANDARD_ERROR_CODE[:incorrect_address],  # Address info unavailable
+
+        'PMT-3000' => STANDARD_ERROR_CODE[:processing_error],   # Merchant account could not be validated
+
+        # Invalid Request
+        'PMT-4000' => STANDARD_ERROR_CODE[:processing_error],   # Object is invalid
+        'PMT-4001' => STANDARD_ERROR_CODE[:processing_error],   # Object not found
+        'PMT-4002' => STANDARD_ERROR_CODE[:processing_error],   # Object is required
+
+        # Transaction Declined
+        'PMT-5000' => STANDARD_ERROR_CODE[:card_declined],      # Request was declined
+        'PMT-5001' => STANDARD_ERROR_CODE[:card_declined],      # Merchant does not support given payment method
+
+        # System Error
+        'PMT-6000' => STANDARD_ERROR_CODE[:processing_error],   # A temporary Issue prevented this request from being processed.
+      }
+
+      FRAUD_WARNING_CODES = ['PMT-1000', 'PMT-1001', 'PMT-1002', 'PMT-1003']
+
+      def initialize(options = {})
+        requires!(options, :consumer_key, :consumer_secret, :access_token, :token_secret, :realm)
+        @options = options
+        super
+      end
+
+      def purchase(money, payment, options = {})
+        post = {}
+        add_amount(post, money, options)
+        add_charge_data(post, payment, options)
+        post[:capture] = 'true'
+
+        commit(ENDPOINT, post)
+      end
+
+      def authorize(money, payment, options = {})
+        post = {}
+        add_amount(post, money, options)
+        add_charge_data(post, payment, options)
+        post[:capture] = 'false'
+
+        commit(ENDPOINT, post)
+      end
+
+      def capture(money, authorization, options = {})
+        post = {}
+        capture_uri = "#{ENDPOINT}/#{CGI.escape(authorization)}/capture"
+        post[:amount] = localized_amount(money, currency(money))
+        add_context(post, options)
+
+        commit(capture_uri, post)
+      end
+
+      def refund(money, authorization, options = {})
+        post = {}
+        post[:amount] = localized_amount(money, currency(money))
+        add_context(post, options)
+
+        commit(refund_uri(authorization), post)
+      end
+
+      def verify(credit_card, options = {})
+        authorize(1.00, credit_card, options)
+      end
+
+      def supports_scrubbing?
+        true
+      end
+
+      def scrub(transcript)
+        transcript.
+          gsub(%r((realm=\")\w+), '\1[FILTERED]').
+          gsub(%r((oauth_consumer_key=\")\w+), '\1[FILTERED]').
+          gsub(%r((oauth_nonce=\")\w+), '\1[FILTERED]').
+          gsub(%r((oauth_signature=\")[a-zA-Z%0-9]+), '\1[FILTERED]').
+          gsub(%r((oauth_token=\")\w+), '\1[FILTERED]').
+          gsub(%r((number\D+)\d{16}), '\1[FILTERED]').
+          gsub(%r((cvc\D+)\d{3}), '\1[FILTERED]')
+      end
+
+      private
+
+      def add_charge_data(post, payment, options = {})
+        add_payment(post, payment, options)
+        add_address(post, options)
+      end
+
+      def add_address(post, options)
+        return unless post[:card]&.kind_of?(Hash)
+
+        card_address = {}
+        if address = options[:billing_address] || options[:address]
+          card_address[:streetAddress] = address[:address1]
+          card_address[:city] = address[:city]
+          card_address[:region] = address[:state] || address[:region]
+          card_address[:country] = address[:country]
+          card_address[:postalCode] = address[:zip] if address[:zip]
+        end
+        post[:card][:address] = card_address
+      end
+
+      def add_amount(post, money, options = {})
+        currency = options[:currency] || currency(money)
+        post[:amount] = localized_amount(money, currency)
+        post[:currency] = currency.upcase
+      end
+
+      def add_payment(post, payment, options = {})
+        add_creditcard(post, payment, options)
+        add_context(post, options)
+      end
+
+      def add_creditcard(post, creditcard, options = {})
+        card = {}
+        card[:number] = creditcard.number
+        card[:expMonth] = '%02d' % creditcard.month
+        card[:expYear] = creditcard.year
+        card[:cvc] = creditcard.verification_value if creditcard.verification_value?
+        card[:name] = creditcard.name if creditcard.name
+        card[:commercialCardCode] = options[:card_code] if options[:card_code]
+
+        post[:card] = card
+      end
+
+      def add_context(post, options = {})
+        post[:context] = {
+          mobile: options.fetch(:mobile, false),
+          isEcommerce: options.fetch(:ecommerce, true)
+        }
+      end
+
+      def parse(body)
+        JSON.parse(body)
+      end
+
+      def commit(uri, body = {}, method = :post)
+        endpoint = gateway_url + uri
+        # The QuickBooks API returns HTTP 4xx on failed transactions, which causes a
+        # ResponseError raise, so we have to inspect the response and discern between
+        # a legitimate HTTP error and an actual gateway transactional error.
+        response = begin
+          case method
+          when :post
+            ssl_post(endpoint, post_data(body), headers(:post, endpoint))
+          when :get
+            ssl_request(:get, endpoint, nil, headers(:get, endpoint))
+          else
+            raise ArgumentError, "Invalid HTTP method: #{method}. Valid methods are :post and :get"
+          end
+        rescue ResponseError => e
+          extract_response_body_or_raise(e)
+        end
+
+        response_object(response)
+      end
+
+      def response_object(raw_response)
+        parsed_response = parse(raw_response)
+
+        Response.new(
+          success?(parsed_response),
+          message_from(parsed_response),
+          parsed_response,
+          authorization: authorization_from(parsed_response),
+          test: test?,
+          cvv_result: cvv_code_from(parsed_response),
+          error_code: errors_from(parsed_response),
+          fraud_review: fraud_review_status_from(parsed_response)
+        )
+      end
+
+      def gateway_url
+        test? ? test_url : live_url
+      end
+
+      def post_data(data = {})
+        data.to_json
+      end
+
+      def headers(method, uri)
+        raise ArgumentError, "Invalid HTTP method: #{method}. Valid methods are :post and :get" unless [:post, :get].include?(method)
+        request_uri = URI.parse(uri)
+
+        # Following the guidelines from http://nouncer.com/oauth/authentication.html
+        oauth_parameters = {
+          oauth_nonce: generate_unique_id,
+          oauth_timestamp: Time.now.to_i.to_s,
+          oauth_signature_method: 'HMAC-SHA1',
+          oauth_version: '1.0',
+          oauth_consumer_key: @options[:consumer_key],
+          oauth_token: @options[:access_token]
+        }
+
+        # prepare components for signature
+        oauth_signature_base_string = [method.to_s.upcase, request_uri.to_s, oauth_parameters.to_param].map { |v| CGI.escape(v) }.join('&')
+        oauth_signing_key = [@options[:consumer_secret], @options[:token_secret]].map { |v| CGI.escape(v) }.join('&')
+        hmac_signature = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha1'), oauth_signing_key, oauth_signature_base_string)
+
+        # append signature to required OAuth parameters
+        oauth_parameters[:oauth_signature] = CGI.escape(Base64.encode64(hmac_signature).chomp.gsub(/\n/, ''))
+
+        # prepare Authorization header string
+        oauth_parameters = Hash[oauth_parameters.sort_by { |k, _| k }]
+        oauth_headers = ["OAuth realm=\"#{@options[:realm]}\""]
+        oauth_headers += oauth_parameters.map { |k, v| "#{k}=\"#{v}\"" }
+
+        {
+          'Content-type' => 'application/json',
+          'Request-Id' => generate_unique_id,
+          'Authorization' => oauth_headers.join(', ')
+        }
+      end
+
+      def cvv_code_from(response)
+        if response['errors'].present?
+          FRAUD_WARNING_CODES.include?(response['errors'].first['code']) ? 'I' : ''
+        else
+          success?(response) ? 'M' : ''
+        end
+      end
+
+      def success?(response)
+        return FRAUD_WARNING_CODES.concat(['0']).include?(response['errors'].first['code']) if response['errors']
+
+        !['DECLINED', 'CANCELLED'].include?(response['status'])
+      end
+
+      def message_from(response)
+        response['errors'].present? ? response['errors'].map { |error_hash| error_hash['message'] }.join(' ') : response['status']
+      end
+
+      def errors_from(response)
+        response['errors'].present? ? STANDARD_ERROR_CODE_MAPPING[response['errors'].first['code']] : ''
+      end
+
+      def authorization_from(response)
+        response['id']
+      end
+
+      def fraud_review_status_from(response)
+        response['errors'] && FRAUD_WARNING_CODES.include?(response['errors'].first['code'])
+      end
+
+      def extract_response_body_or_raise(response_error)
+        begin
+          parse(response_error.response.body)
+        rescue JSON::ParserError
+          raise response_error
+        end
+        response_error.response.body
+      end
+
+      def refund_uri(authorization)
+        "#{ENDPOINT}/#{CGI.escape(authorization)}/refunds"
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/gateways/quickpay/quickpay_common.rb

@@ -0,0 +1,184 @@
+module QuickpayCommon
+  MD5_CHECK_FIELDS = {
+    3 => {
+      :authorize => %w(protocol msgtype merchant ordernumber amount
+                       currency autocapture cardnumber expirationdate
+                       cvd cardtypelock testmode),
+
+      :capture   => %w(protocol msgtype merchant amount finalize transaction),
+
+      :cancel    => %w(protocol msgtype merchant transaction),
+
+      :refund    => %w(protocol msgtype merchant amount transaction),
+
+      :subscribe => %w(protocol msgtype merchant ordernumber cardnumber
+                       expirationdate cvd cardtypelock description testmode),
+
+      :recurring => %w(protocol msgtype merchant ordernumber amount
+                       currency autocapture transaction),
+
+      :status    => %w(protocol msgtype merchant transaction),
+
+      :chstatus  => %w(protocol msgtype merchant)
+    },
+
+    4 => {
+      :authorize => %w(protocol msgtype merchant ordernumber amount
+                       currency autocapture cardnumber expirationdate cvd
+                       cardtypelock testmode fraud_remote_addr
+                       fraud_http_accept fraud_http_accept_language
+                       fraud_http_accept_encoding fraud_http_accept_charset
+                       fraud_http_referer fraud_http_user_agent apikey),
+
+      :capture   => %w(protocol msgtype merchant amount finalize transaction apikey),
+
+      :cancel    => %w(protocol msgtype merchant transaction apikey),
+
+      :refund    => %w(protocol msgtype merchant amount transaction apikey),
+
+      :subscribe => %w(protocol msgtype merchant ordernumber cardnumber
+                       expirationdate cvd cardtypelock description testmode
+                       fraud_remote_addr fraud_http_accept fraud_http_accept_language
+                       fraud_http_accept_encoding fraud_http_accept_charset
+                       fraud_http_referer fraud_http_user_agent apikey),
+
+      :recurring => %w(protocol msgtype merchant ordernumber amount currency
+                       autocapture transaction apikey),
+
+      :status    => %w(protocol msgtype merchant transaction apikey),
+
+      :chstatus  => %w(protocol msgtype merchant apikey)
+    },
+
+    5 => {
+      :authorize => %w(protocol msgtype merchant ordernumber amount
+                       currency autocapture cardnumber expirationdate cvd
+                       cardtypelock testmode fraud_remote_addr
+                       fraud_http_accept fraud_http_accept_language
+                       fraud_http_accept_encoding fraud_http_accept_charset
+                       fraud_http_referer fraud_http_user_agent apikey),
+
+      :capture   => %w(protocol msgtype merchant amount finalize transaction apikey),
+
+      :cancel    => %w(protocol msgtype merchant transaction apikey),
+
+      :refund    => %w(protocol msgtype merchant amount transaction apikey),
+
+      :subscribe => %w(protocol msgtype merchant ordernumber cardnumber
+                       expirationdate cvd cardtypelock description testmode
+                       fraud_remote_addr fraud_http_accept fraud_http_accept_language
+                       fraud_http_accept_encoding fraud_http_accept_charset
+                       fraud_http_referer fraud_http_user_agent apikey),
+
+      :recurring => %w(protocol msgtype merchant ordernumber amount currency
+                       autocapture transaction apikey),
+
+      :status    => %w(protocol msgtype merchant transaction apikey),
+
+      :chstatus  => %w(protocol msgtype merchant apikey)
+    },
+
+    6 => {
+      :authorize => %w(protocol msgtype merchant ordernumber amount
+                       currency autocapture cardnumber expirationdate cvd
+                       cardtypelock testmode fraud_remote_addr
+                       fraud_http_accept fraud_http_accept_language
+                       fraud_http_accept_encoding fraud_http_accept_charset
+                       fraud_http_referer fraud_http_user_agent apikey),
+
+      :capture   => %w(protocol msgtype merchant amount finalize transaction
+                       apikey),
+
+      :cancel    => %w(protocol msgtype merchant transaction apikey),
+
+      :refund    => %w(protocol msgtype merchant amount transaction apikey),
+
+      :subscribe => %w(protocol msgtype merchant ordernumber cardnumber
+                       expirationdate cvd cardtypelock description testmode
+                       fraud_remote_addr fraud_http_accept fraud_http_accept_language
+                       fraud_http_accept_encoding fraud_http_accept_charset
+                       fraud_http_referer fraud_http_user_agent apikey),
+
+      :recurring => %w(protocol msgtype merchant ordernumber amount currency
+                       autocapture transaction apikey),
+
+      :status    => %w(protocol msgtype merchant transaction apikey),
+
+      :chstatus  => %w(protocol msgtype merchant apikey)
+    },
+
+    7 => {
+      :authorize => %w(protocol msgtype merchant ordernumber amount
+                       currency autocapture cardnumber expirationdate cvd
+                       acquirers cardtypelock testmode fraud_remote_addr
+                       fraud_http_accept fraud_http_accept_language
+                       fraud_http_accept_encoding fraud_http_accept_charset
+                       fraud_http_referer fraud_http_user_agent apikey),
+
+      :capture   => %w(protocol msgtype merchant amount finalize transaction
+                       apikey),
+
+      :cancel    => %w(protocol msgtype merchant transaction apikey),
+
+      :refund    => %w(protocol msgtype merchant amount transaction apikey),
+
+      :subscribe => %w(protocol msgtype merchant ordernumber amount currency
+                       cardnumber expirationdate cvd acquirers cardtypelock
+                       description testmode fraud_remote_addr fraud_http_accept
+                       fraud_http_accept_language fraud_http_accept_encoding
+                       fraud_http_accept_charset fraud_http_referer
+                       fraud_http_user_agent apikey),
+
+      :recurring => %w(protocol msgtype merchant ordernumber amount currency
+                       autocapture transaction apikey),
+
+      :status    => %w(protocol msgtype merchant transaction apikey),
+
+      :chstatus  => %w(protocol msgtype merchant apikey)
+    },
+
+    10 => {
+      :authorize => %w(mobile_number acquirer autofee customer_id extras
+                       zero_auth customer_ip),
+      :capture   => %w( extras ),
+      :cancel    => %w( extras ),
+      :refund    => %w( extras ),
+      :subscribe => %w( variables branding_id),
+      :authorize_subscription => %w( mobile_number acquirer customer_ip),
+      :recurring => %w(auto_capture autofee zero_auth)
+    }
+  }
+
+  RESPONSE_CODES = {
+    200 => 'OK',
+    201 => 'Created',
+    202 => 'Accepted',
+    400 => 'Bad Request',
+    401 => 'UnAuthorized',
+    402 => 'Payment Required',
+    403 => 'Forbidden',
+    404 => 'Not Found',
+    405 => 'Method Not Allowed',
+    406 => 'Not Acceptable',
+    409 => 'Conflict',
+    500 => 'Internal Server Error'
+  }
+
+  def self.included(base)
+    base.default_currency = 'DKK'
+    base.money_format = :cents
+
+    base.supported_cardtypes = [:dankort, :forbrugsforeningen, :visa, :master,
+                                :american_express, :diners_club, :jcb, :maestro]
+    base.supported_countries = ['DE', 'DK', 'ES', 'FI', 'FR', 'FO', 'GB', 'IS', 'NO', 'SE']
+    base.homepage_url = 'http://quickpay.net/'
+    base.display_name = 'QuickPay'
+  end
+
+  def expdate(credit_card)
+    year  = format(credit_card.year, :two_digits)
+    month = format(credit_card.month, :two_digits)
+
+    "#{year}#{month}"
+  end
+end