aliquot-pay 3.0.1 → 4.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bd781c1bcf3c08449d83bdd303af4e9ea5f626edf34ef36d693e59c5046bd76d
-  data.tar.gz: 14b8f7ca9f162cf03ff041f4a441e530b7847a13fbdc5d09de19cd3ccc8eb941
+  metadata.gz: 900a3ab50c572b86accb200902899275239c68e2951792467be905fa8495f796
+  data.tar.gz: ed4476fc237b67d49ea342bdca9db82782332ccf06be65de0d06ac6cf106b19f
 SHA512:
-  metadata.gz: be990eb9f8bce95b200b8c9be5fa88ec3fb24aaa8f91be448a76e0758f04a7717679bde3447c3a82fb42a63b1a7b257ba8a3d06ec296df9b685154f1b0233579
-  data.tar.gz: c635f9118731166e62d49ba5cedff290f78e28233303e92a07d562002a3b91c57e882e151ac46724da142ac5506452c71dcdd81e5eeef2da710d950fe82fe30b
+  metadata.gz: 6ddea3d61ed2dc2e2b35a3ddcb4e2afc329707af26a823efd55ba54d2491264e1af0e02a9a08e5b3efa005b69ffee15bc07b8a5566bad0b614acdb3b4a4d68f2
+  data.tar.gz: fd98206c62e82c6bda44e15c7bc9ac9ca2e279bbd0bb1e7ea78d671d1886ac917f5aba05fb7581832ab148f8577ec867eab9a8b1908d3ebbf3ce1de016ae70a0

data/lib/aliquot-pay.rb

@@ -25,11 +25,10 @@ class AliquotPay
   attr_accessor :recipient, :info, :root_key, :intermediate_key
   attr_writer   :recipient_id, :shared_secret, :token, :signed_key_string
 
-  def initialize(protocol_version = :ECv2, root_key = nil)
+  def initialize(protocol_version: :ECv2, root_key: nil, type: :browser)
     @protocol_version = protocol_version
-    if root_key
-      @root_key = root_key
-    end
+    @root_key = root_key
+    @type = type
   end
 
   def token
@@ -39,10 +38,10 @@ class AliquotPay
   def extract_root_signing_keys
     key = Base64.strict_encode64(ensure_root_key.to_der)
     {
-      'keys' => [
+      'keys' => [{
         'protocolVersion' => @protocol_version,
-        'keyValue'        => key,
-      ]
+        'keyValue'        => key
+      }]
     }.to_json
   end
 
@@ -68,7 +67,7 @@ class AliquotPay
     when :ECv2
       cipher = OpenSSL::Cipher::AES256.new(:CTR)
     else
-      raise StandardError, "Invalid protocol_version #{protocol_version}"
+      raise StandardError, "Invalid protocol_version #{@protocol_version}"
     end
 
     keys = AliquotPay::Util.derive_keys(eph.public_key.to_bn.to_s(2), ss, @info, @protocol_version)
@@ -83,29 +82,54 @@ class AliquotPay
     {
       'encryptedMessage'   => Base64.strict_encode64(encrypted_message),
       'ephemeralPublicKey' => Base64.strict_encode64(eph.public_key.to_bn.to_s(2)),
-      'tag'                => Base64.strict_encode64(tag),
+      'tag'                => Base64.strict_encode64(tag)
     }
   end
 
   def build_payment_method_details
     return @payment_method_details if @payment_method_details
+
+    return build_payment_method_details_non_tokenized if @type == :browser
+
+    build_payment_method_details_tokenized
+  end
+
+  def build_payment_method_details_non_tokenized
     value = {
       'pan'             => @pan              || '4111111111111111',
-      'expirationYear'  => @expiration_year  || 2023,
-      'expirationMonth' => @expiration_month || 12,
-      'authMethod'      => @auth_method      || 'PAN_ONLY',
+      'expirationYear'  => @expiration_year  || Time.now.year + 1,
+      'expirationMonth' => @expiration_month || 12
     }
 
-    if @auth_method == 'CRYPTOGRAM_3DS'
+    if @protocol_version == :ECv2 && @type == :browser
       value.merge!(
-        'cryptogram'   => @cryptogram    || 'SOME CRYPTOGRAM',
-        'eciIndicator' => @eci_indicator || '05'
+        'authMethod' => @auth_method || 'PAN_ONLY'
       )
     end
-
     value
   end
 
+  def build_payment_method_details_tokenized
+    value = {
+      'expirationYear'  => @expiration_year  || Time.now.year + 1,
+      'expirationMonth' => @expiration_month || 12,
+      'eciIndicator'    => @eci_indicator    || '05'
+    }
+    if @protocol_version == :ECv1
+      value.merge!(
+        'dpan'          => @pan         || '4111111111111111',
+        'authMethod'    => @auth_method || '3DS',
+        '3dsCryptogram' => @cryptogram  || Base64.strict_encode64(OpenSSL::Random.random_bytes(20))
+      )
+    else
+      value.merge!(
+        'pan'        => @pan         || '4111111111111111',
+        'authMethod' => @auth_method || 'CRYPTOGRAM_3DS',
+        'cryptogram' => @cryptogram  || Base64.strict_encode64(OpenSSL::Random.random_bytes(20))
+      )
+    end
+  end
+
   def build_cleartext_message
     return @cleartext_message if @cleartext_message
 
@@ -114,8 +138,8 @@ class AliquotPay
 
     @cleartext_message = {
       'messageExpiration'    => @message_expiration || default_message_expiration,
-      'messageId'            => @message_id || default_message_id,
-      'paymentMethod'        => @payment_method || 'CARD',
+      'messageId'            => @message_id         || default_message_id,
+      'paymentMethod'        => @payment_method     || 'CARD',
       'paymentMethodDetails' => build_payment_method_details
     }
 
@@ -140,11 +164,12 @@ class AliquotPay
   end
 
   def signed_message_string
-    @signed_message_string ||= build_signed_message.to_json
+    build_signed_message.to_json
   end
 
   def build_signed_key
     return @signed_key if @signed_key
+
     ensure_intermediate_key
 
     if !@intermediate_key.private_key? && !@intermediate_key.public_key?
@@ -156,7 +181,7 @@ class AliquotPay
 
     @signed_key = {
       'keyExpiration' => @key_expiration || default_key_expiration,
-      'keyValue'      => @key_value || default_key_value,
+      'keyValue'      => @key_value      || default_key_value
     }
   end
 
@@ -181,40 +206,49 @@ class AliquotPay
             ensure_intermediate_key
           end
 
-    signature_string =
-      signed_string_message = ['Google',
-                               recipient_id,
-                               @protocol_version.to_s,
-                               signed_message_string].map do |str|
-        [str.length].pack('V') + str
-      end.join
+    signature_elements = [
+      'Google',
+      recipient_id,
+      @protocol_version.to_s,
+      signed_message_string
+    ]
+
+    signature_string = signature_elements.map { |e| [e.length].pack('V') + e }.join
     @signature = sign(key, signature_string)
   end
 
   def build_signatures
     return @signatures if @signatures
 
-    signature_string =
-      signed_key_signature = ['Google', 'ECv2', signed_key_string].map do |str|
-        [str.to_s.length].pack('V') + str.to_s
-      end.join
+    signature_string = ['Google', 'ECv2', signed_key_string].map do |str|
+      [str.to_s.length].pack('V') + str.to_s
+    end.join
 
     @signatures = [sign(ensure_root_key, signature_string)]
   end
 
   def build_token
     return @token if @token
+
+    if @type == :app
+      @auth_method = 'CRYPTOGRAM_3DS'
+      if @protocol_version == :ECv1
+        @auth_method = '3DS'
+        @payment_method = 'TOKENIZED_CARD'
+      end
+    end
+
     res = {
       'protocolVersion' => @protocol_version.to_s,
       'signedMessage'   => @signed_message || signed_message_string,
-      'signature'       => build_signature,
+      'signature'       => build_signature
     }
 
     if @protocol_version == :ECv2
       intermediate = {
         'intermediateSigningKey' => @intermediate_signing_key || {
           'signedKey'  => signed_key_string,
-          'signatures' => build_signatures,
+          'signatures' => build_signatures
         }
       }
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aliquot-pay
 version: !ruby/object:Gem::Version
-  version: 3.0.1
+  version: 4.0.0
 platform: ruby
 authors:
 - Clearhaus
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-11-20 00:00:00.000000000 Z
+date: 2024-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: hkdf
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -79,7 +79,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
+rubygems_version: 3.1.6
 signing_key:
 specification_version: 4
 summary: Generates Google Pay test dummy tokens