aliquot-pay 3.0.2 → 4.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eca8987a342cb9d4c72a68b9c45ec9431f7aa383b5688e20dd85ef8a2ba267c0
-  data.tar.gz: 4cf2a6489569dbe2edd79330aa74ac349ef1a765f954c6b1753cecda206bc006
+  metadata.gz: f0347fa0a06522e58ab9c2a9377c833cf362162eeb56d00ea1115282127d4a68
+  data.tar.gz: 15619eb5744be9d8e9dfe640ef61f75ed665ee4e036c8e0fc504df95ebac95d7
 SHA512:
-  metadata.gz: 63cafaccc975cfb2f6b9d0986209f95c5aee30074392380008d573c1bcfa1400b9ef545434f6f62d511f8fe8f3f96132af2780891789bcc080f6c1496e6bf40f
-  data.tar.gz: 145ce9d75ad93e496d98945af3f27964ddc46fb3723ef13951eda851bbf88a32ad0f27d353cc5ab5da2406055944aff8de93138cec7c9fb5674d94441d7dec28
+  metadata.gz: '0891095df48ec5fc8fb35705d369ff0504b75c41af817098155278c9dd61bbc1a53a1b4813b40bc48cb733cb1d8bb01e40680758d423c5112950e6d434ae939f'
+  data.tar.gz: 2daa9b11ae45383ebe4cd85a5f48cd394bed7e3f3a54ce212e566ef66359d01453cabbbc8c41b0231edb805fdfc62463645b05c097706117a1abacfa1bef0cb5

data/lib/aliquot-pay.rb

@@ -25,10 +25,16 @@ class AliquotPay
   attr_accessor :recipient, :info, :root_key, :intermediate_key
   attr_writer   :recipient_id, :shared_secret, :token, :signed_key_string
 
-  def initialize(protocol_version = :ECv2, root_key = nil)
+  def initialize(protocol_version: :ECv2, root_key: nil, type: :browser)
     @protocol_version = protocol_version
-    if root_key
-      @root_key = root_key
+    @root_key = root_key
+    @type = type
+    if @type == :app
+      @auth_method = 'CRYPTOGRAM_3DS'
+      if @protocol_version == :ECv1
+        @auth_method = '3DS'
+        @payment_method = 'TOKENIZED_CARD'
+      end
     end
   end
 
@@ -39,10 +45,10 @@ class AliquotPay
   def extract_root_signing_keys
     key = Base64.strict_encode64(ensure_root_key.to_der)
     {
-      'keys' => [
+      'keys' => [{
         'protocolVersion' => @protocol_version,
-        'keyValue'        => key,
-      ]
+        'keyValue'        => key
+      }]
     }.to_json
   end
 
@@ -68,7 +74,7 @@ class AliquotPay
     when :ECv2
       cipher = OpenSSL::Cipher::AES256.new(:CTR)
     else
-      raise StandardError, "Invalid protocol_version #{protocol_version}"
+      raise StandardError, "Invalid protocol_version #{@protocol_version}"
     end
 
     keys = AliquotPay::Util.derive_keys(eph.public_key.to_bn.to_s(2), ss, @info, @protocol_version)
@@ -83,29 +89,54 @@ class AliquotPay
     {
       'encryptedMessage'   => Base64.strict_encode64(encrypted_message),
       'ephemeralPublicKey' => Base64.strict_encode64(eph.public_key.to_bn.to_s(2)),
-      'tag'                => Base64.strict_encode64(tag),
+      'tag'                => Base64.strict_encode64(tag)
     }
   end
 
   def build_payment_method_details
     return @payment_method_details if @payment_method_details
+
+    return build_payment_method_details_non_tokenized if @type == :browser
+
+    build_payment_method_details_tokenized
+  end
+
+  def build_payment_method_details_non_tokenized
     value = {
       'pan'             => @pan              || '4111111111111111',
       'expirationYear'  => @expiration_year  || Time.now.year + 1,
-      'expirationMonth' => @expiration_month || 12,
-      'authMethod'      => @auth_method      || 'PAN_ONLY',
+      'expirationMonth' => @expiration_month || 12
     }
 
-    if @auth_method == 'CRYPTOGRAM_3DS'
+    if @protocol_version == :ECv2 && @type == :browser
       value.merge!(
-        'cryptogram'   => @cryptogram    || 'SOME CRYPTOGRAM',
-        'eciIndicator' => @eci_indicator || '05'
+        'authMethod' => @auth_method || 'PAN_ONLY'
       )
     end
-
     value
   end
 
+  def build_payment_method_details_tokenized
+    value = {
+      'expirationYear'  => @expiration_year  || Time.now.year + 1,
+      'expirationMonth' => @expiration_month || 12,
+      'eciIndicator'    => @eci_indicator    || '05'
+    }
+    if @protocol_version == :ECv1
+      value.merge!(
+        'dpan'          => @pan         || '4111111111111111',
+        'authMethod'    => @auth_method || '3DS',
+        '3dsCryptogram' => @cryptogram  || Base64.strict_encode64(OpenSSL::Random.random_bytes(20))
+      )
+    else
+      value.merge!(
+        'pan'        => @pan         || '4111111111111111',
+        'authMethod' => @auth_method || 'CRYPTOGRAM_3DS',
+        'cryptogram' => @cryptogram  || Base64.strict_encode64(OpenSSL::Random.random_bytes(20))
+      )
+    end
+  end
+
   def build_cleartext_message
     return @cleartext_message if @cleartext_message
 
@@ -114,8 +145,8 @@ class AliquotPay
 
     @cleartext_message = {
       'messageExpiration'    => @message_expiration || default_message_expiration,
-      'messageId'            => @message_id || default_message_id,
-      'paymentMethod'        => @payment_method || 'CARD',
+      'messageId'            => @message_id         || default_message_id,
+      'paymentMethod'        => @payment_method     || 'CARD',
       'paymentMethodDetails' => build_payment_method_details
     }
 
@@ -140,11 +171,12 @@ class AliquotPay
   end
 
   def signed_message_string
-    @signed_message_string ||= build_signed_message.to_json
+    build_signed_message.to_json
   end
 
   def build_signed_key
     return @signed_key if @signed_key
+
     ensure_intermediate_key
 
     if !@intermediate_key.private_key? && !@intermediate_key.public_key?
@@ -156,7 +188,7 @@ class AliquotPay
 
     @signed_key = {
       'keyExpiration' => @key_expiration || default_key_expiration,
-      'keyValue'      => @key_value || default_key_value,
+      'keyValue'      => @key_value      || default_key_value
     }
   end
 
@@ -181,40 +213,41 @@ class AliquotPay
             ensure_intermediate_key
           end
 
-    signature_string =
-      signed_string_message = ['Google',
-                               recipient_id,
-                               @protocol_version.to_s,
-                               signed_message_string].map do |str|
-        [str.length].pack('V') + str
-      end.join
+    signature_elements = [
+      'Google',
+      recipient_id,
+      @protocol_version.to_s,
+      signed_message_string
+    ]
+
+    signature_string = signature_elements.map { |e| [e.length].pack('V') + e }.join
     @signature = sign(key, signature_string)
   end
 
   def build_signatures
     return @signatures if @signatures
 
-    signature_string =
-      signed_key_signature = ['Google', 'ECv2', signed_key_string].map do |str|
-        [str.to_s.length].pack('V') + str.to_s
-      end.join
+    signature_string = ['Google', 'ECv2', signed_key_string].map do |str|
+      [str.to_s.length].pack('V') + str.to_s
+    end.join
 
     @signatures = [sign(ensure_root_key, signature_string)]
   end
 
   def build_token
     return @token if @token
+
     res = {
       'protocolVersion' => @protocol_version.to_s,
       'signedMessage'   => @signed_message || signed_message_string,
-      'signature'       => build_signature,
+      'signature'       => build_signature
     }
 
     if @protocol_version == :ECv2
       intermediate = {
         'intermediateSigningKey' => @intermediate_signing_key || {
           'signedKey'  => signed_key_string,
-          'signatures' => build_signatures,
+          'signatures' => build_signatures
         }
       }
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aliquot-pay
 version: !ruby/object:Gem::Version
-  version: 3.0.2
+  version: 4.0.1
 platform: ruby
 authors:
 - Clearhaus
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-01-04 00:00:00.000000000 Z
+date: 2024-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: hkdf
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -52,7 +52,7 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3'
-description: 
+description:
 email: hello@clearhaus.com
 executables: []
 extensions: []
@@ -64,7 +64,7 @@ homepage: https://github.com/clearhaus/aliquot-pay
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -79,8 +79,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.5
-signing_key: 
+rubygems_version: 3.3.26
+signing_key:
 specification_version: 4
 summary: Generates Google Pay test dummy tokens
 test_files: []