authorize_net 0.1.2 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7b5cdec68c5a0227090b0a075ec6e878bf8fdb9b
-  data.tar.gz: 235f499be6000dcd0f367a9fc50981a62938abfe
+  metadata.gz: b54a3c7b71d85f74a31ddc1536618b20a5e6091c
+  data.tar.gz: c0cfa47156d61008d8771b6052f1ea4abf620d7c
 SHA512:
-  metadata.gz: c58a95c0d03f517109d2bdecd2cf7876700e25a7e1b91b88dc4f5842eda41387d13f56178a28afcc291922a9da13a80ee644ceb7064d192a4a13bd45eb46c29c
-  data.tar.gz: 04497a6a05e80f074aeaa5cd465384b78625255a44623960717c99d08d96185ad928c5706c45132d43b8d13d14ca5bee8d4ad7e02c944265d4b33707460fcf8a
+  metadata.gz: d58bb0fc0b972b48d1f64060ea71eb787000d73320636e082e78873fa49d77a20b7d39efec3b13e035197d36deb3370f6563e694659f3cac996f16517f95a619
+  data.tar.gz: 9c546765a0a9cee9d6a56084ff81123acb2fcad37b66baefec4f656246a15864a8bdfc81bdc57e9bdd7c97a7d64d1e71b4940e4054366025b73e8962dd967191

data/lib/authorize_net/api.rb

@@ -9,11 +9,11 @@ require 'openssl'
 # ===============================================================
 class AuthorizeNet::Api
 
-  def initialize(api_login_id, api_transaction_key, options={})
+  def initialize(api_login_id, api_transaction_key, **options)
     @api_login_id = api_login_id
     @api_transaction_key = api_transaction_key
     @is_sandbox = options[:sandbox]
-    @md5_hash = options[:md5_hash]
+    @signature_key = options[:signature_key]
     @logger = nil
     @log_full_request = false
   end
@@ -47,7 +47,7 @@ class AuthorizeNet::Api
     end
 
     response = sendRequest("createTransactionRequest", xml_obj)
-    validate_hash(response, amount, use_api_login: true)
+    validate_hash(response, amount)
     if !response.nil?
       return AuthorizeNet::Transaction.parse(response)
     end
@@ -85,7 +85,7 @@ class AuthorizeNet::Api
     }
 
     response = sendRequest("createTransactionRequest", xml_obj)
-    validate_hash(response, amount, use_api_login: true)
+    validate_hash(response, amount)
     if !response.nil?
       return {
         :transaction => AuthorizeNet::Transaction.parse(response),
@@ -118,7 +118,7 @@ class AuthorizeNet::Api
     }
 
     response = sendRequest("createTransactionRequest", xml_obj)
-    validate_hash(response, amount, use_api_login: false)
+    validate_hash(response, amount)
     if !response.nil?
       return AuthorizeNet::Transaction.parse(response)
     end
@@ -280,21 +280,17 @@ class AuthorizeNet::Api
   #
   # @throws AuthorizeNet::Exception
   # =============================================
-  def validate_hash(response_xml, amount, options={})
-    if @md5_hash.nil?
+  def validate_hash(response_xml, amount)
+    if @signature_key.nil?
       return
     end
 
-    digest = OpenSSL::Digest.new('md5')
-    transaction_id = AuthorizeNet::Util.getXmlValue(response_xml, "transId")
-    trans_hash = AuthorizeNet::Util.getXmlValue(response_xml, "transHash").downcase
     formatted_amount = "%.2f" % amount
+    transaction_id = AuthorizeNet::Util.getXmlValue(response_xml, "transId")
+    hash_text = "^#{@api_login_id}^#{transaction_id}^#{formatted_amount}^"
 
-    if options[:use_api_login]
-      calculated_hash = digest.hexdigest("#{@md5_hash}#{@api_login_id}#{transaction_id}#{formatted_amount}")
-    else
-      calculated_hash = digest.hexdigest("#{@md5_hash}#{transaction_id}#{formatted_amount}")
-    end
+    calculated_hash = OpenSSL::HMAC.hexdigest('sha512', [@signature_key].pack('H*'), hash_text).downcase
+    trans_hash = AuthorizeNet::Util.getXmlValue(response_xml, "transHashSha2").downcase
 
     if calculated_hash != trans_hash
       if @logger.respond_to? :error

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: authorize_net
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 1.0.0
 platform: ruby
 authors:
 - Avenir Interactive LLC
@@ -14,22 +14,22 @@ dependencies:
   name: nokogiri
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.7.2
+        version: '1.10'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.6.7.2
+        version: 1.10.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.7.2
+        version: '1.10'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.6.7.2
+        version: 1.10.2
 description: A RubyGem that interfaces with the Authorize.net payment gateway
 email:
 - info@avenirhq.com
@@ -62,7 +62,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 2.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -70,7 +70,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.3
+rubygems_version: 2.4.5.1
 signing_key: 
 specification_version: 4
 summary: API interface for Authorize.net payment gateway