bayarcash 1.0.0

data/lib/bayarcash/security_utils.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module Bayarcash
+  # Constant-time string comparison helpers, mirroring PHP's `hash_equals`.
+  #
+  # This is the Ruby equivalent of `Rack::Utils.secure_compare` /
+  # `ActiveSupport::SecurityUtils.secure_compare` and is used to compare callback
+  # checksums so that verification is not vulnerable to timing attacks.
+  module SecurityUtils
+    module_function
+
+    # Compare two strings in (length-dependent but content-) constant time.
+    #
+    # @param left [String]
+    # @param right [String]
+    # @return [Boolean] true only when the two strings are byte-for-byte equal
+    def secure_compare(left, right)
+      left = left.to_s
+      right = right.to_s
+
+      return false unless left.bytesize == right.bytesize
+
+      if OpenSSL.respond_to?(:fixed_length_secure_compare)
+        begin
+          return OpenSSL.fixed_length_secure_compare(left, right)
+        rescue StandardError
+          # fall through to the manual implementation
+        end
+      end
+
+      l = left.unpack("C*")
+      res = 0
+      right.each_byte { |byte| res |= byte ^ l.shift }
+      res.zero?
+    end
+  end
+end

data/lib/bayarcash/util.rb

@@ -0,0 +1,92 @@
+# frozen_string_literal: true
+
+module Bayarcash
+  # Small helpers that reproduce PHP string/array semantics the gateway relies on.
+  module Util
+    module_function
+
+    # Cast a value to a string exactly the way PHP's `implode`/`(string)` cast does.
+    #
+    # This matters for byte-compatible checksum generation: `nil` becomes an empty
+    # string, booleans become "1"/"" and everything else uses its string form.
+    #
+    # @param value [Object]
+    # @return [String]
+    def php_string(value)
+      case value
+      when nil    then ""
+      when true   then "1"
+      when false  then ""
+      else value.to_s
+      end
+    end
+
+    # Whether a decoded JSON value is "falsy" in the PHP sense.
+    #
+    # Mirrors PHP's `json_decode($body, true) ?: $body` short-circuit so that empty
+    # or falsy payloads fall back to the raw response body.
+    #
+    # @param value [Object]
+    # @return [Boolean]
+    def php_falsy?(value)
+      case value
+      when nil, false then true
+      when 0, 0.0     then true
+      when "", "0"    then true
+      when Array, Hash then value.empty?
+      else false
+      end
+    end
+
+    # URL-encode a component the way PHP's `urlencode` does (spaces become "+").
+    #
+    # @param value [Object]
+    # @return [String]
+    def url_encode(value)
+      URI.encode_www_form_component(php_string(value))
+    end
+
+    # Build a URL-encoded query string, reproducing PHP's `http_build_query`
+    # (RFC1738 encoding, bracket notation for nested arrays and hashes).
+    #
+    # @param params [Hash]
+    # @param prefix [String, nil]
+    # @return [String]
+    def build_query(params, prefix = nil)
+      parts = []
+
+      params.each do |key, value|
+        composed_key = prefix ? "#{prefix}[#{key}]" : key.to_s
+
+        case value
+        when Hash
+          nested = build_query(value, composed_key)
+          parts << nested unless nested.empty?
+        when Array
+          value.each_with_index do |item, index|
+            if item.is_a?(Hash) || item.is_a?(Array)
+              nested = build_query({ index => item }, composed_key)
+              parts << nested unless nested.empty?
+            else
+              parts << "#{url_encode("#{composed_key}[#{index}]")}=#{url_encode(item)}"
+            end
+          end
+        else
+          parts << "#{url_encode(composed_key)}=#{url_encode(value)}"
+        end
+      end
+
+      parts.join("&")
+    end
+
+    # Parse a JSON string, returning nil on failure instead of raising.
+    #
+    # @param body [String]
+    # @return [Object, nil]
+    def safe_json(body)
+      JSON.parse(body)
+    rescue JSON::ParserError, TypeError
+      nil
+    end
+  end
+end

data/lib/bayarcash/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module Bayarcash
+  VERSION = "1.0.0"
+end

data/lib/bayarcash.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+require "json"
+require "openssl"
+require "uri"
+require "date"
+require "faraday"
+require "faraday/multipart"
+
+require_relative "bayarcash/version"
+require_relative "bayarcash/errors"
+require_relative "bayarcash/security_utils"
+require_relative "bayarcash/util"
+
+require_relative "bayarcash/resources/resource"
+require_relative "bayarcash/resources/payment_intent_resource"
+require_relative "bayarcash/resources/transaction_resource"
+require_relative "bayarcash/resources/portal_resource"
+require_relative "bayarcash/resources/fpx_bank_resource"
+require_relative "bayarcash/resources/fpx_direct_debit_resource"
+require_relative "bayarcash/resources/fpx_direct_debit_application_resource"
+
+require_relative "bayarcash/fpx"
+require_relative "bayarcash/fpx_direct_debit"
+require_relative "bayarcash/duit_now/dobw"
+
+require_relative "bayarcash/checksum_generator"
+require_relative "bayarcash/callback_verifications"
+require_relative "bayarcash/makes_http_requests"
+require_relative "bayarcash/fpx_direct_debit_payment_intent"
+require_relative "bayarcash/manual_bank_transfer"
+
+require_relative "bayarcash/client"
+
+# Bayarcash Ruby SDK.
+#
+# The primary entry point is {Bayarcash::Client}, an expressive, framework-agnostic
+# client for the Bayarcash Payment Gateway API. It mirrors the public surface of the
+# official PHP SDK while remaining idiomatic Ruby.
+module Bayarcash
+end

metadata

@@ -0,0 +1,152 @@
+--- !ruby/object:Gem::Specification
+name: bayarcash
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Web Impian
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: faraday
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.10'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.10'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: faraday-multipart
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.19'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.19'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+description: An expressive, framework-agnostic Ruby client for the Bayarcash Payment
+  Gateway API. Supports API v2 (default) and v3, checksum generation, callback verification,
+  FPX Direct Debit, and Manual Bank Transfer.
+email:
+- support@webimpian.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- LICENSE
+- README.md
+- bayarcash.gemspec
+- lib/bayarcash.rb
+- lib/bayarcash/callback_verifications.rb
+- lib/bayarcash/checksum_generator.rb
+- lib/bayarcash/client.rb
+- lib/bayarcash/duit_now/dobw.rb
+- lib/bayarcash/errors.rb
+- lib/bayarcash/fpx.rb
+- lib/bayarcash/fpx_direct_debit.rb
+- lib/bayarcash/fpx_direct_debit_payment_intent.rb
+- lib/bayarcash/makes_http_requests.rb
+- lib/bayarcash/manual_bank_transfer.rb
+- lib/bayarcash/resources/fpx_bank_resource.rb
+- lib/bayarcash/resources/fpx_direct_debit_application_resource.rb
+- lib/bayarcash/resources/fpx_direct_debit_resource.rb
+- lib/bayarcash/resources/payment_intent_resource.rb
+- lib/bayarcash/resources/portal_resource.rb
+- lib/bayarcash/resources/resource.rb
+- lib/bayarcash/resources/transaction_resource.rb
+- lib/bayarcash/security_utils.rb
+- lib/bayarcash/util.rb
+- lib/bayarcash/version.rb
+homepage: https://bayarcash.com/
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://bayarcash.com/
+  source_code_uri: https://github.com/bayarcash/ruby-sdk
+  changelog_uri: https://github.com/bayarcash/ruby-sdk/blob/main/CHANGELOG.md
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '2.7'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.11
+specification_version: 4
+summary: Ruby SDK for the Bayarcash payment gateway.
+test_files: []