cetustek 0.10.0 → 0.11.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90bc8844eac9b3eb305d59f5550be7bf6e552b0fffafe74b0e71e6afc31c55ef
-  data.tar.gz: a9337fd9f37f80a3ec6532a319c4eac87ce1db79a475d7e237e3f2b59567a850
+  metadata.gz: 0420f85e7559d22ad6d71556fde48379ebc1eb6bbc468613ccdc70cd8a5395fe
+  data.tar.gz: 42f8df11ccc3c81fb6157212cca9c8a8ff7f99dc873fd8f85f2ce58b66e6821b
 SHA512:
-  metadata.gz: 57e5c7e15f119c182c8d0f38ef0c98ce40c682bc0262ed7043a09ed8c379a2603ae88d581bef8bcdc9e0f0a95cc5be85e6a6dc502f7c883bb7f6e74c9ebd8fa3
-  data.tar.gz: c267be5d85ea54c917d932453a910bfcca464b4e5441ad4f2c98aec3e4b2f567712e65617e6250186ebd6164ec39f4157ad12014cfce6445847afe7c8db1b926
+  metadata.gz: 24d02adabed95531ab98e07470dad9192781a0e8b2ad293fc73962e8dbeb4e06b7bcab193cc9d2697620820f0b6e2f8ff569105e32b6fde400440b7b0d86920d
+  data.tar.gz: 5deefced44974194851bd8c628fb35a21c1a3435e6cced143bab22a195f4b478d4db02701cd893caec4aba005ba4b70664830c523af954363b2e365aea4a79cb

data/CHANGELOG.md

@@ -5,6 +5,32 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.11.1] - 2026-09-04
+
+### Fixed
+
+- `QueryAllowance.find` 查無折讓單時會 raise `ResultError: nodata`，而不是回 nil。
+  `nodata` 的判斷原本是 `Xml.parse_response` 的 `nil_values:` 參數，只有
+  `QueryInvoice` 有傳。改成 `Xml::NIL_VALUES` 常數，所有查詢共用同一個判斷。
+
+## [0.11.0] - 2026-08-24
+
+### Added
+
+- `config.transport` — `:httpi` (預設，維持現有行為) 或 `:faraday`。設成其他值
+  在 `Cetustek.configure` 當下就 raise `ArgumentError`。
+
+### Fixed
+
+- 沙盒端點 `invoice.cetustek.com.tw` 的 `certificate verify failed`：savon 預設
+  的 HTTPI 首選 adapter 是 httpclient，而 httpclient 只認 gem 內附的
+  `cacert.pem`，裡面沒有該端點憑證鏈的根 Certum Trusted Root CA。只要 bundle
+  裡有 httpclient，沙盒開票就會全數失敗。`config.transport = :faraday` 改走
+  Faraday 的 `net_http`，讀系統信任庫。production (`www.ei.com.tw`) 不受影響。
+  Faraday 路徑不能傳 `open_timeout`/`read_timeout`（savon 2.17 的
+  `FaradayMigrationHint::OPTIONS` 會 raise），改由 `client.faraday.options`
+  設定，兩條路徑的 300 秒逾時一致。
+
 ## [0.10.0] - 2026-08-07
 
 延續 0.9.0 的 code review：統一驗證力度與查詢介面，讓四個查詢類別與

data/README.md

@@ -50,9 +50,33 @@ Cetustek.configure do |config|
   # Only the order id, invoice number and result code are logged (never the
   # response body); the request XML is logged at debug level on failure.
   config.logger = Rails.logger
+
+  # Optional. :httpi (default, savon's own HTTP stack) or :faraday.
+  # See "SSL on the sandbox endpoint" below — if sandbox calls fail with
+  # `certificate verify failed`, set this to :faraday.
+  config.transport = :faraday
 end
 ```
 
+### SSL on the sandbox endpoint (`certificate verify failed`)
+
+The sandbox endpoint `invoice.cetustek.com.tw` chains to **Certum Trusted Root
+CA**. Savon's default HTTP stack is HTTPI, whose first-choice adapter is
+`httpclient` — and `httpclient` ignores the system trust store, trusting only
+the `cacert.pem` bundled inside the gem, which does not include that root. So
+if anything in your bundle pulls in `httpclient` (plenty of gems do), every
+sandbox call fails with:
+
+```
+SSL_connect ... certificate verify failed (unable to get local issuer certificate)
+```
+
+Production (`www.ei.com.tw`, Sectigo/USERTrust) is unaffected.
+
+Fix it with `config.transport = :faraday`, which goes through Faraday's
+`net_http` adapter and reads the system trust store. The 300s open/read
+timeouts are applied either way.
+
 ## Usage
 
 ### Issue an Invoice

data/lib/cetustek/configuration.rb

@@ -2,11 +2,26 @@
 
 module Cetustek
   class Configuration
+    # HTTPI (savon 的預設) 第一順位是 httpclient，而 httpclient 只認 gem 內附的
+    # cacert.pem，裡面沒有 Certum Trusted Root CA — 也就是 sandbox 端點
+    # invoice.cetustek.com.tw 憑證鏈的根。只要環境裡有 httpclient，沙盒開票就會
+    # 全數 certificate verify failed。改用 :faraday 走 net_http，讀系統信任庫。
+    TRANSPORTS = %i[httpi faraday].freeze
+
     # logger is opt-in: nil means this gem writes nothing anywhere.
     attr_accessor :environment, :site_id, :username, :password, :logger
+    attr_reader :transport
 
     def initialize
       @environment = :sandbox
+      @transport = :httpi
+    end
+
+    def transport=(value)
+      raise ArgumentError, "transport must be one of #{TRANSPORTS.join(', ')}, got #{value.inspect}" \
+        unless TRANSPORTS.include?(value)
+
+      @transport = value
     end
 
     def url

data/lib/cetustek/queries.rb

@@ -30,7 +30,7 @@ module Cetustek
     # §2.5 QueryInvoicebyOrderid shares this exact XML shape (Table 13), so
     # QueryInvoiceByOrderId#find reuses this instead of duplicating it.
     def self.parse(xml)
-      root = Xml.parse_response(xml, nil_values: %w[nodata])
+      root = Xml.parse_response(xml)
       return nil unless root
 
       data = Xml.parse_fields(root, FIELDS)
@@ -66,7 +66,7 @@ module Cetustek
     # Query* classes — it used to be returned as if it were the number.
     def self.find(order_id)
       body = soap_return(query(order_id), :query_invoice_number_by_orderid).to_s.strip
-      return nil if body.empty? || body == 'nodata'
+      return nil if body.empty? || Xml::NIL_VALUES.include?(body)
       return body if body.match?(FORMAT)
 
       ResultCode.raise!(body, ResultCode::COMMON)
@@ -90,8 +90,8 @@ module Cetustek
     end
 
     # Same query, with the returned XML parsed into a Hash of snake_case keys
-    # plus a :details array. Values are the raw strings from the XML; returns
-    # nil when the platform answers with nothing at all.
+    # plus a :details array. Values are the raw strings from the XML; nil when
+    # the platform answers with nothing at all, or the documented "nodata".
     def self.find(allowance_number)
       parse(soap_return(query(allowance_number), :query_allowance))
     end

data/lib/cetustek/soap.rb

@@ -6,8 +6,26 @@ module Cetustek
   # Shared SOAP plumbing: every operation hits the same WSDL and authenticates
   # with 網站代碼+APIPassword (source) and the 租賃者統編 (rentid).
   module Soap
+    TIMEOUT = 300
+
     def soap_client
-      Savon.client(wsdl: Cetustek.config.url, open_timeout: 300, read_timeout: 300)
+      return httpi_client unless Cetustek.config.transport == :faraday
+
+      faraday_client
+    end
+
+    def httpi_client
+      Savon.client(wsdl: Cetustek.config.url, open_timeout: TIMEOUT, read_timeout: TIMEOUT)
+    end
+
+    # savon 2.17 的 FaradayMigrationHint::OPTIONS 會讓 open_timeout/read_timeout
+    # 在 transport: :faraday 下直接 raise，逾時改由 faraday 連線自己設。
+    def faraday_client
+      require 'faraday'
+      Savon.client(wsdl: Cetustek.config.url, transport: :faraday).tap do |client|
+        client.faraday.options.open_timeout = TIMEOUT
+        client.faraday.options.read_timeout = TIMEOUT
+      end
     end
 
     def source

data/lib/cetustek/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Cetustek
-  VERSION = "0.10.0"
+  VERSION = "0.11.1"
 end

data/lib/cetustek/xml.rb

@@ -8,6 +8,8 @@ module Cetustek
   # and a single <Invoice>/<Allowance> root carrying XSDVersion.
   module Xml
     XSD_VERSION = '2.8'
+    # 查無資料時平台回的字串，不是結果代碼。
+    NIL_VALUES = %w[nodata].freeze
 
     module_function
 
@@ -41,12 +43,13 @@ module Cetustek
     end
 
     # Shared guard every Query* class needs before it can parse a response
-    # body: nil for an empty answer or one of the documented sentinel strings
-    # (e.g. "nodata"); ResultError for a bare result code; otherwise the
-    # parsed root element, ready for parse_fields.
-    def parse_response(body, nil_values: [])
+    # body: nil for an empty answer or the documented "nodata" sentinel;
+    # ResultError for a bare result code; otherwise the parsed root element,
+    # ready for parse_fields. "nodata" is not per-query — every 查詢 answers
+    # with it when the number simply isn't there, so it lives here.
+    def parse_response(body)
       text = body.to_s.strip
-      return nil if text.empty? || nil_values.include?(text)
+      return nil if text.empty? || NIL_VALUES.include?(text)
 
       ResultCode.raise!(text, ResultCode::COMMON) unless text.start_with?('<')
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cetustek
 version: !ruby/object:Gem::Version
-  version: 0.10.0
+  version: 0.11.1
 platform: ruby
 authors:
 - Zac