defra_ruby_govpay 0.2.6 → 0.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0c82aff9dd09e95432ad62c5aedb6b4a2d8d4e9e42d9f17bac37ac7cbebbc90f
-  data.tar.gz: e859b6ca00740c0112aa80c117b3584dc2ae64f3be8aceb5fdc8cc055a2bdf59
+  metadata.gz: ac3b7ed597157e1d8efcb4a6220096407bfec1a87c570cb6f53026a324343feb
+  data.tar.gz: 2f5f8324e47f696598d464fdd9fb3fd32bf19fa0584e7abde98b06d7b6c91792
 SHA512:
-  metadata.gz: 62772d1e4dd940a2faa216a9c53d9e1c3fbbe1a36e04bfc7faa9af5969550c2a9ad1c5b3e8ca75d47052b3689a76618cd653d78d357f3d8c4c2409f17fbc3e3d
-  data.tar.gz: 1134a7ff08a8445cca67f50330f022a75e4e51fa08b13c0ef4e1c499659f9c88acf93397c1a1e5b963db4e953c8fd16f65456819a2c50257dc1ce260d5d30ad9
+  metadata.gz: ca9a4fb2f38cd10a18c5e5f0050dcde5fe9a9dae65b91257811853a3f1e3ad99a01be66341395fd466d93e376d5620f3618a9da448b819bb683988521cb398c8
+  data.tar.gz: cfb05cb7e6e85a5de86be4a0f093ba644b73d2462021e36372b82e5aad5299c873f74ec10ebdb6dd16a0d368fd6e04220b3feb96002c543bae3dba10ac0aed6a

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    defra_ruby_govpay (0.2.5)
+    defra_ruby_govpay (0.2.6)
       rest-client (~> 2.1)
 
 GEM

data/lib/defra_ruby_govpay/configuration.rb

@@ -5,6 +5,7 @@ module DefraRubyGovpay
   # for the DefraRubyGovpay module. You can set different options like
   # API tokens, host preferences, and other necessary configurations here.
   class Configuration
-    attr_accessor :govpay_url, :govpay_front_office_api_token, :govpay_back_office_api_token, :logger
+    attr_accessor :govpay_url, :govpay_front_office_api_token, :govpay_back_office_api_token, :logger,
+                  :front_office_webhook_signing_secret, :back_office_webhook_signing_secret
   end
 end

data/lib/defra_ruby_govpay/services/govpay_webhook_signature_service.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module DefraRubyGovpay
+  class GovpayWebhookSignatureService
+    class DigestFailure < StandardError; end
+
+    def self.run(body:)
+      new.run(body: body)
+    end
+
+    def run(body:)
+      generate_signatures(body.to_s)
+    rescue StandardError => e
+      DefraRubyGovpay.logger.error "Govpay payment webhook signature generation failed: #{e}"
+      raise DigestFailure, e
+    end
+
+    private
+
+    def generate_signatures(body)
+      {
+        front_office: hmac_digest(body, front_office_secret),
+        back_office: hmac_digest(body, back_office_secret)
+      }
+    end
+
+    def front_office_secret
+      DefraRubyGovpay.configuration.front_office_webhook_signing_secret
+    end
+
+    def back_office_secret
+      DefraRubyGovpay.configuration.back_office_webhook_signing_secret
+    end
+
+    def hmac_digest(body, secret)
+      digest = OpenSSL::Digest.new("sha256")
+      OpenSSL::HMAC.hexdigest(digest, secret, body)
+    end
+  end
+end

data/lib/defra_ruby_govpay/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module DefraRubyGovpay
-  VERSION = "0.2.6"
+  VERSION = "0.2.7"
 end

data/lib/defra_ruby_govpay.rb

@@ -9,11 +9,11 @@ require_relative "defra_ruby_govpay/payment"
 require_relative "defra_ruby_govpay/refund"
 require_relative "defra_ruby_govpay/error"
 require_relative "defra_ruby_govpay/api"
-require_relative "defra_ruby_govpay/callback_validator"
 require_relative "defra_ruby_govpay/services/govpay_webhook_base_service"
 require_relative "defra_ruby_govpay/services/govpay_webhook_payment_service"
 require_relative "defra_ruby_govpay/services/govpay_webhook_refund_service"
 require_relative "defra_ruby_govpay/services/govpay_webhook_sanitizer_service"
+require_relative "defra_ruby_govpay/services/govpay_webhook_signature_service"
 
 # The DefraRubyGovpay module facilitates integration with Govpay services.
 # It provides a convenient and configurable way to interact with Govpay APIs in Defra's ruby applications.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: defra_ruby_govpay
 version: !ruby/object:Gem::Version
-  version: 0.2.6
+  version: 0.2.7
 platform: ruby
 authors:
 - Jerome Pratt
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-04-23 00:00:00.000000000 Z
+date: 2025-04-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rest-client
@@ -48,7 +48,6 @@ files:
 - defra_ruby_govpay.gemspec
 - lib/defra_ruby_govpay.rb
 - lib/defra_ruby_govpay/api.rb
-- lib/defra_ruby_govpay/callback_validator.rb
 - lib/defra_ruby_govpay/configuration.rb
 - lib/defra_ruby_govpay/error.rb
 - lib/defra_ruby_govpay/object.rb
@@ -58,6 +57,7 @@ files:
 - lib/defra_ruby_govpay/services/govpay_webhook_payment_service.rb
 - lib/defra_ruby_govpay/services/govpay_webhook_refund_service.rb
 - lib/defra_ruby_govpay/services/govpay_webhook_sanitizer_service.rb
+- lib/defra_ruby_govpay/services/govpay_webhook_signature_service.rb
 - lib/defra_ruby_govpay/version.rb
 - sig/defra_ruby_govpay.rbs
 homepage: https://github.com/DEFRA/defra-ruby-govpay

data/lib/defra_ruby_govpay/callback_validator.rb

@@ -1,25 +0,0 @@
-# frozen_string_literal: true
-
-require "openssl"
-
-module DefraRubyGovpay
-  class CallbackValidator
-    def self.call(request_body, signing_secret, pay_signature_header)
-      new(request_body, signing_secret, pay_signature_header).call
-    end
-
-    attr_reader :request_body, :signing_secret, :pay_signature_header
-
-    def initialize(request_body, signing_secret, pay_signature_header)
-      @request_body = request_body
-      @signing_secret = signing_secret
-      @pay_signature_header = pay_signature_header
-    end
-
-    def call
-      hmac = OpenSSL::HMAC.hexdigest("sha256", signing_secret.encode("utf-8"), request_body.encode("utf-8"))
-
-      hmac == pay_signature_header
-    end
-  end
-end