RubyGems - epics - Versions diffs - 2.10.0 → 3.0.0.rc1 - Mend

epics 2.10.0 → 3.0.0.rc1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (245) hide show

checksums.yaml +4 -4
data/.gitignore +2 -1
data/.semaphore/semaphore.yml +17 -8
data/CHANGELOG.md +97 -0
data/EBICS_REFERENCES.md +169 -0
data/README.md +219 -50
data/lib/epics/azv.rb +3 -10
data/lib/epics/b2b.rb +3 -10
data/lib/epics/bka.rb +3 -14
data/lib/epics/builders/body_builder/base.rb +26 -0
data/lib/epics/builders/body_builder/v2.rb +9 -0
data/lib/epics/builders/body_builder/v3.rb +9 -0
data/lib/epics/builders/body_builder.rb +6 -0
data/lib/epics/builders/data_encryption_info_builder.rb +29 -0
data/lib/epics/builders/data_transfer_builder/base.rb +52 -0
data/lib/epics/builders/data_transfer_builder/v2.rb +9 -0
data/lib/epics/builders/data_transfer_builder/v3.rb +12 -0
data/lib/epics/builders/data_transfer_builder.rb +6 -0
data/lib/epics/builders/header_builder/base.rb +26 -0
data/lib/epics/builders/header_builder/v2.rb +9 -0
data/lib/epics/builders/header_builder/v3.rb +9 -0
data/lib/epics/builders/header_builder.rb +6 -0
data/lib/epics/builders/mutable_builder.rb +28 -0
data/lib/epics/builders/order_details_builder/base.rb +100 -0
data/lib/epics/builders/order_details_builder/v2.rb +21 -0
data/lib/epics/builders/order_details_builder/v3.rb +51 -0
data/lib/epics/builders/order_details_builder.rb +10 -0
data/lib/epics/builders/request_builder.rb +25 -0
data/lib/epics/builders/static_builder/base.rb +75 -0
data/lib/epics/builders/static_builder/v2.rb +9 -0
data/lib/epics/builders/static_builder/v3.rb +9 -0
data/lib/epics/builders/static_builder.rb +9 -0
data/lib/epics/builders/transfer_receipt_builder.rb +19 -0
data/lib/epics/builders/xml_builder/base.rb +92 -0
data/lib/epics/builders/xml_builder/v24.rb +31 -0
data/lib/epics/builders/xml_builder/v25.rb +31 -0
data/lib/epics/builders/xml_builder/v3.rb +31 -0
data/lib/epics/builders/xml_builder.rb +7 -0
data/lib/epics/builders.rb +13 -0
data/lib/epics/c2s.rb +3 -10
data/lib/epics/c52.rb +2 -14
data/lib/epics/c53.rb +2 -14
data/lib/epics/c54.rb +2 -14
data/lib/epics/c5n.rb +3 -14
data/lib/epics/ccs.rb +3 -10
data/lib/epics/cct.rb +3 -10
data/lib/epics/cd1.rb +3 -10
data/lib/epics/cdb.rb +3 -10
data/lib/epics/cdd.rb +3 -10
data/lib/epics/cds.rb +3 -10
data/lib/epics/cdz.rb +3 -14
data/lib/epics/cip.rb +3 -10
data/lib/epics/client.rb +491 -123
data/lib/epics/crypt/aes.rb +56 -0
data/lib/epics/crypt/x_509.rb +52 -0
data/lib/epics/crypt.rb +5 -0
data/lib/epics/crz.rb +3 -14
data/lib/epics/factories/crypt/aes_factory.rb +5 -0
data/lib/epics/factories/crypt.rb +4 -0
data/lib/epics/factories/request_factory/base.rb +236 -0
data/lib/epics/factories/request_factory/v2.rb +194 -0
data/lib/epics/factories/request_factory/v24.rb +32 -0
data/lib/epics/factories/request_factory/v25.rb +31 -0
data/lib/epics/factories/request_factory/v3.rb +305 -0
data/lib/epics/factories/request_factory.rb +8 -0
data/lib/epics/factories.rb +5 -0
data/lib/epics/fdl.rb +3 -18
data/lib/epics/ful.rb +6 -0
data/lib/epics/generic_request.rb +31 -92
data/lib/epics/generic_upload_request.rb +14 -67
data/lib/epics/haa.rb +3 -9
data/lib/epics/hac.rb +3 -14
data/lib/epics/handlers/auth_signature_handler.rb +102 -0
data/lib/epics/handlers/order_data_handler/base.rb +98 -0
data/lib/epics/handlers/order_data_handler/v2.rb +39 -0
data/lib/epics/handlers/order_data_handler/v24.rb +11 -0
data/lib/epics/handlers/order_data_handler/v25.rb +11 -0
data/lib/epics/handlers/order_data_handler/v3.rb +41 -0
data/lib/epics/handlers/order_data_handler.rb +8 -0
data/lib/epics/handlers/user_signature_handler/base.rb +10 -0
data/lib/epics/handlers/user_signature_handler/v2.rb +17 -0
data/lib/epics/handlers/user_signature_handler/v3.rb +17 -0
data/lib/epics/handlers/user_signature_handler.rb +6 -0
data/lib/epics/handlers.rb +6 -0
data/lib/epics/hev.rb +2 -15
data/lib/epics/hia.rb +4 -55
data/lib/epics/hkd.rb +3 -9
data/lib/epics/hpb.rb +3 -13
data/lib/epics/hpd.rb +3 -9
data/lib/epics/htd.rb +3 -9
data/lib/epics/ini.rb +4 -46
data/lib/epics/keyring.rb +17 -0
data/lib/epics/letter_renderer.rb +17 -22
data/lib/epics/ptk.rb +3 -14
data/lib/epics/response.rb +34 -29
data/lib/epics/services/crypt_service.rb +62 -0
data/lib/epics/services/digest_resolver/base.rb +30 -0
data/lib/epics/services/digest_resolver/v2.rb +13 -0
data/lib/epics/services/digest_resolver/v3.rb +19 -0
data/lib/epics/services/digest_resolver.rb +6 -0
data/lib/epics/services.rb +5 -0
data/lib/epics/signature.rb +50 -0
data/lib/epics/{key.rb → signature_algorithm/base.rb} +14 -21
data/lib/epics/signature_algorithm/rsa.rb +50 -0
data/lib/epics/signature_algorithm/rsapkcs1.rb +16 -0
data/lib/epics/signature_algorithm/rsapss.rb +20 -0
data/lib/epics/signature_algorithm.rb +2 -0
data/lib/epics/sta.rb +3 -14
data/lib/epics/version.rb +1 -1
data/lib/epics/vmk.rb +3 -14
data/lib/epics/wss.rb +3 -9
data/lib/epics/xct.rb +3 -10
data/lib/epics/xds.rb +3 -10
data/lib/epics/xe2.rb +3 -10
data/lib/epics/xe3.rb +3 -10
data/lib/epics/xek.rb +5 -0
data/lib/epics/yct.rb +6 -0
data/lib/epics/z01.rb +2 -14
data/lib/epics/z52.rb +2 -14
data/lib/epics/z53.rb +2 -14
data/lib/epics/z54.rb +2 -14
data/lib/epics/zsr.rb +5 -0
data/lib/epics.rb +69 -5
data/lib/letter/ini.erb +27 -6
data/spec/aes_spec.rb +46 -0
data/spec/auth_signature_handler_spec.rb +58 -0
data/spec/builders_spec.rb +616 -0
data/spec/certificate_handling_spec.rb +189 -0
data/spec/client_setup_block_spec.rb +41 -0
data/spec/client_spec.rb +143 -91
data/spec/crypt_service_spec.rb +132 -0
data/spec/date_range_spec.rb +46 -0
data/spec/digest_resolver_spec.rb +164 -0
data/spec/fixtures/bank_x509.pem +3 -0
data/spec/fixtures/xml/haa.xml +40 -1
data/spec/fixtures/xml/haa_receipt.xml +33 -30
data/spec/fixtures/xml/haa_response_h004.xml +4 -0
data/spec/fixtures/xml/haa_response_h005.xml +38 -0
data/spec/fixtures/xml/hia_request_order_data.xml +24 -1
data/spec/fixtures/xml/hpb_request.xml +1 -1
data/spec/fixtures/xml/hpb_response_x509.xml +16 -0
data/spec/fixtures/xml/htd_order_data_h005.xml +55 -0
data/spec/fixtures/xml/jruby/hia.xml +20 -22
data/spec/fixtures/xml/jruby/ini.xml +1 -3
data/spec/fixtures/xml/ruby/hia.xml +21 -1
data/spec/fixtures/xml/ruby/ini.xml +21 -1
data/spec/handlers_spec.rb +267 -0
data/spec/hpb_malformed_certificate_spec.rb +36 -0
data/spec/key_file_decryption_spec.rb +27 -0
data/spec/key_file_preservation_spec.rb +78 -0
data/spec/keyring_spec.rb +349 -0
data/spec/middleware/parse_ebics_spec.rb +2 -1
data/spec/order_id_spec.rb +65 -0
data/spec/orders/azv_spec.rb +63 -7
data/spec/orders/b2b_spec.rb +68 -3
data/spec/orders/bka_spec.rb +34 -4
data/spec/orders/c2s_spec.rb +62 -9
data/spec/orders/c52_spec.rb +34 -4
data/spec/orders/c53_spec.rb +34 -4
data/spec/orders/c54_spec.rb +36 -4
data/spec/orders/c5n_spec.rb +36 -4
data/spec/orders/camt_parity_spec.rb +80 -0
data/spec/orders/ccs_spec.rb +62 -9
data/spec/orders/cct_spec.rb +83 -9
data/spec/orders/cd1_spec.rb +50 -7
data/spec/orders/cdb_spec.rb +64 -7
data/spec/orders/cdd_spec.rb +64 -7
data/spec/orders/cds_spec.rb +74 -0
data/spec/orders/cdz_spec.rb +67 -4
data/spec/orders/cip_spec.rb +61 -9
data/spec/orders/crz_spec.rb +67 -4
data/spec/orders/fdl_spec.rb +143 -13
data/spec/orders/ful_spec.rb +63 -0
data/spec/orders/haa_spec.rb +115 -9
data/spec/orders/hac_spec.rb +89 -10
data/spec/orders/hev_spec.rb +1 -6
data/spec/orders/hia_spec.rb +25 -22
data/spec/orders/hkd_spec.rb +23 -4
data/spec/orders/hpb_spec.rb +7 -4
data/spec/orders/hpd_spec.rb +23 -4
data/spec/orders/htd_spec.rb +23 -4
data/spec/orders/ini_spec.rb +23 -18
data/spec/orders/ptk_spec.rb +27 -4
data/spec/orders/sta_spec.rb +129 -11
data/spec/orders/vmk_spec.rb +36 -4
data/spec/orders/wss_spec.rb +29 -3
data/spec/orders/x_509_certificate_spec.rb +9 -1
data/spec/orders/xct_spec.rb +63 -0
data/spec/orders/xds_spec.rb +13 -6
data/spec/orders/xe2_spec.rb +64 -7
data/spec/orders/xe3_spec.rb +64 -7
data/spec/orders/xek_spec.rb +31 -0
data/spec/orders/yct_spec.rb +43 -0
data/spec/orders/z01_spec.rb +34 -4
data/spec/orders/z52_spec.rb +34 -4
data/spec/orders/z53_spec.rb +34 -4
data/spec/orders/z54_spec.rb +36 -4
data/spec/orders/zsr_spec.rb +31 -0
data/spec/request_factory_spec.rb +444 -0
data/spec/response_business_error_spec.rb +45 -0
data/spec/response_validation_spec.rb +23 -0
data/spec/{key_spec.rb → signature_algorithm/rsa_pss_spec.rb} +4 -13
data/spec/support/ebics_matcher.rb +17 -9
data/spec/support/ebics_shared_examples.rb +642 -0
data/spec/support/h005_client_helper.rb +23 -0
data/spec/upload_digest_spec.rb +69 -0
data/spec/user_signature_handler_spec.rb +25 -0
data/spec/version_support_error_spec.rb +76 -0
data/spec/xsd/{ebics_hev.xsd → H000/ebics_hev.xsd} +0 -0
data/spec/xsd/H003/ebics.xsd +11 -0
data/spec/xsd/H003/ebics_keymgmt_request.xsd +555 -0
data/spec/xsd/H003/ebics_keymgmt_response.xsd +131 -0
data/spec/xsd/H003/ebics_orders.xsd +1811 -0
data/spec/xsd/H003/ebics_request.xsd +354 -0
data/spec/xsd/H003/ebics_response.xsd +161 -0
data/spec/xsd/{ebics_signature.xsd → H003/ebics_signature.xsd} +0 -0
data/spec/xsd/H003/ebics_types.xsd +2361 -0
data/spec/xsd/H003/xmldsig-core-schema.xsd +318 -0
data/spec/xsd/H004/ebics_signature.xsd +217 -0
data/spec/xsd/H005/ebics_H005.xsd +11 -0
data/spec/xsd/H005/ebics_keymgmt_request_H005.xsd +523 -0
data/spec/xsd/H005/ebics_keymgmt_response_H005.xsd +137 -0
data/spec/xsd/H005/ebics_orders_H005.xsd +2094 -0
data/spec/xsd/H005/ebics_request_H005.xsd +349 -0
data/spec/xsd/H005/ebics_response_H005.xsd +167 -0
data/spec/xsd/H005/ebics_signature_S002.xsd +177 -0
data/spec/xsd/H005/ebics_types_H005.xsd +1885 -0
data/spec/xsd/H005/xmldsig-core-schema.xsd +318 -0
metadata +200 -36
data/lib/epics/header_request.rb +0 -58
data/lib/epics/middleware/xmlsig.rb +0 -16
data/lib/epics/signer.rb +0 -40
data/lib/epics/x_509_certificate.rb +0 -15
data/lib/letter/ini_with_certs.erb +0 -335
data/spec/generic_upload_spec.rb +0 -58
data/spec/hpb_spec.rb +0 -15
data/spec/signer_spec.rb +0 -34
/data/spec/xsd/{ebics_H004.xsd → H004/ebics_H004.xsd} +0 -0
/data/spec/xsd/{ebics_keymgmt_request_H004.xsd → H004/ebics_keymgmt_request_H004.xsd} +0 -0
/data/spec/xsd/{ebics_keymgmt_response_H004.xsd → H004/ebics_keymgmt_response_H004.xsd} +0 -0
/data/spec/xsd/{ebics_orders_H004.xsd → H004/ebics_orders_H004.xsd} +0 -0
/data/spec/xsd/{ebics_request_H004.xsd → H004/ebics_request_H004.xsd} +0 -0
/data/spec/xsd/{ebics_response_H004.xsd → H004/ebics_response_H004.xsd} +0 -0
/data/spec/xsd/{ebics_types_H004.xsd → H004/ebics_types_H004.xsd} +0 -0
/data/spec/xsd/{xmldsig-core-schema.xsd → H004/xmldsig-core-schema.xsd} +0 -0

data/lib/epics/handlers/auth_signature_handler.rb ADDED Viewed

@@ -0,0 +1,102 @@
+class Epics::Handlers::AuthSignatureHandler
+  def initialize(keyring)
+    @keyring = keyring
+    @crypt_service = Epics::Services::CryptService.new
+  end
+  def handle(xml_builder)
+    signature_path = "//*[@authenticate='true']"
+    signature_method_algorithm = 'sha256'
+    digest_method_algorithm = 'sha256'
+    canonicalization_method_algorithm = 'REC-xml-c14n-20010315'
+    digest_transform_algorithm = 'REC-xml-c14n-20010315'
+    canonicalized_header = calculate_c14n(xml_builder.xml, signature_path, digest_transform_algorithm)
+    canonicalized_header_hash = @crypt_service.hash(canonicalized_header, digest_method_algorithm)
+    # Step 1: Build AuthSignature with SignedInfo and a placeholder SignatureValue
+    Nokogiri::XML::Builder.new do |xml|
+      @xml = xml
+      xml.AuthSignature do
+        xml.send('ds:SignedInfo') do
+          xml.send('ds:CanonicalizationMethod', Algorithm: urn_algorithm(canonicalization_method_algorithm))
+          xml.send('ds:SignatureMethod', Algorithm: "http://www.w3.org/2001/04/xmldsig-more#rsa-#{signature_method_algorithm}")
+          xml.send('ds:Reference', URI: "#xpointer(#{signature_path})") do
+            xml.send('ds:Transforms') do
+              xml.send('ds:Transform', Algorithm: urn_algorithm(digest_transform_algorithm))
+            end
+            xml.send('ds:DigestMethod', Algorithm: "http://www.w3.org/2001/04/xmlenc##{digest_method_algorithm}")
+            xml.send('ds:DigestValue', Base64.strict_encode64(canonicalized_header_hash))
+          end
+        end
+        xml.send('ds:SignatureValue', 'PLACEHOLDER')
+      end
+    end
+    # Step 2: Insert AuthSignature into the actual main document (before <body>)
+    xml_builder.xml.parent.children.last.add_previous_sibling @xml.parent.root
+    # Step 3: Canonicalize ds:SignedInfo from the main document context
+    # This ensures namespace inheritance matches what the bank will compute
+    signed_info_node = xml_builder.xml.doc.at_xpath(
+      '//ds:SignedInfo',
+      'ds' => 'http://www.w3.org/2000/09/xmldsig#'
+    )
+    c14n_mode = Nokogiri::XML::XML_C14N_1_0
+    canonicalized_signed_info = signed_info_node.canonicalize(c14n_mode)
+    # Step 4: Sign and replace placeholder with actual SignatureValue
+    canonicalized_signed_info_hash_encrypted = @crypt_service.encrypt(@keyring.user_authentication,
+                                                                      canonicalized_signed_info)
+    signature_value_node = xml_builder.xml.doc.at_xpath(
+      '//ds:SignatureValue',
+      'ds' => 'http://www.w3.org/2000/09/xmldsig#'
+    )
+    signature_value_node.content = Base64.strict_encode64(canonicalized_signed_info_hash_encrypted)
+  end
+  def to_xml
+    @xml.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML, encoding: 'utf-8')
+  end
+  private
+  def urn_algorithm(algorithm, with_comments = false)
+    urn = case algorithm
+          when 'xml-exc-c14n'
+            'http://www.w3.org/2001/10/'
+          when 'REC-xml-c14n-20010315'
+            'http://www.w3.org/TR/2001/'
+          when 'REC-xml-c14n11-20080502'
+            'http://www.w3.org/TR/2008/'
+          else
+            raise UnknownAlgorithmException, algorithm
+          end
+    urn += algorithm
+    urn += '#WithComments' if with_comments
+    urn
+  end
+  def calculate_c14n(xml, path, algorithm = 'REC-xml-c14n-20010315', with_comments = false)
+    mode = case algorithm
+           when 'xml-exc-c14n'
+             Nokogiri::XML::XML_C14N_EXCLUSIVE_1_0
+           when 'REC-xml-c14n-20010315'
+             Nokogiri::XML::XML_C14N_1_0
+           when 'REC-xml-c14n11-20080502'
+             Nokogiri::XML::XML_C14N_1_1
+           else
+             raise UnknownAlgorithmException, algorithm
+           end
+    xml.doc.xpath(path).map { |node| node.canonicalize(mode, nil, with_comments) }.join
+  end
+  class UnknownAlgorithmException < StandardError
+    attr_reader :algorithm
+    def initialize(algorithm)
+      @algorithm = algorithm
+      super("Unknown algorithm: #{algorithm}")
+    end
+  end
+end

data/lib/epics/handlers/order_data_handler/base.rb ADDED Viewed

@@ -0,0 +1,98 @@
+class Epics::Handlers::OrderDataHandler::Base
+  def initialize(client)
+    @client = client
+  end
+  def handle_ini(signature, timestamp = Time.now.utc)
+    create_signature_pubbey_order_data do
+      @xml.SignaturePubKeyInfo do
+        handle_x509_data(signature)
+        handle_ini_signature_pubkey(signature, timestamp)
+        @xml.SignatureVersion signature.version
+      end
+      handle_partner_id
+      handle_user_id
+    end
+  end
+  def handle_hia(authentication, encryption, timestamp = Time.now.utc)
+    create_hia_request_order_data do
+      @xml.AuthenticationPubKeyInfo do
+        handle_x509_data(authentication)
+        handle_hia_authentication_pubkey(authentication, timestamp)
+        @xml.AuthenticationVersion authentication.version
+      end
+      @xml.EncryptionPubKeyInfo do
+        handle_x509_data(encryption)
+        handle_hia_encryption_pubkey(encryption, timestamp)
+        @xml.EncryptionVersion encryption.version
+      end
+      handle_partner_id
+      handle_user_id
+    end
+  end
+  def to_xml
+    @xml.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML, encoding: 'utf-8')
+  end
+  protected
+  def create_signature_pubbey_order_data
+    Nokogiri::XML::Builder.new do |xml|
+      @xml = xml
+      yield
+    end
+  end
+  def create_hia_request_order_data(&block)
+    Nokogiri::XML::Builder.new do |xml|
+      @xml = xml
+      namespaces = { xmlns: h00x_namespace }
+      namespaces['xmlns:ds'] = 'http://www.w3.org/2000/09/xmldsig#'
+      @xml.HIARequestOrderData(**namespaces, &block)
+    end
+  end
+  def handle_ini_signature_pubkey(signature, timestamp)
+    raise NotImplementedError
+  end
+  def handle_hia_authentication_pubkey(authentication, timestamp)
+    raise NotImplementedError
+  end
+  def handle_hia_encryption_pubkey(encryption, timestamp)
+    raise NotImplementedError
+  end
+  def h00x_version
+    raise NotImplementedError
+  end
+  def h00x_namespace
+    raise NotImplementedError
+  end
+  private
+  def handle_x509_data(signature)
+    return unless signature.certificate
+    @xml.send('ds:X509Data') do
+      @xml.send('ds:X509IssuerSerial') do
+        @xml.send('ds:X509IssuerName', signature.certificate.issuer.to_s(OpenSSL::X509::Name::RFC2253))
+        @xml.send('ds:X509SerialNumber', signature.certificate.serial)
+      end
+      @xml.send('ds:X509Certificate', Base64.strict_encode64(signature.certificate.to_der))
+    end
+  end
+  def handle_partner_id
+    @xml.PartnerID @client.partner_id
+  end
+  def handle_user_id
+    @xml.UserID @client.user_id
+  end
+end

data/lib/epics/handlers/order_data_handler/v2.rb ADDED Viewed

@@ -0,0 +1,39 @@
+class Epics::Handlers::OrderDataHandler::V2 < Epics::Handlers::OrderDataHandler::Base
+  protected
+  def create_signature_pubbey_order_data
+    super do
+      namespaces = { xmlns: 'http://www.ebics.org/S001' }
+      namespaces['xmlns:ds'] = 'http://www.w3.org/2000/09/xmldsig#'
+      @xml.SignaturePubKeyOrderData **namespaces do
+        yield
+      end
+    end
+  end
+  def handle_ini_signature_pubkey(signature, timestamp)
+    handle_pubkey_value(signature, timestamp)
+  end
+  def handle_hia_authentication_pubkey(authentication, timestamp)
+    handle_pubkey_value(authentication, timestamp)
+  end
+  def handle_hia_encryption_pubkey(encryption, timestamp)
+    handle_pubkey_value(encryption, timestamp)
+  end
+  private
+  def handle_pubkey_value(signature, timestamp)
+    modulus = [signature.key.modulus.to_s(16)].pack('H*')
+    exponent = signature.key.exponent.to_s(2)
+    @xml.PubKeyValue do
+      @xml.send('ds:RSAKeyValue') do
+        @xml.send('ds:Modulus', Base64.strict_encode64(modulus))
+        @xml.send('ds:Exponent', Base64.strict_encode64(exponent))
+      end
+      @xml.TimeStamp timestamp.iso8601
+    end
+  end
+end

data/lib/epics/handlers/order_data_handler/v24.rb ADDED Viewed

@@ -0,0 +1,11 @@
+class Epics::Handlers::OrderDataHandler::V24 < Epics::Handlers::OrderDataHandler::V2
+  protected
+  def h00x_version
+    'H003'
+  end
+  def h00x_namespace
+    'http://www.ebics.org/H003'
+  end
+end

data/lib/epics/handlers/order_data_handler/v25.rb ADDED Viewed

@@ -0,0 +1,11 @@
+class Epics::Handlers::OrderDataHandler::V25 < Epics::Handlers::OrderDataHandler::V2
+  protected
+  def h00x_version
+    'H004'
+  end
+  def h00x_namespace
+    'urn:org:ebics:H004'
+  end
+end

data/lib/epics/handlers/order_data_handler/v3.rb ADDED Viewed

@@ -0,0 +1,41 @@
+class Epics::Handlers::OrderDataHandler::V3 < Epics::Handlers::OrderDataHandler::Base
+  protected
+  def h00x_version
+    'H005'
+  end
+  def h00x_namespace
+    'urn:org:ebics:H005'
+  end
+  def create_signature_pubbey_order_data(&block)
+    super do
+      namespaces = { xmlns: 'http://www.ebics.org/S002' }
+      namespaces['xmlns:ds'] = 'http://www.w3.org/2000/09/xmldsig#'
+      @xml.SignaturePubKeyOrderData(**namespaces, &block)
+    end
+  end
+  # H005 has no raw modulus/exponent form: the key travels inside the ds:X509Data that
+  # handle_x509_data emits. Without a certificate the element carries no key at all.
+  def handle_ini_signature_pubkey(signature, _timestamp)
+    require_certificate!(signature, Epics::Signature::TYPE_A)
+  end
+  def handle_hia_authentication_pubkey(authentication, _timestamp)
+    require_certificate!(authentication, Epics::Signature::TYPE_X)
+  end
+  def handle_hia_encryption_pubkey(encryption, _timestamp)
+    require_certificate!(encryption, Epics::Signature::TYPE_E)
+  end
+  private
+  def require_certificate!(signature, type)
+    return if signature.certificate
+    raise Epics::MissingCertificateError.new(signature.version, Epics::Client::CERTIFICATE_OPTIONS[type])
+  end
+end

data/lib/epics/handlers/order_data_handler.rb ADDED Viewed

@@ -0,0 +1,8 @@
+module Epics::Handlers::OrderDataHandler
+end
+require 'epics/handlers/order_data_handler/base'
+require 'epics/handlers/order_data_handler/v2'
+require 'epics/handlers/order_data_handler/v24'
+require 'epics/handlers/order_data_handler/v25'
+require 'epics/handlers/order_data_handler/v3'

data/lib/epics/handlers/user_signature_handler/base.rb ADDED Viewed

@@ -0,0 +1,10 @@
+class Epics::Handlers::UserSignatureHandler::Base
+  def initialize(client)
+    @client = client
+    @crypt_service = Epics::Services::CryptService.new
+  end
+  def handle(digest)
+    raise NotImplementedError
+  end
+end

data/lib/epics/handlers/user_signature_handler/v2.rb ADDED Viewed

@@ -0,0 +1,17 @@
+class Epics::Handlers::UserSignatureHandler::V2 < Epics::Handlers::UserSignatureHandler::Base
+  def handle(digest)
+    canonicalized_user_signature_data_hash_signed = @crypt_service.encrypt(@client.keyring.user_signature, digest)
+    Nokogiri::XML::Builder.new do |xml|
+      @xml = xml
+      xml.UserSignatureData('xmlns' => 'http://www.ebics.org/S001', 'xmlns:xsi' => 'http://www.w3.org/2001/XMLSchema-instance', 'xsi:schemaLocation' => 'http://www.ebics.org/S001 http://www.ebics.org/S001/ebics_signature.xsd') do
+        xml.OrderSignatureData do
+          xml.SignatureVersion @client.keyring.user_signature.version
+          xml.SignatureValue Base64.strict_encode64(canonicalized_user_signature_data_hash_signed)
+          xml.PartnerID @client.partner_id
+          xml.UserID @client.user_id
+        end
+      end
+    end
+  end
+end

data/lib/epics/handlers/user_signature_handler/v3.rb ADDED Viewed

@@ -0,0 +1,17 @@
+class Epics::Handlers::UserSignatureHandler::V3 < Epics::Handlers::UserSignatureHandler::Base
+  def handle(digest)
+    canonicalized_user_signature_data_hash_signed = @crypt_service.encrypt(@client.keyring.user_signature, digest)
+    Nokogiri::XML::Builder.new do |xml|
+      @xml = xml
+      xml.UserSignatureData('xmlns' => 'http://www.ebics.org/S002', 'xmlns:xsi' => 'http://www.w3.org/2001/XMLSchema-instance', 'xsi:schemaLocation' => 'http://www.ebics.org/S002 http://www.ebics.org/S002/ebics_signature.xsd') do
+        xml.OrderSignatureData do
+          xml.SignatureVersion @client.keyring.user_signature.version
+          xml.SignatureValue Base64.strict_encode64(canonicalized_user_signature_data_hash_signed)
+          xml.PartnerID @client.partner_id
+          xml.UserID @client.user_id
+        end
+      end
+    end
+  end
+end

data/lib/epics/handlers/user_signature_handler.rb ADDED Viewed

@@ -0,0 +1,6 @@
+module Epics::Handlers::UserSignatureHandler
+end
+require 'epics/handlers/user_signature_handler/base'
+require 'epics/handlers/user_signature_handler/v2'
+require 'epics/handlers/user_signature_handler/v3'

data/lib/epics/handlers.rb ADDED Viewed

@@ -0,0 +1,6 @@
+module Epics::Handlers
+end
+require 'epics/handlers/auth_signature_handler'
+require 'epics/handlers/order_data_handler'
+require 'epics/handlers/user_signature_handler'

data/lib/epics/hev.rb CHANGED Viewed

@@ -1,19 +1,6 @@
 class Epics::HEV < Epics::GenericRequest
-  def root
-    "ebicsHEVRequest"
-  end
-  def body
-    Nokogiri::XML::Builder.new do |xml|
-      xml.HostID host_id
-    end.doc.root
-  end
   def to_xml
-    Nokogiri::XML::Builder.new do |xml|
-      xml.send(root, 'xmlns:xsi' => 'http://www.w3.org/2001/XMLSchema-instance', 'xsi:schemaLocation' => 'http://www.ebics.org/H000 http://www.ebics.org/H000/ebics_hev.xsd', 'xmlns' => 'http://www.ebics.org/H000') {
-        xml.parent.add_child(body)
-      }
-    end.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML, encoding: 'utf-8')
+    builder = request_factory.create_hev
+    builder.to_xml
   end
 end

data/lib/epics/hia.rb CHANGED Viewed

@@ -1,62 +1,11 @@
 class Epics::HIA < Epics::GenericRequest
-  def root
-    "ebicsUnsecuredRequest"
-  end
-  def header
-    client.header_request.build(
-      order_type: 'HIA',
-      order_attribute: 'DZNNN',
-      with_bank_pubkey_digests: false,
-      mutable: {}
-    )
-  end
-  def body
-    Nokogiri::XML::Builder.new do |xml|
-      xml.body{
-        xml.DataTransfer {
-          xml.OrderData Base64.strict_encode64(Zlib::Deflate.deflate(order_data))
-        }
-      }
-    end.doc.root
-  end
   def order_data
-    Nokogiri::XML::Builder.new do |xml|
-      xml.HIARequestOrderData('xmlns:ds' => 'http://www.w3.org/2000/09/xmldsig#', 'xmlns' => 'urn:org:ebics:H004') {
-        xml.AuthenticationPubKeyInfo {
-          x509_data_xml(xml, client.x_509_certificate(:x))
-          xml.PubKeyValue {
-            xml.send('ds:RSAKeyValue') {
-              xml.send('ds:Modulus', Base64.strict_encode64([client.x.n].pack("H*")))
-              xml.send('ds:Exponent', Base64.strict_encode64(client.x.key.e.to_s(2)))
-            }
-          }
-          xml.AuthenticationVersion 'X002'
-        }
-        xml.EncryptionPubKeyInfo{
-          x509_data_xml(xml, client.x_509_certificate(:e))
-          xml.PubKeyValue {
-            xml.send('ds:RSAKeyValue') {
-              xml.send('ds:Modulus', Base64.strict_encode64([client.e.n].pack("H*")))
-              xml.send('ds:Exponent', Base64.strict_encode64(client.e.key.e.to_s(2)))
-            }
-          }
-          xml.EncryptionVersion 'E002'
-        }
-        xml.PartnerID partner_id
-        xml.UserID user_id
-      }
-    end.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML, encoding: 'utf-8')
+    order_data = order_data_handle.handle_hia(client.keyring.user_authentication, client.keyring.user_encryption)
+    order_data.to_xml
   end
   def to_xml
-    Nokogiri::XML::Builder.new do |xml|
-      xml.send(root, 'xmlns:ds' => 'http://www.w3.org/2000/09/xmldsig#', 'xmlns' => 'urn:org:ebics:H004', 'Version' => 'H004', 'Revision' => '1') {
-        xml.parent.add_child(header)
-        xml.parent.add_child(body)
-      }
-    end.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML, encoding: 'utf-8')
+    builder = request_factory.create_hia(order_data)
+    builder.to_xml
   end
 end

data/lib/epics/hkd.rb CHANGED Viewed

@@ -1,12 +1,6 @@
 class Epics::HKD < Epics::GenericRequest
-  def header
-    client.header_request.build(
-      nonce: nonce,
-      timestamp: timestamp,
-      order_type: 'HKD',
-      order_attribute: 'DZHNN',
-      order_params: {},
-      mutable: { TransactionPhase: 'Initialisation' }
-    )
+  def to_xml
+    builder = request_factory.create_hkd
+    builder.to_xml
   end
 end

data/lib/epics/hpb.rb CHANGED Viewed

@@ -1,16 +1,6 @@
 class Epics::HPB < Epics::GenericRequest
-  def root
-    "ebicsNoPubKeyDigestsRequest"
-  end
-  def header
-    client.header_request.build(
-      nonce: nonce,
-      timestamp: timestamp,
-      order_type: 'HPB',
-      order_attribute: 'DZHNN',
-      with_bank_pubkey_digests: false,
-      mutable: {}
-    )
+  def to_xml
+    builder = request_factory.create_hpb
+    builder.to_xml
   end
 end

data/lib/epics/hpd.rb CHANGED Viewed

@@ -1,12 +1,6 @@
 class Epics::HPD < Epics::GenericRequest
-  def header
-    client.header_request.build(
-      nonce: nonce,
-      timestamp: timestamp,
-      order_type: 'HPD',
-      order_attribute: 'DZHNN',
-      order_params: {},
-      mutable: { TransactionPhase: 'Initialisation' }
-    )
+  def to_xml
+    builder = request_factory.create_hpd
+    builder.to_xml
   end
 end

data/lib/epics/htd.rb CHANGED Viewed

@@ -1,12 +1,6 @@
 class Epics::HTD < Epics::GenericRequest
-  def header
-    client.header_request.build(
-      nonce: nonce,
-      timestamp: timestamp,
-      order_type: 'HTD',
-      order_attribute: 'DZHNN',
-      order_params: {},
-      mutable: { TransactionPhase: 'Initialisation' }
-    )
+  def to_xml
+    builder = request_factory.create_htd
+    builder.to_xml
   end
 end

data/lib/epics/ini.rb CHANGED Viewed

@@ -1,53 +1,11 @@
 class Epics::INI < Epics::GenericRequest
-  def root
-    "ebicsUnsecuredRequest"
-  end
-  def header
-    client.header_request.build(
-      order_type: 'INI',
-      order_attribute: 'DZNNN',
-      with_bank_pubkey_digests: false,
-      mutable: {},
-    )
-  end
-  def body
-    Nokogiri::XML::Builder.new do |xml|
-      xml.body{
-        xml.DataTransfer {
-          xml.OrderData Base64.strict_encode64(Zlib::Deflate.deflate(key_signature))
-        }
-      }
-    end.doc.root
-  end
   def key_signature
-    Nokogiri::XML::Builder.new do |xml|
-      xml.SignaturePubKeyOrderData('xmlns:ds' => 'http://www.w3.org/2000/09/xmldsig#', 'xmlns' => 'http://www.ebics.org/S001') {
-        xml.SignaturePubKeyInfo {
-          x509_data_xml(xml, client.x_509_certificate(:a))
-          xml.PubKeyValue {
-            xml.send('ds:RSAKeyValue') {
-              xml.send('ds:Modulus', Base64.strict_encode64([client.a.n].pack("H*")))
-              xml.send('ds:Exponent', Base64.strict_encode64(client.a.key.e.to_s(2)))
-            }
-            xml.TimeStamp timestamp
-          }
-          xml.SignatureVersion 'A006'
-        }
-        xml.PartnerID partner_id
-        xml.UserID user_id
-      }
-    end.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML, encoding: 'utf-8')
+    order_data = order_data_handle.handle_ini(client.keyring.user_signature)
+    order_data.to_xml
   end
   def to_xml
-    Nokogiri::XML::Builder.new do |xml|
-      xml.send(root, 'xmlns:ds' => 'http://www.w3.org/2000/09/xmldsig#', 'xmlns' => 'urn:org:ebics:H004', 'Version' => 'H004', 'Revision' => '1') {
-        xml.parent.add_child(header)
-        xml.parent.add_child(body)
-      }
-    end.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML, encoding: 'utf-8')
+    builder = request_factory.create_ini(key_signature)
+    builder.to_xml
   end
 end

data/lib/epics/keyring.rb ADDED Viewed

@@ -0,0 +1,17 @@
+class Epics::Keyring
+  VERSION_24 = 'H003'
+  VERSION_25 = 'H004'
+  VERSION_30 = 'H005'
+  VERSIONS = [VERSION_24, VERSION_25, VERSION_30]
+  attr_reader :version
+  attr_accessor :user_signature, :user_encryption, :user_authentication
+  attr_accessor :bank_encryption, :bank_authentication
+  def initialize(version)
+    raise ArgumentError, "Unsupported version: #{version}" unless VERSIONS.include?(version)
+    @version = version
+  end
+end

data/lib/epics/letter_renderer.rb CHANGED Viewed

@@ -5,6 +5,12 @@ class Epics::LetterRenderer
   def initialize(client)
     @client = client
+    @digest_resolver = case client.version
+    when Epics::Keyring::VERSION_24, Epics::Keyring::VERSION_25
+      Epics::Services::DigestResolver::V2.new
+    when Epics::Keyring::VERSION_30
+      Epics::Services::DigestResolver::V3.new
+    end
   end
   def translate(key, **options)
@@ -13,30 +19,19 @@ class Epics::LetterRenderer
   alias t translate
-  def_delegators :@client, :host_id, :user_id, :partner_id, :a, :x, :e
+  def_delegators :@digest_resolver, :confirm_digest
+  def_delegators :@client, :keyring,
+                 :host_id, :user_id, :partner_id,
+                 :signature_version, :signature_key,
+                 :encryption_version, :encryption_key,
+                 :authentication_version, :authentication_key
+  alias_method :a, :signature_key
+  alias_method :e, :encryption_key
+  alias_method :x, :authentication_key
   def render(bankname)
-    template_path = File.join(File.dirname(__FILE__), '../letter/', template_filename)
+    template_path = File.join(File.dirname(__FILE__), '../letter/ini.erb')
     ERB.new(File.read(template_path)).result(binding)
   end
-  def template_filename
-    use_x_509_certificate_template? ? 'ini_with_certs.erb' : 'ini.erb'
-  end
-  def use_x_509_certificate_template?
-    x_509_certificate_a_hash && x_509_certificate_x_hash && x_509_certificate_e_hash
-  end
-  def x_509_certificate_a_hash
-    @client.x_509_certificate_hash(:a)
-  end
-  def x_509_certificate_x_hash
-    @client.x_509_certificate_hash(:x)
-  end
-  def x_509_certificate_e_hash
-    @client.x_509_certificate_hash(:e)
-  end
 end