fundraiser 1.0.0.beta

data/lib/amazon/fps/signature_utils_for_outbound.rb

@@ -0,0 +1,179 @@
+###############################################################################
+#  Copyright 2008-2010 Amazon Technologies, Inc
+#  Licensed under the Apache License, Version 2.0 (the "License");
+#
+#  You may not use this file except in compliance with the License.
+#  You may obtain a copy of the License at: http://aws.amazon.com/apache2.0
+#  This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+#  CONDITIONS OF ANY KIND, either express or implied. See the License for the
+#  specific language governing permissions and limitations under the License.
+##############################################################################
+
+require 'base64'
+require 'cgi'
+require 'openssl'
+require 'net/http'
+require 'net/https'
+require 'rexml/document'
+
+module Amazon
+  module FPS
+    class SignatureUtilsForOutbound
+
+      SIGNATURE_KEYNAME = "signature"
+      SIGNATURE_METHOD_KEYNAME = "signatureMethod"
+      SIGNATURE_VERSION_KEYNAME = "signatureVersion"
+      CERTIFICATE_URL_KEYNAME = "certificateUrl"
+      CERTIFICATE_URL_ROOT = "https://fps.amazonaws.com/"
+      CERTIFICATE_URL_ROOT_SANDBOX = "https://fps.sandbox.amazonaws.com/"
+
+      FPS_PROD_ENDPOINT = CERTIFICATE_URL_ROOT
+      FPS_SANDBOX_ENDPOINT = CERTIFICATE_URL_ROOT_SANDBOX
+      ACTION_PARAM = "?Action=VerifySignature"
+      END_POINT_PARAM = "&UrlEndPoint="
+      HTTP_PARAMS_PARAM = "&HttpParameters="
+      VERSION_PARAM_VALUE = "&Version=2008-09-17"
+
+      USER_AGENT_STRING = "SigV2_MigrationSampleCode_Ruby-2010-09-13"
+
+      SIGNATURE_VERSION_1 = "1"
+      SIGNATURE_VERSION_2 = "2"
+      RSA_SHA1_ALGORITHM = "RSA-SHA1"
+
+      def initialize(aws_access_key, aws_secret_key)
+        @aws_secret_key = aws_secret_key
+        @aws_access_key = aws_access_key
+      end
+
+      def validate_request(args)
+        parameters = args[:parameters]
+        return validate_signature_v2(args) if (parameters[SIGNATURE_VERSION_KEYNAME] == SIGNATURE_VERSION_2)
+        return validate_signature_v1(args)
+      end
+
+      def validate_signature_v1(args)
+        parameters = args[:parameters]
+        signature = "";
+        if(parameters[SIGNATURE_KEYNAME] != nil) then
+          signature = parameters[SIGNATURE_KEYNAME];
+        else
+          raise "Signature is missing from parameters"
+        end
+
+        canonical = SignatureUtilsForOutbound::calculate_string_to_sign_v1(args)
+        digest = OpenSSL::Digest::Digest.new('sha1')
+        return signature == Base64.encode64(OpenSSL::HMAC.digest(digest, @aws_secret_key, canonical)).chomp
+      end
+
+      def validate_signature_v2(args)
+        [:parameters,
+     :http_method,
+     :url_end_point].each do |arg|
+       raise "#{arg.inspect} is missing from the arguments." unless args[arg]
+     end
+
+     url_end_point = args[:url_end_point]
+
+     parameters = args[:parameters]
+     raise ":parameters must be enumerable" unless args[:parameters].kind_of? Enumerable
+
+     signature = parameters[SIGNATURE_KEYNAME];
+     raise "'signature' is missing from the parameters." if (signature.nil? or signature.empty?)
+
+     signature_version = parameters[SIGNATURE_VERSION_KEYNAME];
+     raise "'signatureVersion' is missing from the parameters." if (signature_version.nil? or signature_version.empty?)
+     raise "'signatureVersion' present in parameters is invalid. Valid values are: 2" if (signature_version != SIGNATURE_VERSION_2)
+
+     signature_method = parameters[SIGNATURE_METHOD_KEYNAME]
+     raise "'signatureMethod' is missing from the parameters." if (signature_method.nil? or signature_method.empty?)
+     signature_algorithm = SignatureUtilsForOutbound::get_algorithm(signature_method)
+     raise "'signatureMethod' present in parameters is invalid. Valid values are: RSA-SHA1" if (signature_algorithm.nil?)
+
+     certificate_url = parameters[CERTIFICATE_URL_KEYNAME]
+     raise "'certificate_url' is missing from the parameters." if (certificate_url.nil? or certificate_url.empty?)
+
+     # Construct VerifySignatureAPI request
+     if(SignatureUtilsForOutbound::starts_with(certificate_url, FPS_SANDBOX_ENDPOINT) == true) then
+       verify_signature_request = FPS_SANDBOX_ENDPOINT
+     elsif(SignatureUtilsForOutbound::starts_with(certificate_url, FPS_PROD_ENDPOINT) == true) then
+       verify_signature_request = FPS_PROD_ENDPOINT
+     else
+       raise "'certificateUrl' received is not valid. Valid certificate urls start with " <<
+       CERTIFICATE_URL_ROOT << " or " << CERTIFICATE_URL_ROOT_SANDBOX << "."
+     end
+
+     verify_signature_request = verify_signature_request + ACTION_PARAM +
+       END_POINT_PARAM +
+       SignatureUtilsForOutbound::urlencode(url_end_point) +
+       VERSION_PARAM_VALUE +
+       HTTP_PARAMS_PARAM +
+       SignatureUtilsForOutbound::urlencode(SignatureUtilsForOutbound::get_http_params(parameters))
+
+     verify_signature_response = SignatureUtilsForOutbound::get_http_data(verify_signature_request)
+
+     # parse the response
+     document = REXML::Document.new(verify_signature_response)
+
+     status_el = document.elements['VerifySignatureResponse/VerifySignatureResult/VerificationStatus']
+     return (!status_el.nil? && status_el.text == "Success")
+      end
+
+      def self.calculate_string_to_sign_v1(args)
+        parameters = args[:parameters]
+
+        # exclude any existing Signature parameter from the canonical string
+        sorted = (parameters.reject { |k, v| ((k == SIGNATURE_KEYNAME)) }).sort { |a,b| a[0].downcase <=> b[0].downcase }
+
+        canonical = ''
+        sorted.each do |v|
+          canonical << v[0]
+          canonical << v[1] unless(v[1].nil?)
+        end
+
+        return canonical
+      end
+
+      def self.get_algorithm(signature_method)
+        return OpenSSL::Digest::SHA1.new if (signature_method == RSA_SHA1_ALGORITHM)
+        return nil
+      end
+
+      # Convert a string into URL encoded form.
+      def self.urlencode(plaintext)
+        CGI.escape(plaintext.to_s).gsub("+", "%20").gsub("%7E", "~")
+      end
+
+      def self.get_http_data(url)
+        #2. fetch certificate if not found in cache
+        uri = URI.parse(url)
+        http_session = Net::HTTP.new(uri.host, uri.port)
+        http_session.use_ssl = true
+        http_session.ca_file = 'ca-bundle.crt'
+        http_session.verify_mode = OpenSSL::SSL::VERIFY_PEER
+        http_session.verify_depth = 5
+
+        res = http_session.start {|http_session|
+          req = Net::HTTP::Get.new(url, {"User-Agent" => USER_AGENT_STRING})
+          http_session.request(req)
+        }
+
+        return res.body
+      end
+
+      def self.starts_with(string, prefix)
+        prefix = prefix.to_s
+        string[0, prefix.length] == prefix
+      end
+
+      def self.get_http_params(params)
+        params.map do |(k, v)|
+          urlencode(k) + "=" + urlencode(v)
+        end.join("&")
+      end
+
+    end
+
+  end
+end
+
+

data/lib/amazon/fps/widget.rb

@@ -0,0 +1,58 @@
+module Amazon
+  module FPS
+    class Widget
+      @@app_name = "ASP"
+      @@http_method = "POST"
+      @@service_end_point = "https://authorize.payments-sandbox.amazon.com/pba/paypipeline"
+
+      @@access_key = "<Paste your access key id here>"
+      @@secret_key = "<Paste your secret key here>"
+
+      def self.get_paynow_widget_params(amount, description, reference_id, immediate_return,
+                                        return_url, abandon_url, process_immediate, ipn_url, cobranding_style, signature_version,
+                                        signatureMethod)
+        form_hidden_inputs = {}
+        form_hidden_inputs["accessKey"] = Fundraiser::Settings.aws_access_key
+        form_hidden_inputs["amount"] = amount
+        form_hidden_inputs["description"] = description
+
+        form_hidden_inputs["referenceId"] = reference_id unless reference_id.nil?
+        form_hidden_inputs["immediateReturn"] = immediate_return unless immediate_return.nil?
+        form_hidden_inputs["returnUrl"] = return_url unless return_url.nil?
+        form_hidden_inputs["abandonUrl"] = abandon_url unless abandon_url.nil?
+        form_hidden_inputs["processImmediate"] = process_immediate unless process_immediate.nil?
+        form_hidden_inputs["ipnUrl"] = ipn_url unless ipn_url.nil?
+        form_hidden_inputs["cobrandingStyle"] = cobranding_style unless cobranding_style.nil?
+        form_hidden_inputs[Amazon::FPS::SignatureUtils::SIGNATURE_VERSION_KEYNAME] = signature_version unless signature_version.nil?
+        form_hidden_inputs[Amazon::FPS::SignatureUtils::SIGNATURE_METHOD_KEYNAME] = signatureMethod unless signatureMethod.nil?
+
+        form_hidden_inputs
+      end
+
+      def self.get_paynow_widget_form(form_hidden_inputs)
+        form = "<form action=\"" + @@service_end_point + "\" method=\"" + @@http_method + "\">\n"
+        form += "<input type=\"image\" src=\"https://authorize.payments-sandbox.amazon.com/pba/images/payNowButton.png\" border=\"0\">\n"
+        form_hidden_inputs.each { |k,v|
+          form += "<input type=\"hidden\" name=\"" + k + "\" value=\"" + v + "\" >\n"
+        }
+        form += "</form>\n"
+      end
+
+      def self.widget(amount, title, reward_id, return_url, ipn_url)
+        uri = URI.parse(@@service_end_point)
+        params = get_paynow_widget_params(amount, title, reward_id.to_s, "1",
+                                          return_url, nil, "0",
+                                          ipn_url, "logo", "2", Amazon::FPS::SignatureUtils::HMAC_SHA256_ALGORITHM)
+
+        signature = Amazon::FPS::SignatureUtils.sign_parameters({:parameters => params,
+                                     :aws_secret_key => Fundraiser::Settings.aws_secret_key,
+                                     :host => uri.host,
+                                     :verb => @@http_method,
+                                     :uri  => uri.path })
+        params[Amazon::FPS::SignatureUtils::SIGNATURE_KEYNAME] = signature
+        paynow_widget_form = get_paynow_widget_form(params)
+        paynow_widget_form.html_safe
+      end
+    end
+  end
+end

data/lib/fundraiser.rb

@@ -0,0 +1,16 @@
+require "fundraiser/engine"
+require "haml-rails"
+require "persistent_settings"
+require "amazon/fps/signature_utils"
+require "amazon/fps/signature_utils_for_outbound"
+require "amazon/fps/widget"
+
+require "generators/fundraiser/views_generator"
+
+#TODO: This line is here due a Heroku issue:
+#
+#  http://stackoverflow.com/questions/11703679/opensslsslsslerror-on-heroku
+#
+#  No idea how it will work on other platforms
+#
+OpenSSL::SSL::VERIFY_PEER = OpenSSL::SSL::VERIFY_NONE

data/lib/fundraiser/engine.rb

@@ -0,0 +1,5 @@
+module Fundraiser
+  class Engine < ::Rails::Engine
+    isolate_namespace Fundraiser
+  end
+end

data/lib/fundraiser/version.rb

@@ -0,0 +1,3 @@
+module Fundraiser
+  VERSION = "1.0.0.beta"
+end

data/lib/generators/fundraiser/views_generator.rb

@@ -0,0 +1,11 @@
+require 'rails/generators'
+
+module Fundraiser
+  class ViewsGenerator < ::Rails::Generators::Base
+    source_root File.expand_path('../../../../app/', __FILE__)
+
+    def copy_views
+      directory 'views', 'app/views'
+    end
+  end
+end

data/lib/tasks/fundraiser_tasks.rake

@@ -0,0 +1,7 @@
+namespace :fundraiser do
+  namespace :settings do
+    task :init => :environment do
+      Fundraiser::Settings.amazon!
+    end
+  end
+end

metadata

@@ -0,0 +1,293 @@
+--- !ruby/object:Gem::Specification
+name: fundraiser
+version: !ruby/object:Gem::Version
+  version: 1.0.0.beta
+  prerelease: 6
+platform: ruby
+authors:
+- David Padilla
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2012-10-12 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 3.2.8
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 3.2.8
+- !ruby/object:Gem::Dependency
+  name: haml-rails
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 0.3.5
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 0.3.5
+- !ruby/object:Gem::Dependency
+  name: persistent_settings
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.3.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.3.0
+- !ruby/object:Gem::Dependency
+  name: autotest
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: autotest-growl
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: capybara
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: faker
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: launchy
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec-rails
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: vcr
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Mountable Engine to set up a Crowdfunding app
+email:
+- david@crowdint.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- app/assets/javascripts/fundraiser/application.js
+- app/assets/stylesheets/fundraiser/application.css
+- app/assets/stylesheets/fundraiser/styles/forms.css.scss
+- app/controllers/fundraiser/application_controller.rb
+- app/controllers/fundraiser/home_controller.rb
+- app/controllers/fundraiser/ipns_controller.rb
+- app/controllers/fundraiser/manage/base_controller.rb
+- app/controllers/fundraiser/manage/rewards_controller.rb
+- app/controllers/fundraiser/manage/settings_controller.rb
+- app/controllers/fundraiser/pledges_controller.rb
+- app/controllers/fundraiser/rewards_controller.rb
+- app/controllers/fundraiser/thanks_controller.rb
+- app/helpers/fundraiser/application_helper.rb
+- app/models/fundraiser/contribution.rb
+- app/models/fundraiser/pledge.rb
+- app/models/fundraiser/reward.rb
+- app/models/fundraiser/settings.rb
+- app/views/fundraiser/application/_alerts.html.haml
+- app/views/fundraiser/application/_bootstrap_text_area.html.haml
+- app/views/fundraiser/application/_bootstrap_text_field.html.haml
+- app/views/fundraiser/application/_navbar.html.haml
+- app/views/fundraiser/devise/sessions/new.html.haml
+- app/views/fundraiser/home/show.html.haml
+- app/views/fundraiser/manage/rewards/_form.html.haml
+- app/views/fundraiser/manage/rewards/_reward.html.haml
+- app/views/fundraiser/manage/rewards/edit.html.haml
+- app/views/fundraiser/manage/rewards/index.html.haml
+- app/views/fundraiser/manage/rewards/new.html.haml
+- app/views/fundraiser/manage/settings/edit.html.haml
+- app/views/fundraiser/pledges/new.html.haml
+- app/views/fundraiser/pledges/show.html.haml
+- app/views/fundraiser/rewards/_reward.html.haml
+- app/views/fundraiser/rewards/index.html.haml
+- app/views/fundraiser/thanks/show.html.haml
+- app/views/layouts/fundraiser/application.html.haml
+- config/initializers/settings.rb
+- config/locales/devise.en.yml
+- config/routes.rb
+- db/migrate/20121008183146_create_fundraiser_settings.rb
+- db/migrate/20121009000016_create_fundraiser_rewards.rb
+- db/migrate/20121009070136_create_fundraiser_pledges.rb
+- db/migrate/20121010182436_create_fundraiser_contributions.rb
+- lib/amazon/fps/signature_utils.rb
+- lib/amazon/fps/signature_utils_for_outbound.rb
+- lib/amazon/fps/widget.rb
+- lib/fundraiser/engine.rb
+- lib/fundraiser/version.rb
+- lib/fundraiser.rb
+- lib/generators/fundraiser/views_generator.rb
+- lib/tasks/fundraiser_tasks.rake
+- MIT-LICENSE
+- Rakefile
+- README.md
+homepage: https://github.com/crowdint/fundraiser
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+      segments:
+      - 0
+      hash: -2185317738514943577
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>'
+    - !ruby/object:Gem::Version
+      version: 1.3.1
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.23
+signing_key: 
+specification_version: 3
+summary: Mountable Engine to set up a Crowdfunding app
+test_files: []