mastercard_core_sdk 2.0.0 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7304d039b64910aa3f8fc16a2f798172480f61e8
-  data.tar.gz: e678aba02e0b2af6ae4fa6e13c8305c8a433954e
+  metadata.gz: 0a1a32938c92a314feadfbf5c46bc304491c1816
+  data.tar.gz: 92fdcf8f20d8741a82cb46c5b107dfabc61b8f5e
 SHA512:
-  metadata.gz: 24adf61809aac72ed89494f5e954bacd94b1dda3e5ed62ce9203f1221f75a87a7af0432f5a24acc9b17a55c7e4129347ce20b526430d8e5c2a2dca8a5ffbf06d
-  data.tar.gz: 3691d34e13f729bb6d9f89be6e02ac60f2bdeb396677332dc89f62ec73ed46593c25197d59eae6a91154dec973e480e9be7960ce2d162246e71c063f942cefee
+  metadata.gz: ce672fd31f12e542368e524684f074634a2bb9e09cb1692c5c532e843db80e567efdeb69215fa49dc227445a55493da6c564c8b1a6280505520d3bbb29689e7c
+  data.tar.gz: c5136d0d37273b6e53499076a907bef2202e8b08946dcfafe62f5e8b71d9be11194f6d1cc10709b175942ddce204d86e2b7b7ca06760b38e510a96792a77a63f

data/LICENSE.txt

@@ -1,4 +1,4 @@
-Copyright (c) 2017, MasterCard International Incorporated
+Copyright (c) 2018, MasterCard International Incorporated
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without modification, are 

data/README.md

@@ -53,10 +53,10 @@ MasterCardApiConfiguration.sandbox = false  #By default Sandbox environment is s
 ```
 
 ## Copyright
-Copyright (c) 2017, MasterCard International Incorporated. See LICENSE for details.
+Copyright (c) 2018, MasterCard International Incorporated. See LICENSE for details.
 
 ## LICENSE
-Copyright (c) 2017, MasterCard International Incorporated. All rights reserved.
+Copyright (c) 2018, MasterCard International Incorporated. All rights reserved.
 
 Redistribution and use in source and binary forms, with or without modification, are 
 permitted provided that the following conditions are met:

data/lib/mastercard_core_sdk.rb

@@ -7,6 +7,7 @@ require_relative 'mastercard_core_sdk/core/request_response_logger'
 require_relative 'mastercard_core_sdk/core/query_params'
 require_relative 'mastercard_core_sdk/core/service_request'
 require_relative 'mastercard_core_sdk/core/configuration'
+require_relative 'mastercard_core_sdk/core/proxy_config'
 
 #tracker
 require_relative 'mastercard_core_sdk/tracker/api_tracker'
@@ -42,15 +43,14 @@ require_relative 'mastercard_core_sdk/models/error_response'
 require_relative 'mastercard_core_sdk/oauth/oauth_util'
 require_relative 'mastercard_core_sdk/oauth/oauth_parameters'
 
-# OAuth
-require_relative 'mastercard_core_sdk/util/jose'
+# Util
+require_relative 'mastercard_core_sdk/util/jwe_util'
 
 #converters
 require_relative 'mastercard_core_sdk/converters/sdk_converter_factory'
 require_relative 'mastercard_core_sdk/converters/xml_converter'
 require_relative 'mastercard_core_sdk/converters/json_converter'
 require_relative 'mastercard_core_sdk/converters/encoded_url_converter'
-require_relative 'mastercard_core_sdk/converters/jose_converter'
 
 # MultiConfig Environments
 require_relative 'mastercard_core_sdk/core/api_config'

data/lib/mastercard_core_sdk/client/api_client.rb

@@ -7,17 +7,17 @@ require_relative '../models/error_response'
 require_relative '../core/mastercard_authenticator'
 require_relative '../core/mastercard_api_configuration'
 require_relative '../core/api_config'
+require_relative '../core/proxy_config'
 require_relative '../interceptors/signature_builder'
 require_relative '../interceptors/logger_builder'
 require_relative '../interceptors/api_tracker_builder'
 require_relative '../converters/sdk_converter_factory'
-require_relative '../util/jose'
 
 module MastercardCoreSdk
   module Client
     # ApiClient is the base class to invoke the API. It is responsible for to convert all request and response according to the content type.
     class ApiClient
-      include MastercardCoreSdk::Util, MastercardCoreSdk::Core, MastercardCoreSdk::Interceptors, MastercardCoreSdk::Converters, MastercardCoreSdk::Tracker
+      include MastercardCoreSdk::Core, MastercardCoreSdk::Interceptors, MastercardCoreSdk::Converters, MastercardCoreSdk::Tracker
 
       @@logger = Logging.logger[self]
 
@@ -67,7 +67,6 @@ module MastercardCoreSdk
       # @return [String] Response body
       def call(path, service_request, http_method, return_type)
         request = build_request(http_method, path, service_request, @api_config)
-        Jose.api_config = @api_config
         response_body, response_code, response_headers = call_api(request, return_type)
 
         return response_body
@@ -131,7 +130,8 @@ module MastercardCoreSdk
           :sslkey => @config.key_file
         }
         req_opts[:cainfo] = @config.ssl_ca_cert if @config.ssl_ca_cert
-     
+        req_opts.merge!(MasterCardApiConfiguration.proxy_config.options) if MasterCardApiConfiguration.proxy_config
+          
         if [:post, :patch, :put, :delete].include?(http_method)
           req_body = build_request_body(request)
           req_opts.update :body => req_body

data/lib/mastercard_core_sdk/constants/constants.rb

@@ -12,7 +12,7 @@ module MastercardCoreSdk
   OAUTH_NONCE = 'oauth_nonce'
   OAUTH_SIGNATURE = 'oauth_signature'
   OAUTH_SIGNATURE_METHOD = 'oauth_signature_method'
-  OAUTH_KEY_SIGNATURE_METHOD_VAL = 'RSA-SHA1'
+  OAUTH_SIGNATURE_METHOD_RSA_SHA256 = 'RSA-SHA256'
   OAUTH_TIMESTAMP = 'oauth_timestamp'
   OAUTH_VERSION = 'oauth_version'
   OAUTH_VERSION_VAL = '1.0'
@@ -83,8 +83,6 @@ module MastercardCoreSdk
   ERR_MSG_CONVERSION = "Conversion failed."
   ERR_MSG_API_CONFIG = "Api Config cannot be null."
   ERR_MSG_HOST_URL = "Host URL cannot be empty."
-  ERR_MSG_JOSE_CONVERSION = "Jose conversion not supported."
-  ERR_MSG_JOSE_DECRYPTION = "Decryption failed, Invalid authentication tag."
 
   NULL_RESPONSE_PARAMETERS_ERROR = "Response parameters cannot be null."
   NULL_OAUTH_PARAMETERS_ERROR = "Oauth parameters cannot be null."
@@ -96,5 +94,8 @@ module MastercardCoreSdk
   CONTENT_TYPE_JOSE = "JOSE"
   ERR_MSG_CONTENT_TYPE = "Content-type is not supported :"
   
-
+  EMPTY_JWE_PAYLOAD_ERR = "JWE encrypted payload should not be null."
+  EMPTY_JWE_PRIVATE_KEY_ERR = "Private key should not be null."
+  EMPTY_JWE_RESPONSE_TYPE_ERR = "Response type should not be null."
+  
 end

data/lib/mastercard_core_sdk/converters/encoded_url_converter.rb

@@ -38,7 +38,7 @@ module MastercardCoreSdk
         def parse_response_params(response_params)
           response_params_hash = {}
           if response_params.empty?
-            raise SdkOAuthError.new(NULL_OAUTH_PARAMETERS_ERROR)
+            raise SDKOAuthError.new(NULL_OAUTH_PARAMETERS_ERROR)
           else
             if response_params.is_a?(String) && response_params.match(/&/)
               response_params_arr = response_params.split('&').compact

data/lib/mastercard_core_sdk/converters/json_converter.rb

@@ -38,17 +38,27 @@ module MastercardCoreSdk
         end
       end
 
-      # Convert the response to the given return type.
+      # Convert the response_body from Typhoeus response to the given return type.
       #
-      # @param [String] return_type some examples: "User", "Array[User]", "Hash[String,Integer]"
+      # @param response the Typhoeus response object.
+      # @param return_type some examples: "User", "Array[User]", "Hash[String,Integer]".
       def response_body_converter(response, return_type)
         body = response.response_body
         return nil if body.nil? || body.empty?
+        response_content_converter(body, return_type)
+      end
+      
+      # Convert the response to the given return type.
+      # 
+      # @param response_body the response from API.
+      # @param return_type some examples: "User", "Array[User]", "Hash[String,Integer]".
+      def response_content_converter(response_body, return_type)
+        return nil if response_body.nil? || response_body.empty?
         begin
-          data = JSON.parse("[#{body}]", :symbolize_names => true)[0]
+          data = JSON.parse("[#{response_body}]", :symbolize_names => true)[0]
         rescue JSON::ParserError => e
           if %w(String Date DateTime).include?(return_type.to_s)
-            data = body
+            data = response_body
           else
             @@logger.error e.message
             raise SDKConversionError.new(:error_message => e.message, :source => self.class)

data/lib/mastercard_core_sdk/converters/sdk_converter_factory.rb

@@ -26,8 +26,6 @@ module MastercardCoreSdk
               converter = JsonConverter.new
             elsif content_type.include?(CONTENT_TYPE_URL_ENCODED)
               converter = EncodedURLConverter.new
-            elsif content_type.include?(CONTENT_TYPE_JOSE)
-              converter = JoseConverter.new
             else
               @@logger.debug "#{ERR_MSG_CONTENT_TYPE} #{content_type}"
               raise SDKConversionError.new(:error_message => "#{ERR_MSG_CONTENT_TYPE} #{content_type}", :source => self.class)
@@ -59,8 +57,6 @@ module MastercardCoreSdk
             mime_sub_type = CONTENT_TYPE_XML
           elsif urlencoded_mime?(mime)
             mime_sub_type = CONTENT_TYPE_URL_ENCODED
-          elsif jose_mime?(mime)
-            mime_sub_type = CONTENT_TYPE_JOSE
           else
             @@logger.debug "#{ERR_MSG_CONTENT_TYPE} #{mime}"
             raise SDKConversionError.new(:error_message => "#{ERR_MSG_CONTENT_TYPE} #{mime}", :source => self.class)
@@ -89,13 +85,6 @@ module MastercardCoreSdk
           !!(mime =~ /www-form-urlencoded/i)
         end
         
-        # Check if the given MIME is a JOSE mime.
-        # @param mime String specifying mime-type.
-        # @return [Boolean]
-        def jose_mime?(mime)
-          !!(mime =~ /jose/i)
-        end
-        
       end
     end
   end

data/lib/mastercard_core_sdk/core/mastercard_api_configuration.rb

@@ -1,6 +1,7 @@
 require 'logging'
 require_relative '../exceptions/sdk_validation_error'
 require_relative 'api_config_builder'
+require_relative 'proxy_config'
 
 module MastercardCoreSdk
   module Core
@@ -31,6 +32,9 @@ module MastercardCoreSdk
         # Determines if environment is Sandbox.
         attr_accessor :sandbox
         
+        # Defines [ProxyConfig] configurations.
+        attr_accessor :proxy_config
+        
         # Validates private key, consumer key and host_url for api_config.
         # @raise [SDKValidationError] if validation fails
         def validate_config(config)
@@ -88,6 +92,7 @@ module MastercardCoreSdk
       self.additional_properties = {}
       self.configs = {}
       self.sandbox = true
+      self.proxy_config = nil
       
       # Initialize builders hash with sandbox/production environment configurations.
       @@builders = {}

data/lib/mastercard_core_sdk/core/proxy_config.rb

@@ -0,0 +1,34 @@
+module MastercardCoreSdk
+  module Core
+    # Set proxy configurations for Typhoeus Request.
+    class ProxyConfig
+
+      # Set uri scheme,hostname, port in proxy configuration 
+      # @example : "http://127.0.0.1:3000"
+      attr_accessor :proxy 
+      
+      # Set username, password for basic authentication in proxy 
+      # @example : "username:password"
+      attr_accessor :proxyuserpwd
+      
+      # Hash of proxy configurations.
+      # @example : {:proxy => "http://127.0.0.1:3000", :proxyuserpwd => "username:password"}
+      attr_reader :options
+      
+      def initialize
+        @proxy = nil
+        @proxyuserpwd = nil
+        @options = {}
+      end
+
+      # Set Proxy options for MasterCardApiConfiguration.
+      # @return [Hash]
+      def options
+        @options[:proxy] = @proxy if @proxy
+        @options[:proxyuserpwd] = @proxyuserpwd if @proxyuserpwd
+        return @options
+      end
+      
+    end
+  end
+end

data/lib/mastercard_core_sdk/oauth/oauth_util.rb

@@ -23,7 +23,6 @@ module MastercardCoreSdk
           # @param api_request 
           # @return [Typhoeus::Request]
           def build_request_header(api_request)
-            
             @signature_base_string = @auth_header = @signed_signature_base_string = @header = ''
             
             headers = api_request.options[:headers]
@@ -49,7 +48,7 @@ module MastercardCoreSdk
             oparams.add_parameter(OAUTH_CONSUMER_KEY, @api_config.consumer_key)
             oparams.add_parameter(OAUTH_NONCE, generate_nonce)
             oparams.add_parameter(OAUTH_TIMESTAMP, generate_timestamp)
-            oparams.add_parameter(OAUTH_SIGNATURE_METHOD, OAUTH_KEY_SIGNATURE_METHOD_VAL)
+            oparams.add_parameter(OAUTH_SIGNATURE_METHOD, OAUTH_SIGNATURE_METHOD_RSA_SHA256)
             oparams.add_parameter(OAUTH_VERSION, OAUTH_VERSION_VAL)
             oparams
           end
@@ -93,7 +92,7 @@ module MastercardCoreSdk
             if @signature_base_string == nil || @signature_base_string.length == 0
               raise OAuthError("Signature Base String May Not Be Null.")
             end
-            digest = OpenSSL::Digest::SHA1.new
+            digest = OpenSSL::Digest::SHA256.new
             key = @api_config.private_key
             
             @signed_signature_base_string = CGI.escape(Base64.encode64(key.sign(digest,@signature_base_string)))
@@ -110,7 +109,6 @@ module MastercardCoreSdk
           # oauth_params - populated oauth parameters object
           def generate_signature_base_string(url, request_method, oauth_params)
             @signature_base_string = CGI.escape(request_method.upcase) << AMP << CGI.escape(normalize_url(url)) << AMP << CGI.escape(normalize_parameters(url, oauth_params))
-            
           end
         
           # Method to return "core" URL for signature base string generation.  http://somesite.com:8080?blah becomes http://somesite.com, for example
@@ -145,7 +143,7 @@ module MastercardCoreSdk
           # Method to generate body hash if body is present
           def generate_body_hash(headers = {}, body, oauth_params)
             if !body.empty?
-              oauth_body_hash = Digest::SHA1.base64digest(body)
+              oauth_body_hash = Digest::SHA256.base64digest(body)
               oauth_params.add_parameter(OAUTH_BODY_HASH, oauth_body_hash)
             end
              

data/lib/mastercard_core_sdk/util/jwe_util.rb

@@ -0,0 +1,56 @@
+require 'jwe'
+require 'json'
+require 'logging'
+
+require_relative '../exceptions/sdk_validation_error'
+require_relative '../converters/sdk_converter_factory'
+
+module MastercardCoreSdk
+  module Util
+    # JweUtil class provides the utility to decrypt encrypted payload object.
+    class JweUtil
+      @@logger = Logging.logger[self]
+      
+      class << self
+        include MastercardCoreSdk::Core, MastercardCoreSdk::Exceptions, MastercardCoreSdk::Converters
+        
+        # Decrypt JWE encrypted payload.
+        # @param encrypted_jwe_payload the encrypted payload input.
+        # @param private_key the private key.
+        # @param response_type the response type for conversion after decryption.
+        # @return [Object] the decrypted payload.
+        # @raise [SDKValidationError] if encrypted_jwe_payload, private_key, response_type is not provided.
+        def get_jwe_decrypted_payload(encrypted_jwe_payload, private_key, response_type) 
+
+          if(encrypted_jwe_payload.to_s.empty?)
+             @@logger.error EMPTY_JWE_PAYLOAD_ERR
+             raise SDKValidationError.new(EMPTY_JWE_PAYLOAD_ERR) 
+          end
+      
+          if(private_key.to_s.empty?)
+             @@logger.error EMPTY_JWE_PRIVATE_KEY_ERR
+             raise SDKValidationError.new(EMPTY_JWE_PRIVATE_KEY_ERR) 
+          end
+          
+          if(response_type.to_s.empty?)
+             @@logger.error EMPTY_JWE_RESPONSE_TYPE_ERR
+             raise SDKValidationError.new(EMPTY_JWE_RESPONSE_TYPE_ERR) 
+          end
+          
+          begin
+            decrypted_jwe_payload = JWE.decrypt(encrypted_jwe_payload, private_key)
+            converter = SDKConverterFactory.get_converter(CONTENT_TYPE_JSON)
+          rescue StandardError => error
+            @@logger.error error.message
+            raise SDKConversionError.new(:error_message => error.message, :source => self.class) 
+          end
+          return converter.response_content_converter(decrypted_jwe_payload, response_type)
+        end
+        
+      end
+    end
+  end
+end
+
+
+

data/lib/mastercard_core_sdk/version.rb

@@ -1,3 +1,3 @@
 module MastercardCoreSdk
-   VERSION = "2.0.0"
+   VERSION = "2.1.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: mastercard_core_sdk
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.1.0
 platform: ruby
 authors:
 - Mastercard
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-08-10 00:00:00.000000000 Z
+date: 2018-02-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -52,6 +52,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '5.0'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.15'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.15'
 - !ruby/object:Gem::Dependency
   name: typhoeus
   requirement: !ruby/object:Gem::Requirement
@@ -132,9 +146,28 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 1.8.3
+- !ruby/object:Gem::Dependency
+  name: jwe
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.3.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.3.0
 description: Mastercard Core API SDK.
 email:
-- support@masterpass.com
 - merchant_support@masterpass.com
 executables: []
 extensions: []
@@ -148,7 +181,6 @@ files:
 - lib/mastercard_core_sdk/client/api_client.rb
 - lib/mastercard_core_sdk/constants/constants.rb
 - lib/mastercard_core_sdk/converters/encoded_url_converter.rb
-- lib/mastercard_core_sdk/converters/jose_converter.rb
 - lib/mastercard_core_sdk/converters/json_converter.rb
 - lib/mastercard_core_sdk/converters/sdk_converter_factory.rb
 - lib/mastercard_core_sdk/converters/xml_converter.rb
@@ -157,6 +189,7 @@ files:
 - lib/mastercard_core_sdk/core/configuration.rb
 - lib/mastercard_core_sdk/core/mastercard_api_configuration.rb
 - lib/mastercard_core_sdk/core/mastercard_authenticator.rb
+- lib/mastercard_core_sdk/core/proxy_config.rb
 - lib/mastercard_core_sdk/core/query_params.rb
 - lib/mastercard_core_sdk/core/request_response_logger.rb
 - lib/mastercard_core_sdk/core/service_request.rb
@@ -178,7 +211,7 @@ files:
 - lib/mastercard_core_sdk/oauth/oauth_parameters.rb
 - lib/mastercard_core_sdk/oauth/oauth_util.rb
 - lib/mastercard_core_sdk/tracker/api_tracker.rb
-- lib/mastercard_core_sdk/util/jose.rb
+- lib/mastercard_core_sdk/util/jwe_util.rb
 - lib/mastercard_core_sdk/version.rb
 homepage: https://developer.mastercard.com
 licenses:

data/lib/mastercard_core_sdk/converters/jose_converter.rb

@@ -1,96 +0,0 @@
-require 'logging'
-require 'json'
-require_relative '../core/mastercard_api_configuration'
-require_relative '../core/api_config'
-require_relative '../exceptions/sdk_conversion_error'
-
-module MastercardCoreSdk
-  module Converters
-    # Handles conversion for content-type : "application/jose"
-    class JoseConverter
-      include MastercardCoreSdk::Core, MastercardCoreSdk::Exceptions, MastercardCoreSdk::Util
-
-      @@logger = Logging.logger[self]
-      attr_accessor :skip_root
-      
-      def initialize
-        @skip_root = false
-      end
-      
-      # Convert object (array, hash, object, etc) to JSON.
-      # @param object to be converted into JSON string
-      # @raise [SDKConversionError] Error for conversion.
-      def request_body_converter(object)
-        @@logger.error ERR_MSG_JOSE_CONVERSION
-        raise SDKConversionError.new(:error_message => ERR_MSG_JOSE_CONVERSION, :source => self.class)
-      end
-      
-      # Convert the response to the given return type.
-      # @param [String] return_type some examples: "User", "Array[User]", "Hash[String,Integer]"
-      def response_body_converter(response, return_type)
-        body = response.response_body
-        request = response.request
-        return nil if body.nil? || body.empty?
-        begin
-          headers = request.original_options[:headers]
-          # api_config = MasterCardApiConfiguration.api_config(headers[ApiConfig::CONFIG_NAME_HEADER])
-          api_config = Jose.api_config 
-          plain_text = Jose.decrypt(body, api_config.private_key)
-          data = JSON.parse("[#{plain_text}]", :symbolize_names => true)[0]
-        rescue JSON::ParserError => e
-          if %w(String Date DateTime).include?(return_type.to_s)
-            data = body
-          else
-            @@logger.error e.message
-            raise SDKConversionError.new(:error_message => e.message, :source => self.class)
-          end
-        end
-        convert_to_type data, return_type
-      end
-      
-      private
-      
-      # Convert data to the given return type.
-      def convert_to_type(data, return_type)
-        return nil if data.nil?
-        case return_type.to_s
-        when 'String'
-          data.to_s
-        when 'Integer'
-          data.to_i
-        when 'Float'
-          data.to_f
-        when 'BOOLEAN'
-          data == true
-        when 'DateTime'
-          # parse date time (expecting ISO 8601 format)
-          DateTime.parse data
-        when 'Date'
-          # parse date time (expecting ISO 8601 format)
-          Date.parse data
-        when 'Object'
-          # generic object, return directly
-          data
-        when /\AArray<(.+)>\z/
-          # e.g. Array<Pet>
-          sub_type = $1
-          data.map {|item| convert_to_type(item, sub_type) }
-        when /\AHash\<String, (.+)\>\z/
-          # e.g. Hash<String, Integer>
-          sub_type = $1
-          {}.tap do |hash|
-            data.each {|k, v| hash[k] = convert_to_type(v, sub_type) }
-          end
-        else
-          if skip_root
-            data = data[data.keys[0]]
-          end 
-          return_type.new.tap do |model|
-            model.build_from_hash data
-          end
-        end
-      end
-      
-    end
-  end
-end

data/lib/mastercard_core_sdk/util/jose.rb

@@ -1,127 +0,0 @@
-require 'openssl'
-require 'json'
-require 'securerandom'
-require 'base64'
-require_relative '../exceptions/sdk_validation_error'
-
-module MastercardCoreSdk
-  module Util
-    class Jose
-      
-      SEGMENTS = 5
-      
-      class << self
-        include MastercardCoreSdk::Core, MastercardCoreSdk::Exceptions
-        
-        attr_accessor :api_config, :alg, :enc, :plain_text, :cipher_text, :private_key, :public_key 
-        attr_accessor :jwe_protected_header,:cek, :encrypted_cek, :hmac_key, :hmac_input, :aes_enc_key, :iv, :aad, :al, :auth_tag
-        
-        def to_s
-          [
-            jwe_protected_header,
-            encrypted_cek,
-            iv,
-            cipher_text,
-            auth_tag
-          ].collect do |segment|
-            url_safe_encode64 segment.to_s
-          end.join('.')
-        end
-  
-        def sha_size
-          case enc.to_sym
-          when :'A128CBC-HS256'
-            256
-          when :'A256CBC-HS512'
-            512
-          else
-            raise 'Unknown Hash Size'
-          end
-        end
-    
-        # Returns the Base64Url decoded version of `binary` without padding.
-        # @param [String] binary
-        # @return [String]
-        def url_safe_decode64(binary)
-          binary = binary.tr('-_', '+/')
-          case binary.bytesize % 4
-          when 2
-            binary += '=='
-          when 3
-            binary += '='
-          end
-          return Base64.decode64(binary)
-        end
-    
-        # Returns the Base64Url encoded version of `binary` without padding.
-        # @param [String] binary
-        # @return [String]
-        def url_safe_encode64(binary)
-          return Base64.strict_encode64(binary).tr('+/', '-_').delete('=')
-        end
-    
-        def decode_compact_serialized(input)
-          unless input.count('.') + 1 == SEGMENTS
-            raise SDKValidationError.new("Invalid format, should include #{SEGMENTS} segments.")
-          end
-          header, self.encrypted_cek, self.iv, self.cipher_text, self.auth_tag = input.split('.').collect do |segment|
-            url_safe_decode64 segment
-          end
-          self.aad = input.split('.').first
-          self.jwe_protected_header = JSON.load(header)
-        end
-    
-        def decrypt(input, private_key)
-          decode_compact_serialized input
-          self.alg = jwe_protected_header["alg"]
-          self.enc = jwe_protected_header["enc"]
-          self.private_key = private_key
-          cipher = OpenSSL::Cipher.new 'AES-128-CBC'
-          cipher.decrypt
-          self.cek = private_key.private_decrypt encrypted_cek, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING
-          self.hmac_key, self.aes_enc_key = derive_encryption_and_hmac_keys
-          cipher.key = aes_enc_key
-          cipher.iv = iv
-          self.plain_text = cipher.update(cipher_text) + cipher.final
-          self.al = derive_al
-          self.hmac_input = [ aad, iv, cipher_text, al ].join
-          verify_cbc_authentication_tag!
-          return self.plain_text
-        end
-    
-        def derive_al
-          [(aad.bytesize * 8)].pack('Q>')
-        end
-    
-        def derive_encryption_and_hmac_keys
-          cek.unpack(
-            "a#{cek.length / 2}" * 2
-          )
-        end
-    
-        def verify_cbc_authentication_tag!
-          expected_auth_tag = OpenSSL::HMAC.digest(
-            OpenSSL::Digest.new("SHA#{sha_size}"), hmac_key, hmac_input
-          )[0, sha_size / 2 / 8]
-          unless secure_compare(auth_tag, expected_auth_tag)
-            raise SDKValidationError.new(ERR_MSG_JOSE_DECRYPTION)
-          end
-        end
-    
-        def secure_compare(a, b)
-          return false unless a.bytesize == b.bytesize
-  
-          l = a.unpack "C#{a.bytesize}"
-  
-          res = 0
-          b.each_byte { |byte| res |= byte ^ l.shift }
-          res == 0
-        end
-        
-      end
-    end
-  end
-end
-
-
-