maytes-api-client-rb 0.1.1

data/lib/maytes_api_client/webhook_verifier.rb

@@ -0,0 +1,212 @@
+# frozen_string_literal: true
+#
+# Bundled with the generated SDK via bin/postprocess-ruby.sh.
+#
+# Lives at build/ruby-client/lib/maytes_api_client/webhook_verifier.rb after
+# `make generate-ruby`. Required from the gem's root file so consumers do:
+#
+#   require 'maytes_api_client'
+#   event = MaytesApiClient.verify_webhook_signature(raw_body, header, secret)
+#
+# Verifies the `X-Maytes-Signature` header on an inbound webhook delivery and
+# returns the parsed event. Merchants must never hand-roll this — see the four
+# sharp edges below, each of which silently produces either a security hole or
+# an outage:
+#
+#   1. RAW BODY. The signature covers the exact bytes we sent. Verifying
+#      against re-serialised JSON (params.to_json) fails for any body whose key
+#      order or number formatting differs after a parse/emit round-trip. This
+#      is the single most common webhook integration bug.
+#   2. MULTIPLE `v1=` ENTRIES. During a signing-secret rotation grace window
+#      the header carries TWO signatures (current secret first, previous
+#      second) and the delivery is valid if EITHER matches. A verifier that
+#      reads only the first `v1=` works perfectly until the first rotation,
+#      then rejects live traffic. See §7 of the webhook spec.
+#   3. CONSTANT-TIME COMPARISON. A plain == on digests leaks how much of a
+#      forged signature was correct, which is enough to recover a valid
+#      signature one byte at a time.
+#   4. REPLAY WINDOW. The `t=` timestamp is the anti-replay anchor; a captured
+#      delivery stays valid forever without a freshness check.
+#
+# Verification and JSON parsing are deliberately fused into ONE call: the
+# method takes the raw body and hands back the parsed event, so there is no
+# intermediate state in which a caller can parse first and verify second.
+#
+# Algorithm (webhook spec §6.1):
+#   signed_payload = "#{t}.#{raw_body}"
+#   signature      = lowercase_hex( HMAC_SHA256(signing_secret, signed_payload) )
+
+require 'json'
+require 'openssl'
+
+module MaytesApiClient
+  # Default anti-replay window, in seconds (webhook spec §6.1 advises ~5 min).
+  DEFAULT_WEBHOOK_TOLERANCE_SECONDS = 300
+
+  # Raised when an inbound delivery is not authentic. Respond 400 and do NOT
+  # act on the body.
+  #
+  # `reason` is one of:
+  #   :malformed_header           — header absent or missing `t=` / `v1=`
+  #   :timestamp_out_of_tolerance — `t=` too far from now; possible replay
+  #   :no_matching_signature      — wrong secret, or the body was modified
+  #   :invalid_json               — signature valid but body wasn't JSON
+  class WebhookSignatureError < StandardError
+    attr_reader :reason
+
+    def initialize(reason, message)
+      @reason = reason
+      super(message)
+    end
+  end
+
+  # A verified webhook event (webhook spec §6).
+  #
+  # `data` is left as an open hash because its shape varies per `type` —
+  # branch on `type`, then read the fields that event documents. Ignore
+  # unrecognised fields: additive changes do NOT bump `api_version`.
+  MaytesWebhookEvent = Struct.new(
+    :id,          # Stable event id — identical across every retry. Deduplicate on this.
+    :type,        # e.g. 'checkout.authorized', 'checkout.voided', 'webhook.test'.
+    :api_version, # Envelope schema version, e.g. '2026-06'.
+    :created_at,  # When the event occurred.
+    :data,        # Per-event payload.
+    keyword_init: true,
+  )
+
+  # Verify an inbound Maytes webhook delivery and return the parsed event.
+  #
+  # Pass the **raw** request body — the exact bytes, before any JSON parsing.
+  #
+  #   post '/webhooks/maytes' do
+  #     begin
+  #       event = MaytesApiClient.verify_webhook_signature(
+  #         request.body.read,                     # raw body
+  #         request.env['HTTP_X_MAYTES_SIGNATURE'],
+  #         ENV.fetch('MAYTES_WEBHOOK_SECRET'),
+  #       )
+  #     rescue MaytesApiClient::WebhookSignatureError
+  #       halt 400
+  #     end
+  #     # ... handle event.type
+  #     status 200
+  #   end
+  #
+  # `tolerance_seconds: 0` skips the freshness check entirely — TEST ONLY, for
+  # replaying a stored delivery in a fixture. Never 0 in production: it makes
+  # any captured delivery replayable forever.
+  #
+  # @raise [WebhookSignatureError] if the delivery is not authentic.
+  def self.verify_webhook_signature(
+    raw_body,
+    signature_header,
+    signing_secret,
+    tolerance_seconds: DEFAULT_WEBHOOK_TOLERANCE_SECONDS
+  )
+    timestamp, signatures = parse_webhook_signature_header(signature_header)
+
+    if tolerance_seconds.positive?
+      unless timestamp.match?(/\A\d+\z/)
+        raise WebhookSignatureError.new(
+          :malformed_header,
+          'X-Maytes-Signature carries a non-numeric t= value.',
+        )
+      end
+      if (Time.now.to_i - timestamp.to_i).abs > tolerance_seconds
+        raise WebhookSignatureError.new(
+          :timestamp_out_of_tolerance,
+          "Webhook timestamp is outside the #{tolerance_seconds}s tolerance — possible replay.",
+        )
+      end
+    end
+
+    body = raw_body.to_s.dup.force_encoding(Encoding::BINARY)
+    expected = OpenSSL::HMAC.hexdigest('SHA256', signing_secret, "#{timestamp}.#{body}")
+
+    # ANY match wins — during a rotation grace window the current secret's
+    # signature and the previous secret's signature are both present.
+    matched = signatures.any? { |candidate| secure_compare_digest(expected, candidate) }
+    unless matched
+      raise WebhookSignatureError.new(
+        :no_matching_signature,
+        'No v1 signature matched the computed HMAC — wrong signing secret, ' \
+        'or the body was modified in transit.',
+      )
+    end
+
+    parse_webhook_envelope(body)
+  end
+
+  # @api private
+  def self.parse_webhook_signature_header(header)
+    if header.nil? || header.strip.empty?
+      raise WebhookSignatureError.new(:malformed_header, 'Missing X-Maytes-Signature header.')
+    end
+
+    timestamp = nil
+    signatures = []
+
+    header.split(',').each do |part|
+      trimmed = part.strip
+      if trimmed.start_with?('t=')
+        timestamp = trimmed[2..]
+      elsif trimmed.start_with?('v1=')
+        signatures << trimmed[3..]
+      end
+      # Unknown schemes (a future v2=) are ignored, not fatal — forward
+      # compatibility: we may add a scheme alongside v1 before removing v1.
+    end
+
+    if timestamp.nil? || timestamp.empty? || signatures.empty?
+      raise WebhookSignatureError.new(
+        :malformed_header,
+        'X-Maytes-Signature is malformed — expected `t=<unix>,v1=<hex>`.',
+      )
+    end
+
+    [timestamp, signatures]
+  end
+  private_class_method :parse_webhook_signature_header
+
+  # Length is checked first because fixed_length_secure_compare raises on a
+  # length mismatch — and length is not a secret.
+  #
+  # OpenSSL.fixed_length_secure_compare only exists in the openssl gem >= 2.2
+  # (Ruby 3.0+); on older rubies we fall back to an XOR-accumulate loop, which
+  # is constant-time for the equal-length inputs the guard above guarantees.
+  # Without the fallback this raises NoMethodError on every valid delivery.
+  #
+  # @api private
+  def self.secure_compare_digest(expected, candidate)
+    return false unless candidate.is_a?(String) && candidate.bytesize == expected.bytesize
+
+    if OpenSSL.respond_to?(:fixed_length_secure_compare)
+      OpenSSL.fixed_length_secure_compare(expected, candidate)
+    else
+      difference = 0
+      expected.bytes.zip(candidate.bytes) { |a, b| difference |= a ^ b }
+      difference.zero?
+    end
+  end
+  private_class_method :secure_compare_digest
+
+  # @api private
+  def self.parse_webhook_envelope(body)
+    parsed = JSON.parse(body.dup.force_encoding(Encoding::UTF_8))
+    raise JSON::ParserError, 'not an object' unless parsed.is_a?(Hash)
+
+    MaytesWebhookEvent.new(
+      id: parsed['id'].to_s,
+      type: parsed['type'].to_s,
+      api_version: parsed['api_version'].to_s,
+      created_at: parsed['created_at'].to_s,
+      data: parsed['data'].is_a?(Hash) ? parsed['data'] : {},
+    )
+  rescue JSON::ParserError, ArgumentError
+    raise WebhookSignatureError.new(
+      :invalid_json,
+      'Signature verified but the body is not valid JSON.',
+    )
+  end
+  private_class_method :parse_webhook_envelope
+end

data/lib/maytes_api_client.rb

@@ -0,0 +1,95 @@
+=begin
+#Maytes API
+
+#No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+
+The version of the OpenAPI document: 1.0.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.22.0
+
+=end
+
+# Common files
+require 'maytes_api_client/api_client'
+require 'maytes_api_client/api_error'
+require 'maytes_api_client/api_model_base'
+require 'maytes_api_client/version'
+require 'maytes_api_client/configuration'
+
+# Models
+require 'maytes_api_client/models/cancel_checkout409_response'
+require 'maytes_api_client/models/cancel_checkout_request'
+require 'maytes_api_client/models/cancel_checkout_response'
+require 'maytes_api_client/models/capture_checkout409_response'
+require 'maytes_api_client/models/capture_checkout422_response'
+require 'maytes_api_client/models/capture_checkout_request'
+require 'maytes_api_client/models/capture_checkout_response'
+require 'maytes_api_client/models/checkout'
+require 'maytes_api_client/models/checkout_cancelled'
+require 'maytes_api_client/models/checkout_captured'
+require 'maytes_api_client/models/checkout_created'
+require 'maytes_api_client/models/checkout_discount'
+require 'maytes_api_client/models/checkout_fee'
+require 'maytes_api_client/models/create_checkout401_response'
+require 'maytes_api_client/models/create_checkout409_response'
+require 'maytes_api_client/models/create_checkout422_response'
+require 'maytes_api_client/models/create_checkout_request'
+require 'maytes_api_client/models/create_checkout_response'
+require 'maytes_api_client/models/create_refund_request'
+require 'maytes_api_client/models/customer_data'
+require 'maytes_api_client/models/digital_goods_custom_data'
+require 'maytes_api_client/models/digital_goods_line_item'
+require 'maytes_api_client/models/donation_line_item'
+require 'maytes_api_client/models/error_response_dto'
+require 'maytes_api_client/models/fee'
+require 'maytes_api_client/models/fee_breakdown_line'
+require 'maytes_api_client/models/food_beverage_line_item'
+require 'maytes_api_client/models/get_checkout404_response'
+require 'maytes_api_client/models/get_checkout422_response'
+require 'maytes_api_client/models/get_checkout_response'
+require 'maytes_api_client/models/get_settlement_response'
+require 'maytes_api_client/models/health_response'
+require 'maytes_api_client/models/line_item'
+require 'maytes_api_client/models/list_settlements_response'
+require 'maytes_api_client/models/o_auth_token_request'
+require 'maytes_api_client/models/o_auth_token_response'
+require 'maytes_api_client/models/other_line_item'
+require 'maytes_api_client/models/physical_goods_custom_data'
+require 'maytes_api_client/models/physical_goods_line_item'
+require 'maytes_api_client/models/refund_checkout402_response'
+require 'maytes_api_client/models/refund_checkout409_response'
+require 'maytes_api_client/models/service_custom_data'
+require 'maytes_api_client/models/service_line_item'
+require 'maytes_api_client/models/settlement'
+require 'maytes_api_client/models/tax'
+require 'maytes_api_client/models/ticket_custom_data'
+require 'maytes_api_client/models/ticket_line_item'
+require 'maytes_api_client/models/ticket_seating'
+
+# APIs
+require 'maytes_api_client/api/default_api'
+
+module MaytesApiClient
+  class << self
+    # Customize default settings for the SDK using block.
+    #   MaytesApiClient.configure do |config|
+    #     config.username = "xxx"
+    #     config.password = "xxx"
+    #   end
+    # If no block given, return the default Configuration object.
+    def configure
+      if block_given?
+        yield(Configuration.default)
+      else
+        Configuration.default
+      end
+    end
+  end
+end
+
+# Hand-written extra (post-processed in by sdks/backend-sdk/bin/postprocess-ruby.sh)
+require 'maytes_api_client/managed_client'
+
+# Hand-written extra (post-processed in by sdks/backend-sdk/bin/postprocess-ruby.sh)
+require 'maytes_api_client/webhook_verifier'

data/maytes_api_client.gemspec

@@ -0,0 +1,39 @@
+# -*- encoding: utf-8 -*-
+
+=begin
+#Maytes API
+
+#No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+
+The version of the OpenAPI document: 1.0.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.22.0
+
+=end
+
+$:.push File.expand_path("../lib", __FILE__)
+require "maytes_api_client/version"
+
+Gem::Specification.new do |s|
+  s.name        = "maytes-api-client-rb"
+  s.version     = MaytesApiClient::VERSION
+  s.platform    = Gem::Platform::RUBY
+  s.authors     = ["Maytes"]
+  s.email       = []
+  s.homepage    = "https://developers.maytes.co"
+  s.summary     = "Official Ruby client for the Maytes API"
+  s.description = "Official Ruby client for the Maytes API — create, capture and cancel checkouts, with OAuth2 token management and webhook signature verification."
+  s.license     = "MIT"
+  s.required_ruby_version = ">= 2.7"
+  s.metadata    = { "homepage_uri" => "https://developers.maytes.co", "source_code_uri" => "https://github.com/kttipay/maytes-api-client-rb", "bug_tracker_uri" => "https://github.com/kttipay/maytes-api-client-rb/issues", "documentation_uri" => "https://developers.maytes.co" }
+
+  s.add_runtime_dependency 'typhoeus', '~> 1.0', '>= 1.0.1'
+
+  s.add_development_dependency 'rspec', '~> 3.6', '>= 3.6.0'
+
+  s.files         = `find *`.split("\n").uniq.sort.select { |f| !f.empty? }
+  s.test_files    = `find spec/*`.split("\n")
+  s.executables   = []
+  s.require_paths = ["lib"]
+end

data/spec/api/default_api_spec.rb

@@ -0,0 +1,145 @@
+=begin
+#Maytes API
+
+#No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+
+The version of the OpenAPI document: 1.0.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.22.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+
+# Unit tests for MaytesApiClient::DefaultApi
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe 'DefaultApi' do
+  before do
+    # run before each test
+    @api_instance = MaytesApiClient::DefaultApi.new
+  end
+
+  after do
+    # run after each test
+  end
+
+  describe 'test an instance of DefaultApi' do
+    it 'should create an instance of DefaultApi' do
+      expect(@api_instance).to be_instance_of(MaytesApiClient::DefaultApi)
+    end
+  end
+
+  # unit tests for cancel_checkout
+  # Cancel authorized checkout
+  # @param checkout_uuid 
+  # @param cancel_checkout_request 
+  # @param [Hash] opts the optional parameters
+  # @return [CancelCheckoutResponse]
+  describe 'cancel_checkout test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for capture_checkout
+  # Capture authorized checkout
+  # @param checkout_uuid 
+  # @param capture_checkout_request 
+  # @param [Hash] opts the optional parameters
+  # @return [CaptureCheckoutResponse]
+  describe 'capture_checkout test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for create_checkout
+  # Create a new checkout
+  # @param create_checkout_request 
+  # @param [Hash] opts the optional parameters
+  # @return [CreateCheckoutResponse]
+  describe 'create_checkout test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_checkout
+  # Get checkout details
+  # @param checkout_uuid 
+  # @param [Hash] opts the optional parameters
+  # @option opts [String] :merchant_order_id 
+  # @return [GetCheckoutResponse]
+  describe 'get_checkout test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_health
+  # Health check
+  # @param [Hash] opts the optional parameters
+  # @return [HealthResponse]
+  describe 'get_health test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_o_auth_token
+  # Issue an access token
+  # @param o_auth_token_request 
+  # @param [Hash] opts the optional parameters
+  # @return [OAuthTokenResponse]
+  describe 'get_o_auth_token test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for get_settlement
+  # Get a settlement by UUID
+  # @param uuid Settlement UUID
+  # @param [Hash] opts the optional parameters
+  # @return [GetSettlementResponse]
+  describe 'get_settlement test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for list_settlements
+  # List settlements for this merchant
+  # Returns settlements for the authenticated merchant. Default sort: created_at ASC.
+  # @param [Hash] opts the optional parameters
+  # @option opts [Object] :offset Pagination offset (default 0)
+  # @option opts [Object] :limit Max records to return (default 50, max 200)
+  # @option opts [String] :sort_dir Sort direction (default: asc)
+  # @option opts [String] :sort_by Field to sort by (default: created_at)
+  # @option opts [Object] :created_before Include settlements created at or before this ISO-8601 timestamp
+  # @option opts [Object] :created_after Include settlements created at or after this ISO-8601 timestamp
+  # @option opts [String] :status Filter by status
+  # @return [ListSettlementsResponse]
+  describe 'list_settlements test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  # unit tests for refund_checkout
+  # Refund a captured checkout
+  # Initiates a full refund of the captured payment. Returns 204 immediately; Stripe confirms asynchronously via webhook. Poll GET /checkouts/:uuid for status and refund details.
+  # @param checkout_uuid 
+  # @param create_refund_request 
+  # @param [Hash] opts the optional parameters
+  # @return [nil]
+  describe 'refund_checkout test' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/models/cancel_checkout409_response_spec.rb

@@ -0,0 +1,58 @@
+=begin
+#Maytes API
+
+#No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+
+The version of the OpenAPI document: 1.0.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.22.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+require 'date'
+
+# Unit tests for MaytesApiClient::CancelCheckout409Response
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe MaytesApiClient::CancelCheckout409Response do
+  #let(:instance) { MaytesApiClient::CancelCheckout409Response.new }
+
+  describe 'test an instance of CancelCheckout409Response' do
+    it 'should create an instance of CancelCheckout409Response' do
+      # uncomment below to test the instance creation
+      #expect(instance).to be_instance_of(MaytesApiClient::CancelCheckout409Response)
+    end
+  end
+
+  describe 'test attribute "message"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  describe 'test attribute "error"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  describe 'test attribute "code"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+      # validator = Petstore::EnumTest::EnumAttributeValidator.new('String', ["session_not_voidable"])
+      # validator.allowable_values.each do |value|
+      #   expect { instance.code = value }.not_to raise_error
+      # end
+    end
+  end
+
+  describe 'test attribute "metadata"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/models/cancel_checkout_request_spec.rb

@@ -0,0 +1,36 @@
+=begin
+#Maytes API
+
+#No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+
+The version of the OpenAPI document: 1.0.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.22.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+require 'date'
+
+# Unit tests for MaytesApiClient::CancelCheckoutRequest
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe MaytesApiClient::CancelCheckoutRequest do
+  #let(:instance) { MaytesApiClient::CancelCheckoutRequest.new }
+
+  describe 'test an instance of CancelCheckoutRequest' do
+    it 'should create an instance of CancelCheckoutRequest' do
+      # uncomment below to test the instance creation
+      #expect(instance).to be_instance_of(MaytesApiClient::CancelCheckoutRequest)
+    end
+  end
+
+  describe 'test attribute "merchant_order_id"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/models/cancel_checkout_response_spec.rb

@@ -0,0 +1,36 @@
+=begin
+#Maytes API
+
+#No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+
+The version of the OpenAPI document: 1.0.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.22.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+require 'date'
+
+# Unit tests for MaytesApiClient::CancelCheckoutResponse
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe MaytesApiClient::CancelCheckoutResponse do
+  #let(:instance) { MaytesApiClient::CancelCheckoutResponse.new }
+
+  describe 'test an instance of CancelCheckoutResponse' do
+    it 'should create an instance of CancelCheckoutResponse' do
+      # uncomment below to test the instance creation
+      #expect(instance).to be_instance_of(MaytesApiClient::CancelCheckoutResponse)
+    end
+  end
+
+  describe 'test attribute "data"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end

data/spec/models/capture_checkout409_response_spec.rb

@@ -0,0 +1,58 @@
+=begin
+#Maytes API
+
+#No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+
+The version of the OpenAPI document: 1.0.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.22.0
+
+=end
+
+require 'spec_helper'
+require 'json'
+require 'date'
+
+# Unit tests for MaytesApiClient::CaptureCheckout409Response
+# Automatically generated by openapi-generator (https://openapi-generator.tech)
+# Please update as you see appropriate
+describe MaytesApiClient::CaptureCheckout409Response do
+  #let(:instance) { MaytesApiClient::CaptureCheckout409Response.new }
+
+  describe 'test an instance of CaptureCheckout409Response' do
+    it 'should create an instance of CaptureCheckout409Response' do
+      # uncomment below to test the instance creation
+      #expect(instance).to be_instance_of(MaytesApiClient::CaptureCheckout409Response)
+    end
+  end
+
+  describe 'test attribute "message"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  describe 'test attribute "error"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+  describe 'test attribute "code"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+      # validator = Petstore::EnumTest::EnumAttributeValidator.new('String', ["not_capturable"])
+      # validator.allowable_values.each do |value|
+      #   expect { instance.code = value }.not_to raise_error
+      # end
+    end
+  end
+
+  describe 'test attribute "metadata"' do
+    it 'should work' do
+      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
+    end
+  end
+
+end