pay 11.6.0 → 11.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 503a2d20ce3d8163cac35c916673cc1cc56d252fc895a292694eaba7dfab2924
-  data.tar.gz: 03630e69b4b412963703a8bc2649552867de46be58c394885868e330203ef723
+  metadata.gz: 82b0246d201ed5b493e730a2620e5ef8b084d25dbd9d2aeb45d376b3515e0500
+  data.tar.gz: 7086d1d8ed0c6c999fc6d9e221a4bc7bdbde9a01b07f6c2257dbe3e5ca52bf3b
 SHA512:
-  metadata.gz: 4dde8d6ebbbe1b4b212f971491843a3dce19f9335a47e9e3ad85364f1229c3cd93c1e148b36e3f3f37c634fae51212199ca1616619d1ed48fac4fdea9681bf51
-  data.tar.gz: 67a37ea6b91b289d9f11a1a1258c9e8715d2b80082605810bc48e710f3a0cf1f2e765de4e89b9e151c032094294b4e561ef4ce6d69ac45d7a3961cb18d7b7401
+  metadata.gz: b5e2f3c52f8d2fadf7803798ffe98c9dbd2f40d91095548c87374e7a1bebab7cbe60ec18c5357fe19703fdb7761414849554dc988fc45d03c9e762f91742fff7
+  data.tar.gz: c32a6bd51f512eeaba0b4689a281b866b2fe246e9ee9d81b7f55491244750f8f6dfea2f400d69473096b27b117aec1e8e48e46688cace5042f9273b804561d14

data/app/controllers/pay/webhooks/paddle_billing_controller.rb

@@ -36,7 +36,8 @@ module Pay
         digest = OpenSSL::Digest.new("sha256")
 
         hmac = OpenSSL::HMAC.hexdigest(digest, key, data)
-        hmac == h1
+        return false if h1.nil? || hmac.bytesize != h1.bytesize
+        ActiveSupport::SecurityUtils.secure_compare(hmac, h1)
       end
 
       def verify_params

data/app/mailers/pay/user_mailer.rb

@@ -2,7 +2,7 @@ module Pay
   class UserMailer < Pay.parent_mailer.constantize
     def receipt
       if params[:pay_charge].respond_to? :receipt
-        attachments[params[:pay_charge].filename] = params[:pay_charge].receipt
+        attachments[params[:pay_charge].receipt_filename] = params[:pay_charge].receipt
       end
 
       mail mail_arguments

data/app/models/pay/stripe/customer.rb

@@ -175,7 +175,7 @@ module Pay
         }
 
         # Hosted (the default) checkout sessions require a success_url and cancel_url
-        if ["", "hosted"].include? options[:ui_mode].to_s
+        if ["", "hosted_page"].include?(options[:ui_mode].to_s)
           args[:success_url] = merge_session_id_param(options.delete(:success_url) || root_url)
           args[:cancel_url] = merge_session_id_param(options.delete(:cancel_url) || root_url)
         end

data/app/models/pay/stripe/subscription.rb

@@ -334,7 +334,7 @@ module Pay
 
       # Retries the latest invoice for a Past Due subscription and attempts to pay it
       def retry_failed_payment(payment_intent_id: nil)
-        payment_intent_id ||= api_record.latest_invoice.payment_intent.id
+        payment_intent_id ||= api_record.latest_invoice.payments.first.payment.payment_intent
         payment_intent = ::Stripe::PaymentIntent.retrieve({id: payment_intent_id}, stripe_options)
 
         payment_intent = if payment_intent.status == "requires_payment_method"

data/app/models/pay/subscription.rb

@@ -3,7 +3,7 @@ module Pay
     STATUSES = %w[incomplete incomplete_expired trialing active past_due canceled unpaid paused]
 
     # Associations
-    belongs_to :customer
+    belongs_to :customer, touch: true
     belongs_to :payment_method, optional: true, primary_key: :processor_id
     has_many :charges
 

data/lib/pay/stripe.rb

@@ -115,6 +115,7 @@ module Pay
         # If a customer's payment source was deleted in Stripe, we should update as well
         events.subscribe "stripe.payment_method.attached", Pay::Stripe::Webhooks::PaymentMethodAttached.new
         events.subscribe "stripe.payment_method.updated", Pay::Stripe::Webhooks::PaymentMethodUpdated.new
+        events.subscribe "stripe.payment_method.automatically_updated", Pay::Stripe::Webhooks::PaymentMethodUpdated.new
         events.subscribe "stripe.payment_method.card_automatically_updated", Pay::Stripe::Webhooks::PaymentMethodUpdated.new
         events.subscribe "stripe.payment_method.detached", Pay::Stripe::Webhooks::PaymentMethodDetached.new
 

data/lib/pay/version.rb

@@ -1,3 +1,3 @@
 module Pay
-  VERSION = "11.6.0"
+  VERSION = "11.6.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pay
 version: !ruby/object:Gem::Version
-  version: 11.6.0
+  version: 11.6.2
 platform: ruby
 authors:
 - Jason Charnes
@@ -173,7 +173,8 @@ files:
 homepage: https://github.com/pay-rails/pay
 licenses:
 - MIT
-metadata: {}
+metadata:
+  rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
 - lib
@@ -188,7 +189,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.9
+rubygems_version: 4.0.15
 specification_version: 4
 summary: Payments engine for Ruby on Rails
 test_files: []