pay 11.6.1 → 11.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b562e4a4f9648149c46c4932ad4c770cb6c9f93bc424b84ba8619cb7282170bc
-  data.tar.gz: c8328e7c5b1d4770131515d56fcd8b8a6170f6d427bbda29159d00d8dd8244f3
+  metadata.gz: 82b0246d201ed5b493e730a2620e5ef8b084d25dbd9d2aeb45d376b3515e0500
+  data.tar.gz: 7086d1d8ed0c6c999fc6d9e221a4bc7bdbde9a01b07f6c2257dbe3e5ca52bf3b
 SHA512:
-  metadata.gz: 272d38c42d2be1bfaf55929c429b15164c2dd2f64eca8571f4d868a0df0262f8599b5ac81c23539cf24c8a263b5bc8670b7f075871d79abdae1fa4983474ded4
-  data.tar.gz: d56318ddb06905b38bf3869b8dea5415ff8159b0a1b70d0e228389e1f23cc060a8fbe153028f682e7b6775688aae82a7d2514b560ea965e089b6076a339acb16
+  metadata.gz: b5e2f3c52f8d2fadf7803798ffe98c9dbd2f40d91095548c87374e7a1bebab7cbe60ec18c5357fe19703fdb7761414849554dc988fc45d03c9e762f91742fff7
+  data.tar.gz: c32a6bd51f512eeaba0b4689a281b866b2fe246e9ee9d81b7f55491244750f8f6dfea2f400d69473096b27b117aec1e8e48e46688cace5042f9273b804561d14

data/app/controllers/pay/webhooks/paddle_billing_controller.rb

@@ -36,7 +36,8 @@ module Pay
         digest = OpenSSL::Digest.new("sha256")
 
         hmac = OpenSSL::HMAC.hexdigest(digest, key, data)
-        hmac == h1
+        return false if h1.nil? || hmac.bytesize != h1.bytesize
+        ActiveSupport::SecurityUtils.secure_compare(hmac, h1)
       end
 
       def verify_params

data/app/mailers/pay/user_mailer.rb

@@ -2,7 +2,7 @@ module Pay
   class UserMailer < Pay.parent_mailer.constantize
     def receipt
       if params[:pay_charge].respond_to? :receipt
-        attachments[params[:pay_charge].filename] = params[:pay_charge].receipt
+        attachments[params[:pay_charge].receipt_filename] = params[:pay_charge].receipt
       end
 
       mail mail_arguments

data/app/models/pay/stripe/customer.rb

@@ -175,7 +175,7 @@ module Pay
         }
 
         # Hosted (the default) checkout sessions require a success_url and cancel_url
-        if ["", "hosted"].include? options[:ui_mode].to_s
+        if ["", "hosted_page"].include?(options[:ui_mode].to_s)
           args[:success_url] = merge_session_id_param(options.delete(:success_url) || root_url)
           args[:cancel_url] = merge_session_id_param(options.delete(:cancel_url) || root_url)
         end

data/app/models/pay/stripe/subscription.rb

@@ -334,7 +334,7 @@ module Pay
 
       # Retries the latest invoice for a Past Due subscription and attempts to pay it
       def retry_failed_payment(payment_intent_id: nil)
-        payment_intent_id ||= api_record.latest_invoice.payment_intent.id
+        payment_intent_id ||= api_record.latest_invoice.payments.first.payment.payment_intent
         payment_intent = ::Stripe::PaymentIntent.retrieve({id: payment_intent_id}, stripe_options)
 
         payment_intent = if payment_intent.status == "requires_payment_method"

data/app/models/pay/subscription.rb

@@ -3,7 +3,7 @@ module Pay
     STATUSES = %w[incomplete incomplete_expired trialing active past_due canceled unpaid paused]
 
     # Associations
-    belongs_to :customer
+    belongs_to :customer, touch: true
     belongs_to :payment_method, optional: true, primary_key: :processor_id
     has_many :charges
 

data/lib/pay/stripe.rb

@@ -115,6 +115,7 @@ module Pay
         # If a customer's payment source was deleted in Stripe, we should update as well
         events.subscribe "stripe.payment_method.attached", Pay::Stripe::Webhooks::PaymentMethodAttached.new
         events.subscribe "stripe.payment_method.updated", Pay::Stripe::Webhooks::PaymentMethodUpdated.new
+        events.subscribe "stripe.payment_method.automatically_updated", Pay::Stripe::Webhooks::PaymentMethodUpdated.new
         events.subscribe "stripe.payment_method.card_automatically_updated", Pay::Stripe::Webhooks::PaymentMethodUpdated.new
         events.subscribe "stripe.payment_method.detached", Pay::Stripe::Webhooks::PaymentMethodDetached.new
 

data/lib/pay/version.rb

@@ -1,3 +1,3 @@
 module Pay
-  VERSION = "11.6.1"
+  VERSION = "11.6.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pay
 version: !ruby/object:Gem::Version
-  version: 11.6.1
+  version: 11.6.2
 platform: ruby
 authors:
 - Jason Charnes
@@ -189,7 +189,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.15
 specification_version: 4
 summary: Payments engine for Ruby on Rails
 test_files: []