payu_api 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: f03e3bb9b1d9013eabac126fb67bca990a2c81ee
-  data.tar.gz: 4694854d9e6ca75a321db2d8149803e44f415874
+  metadata.gz: 63ece19e8382a4ffc71ae575a9209746b3c70c3b
+  data.tar.gz: d2228eeb439fd3981fbd0e28a7c2ccc41799d7fd
 SHA512:
-  metadata.gz: f2c394eeb1ab1d44aac453984ffda95e2085a0f9a353d5180db20633fe3b1f6cb880b758384da8aa0532b291db9a16010b9aa01c65233fd5336a094220ba4af7
-  data.tar.gz: d935e7aa2f10f1406ca61c808b38ea36b257acf2dd20d83375bb82f057abc6a0271abf4c7fdb267e5f81867d80dc492fbb283a8b9e12c3ff86fc914a2bc53c2c
+  metadata.gz: ce27bd08cf451a1b88ec0f3fab5ddeba2f9ab6e649dcbb83b8ee47c16f2e3c3eb97aba8183ecb107c23d2526aca84eeb88790c77cb8132b8e3369c9bf67ccb89
+  data.tar.gz: cba3a104818e15dce63c1c59d1e3977ce9c168e5ea448fdfa5366633e6ffbd98ba960187468836a472910c538619f4d701a8977024e878eb71aec06b0c294e5c

data/README.md

@@ -168,6 +168,17 @@ response.order
 # }
 ```
 
+Verify notification signature:
+
+```ruby
+PayuAPI.signature_valid?(
+  body: request.raw_post,
+  headers: request.headers,
+  second_key: '17d24f...'
+)
+# => true
+```
+
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at https://github.com/busfor/payu_api. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](http://contributor-covenant.org) code of conduct.

data/lib/payu_api.rb

@@ -1,4 +1,5 @@
 require 'json'
+require 'digest'
 require 'faraday'
 require 'dry-initializer'
 
@@ -12,6 +13,7 @@ require 'payu_api/responses/auth_response'
 require 'payu_api/responses/get_response'
 require 'payu_api/responses/create_response'
 require 'payu_api/responses/refund_response'
+require 'payu_api/build_signature'
 require 'payu_api/order'
 require 'payu_api/client'
 
@@ -20,4 +22,9 @@ module PayuAPI
     request = AuthRequest.new(pos_id: pos_id, key: key, sandbox: sandbox)
     AuthResponse.new(http_response: request.call)
   end
+
+  def self.signature_valid?(body:, headers:, second_key:)
+    signature = BuildSignature(body: body, second_key: second_key).call
+    headers['OpenPayU-Signature'] == signature
+  end
 end

data/lib/payu_api/build_signature.rb

@@ -0,0 +1,13 @@
+module PayuAPI
+  class BuildSignature
+    extend Dry::Initializer::Mixin
+
+    option :body
+    option :second_key
+
+    def call
+      signature = Digest::MD5.hexdigest("#{body}#{second_key}")
+      "sender=checkout;signature=#{signature};algorithm=MD5;content=DOCUMENT"
+    end
+  end
+end

data/lib/payu_api/version.rb

@@ -1,3 +1,3 @@
 module PayuAPI
-  VERSION = '0.1.1'.freeze
+  VERSION = '0.1.2'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: payu_api
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Roman Khrebtov
@@ -155,6 +155,7 @@ files:
 - lib/payu_api.rb
 - lib/payu_api/api_request.rb
 - lib/payu_api/auth_request.rb
+- lib/payu_api/build_signature.rb
 - lib/payu_api/client.rb
 - lib/payu_api/errors.rb
 - lib/payu_api/order.rb