postfinancecheckout-ruby-sdk 4.2.0 → 4.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8de82d40d6d29a3b88e18b7332f565cb4be76c066feb502419e8b8132362737a
-  data.tar.gz: b04d7dc83340ab1faa8068a02f95f5d378efb2a951ae0e215fe2e6fed5f8971e
+  metadata.gz: 4bb044135e1efe372100358202f44e55937be276c2e5498ddebde9857cfbf4ad
+  data.tar.gz: d555ebe09a17b91bdf5ffbacbde728c3d5a997ef8ff3251acbc367e57a727359
 SHA512:
-  metadata.gz: dc6aea29d3d0706c0c25aeec30b891554dfe969998043c882651ba42529387c833ba0a3d0f3f16ff79c05ab564e37d992fd2b3a66d18f80b5ab2cc6584b5628b
-  data.tar.gz: 212ba6217ea1d907008d85200dc9a275d6bd6906dc8c6ee7dc3b322d3222fbf5f67d9e18e1df0fabfd23d8af0c4153620908271f057c815370986c8a9a703d9f
+  metadata.gz: 9a45e4b347236a56271d12c3769ef608c0769549880b604f98f2c749375d90555f5855e7de1347ae718b2c7d58f03bcf267eaa3d71ff796588594f1ae369f288
+  data.tar.gz: 13844a6171bcce268c3b08152b4f9e7de9f048093120df1debe29c2019ebbcf5629c04e08861b49b2d06ed853a42d13287a21cf9c667eaa0dc2fbfaf99ffc9af

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    postfinancecheckout-ruby-sdk (4.2.0)
+    postfinancecheckout-ruby-sdk (4.5.0)
       addressable (~> 2.3, >= 2.3.0)
       json (~> 2.3, >= 2.3.0)
       typhoeus (~> 1.0, >= 1.0.1)
@@ -24,6 +24,7 @@ GEM
       ethon (>= 0.9.0)
 
 PLATFORMS
+  ruby
   x86_64-linux
 
 DEPENDENCIES
@@ -32,4 +33,4 @@ DEPENDENCIES
   test-unit (~> 3.3.9)
 
 BUNDLED WITH
-   2.2.3
+   2.5.3

data/Rakefile

@@ -4,7 +4,8 @@ Rake::TestTask.new do |t|
   t.libs = ["lib"]
   t.warning = true
   t.verbose = true
-  t.test_files = FileList['test/*.rb']
+  t.test_files = FileList['test/*_test.rb']
+  t.options = "-v --stop-on-failure"
 end
 
 

data/lib/postfinancecheckout-ruby-sdk/api_client.rb

@@ -102,7 +102,7 @@ module PostFinanceCheckout
       http_method = http_method.to_sym.downcase
 
       default_headers = {
-        'x-meta-sdk-version': "4.2.0",
+        'x-meta-sdk-version': "4.5.0",
         'x-meta-sdk-language': "ruby",
         'x-meta-sdk-provider': "PostFinance Checkout",
         'x-meta-sdk-language-version': RUBY_VERSION

data/lib/postfinancecheckout-ruby-sdk/encryption_util.rb

@@ -22,8 +22,7 @@ module PostFinanceCheckout
       public_key = OpenSSL::PKey.read(public_key_bytes)
 
       begin
-        public_key.verify(OpenSSL::Digest::SHA256.new, signature, content)
-        return true
+        return public_key.verify(OpenSSL::Digest::SHA256.new, signature, content)
       rescue OpenSSL::PKey::PKeyError, OpenSSL::PKey::ECError, OpenSSL::PKey::EC::Point::Error
         return false
       end

data/lib/postfinancecheckout-ruby-sdk/models/abstract_webhook_listener_update.rb

@@ -19,6 +19,9 @@ require 'date'
 
 module PostFinanceCheckout
   class AbstractWebhookListenerUpdate
+    # Whether signature header and state property are enabled in webhook payload.
+    attr_accessor :enable_payload_signature_and_state
+
     # The entity's target states that are to be monitored.
     attr_accessor :entity_states
 
@@ -34,6 +37,7 @@ module PostFinanceCheckout
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'enable_payload_signature_and_state' => :'enablePayloadSignatureAndState',
         :'entity_states' => :'entityStates',
         :'name' => :'name',
         :'notify_every_change' => :'notifyEveryChange',
@@ -44,6 +48,7 @@ module PostFinanceCheckout
     # Attribute type mapping.
     def self.swagger_types
       {
+        :'enable_payload_signature_and_state' => :'BOOLEAN',
         :'entity_states' => :'Array<String>',
         :'name' => :'String',
         :'notify_every_change' => :'BOOLEAN',
@@ -59,6 +64,10 @@ module PostFinanceCheckout
       # convert string to symbol for hash key
       attributes = attributes.each_with_object({}) { |(k, v), h| h[k.to_sym] = v }
 
+      if attributes.has_key?(:'enablePayloadSignatureAndState')
+        self.enable_payload_signature_and_state = attributes[:'enablePayloadSignatureAndState']
+      end
+
       if attributes.has_key?(:'entityStates')
         if (value = attributes[:'entityStates']).is_a?(Array)
           self.entity_states = value
@@ -111,6 +120,7 @@ module PostFinanceCheckout
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          enable_payload_signature_and_state == o.enable_payload_signature_and_state &&
           entity_states == o.entity_states &&
           name == o.name &&
           notify_every_change == o.notify_every_change &&
@@ -126,7 +136,7 @@ module PostFinanceCheckout
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [entity_states, name, notify_every_change, state].hash
+      [enable_payload_signature_and_state, entity_states, name, notify_every_change, state].hash
     end
 
     # Builds the object from hash

data/lib/postfinancecheckout-ruby-sdk/models/payment_connector_configuration.rb

@@ -38,6 +38,9 @@ module PostFinanceCheckout
     # A unique identifier for the object.
     attr_accessor :id
 
+    # 
+    attr_accessor :image_path
+
     # The ID of the space this object belongs to.
     attr_accessor :linked_space_id
 
@@ -71,6 +74,7 @@ module PostFinanceCheckout
         :'enabled_sales_channels' => :'enabledSalesChannels',
         :'enabled_space_views' => :'enabledSpaceViews',
         :'id' => :'id',
+        :'image_path' => :'imagePath',
         :'linked_space_id' => :'linkedSpaceId',
         :'name' => :'name',
         :'payment_method_configuration' => :'paymentMethodConfiguration',
@@ -91,6 +95,7 @@ module PostFinanceCheckout
         :'enabled_sales_channels' => :'Array<SalesChannel>',
         :'enabled_space_views' => :'Array<Integer>',
         :'id' => :'Integer',
+        :'image_path' => :'String',
         :'linked_space_id' => :'Integer',
         :'name' => :'String',
         :'payment_method_configuration' => :'PaymentMethodConfiguration',
@@ -140,6 +145,10 @@ module PostFinanceCheckout
         self.id = attributes[:'id']
       end
 
+      if attributes.has_key?(:'imagePath')
+        self.image_path = attributes[:'imagePath']
+      end
+
       if attributes.has_key?(:'linkedSpaceId')
         self.linked_space_id = attributes[:'linkedSpaceId']
       end
@@ -212,6 +221,7 @@ module PostFinanceCheckout
           enabled_sales_channels == o.enabled_sales_channels &&
           enabled_space_views == o.enabled_space_views &&
           id == o.id &&
+          image_path == o.image_path &&
           linked_space_id == o.linked_space_id &&
           name == o.name &&
           payment_method_configuration == o.payment_method_configuration &&
@@ -231,7 +241,7 @@ module PostFinanceCheckout
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [applicable_for_transaction_processing, conditions, connector, enabled_sales_channels, enabled_space_views, id, linked_space_id, name, payment_method_configuration, planned_purge_date, priority, processor_configuration, state, version].hash
+      [applicable_for_transaction_processing, conditions, connector, enabled_sales_channels, enabled_space_views, id, image_path, linked_space_id, name, payment_method_configuration, planned_purge_date, priority, processor_configuration, state, version].hash
     end
 
     # Builds the object from hash

data/lib/postfinancecheckout-ruby-sdk/models/webhook_listener.rb

@@ -20,6 +20,9 @@ require 'date'
 module PostFinanceCheckout
   # 
   class WebhookListener
+    # Whether signature header and state property are enabled in webhook payload.
+    attr_accessor :enable_payload_signature_and_state
+
     # The entity that is to be monitored.
     attr_accessor :entity
 
@@ -56,6 +59,7 @@ module PostFinanceCheckout
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'enable_payload_signature_and_state' => :'enablePayloadSignatureAndState',
         :'entity' => :'entity',
         :'entity_states' => :'entityStates',
         :'id' => :'id',
@@ -73,6 +77,7 @@ module PostFinanceCheckout
     # Attribute type mapping.
     def self.swagger_types
       {
+        :'enable_payload_signature_and_state' => :'BOOLEAN',
         :'entity' => :'Integer',
         :'entity_states' => :'Array<String>',
         :'id' => :'Integer',
@@ -95,6 +100,10 @@ module PostFinanceCheckout
       # convert string to symbol for hash key
       attributes = attributes.each_with_object({}) { |(k, v), h| h[k.to_sym] = v }
 
+      if attributes.has_key?(:'enablePayloadSignatureAndState')
+        self.enable_payload_signature_and_state = attributes[:'enablePayloadSignatureAndState']
+      end
+
       if attributes.has_key?(:'entity')
         self.entity = attributes[:'entity']
       end
@@ -175,6 +184,7 @@ module PostFinanceCheckout
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          enable_payload_signature_and_state == o.enable_payload_signature_and_state &&
           entity == o.entity &&
           entity_states == o.entity_states &&
           id == o.id &&
@@ -197,7 +207,7 @@ module PostFinanceCheckout
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [entity, entity_states, id, identity, linked_space_id, name, notify_every_change, planned_purge_date, state, url, version].hash
+      [enable_payload_signature_and_state, entity, entity_states, id, identity, linked_space_id, name, notify_every_change, planned_purge_date, state, url, version].hash
     end
 
     # Builds the object from hash

data/lib/postfinancecheckout-ruby-sdk/models/webhook_listener_create.rb

@@ -20,6 +20,9 @@ require 'date'
 module PostFinanceCheckout
   # 
   class WebhookListenerCreate
+    # Whether signature header and state property are enabled in webhook payload.
+    attr_accessor :enable_payload_signature_and_state
+
     # The entity's target states that are to be monitored.
     attr_accessor :entity_states
 
@@ -44,6 +47,7 @@ module PostFinanceCheckout
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'enable_payload_signature_and_state' => :'enablePayloadSignatureAndState',
         :'entity_states' => :'entityStates',
         :'name' => :'name',
         :'notify_every_change' => :'notifyEveryChange',
@@ -57,6 +61,7 @@ module PostFinanceCheckout
     # Attribute type mapping.
     def self.swagger_types
       {
+        :'enable_payload_signature_and_state' => :'BOOLEAN',
         :'entity_states' => :'Array<String>',
         :'name' => :'String',
         :'notify_every_change' => :'BOOLEAN',
@@ -75,6 +80,10 @@ module PostFinanceCheckout
       # convert string to symbol for hash key
       attributes = attributes.each_with_object({}) { |(k, v), h| h[k.to_sym] = v }
 
+      if attributes.has_key?(:'enablePayloadSignatureAndState')
+        self.enable_payload_signature_and_state = attributes[:'enablePayloadSignatureAndState']
+      end
+
       if attributes.has_key?(:'entityStates')
         if (value = attributes[:'entityStates']).is_a?(Array)
           self.entity_states = value
@@ -149,6 +158,7 @@ module PostFinanceCheckout
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          enable_payload_signature_and_state == o.enable_payload_signature_and_state &&
           entity_states == o.entity_states &&
           name == o.name &&
           notify_every_change == o.notify_every_change &&
@@ -167,7 +177,7 @@ module PostFinanceCheckout
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [entity_states, name, notify_every_change, state, entity, identity, url].hash
+      [enable_payload_signature_and_state, entity_states, name, notify_every_change, state, entity, identity, url].hash
     end
 
     # Builds the object from hash

data/lib/postfinancecheckout-ruby-sdk/models/webhook_listener_update.rb

@@ -20,6 +20,9 @@ require 'date'
 module PostFinanceCheckout
   # 
   class WebhookListenerUpdate
+    # Whether signature header and state property are enabled in webhook payload.
+    attr_accessor :enable_payload_signature_and_state
+
     # The entity's target states that are to be monitored.
     attr_accessor :entity_states
 
@@ -41,6 +44,7 @@ module PostFinanceCheckout
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'enable_payload_signature_and_state' => :'enablePayloadSignatureAndState',
         :'entity_states' => :'entityStates',
         :'name' => :'name',
         :'notify_every_change' => :'notifyEveryChange',
@@ -53,6 +57,7 @@ module PostFinanceCheckout
     # Attribute type mapping.
     def self.swagger_types
       {
+        :'enable_payload_signature_and_state' => :'BOOLEAN',
         :'entity_states' => :'Array<String>',
         :'name' => :'String',
         :'notify_every_change' => :'BOOLEAN',
@@ -70,6 +75,10 @@ module PostFinanceCheckout
       # convert string to symbol for hash key
       attributes = attributes.each_with_object({}) { |(k, v), h| h[k.to_sym] = v }
 
+      if attributes.has_key?(:'enablePayloadSignatureAndState')
+        self.enable_payload_signature_and_state = attributes[:'enablePayloadSignatureAndState']
+      end
+
       if attributes.has_key?(:'entityStates')
         if (value = attributes[:'entityStates']).is_a?(Array)
           self.entity_states = value
@@ -140,6 +149,7 @@ module PostFinanceCheckout
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          enable_payload_signature_and_state == o.enable_payload_signature_and_state &&
           entity_states == o.entity_states &&
           name == o.name &&
           notify_every_change == o.notify_every_change &&
@@ -157,7 +167,7 @@ module PostFinanceCheckout
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [entity_states, name, notify_every_change, state, id, version].hash
+      [enable_payload_signature_and_state, entity_states, name, notify_every_change, state, id, version].hash
     end
 
     # Builds the object from hash

data/lib/postfinancecheckout-ruby-sdk/version.rb

@@ -16,5 +16,5 @@ limitations under the License.
 =end
 
 module PostFinanceCheckout
-  VERSION = '4.2.0'
+  VERSION = '4.5.0'
 end

data/postfinancecheckout-ruby-sdk.gemspec

@@ -30,7 +30,7 @@ Gem::Specification.new do |s|
   s.summary     = "A ruby wrapper around the PostFinance Checkout API."
   s.description = "The PostFinance Checkout SDK allows an easy interaction with the PostFinance Checkout web service."
   s.license     = "Apache-2.0"
-  s.required_ruby_version = ">=2.2"
+  s.required_ruby_version = ">=3.0.0"
 
   s.add_runtime_dependency 'typhoeus', '~> 1.0', '>= 1.0.1'
   s.add_runtime_dependency 'json', '~> 2.3', '>= 2.3.0'

data/test/constants.rb

@@ -0,0 +1,82 @@
+require 'postfinancecheckout-ruby-sdk'
+
+# singleton config of ApiClient
+PostFinanceCheckout.configure do |config|
+    config.user_id = 512
+    config.authentication_key = 'FKrO76r5VwJtBrqZawBspljbBNOxp5veKQQkOnZxucQ='
+    config.default_headers = {"x-meta-header-ruby": 'value', "x-meta-header-ruby-2": 'value2'}
+    config.timeout = 60
+end
+
+
+SPACE_ID = 405
+TEST_CUSTOMER_ID = 7311742
+TEST_CARD_PAYMENT_METHOD_CONFIGURATION_ID = 1352
+FAKE_CARD_DATA = PostFinanceCheckout::AuthenticatedCardDataCreate.new({
+    primaryAccountNumber: '4111111111111111',
+    expiryDate: '2026-12'
+})
+
+
+def get_transaction_create
+    address = PostFinanceCheckout::AddressCreate.new({
+        city: "City",
+        country: "US",
+        emailAddress: "billing@address.com",
+        familyName: "Family",
+        givenName: "Given",
+        postCode: "98100",
+        postalState: "WA",
+        street: "Sunshine st."
+    })
+
+    PostFinanceCheckout::TransactionCreate.new({
+        billingAddress: address,
+        currency: "EUR",
+        customerEmailAddress: "test@example.com",
+        customerPresence: PostFinanceCheckout::CustomersPresence::VIRTUAL_PRESENT,
+        failedUrl: "http://localhost/failure",
+        invoiceMerchantReference: "order-1",
+        language: "en_US",
+
+        lineItems: [
+            PostFinanceCheckout::LineItemCreate.new({
+            amountIncludingTax: 29.60,
+            name: "Item 1",
+            quantity: 1,
+            shippingRequired: true,
+            sku: "sku-1",
+            taxes: [
+                PostFinanceCheckout::TaxCreate.new({
+                rate: 8,
+                title: "VAT"
+                })
+            ],
+            type: PostFinanceCheckout::LineItemType::PRODUCT,
+            uniqueId: "unique-id-item-1",
+            }),
+
+            PostFinanceCheckout::LineItemCreate.new({
+            amountIncludingTax: 5.60,
+            name: "Test Shipping",
+            quantity: 1,
+            shippingRequired: false,
+            sku: "test-shipping",
+            taxes: [
+                PostFinanceCheckout::TaxCreate.new({
+                rate: 8,
+                title: "VAT"
+                })
+            ],
+            type: PostFinanceCheckout::LineItemType::SHIPPING,
+            uniqueId: "unique-id-shipping-1",
+            }),
+        ],
+
+        merchantReference: "order-1",
+        shippingAddress: address,
+        shippingMethod: "Test Shipping"
+    })
+end
+
+

data/test/encryption_util_test.rb

@@ -0,0 +1,86 @@
+require "test/unit"
+require 'postfinancecheckout-ruby-sdk'
+
+class TestEncryptionUtil < Test::Unit::TestCase
+
+  class << self
+    def startup
+        @@valid_content_to_verify =
+        '{"entityId":11,"eventId":35,"listenerEntityId":1472041829003,"listenerEntityTechnicalName":"Transaction","spaceId":1,"state":"PROCESSING","timestamp":"2023-12-19T13:43:35+0000","webhookListenerId":2}'
+
+        @@valid_content_signature =
+        "MEYCIQCTzbMrMsOAC6T57T9kQTb1iGZVg2R7n6pY9A4ML4P31gIhAIOoav8cG8x0jpRWQztqSJIC8gXWKq+4DuENEySvmMYf"
+
+        @@valid_encoded_publickey =
+        "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEdWq7ZBGsjUzhBO3e6mzUBLpjpV3TQw1bL1rk3ocjn5C5qne7TY0OBBhiWgaPtWlvUcqASz903vtfeSTQma+SBA=="
+
+        @@signature_algorithm = "SHA256withECDSA"
+    end
+  end
+
+  description "should return true for valid content, signature, and public key"
+  def test_valid_content
+    is_content_valid = PostFinanceCheckout::EncryptionUtil.is_content_valid(
+        @@valid_content_to_verify, @@valid_content_signature, 
+        @@valid_encoded_publickey, @@signature_algorithm)
+
+    assert_true(is_content_valid, "Signature check must pass")
+  end
+
+  description "should return false when the content does not correspond to the signature"
+  def test_invalid_content
+    invalid_content = 'ModifiedContent'
+
+    is_content_valid = PostFinanceCheckout::EncryptionUtil.is_content_valid(
+        invalid_content, @@valid_content_signature, 
+        @@valid_encoded_publickey, @@signature_algorithm)
+
+    assert_false(is_content_valid, "Signature check must fail")
+  end
+
+  description "should return an error for invalid signature in the plain text format"
+  def test_invalid_signature
+    invalid_signature = 'InvalidModifiedSignature'
+
+    is_content_valid = PostFinanceCheckout::EncryptionUtil.is_content_valid(
+        @@valid_content_to_verify, invalid_signature, 
+        @@valid_encoded_publickey, @@signature_algorithm)
+
+    assert_false(is_content_valid, "Signature check must fail")
+  end
+
+  description "should return false for invalid signature in the Base64 format"
+  def test_invalid_signature_in_base64
+    # Modify the signature to make it invalid in the Base64 format
+    invalid_signature = "MEYCIQCTzbMrMsOAC6T57T9kQTb1iGZVg2R7n6pY9A4ML4P31gIhAIOoav8cG8x0jpRWQztqSJIC8gXWKq";
+
+    is_content_valid = PostFinanceCheckout::EncryptionUtil.is_content_valid(
+        @@valid_content_to_verify, invalid_signature, 
+        @@valid_encoded_publickey, @@signature_algorithm)
+
+    assert_false(is_content_valid, "Signature check must fail")
+  end
+
+  description "should return an error for invalid public key in the plain text format"
+  def test_invalid_public_key
+    invalid_public_key = "InvalidModifiedPublicKey";
+
+    assert_raise_kind_of(OpenSSL::PKey::PKeyError) do
+        PostFinanceCheckout::EncryptionUtil.is_content_valid(
+            @@valid_content_to_verify, @@valid_content_signature, 
+            invalid_public_key, @@signature_algorithm)
+    end
+  end
+
+  description "should return an error for invalid public key in the Base64 format"
+  def test_invalid_public_key_in_base64
+    invalid_public_key = "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEdWq7ZBGsjUzhBO3e6mzUBLpjpV3TQw1bL1rk3ocjn5C5qne7TY0OBBhiWgaPtWlvUcqASz903vtfeSTQm";
+
+    assert_raise_kind_of(OpenSSL::PKey::PKeyError) do
+        PostFinanceCheckout::EncryptionUtil.is_content_valid(
+            @@valid_content_to_verify, @@valid_content_signature, 
+            invalid_public_key, @@signature_algorithm)
+    end
+  end
+
+end

data/test/refund_service_test.rb

@@ -0,0 +1,133 @@
+require "test/unit"
+require 'postfinancecheckout-ruby-sdk'
+
+require_relative "constants.rb"
+
+class TestRefundService < Test::Unit::TestCase
+
+  class << self
+    def startup
+      @@transaction_service = PostFinanceCheckout::TransactionService.new
+      
+      @@card_processing_service = PostFinanceCheckout::CardProcessingService.new
+
+      @@transaction_completion_service = PostFinanceCheckout::TransactionCompletionService.new
+
+      @@refund_service = PostFinanceCheckout::RefundService.new
+    end
+  end
+
+  description "refund() should create a refund for transaction"
+  def test_refund
+    transaction = @@transaction_service.create(SPACE_ID, get_transaction_create)
+
+    transaction_processed = @@card_processing_service.process(SPACE_ID, transaction.id, 
+        TEST_CARD_PAYMENT_METHOD_CONFIGURATION_ID, FAKE_CARD_DATA)
+
+    transaction_completion = @@transaction_completion_service.complete_offline(SPACE_ID, transaction_processed.id)
+
+    assert_equal(PostFinanceCheckout::TransactionCompletionState::SUCCESSFUL, transaction_completion.state,
+        "State must be SUCCESSFUL")
+
+    transaction_read = @@transaction_service.read(SPACE_ID, transaction_processed.id)
+
+    refund = @@refund_service.refund(SPACE_ID, get_refund_create(transaction_read))
+
+    assert_equal(PostFinanceCheckout::RefundState::SUCCESSFUL, refund.state,
+        "State must be SUCCESSFUL")
+  end
+
+  description "read() should should fetch refund details"
+  def test_read
+    transaction = @@transaction_service.create(SPACE_ID, get_transaction_create)
+
+    transaction_processed = @@card_processing_service.process(SPACE_ID, transaction.id, 
+        TEST_CARD_PAYMENT_METHOD_CONFIGURATION_ID, FAKE_CARD_DATA)
+
+    transaction_completion = @@transaction_completion_service.complete_offline(SPACE_ID, transaction_processed.id)
+
+    transaction_read = @@transaction_service.read(SPACE_ID, transaction_processed.id)
+
+    refund = @@refund_service.refund(SPACE_ID, get_refund_create(transaction_read))
+
+    assert_equal(PostFinanceCheckout::RefundState::SUCCESSFUL, refund.state,
+        "State must be SUCCESSFUL")
+
+    read_refund = @@refund_service.read(SPACE_ID, refund.id)
+
+    assert_equal(refund.id, read_refund.id, "Refund ids must match")
+  end
+
+  description "search() should find a refund for a given criteria"
+  def test_search
+    transaction = @@transaction_service.create(SPACE_ID, get_transaction_create)
+
+    transaction_processed = @@card_processing_service.process(SPACE_ID, transaction.id, 
+        TEST_CARD_PAYMENT_METHOD_CONFIGURATION_ID, FAKE_CARD_DATA)
+
+    transaction_completion = @@transaction_completion_service.complete_offline(SPACE_ID, transaction_processed.id)
+
+    transaction_read = @@transaction_service.read(SPACE_ID, transaction_processed.id)
+
+    refund = @@refund_service.refund(SPACE_ID, get_refund_create(transaction_read))
+
+    assert_equal(PostFinanceCheckout::RefundState::SUCCESSFUL, refund.state,
+        "State must be SUCCESSFUL")
+
+    criteria = PostFinanceCheckout::EntityQuery.new({
+        filter: PostFinanceCheckout::EntityQueryFilter.new({
+            fieldName: "id",
+            value: refund.id,
+            type: PostFinanceCheckout::EntityQueryFilterType::LEAF,
+            operator: PostFinanceCheckout::CriteriaOperator::EQUALS
+        })
+    })
+
+    refunds_found = @@refund_service.search(SPACE_ID, criteria)
+    
+    assert_equal(1, refunds_found.length, "Search should give single result")
+    refunds_found.each { |ref| assert_equal(refund.id, ref.id, "Refund ids must match") }
+  end
+
+  description "count() should count refunds for a given criteria"
+  def test_count
+    transaction = @@transaction_service.create(SPACE_ID, get_transaction_create)
+
+    transaction_processed = @@card_processing_service.process(SPACE_ID, transaction.id, 
+        TEST_CARD_PAYMENT_METHOD_CONFIGURATION_ID, FAKE_CARD_DATA)
+    
+    transaction_completion = @@transaction_completion_service.complete_offline(SPACE_ID, transaction_processed.id)
+
+    transaction_read = @@transaction_service.read(SPACE_ID, transaction_processed.id)
+
+    refund = @@refund_service.refund(SPACE_ID, get_refund_create(transaction_read))
+
+    assert_equal(PostFinanceCheckout::RefundState::SUCCESSFUL, refund.state,
+        "State must be SUCCESSFUL")
+
+    criteria = {
+        filter: PostFinanceCheckout::EntityQueryFilter.new({
+            fieldName: "id",
+            value: refund.id,
+            type: PostFinanceCheckout::EntityQueryFilterType::LEAF,
+            operator: PostFinanceCheckout::CriteriaOperator::EQUALS
+        })
+    }
+
+    count = @@refund_service.count(SPACE_ID, criteria)
+    assert_equal(1, count, "Should find 1 refund", )
+  end
+
+  private
+  
+  def get_refund_create(transaction)
+    PostFinanceCheckout::RefundCreate.new({
+        externalId: transaction.id.to_s,
+        type: PostFinanceCheckout::RefundType::MERCHANT_INITIATED_ONLINE,
+        amount: transaction.authorization_amount,
+        transaction: transaction.id,
+        merchantReference: transaction.merchant_reference
+    })
+  end
+
+end