razorpay 2.4.0 → 3.2.4

data/lib/razorpay/utility.rb

@@ -4,14 +4,21 @@ module Razorpay
   # Helper functions are defined here
   class Utility
     def self.verify_payment_signature(attributes)
-      signature = attributes[:razorpay_signature]
-      order_id = attributes[:razorpay_order_id] || attributes[:razorpay_subscription_id]
-      payment_id = attributes[:razorpay_payment_id]
-
-      data = [order_id, payment_id].join '|'
+      signature = attributes.delete(:razorpay_signature)
 
+      # Data requires the values to be in sorted order of their keys.
+      # attributes.sort returns a nested array, and the last
+      # element of each is the value. These are joined.
+      data = attributes.sort.map(&:last).join('|')
       secret = Razorpay.auth[:password]
+      verify_signature(data, signature, secret)
+    end
 
+    def self.verify_payment_link_signature(attributes)
+      signature = attributes.delete(:razorpay_signature)
+      # element of each is the value. These are joined.
+      data = attributes.values.join('|')
+      secret = Razorpay.auth[:password]
       verify_signature(data, signature, secret)
     end
 
@@ -19,12 +26,16 @@ module Razorpay
       verify_signature(body, signature, secret)
     end
 
+    def self.generate_onboarding_signature(body, secret)
+      json_data = body.to_json
+      encrypt(json_data, secret);
+    end
+
     class << self
       private
 
       def verify_signature(data, signature, secret)
         expected_signature = OpenSSL::HMAC.hexdigest('SHA256', secret, data)
-
         verified = secure_compare(expected_signature, signature)
 
         raise SecurityError, 'Signature verification failed' unless verified
@@ -46,6 +57,30 @@ module Razorpay
 
         r.zero?
       end
+
+      def encrypt(data, secret)
+        key = secret[0, 16]
+
+        # Generate a fresh random 12-byte nonce per call (fixes AES-GCM nonce reuse).
+        # A static IV derived from the secret allows keystream recovery and tag forgery
+        # (NIST SP 800-38D §8.3 Forbidden Attack) using only two captured ciphertexts.
+        iv = OpenSSL::Random.random_bytes(12)
+
+        cipher = OpenSSL::Cipher.new('aes-128-gcm')
+        cipher.encrypt
+        cipher.key = key
+        cipher.iv = iv
+
+        cipher.auth_data = ""
+
+        encrypted = cipher.update(data) + cipher.final
+
+        tag = cipher.auth_tag
+
+        # Output format: iv (12 bytes) || ciphertext || tag (16 bytes), hex-encoded.
+        # Receiver must read the first 24 hex chars as the IV before decrypting.
+        (iv + encrypted + tag).unpack1("H*")
+      end
     end
   end
 end

data/lib/razorpay/validation_config.rb

@@ -0,0 +1,11 @@
+module Razorpay
+
+  class ValidationConfig
+    attr_reader :field_name, :validations
+
+    def initialize(field_name, validations)
+      @field_name = field_name
+      @validations = validations
+    end
+  end
+end

data/lib/razorpay/virtual_account.rb

@@ -20,13 +20,9 @@ module Razorpay
     def self.all(options = {})
       request.all options
     end
-
+    
     def self.close(id)
-      request.patch id, status: 'closed'
-    end
-
-    def close
-      self.class.request.patch id, status: 'closed'
+       request.post "#{id}/close"
     end
 
     def close!
@@ -35,7 +31,19 @@ module Razorpay
 
     def payments(options = {})
       r = self.class.request
-      r.request :get, "/virtual_accounts/#{id}/payments", options
+      r.request :get, "/v1/virtual_accounts/#{id}/payments", options
+    end
+
+    def self.add_receiver(id, options = {})
+      request.post "#{id}/receivers", options
+    end
+
+    def self.allowed_payer(id, options = {})
+      request.post "#{id}/allowed_payers", options
+    end
+
+    def self.delete_allowed_payer(id, payer_id)
+      request.delete "#{id}/allowed_payers/#{payer_id}"
     end
   end
 end

data/lib/razorpay/webhook.rb

@@ -0,0 +1,50 @@
+require 'razorpay/request'
+require 'razorpay/entity'
+
+module Razorpay
+  # Webhook API allows you create, fetch, update and delete
+  class Webhook < Entity
+
+    @@versions = "v2"
+
+    def self.request
+      Razorpay::Request.new('accounts')
+    end
+
+    def self.create(options, account_id = nil)
+      if(account_id)
+       return request.post "#{account_id}/webhooks", options, @@versions
+      end
+
+      r = request
+      return r.request :post, "/v1/webhooks", options
+    end
+
+    def self.all(options = {}, account_id = nil)
+      if(account_id)
+       return request.get "#{account_id}/webhooks" , options , @@versions
+      end
+
+      r = request
+      return r.request :get, "/v1/webhooks", options
+    end
+
+    def self.fetch(id, account_id)
+      request.fetch "#{account_id}/webhooks/#{id}", @@versions
+    end
+
+    def self.edit(options, id, account_id = nil)
+      if(account_id)  
+       return request.patch "#{account_id}/webhooks/#{id}", options, @@versions
+      end
+
+      r = request
+      return r.request :put, "/v1/webhooks/#{id}" , options
+    end
+
+    def self.delete(id, account_id)
+      request.delete "#{account_id}/webhooks/#{id}", @@versions
+    end
+  end
+end
+

data/lib/razorpay.rb

@@ -12,15 +12,38 @@ require 'razorpay/virtual_account'
 require 'razorpay/plan'
 require 'razorpay/subscription'
 require 'razorpay/addon'
+require 'razorpay/transfer'
+require 'razorpay/subscription_registration'
+require 'razorpay/settlement'
+require 'razorpay/payment_link'
+require 'razorpay/fund_account'
+require 'razorpay/item'
+require 'razorpay/qr_code'
+require 'razorpay/payment_method'
+require 'razorpay/webhook'
+require 'razorpay/iin'
+require 'razorpay/token'
+require 'razorpay/product'
+require 'razorpay/stakeholder'
+require 'razorpay/account'
+require 'razorpay/document'
+require 'razorpay/dispute'
+require 'razorpay/oauth_token'
 
 # Base Razorpay module
 module Razorpay
   class << self
-    attr_accessor :auth, :custom_headers
+    attr_accessor :auth, :custom_headers, :access_token, :auth_type
   end
 
   def self.setup(key_id, key_secret)
     self.auth = { username: key_id, password: key_secret }
+    self.auth_type = Razorpay::PRIVATE_AUTH
+  end
+
+  def self.setup_with_oauth(access_token)
+    self.access_token = access_token
+    self.auth_type = Razorpay::OAUTH
   end
 
   def self.headers=(headers = {})

data/razorpay-ruby.gemspec

@@ -19,7 +19,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'httparty', '~> 0.14'
 
-  spec.add_development_dependency 'coveralls', '~> 0.8'
+  spec.add_development_dependency 'coveralls_reborn', '~> 0.8'
   spec.add_development_dependency 'minitest', '~> 5.11'
   spec.add_development_dependency 'rake', '~> 12.0'
 
@@ -27,6 +27,7 @@ Gem::Specification.new do |spec|
     # rubocop is only run in the latest ruby build
     # so we use the latest version and don't switch to a
     # older version for 1.9.3
+    spec.add_development_dependency 'simplecov-cobertura'
     spec.add_development_dependency 'rubocop', '~> 0.49'
     spec.add_development_dependency 'webmock', '~> 3.0'
   else

data/test/fixtures/addon_collection.json

@@ -0,0 +1,60 @@
+{
+  "entity":"collection",
+  "count":2,
+  "items":[
+    {
+      "id":"ao_00000000000002",
+      "entity":"addon",
+      "item":{
+        "id":"item_00000000000002",
+        "active":true,
+        "name":"Extra sweet",
+        "description":"1 extra sweet of the day with meals",
+        "amount":90000,
+        "unit_amount":90000,
+        "currency":"INR",
+        "type":"addon",
+        "unit":null,
+        "tax_inclusive":false,
+        "hsn_code":null,
+        "sac_code":null,
+        "tax_rate":null,
+        "tax_id":null,
+        "tax_group_id":null,
+        "created_at":1581597318,
+        "updated_at":1581597318
+      },
+      "quantity":1,
+      "created_at":1581597318,
+      "subscription_id":"sub_00000000000001",
+      "invoice_id":"inv_00000000000001"
+    },
+    {
+      "id":"ao_00000000000001",
+      "entity":"addon",
+      "item":{
+        "id":"item_00000000000001",
+        "active":true,
+        "name":"Extra appala (papadum)",
+        "description":"1 extra oil fried appala with meals",
+        "amount":30000,
+        "unit_amount":30000,
+        "currency":"INR",
+        "type":"addon",
+        "unit":null,
+        "tax_inclusive":false,
+        "hsn_code":null,
+        "sac_code":null,
+        "tax_rate":null,
+        "tax_id":null,
+        "tax_group_id":null,
+        "created_at":1581597318,
+        "updated_at":1581597318
+      },
+      "quantity":2,
+      "created_at":1581597318,
+      "subscription_id":"sub_00000000000001",
+      "invoice_id":null
+    }
+  ]
+}

data/test/fixtures/create_json_payment.json

@@ -0,0 +1,13 @@
+{
+    "razorpay_payment_id": "pay_FVmAstJWfsD3SO",
+    "next": [
+      {
+        "action": "redirect",
+        "url": "https://api.razorpay.com/v1/payments/FVmAtLUe9XZSGM/authorize"
+      },
+      {
+        "action": "otp_generate",
+        "url": "https://api.razorpay.com/v1/payments/pay_FVmAstJWfsD3SO/otp_generate?track_id=FVmAtLUe9XZSGM&key_id=<YOUR_KEY_ID>"
+      }
+    ]
+}

data/test/fixtures/delete_token.json

@@ -0,0 +1,3 @@
+{
+   "deleted": true
+}

data/test/fixtures/dispute_collection.json

@@ -0,0 +1,67 @@
+{
+    "entity": "collection",
+    "count": 2,
+    "items": [
+      {
+        "id": "disp_Esz7KAitoYM7PJ",
+        "entity": "dispute",
+        "payment_id": "pay_EsyWjHrfzb59eR",
+        "amount": 10000,
+        "currency": "INR",
+        "amount_deducted": 0,
+        "reason_code": "pre_arbitration",
+        "respond_by": 1590604200,
+        "status": "open",
+        "phase": "pre_arbitration",
+        "created_at": 1590059211,
+        "evidence": {
+          "amount": 10000,
+          "summary": null,
+          "shipping_proof": null,
+          "billing_proof": null,
+          "cancellation_proof": null,
+          "customer_communication": null,
+          "proof_of_service": null,
+          "explanation_letter": null,
+          "refund_confirmation": null,
+          "access_activity_log": null,
+          "refund_cancellation_policy": null,
+          "term_and_conditions": null,
+          "others": null,
+          "submitted_at": null
+        }
+      },
+      {
+        "id": "disp_Esyvk3kZj0isXk",
+        "entity": "dispute",
+        "payment_id": "pay_EsyWjHrfzb59eR",
+        "amount": 5000,
+        "currency": "INR",
+        "amount_deducted": 0,
+        "reason_code": "warning_bulletin_or_exception_file",
+        "respond_by": 1590604200,
+        "status": "won",
+        "phase": "chargeback",
+        "created_at": 1590058554,
+        "evidence": {
+          "amount": 5000,
+          "summary": null,
+          "shipping_proof": [
+            "doc_EFtmUsbwpXwBH9",
+            "doc_EFtmUsbwpXwBH8"
+          ],
+          "billing_proof": null,
+          "cancellation_proof": null,
+          "customer_communication": null,
+          "proof_of_service": null,
+          "explanation_letter": null,
+          "refund_confirmation": null,
+          "access_activity_log": null,
+          "refund_cancellation_policy": null,
+          "term_and_conditions": null,
+          "others": null,
+          "submitted_at": 1590604100
+        }
+      }
+    ]
+  }

data/test/fixtures/dispute_error.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The id provided does not exist",
+        "source": "business",
+        "step": "payment_initiation",
+        "reason": "input_validation_failed",
+        "metadata": {}
+    }
+}

data/test/fixtures/document_error.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "Invalid file id provided or merchant is unauthorized to access the fileId(s) provided",
+        "source": "NA",
+        "step": "NA",
+        "reason": "NA",
+        "metadata": {}
+    }
+}

data/test/fixtures/downtimes_collection.json

@@ -0,0 +1,21 @@
+{
+      "entity": "collection",
+      "count": 1,
+      "items": [
+        {
+          "id": "down_F7LroRQAAFuswd",
+          "entity": "payment.downtime",
+          "method": "card",
+          "begin": 1593196031,
+          "end": null,
+          "status": "started",
+          "scheduled": false,
+          "severity": "high",
+          "instrument": {
+            "issuer": "SBIN"
+          },
+          "created_at": 1593196089,
+          "updated_at": 1593196089
+        }
+      ]
+}

data/test/fixtures/empty.json

@@ -0,0 +1,2 @@
+
+{}

data/test/fixtures/error_customer.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The id provided does not exist",
+        "source": "business",
+        "step": "payment_initiation",
+        "reason": "input_validation_failed",
+        "metadata": {}
+    }
+}

data/test/fixtures/error_eligibility.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The eligibility  id does not exist.",
+        "source": "NA",
+        "step": "NA",
+        "reason": "NA",
+        "metadata": {}
+    }
+}

data/test/fixtures/error_eligibility_check.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "Amount is required.",
+        "source": "NA",
+        "step": "NA",
+        "reason": "NA",
+        "metadata": {}
+    }
+}

data/test/fixtures/fake_account.json

@@ -0,0 +1,78 @@
+{
+    "id": "acc_00000000000001",
+    "type": "standard",
+    "status": "created",
+    "email": "gauriagain.kumar@example.org",
+    "profile": {
+        "category": "healthcare",
+        "subcategory": "clinic",
+        "addresses": {
+            "registered": {
+                "street1": "507, Koramangala 1st block",
+                "street2": "MG Road",
+                "city": "Bengaluru",
+                "state": "KARNATAKA",
+                "postal_code": 560034,
+                "country": "IN"
+            },
+            "operation": {
+                "street1": "507, Koramangala 6th block",
+                "street2": "Kormanagalo",
+                "city": "Bengaluru",
+                "state": "KARNATAKA",
+                "country": "IN",
+                "postal_code": 560047
+            }
+        },
+        "business_model": "Online Clothing ( men, women, ethnic, modern ) fashion and lifestyle, accessories, t-shirt, shirt, track pant, shoes."
+    },
+    "notes": {
+        "internal_ref_id": "123123"
+    },
+    "created_at": 1611136837,
+    "phone": "9000090000",
+    "business_type": "partnership",
+    "legal_business_name": "Acme Corp",
+    "customer_facing_business_name": "Example",
+    "legal_info": {
+        "pan": "AAACL1234C",
+        "gst": "18AABCU9603R1ZM"
+    },
+    "apps": {
+        "websites": [
+            "https://www.example.org"
+        ],
+        "android": [
+            {
+                "url": "playstore.example.org",
+                "name": "Example"
+            }
+        ],
+        "ios": [
+            {
+                "url": "appstore.example.org",
+                "name": "Example"
+            }
+        ]
+    },
+    "brand": {
+        "color": "#FFFFFF"
+    },
+    "contact_info": {
+        "chargeback": {
+            "email": "cb@example.org",
+            "phone": null,
+            "policy_url": null
+        },
+        "refund": {
+            "email": "cb@example.org",
+            "phone": null,
+            "policy_url": null
+        },
+        "support": {
+            "email": "support@example.org",
+            "phone": "9999999998",
+            "policy_url": "https://www.google.com"
+        }
+    }
+}

data/test/fixtures/fake_addon.json

@@ -1,8 +1,8 @@
 {
-  "id": "fake_addon_id",
+  "id": "ao_IrSY3UIqDRx7df",
   "entity": "addon",
   "item": {
-    "id": "fake_item_id",
+    "id": "item_00000000000001",
     "active": true,
     "name": "fake_item_name",
     "description": "fake_item_description",
@@ -19,6 +19,6 @@
   },
   "quantity": 1,
   "created_at": 1511525697,
-  "subscription_id": "fake_subscription_id",
+  "subscription_id": "sub_00000000000001",
   "invoice_id": null
 }

data/test/fixtures/fake_bank_account.json

@@ -0,0 +1,9 @@
+{
+    "id": "ba_LSZht1Cm7xFTwF",
+    "entity": "bank_account",
+    "ifsc": "ICIC0001207",
+    "bank_name": "ICICI Bank",
+    "name": "Gaurav Kumar",
+    "notes": [],
+    "account_number": "XXXXXXXXXXXXXXX0434"
+}

data/test/fixtures/fake_card_reference.json

@@ -0,0 +1,5 @@
+{
+    "network":"Visa",
+    "network_reference_id":null,
+    "payment_account_reference":"V0010014620077202123799870069"
+}

data/test/fixtures/fake_create_upi_payment.json

@@ -0,0 +1,3 @@
+{
+    "razorpay_payment_id": "pay_FVmAstJWfsD3SO"
+}

data/test/fixtures/fake_direct_transfer.json

@@ -0,0 +1,32 @@
+{
+"id":"trf_JDEnyfvGu22ECp",
+"entity":"transfer",
+"transfer_status":"pending",
+"settlement_status":null,
+"source":"acc_CJoeHMNpi0nC7k",
+"recipient":"acc_CPRsN1LkFccllA",
+"amount":100,
+"currency":"INR",
+"amount_reversed":0,
+"notes":[
+    
+],
+"fees":1,
+"tax":0,
+"on_hold":false,
+"on_hold_until":null,
+"recipient_settlement_id":null,
+"created_at":1580219046,
+"linked_account_notes":[
+    
+],
+"processed_at":null,
+"errors":{
+    "code":null,
+    "description":null,
+    "field":null,
+    "source":null,
+    "step":null,
+    "reason":null
+  }
+}

data/test/fixtures/fake_dispute.json

@@ -0,0 +1,29 @@
+{
+    "id": "disp_XXXXXXXXXXXXX",
+    "entity": "dispute",
+    "payment_id": "pay_EsyWjHrfzb59eR",
+    "amount": 10000,
+    "currency": "INR",
+    "amount_deducted": 0,
+    "reason_code": "pre_arbitration",
+    "respond_by": 1590604200,
+    "status": "open",
+    "phase": "pre_arbitration",
+    "created_at": 1590059211,
+    "evidence": {
+      "amount": 10000,
+      "summary": "goods delivered",
+      "shipping_proof": null,
+      "billing_proof": null,
+      "cancellation_proof": null,
+      "customer_communication": null,
+      "proof_of_service": null,
+      "explanation_letter": null,
+      "refund_confirmation": null,
+      "access_activity_log": null,
+      "refund_cancellation_policy": null,
+      "term_and_conditions": null,
+      "others": null,
+      "submitted_at": null
+    }
+  }

data/test/fixtures/fake_document.json

@@ -0,0 +1,9 @@
+{
+    "entity": "document",
+    "id": "doc_O4KANwWi2kHGiV",
+    "purpose": "dispute_evidence",
+    "created_at": 1714368859,
+    "mime_type": "image/jpeg",
+    "display_name": "Screenshot 2022-09-12 at 5.48.23 PM",
+    "size": 334201
+}

data/test/fixtures/fake_downtime.json

@@ -0,0 +1,14 @@
+{
+    "id": "fake_downtime_id",
+    "method": "card",
+    "begin": 1593196031,
+    "end": null,
+    "status": "started",
+    "scheduled": false,
+    "severity": "high",
+    "instrument": {
+      "issuer": "SBIN"
+    },
+    "created_at": 1593196089,
+    "updated_at": 1593196089
+}