razorpay 3.2.2 → 3.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0f1899756cb2c34271a9cd8167029bb2aa56d3a07094df776feab8de024aa69b
-  data.tar.gz: daf3f8a28f3d5f211a1f83de9772d4f71fa3aa8b0b415bb0731846930584e11a
+  metadata.gz: 20c9fe5dd27329aceee373510059552808b2ed481fb59da923f2dca95d857156
+  data.tar.gz: d58229258c2df81882fea1bdb99a136e34f458f3170f0df4ab2b5f7123a827a5
 SHA512:
-  metadata.gz: 9458dcd7356a9017800f5ec4cdae747f17e4595ab7b9f194cb8f14c617f41b8c077497b4438afbd559ecd2f6c0f580f4de5ca5935ed7d7aa6de05679e27be535
-  data.tar.gz: 3377a46637db6e97d2c2435818de9d8b4782aac20d72adf4721e149c9fff2b7fbe41a83a0374090d2556cec2b996438160850d95ffa3b7f0d92a6f99d22aa024
+  metadata.gz: fd7ecba7866f08006fc27b7d5a4b5cb4d9ccf7f5fdf39ca833e60988b46b0fded9afdea31bc7679b256a150fac525eeb2ca77985043143073d52471490919f67
+  data.tar.gz: 1d5747bf39b762bdbfd010fd212d07a78ab94c5cd712a121f8b6592e5850aa1bd8a0913ad8d26bce50f390631b94376088af78163574578f3b2e62a1e15f983d

data/.cursorignore

@@ -0,0 +1,174 @@
+# Distribution and Environment
+dist/*
+build/*
+venv/*
+env/*
+*.env
+.env.*
+virtualenv/*
+.python-version
+.ruby-version
+.node-version
+
+# Logs and Temporary Files
+*.log
+*.tsv
+*.csv
+*.txt
+tmp/*
+temp/*
+.tmp/*
+*.temp
+*.cache
+.cache/*
+logs/*
+
+# Sensitive Data
+*.sqlite
+*.sqlite3
+*.dbsql
+secrets.*
+.npmrc
+.yarnrc
+.aws/*
+.config/*
+
+# Credentials and Keys
+*.pem
+*.ppk
+*.key
+*.pub
+*.p12
+*.pfx
+*.htpasswd
+*.keystore
+*.jks
+*.truststore
+*.cer
+id_rsa*
+known_hosts
+authorized_keys
+.ssh/*
+.gnupg/*
+.pgpass
+
+# Config Files
+*.conf
+*.toml
+*.ini
+.env.local
+.env.development
+.env.test
+.env.production
+config/*
+
+# Database Files
+*.sql
+*.db
+*.dmp
+*.dump
+*.backup
+*.restore
+*.mdb
+*.accdb
+*.realm*
+
+# Backup and Archive Files
+*.bak
+*.backup
+*.swp
+*.swo
+*.swn
+*~
+*.old
+*.orig
+*.archive
+*.gz
+*.zip
+*.tar
+*.rar
+*.7z
+
+# Compiled and Binary Files
+*.pyc
+*.pyo
+**/__pycache__/**
+*.class
+*.jar
+*.war
+*.ear
+*.dll
+*.exe
+*.so
+*.dylib
+*.bin
+*.obj
+
+# IDE and Editor Files
+.idea/*
+*.iml
+.vscode/*
+.project
+.classpath
+.settings/*
+*.sublime-*
+.atom/*
+.eclipse/*
+*.code-workspace
+.history/*
+
+# Build and Dependency Directories
+node_modules/*
+bower_components/*
+vendor/*
+packages/*
+jspm_packages/*
+.gradle/*
+target/*
+out/*
+
+# Testing and Coverage Files
+coverage/*
+.coverage
+htmlcov/*
+.pytest_cache/*
+.tox/*
+junit.xml
+test-results/*
+
+# Mobile Development
+*.apk
+*.aab
+*.ipa
+*.xcarchive
+*.provisionprofile
+google-services.json
+GoogleService-Info.plist
+
+# Certificate and Security Files
+*.crt
+*.csr
+*.ovpn
+*.p7b
+*.p7s
+*.pfx
+*.spc
+*.stl
+*.pem.crt
+ssl/*
+
+# Container and Infrastructure
+*.tfstate
+*.tfstate.backup
+.terraform/*
+.vagrant/*
+docker-compose.override.yml
+kubernetes/*
+
+# Design and Media Files (often large and binary)
+*.psd
+*.ai
+*.sketch
+*.fig
+*.xd
+assets/raw/*

data/.github/workflows/ci.yml

@@ -3,6 +3,7 @@ on:
   push:
     branches:
       - master
+      - fix/upgrade-github-actions-v4
     tags:
       - v[0-9]+.[0-9]+.[0-9]+*
   pull_request:
@@ -14,7 +15,7 @@ jobs:
   runs-on: ubuntu-latest
 
   steps:
-  - uses: actions/checkout@v3
+  - uses: actions/checkout@v4
   - name: Set up Ruby
     uses: ruby/setup-ruby@v1
     with:
@@ -24,7 +25,7 @@ jobs:
   - name: Build
     run: gem build *.gemspec
   - name: 'Upload Artifact'
-    uses: actions/upload-artifact@v3
+    uses: actions/upload-artifact@v4
     with:
       name: gems
       path: '*.gem'
@@ -37,7 +38,7 @@ jobs:
 
   steps:
     - name: Checkout
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: Set up Ruby latest
       uses: ruby/setup-ruby@v1
       with:
@@ -48,19 +49,19 @@ jobs:
       run: bundle exec rake
     - name: Upload coverage to Codecov
       if: ${{ matrix.ruby-version == 3.1 }}
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@v4
       with:
         files: ${{ github.workspace }}/coverage/coverage.xml
  publish:      
     name: Publish
-    if: startsWith(github.ref, 'refs/tags/v')
+    # if: startsWith(github.ref, 'refs/tags/v')
     needs: [build, test]
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - run: sudo apt-get install -y oathtool
     - name: Download all workflow run artifacts
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: gems
         path: gems

data/CHANGELOG.md

@@ -4,6 +4,22 @@ Changelog for Razorpay-Ruby SDK.
 
 ## Unreleased
 
+## [3.2.4] - 2026-06-08
+
+fix: Security fix for AES-GCM onboarding signature
+* Fixed nonce reuse vulnerability in `generate_onboarding_signature` by using a random nonce per call instead of a static IV derived from the secret key
+* New output format: `hex(iv[12] || ciphertext || tag[16])` — the receiver reads the first 24 hex chars as the IV before decrypting
+
+## [3.2.3] - 2024-05-27
+
+feat: Added new API endpoints
+* Added support for `add_bank_account`, `delete_bank_account`, `request_eligibility_check` & `fetch_eligibility` on customer
+* Added support for `expand_details` on payment
+* Added support for fetch Reversals for a Transfer
+* Added support for Dispute
+* Added support for Document
+* Added support for `view_rto` & `edit_fulfillment` on order
+
 ## [3.2.2] - 2024-04-16
 
 feat: Added oauth APIs and support for access token based authentication mechanism

data/README.md

@@ -85,6 +85,8 @@ If you are using rails, the right place to do this might be `config/initializers
 - [Payment Verification](documents/paymentVerification.md)
 - [Webhook](documents/webhook.md)
 - [OAuthToken](documents/oauth_token.md)
+- [Dispute](documents/dispute.md)
+- [Document](documents/documents.md)
 
 ## Development
 

data/documents/customer.md

@@ -157,6 +157,248 @@ Razorpay::Customer.fetch(customerId)
 
 -------------------------------------------------------------------------------------------------------
 
+### Add Bank Account of Customer
+
+```rb
+customerId = "cust_N5mywh91sXB69O"
+
+Razorpay::Customer.add_bank_account(customerId,{
+    "ifsc_code": "UTIB0000194",
+    "account_number": "916010082985661",
+    "beneficiary_name": "Pratheek",
+    "beneficiary_address1": "address 1",
+    "beneficiary_address2": "address 2",
+    "beneficiary_address3": "address 3",
+    "beneficiary_address4": "address 4",
+    "beneficiary_email": "random@email.com",
+    "beneficiary_mobile": "8762489310",
+    "beneficiary_city": "Bangalore",
+    "beneficiary_state": "KA",
+    "beneficiary_country": "IN"
+})
+```
+
+**Parameters:**
+
+| Name                 | Type     | Description                                                                |
+|----------------------|----------|----------------------------------------------------------------------------|
+| customerId*          | string   | Unique identifier of the customer.                                         |
+| account_number       | string   | Customer's bank account number. For example, `0002020000304030434`.        |
+| beneficiary_name     | string   | The name of the beneficiary associated with the bank account.              |
+| beneficiary_address1 | string   | The virtual payment address.                                               |
+| beneficiary_email    | string   | Email address of the beneficiary. For example, `gaurav.kumar@example.com`. |
+| beneficiary_mobile   | integer  | Mobile number of the beneficiary.                                          |
+| beneficiary_city     | string   | The name of the city of the beneficiary.                                   |
+| beneficiary_state    | string   | The state of the beneficiary.                                              |
+| beneficiary_country  | string   | The country of the beneficiary.                                            |
+| beneficiary_pin      | interger | The pin code of the beneficiary's address.                                 |
+| ifsc_code            | string   | The IFSC code of the bank branch associated with the account.              |
+
+**Response:**
+```json
+{
+    "id": "ba_LSZht1Cm7xFTwF",
+    "entity": "bank_account",
+    "ifsc": "ICIC0001207",
+    "bank_name": "ICICI Bank",
+    "name": "Gaurav Kumar",
+    "notes": [],
+    "account_number": "XXXXXXXXXXXXXXX0434"
+}
+```
+
+-------------------------------------------------------------------------------------------------------
+
+### Delete Bank Account of Customer
+
+```rb
+customerId = "cust_N5mywh91sXB69O"
+
+bankAccountId = "ba_N6aM8uo64IzxHu"
+
+Razorpay::Customer.delete_bank_account(customerId, bankAccountId)
+```
+
+**Parameters:**
+
+| Name          | Type      | Description                                                       |
+|---------------|-----------|-------------------------------------------------------------------|
+| customerId*   | string    |  Customer id of the customer whose bank account is to be deleted. |
+| bankAccountId | string    | The bank_id that needs to be deleted.                             |
+
+**Response:**
+```json
+{
+    "id": "ba_Evg09Ll05SIPSD",
+    "ifsc": "ICIC0001207",
+    "bank_name": "ICICI Bank",
+    "name": "Test R4zorpay",
+    "account_number": "XXXXXXXXXXXXXXX0434",
+    "status": "deleted"
+}
+```
+
+-------------------------------------------------------------------------------------------------------
+
+### Eligibility Check API
+
+```rb
+Razorpay::Customer.request_eligibility_check({
+    "inquiry": "affordability",
+    "amount": 500,
+    "currency": "INR",
+    "customer": {
+        "id": "elig_xxxxxxxxxxxxx",
+        "contact": "+919999999999",
+        "ip": "105.106.107.108",
+        "referrer": "https://merchansite.com/example/paybill",
+        "user_agent": "Mozilla/5.0"
+    }
+})
+```
+
+**Parameters:**
+
+| Name        | Type    | Description                                                                                                                                                                                                                    |
+|-------------|---------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| inquiry     | string  | List of methods or instruments on which eligibility check is required. Possible value is `affordability`.                                                                                                                      |
+| amount*     | integer | The amount for which the order was created, in currency subunits. For example, for an amount of ₹295, enter `29500`. The user makes a payment for this amount against the order; hence, eligibility is checked for the amount. |
+| currency*   | string  | A three-letter ISO code for the currency in which you want to accept the payment. Possible value is `INR`.                                                                                                                     |
+| customer*   | object  | Customer details. [here](https://razorpay.com/docs/payments/payment-gateway/affordability/eligibility-check/#eligibility-check-api)                                                                                            |
+| instruments | object  | Payment instruments on which an eligibility check is required. [here](https://razorpay.com/docs/payments/payment-gateway/affordability/eligibility-check/#eligibility-check-api)                                               |
+
+
+**Response:**
+```json
+{
+  "amount": "500000",
+  "customer": {
+    "id": "KkBhM9EC1Y0HTm",
+    "contact": "+919999999999"
+  },
+  "instruments": [
+    {
+      "method": "emi",
+      "issuer": "HDFC",
+      "type": "debit",
+      "eligibility_req_id": "elig_xxxxxxxxxxxxx",
+      "eligibility": {
+        "status": "eligible"
+      }
+    },
+    {
+      "method": "paylater",
+      "provider": "getsimpl",
+      "eligibility_req_id": "elig_xxxxxxxxxxxxx",
+      "eligibility": {
+        "status": "eligible"
+      }
+    },
+    {
+      "method": "paylater",
+      "provider": "icic",
+      "eligibility_req_id": "elig_xxxxxxxxxxxxx",
+      "eligibility": {
+        "status": "eligible"
+      }
+    },
+    {
+      "method": "cardless_emi",
+      "provider": "walnut369",
+      "eligibility_req_id": "elig_xxxxxxxxxxxxx",
+      "eligibility": {
+        "status": "ineligible",
+        "error": {
+          "code": "GATEWAY_ERROR",
+          "description": "The customer has not been approved by the partner.",
+          "source": "business",
+          "step": "inquiry",
+          "reason": "user_not_approved"
+        }
+      }
+    },
+    {
+      "method": "cardless_emi",
+      "provider": "zestmoney",
+      "eligibility_req_id": "elig_xxxxxxxxxxxxx",
+      "eligibility": {
+        "status": "ineligible",
+        "error": {
+          "code": "GATEWAY_ERROR",
+          "description": "The customer has exhausted their credit limit.",
+          "source": "business",
+          "step": "inquiry",
+          "reason": "credit_limit_exhausted"
+        }
+      }
+    },
+    {
+      "method": "paylater",
+      "provider": "lazypay",
+      "eligibility_req_id": "elig_xxxxxxxxxxxxx",
+      "eligibility": {
+        "status": "ineligible",
+        "error": {
+          "code": "GATEWAY_ERROR",
+          "description": "The order amount is less than the minimum transaction amount.",
+          "source": "business",
+          "step": "inquiry",
+          "reason": "min_amt_required"
+        }
+      }
+    }
+  ]
+}
+```
+
+-------------------------------------------------------------------------------------------------------
+
+### Fetch Eligibility by id
+
+```rb
+eligibilityId = "elig_F1cxDoHWD4fkQt"
+Razorpay::Customer.fetch_eligibility(eligibilityId)
+```
+
+**Parameters:**
+
+| Name          | Type        | Description                                                        |
+|---------------|-------------|--------------------------------------------------------------------|
+| eligibilityId | string      | The unique identifier of the eligibility request to be retrieved.  |
+
+**Response:**
+```json
+{
+  "instruments": [
+    {
+      "method": "paylater",
+      "provider": "lazypay",
+      "eligibility_req_id": "elig_xxxxxxxxxxxxx",
+      "eligibility": {
+        "status": "eligible"
+      }
+    },
+    {
+      "method": "paylater",
+      "provider": "getsimpl",
+      "eligibility_req_id": "elig_xxxxxxxxxxxxx",
+      "eligibility": {
+        "status": "ineligible",
+        "error": {
+          "code": "GATEWAY_ERROR",
+          "description": "The customer has exhausted their credit limit",
+          "source": "gateway",
+          "step": "inquiry",
+          "reason": "credit_limit_exhausted"
+        }
+      }
+    }
+  ]
+}
+```
+
+-------------------------------------------------------------------------------------------------------
+
 **PN: * indicates mandatory fields**
 <br>
 <br>