razorpay 3.2.2 → 3.2.4

data/documents/transfers.md

@@ -775,6 +775,46 @@ Razorpay::Transfer.fetch(transferId).edit(para_attr)
 
 -------------------------------------------------------------------------------------------------------
 
+### Fetch Reversals for a Transfer
+```rb
+transferId = "trf_JhemwjNekar9Za"
+Razorpay::Transfer.reversals(transferId)
+```
+
+**Parameters:**
+
+| Name          | Type        | Description                                 |
+|---------------|-------------|---------------------------------------------|
+| transferId*   | string      | The id of the transfer to be fetched        |
+
+**Response:**
+```json
+{
+   "entity":"collection",
+   "count":1,
+   "items":[
+      {
+         "id":"rvrsl_Lt09xvyzskI7KZ",
+         "entity":"reversal",
+         "transfer_id":"trf_Lt048W7cgLdo1u",
+         "amount":50000,
+         "fee":0,
+         "tax":0,
+         "currency":"INR",
+         "notes":[
+            
+         ],
+         "initiator_id":"Ghri4beeOuMTAb",
+         "customer_refund_id":null,
+         "utr":null,
+         "created_at":1684822489
+      }
+   ]
+}
+```
+
+-------------------------------------------------------------------------------------------------------
+
 **PN: * indicates mandatory fields**
 <br>
 <br>

data/lib/razorpay/constants.rb

@@ -2,7 +2,7 @@
 module Razorpay
   BASE_URI = 'https://api.razorpay.com'.freeze
   TEST_URL = 'https://api.razorpay.com/'.freeze
-  VERSION  = '3.2.2'.freeze
+  VERSION  = '3.2.4'.freeze
   AUTH_URL = 'https://auth.razorpay.com'.freeze
   API_HOST = 'API'.freeze
   AUTH_HOST    = 'AUTH'.freeze

data/lib/razorpay/customer.rb

@@ -38,5 +38,21 @@ module Razorpay
     def deleteToken(tokenId)
       self.class.request.delete "#{id}/tokens/#{tokenId}" 
     end
+
+    def self.add_bank_account(id, options = {})
+      request.post "#{id}/bank_account", options
+    end
+
+    def self.delete_bank_account(id, bankAccountId)
+      request.delete "#{id}/bank_account/#{bankAccountId}" 
+    end
+
+    def self.request_eligibility_check(options = {})
+       request.post "eligibility", options
+    end
+
+    def self.fetch_eligibility(eligibilityId)
+      request.get "eligibility/#{eligibilityId}" 
+    end
   end
 end

data/lib/razorpay/dispute.rb

@@ -0,0 +1,26 @@
+require 'razorpay/request'
+require 'razorpay/entity'
+
+module Razorpay
+  class Dispute < Entity
+    def self.request
+      Razorpay::Request.new('disputes')
+    end
+
+    def self.fetch(id)
+      request.fetch id
+    end
+
+    def self.all(options = {})
+       request.all options
+    end
+
+    def self.accept(id, options={})
+       request.post "#{id}/accept", options
+    end
+
+    def self.contest(id, options)
+       request.patch "#{id}/contest", options
+    end
+  end
+end

data/lib/razorpay/document.rb

@@ -0,0 +1,19 @@
+require 'razorpay/request'
+require 'razorpay/entity'
+
+module Razorpay
+  # Document API allows you to create and fetch document on Razorpay
+  class Document < Entity
+    def self.request
+      Razorpay::Request.new('documents')
+    end
+
+    def self.create(options)
+      request.create options
+    end
+
+    def self.fetch(id)
+      request.fetch id
+    end
+  end
+end

data/lib/razorpay/order.rb

@@ -35,5 +35,13 @@ module Razorpay
       # Docs: https://razorpay.com/docs/api/payments/route/#fetch-transfer-for-an-order
       request.get "#{id}/?expand[]=transfers&status"
     end
+
+    def self.view_rto(id)
+      request.post "#{id}/rto_review"
+    end
+    
+    def self.edit_fulfillment(id, options = {})
+      request.post "#{id}/fulfillment", options
+    end
   end
 end

data/lib/razorpay/payment.rb

@@ -112,5 +112,9 @@ module Razorpay
     def self.validate_vpa(data={})
       request.post "validate/vpa" , data
     end
+
+    def self.expand_details(id, options={})
+      request.get "#{id}", options
+    end
   end
 end

data/lib/razorpay/transfer.rb

@@ -31,5 +31,9 @@ module Razorpay
     def self.fetch_settlements
       request.get "?expand[]=recipient_settlement"
     end
+
+    def self.reversals(id)
+      request.get "#{id}/reversals"
+    end  
   end
 end

data/lib/razorpay/utility.rb

@@ -59,9 +59,13 @@ module Razorpay
       end
 
       def encrypt(data, secret)
-        iv = secret[0, 12]
         key = secret[0, 16]
 
+        # Generate a fresh random 12-byte nonce per call (fixes AES-GCM nonce reuse).
+        # A static IV derived from the secret allows keystream recovery and tag forgery
+        # (NIST SP 800-38D §8.3 Forbidden Attack) using only two captured ciphertexts.
+        iv = OpenSSL::Random.random_bytes(12)
+
         cipher = OpenSSL::Cipher.new('aes-128-gcm')
         cipher.encrypt
         cipher.key = key
@@ -72,9 +76,10 @@ module Razorpay
         encrypted = cipher.update(data) + cipher.final
 
         tag = cipher.auth_tag
-        combined_encrypted_data = encrypted + tag
 
-        encrypted_data_hex = combined_encrypted_data.unpack1("H*")
+        # Output format: iv (12 bytes) || ciphertext || tag (16 bytes), hex-encoded.
+        # Receiver must read the first 24 hex chars as the IV before decrypting.
+        (iv + encrypted + tag).unpack1("H*")
       end
     end
   end

data/lib/razorpay.rb

@@ -26,6 +26,8 @@ require 'razorpay/token'
 require 'razorpay/product'
 require 'razorpay/stakeholder'
 require 'razorpay/account'
+require 'razorpay/document'
+require 'razorpay/dispute'
 require 'razorpay/oauth_token'
 
 # Base Razorpay module

data/test/fixtures/dispute_collection.json

@@ -0,0 +1,67 @@
+{
+    "entity": "collection",
+    "count": 2,
+    "items": [
+      {
+        "id": "disp_Esz7KAitoYM7PJ",
+        "entity": "dispute",
+        "payment_id": "pay_EsyWjHrfzb59eR",
+        "amount": 10000,
+        "currency": "INR",
+        "amount_deducted": 0,
+        "reason_code": "pre_arbitration",
+        "respond_by": 1590604200,
+        "status": "open",
+        "phase": "pre_arbitration",
+        "created_at": 1590059211,
+        "evidence": {
+          "amount": 10000,
+          "summary": null,
+          "shipping_proof": null,
+          "billing_proof": null,
+          "cancellation_proof": null,
+          "customer_communication": null,
+          "proof_of_service": null,
+          "explanation_letter": null,
+          "refund_confirmation": null,
+          "access_activity_log": null,
+          "refund_cancellation_policy": null,
+          "term_and_conditions": null,
+          "others": null,
+          "submitted_at": null
+        }
+      },
+      {
+        "id": "disp_Esyvk3kZj0isXk",
+        "entity": "dispute",
+        "payment_id": "pay_EsyWjHrfzb59eR",
+        "amount": 5000,
+        "currency": "INR",
+        "amount_deducted": 0,
+        "reason_code": "warning_bulletin_or_exception_file",
+        "respond_by": 1590604200,
+        "status": "won",
+        "phase": "chargeback",
+        "created_at": 1590058554,
+        "evidence": {
+          "amount": 5000,
+          "summary": null,
+          "shipping_proof": [
+            "doc_EFtmUsbwpXwBH9",
+            "doc_EFtmUsbwpXwBH8"
+          ],
+          "billing_proof": null,
+          "cancellation_proof": null,
+          "customer_communication": null,
+          "proof_of_service": null,
+          "explanation_letter": null,
+          "refund_confirmation": null,
+          "access_activity_log": null,
+          "refund_cancellation_policy": null,
+          "term_and_conditions": null,
+          "others": null,
+          "submitted_at": 1590604100
+        }
+      }
+    ]
+  }

data/test/fixtures/dispute_error.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The id provided does not exist",
+        "source": "business",
+        "step": "payment_initiation",
+        "reason": "input_validation_failed",
+        "metadata": {}
+    }
+}

data/test/fixtures/document_error.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "Invalid file id provided or merchant is unauthorized to access the fileId(s) provided",
+        "source": "NA",
+        "step": "NA",
+        "reason": "NA",
+        "metadata": {}
+    }
+}

data/test/fixtures/error_customer.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The id provided does not exist",
+        "source": "business",
+        "step": "payment_initiation",
+        "reason": "input_validation_failed",
+        "metadata": {}
+    }
+}

data/test/fixtures/error_eligibility.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The eligibility  id does not exist.",
+        "source": "NA",
+        "step": "NA",
+        "reason": "NA",
+        "metadata": {}
+    }
+}

data/test/fixtures/error_eligibility_check.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "Amount is required.",
+        "source": "NA",
+        "step": "NA",
+        "reason": "NA",
+        "metadata": {}
+    }
+}

data/test/fixtures/fake_bank_account.json

@@ -0,0 +1,9 @@
+{
+    "id": "ba_LSZht1Cm7xFTwF",
+    "entity": "bank_account",
+    "ifsc": "ICIC0001207",
+    "bank_name": "ICICI Bank",
+    "name": "Gaurav Kumar",
+    "notes": [],
+    "account_number": "XXXXXXXXXXXXXXX0434"
+}

data/test/fixtures/fake_dispute.json

@@ -0,0 +1,29 @@
+{
+    "id": "disp_XXXXXXXXXXXXX",
+    "entity": "dispute",
+    "payment_id": "pay_EsyWjHrfzb59eR",
+    "amount": 10000,
+    "currency": "INR",
+    "amount_deducted": 0,
+    "reason_code": "pre_arbitration",
+    "respond_by": 1590604200,
+    "status": "open",
+    "phase": "pre_arbitration",
+    "created_at": 1590059211,
+    "evidence": {
+      "amount": 10000,
+      "summary": "goods delivered",
+      "shipping_proof": null,
+      "billing_proof": null,
+      "cancellation_proof": null,
+      "customer_communication": null,
+      "proof_of_service": null,
+      "explanation_letter": null,
+      "refund_confirmation": null,
+      "access_activity_log": null,
+      "refund_cancellation_policy": null,
+      "term_and_conditions": null,
+      "others": null,
+      "submitted_at": null
+    }
+  }

data/test/fixtures/fake_document.json

@@ -0,0 +1,9 @@
+{
+    "entity": "document",
+    "id": "doc_O4KANwWi2kHGiV",
+    "purpose": "dispute_evidence",
+    "created_at": 1714368859,
+    "mime_type": "image/jpeg",
+    "display_name": "Screenshot 2022-09-12 at 5.48.23 PM",
+    "size": 334201
+}

data/test/fixtures/fake_eligiblity.json

@@ -0,0 +1,79 @@
+{
+  "amount": "500000",
+  "customer": {
+    "id": "KkBhM9EC1Y0HTm",
+    "contact": "+918220722114"
+  },
+  "instruments": [
+    {
+      "method": "emi",
+      "issuer": "HDFC",
+      "type": "debit",
+      "eligibility_req_id": "elig_KkCNLzlNeMYQyZ",
+      "eligibility": {
+        "status": "eligible"
+      }
+    },
+    {
+      "method": "paylater",
+      "provider": "getsimpl",
+      "eligibility_req_id": "elig_KkCNLzlNeMYQyZ",
+      "eligibility": {
+        "status": "eligible"
+      }
+    },
+    {
+      "method": "paylater",
+      "provider": "icic",
+      "eligibility_req_id": "elig_KkCNLzlNeMYQyZ",
+      "eligibility": {
+        "status": "eligible"
+      }
+    },
+    {
+      "method": "cardless_emi",
+      "provider": "walnut369",
+      "eligibility_req_id": "elig_KkCNLzlNeMYQyZ",
+      "eligibility": {
+        "status": "ineligible",
+        "error": {
+          "code": "GATEWAY_ERROR",
+          "description": "The customer has not been approved by the partner.",
+          "source": "business",
+          "step": "inquiry",
+          "reason": "user_not_approved"
+        }
+      }
+    },
+    {
+      "method": "cardless_emi",
+      "provider": "zestmoney",
+      "eligibility_req_id": "elig_KkCNLzlNeMYQyZ",
+      "eligibility": {
+        "status": "ineligible",
+        "error": {
+          "code": "GATEWAY_ERROR",
+          "description": "The customer has exhausted their credit limit.",
+          "source": "business",
+          "step": "inquiry",
+          "reason": "credit_limit_exhausted"
+        }
+      }
+    },
+    {
+      "method": "paylater",
+      "provider": "lazypay",
+      "eligibility_req_id": "elig_KkCNLzlNeMYQyZ",
+      "eligibility": {
+        "status": "ineligible",
+        "error": {
+          "code": "GATEWAY_ERROR",
+          "description": "The order amount is less than the minimum transaction amount.",
+          "source": "business",
+          "step": "inquiry",
+          "reason": "min_amt_required"
+        }
+      }
+    }
+  ]
+}

data/test/fixtures/fake_fulfillment.json

@@ -0,0 +1,10 @@
+{
+   "entity": "order.fulfillment",
+   "order_id": "EKwxwAgItXXXX",
+   "payment_method": "upi",
+   "shipping": {
+     "waybill": "123456789",
+     "status": "rto",
+     "provider": "Bluedart"
+   }
+}

data/test/fixtures/fake_payment_expanded_details.json

@@ -0,0 +1,38 @@
+{
+    "id": "fake_payment_id",
+    "entity": "payment",
+    "amount": 200000,
+    "currency": "INR",
+    "status": "authorized",
+    "order_id": null,
+    "invoice_id": null,
+    "international": false,
+    "method": "emi",
+    "amount_refunded": 0,
+    "refund_status": null,
+    "captured": false,
+    "description": null,
+    "card_id": "card_DG4ZdUO3xABb20",
+    "bank": "ICIC",
+    "wallet": null,
+    "vpa": null,
+    "email": "gaurav@example.com",
+    "contact": "+919972000005",
+    "notes": [],
+    "fee": null,
+    "tax": null,
+    "error_code": null,
+    "error_description": null,
+    "error_source": null,
+    "error_step": null,
+    "error_reason": null,
+    "emi": {
+      "issuer": "ICIC",
+      "rate": 1300,
+      "duration": 6
+    },
+    "acquirer_data": {
+      "auth_code": "828553"
+    },
+    "created_at": 1568026077
+  }

data/test/fixtures/fake_payment_expanded_details_card.json

@@ -0,0 +1,50 @@
+{
+    "id": "fake_payment_id",
+    "entity": "payment",
+    "amount": 100,
+    "currency": "INR",
+    "status": "failed",
+    "order_id": "order_H9o58N6qmLYQKC",
+    "invoice_id": null,
+    "terminal_id": "term_G5kJnYM9GhhLYT",
+    "international": false,
+    "method": "card",
+    "amount_refunded": 0,
+    "refund_status": null,
+    "captured": false,
+    "description": null,
+    "card_id": "card_H9oR0ocen1cmZq",
+    "card": {
+      "id": "card_H9oR0ocen1cmZq",
+      "entity": "card",
+      "name": "Gaurav",
+      "last4": "1213",
+      "network": "RuPay",
+      "type": "credit",
+      "issuer": "UTIB",
+      "international": false,
+      "emi": false,
+      "sub_type": "business"
+    },
+    "bank": null,
+    "wallet": null,
+    "vpa": null,
+    "email": "gaurav.kumar@example.com",
+    "contact": "+919000090000",
+    "notes": {
+      "email": "gaurav.kumar@example.com",
+      "phone": "09000090000"
+    },
+    "fee": null,
+    "tax": null,
+    "error_code": "BAD_REQUEST_ERROR",
+    "error_description": "Card issuer is invalid",
+    "error_source": "customer",
+    "error_step": "payment_authentication",
+    "error_reason": "incorrect_card_details",
+    "acquirer_data": {
+      "auth_code": null,
+      "authentication_reference_number": "100222021120200000000742753928"
+    },
+    "created_at": 1620807547
+  }

data/test/fixtures/fake_rto.json

@@ -0,0 +1,15 @@
+{
+    "risk_tier": "high",
+    "rto_reasons": [
+      {
+        "reason": "short_shipping_address",
+        "description": "Short shipping address",
+        "bucket": "address"
+      },
+      {
+        "reason": "address_pincode_state_mismatch",
+        "description": "Incorrect pincode state entered",
+        "bucket": "address"
+      }
+    ]
+  }

data/test/fixtures/order_error.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The id provided does not exist",
+        "source": "business",
+        "step": "payment_initiation",
+        "reason": "input_validation_failed",
+        "metadata": {}
+    }
+}

data/test/fixtures/payment_error.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The id provided does not exist",
+        "source": "business",
+        "step": "payment_initiation",
+        "reason": "input_validation_failed",
+        "metadata": {}
+    }
+}

data/test/fixtures/reversals_collection.json

@@ -0,0 +1,22 @@
+{
+    "entity":"collection",
+    "count":1,
+    "items":[
+       {
+          "id":"rvrsl_Lt09xvyzskI7KZ",
+          "entity":"reversal",
+          "transfer_id":"trf_Lt048W7cgLdo1u",
+          "amount":50000,
+          "fee":0,
+          "tax":0,
+          "currency":"INR",
+          "notes":[
+             
+          ],
+          "initiator_id":"Ghri4beeOuMTAb",
+          "customer_refund_id":null,
+          "utr":null,
+          "created_at":1684822489
+       }
+    ]
+ }

data/test/fixtures/transfer_error.json

@@ -0,0 +1,10 @@
+{
+    "error": {
+        "code": "BAD_REQUEST_ERROR",
+        "description": "The id provided does not exist",
+        "source": "business",
+        "step": "payment_initiation",
+        "reason": "input_validation_failed",
+        "metadata": {}
+    }
+}