sepay_pg_ruby 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 980e4390afecf243f51eb965074c00e391d868dbdd349fec1c046beef294e5e6
+  data.tar.gz: e4599d686032db231c65e6b693dca349df62097555f702c8601bb4281a56e0a2
+SHA512:
+  metadata.gz: 3c70415760129e44bc87be0dfdfd2cebc0b7ac4435d57715e095c4b6c7f977c187c18109c2a4947f3e76a711b47cf3279ebde3177c94eced357874415e14e4d0
+  data.tar.gz: 5313fd157ac12fb915009e47089a2af820cb5cf6b5ac1ab9a92574583e36ef197b01539803299a9c69a640bc92f50ca71bff0c10027f820f543dd0c3b9fe9be1

data/README.md

@@ -0,0 +1,66 @@
+# sepay_pg_ruby
+
+Ruby SDK cho SePay Payment Gateway, dùng cho Rails project.
+
+## Cài đặt trong Rails
+
+Trong `Gemfile`:
+
+```ruby
+gem 'sepay_pg_ruby', path: 'gem/sepay_pg_ruby'
+```
+
+Sau đó chạy:
+
+```bash
+bundle install
+```
+
+## Khởi tạo client
+
+```ruby
+client = SepayPgRuby::Client.new(
+  env: Rails.env.production? ? 'production' : 'sandbox',
+  merchant_id: ENV.fetch('SEPAY_MERCHANT_ID'),
+  secret_key: ENV.fetch('SEPAY_SECRET_KEY')
+)
+```
+
+## Orders API
+
+```ruby
+# Danh sách orders
+client.order.all(per_page: 20, q: 'ORDER-001')
+
+# Chi tiết order
+client.order.retrieve('ORDER-001')
+
+# Void transaction
+client.order.void_transaction('ORDER-001')
+
+# Cancel order
+client.order.cancel('ORDER-001')
+```
+
+## Checkout API
+
+```ruby
+checkout_url = client.checkout.init_checkout_url
+
+fields = client.checkout.init_one_time_payment_fields(
+  order_invoice_number: 'ORDER-001',
+  order_amount: 100_000,
+  currency: 'VND',
+  order_description: 'Thanh toan don hang ORDER-001',
+  payment_method: 'BANK_TRANSFER',
+  success_url: 'https://your-app.com/payment/success',
+  error_url: 'https://your-app.com/payment/error',
+  cancel_url: 'https://your-app.com/payment/cancel'
+)
+```
+
+## Verify IPN signature
+
+```ruby
+is_valid = SepayPgRuby::IPN.verify_signature(params.to_unsafe_h, ENV['SEPAY_SECRET_KEY'])
+```

data/lib/sepay_pg_ruby/checkout.rb

@@ -0,0 +1,59 @@
+require 'openssl'
+require 'base64'
+
+module SepayPgRuby
+  class Checkout
+    SIGNABLE_FIELDS = [
+      'merchant',
+      'operation',
+      'payment_method',
+      'order_amount',
+      'currency',
+      'order_invoice_number',
+      'order_description',
+      'customer_id',
+      'success_url',
+      'error_url',
+      'cancel_url',
+      'order_id',
+      'agreement_id',
+      'agreement_name',
+      'agreement_type',
+      'agreement_payment_frequency',
+      'agreement_amount_per_payment'
+    ].freeze
+
+    def initialize(client)
+      @client = client
+    end
+
+    def init_checkout_url
+      "#{@client.base_checkout_url}/init"
+    end
+
+    def init_one_time_payment_fields(fields)
+      payload = fields.transform_keys(&:to_s).dup
+      payload['merchant'] = @client.merchant_id
+      payload['operation'] ||= 'PURCHASE'
+      payload['signature'] = sign_fields(payload)
+      payload
+    end
+
+    def sign_fields(fields)
+      normalized = fields.transform_keys(&:to_s)
+      signed = []
+
+      # We must iterate over the keys in the order they were added to the hash
+      # to match the insertion-order behavior of the Node.js SDK
+      normalized.keys.each do |field|
+        next unless SIGNABLE_FIELDS.include?(field)
+        next if normalized[field].nil?
+
+        signed << "#{field}=#{normalized[field]}"
+      end
+
+      digest = OpenSSL::HMAC.digest('sha256', @client.secret_key, signed.join(','))
+      Base64.strict_encode64(digest)
+    end
+  end
+end

data/lib/sepay_pg_ruby/client.rb

@@ -0,0 +1,98 @@
+require 'base64'
+require 'json'
+require 'net/http'
+require 'uri'
+require_relative 'errors'
+
+module SepayPgRuby
+  class Client
+    attr_reader :env, :merchant_id, :secret_key, :api_version, :checkout_version, :order, :checkout
+
+    def initialize(env:, merchant_id:, secret_key:, api_version: 'v1', checkout_version: 'v1')
+      @env = env
+      @merchant_id = merchant_id
+      @secret_key = secret_key
+      @api_version = api_version
+      @checkout_version = checkout_version
+
+      validate_config!
+
+      @order = Order.new(self)
+      @checkout = Checkout.new(self)
+    end
+
+    def base_api_url
+      if env == 'sandbox'
+        "https://pgapi-sandbox.sepay.vn/#{api_version}"
+      else
+        "https://pgapi.sepay.vn/#{api_version}"
+      end
+    end
+
+    def base_checkout_url
+      if env == 'sandbox'
+        "https://pay-sandbox.sepay.vn/#{checkout_version}/checkout"
+      else
+        "https://pay.sepay.vn/#{checkout_version}/checkout"
+      end
+    end
+
+    def request(method:, endpoint:, params: nil, body: nil)
+      uri = URI.parse("#{base_api_url}/#{endpoint}")
+      uri.query = URI.encode_www_form(params) if params.present?
+
+      http = Net::HTTP.new(uri.host, uri.port)
+      http.use_ssl = true
+
+      req = build_request(method, uri)
+      req['Content-Type'] = 'application/json'
+      req['Authorization'] = "Basic #{Base64.strict_encode64("#{merchant_id}:#{secret_key}")}"
+      req.body = JSON.generate(body) if body
+
+      res = http.request(req)
+      parsed = parse_response_body(res.body)
+
+      raise RequestError, "SePay request failed (#{res.code}): #{parsed.inspect}" if res.code.to_i >= 400
+
+      { status: res.code.to_i, headers: res.to_hash, body: parsed }
+    end
+
+    private
+
+    def build_request(method, uri)
+      case method.to_s.upcase
+      when 'GET'
+        Net::HTTP::Get.new(uri)
+      when 'POST'
+        Net::HTTP::Post.new(uri)
+      when 'PUT'
+        Net::HTTP::Put.new(uri)
+      when 'DELETE'
+        Net::HTTP::Delete.new(uri)
+      else
+        raise ArgumentError, "Unsupported HTTP method: #{method}"
+      end
+    end
+
+    def parse_response_body(body)
+      return nil if body.nil? || body.strip.empty?
+
+      JSON.parse(body)
+    rescue JSON::ParserError
+      body
+    end
+
+    def validate_config!
+      unless ['sandbox', 'production'].include?(env)
+        raise ConfigurationError, "Invalid env '#{env}'. Use 'sandbox' or 'production'."
+      end
+
+      if merchant_id.to_s.strip.empty? || secret_key.to_s.strip.empty?
+        raise ConfigurationError, 'merchant_id and secret_key are required'
+      end
+
+      raise ConfigurationError, 'Only v1 is supported for api_version' unless api_version == 'v1'
+      raise ConfigurationError, 'Only v1 is supported for checkout_version' unless checkout_version == 'v1'
+    end
+  end
+end

data/lib/sepay_pg_ruby/errors.rb

@@ -0,0 +1,5 @@
+module SepayPgRuby
+  class Error < StandardError; end
+  class ConfigurationError < Error; end
+  class RequestError < Error; end
+end

data/lib/sepay_pg_ruby/ipn.rb

@@ -0,0 +1,31 @@
+require 'openssl'
+
+module SepayPgRuby
+  module IPN
+    module_function
+
+    def verify_signature(payload, secret_key)
+      payload_hash = payload.transform_keys(&:to_s)
+      received_signature = payload_hash['signature']
+      return false if received_signature.nil? || received_signature.empty?
+
+      data_to_verify = payload_hash.reject { |k, _| k == 'signature' }
+      sorted_keys = data_to_verify.keys.select { |k| !data_to_verify[k].nil? }.sort
+      query_string = sorted_keys.map { |key| "#{key}=#{data_to_verify[key]}" }.join('&')
+
+      calculated = OpenSSL::HMAC.hexdigest('sha256', secret_key.to_s, query_string)
+      secure_compare(received_signature, calculated)
+    rescue StandardError
+      false
+    end
+
+    def secure_compare(a, b)
+      return false unless a.is_a?(String) && b.is_a?(String)
+      return false unless a.bytesize == b.bytesize
+
+      result = 0
+      a.bytes.zip(b.bytes) { |x, y| result |= x ^ y }
+      result.zero?
+    end
+  end
+end

data/lib/sepay_pg_ruby/order.rb

@@ -0,0 +1,31 @@
+module SepayPgRuby
+  class Order
+    def initialize(client)
+      @client = client
+    end
+
+    def all(query_params = {})
+      @client.request(method: 'GET', endpoint: 'order', params: query_params)
+    end
+
+    def retrieve(order_invoice_number)
+      @client.request(method: 'GET', endpoint: "order/detail/#{order_invoice_number}")
+    end
+
+    def void_transaction(order_invoice_number)
+      @client.request(
+        method: 'POST',
+        endpoint: 'order/voidTransaction',
+        body: { order_invoice_number: order_invoice_number }
+      )
+    end
+
+    def cancel(order_invoice_number)
+      @client.request(
+        method: 'POST',
+        endpoint: 'order/cancel',
+        body: { order_invoice_number: order_invoice_number }
+      )
+    end
+  end
+end

data/lib/sepay_pg_ruby/version.rb

@@ -0,0 +1,3 @@
+module SepayPgRuby
+  VERSION = '0.0.1'.freeze
+end

data/lib/sepay_pg_ruby.rb

@@ -0,0 +1,9 @@
+require_relative 'sepay_pg_ruby/version'
+require_relative 'sepay_pg_ruby/errors'
+require_relative 'sepay_pg_ruby/client'
+require_relative 'sepay_pg_ruby/order'
+require_relative 'sepay_pg_ruby/checkout'
+require_relative 'sepay_pg_ruby/ipn'
+
+module SepayPgRuby
+end

data/sepay_pg_ruby.gemspec

@@ -0,0 +1,21 @@
+require_relative 'lib/sepay_pg_ruby/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'sepay_pg_ruby'
+  spec.version       = SepayPgRuby::VERSION
+  spec.authors       = ['Hiun']
+  spec.email         = ['hieufix1710@gmail.com']
+
+  spec.summary       = 'Ruby SDK for SePay Payment Gateway'
+  spec.description   = 'Ruby SDK for SePay payment gateway with order and checkout support.'
+  spec.homepage      = 'https://sepay.vn'
+  spec.license       = 'MIT'
+  spec.required_ruby_version = '>= 3.0.0'
+
+  spec.files = Dir.chdir(__dir__) do
+    Dir['lib/**/*.rb'] + ['README.md', 'sepay_pg_ruby.gemspec']
+  end
+
+  spec.require_paths = ['lib']
+  spec.metadata['rubygems_mfa_required'] = 'true'
+end

metadata

@@ -0,0 +1,53 @@
+--- !ruby/object:Gem::Specification
+name: sepay_pg_ruby
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Hiun
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2026-07-28 00:00:00.000000000 Z
+dependencies: []
+description: Ruby SDK for SePay payment gateway with order and checkout support.
+email:
+- hieufix1710@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- lib/sepay_pg_ruby.rb
+- lib/sepay_pg_ruby/checkout.rb
+- lib/sepay_pg_ruby/client.rb
+- lib/sepay_pg_ruby/errors.rb
+- lib/sepay_pg_ruby/ipn.rb
+- lib/sepay_pg_ruby/order.rb
+- lib/sepay_pg_ruby/version.rb
+- sepay_pg_ruby.gemspec
+homepage: https://sepay.vn
+licenses:
+- MIT
+metadata:
+  rubygems_mfa_required: 'true'
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.0.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.4.10
+signing_key:
+specification_version: 4
+summary: Ruby SDK for SePay Payment Gateway
+test_files: []