spree_paysera 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aea20a955c84c6c406a97ef73af854d2c83b863281eefdbb93fdaa8876da7555
-  data.tar.gz: 3c8beaaf26aad7fb70224e0939de28f88856b87357946845a5fdb5baa46dea3b
+  metadata.gz: 6b8058e1aa115aebb4a98427cf24d9fab00c5793f7fa493de0dcf4b16f6999bd
+  data.tar.gz: '0970e0e384fb48b6680e7a82620d0e484eedd8ce99a37e077c7fba57c32e0896'
 SHA512:
-  metadata.gz: 03a7fd60e100757d94348b9d5c37ad6d0dd6f0da242524cd9eac9f67e57a49bd8a259af1471315bf9d813845468530c87da1f32b00c45b0d7624a31381682b12
-  data.tar.gz: 9d196e4ef74437323d0decfbac7a5e3f3c59c3fc7b133148432f60424ded89b66ddcbe6a38183e67587068cd015a91dc1661ed3b98075fdd5820b5b414b920e0
+  metadata.gz: 9c68ee4cef6066e13912f91911b2489060ace1bb7a8a2c522c5d4f6dd39c7569b4a3f849684bec83fa70088d0064d25b9229035a8bf8b2ac5069f736c61ab021
+  data.tar.gz: 1b4a45afb67ff90092ae844a6db1ac7c11f7589302865f9397ea66d26567280892101ce7a1694d9e670b04c9347332762393259fa392f8e7f94fdfd657d11fe0

data/.gitignore

@@ -0,0 +1,13 @@
+\#*
+*~
+.#*
+.DS_Store
+.bundle
+coverage
+Gemfile.lock
+tmp
+pkg
+spec/dummy
+gemfiles/*.gemfile.lock
+.env
+*.gem

data/.rspec

@@ -0,0 +1 @@
+--require spec_helper

data/.travis.yml

@@ -0,0 +1,43 @@
+dist: trusty
+
+language: ruby
+rvm:
+  - 2.3.8
+  - 2.4.4
+  - 2.5.1
+  - 2.6.3
+
+script:
+  - bundle exec rake test_app
+  - bundle exec rake spec
+
+gemfile:
+  - gemfiles/spree_3_5.gemfile
+  - gemfiles/spree_3_7.gemfile
+  - gemfiles/spree_4_0.gemfile
+  - gemfiles/spree_master.gemfile
+
+matrix:
+  allow_failures:
+        - gemfile: gemfiles/spree_master.gemfile
+  exclude:
+      - rvm: 2.3.8
+        gemfile: gemfiles/spree_4_0.gemfile
+      - rvm: 2.3.8
+        gemfile: gemfiles/spree_master.gemfile
+      - rvm: 2.4.4
+        gemfile: gemfiles/spree_4_0.gemfile
+      - rvm: 2.4.4
+        gemfile: gemfiles/spree_master.gemfile
+      - rvm: 2.5.1
+        gemfile: gemfiles/spree_3_5.gemfile
+      - rvm: 2.6.3
+        gemfile: gemfiles/spree_3_5.gemfile
+
+
+addons:
+  apt:
+    packages:
+    - mysql-server-5.6
+    - mysql-client-core-5.6
+    - mysql-client-5.6

data/Appraisals

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+appraise 'spree-3-5' do
+  gem 'spree', '~> 3.5.0'
+  gem 'spree_auth_devise', '~> 3.3.0'
+end
+
+appraise 'spree-3-7' do
+  gem 'spree', '~> 3.7.1'
+  gem 'spree_auth_devise', '~> 3.5.2'
+end
+
+appraise 'spree-4-0' do
+  gem 'spree', '~> 4.0.0'
+  gem 'spree_auth_devise', '~> 4.0.0'
+end
+
+appraise 'spree-master' do
+  gem 'spree', github: 'spree/spree', branch: 'master'
+  gem 'spree_auth_devise', github: 'spree/spree_auth_devise', branch: 'master'
+  gem 'rails-controller-testing'
+end

data/Gemfile

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+source 'https://rubygems.org'
+
+gem 'spree'
+
+# Provides basic authentication functionality for testing parts of your engine
+gem 'spree_auth_devise'
+
+gem 'rails-controller-testing'
+gem 'rspec-rails'
+gemspec

data/LICENSE.md

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Donatas Jarmalovičius
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,24 @@
+# spree_paysera
+
+[![Build Status](https://travis-ci.org/donny741/spree_paysera.svg?branch=master)](https://travis-ci.org/donny741/spree_paysera)
+
+Paysera payment gateway integration for Spree Ecommerce.
+
+
+## Installation
+
+1. Add this to your gemfile:
+
+        gem 'spree_paysera', :github => 'donny741/spree_paysera'
+
+2. Install the gem using Bundler:
+
+        bundle install
+
+3. Restart your server
+
+## Setup
+
+In Spree admin panel go to "Configuration", "Payment Methods". Create a new payment method. Select provider "Spree::Gateway::Paysera", enter name and description. Click "Create". Enter project id, domain name (example: https://www.example.com) and message text (paytext).
+
+For production untick "Test Mode".

data/Rakefile

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+require 'bundler'
+Bundler::GemHelper.install_tasks
+
+require 'rspec/core/rake_task'
+require 'spree/testing_support/extension_rake'
+
+RSpec::Core::RakeTask.new
+
+task :default do
+  if Dir['spec/dummy'].empty?
+    Rake::Task[:test_app].invoke
+    Dir.chdir('../../')
+  end
+  Rake::Task[:spec].invoke
+end
+
+desc 'Generates a dummy app for testing'
+task :test_app do
+  ENV['LIB_NAME'] = 'spree_paysera'
+  Rake::Task['extension:test_app'].invoke
+end

data/app/controllers/spree/paysera_controller.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+module Spree
+  class PayseraController < StoreController
+    protect_from_forgery only: :index
+
+    include Spree::Paysera::ErrorHandler
+
+    def index
+      form = Spree::Paysera::BuildForm.for(payment_method, current_order)
+      url = Spree::Paysera::BuildUrl.for(payment_method, form.attributes)
+
+      redirect_to url
+    end
+
+    def callback
+      Spree::LogEntry.create(
+        source: payment_method,
+        details: params.to_yaml
+      )
+
+      response = Spree::Paysera::ParseResponse.for(payment_method, params)
+      raise Spree::Paysera::Error, 'wrong project id' if response[:projectid] != payment_method.preferred_project_id.to_s
+
+      order = Spree::Order.find_by!(number: response[:orderid])
+
+      Spree::Paysera::CompleteOrder.for(order, payment_method, response)
+      render plain: 'OK'
+    end
+
+    def confirm
+      response = Spree::Paysera::ParseResponse.for(payment_method, params)
+      order = Spree::Order.find_by(number: response[:orderid])
+
+      if order.paid?
+        flash.notice = Spree.t(:order_processed_successfully)
+      else
+        flash.alert = Spree.t(:payment_processing_failed)
+      end
+    rescue StandardError
+      flash.alert = Spree.t(:payment_processing_failed)
+    ensure
+      redirect_to account_path
+    end
+
+    def cancel
+      flash.notice = Spree.t(:order_canceled)
+      redirect_to products_path
+    end
+
+    private
+
+    def payment_method
+      @payment_method ||= Spree::Gateway::Paysera.find(params[:payment_method_id])
+    end
+  end
+end

data/app/domain/spree/paysera/build_form.rb

@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+class Spree::Paysera::BuildForm
+  include Spree::Core::Engine.routes.url_helpers
+
+  attr_reader :payment_method, :order
+
+  def self.for(payment_method, order)
+    new(payment_method, order).run
+  end
+
+  def initialize(payment_method, order)
+    @payment_method = payment_method
+    @order = order
+  end
+
+  def run
+    @result = {}
+
+    add_gateway_details
+    add_order_details
+
+    form = Spree::PayseraForm.new(@result)
+    raise Spree::Paysera::Error, 'Params are not valid' unless form.valid?
+
+    form
+  end
+
+  private
+
+  def add_gateway_details
+    host = payment_method.preferred_domain_name.chomp('/')
+
+    @result.merge!(
+      version: payment_method.preferred_api_version,
+      projectid: payment_method.preferred_project_id,
+      callbackurl: paysera_callback_url(payment_method.id, host: host),
+      accepturl: paysera_confirm_url(payment_method.id, host: host),
+      cancelurl: paysera_cancel_url(payment_method.id, host: host),
+      paytext: payment_method.preferred_message_text || 'Payment',
+      test: payment_method.preferred_test_mode ? 1 : 0
+    )
+  end
+
+  def add_order_details
+    address = order.bill_address
+    @result.merge!(
+      orderid: order.number,
+      amount: order.total.to_money.cents,
+      currency: order.currency,
+      p_firstname: address.firstname,
+      p_lastname: address.lastname,
+      p_street: address.address1 + ' ' + address.address2,
+      p_city: address.city,
+      p_zip: address.zipcode
+    )
+  end
+end

data/app/domain/spree/paysera/build_url.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+
+require 'cgi'
+require 'digest/md5'
+
+class Spree::Paysera::BuildUrl
+  attr_reader :payment_method, :options
+
+  def self.for(payment_method, options)
+    new(payment_method, options).run
+  end
+
+  def initialize(payment_method, options)
+    @payment_method = payment_method
+    @options = options
+  end
+
+  def run
+    provider_url + make_query(
+      data: assertion,
+      sign: sign_request(assertion, payment_method.preferred_sign_key)
+    )
+  end
+
+  private
+
+  def assertion
+    @assertion ||= encode_string(make_query(options))
+  end
+
+  def make_query(data)
+    data.collect do |key, value|
+      "#{CGI.escape(key.to_s)}=#{CGI.escape(value.to_s)}"
+    end.compact.sort!.join('&')
+  end
+
+  def encode_string(string)
+    Base64.encode64(string).gsub("\n", '').gsub('/', '_').gsub('+', '-')
+  end
+
+  def sign_request(query, password)
+    Digest::MD5.hexdigest(query + password)
+  end
+
+  def provider_url
+    if payment_method.preferred_service_url.nil?
+      return 'https://www.paysera.lt/pay/?'
+    end
+
+    payment_method.preferred_service_url
+  end
+end

data/app/domain/spree/paysera/complete_order.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+class Spree::Paysera::CompleteOrder
+  attr_reader :order, :payment_method, :order_total, :payamount
+
+  def self.for(order, payment_method, params)
+    new(order, payment_method, params).run
+  end
+
+  def initialize(order, payment_method, params)
+    @order = order
+    @payment_method = payment_method
+    @order_total = order.total.to_money
+    @payamount = params[:payamount].to_money / 100
+  end
+
+  def run
+    return if order.paid?
+
+    check_payammount!
+    complete_order
+  end
+
+  private
+
+  def check_payammount!
+    return if payamount >= order_total
+
+    raise Spree::Paysera::Error, 'bad order amount'
+  end
+
+  def complete_order
+    payment = order.payments.create!(
+      source_type: 'Spree::Gateway::Paysera',
+      amount: payamount.to_d,
+      payment_method: payment_method
+    )
+    payment.complete
+    order.next
+  end
+end

data/app/domain/spree/paysera/parse_response.rb

@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+class Spree::Paysera::ParseResponse
+  attr_reader :payment_method, :data, :ss1, :ss2
+
+  PUBLIC_KEY = 'http://www.paysera.com/download/public.key'
+
+  def self.for(payment_method, response)
+    new(payment_method, response).run
+  end
+
+  def initialize(payment_method, response)
+    @payment_method = payment_method
+    @data = unescape_string(response[:data])
+    @ss1 = response[:ss1]
+    @ss2 = decode_string(unescape_string(response[:ss2]))
+  end
+
+  def run
+    validate!
+    result
+  end
+
+  private
+
+  def validate!
+    if payment_method.preferred_sign_key.nil?
+      raise Spree::Paysera::Error, 'sign_password not found'
+    end
+    if payment_method.preferred_project_id.nil?
+      raise Spree::Paysera::Error, 'projectid not found'
+    end
+    raise Spree::Paysera::Error, 'invalid ss1' unless valid_ss1?
+    raise Spree::Paysera::Error, 'invalid ss2' unless valid_ss2?
+  end
+
+  def result
+    convert_to_hash(decode_string(data))
+  end
+
+  def convert_to_hash(query)
+    query = query
+    Hash[query.split('&').collect do |s|
+           a = s.split('=')
+           [a[0].to_sym, a[1]]
+         end]
+  end
+
+  def decode_string(string)
+    Base64.decode64 string.gsub('-', '+').gsub('_', '/').gsub("\n", '')
+  end
+
+  def valid_ss1?
+    sign_password = payment_method.preferred_sign_key
+    Digest::MD5.hexdigest(data + sign_password) == ss1
+  end
+
+  def valid_ss2?
+    public_key.verify(OpenSSL::Digest::SHA1.new, ss2, data)
+  end
+
+  def public_key
+    OpenSSL::X509::Certificate.new(open(PUBLIC_KEY).read).public_key
+  end
+
+  def unescape_string(string)
+    CGI.unescape(string)
+  end
+end

data/app/lib/spree/paysera/error.rb

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+class Spree::Paysera::Error < StandardError
+end

data/app/lib/spree/paysera/error_handler.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+module Spree::Paysera::ErrorHandler
+  extend ActiveSupport::Concern
+
+  included do
+    rescue_from(StandardError, with: ->(e) { handle_error(e) })
+  end
+
+  private
+
+  def handle_error(error)
+    render plain: 'Error: ' + error.message
+  end
+end

data/app/models/spree/gateway/paysera.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+class Spree::Gateway::Paysera < Spree::Gateway
+  preference :project_id, :integer
+  preference :sign_key, :string
+  preference :api_version, :string, default: '1.6'
+  preference :domain_name, :string
+  preference :message_text, :string
+  preference :service_url, :string, default: 'https://www.paysera.lt/pay/?'
+  preference :image_url, :string, default: 'https://bank.paysera.com/assets/image/payment_types/wallet.png'
+
+  def provider_class
+    Paysera
+  end
+
+  def source_required?
+    false
+  end
+
+  def auto_capture?
+    true
+  end
+
+  def method_type
+    'paysera'
+  end
+
+  def purchase(_amount, _transaction_details, _options = {})
+    ActiveMerchant::Billing::Response.new(true, 'Paysera success', {}, {})
+  end
+end

data/app/models/spree/paysera_form.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+
+class Spree::PayseraForm
+  include ActiveModel::Model
+
+  attr_accessor :projectid, :orderid, :accepturl, :cancelurl, :callbackurl,
+                :version, :lang, :amount, :currency, :payment, :country,
+                :paytext, :p_firstname, :p_lastname, :p_email, :p_street,
+                :p_city, :p_state, :p_zip, :p_countrycode, :only_payments,
+                :disalow_payments, :test, :time_limit, :personcode, :developerid
+
+  validates :projectid, presence: true, length: { maximum: 11 },
+                        format: { with: /\A\d+\z/ }
+  validates :version, presence: true, length: { maximum: 9 },
+                      format: { with: /\A\d+\.\d+\z/ }
+  validates :orderid, presence: true, length: { maximum: 40 }
+  validates :accepturl, presence: true, length: { maximum: 255 }
+  validates :cancelurl, presence: true, length: { maximum: 255 }
+  validates :callbackurl, presence: true, length: { maximum: 255 }
+
+  validates :lang, length: { maximum: 3 },
+                   format: { with: /\A[a-z]{3}\z/i, allow_blank: true }
+  validates :amount, length: { maximum: 11 },
+                     numericality: { only_integer: true, allow_blank: true }
+  validates :currency, length: { maximum: 3 },
+                       format: { with: /\A[a-z]{3}\z/i, allow_blank: true }
+  validates :country, length: { maximum: 2 },
+                      format: { with: /\A[a-z]{2}\z/i, allow_blank: true }
+  validates :paytext, length: { maximum: 255 }
+  validates :payment, length: { maximum: 20 }
+
+  validates :p_firstname, length: { maximum: 255 }
+  validates :p_lastname, length: { maximum: 255 }
+  validates :p_email, length: { maximum: 255 }
+  validates :p_street, length: { maximum: 255 }
+  validates :p_city, length: { maximum: 255 }
+  validates :p_state, length: { maximum: 20 }
+  validates :p_zip, length: { maximum: 20 }
+  validates :p_countrycode, length: { maximum: 2 },
+                            format: { with: /\A[a-z]{2}\z/i, allow_blank: true }
+
+  validates :time_limit, length: { maximum: 19 }
+  validates :personcode, length: { maximum: 255 }
+  validates :developerid, length: { maximum: 11 },
+                          format: { with: /\A\d+\z/, allow_blank: true }
+  validates :test, length: { maximum: 1 },
+                   format: { with: /\A[01]\z/, allow_blank: true }
+
+  def attributes
+    instance_values.except('errors', 'validation_context').symbolize_keys
+  end
+end

data/app/views/spree/checkout/payment/_paysera.html.erb

@@ -0,0 +1,40 @@
+<span class="pay-with-text" style="font-size:20pt"><%=Spree.t(:pay_with, scope: 'paysera')%></span> <br /><br />
+  <%= link_to(image_tag(payment_method.preferred_image_url), paysera_proceed_url(:payment_method_id => payment_method.id), :method => :post, :id => "paysera_button") %>
+<br /><br />
+<style>
+  .pay-with-text {
+      padding-bottom: 10px;
+  }
+</style>
+<script>
+  Paysera = {
+      updateSaveAndContinueVisibility: function() {
+        if (this.isButtonHidden()) {
+          $(this).trigger('hideSaveAndContinue')
+        } else {
+          $(this).trigger('showSaveAndContinue')
+        }
+      },
+      isButtonHidden: function () {
+        paymentMethod = this.checkedPaymentMethod();
+        return (!$('#use_existing_card_yes:checked').length && Paysera.paymentMethodID && paymentMethod.val() == Paysera.paymentMethodID);
+      },
+      checkedPaymentMethod: function() {
+        return $('div[data-hook="checkout_payment_step"] input[type="radio"][name="order[payments_attributes][][payment_method_id]"]:checked');
+      },
+      hideSaveAndContinue: function() {
+        $("#checkout_form_payment [data-hook=buttons]").hide();
+      },
+      showSaveAndContinue: function() {
+        $("#checkout_form_payment [data-hook=buttons]").show();
+      }
+    }
+    
+    $(document).ready(function() {
+      Paysera.updateSaveAndContinueVisibility();
+      paymentMethods = $('div[data-hook="checkout_payment_step"] input[type="radio"]').click(function (e) {
+        Paysera.updateSaveAndContinueVisibility();
+      });
+    })
+    Paysera.paymentMethodID = "<%= payment_method.id %>"  
+</script>

data/app/views/spree/paysera/cancel.html.erb

@@ -0,0 +1 @@
+Payment is rejected

data/app/views/spree/paysera/confirm.html.erb

@@ -0,0 +1 @@
+Payment is accepted

data/config/locales/en.yml

@@ -0,0 +1,5 @@
+---
+en:
+  spree:
+    paysera:
+      pay_with: Pay with

data/config/locales/lt.yml

@@ -0,0 +1,5 @@
+---
+lt:
+  spree:
+    paysera:
+      pay_with: Apmokėti su

data/config/locales/ru.yml

@@ -0,0 +1,5 @@
+---
+ru:
+  spree:
+    paysera:
+      pay_with: Оплатить с помощью

data/config/routes.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+Spree::Core::Engine.add_routes do
+  post '/paysera', to: 'paysera#index', as: :paysera_proceed
+  get '/paysera/:payment_method_id/callback', to: 'paysera#callback', as: :paysera_callback
+  get '/paysera/:payment_method_id/confirm', to: 'paysera#confirm', as: :paysera_confirm
+  get '/paysera/:payment_method_id/cancel', to: 'paysera#cancel', as: :paysera_cancel
+end

data/gemfiles/spree_3_5.gemfile

@@ -0,0 +1,10 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "spree", "~> 3.5.0"
+gem "spree_auth_devise", "~> 3.3.0"
+gem "rails-controller-testing"
+gem "rspec-rails"
+
+gemspec path: "../"

data/gemfiles/spree_3_7.gemfile

@@ -0,0 +1,11 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem 'sassc-rails'
+gem "spree", "~> 3.7.1"
+gem "spree_auth_devise", "~> 3.5.2"
+gem "rails-controller-testing"
+gem "rspec-rails"
+
+gemspec path: "../"