spree_vpago 0.1.0.pre.beta

data/lib/vpago/acleda/transaction_status.rb

@@ -0,0 +1,71 @@
+require 'faraday'
+
+module Vpago
+  module Acleda
+    class TransactionStatus < Base
+      attr_accessor :error_message, :result
+
+      def call
+        prepare
+        process
+      end
+
+      def prepare
+        @error_message = nil
+        @result = nil
+      end
+
+      def process
+        @response = check_acleda_payment_status
+
+        if @response.status == 200
+          if (json_response['result']['code']).zero?
+            @result = json_response
+          else
+            fail!(json_response['result']['errorDetails'])
+          end
+        else
+          fail!(@response.body)
+        end
+      end
+
+      def request_payload
+        payment_token_id = @payment.source.transaction_id
+
+        {
+          loginId: login_id,
+          password: password,
+          merchantName: merchant_name,
+          signature: signature,
+          merchantId: merchant_id,
+          paymentTokenid: payment_token_id
+        }
+      end
+
+      def check_acleda_payment_status
+        con = Faraday::Connection.new(url: host)
+
+        con.post(check_status_path) do |request|
+          request.headers['Content-Type'] = 'application/json'
+          request.body = request_payload.to_json
+        end
+      end
+
+      def check_status_path
+        ENV.fetch('ACLEDA_CHECK_STATUS_PATH', nil)
+      end
+
+      def json_response
+        @json_response ||= JSON.parse(@response.body)
+      end
+
+      def fail!(message)
+        @error_message = message
+      end
+
+      def success?
+        @error_message.nil?
+      end
+    end
+  end
+end

data/lib/vpago/acleda_mobile/base.rb

@@ -0,0 +1,28 @@
+module Vpago
+  module AcledaMobile
+    class Base
+      include Vpago::PaymentAmountCalculator
+
+      def initialize(payment, options = {})
+        @options = options
+        @payment = payment
+      end
+
+      def payment_number
+        @payment.number
+      end
+
+      def encryption_key
+        @payment.payment_method.preferences[:data_encryption_key]
+      end
+
+      def return_to_app_url
+        @payment.payment_method.preferences[:app_url]
+      end
+
+      def partner_id
+        @payment.payment_method.preferences[:partner_id]
+      end
+    end
+  end
+end

data/lib/vpago/acleda_mobile/callback_validator.php

@@ -0,0 +1,35 @@
+<?php
+  $data = array(
+    "TransactionId" => "REF0361472663",
+    "PaymentTokenId" => "16de81d4-b5ef-ef59-16de-81d4b5efef59",
+    "TxnAmount" => "30",
+    "SenderName" => "Test User"
+  );
+
+  // will be provided
+  $secret_key = 'VTenhSecret';
+
+  // signed request fields
+  $hash_data = $data['TransactionId'] . ' ' . $data['PaymentTokenId'] . ' ' . $data['TxnAmount'];
+  $binary_output = false;
+
+  // calculate the signed input hash
+  echo "hash data: ${hash_data}";
+  $hash_value = hash_hmac('sha256', $hash_data, $secret_key, $binary_output);
+
+
+  $vtenh_request = $data;
+
+  // request payload with signed for vtenh callback
+  $vtenh_request["SignedHash"] = $hash_value;
+
+  print_r($vtenh_request);
+  // output
+  // Array
+  // (
+  //     [TransactionId] => REF0361472663
+  //     [PaymentTokenId] => 16de81d4-b5ef-ef59-16de-81d4b5efef59
+  //     [TxnAmount] => 30
+  //     [SenderName] => Test User
+  //     [SignedHash] => c5b9be690bde7dc8a0abebb1a45c0850359540a4977aecd4cdf13e15a2edfe79
+  // )

data/lib/vpago/acleda_mobile/callback_validator.rb

@@ -0,0 +1,38 @@
+module Vpago
+  module AcledaMobile
+    class CallbackValidator
+      # {
+      #   "TransactionId": "REF0361472663",
+      #   "PaymentTokenId": "16de81d4-b5ef-ef59-16de-81d4b5efef59",
+      #   "TxnAmount": "30",
+      #   "SenderName": "Test User",
+      #   "SignedHash": "c5b9be690bde7dc8a0abebb1a45c0850359540a4977aecd4cdf13e15a2edfe79",
+      #   }
+      def initialize(options)
+        @options = options
+      end
+
+      def call
+        valid?
+      end
+
+      def secret_key
+        ENV.fetch('ACLEDA_MOBILE_SECRET_HASH_KEY', nil)
+      end
+
+      def valid?
+        return false if secret_key.blank?
+
+        hmac_hash == @options[:SignedHash]
+      end
+
+      def hmac_hash
+        key = secret_key
+
+        message = "#{@options[:TransactionId]} #{@options[:PaymentTokenId]} #{@options[:TxnAmount]}"
+
+        OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), key, message)
+      end
+    end
+  end
+end

data/lib/vpago/acleda_mobile/checkout.rb

@@ -0,0 +1,78 @@
+module Vpago
+  module AcledaMobile
+    class Checkout < Base
+      attr_accessor :error_message, :results
+
+      def call
+        @results = {
+          play_store: acleda_play_store,
+          app_store: acleda_app_store,
+          acleda_ios_deeplink: acleda_ios_deeplink,
+          acleda_android_deeplink: acleda_android_deeplink
+        }
+      end
+
+      def acleda_app_store
+        'https://apps.apple.com/us/app/acleda-unity-toanchet/id1196285236'
+      end
+
+      def acleda_play_store
+        'market://details?id=com.domain.acledabankqr'
+      end
+
+      def acleda_ios_deeplink
+        "ACLEDAmobile://?partner_id=#{partner_id}&payment_data=#{aes_encrypted_payment_data}"
+      end
+
+      def acleda_android_deeplink
+        "market://com.domain.acledabankqr/app?partner_id=#{partner_id}&payment_data=#{aes_encrypted_payment_data}"
+      end
+
+      def hmac_payment_data
+        message = payment_data.to_json
+        key = encryption_key
+
+        hmac_hash(key, message)
+      end
+
+      def hmac_hash(key, message)
+        OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), key, message)
+      end
+
+      def aes_encrypted_payment_data
+        data = "#{payment_data.to_json}~#{hmac_payment_data}"
+        key = encryption_key
+        iv = [key].pack('H*') # #hex2bin
+        cipher = OpenSSL::Cipher.new('AES-256-CBC')
+        cipher.encrypt
+
+        cipher.key = pbkdf2_key
+        cipher.iv = iv
+
+        crypt = cipher.update(data) + cipher.final
+        encrypted_result = Base64.encode64(crypt).delete("\n")
+        encrypted_result.gsub('/', 'acledabankSecurityTC') # #follow acleda encrypting guide
+      end
+
+      def payment_data
+        {
+          app_name: 'VTENH',
+          payment_amount: amount_with_fee,
+          payment_amount_ccy: 'USD',
+          payment_purpose: 'VTENH Transaction',
+          txn_ref: payment_number,
+          app_url: return_to_app_url
+        }
+      end
+
+      def pbkdf2_key
+        pass = encryption_key
+        salt = pass
+        iter = 100
+        key_len = 32
+
+        OpenSSL::KDF.pbkdf2_hmac(pass, salt: salt, iterations: iter, length: key_len, hash: 'sha1')
+      end
+    end
+  end
+end

data/lib/vpago/acleda_mobile/payment_request_updater.rb

@@ -0,0 +1,34 @@
+module Vpago
+  module AcledaMobile
+    class PaymentRequestUpdater < ::Vpago::PaymentRequestUpdater
+      def call
+        checker = payment_status_checker
+
+        if checker.success?
+          @error_message = nil
+          checker_result = {
+            status: true,
+            description: nil,
+            acleda_response: checker.result
+          }
+          marker_options = @options.merge(checker_result)
+
+          marker = ::Vpago::PaymentStatusMarker.new(@payment, marker_options)
+          marker.call
+        elsif !ignore_on_failed?
+          @error_message = checker.error_message
+          marker_options = @options.merge(status: false, description: @error_message)
+
+          marker = ::Vpago::PaymentStatusMarker.new(@payment, marker_options)
+          marker.call
+        end
+      end
+
+      def payment_status_checker
+        trans_status = Vpago::AcledaMobile::TransactionStatus.new(@payment)
+        trans_status.call(@options[:payment_token_id]) # #TO DO: remove payment_token_id when check transaction status api ready
+        trans_status
+      end
+    end
+  end
+end

data/lib/vpago/acleda_mobile/payment_retriever.rb

@@ -0,0 +1,24 @@
+module Vpago
+  module AcledaMobile
+    class PaymentRetriever
+      attr_accessor :payment
+
+      def initialize(options)
+        @options = options
+      end
+
+      def call
+        find_payment if data_valid?
+      end
+
+      def data_valid?
+        service = Vpago::AcledaMobile::CallbackValidator.new(@options)
+        service.valid?
+      end
+
+      def find_payment
+        @payment = Spree::Payment.find_by(number: @options[:PaymentTokenId])
+      end
+    end
+  end
+end

data/lib/vpago/acleda_mobile/transaction_status.rb

@@ -0,0 +1,35 @@
+require 'faraday'
+
+module Vpago
+  module AcledaMobile
+    class TransactionStatus < Base
+      attr_accessor :error_message, :result
+
+      # #TO DO: remove payment_token_id when check transaction status api ready
+      def call(payment_token_id = nil)
+        prepare
+        process(payment_token_id)
+      end
+
+      def prepare
+        @error_message = nil
+        @result = nil
+      end
+
+      def process(payment_token_id)
+        @result = {
+          ErrorCode: '200',
+          ErrorDescription: 'Success',
+          TransactionId: payment_number,
+          PaymentTokenId: payment_token_id,
+          Amount: '',
+          Currency: 'USD'
+        }
+      end
+
+      def success?
+        @error_message.nil?
+      end
+    end
+  end
+end

data/lib/vpago/payment_amount_calculator.rb

@@ -0,0 +1,23 @@
+module Vpago
+  module PaymentAmountCalculator
+    def amount
+      @payment.amount
+    end
+
+    def amount_with_fee
+      format('%.2f', (amount + transaction_fee))
+    end
+
+    def transaction_fee_fix
+      @payment.payment_method.preferences[:transaction_fee_fix].to_f
+    end
+
+    def transaction_fee_percentage
+      @payment.payment_method.preferences[:transaction_fee_percentage].to_f
+    end
+
+    def transaction_fee
+      transaction_fee_fix + ((amount * transaction_fee_percentage) / 100)
+    end
+  end
+end

data/lib/vpago/payment_request_updater.rb

@@ -0,0 +1,19 @@
+module Vpago
+  class PaymentRequestUpdater
+    attr_accessor :payment, :error_message
+
+    def initialize(payment, options = {})
+      @options = options
+      @payment = payment
+      @error_message = nil
+    end
+
+    def ignore_on_failed?
+      @options[:ignore_on_failed] || false
+    end
+
+    def success?
+      @error_message.nil?
+    end
+  end
+end

data/lib/vpago/payment_status_marker.rb

@@ -0,0 +1,109 @@
+module Vpago
+  class PaymentStatusMarker
+    attr_accessor :payment, :error_message
+
+    # :status, :description, :updated_by_user_id, updated_reason
+    def initialize(payment, options = {})
+      @payment = payment
+      @options = options
+      @options[:status] = @options[:status] || false
+    end
+
+    def call
+      ActiveRecord::Base.transaction do
+        update_payment_source
+        update_payment_and_order
+      end
+    end
+
+    private
+
+    def update_payment_source
+      source = @payment.source
+
+      payment_status = @options[:status] ? 'success' : 'failed'
+      source.payment_status = payment_status
+      source.payment_description = @options[:description]
+      ## for acleda, we already update the transaction_id at when checkout
+      source.transaction_id = @options[:transaction_id] if @options[:transaction_id].present?
+      source.preferred_wing_response = @options[:wing_response]
+      source.preferred_acleda_response = @options[:acleda_response]
+      source.preferred_payway_v2_response = @options[:payway_v2_response]
+
+      if @options[:status]
+        source.updated_by_user_id = @options[:updated_by_user_id]
+        source.updated_reason = @options[:updated_reason]
+        source.updated_by_user_at = Time.zone.now
+      end
+
+      return if source.save
+
+      @error_message = source.errors.full_messages.join('\n')
+    end
+
+    def update_payment_and_order
+      if @options[:status]
+        transition_to_paid!
+      else
+        transition_to_failed!
+      end
+
+      order_updater
+    end
+
+    def transition_to_paid!
+      complete_payment!
+      complete_order!
+      confirm_payouts!
+    end
+
+    def transition_to_failed!
+      @payment.failure! unless @payment.failed?
+      @payment.order.update(state: 'payment')
+
+      notify_failed_payment
+    end
+
+    def order_updater
+      @payment.order.update_with_updater!
+    end
+
+    def complete_payment!
+      return if @payment.completed?
+
+      # not follow state machine rule when it manual
+      if @options[:updated_by_user_id].present?
+        ApplicationRecord.transaction do
+          @payment.state_changes.create!(previous_state: @payment.state, next_state: 'completed', name: 'payment')
+          @payment.update(state: 'completed')
+        end
+      else
+        @payment.complete!
+      end
+    end
+
+    def complete_order!
+      return if @payment.order.completed?
+
+      order = @payment.order
+      order.finalize!
+      order.update(state: 'complete', completed_at: Time.zone.now)
+    end
+
+    def payout_confirmed?
+      @options[:payout_total] == @payment.payouts.sum(:amount)
+    end
+
+    def confirm_payouts!
+      return unless payout_confirmed?
+
+      @payment.payouts.find_each do |payout|
+        payout.update!(state: :confirmed)
+      end
+    end
+
+    def notify_failed_payment
+      Rails.logger.info("Gateway error check with: #{@options[:description]} and will be marked as failed")
+    end
+  end
+end

data/lib/vpago/payway/base.rb

@@ -0,0 +1,112 @@
+module Vpago
+  module Payway
+    class Base
+      def initialize(payment, options = {})
+        @options = options
+        @payment = payment
+      end
+
+      def host
+        @payment.payment_method.preferences[:host]
+      end
+
+      def amount
+        format('%.2f', (@payment.amount + transaction_fee))
+      end
+
+      def transaction_fee_fix
+        @payment.payment_method.preferences[:transaction_fee_fix].to_f
+      end
+
+      def transaction_fee_percentage
+        @payment.payment_method.preferences[:transaction_fee_percentage].to_f
+      end
+
+      def transaction_fee
+        transaction_fee_fix + ((@payment.amount * transaction_fee_percentage) / 100)
+      end
+
+      def merchant_id
+        @payment.payment_method.preferences[:merchant_id]
+      end
+
+      def transaction_id
+        @payment.number
+      end
+
+      def email
+        @payment.order.email.presence || ENV.fetch('DEFAULT_EMAIL_FOR_PAYMENT', nil)
+      end
+
+      def first_name
+        @payment.order.billing_address.first_name
+      end
+
+      def last_name
+        @payment.order.billing_address.last_name
+      end
+
+      def return_url
+        preferred_return_url = @payment.payment_method.preferences[:return_url]
+        return nil if preferred_return_url.blank?
+
+        Base64.encode64(preferred_return_url)
+      end
+
+      def app_checkout
+        app_checkout? ? 'yes' : 'no'
+      end
+
+      def app_checkout?
+        return false if @options[:app_checkout].blank?
+
+        @options[:app_checkout]
+      end
+
+      def continue_success_url
+        preferred_continue_url = @payment.payment_method.preferences[:continue_success_url]
+        return nil if preferred_continue_url.blank?
+
+        query_string = "tran_id=#{transaction_id}&app_checkout=#{app_checkout}"
+        preferred_continue_url.index('?').nil? ? "#{preferred_continue_url}?#{query_string}" : "#{preferred_continue_url}&#{query_string}"
+      end
+
+      def payment_option
+        card_option = @payment.payment_method.preferences[:payment_option]
+        Vpago::Payway::CARD_TYPES.index(card_option).nil? ? Vpago::Payway::CARD_TYPE_ABAPAY : card_option
+      end
+
+      def phone_country_code
+        '+855'
+      end
+
+      def phone
+        @payment.order.billing_address.phone
+      end
+
+      def api_key
+        @payment.payment_method.preferences[:api_key]
+      end
+
+      def return_params
+        { tran_id: transaction_id }.to_json
+      end
+
+      def hash_hmac
+        data = "#{merchant_id}#{transaction_id}#{amount}"
+        hash = Base64.encode64(OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha512'), api_key, data))
+
+        # somehow php counter part are not able to decode if the \n present.
+        hash.delete("\n")
+      end
+
+      def endpoint
+        @payment.payment_method.preferences[:endpoint]
+      end
+
+      def action_url
+        "#{host}#{endpoint}"
+      end
+    end
+  end
+end

data/lib/vpago/payway/checkout.rb

@@ -0,0 +1,24 @@
+module Vpago
+  module Payway
+    class Checkout < Base
+      def gateway_params
+        result = {
+          tran_id: transaction_id,
+          amount: amount,
+          hash: hash_hmac,
+          firstname: first_name,
+          lastname: last_name,
+          email: email,
+          payment_option: payment_option,
+          return_url: return_url,
+          continue_success_url: continue_success_url,
+          return_params: return_params
+        }
+
+        result[:phone_country_code] = phone_country_code
+        result[:phone] = phone
+        result
+      end
+    end
+  end
+end

data/lib/vpago/payway/payment_request_updater.rb

@@ -0,0 +1,31 @@
+module Vpago
+  module Payway
+    class PaymentRequestUpdater < ::Vpago::PaymentRequestUpdater
+      def call
+        checker = check_payway_status
+
+        if checker.success?
+          @error_message = nil
+
+          marker_options = @options.merge(status: true, description: nil)
+          marker = ::Vpago::Payway::PaymentStatusMarker.new(@payment, marker_options)
+          marker.call
+        elsif !ignore_on_failed?
+          @error_message = checker.error_message[0...255]
+          marker_options = @options.merge(status: false, description: @error_message)
+
+          marker = ::Vpago::Payway::PaymentStatusMarker.new(@payment, marker_options)
+          marker.call
+        end
+      end
+
+      private
+
+      def check_payway_status
+        trans_status = Vpago::Payway::TransactionStatus.new(@payment)
+        trans_status.call
+        trans_status
+      end
+    end
+  end
+end