spree_vpago 2.3.8 → 2.4.0.pre.pre1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: feafa3aabbe7fd192e7d70028c28467cb990edda91c4e2180bcc127d445cdc9d
-  data.tar.gz: 0cfc058b9ff6f04a07cbde6c8ca29d3b46a00582c143e5cad6b3b672f635caf2
+  metadata.gz: 2b281c3ae420620dbd3d1da80ed2bc713c9283292484c1812cd1e9c979e6bf52
+  data.tar.gz: 70b7603d37c2c5e8f434e1ab333e622619296fd1ced75642ea9c0512a7591eb1
 SHA512:
-  metadata.gz: 49d235f5604b356f4ba1b555be0ce04e4946901319790d7d97a3ca3262e3445415d5a6980780d8ee27712da8b565ee5af3689726c9acb7bf1d20913c8a5c66df
-  data.tar.gz: b7e51eb7d0d57abb587036189d1d374bd43aee8586c55fc569b19692ff38e8cc9f9bcaa404b92b1e75fe30c87d63e0af77cbafea69ed82a921eeffc1c0b5b327
+  metadata.gz: 718d7eb47ff0a91b7cbcd43d13bd28f4808e008bed9ebee489c913af2d18d5069b5bdc4f06cca8e57693559e96da51a7af8c6e8843e5e01952898c7853c919e1
+  data.tar.gz: dd5f68ec20858da961d36f88a488bd3906d0623baa9f88a3811bbe10957ebd93bf891d047df9b2b8123a549d6881ef8ef32e1c7674144e6dd7901c779e79ae8b

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    spree_vpago (2.3.8)
+    spree_vpago (2.4.0.pre.pre1)
       faraday
       google-cloud-firestore
       spree_api (>= 4.5)

data/app/assets/javascripts/vpago/vpago_payments/user_informers/firebase.js

@@ -13693,10 +13693,10 @@ This typically indicates that your device does not have a healthy Internet conne
     firebaseConfigs,
     documentReferencePath,
     onPaymentIsProcessing,
+    onPaymentIsRetrying,
     onOrderIsProcessing,
     onOrderIsCompleted,
     onOrderProcessFailed,
-    onPaymentIsRefunded,
     onPaymentProcessFailed,
     onCompleted
   }) {
@@ -13713,6 +13713,9 @@ This typically indicates that your device does not have a healthy Internet conne
       let processing = documentData["processing"] === true;
       let reasonCode = documentData["reason_code"];
       let reasonMessage = documentData["reason_message"];
+      if (window.parent !== window) {
+        window.parent.postMessage(messageCode, "*");
+      }
       let orderCompleted = orderState === "complete";
       if (orderCompleted) {
         queueProcessor.queueStateChange({
@@ -13743,11 +13746,11 @@ This typically indicates that your device does not have a healthy Internet conne
             }
           });
           break;
-        case "order_is_processing":
+        case "payment_is_retrying":
           queueProcessor.queueStateChange({
             minDelayInMs: 1500,
             callback: async () => {
-              await onOrderIsProcessing(
+              await onPaymentIsRetrying(
                 orderState,
                 paymentState,
                 processing,
@@ -13757,11 +13760,11 @@ This typically indicates that your device does not have a healthy Internet conne
             }
           });
           break;
-        case "order_is_completed":
+        case "order_is_processing":
           queueProcessor.queueStateChange({
             minDelayInMs: 1500,
             callback: async () => {
-              await onOrderIsCompleted(
+              await onOrderIsProcessing(
                 orderState,
                 paymentState,
                 processing,
@@ -13771,11 +13774,11 @@ This typically indicates that your device does not have a healthy Internet conne
             }
           });
           break;
-        case "order_process_failed":
+        case "order_is_completed":
           queueProcessor.queueStateChange({
             minDelayInMs: 1500,
             callback: async () => {
-              await onOrderProcessFailed(
+              await onOrderIsCompleted(
                 orderState,
                 paymentState,
                 processing,
@@ -13785,11 +13788,11 @@ This typically indicates that your device does not have a healthy Internet conne
             }
           });
           break;
-        case "payment_is_refunded":
+        case "order_process_failed":
           queueProcessor.queueStateChange({
             minDelayInMs: 1500,
             callback: async () => {
-              await onPaymentIsRefunded(
+              await onOrderProcessFailed(
                 orderState,
                 paymentState,
                 processing,

data/app/controllers/spree/miniapp/acledas_controller.rb

@@ -0,0 +1,29 @@
+module Spree
+  module Miniapp
+    # Partner Session Initialization API (ACLEDA Mini App Integration Spec, Step 01).
+    # ACLEDA (server-to-server) POSTs { phone, first_name, last_name }; we return a
+    # session-based miniAppUrl for ACLEDA to open in the WebView.
+    class AcledasController < Spree::Api::V2::BaseController
+      # POST /miniapp/acleda
+      def create
+        result = ::Vpago::AcledaMiniApp::Session::Create.call(
+          phone: session_params[:phone],
+          first_name: session_params[:first_name],
+          last_name: session_params[:last_name]
+        )
+
+        if result.success?
+          render json: { message: 'SUCCESS', miniAppUrl: result.value[:mini_app_url] }
+        else
+          render json: { message: 'FAILED', error: result.error.to_s }, status: :unprocessable_entity
+        end
+      end
+
+      private
+
+      def session_params
+        params.permit(:phone, :first_name, :last_name)
+      end
+    end
+  end
+end

data/app/controllers/spree/vpago_payments_controller.rb

@@ -8,11 +8,11 @@ module Spree
     rescue_from ActiveRecord::RecordNotFound, with: :render_not_found
     rescue_from CanCan::AccessDenied, with: :access_denied
 
+    before_action :find_payment, only: %i[checkout processing success]
+    after_action :allow_iframe_embedding, only: %i[checkout processing success]
+
     # GET
     def checkout
-      @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
-      raise ActiveRecord::RecordNotFound unless @payment.present?
-
       return redirect_to @payment.processing_url, allow_other_host: true unless @payment.checkout?
 
       @order = @payment.order
@@ -22,9 +22,6 @@ module Spree
 
     # GET
     def processing
-      @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
-      raise ActiveRecord::RecordNotFound unless @payment.present?
-
       @order = @payment.order
 
       VpagoLogger.log(label: 'Spree::VpagoPaymentsController#processing', data: vpago_log_context)
@@ -32,9 +29,6 @@ module Spree
 
     # GET
     def success
-      @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
-      raise ActiveRecord::RecordNotFound unless @payment.present?
-
       @order = @payment.order
       raise CanCan::AccessDenied unless @order.completed?
 
@@ -147,6 +141,18 @@ module Spree
       sanitized_params
     end
 
+    def find_payment
+      @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
+      raise ActiveRecord::RecordNotFound unless @payment.present?
+    end
+
+    # frame-ancestors (set above) supersedes X-Frame-Options in modern
+    # browsers, but the default SAMEORIGIN header would still block legacy
+    # browsers from embedding these pages, so drop it for the iframe actions.
+    def allow_iframe_embedding
+      response.headers.delete('X-Frame-Options')
+    end
+
     def render_not_found
       respond_to do |format|
         format.html { render file: Rails.public_path.join('404.html'), status: :not_found, layout: false }

data/app/javascripts/vpago/vpago_payments/user_informers/firebase.js

@@ -31,6 +31,10 @@ async function listenToProcessingState({
     let reasonCode = documentData["reason_code"];
     let reasonMessage = documentData["reason_message"];
 
+    if (window.parent !== window) {
+      window.parent.postMessage(messageCode, "*");
+    }
+
     let orderCompleted = orderState === "complete";
     if (orderCompleted) {
       queueProcessor.queueStateChange({
@@ -40,7 +44,7 @@ async function listenToProcessingState({
             orderState,
             paymentState,
             reasonCode,
-            reasonMessage
+            reasonMessage,
           );
         },
       });
@@ -57,7 +61,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -71,7 +75,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -85,7 +89,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -99,7 +103,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -113,7 +117,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -127,7 +131,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });

data/app/models/spree/gateway/acleda_mini_app.rb

@@ -0,0 +1,20 @@
+module Spree
+  # ACLEDA Mini App payment method.
+  #
+  # Reuses the ACLEDA V2 integration in deeplink mode: the deeplink produced by
+  # ACLEDA's openSessionV2 API is handed to the ACLEDA super-app through the
+  # `acledaJSBridge` (startPayment) instead of redirecting the page. Server-side
+  # verification reuses AcledaV2's #check_transaction (getTxnStatus).
+  class Gateway::AcledaMiniApp < Gateway::AcledaV2
+    # override: partial to render in admin / checkout form lookup
+    def method_type
+      'acleda_mini_app'
+    end
+
+    # The mini app always uses the deeplink + JS bridge, so admins don't need to
+    # set the ACLEDA V2 mode.
+    def deeplink?
+      true
+    end
+  end
+end

data/app/models/vpago/payment_decorator.rb

@@ -109,6 +109,10 @@ module Vpago
       payment_method.type_vattanac_mini_app?
     end
 
+    def acleda_mini_app_payment?
+      payment_method.type_acleda_mini_app?
+    end
+
     def check_payment?
       payment_method.type_check?
     end

data/app/models/vpago/payment_method_decorator.rb

@@ -6,6 +6,7 @@ module Vpago
     TYPE_ACLEDA = 'Spree::Gateway::Acleda'.freeze
     TYPE_ACLEDA_V2 = 'Spree::Gateway::AcledaV2'.freeze
     TYPE_ACLEDA_MOBILE = 'Spree::Gateway::AcledaMobile'.freeze
+    TYPE_ACLEDA_MINI_APP = 'Spree::Gateway::AcledaMiniApp'.freeze
     TYPE_TRUE_MONEY = 'Spree::Gateway::TrueMoney'.freeze
     TYPE_VATTANAC = 'Spree::Gateway::Vattanac'.freeze
     TYPE_VATTANAC_MINI_APP = 'Spree::Gateway::VattanacMiniApp'.freeze
@@ -24,6 +25,7 @@ module Vpago
           Spree::PaymentMethod::TYPE_ACLEDA,
           Spree::PaymentMethod::TYPE_ACLEDA_V2,
           Spree::PaymentMethod::TYPE_ACLEDA_MOBILE,
+          Spree::PaymentMethod::TYPE_ACLEDA_MINI_APP,
           Spree::PaymentMethod::TYPE_VATTANAC,
           Spree::PaymentMethod::TYPE_VATTANAC_MINI_APP,
           Spree::PaymentMethod::TYPE_TRUE_MONEY,
@@ -95,6 +97,10 @@ module Vpago
       type == Spree::PaymentMethod::TYPE_ACLEDA_V2
     end
 
+    def type_acleda_mini_app?
+      type == Spree::PaymentMethod::TYPE_ACLEDA_MINI_APP
+    end
+
     def type_payway?
       type == Spree::PaymentMethod::TYPE_PAYWAY
     end

data/app/services/vpago/acleda_mini_app/session/create.rb

@@ -0,0 +1,99 @@
+module Vpago
+  module AcledaMiniApp
+    module Session
+      # Partner Session Initialization (ACLEDA Mini App Integration Spec, Step 01).
+      #
+      # ACLEDA calls POST /miniapp/acleda with { phone, first_name, last_name }.
+      # We find or create the customer (tagged with the acleda_bank identity),
+      # mint a session JWT, and return a session-based miniAppUrl for ACLEDA to
+      # open in the WebView. The generic session_id OAuth grant validates the JWT
+      # when the WebView later authenticates.
+      class Create
+        prepend Spree::ServiceModule::Base
+
+        def call(phone: nil, first_name: nil, last_name: nil)
+          return failure(nil, 'phone is required') if phone.blank?
+
+          @phone = phone
+          @first_name = first_name
+          @last_name = last_name
+
+          user = find_or_create_user
+          return failure(user, 'user creation failed') if user.nil? || !user.persisted?
+
+          success(mini_app_url: mini_app_url(user))
+        end
+
+        private
+
+        attr_reader :phone, :first_name, :last_name
+
+        def find_or_create_user
+          identity = acleda_identity
+
+          # Returning customer: the ACLEDA identity already points at a user.
+          return identity.user if identity.persisted?
+
+          # New to ACLEDA: reuse a customer matched by phone, otherwise build one,
+          # then tag them with the acleda_bank identity so the lookup above hits
+          # next time.
+          user = find_existing_user || build_user
+          identity.name = full_name
+          user.user_identity_providers << identity
+          user.save
+
+          user
+        end
+
+        def acleda_identity
+          SpreeCmCommissioner::UserIdentityProvider.acleda_bank.find_or_initialize_by(sub: phone)
+        end
+
+        def find_existing_user
+          return if intel_phone.blank?
+
+          Spree::User.by_non_tenant.find_by(intel_phone_number: intel_phone)
+        end
+
+        def build_user
+          Spree::User.new(
+            first_name: first_name,
+            last_name: last_name,
+            phone_number: phone,
+            intel_phone_number: intel_phone,
+            password: SecureRandom.base64(16),
+            confirmed_at: Time.zone.now
+          )
+        end
+
+        def mini_app_url(user)
+          # A JWT signed with the user's secure_token. Passed as `session_key` (not
+          # `session_id`) so the OAuth grant routes it to the ACLEDA authenticator,
+          # which enforces the signature.
+          session_key = SpreeCmCommissioner::UserSessionJwtToken.encode(
+            { user_id: user.id },
+            user.reload.secure_token
+          )
+
+          "#{Spree::Store.default.formatted_url}/mini_app/acleda?session_key=#{session_key}&ds=#{CGI.escape(disable_services)}"
+        end
+
+        def full_name
+          [first_name, last_name].compact.join(' ').presence
+        end
+
+        def intel_phone
+          return @intel_phone if defined?(@intel_phone)
+
+          @intel_phone = SpreeCmCommissioner::PhoneNumberParser.call(phone_number: phone).intel_phone_number
+        end
+
+        # Services to disable in the mini app storefront. Configurable per ACLEDA's
+        # requirement; defaults to none.
+        def disable_services
+          ENV.fetch('ACLEDA_MINI_APP_DISABLE_SERVICES', '')
+        end
+      end
+    end
+  end
+end

data/app/views/spree/admin/payments/source_views/_acleda_mini_app.html.erb

@@ -0,0 +1,6 @@
+<%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
+    payment: payment,
+    check_status_url: '',
+    heal_payment_url: '',
+    manual_update_payment_url: ''
+%>

data/app/views/spree/vpago_payments/forms/spree/gateway/_acleda_mini_app.html.erb

@@ -0,0 +1,93 @@
+<%
+  opr_device = request.user_agent.to_s.downcase.match?(/iphone|ipad|ipod/) ? 'ios' : 'android'
+  checkout = ::Vpago::AcledaMiniApp::Checkout.new(@payment, { platform: 'app', opr_device: opr_device })
+
+  begin
+    checkout.call
+  rescue => e
+    Rails.logger.error("Acleda Mini App checkout.call failed: #{e.message}")
+  end
+%>
+
+<p id="unsupported-message"
+   style="margin-top: 10px; font-weight: bold; color: red; display: none;">
+</p>
+
+<% if checkout.failed? %>
+  <script>
+    console.error("[Vpago] Acleda Mini App checkout error: <%= j checkout.error_message.to_s %>");
+    document.addEventListener("DOMContentLoaded", () => {
+      const loadingContainer = document.getElementById('vpago_loading_container');
+      if (loadingContainer) {
+        loadingContainer.textContent = "We couldn't start your payment. Please go back and try again.";
+      }
+    });
+  </script>
+<% else %>
+  <script>
+    // ACLEDA JS bridge (unified iOS + Android). Defined before use so it is
+    // available when the native layer injects its handlers.
+    window.acledaJSBridge = window.acledaJSBridge || {
+      call: function (action, data = {}) {
+        const payload = { action, data };
+
+        // iOS WKWebView
+        if (
+          window.webkit &&
+          window.webkit.messageHandlers &&
+          window.webkit.messageHandlers.acledaIOSJSBridge
+        ) {
+          window.webkit.messageHandlers.acledaIOSJSBridge.postMessage(payload);
+          return true;
+        }
+
+        // Android WebView
+        if (
+          window.acledaAndroidJSBridge &&
+          typeof window.acledaAndroidJSBridge.postMessage === "function"
+        ) {
+          window.acledaAndroidJSBridge.postMessage(JSON.stringify(payload));
+          return true;
+        }
+
+        console.warn("[acledaJSBridge] Native bridge not found");
+        return false;
+      }
+    };
+
+    function showRedirectContainer(buttonLabel, onClick) {
+      const loadingContainer = document.getElementById('vpago_loading_container');
+      const redirectContainer = document.getElementById('vpago_redirect_container');
+      const redirectButton = document.getElementById('vpago_redirect_button');
+
+      redirectButton.textContent = buttonLabel;
+      redirectButton.addEventListener('click', onClick);
+
+      loadingContainer.style.display = 'none';
+      redirectContainer.style.removeProperty('display');
+    }
+
+    document.addEventListener("DOMContentLoaded", () => {
+      const acledaDeeplink = "<%= raw checkout.acleda_deeplink %>";
+      const processingUrl = "<%= raw @payment.processing_url %>";
+
+      // Native -> JS after payment completes. Primary completion signal; the
+      // transaction checker polling is the fallback.
+      window.onPaymentResult = function (result) {
+        console.log("[acledaJSBridge] Payment result:", result);
+        // result.batchId, result.status = "success" | "failed" | "cancelled"
+        window.location.href = processingUrl;
+      };
+
+      const startPayment = () => window.acledaJSBridge.call("startPayment", { acleda_deeplink: acledaDeeplink });
+
+      if (startPayment()) {
+        showRedirectContainer("Continue", startPayment);
+      } else {
+        const unsupported = document.getElementById('unsupported-message');
+        unsupported.style.display = 'block';
+        unsupported.innerText = 'Unsupported environment';
+      }
+    });
+  </script>
+<% end %>

data/config/routes.rb

@@ -17,6 +17,13 @@ Spree::Core::Engine.add_routes do
     resources :transactions, only: [:show]
   end
 
+  # ACLEDA Mini App session init (ACLEDA Mini App Integration Spec, Step 01).
+  # ACLEDA calls POST /miniapp/acleda with { phone, first_name, last_name }
+  # and receives a session-based miniAppUrl.
+  namespace :miniapp do
+    resources :acleda, only: [:create], controller: 'acledas'
+  end
+
   resource :vpago_payments do
     collection do
       get :checkout

data/lib/spree_vpago/engine.rb

@@ -23,6 +23,7 @@ module SpreeVpago
         Spree::Gateway::Acleda,
         Spree::Gateway::AcledaV2,
         Spree::Gateway::AcledaMobile,
+        Spree::Gateway::AcledaMiniApp,
         Spree::Gateway::Vattanac,
         Spree::Gateway::VattanacMiniApp,
         Spree::Gateway::TrueMoney,

data/lib/spree_vpago/version.rb

@@ -1,7 +1,7 @@
 module SpreeVpago
   module_function
 
-  VERSION = '2.3.8'.freeze
+  VERSION = '2.4.0-pre1'.freeze
 
   def version
     Gem::Version.new VERSION

data/lib/vpago/acleda_mini_app/checkout.rb

@@ -0,0 +1,23 @@
+module Vpago
+  module AcledaMiniApp
+    # ACLEDA Mini App checkout. Reuses ACLEDA V2's openSessionV2 flow to obtain a
+    # deeplink, which is passed to the ACLEDA super-app via the acledaJSBridge
+    # (startPayment) instead of redirecting the page.
+    class Checkout < Vpago::AcledaV2::Checkout
+      # The mini app always uses the deeplink + JS bridge, regardless of the
+      # gateway's configured mode.
+      def deeplink?
+        true
+      end
+
+      # The deeplink string handed to
+      #   acledaJSBridge.call('startPayment', { acleda_deeplink: ... })
+      # Ensures openSessionV2 has run (persisting paymentTokenid for later
+      # getTxnStatus verification) before returning the deeplinkUrl.
+      def acleda_deeplink
+        call if @response.nil?
+        deeplink_url
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_vpago
 version: !ruby/object:Gem::Version
-  version: 2.3.8
+  version: 2.4.0.pre.pre1
 platform: ruby
 authors:
 - You
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-07-22 00:00:00.000000000 Z
+date: 2026-08-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -167,6 +167,7 @@ files:
 - app/controllers/spree/admin/payouts_controller.rb
 - app/controllers/spree/admin/suspicious_orders_controller.rb
 - app/controllers/spree/api/v2/storefront/checkout_controller_decorator.rb
+- app/controllers/spree/miniapp/acledas_controller.rb
 - app/controllers/spree/payway_card_popups_controller.rb
 - app/controllers/spree/payway_results_controller.rb
 - app/controllers/spree/payway_v2_card_popups_controller.rb
@@ -192,6 +193,7 @@ files:
 - app/models/.gitkeep
 - app/models/concerns/vpago/payoutable.rb
 - app/models/spree/gateway/acleda.rb
+- app/models/spree/gateway/acleda_mini_app.rb
 - app/models/spree/gateway/acleda_mobile.rb
 - app/models/spree/gateway/acleda_v2.rb
 - app/models/spree/gateway/payway.rb
@@ -256,6 +258,7 @@ files:
 - app/serializers/spree/v2/storefront/payment_serializer_decorator.rb
 - app/serializers/spree/v2/storefront/vpago_payment_source_serializer.rb
 - app/services/.gitkeep
+- app/services/vpago/acleda_mini_app/session/create.rb
 - app/services/vpago/aes_encrypter.rb
 - app/services/vpago/payment_finder.rb
 - app/services/vpago/payment_processable.rb
@@ -283,6 +286,7 @@ files:
 - app/views/spree/admin/payments/source_forms/_payment_payway.html.erb
 - app/views/spree/admin/payments/source_forms/_payway_v2.html.erb
 - app/views/spree/admin/payments/source_views/_acleda.html.erb
+- app/views/spree/admin/payments/source_views/_acleda_mini_app.html.erb
 - app/views/spree/admin/payments/source_views/_acleda_mobile.html.erb
 - app/views/spree/admin/payments/source_views/_acleda_v2.html.erb
 - app/views/spree/admin/payments/source_views/_payment_payway.html.erb
@@ -340,6 +344,7 @@ files:
 - app/views/spree/payway_v2_card_popups/show.html.erb
 - app/views/spree/vpago_payments/_transaction_checker.html.erb
 - app/views/spree/vpago_payments/checkout.html.erb
+- app/views/spree/vpago_payments/forms/spree/gateway/_acleda_mini_app.html.erb
 - app/views/spree/vpago_payments/forms/spree/gateway/_acleda_v2.html.erb
 - app/views/spree/vpago_payments/forms/spree/gateway/_payway_v2.html.erb
 - app/views/spree/vpago_payments/forms/spree/gateway/_true_money.html.erb
@@ -391,6 +396,7 @@ files:
 - lib/vpago/acleda/deeplink_checkout.rb
 - lib/vpago/acleda/payment_request_updater.rb
 - lib/vpago/acleda/transaction_status.rb
+- lib/vpago/acleda_mini_app/checkout.rb
 - lib/vpago/acleda_mobile/base.rb
 - lib/vpago/acleda_mobile/callback_validator.php
 - lib/vpago/acleda_mobile/callback_validator.rb
@@ -456,9 +462,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 3.2.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements:
 - none
 rubygems_version: 3.4.1