tanga_activemerchant 1.37.0

data/lib/active_merchant/billing/gateways/hdfc.rb

@@ -0,0 +1,207 @@
+require "nokogiri"
+
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    class HdfcGateway < Gateway
+      self.display_name = "HDFC"
+      self.homepage_url = "http://www.hdfcbank.com/sme/sme-details/merchant-services/guzh6m0i"
+
+      self.test_url = "https://securepgtest.fssnet.co.in/pgway/servlet/"
+      self.live_url = "https://securepg.fssnet.co.in/pgway/servlet/"
+
+      self.supported_countries = ["IN"]
+      self.default_currency = "INR"
+      self.money_format = :dollars
+      self.supported_cardtypes = [:visa, :master, :discover, :diners_club]
+
+      def initialize(options={})
+        requires!(options, :login, :password)
+        super
+      end
+
+      def purchase(amount, payment_method, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_payment_method(post, payment_method)
+        add_customer_data(post, options)
+
+        commit("purchase", post)
+      end
+
+      def authorize(amount, payment_method, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_payment_method(post, payment_method)
+        add_customer_data(post, options)
+
+        commit("authorize", post)
+      end
+
+      def capture(amount, authorization, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_reference(post, authorization)
+        add_customer_data(post, options)
+
+        commit("capture", post)
+      end
+
+      def refund(amount, authorization, options={})
+        post = {}
+        add_invoice(post, amount, options)
+        add_reference(post, authorization)
+        add_customer_data(post, options)
+
+        commit("refund", post)
+      end
+
+      private
+
+      CURRENCY_CODES = Hash.new{|h,k| raise ArgumentError.new("Unsupported currency for HDFC: #{k}")}
+      CURRENCY_CODES["AED"] = "784"
+      CURRENCY_CODES["AUD"] = "036"
+      CURRENCY_CODES["CAD"] = "124"
+      CURRENCY_CODES["EUR"] = "978"
+      CURRENCY_CODES["GBP"] = "826"
+      CURRENCY_CODES["INR"] = "356"
+      CURRENCY_CODES["OMR"] = "512"
+      CURRENCY_CODES["QAR"] = "634"
+      CURRENCY_CODES["SGD"] = "702"
+      CURRENCY_CODES["USD"] = "840"
+
+      def add_invoice(post, amount, options)
+        post[:amt] = amount(amount)
+        post[:currencycode] = CURRENCY_CODES[options[:currency] || currency(amount)]
+        post[:trackid] = escape(options[:order_id], 40) if options[:order_id]
+        post[:udf1] = escape(options[:description]) if options[:description]
+        post[:eci] = options[:eci] if options[:eci]
+      end
+
+      def add_customer_data(post, options)
+        post[:udf2] = escape(options[:email]) if options[:email]
+        if address = (options[:billing_address] || options[:address])
+          post[:udf3] = escape(address[:phone]) if address[:phone]
+          post[:udf4] = escape(<<EOA)
+#{address[:name]}
+#{address[:company]}
+#{address[:address1]}
+#{address[:address2]}
+#{address[:city]} #{address[:state]} #{address[:zip]}
+#{address[:country]}
+EOA
+        end
+      end
+
+      def add_payment_method(post, payment_method)
+        post[:member] = escape(payment_method.name, 30)
+        post[:card] = escape(payment_method.number)
+        post[:cvv2] = escape(payment_method.verification_value)
+        post[:expyear] = format(payment_method.year, :four_digits)
+        post[:expmonth] = format(payment_method.month, :two_digits)
+      end
+
+      def add_reference(post, authorization)
+        tranid, member = split_authorization(authorization)
+        post[:transid] = tranid
+        post[:member] = member
+      end
+
+      def parse(xml)
+        response = {}
+
+        doc = Nokogiri::XML.fragment(fix_xml(xml))
+        doc.children.each do |node|
+          if node.text?
+            next
+          elsif (node.elements.size == 0)
+            response[node.name.downcase.to_sym] = node.text
+          else
+            node.elements.each do |childnode|
+              name = "#{node.name.downcase}_#{childnode.name.downcase}"
+              response[name.to_sym] = childnode.text
+            end
+          end
+        end
+
+        response
+      end
+
+      def fix_xml(xml)
+        xml.gsub(/&(?!(?:amp|quot|apos|lt|gt);)/, "&amp;")
+      end
+
+      ACTIONS = {
+        "purchase" => "1",
+        "refund" => "2",
+        "authorize" => "4",
+        "capture" => "5",
+      }
+
+      def commit(action, post)
+        post[:id] = @options[:login]
+        post[:password] = @options[:password]
+        post[:action] = ACTIONS[action] if ACTIONS[action]
+
+        raw = parse(ssl_post(url(action), build_request(post)))
+
+        succeeded = success_from(raw[:result])
+        Response.new(
+          succeeded,
+          message_from(succeeded, raw),
+          raw,
+          :authorization => authorization_from(post, raw),
+          :test => test?
+        )
+      end
+
+      def build_request(post)
+        xml = Builder::XmlMarkup.new :indent => 2
+        xml.instruct!
+        post.each do |field, value|
+          xml.tag!(field, value)
+        end
+        xml.target!
+      end
+
+      def url(action)
+        endpoint = "TranPortalXMLServlet"
+        (test? ? test_url : live_url) + endpoint
+      end
+
+      def success_from(result)
+        case result
+        when "CAPTURED", "APPROVED", "NOT ENROLLED", "ENROLLED"
+          true
+        else
+          false
+        end
+      end
+
+      def message_from(succeeded, response)
+        if succeeded
+          "Succeeded"
+        else
+          (response[:error_text] || response[:result] || "Unable to read error message").split("-").last
+        end
+      end
+
+      def authorization_from(request, response)
+        [response[:tranid], request[:member]].join("|")
+      end
+
+      def split_authorization(authorization)
+        tranid, member = authorization.split("|")
+        [tranid, member]
+      end
+
+      def escape(string, max_length=250)
+        return "" unless string
+        if max_length
+          string = string[0...max_length]
+        end
+        string.gsub(/[^A-Za-z0-9 \-_@\.\n]/, '')
+      end
+    end
+  end
+end
+

data/lib/active_merchant/billing/gateways/iats_payments.rb

@@ -0,0 +1,35 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    class IatsPaymentsGateway < AuthorizeNetGateway
+      self.live_url = self.test_url = 'https://www.iatspayments.com/netgate/AEGateway.aspx'
+
+      self.homepage_url = 'http://www.iatspayments.com/'
+      self.display_name = 'IATSPayments'
+
+      def authorize(money, paysource, options = {})
+        raise NotImplementedError
+      end
+
+      def capture(money, authorization, options = {})
+        raise NotImplementedError
+      end
+
+      def void(authorization, options = {})
+        raise NotImplementedError
+      end
+
+      def refund(money, identification, options = {})
+        raise NotImplementedError
+      end
+
+      def credit(money, identification, options = {})
+        raise NotImplementedError
+      end
+
+      private
+      def split(response)
+        response.split(',')
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/gateways/ideal/ideal_base.rb

@@ -0,0 +1,249 @@
+require File.dirname(__FILE__) + '/ideal_response'
+
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    # Implementation contains some simplifications
+    # - does not support multiple subID per merchant
+    # - language is fixed to 'nl'
+    class IdealBaseGateway < Gateway
+      class_attribute :server_pem, :pem_password, :default_expiration_period
+      self.default_expiration_period = 'PT10M'
+      self.default_currency = 'EUR'
+      self.pem_password = true
+
+      self.abstract_class = true
+
+      # These constants will never change for most users
+      AUTHENTICATION_TYPE = 'SHA1_RSA'
+      LANGUAGE = 'nl'
+      SUB_ID = '0'
+      API_VERSION = '1.1.0'
+
+      def initialize(options = {})
+        requires!(options, :login, :password, :pem)
+
+        options[:pem_password] = options[:password]
+        super
+      end
+
+      # Setup transaction. Get redirect_url from response.service_url
+      def setup_purchase(money, options = {})
+        requires!(options, :issuer_id, :return_url, :order_id, :currency, :description, :entrance_code)
+
+        commit(build_transaction_request(money, options))
+      end
+
+      # Check status of transaction and confirm payment
+      # transaction_id must be a valid transaction_id from a prior setup.
+      def capture(transaction, options = {})
+        options[:transaction_id] = transaction
+        commit(build_status_request(options))
+      end
+
+      # Get list of issuers from response.issuer_list
+      def issuers
+        commit(build_directory_request)
+      end
+
+      private
+
+      def url
+        (test? ? test_url : live_url)
+      end
+
+      def token
+        if @token.nil?
+          @token = create_fingerprint(@options[:pem])
+        end
+        @token
+      end
+
+      # <?xml version="1.0" encoding="UTF-8"?>
+      # <AcquirerTrxReq xmlns="http://www.idealdesk.com/Message" version="1.1.0">
+      #  <createDateTimeStamp>2001-12-17T09:30:47.0Z</createDateTimeStamp>
+      #  <Issuer>
+      #   <issuerID>1003</issuerID>
+      #  </Issuer>
+      #   <Merchant>
+      #     <merchantID>000123456</merchantID>
+      #     <subID>0</subID>
+      #     <authentication>passkey</authentication>
+      #     <token>1</token>
+      #     <tokenCode>3823ad872eff23</tokenCode>
+      #     <merchantReturnURL>https://www.mijnwinkel.nl/betaalafhandeling
+      #      </merchantReturnURL>
+      #   </Merchant>
+      #   <Transaction>
+      #     <purchaseID>iDEAL-aankoop 21</purchaseID>
+      #     <amount>5999</amount>
+      #     <currency>EUR</currency>
+      #     <expirationPeriod>PT3M30S</expirationPeriod>
+      #     <language>nl</language>
+      #     <description>Documentensuite</description>
+      #     <entranceCode>D67tyx6rw9IhY71</entranceCode>
+      #   </Transaction>
+      # </AcquirerTrxReq>
+      def build_transaction_request(money, options)
+        date_time_stamp = create_time_stamp
+        message  = date_time_stamp +
+                   options[:issuer_id] +
+                   @options[:login] +
+                   SUB_ID +
+                   options[:return_url] +
+                   options[:order_id] +
+                   money.to_s +
+                   (options[:currency] || currency(money)) +
+                   LANGUAGE +
+                   options[:description] +
+                   options[:entrance_code]
+        token_code = sign_message(@options[:pem], @options[:password], message)
+
+        xml = Builder::XmlMarkup.new(:indent => 2)
+        xml.instruct!
+        xml.tag! 'AcquirerTrxReq', 'xmlns' => 'http://www.idealdesk.com/Message', 'version' => API_VERSION do
+          xml.tag! 'createDateTimeStamp', date_time_stamp
+          xml.tag! 'Issuer' do
+            xml.tag! 'issuerID', options[:issuer_id]
+          end
+          xml.tag! 'Merchant' do
+            xml.tag! 'merchantID', @options[:login]
+            xml.tag! 'subID', SUB_ID
+            xml.tag! 'authentication', AUTHENTICATION_TYPE
+            xml.tag! 'token', token
+            xml.tag! 'tokenCode', token_code
+            xml.tag! 'merchantReturnURL', options[:return_url]
+          end
+          xml.tag! 'Transaction' do
+            xml.tag! 'purchaseID', options[:order_id]
+            xml.tag! 'amount', money
+            xml.tag! 'currency', options[:currency]
+            xml.tag! 'expirationPeriod', options[:expiration_period] || default_expiration_period
+            xml.tag! 'language', LANGUAGE
+            xml.tag! 'description', options[:description]
+            xml.tag! 'entranceCode', options[:entrance_code]
+          end
+          xml.target!
+        end
+      end
+
+      # <?xml version="1.0" encoding="UTF-8"?>
+      # <AcquirerStatusReq xmlns="http://www.idealdesk.com/Message" version="1.1.0">
+      #  <createDateTimeStamp>2001-12-17T09:30:47.0Z</createDateTimeStamp>
+      #  <Merchant>
+      #   <merchantID>000123456</merchantID>
+      #   <subID>0</subID>
+      #   <authentication>keyed hash</authentication>
+      #   <token>1</token>
+      #   <tokenCode>3823ad872eff23</tokenCode>
+      #  </Merchant>
+      #  <Transaction>
+      #   <transactionID>0001023456789112</transactionID>
+      #  </Transaction>
+      # </AcquirerStatusReq>
+      def build_status_request(options)
+        datetimestamp = create_time_stamp
+        message = datetimestamp + @options[:login] + SUB_ID + options[:transaction_id]
+        tokenCode = sign_message(@options[:pem], @options[:password], message)
+
+        xml = Builder::XmlMarkup.new(:indent => 2)
+        xml.instruct!
+        xml.tag! 'AcquirerStatusReq', 'xmlns' => 'http://www.idealdesk.com/Message', 'version' => API_VERSION do
+          xml.tag! 'createDateTimeStamp', datetimestamp
+          xml.tag! 'Merchant' do
+            xml.tag! 'merchantID', @options[:login]
+            xml.tag! 'subID', SUB_ID
+            xml.tag! 'authentication' , AUTHENTICATION_TYPE
+            xml.tag! 'token', token
+            xml.tag! 'tokenCode', tokenCode
+          end
+          xml.tag! 'Transaction' do
+            xml.tag! 'transactionID', options[:transaction_id]
+          end
+        end
+        xml.target!
+      end
+
+      # <?xml version="1.0" encoding="UTF-8"?>
+      # <DirectoryReq xmlns="http://www.idealdesk.com/Message" version="1.1.0">
+      #  <createDateTimeStamp>2001-12-17T09:30:47.0Z</createDateTimeStamp>
+      #  <Merchant>
+      #   <merchantID>000000001</merchantID>
+      #   <subID>0</subID>
+      #   <authentication>1</authentication>
+      #   <token>hashkey</token>
+      #   <tokenCode>WajqV1a3nDen0be2r196g9FGFF=</tokenCode>
+      #  </Merchant>
+      # </DirectoryReq>
+      def build_directory_request
+        datetimestamp = create_time_stamp
+        message = datetimestamp + @options[:login] + SUB_ID
+        tokenCode = sign_message(@options[:pem], @options[:password], message)
+
+        xml = Builder::XmlMarkup.new(:indent => 2)
+        xml.instruct!
+        xml.tag! 'DirectoryReq', 'xmlns' => 'http://www.idealdesk.com/Message', 'version' => API_VERSION do
+          xml.tag! 'createDateTimeStamp', datetimestamp
+          xml.tag! 'Merchant' do
+            xml.tag! 'merchantID', @options[:login]
+            xml.tag! 'subID', SUB_ID
+            xml.tag! 'authentication', AUTHENTICATION_TYPE
+            xml.tag! 'token', token
+            xml.tag! 'tokenCode', tokenCode
+          end
+        end
+        xml.target!
+      end
+
+      def commit(request)
+        raw_response = ssl_post(url, request)
+        response = Hash.from_xml(raw_response.to_s)
+        response_type = response.keys[0]
+
+        case response_type
+          when 'AcquirerTrxRes', 'DirectoryRes'
+            success = true
+          when 'ErrorRes'
+            success = false
+          when 'AcquirerStatusRes'
+            raise SecurityError, "Message verification failed.", caller unless status_response_verified?(response)
+            success = (response['AcquirerStatusRes']['Transaction']['status'] == 'Success')
+          else
+            raise ArgumentError, "Unknown response type.", caller
+        end
+
+        return IdealResponse.new(success, response.keys[0], response, :test => test?)
+      end
+
+      def create_fingerprint(cert_file)
+        cert_data   = OpenSSL::X509::Certificate.new(cert_file).to_s
+        cert_data   = cert_data.sub(/-----BEGIN CERTIFICATE-----/, '')
+        cert_data   = cert_data.sub(/-----END CERTIFICATE-----/, '')
+        fingerprint = Base64.decode64(cert_data)
+        fingerprint = Digest::SHA1.hexdigest(fingerprint)
+        return fingerprint.upcase
+      end
+
+      def sign_message(private_key_data, password, data)
+        private_key  = OpenSSL::PKey::RSA.new(private_key_data, password)
+        signature = private_key.sign(OpenSSL::Digest::SHA1.new, data.gsub('\s', ''))
+        return Base64.encode64(signature).gsub(/\n/, '')
+      end
+
+      def verify_message(cert_file, data, signature)
+        public_key = OpenSSL::X509::Certificate.new(cert_file).public_key
+        return public_key.verify(OpenSSL::Digest::SHA1.new, Base64.decode64(signature), data)
+      end
+
+      def status_response_verified?(response)
+        transaction = response['AcquirerStatusRes']['Transaction']
+        message = response['AcquirerStatusRes']['createDateTimeStamp'] + transaction['transactionID' ] + transaction['status']
+        message << transaction['consumerAccountNumber'].to_s
+        verify_message(server_pem, message, response['AcquirerStatusRes']['Signature']['signatureValue'])
+      end
+
+      def create_time_stamp
+        Time.now.gmtime.strftime('%Y-%m-%dT%H:%M:%S.000Z')
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/gateways/ideal/ideal_rabobank.pem

@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----
+MIICQDCCAakCBELvbPYwDQYJKoZIhvcNAQEEBQAwZzELMAkGA1UEBhMCREUxDzANBgNVBAgTBkhl
+c3NlbjESMBAGA1UEBxMJRnJhbmtmdXJ0MQ4wDAYDVQQKEwVpREVBTDEOMAwGA1UECxMFaURFQUwx
+EzARBgNVBAMTCmlERUFMIFJhYm8wHhcNMDUwODAyMTI1NDE0WhcNMTUwNzMxMTI1NDE0WjBnMQsw
+CQYDVQQGEwJERTEPMA0GA1UECBMGSGVzc2VuMRIwEAYDVQQHEwlGcmFua2Z1cnQxDjAMBgNVBAoT
+BWlERUFMMQ4wDAYDVQQLEwVpREVBTDETMBEGA1UEAxMKaURFQUwgUmFibzCBnzANBgkqhkiG9w0B
+AQEFAAOBjQAwgYkCgYEA486iIKVhr8RNjxH+PZ3yTWx/8k2fqDFm8XU8I1Z5esRmPFnXmlgA8cG7
+e9AaBPaLoP7Dc8dRQoUO66KMakzGI/WAVdHIJiiKrz8xOcioIgrzPSqec7aqse3J28UraEHkGESJ
+7dAW7Pw/shrmpmkzKsunLt6AkXss4W3JUndZUN0CAwEAATANBgkqhkiG9w0BAQQFAAOBgQCGy/FK
+Lotp2ZOTtuLMgvDy74eicq/Znv4bLfpglzAPHycRHcHsXuer/lNHyvpKf2gdYe+IFalUW3OJZWIM
+jpm4UniJ16RPdgwWVRJEdPr/P7JXMIqD2IEOgujuuTQ7x0VgCf9XrsPsP9ZR5DIPcDDhbrpSE0yF
+Do77nwG61xMaGA==
+-----END CERTIFICATE-----

data/lib/active_merchant/billing/gateways/ideal/ideal_response.rb

@@ -0,0 +1,29 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    class IdealResponse < Response
+
+      def issuer_list      
+        list = @params.values[0]['Directory']['Issuer']
+        case list
+          when Hash
+            return [list]
+          when Array
+            return list
+        end  
+      end
+      
+      def service_url
+        @params.values[0]['Issuer']['issuerAuthenticationURL']
+      end
+      
+      def transaction
+        @params.values[0]['Transaction']
+      end
+      
+      def error
+        @params.values[0]['Error']
+      end
+      
+    end
+  end
+end

data/lib/active_merchant/billing/gateways/ideal_rabobank.rb

@@ -0,0 +1,66 @@
+require File.dirname(__FILE__) + '/ideal/ideal_base'
+
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    # First, make sure you have everything setup correctly and all of your dependencies in place with:
+    #
+    #    require 'rubygems'
+    #    require 'active_merchant'
+    #
+    # ActiveMerchant expects the amounts to be given as an Integer in cents. In this case, 10 EUR becomes 1000.
+    #
+    # Create certificates for authentication:
+    #
+    # The PEM file expected should contain both the certificate and the generated PEM file.
+    # Some sample shell commands to generate the certificates:
+    #
+    #    openssl genrsa -aes128 -out priv.pem -passout pass:[YOUR PASSWORD] 1024
+    #    openssl req -x509 -new -key priv.pem -passin pass:[YOUR PASSWORD] -days 3000 -out cert.cer
+    #    cat cert.cer priv.pem > ideal.pem
+    #
+    # Following the steps above, upload cert.cer to the ideal web interface and pass the path of ideal.pem to the :pem option.
+    #
+    # Configure the gateway using your iDEAL bank account info and security settings:
+    #
+    # Create gateway:
+    #    gateway = ActiveMerchant::Billing::IdealRabobankGateway.new(
+    #      :login    => '123456789', # 9 digit merchant number
+    #      :pem      => File.read(Rails.root + 'config/ideal.pem'),
+    #      :password => 'password' # password for the PEM key
+    #    )
+    #
+    # Get list of issuers to fill selection list on your payment form:
+    #    response = gateway.issuers
+    #    list = response.issuer_list
+    #
+    # Request transaction:
+    #
+    #    options = {
+    #       :issuer_id         => '0001',
+    #       :expiration_period => 'PT10M',
+    #       :return_url        => 'http://www.return.url',
+    #       :order_id          => '1234567890123456',
+    #       :currency          => 'EUR',
+    #       :description       => 'Een omschrijving',
+    #       :entrance_code     => '1234'
+    #    }
+    #
+    #    response = gateway.setup_purchase(amount, options)
+    #    transaction_id = response.transaction['transactionID']
+    #    redirect_url = response.service_url
+    #
+    # Mandatory status request will confirm transaction:
+    #    response = gateway.capture(transaction_id)
+    #
+    # Implementation contains some simplifications
+    # - does not support multiple subID per merchant
+    # - language is fixed to 'nl'
+    class IdealRabobankGateway < IdealBaseGateway
+      class_attribute :test_url, :live_url
+
+      self.test_url = 'https://idealtest.rabobank.nl/ideal/iDeal'
+      self.live_url = 'https://ideal.rabobank.nl/ideal/iDeal'
+      self.server_pem = File.read(File.dirname(__FILE__) + '/ideal/ideal_rabobank.pem')
+    end
+  end
+end