tanga_activemerchant 1.37.0

data/lib/active_merchant/billing/integrations/quickpay/notification.rb

@@ -0,0 +1,137 @@
+require 'net/http'
+
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Quickpay
+        class Notification < ActiveMerchant::Billing::Integrations::Notification
+          def complete?
+            status == '000'
+          end
+
+          def item_id
+            params['ordernumber']
+          end
+
+          def transaction_id
+            params['transaction']
+          end
+
+          def received_at
+            time = params['time']
+            # If time only contains 12 integers then it's pre v5 format
+            time = "20#{params['time']}" if /[0-9]{12}/.match(params['time'])
+            Time.parse(time)
+          end
+
+          def gross
+            "%.2f" % (gross_cents / 100.0)
+          end
+
+          def gross_cents
+            params['amount'].to_i
+          end
+
+          def status
+            params['qpstat']
+          end
+
+          def currency
+            params['currency']
+          end
+
+          # Provide access to raw fields from quickpay
+          %w(
+            msgtype
+            ordernumber
+            state
+            chstat
+            chstatmsg
+            qpstat
+            qpstatmsg
+            merchant
+            merchantemail
+            cardtype
+            cardnumber
+            cardhash
+            cardexpire
+            splitpayment
+            fraudprobability
+            fraudremarks
+            fraudreport
+            fee
+          ).each do |attr|
+            define_method(attr) do
+              params[attr]
+            end
+          end
+
+          MD5_CHECK_FIELDS = [
+            :msgtype,
+            :ordernumber,
+            :amount,
+            :currency,
+            :time,
+            :state,
+            :qpstat,
+            :qpstatmsg,
+            :chstat,
+            :chstatmsg,
+            :merchant,
+            :merchantemail,
+            :transaction,
+            :cardtype,
+            :cardnumber,
+            :cardhash,
+            :cardexpire,
+            :splitpayment,
+            :fraudprobability,
+            :fraudremarks,
+            :fraudreport,
+            :fee
+          ]
+
+          def generate_md5string
+            MD5_CHECK_FIELDS.map { |key| params[key.to_s] } * "" + @options[:credential2].to_s
+          end
+
+          def generate_md5check
+            Digest::MD5.hexdigest(generate_md5string)
+          end
+
+          # Quickpay doesn't do acknowledgements of callback notifications
+          # Instead it uses and MD5 hash of all parameters
+          def acknowledge
+            generate_md5check == params['md5check']
+          end
+
+          # Take the posted data and move the relevant data into a hash
+          def parse(post)
+            # 30 + 12
+            #------------------------------8a827a0e6829
+            #Content-Disposition: form-data; name="msgtype"
+            #
+            #subscribe
+            #------------------------------8a827a0e6829
+            #Content-Disposition: form-data; name="ordernumber"
+            #
+            #BILP94406
+
+            if post =~ /-{20,40}\w{6,24}/
+              @raw = post.to_s
+              post.split(/-{20,40}\w{6,24}[\n\r]*/m).each do |part|
+                part.scan(/([^\n\r]+)[\n\r]+([^\n\r]*)/m) do |header, value|
+                  if header.match(/name=["'](.*)["']/)
+                    params[$1] = value.strip
+                  end
+                end
+              end
+            else
+              super
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/quickpay.rb

@@ -0,0 +1,21 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Quickpay 
+        autoload :Helper, File.dirname(__FILE__) + '/quickpay/helper.rb'
+        autoload :Notification, File.dirname(__FILE__) + '/quickpay/notification.rb'
+       
+        mattr_accessor :service_url
+        self.service_url = 'https://secure.quickpay.dk/form/'
+
+        def self.notification(post, options = {})
+          Notification.new(post)
+        end
+        
+        def self.return(post, options = {})
+          Return.new(post, options)
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/rbkmoney/helper.rb

@@ -0,0 +1,23 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Rbkmoney
+        class Helper < ActiveMerchant::Billing::Integrations::Helper
+          mapping :account, 'eshopId'
+          mapping :amount, 'recipientAmount'
+
+          # NOTE: rbkmoney uses outdated currency code 'RUR'
+          mapping :currency, 'recipientCurrency'
+
+          mapping :order, 'orderId'
+
+          mapping :customer, :email => 'user_email'
+
+          mapping :credential2, 'serviceName'
+          mapping :credential3, 'successUrl'
+          mapping :credential4, 'failUrl'
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/rbkmoney/notification.rb

@@ -0,0 +1,91 @@
+require 'net/http'
+
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Rbkmoney
+        class Notification < ActiveMerchant::Billing::Integrations::Notification
+          %w(
+            eshopId
+            paymentId
+            orderId
+            eshopAccount
+            serviceName
+            recipientAmount
+            recipientCurrency
+            paymentStatus
+            userName
+            userEmail
+            paymentData
+            secretKey
+            hash
+          ).each do |param_name|
+            define_method(param_name.underscore){ params[param_name] }
+          end
+
+          def complete?
+            (payment_status == '5')
+          end
+
+          def test?
+            false
+          end
+
+          def status
+            case payment_status
+            when '3'
+              'pending'
+            when '5'
+              'completed'
+            else 'unknown'
+            end
+          end
+
+          def user_fields
+            params.inject({}) do |fields, (k,v)|
+              if /\AuserField_[\d+]\z/.match(k)
+                fields[k] = v
+              end
+              fields
+            end
+          end
+
+          alias_method :client_id, :eshop_id
+          alias_method :item_id, :order_id
+          alias_method :transaction_id, :payment_id
+          alias_method :received_at, :payment_data
+          alias_method :payer_email, :user_email
+          alias_method :gross, :recipient_amount
+          alias_method :currency, :recipient_currency
+
+          def acknowledge
+            string = [
+              eshop_id,
+              order_id,
+              service_name,
+              eshop_account,
+              recipient_amount,
+              recipient_currency,
+              payment_status,
+              user_name,
+              user_email,
+              payment_data,
+              @options[:secret]
+            ].join '::'
+
+            signature = case hash.to_s.length
+            when 32
+              Digest::MD5.hexdigest(string)
+            when 128
+              Digest::SHA512.hexdigest(string)
+            else
+              return false
+            end
+
+            signature == hash
+          end
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/rbkmoney.rb

@@ -0,0 +1,17 @@
+require File.dirname(__FILE__) + '/rbkmoney/helper.rb'
+require File.dirname(__FILE__) + '/rbkmoney/notification.rb'
+
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Rbkmoney
+        mattr_accessor :service_url
+        self.service_url = 'https://rbkmoney.ru/acceptpurchase.aspx'
+
+        def self.notification(*args)
+          Notification.new(*args)
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/return.rb

@@ -0,0 +1,42 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      class Return
+        attr_accessor :params
+        attr_reader :notification
+      
+        def initialize(query_string, options = {})
+          @params  = parse(query_string)
+          @options = options
+        end
+      
+        # Successful by default. Overridden in the child class
+        def success?
+          true
+        end
+
+        # Not cancelled by default.  Overridden in the child class.
+        def cancelled?
+          false
+        end
+
+        def message
+          
+        end
+        
+        def parse(query_string)
+          return {} if query_string.blank?
+          
+          query_string.split('&').inject({}) do |memo, chunk|
+            next if chunk.empty?
+            key, value = chunk.split('=', 2)
+            next if key.empty?
+            value = value.nil? ? nil : CGI.unescape(value)
+            memo[CGI.unescape(key)] = value
+            memo
+          end
+        end 
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/robokassa/common.rb

@@ -0,0 +1,19 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Robokassa
+        module Common
+          def generate_signature_string
+            custom_param_keys = params.keys.select {|key| key =~ /^shp/}.sort
+            custom_params = custom_param_keys.map {|key| "#{key}=#{params[key]}"}
+            [main_params, secret, custom_params.compact].flatten.join(':')
+          end
+
+          def generate_signature
+            Digest::MD5.hexdigest(generate_signature_string)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/robokassa/helper.rb

@@ -0,0 +1,50 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Robokassa
+        class Helper < ActiveMerchant::Billing::Integrations::Helper
+          include Common
+
+          def initialize(order, account, options = {})
+            @md5secret = options.delete(:secret)
+            super
+          end
+
+          def form_fields
+            @fields.merge(ActiveMerchant::Billing::Integrations::Robokassa.signature_parameter_name => generate_signature)
+          end
+
+          def main_params
+            [:account, :amount, :order].map {|key| @fields[mappings[key]]}
+          end
+
+          def params
+            @fields
+          end
+
+          def secret
+            @md5secret
+          end
+
+          def method_missing(method_id, *args)
+            method_id = method_id.to_s.gsub(/=$/, '')
+
+            # support for robokassa custom parameters
+            if method_id =~ /^shp/
+              add_field method_id, args.last
+            end
+
+            super
+          end
+
+          mapping :account, 'MrchLogin'
+          mapping :amount, 'OutSum'
+          mapping :currency, 'IncCurrLabel'
+          mapping :order, 'InvId'
+          mapping :description, 'Desc'
+          mapping :email, 'Email'
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/robokassa/notification.rb

@@ -0,0 +1,55 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Robokassa
+        class Notification < ActiveMerchant::Billing::Integrations::Notification
+          include Common
+
+          def self.recognizes?(params)
+            params.has_key?('InvId') && params.has_key?('OutSum')
+          end
+
+          def complete?
+            true
+          end
+
+          def amount
+            BigDecimal.new(gross)
+          end
+
+          def item_id
+            params['InvId']
+          end
+
+          def security_key
+            params[ActiveMerchant::Billing::Integrations::Robokassa.signature_parameter_name].to_s.downcase
+          end
+
+          def gross
+            params['OutSum']
+          end
+
+          def status
+            'success'
+          end
+
+          def secret
+            @options[:secret]
+          end
+
+          def main_params
+            [gross, item_id]
+          end
+
+          def acknowledge
+            security_key == generate_signature
+          end
+
+          def success_response(*args)
+            "OK#{item_id}"
+          end
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/robokassa/return.rb

@@ -0,0 +1,17 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module Robokassa
+        class Return < ActiveMerchant::Billing::Integrations::Return
+          def item_id
+            @params['InvId']
+          end
+
+          def amount
+            @params['OutSum']
+          end
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/robokassa.rb

@@ -0,0 +1,49 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+
+      # Documentation: http://robokassa.ru/Doc/En/Interface.aspx
+      module Robokassa
+        autoload :Helper, File.dirname(__FILE__) + '/robokassa/helper.rb'
+        autoload :Notification, File.dirname(__FILE__) + '/robokassa/notification.rb'
+        autoload :Return, File.dirname(__FILE__) + '/robokassa/return.rb'
+        autoload :Common, File.dirname(__FILE__) + '/robokassa/common.rb'
+
+        # Overwrite this if you want to change the Robokassa test url
+        mattr_accessor :test_url
+        self.test_url = 'http://test.robokassa.ru/Index.aspx'
+
+        # Overwrite this if you want to change the Robokassa production url
+        mattr_accessor :production_url
+        self.production_url = 'https://merchant.roboxchange.com/Index.aspx'
+
+        mattr_accessor :signature_parameter_name
+        self.signature_parameter_name = 'SignatureValue'
+
+        def self.service_url
+          mode = ActiveMerchant::Billing::Base.integration_mode
+          case mode
+          when :production
+            self.production_url
+          when :test
+            self.test_url
+          else
+            raise StandardError, "Integration mode set to an invalid value: #{mode}"
+          end
+        end
+
+        def self.helper(order, account, options = {})
+          Helper.new(order, account, options)
+        end
+
+        def self.notification(query_string, options = {})
+          Notification.new(query_string, options)
+        end
+
+        def self.return(query_string)
+          Return.new(query_string)
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/sage_pay_form/encryption.rb

@@ -0,0 +1,33 @@
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module SagePayForm
+        module Encryption
+          def sage_encrypt(plaintext, key)
+            Base64.strict_encode64(sage_encrypt_xor(plaintext, key))
+          end
+
+          def sage_decrypt(ciphertext, key)
+            sage_encrypt_xor(Base64.decode64(ciphertext), key)
+          end
+          
+          def sage_encrypt_salt(min, max)
+            length = rand(max - min + 1) + min
+            SecureRandom.base64(length + 4)[0, length]
+          end
+
+          private
+
+          def sage_encrypt_xor(data, key)
+            raise 'No key provided' if key.blank?
+            
+            key *= (data.bytesize.to_f / key.bytesize.to_f).ceil
+            key = key[0, data.bytesize]
+
+            data.bytes.zip(key.bytes).map { |b1, b2| (b1 ^ b2).chr }.join
+          end
+        end
+      end
+    end
+  end
+end

data/lib/active_merchant/billing/integrations/sage_pay_form/helper.rb

@@ -0,0 +1,136 @@
+require 'uri'
+
+module ActiveMerchant #:nodoc:
+  module Billing #:nodoc:
+    module Integrations #:nodoc:
+      module SagePayForm
+        class Helper < ActiveMerchant::Billing::Integrations::Helper
+          include Encryption
+
+          mapping :credential2, 'EncryptKey'
+
+          mapping :account, 'Vendor'
+          mapping :amount, 'Amount'
+          mapping :currency, 'Currency'
+
+          mapping :order, 'VendorTxCode'
+
+          mapping :customer,
+            :first_name => 'BillingFirstnames',
+            :last_name  => 'BillingSurname',
+            :email      => 'CustomerEMail',
+            :phone      => 'BillingPhone',
+            :send_email_confirmation => 'SendEmail'
+
+          mapping :billing_address,
+            :city     => 'BillingCity',
+            :address1 => 'BillingAddress1',
+            :address2 => 'BillingAddress2',
+            :state    => 'BillingState',
+            :zip      => 'BillingPostCode',
+            :country  => 'BillingCountry'
+
+          mapping :shipping_address,
+            :city     => 'DeliveryCity',
+            :address1 => 'DeliveryAddress1',
+            :address2 => 'DeliveryAddress2',
+            :state    => 'DeliveryState',
+            :zip      => 'DeliveryPostCode',
+            :country  => 'DeliveryCountry'
+
+          mapping :return_url, 'SuccessURL'
+          mapping :description, 'Description'
+
+          class_attribute :referrer_id
+
+          def shipping_address(params = {})
+            @shipping_address_set = true unless params.empty?
+
+            params.each do |k, v|
+              field = mappings[:shipping_address][k]
+              add_field(field, v) unless field.nil?
+            end
+          end
+
+          def map_billing_address_to_shipping_address
+            %w(City Address1 Address2 State PostCode Country).each do |field|
+              fields["Delivery#{field}"] = fields["Billing#{field}"]
+            end
+          end
+
+          def form_fields
+            map_billing_address_to_shipping_address unless @shipping_address_set
+
+            fields['DeliveryFirstnames'] ||= fields['BillingFirstnames']
+            fields['DeliverySurname']    ||= fields['BillingSurname']
+
+            fields['FailureURL'] ||= fields['SuccessURL']
+
+            fields['BillingPostCode'] ||= "0000"
+            fields['DeliveryPostCode'] ||= "0000"
+
+            crypt_skip = ['Vendor', 'EncryptKey', 'SendEmail']
+            crypt_skip << 'BillingState'  unless fields['BillingCountry']  == 'US'
+            crypt_skip << 'DeliveryState' unless fields['DeliveryCountry'] == 'US'
+            crypt_skip << 'CustomerEMail' unless fields['SendEmail']
+            key = fields['EncryptKey']
+            @crypt ||= create_crypt_field(fields.except(*crypt_skip), key)
+
+            result = {
+              'VPSProtocol' => '2.23',
+              'TxType' => 'PAYMENT',
+              'Vendor' => @fields['Vendor'],
+              'Crypt'  => @crypt
+            }
+            result['ReferrerID'] = referrer_id if referrer_id
+            result
+          end
+
+          private
+
+          def create_crypt_field(fields, key)
+            parts = fields.map { |k, v| "#{k}=#{sanitize(k, v)}" unless v.nil? }.compact.shuffle
+            parts.unshift(sage_encrypt_salt(key.length, key.length * 2))
+            sage_encrypt(parts.join('&'), key)
+          end
+
+          def sanitize(key, value)
+            reject = exact = nil
+
+            case key
+            when /URL$/
+              # allow all
+            when 'VendorTxCode'
+              reject = /[^A-Za-z0-9{}._-]+/
+            when /[Nn]ames?$/
+              reject = %r{[^[:alpha:] /\\.'-]+}
+            when /(?:Address[12]|City)$/
+              reject = %r{[^[:alnum:] +'/\\:,.\n()-]+}
+            when /PostCode$/
+              reject = /[^A-Za-z0-9 -]+/
+            when /Phone$/
+              reject = /[^0-9A-Za-z+ ()-]+/
+            when 'Currency'
+              exact = /^[A-Z]{3}$/
+            when /State$/
+              exact = /^[A-Z]{2}$/
+            when 'Description'
+              value = value[0...100]
+            else
+              reject = /&+/
+            end
+
+            if exact
+              raise ArgumentError, "Invalid value for #{key}: #{value.inspect}" unless value =~ exact
+              value
+            elsif reject
+              value.gsub(reject, ' ')
+            else
+              value
+            end
+          end
+        end
+      end
+    end
+  end
+end