wajub 1.1.1 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 065a6a595ab1ec1a3b899d9bf6412b39ef6e11ba8e08474cc24b2c13543f07a4
-  data.tar.gz: a9264472d89dc373cbc34d5b7dbf2e885e4f9fb5ad72508eac2e9f4db79f6888
+  metadata.gz: 3a5524dcd4b29eab3e66cc9c5fb1890324ee8fa4b7b090f1117d4feb4492dee7
+  data.tar.gz: a863c218296f0ed42c0b89198b612519ad3ec85589829b189aaad40564f3ef98
 SHA512:
-  metadata.gz: eb98449ce3edf764a6715886e32065db1723baafc9c2ce7e719eccd6c405830ad9662dc3054a8c7ec92b7c77a750915c8fdd51bdec176791b542c5622079e6cf
-  data.tar.gz: c49b5d28a9331dc063e8a6bcac9d04bb2ba0a02a71d0e88af29031b41840745e8a4575af0eecf89543c7e8c9d4001e61ca5201f7836ad17049523d414fceb327
+  metadata.gz: 92e45ed29b1f73f55eb0d43bd4bf2933ae744a622605f028fc017efc7af842f2462bd9e0d3aafa8c84bc54f6ce03da1d8dc1c15c5c205e6052effe1a9ed9603b
+  data.tar.gz: 4decf56f623ce500d86109d640608620c654c862f3bfdf948f2587e7c6aa7bb4dcb1ddf2dddbf80a9fbc49300a4ab0a383fb8866d800894dc76edbc60ccd1d60

data/CHANGELOG.md

@@ -0,0 +1,51 @@
+# Changelog
+
+All notable changes to the `wajub` gem are documented in this file.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+`wajub` uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+---
+
+## [1.3.0] — 2026-10-12
+
+1.2.1 was never published to RubyGems: its changes ship in this release.
+
+### Added
+- The tax and Shield methods the other server SDKs already had, with the
+  same paths and the same results as the Python SDK:
+  - `tax.reports`, `tax.list_codes`, `tax.retrieve_code`, `tax.jurisdictions`,
+    `tax.thresholds` and `tax.threshold_alerts`;
+  - `tax.list_registrations` (a page), `tax.create_registration`,
+    `tax.retrieve_registration`, `tax.update_registration` and
+    `tax.delete_registration`;
+  - `shield.list_blocklist`, `shield.add_to_blocklist` and
+    `shield.remove_from_blocklist`.
+
+  The README listed them, and calling one raised `NoMethodError`.
+
+### Fixed
+- `customers.delete_tax_id` called `DELETE /customers/%2Fcustomers%2F…` and
+  answered `404`: the nested path went through the resource's own `delete`,
+  which takes an id and encodes it as one path segment. It now calls
+  `DELETE /customers/{id}/tax_ids/{tax_id}`.
+- `webhooks.construct_event` with a missing `X-Wajub-Signature` or
+  `X-Wajub-Timestamp` header (`nil`) raised `NoMethodError`, which a handler
+  rescuing `WebhookSignatureVerificationError` let through as a 500. It now
+  raises `WebhookSignatureVerificationError`, as does a timestamp that is not a
+  number.
+
+### Changed
+- **The `409` for an `Idempotency-Key` still being processed is retried.** A
+  call sent again after a timeout can reach the API while the first one is still
+  running; the API answers `409` with `errors.idempotency_key`. The client now
+  waits 2 then 4 seconds and asks again with the same key, within its usual 2
+  retries, and returns the first request's result. Every other `409` is still
+  raised at once.
+
+## [1.2.0] — 2026-10-01
+
+Tagged, never published to RubyGems. Its one change ships with 1.3.0.
+
+### Removed
+- `payments.initialize_payment`, an alias of `payments.create`. Call `create`.

data/README.md

@@ -30,7 +30,7 @@ Use **[Wajub.js](https://docs.wajub.com/libraries/components/js)** for embedded
 Add to your Gemfile:
 
 ```ruby
-gem 'wajub', '~> 1.1'
+gem 'wajub', '~> 1.3'
 ```
 
 Or install directly:
@@ -99,7 +99,7 @@ class WebhooksController < ApplicationController
       request.headers['X-Wajub-Timestamp']
     )
 
-    case event['type']
+    case event['event']
     when 'payment.succeeded'
       # fulfill order
     end
@@ -125,7 +125,7 @@ Test mode is selected by your API key prefix (`sk_test.…`), not by the API URL
 | Property | Methods |
 |----------|---------|
 | `client.global` | `ping`, `channels`, `countries`, `currencies` |
-| `client.payments` | `create`, `initialize_payment`, `retrieve`, `list`, `cancel`, `process`, `process_split`, `list_refunds` |
+| `client.payments` | `create`, `retrieve`, `list`, `cancel`, `process`, `process_split`, `list_refunds` |
 | `client.customers` | `create`, `retrieve`, `update`, `delete`, `list`, `block`, `unblock`, `activate`, `deactivate`, `list_tax_ids`, `create_tax_id`, `delete_tax_id` |
 | `client.refunds` | `create`, `retrieve`, `list` |
 | `client.transfers` | `create`, `retrieve`, `list` |
@@ -162,7 +162,7 @@ rescue Wajub::WebhookSignatureVerificationError
   halt 400
 end
 
-case event['type']
+case event['event']
 when 'payment.succeeded'
   # fulfill order
 end

data/lib/wajub/http/base_client.rb

@@ -89,6 +89,14 @@ module Wajub
           next
         end
 
+        # The same key still being processed: the first request's answer is
+        # coming. Asked again with the same key, the API returns it.
+        if idempotency_key && RetryPolicy.idempotency_key_in_progress?(status, data) && attempt < RetryPolicy.max_retries
+          attempt += 1
+          sleep RetryPolicy.idempotency_conflict_delay_seconds(attempt)
+          next
+        end
+
         retry_after = response.dig(:headers, 'retry-after')&.to_i
         raise Errors.from_response(status, data, retry_after: retry_after)
       end

data/lib/wajub/http/retry_policy.rb

@@ -15,6 +15,20 @@ module Wajub
       MAX_RETRIES
     end
 
+    # The 409 the API answers while a request with the same Idempotency-Key is
+    # still running (errors.idempotency_key). A call sent again after a timeout
+    # can arrive before the first has finished: its answer is on the way, so the
+    # call is worth repeating with the same key. Every other 409 is a refusal.
+    def idempotency_key_in_progress?(status, body)
+      status == 409 && body.is_a?(Hash) && body['errors'].is_a?(Hash) && body['errors'].key?('idempotency_key')
+    end
+
+    # The pause before asking again about a key still being processed:
+    # 2, 4, then 8 seconds.
+    def idempotency_conflict_delay_seconds(attempt)
+      2**[attempt, 1].max
+    end
+
     def delay_seconds(attempt, response: nil)
       header = response&.[]('retry-after')&.strip
       if header && !header.empty?

data/lib/wajub/resources.rb

@@ -41,10 +41,6 @@ module Wajub
       to_payment_object(post('/payments', params, options))
     end
 
-    def initialize_payment(params, options = nil)
-      create(params, options)
-    end
-
     def retrieve(id)
       res = get("/payments/#{URI.encode_www_form_component(id)}")
       to_payment_object('transaction' => HttpUtils.pick_resource(res, 'transaction'))
@@ -159,7 +155,9 @@ module Wajub
     end
 
     def delete_tax_id(customer_id, tax_id, options = nil)
-      delete("/customers/#{URI.encode_www_form_component(customer_id)}/tax_ids/#{URI.encode_www_form_component(tax_id)}", options)
+      # Not `delete`: on a CrudResource that one takes an id and encodes it as a path segment.
+      path = "/customers/#{URI.encode_www_form_component(customer_id)}/tax_ids/#{URI.encode_www_form_component(tax_id)}"
+      request('DELETE', path, options: options)
     end
   end
 
@@ -254,6 +252,55 @@ module Wajub
     def calculate(params, options = nil)
       HttpUtils.pick_resource(post('/tax/calculate', params, options), 'tax', 'calculation')
     end
+
+    def reports(params = nil)
+      list = HttpUtils.pick_list(get('/tax/reports', params), 'reports', 'tax_reports')
+      [list[:data], list[:meta]]
+    end
+
+    def list_codes(params = nil)
+      list = HttpUtils.pick_list(get('/tax/codes', params), 'tax_codes', 'codes')
+      [list[:data], list[:meta]]
+    end
+
+    def retrieve_code(code)
+      HttpUtils.pick_resource(get("/tax/codes/#{URI.encode_www_form_component(code)}"), 'tax_code', 'code')
+    end
+
+    def list_registrations(params = nil)
+      PagedResult.create(self, '/tax/registrations', 'registrations', params)
+    end
+
+    def create_registration(params, options = nil)
+      HttpUtils.pick_resource(post('/tax/registrations', params, options), 'registration', 'tax_registration')
+    end
+
+    def retrieve_registration(id)
+      HttpUtils.pick_resource(get("/tax/registrations/#{URI.encode_www_form_component(id)}"), 'registration', 'tax_registration')
+    end
+
+    def update_registration(id, params, options = nil)
+      HttpUtils.pick_resource(put("/tax/registrations/#{URI.encode_www_form_component(id)}", params, options), 'registration', 'tax_registration')
+    end
+
+    def delete_registration(id, options = nil)
+      request('DELETE', "/tax/registrations/#{URI.encode_www_form_component(id)}", options: options)
+    end
+
+    def jurisdictions(params = nil)
+      list = HttpUtils.pick_list(get('/tax/jurisdictions', params), 'jurisdictions', 'tax_jurisdictions')
+      [list[:data], list[:meta]]
+    end
+
+    def thresholds(params = nil)
+      list = HttpUtils.pick_list(get('/tax/thresholds', params), 'thresholds', 'tax_thresholds')
+      [list[:data], list[:meta]]
+    end
+
+    def threshold_alerts(params = nil)
+      list = HttpUtils.pick_list(get('/tax/thresholds/alerts', params), 'alerts', 'threshold_alerts')
+      [list[:data], list[:meta]]
+    end
   end
 
   class ShieldResource < BaseClient
@@ -268,6 +315,19 @@ module Wajub
     def stats(params = nil)
       HttpUtils.pick_resource(get('/shield/stats', params), 'shield', 'stats')
     end
+
+    def list_blocklist(params = nil)
+      list = HttpUtils.pick_list(get('/shield/blocklist', params), 'blocklist', 'entries')
+      [list[:data], list[:meta]]
+    end
+
+    def add_to_blocklist(params, options = nil)
+      HttpUtils.pick_resource(post('/shield/blocklist', params, options), 'blocklist', 'entry')
+    end
+
+    def remove_from_blocklist(id, options = nil)
+      request('DELETE', "/shield/blocklist/#{URI.encode_www_form_component(id)}", options: options)
+    end
   end
 
   class ListenResource < BaseClient

data/lib/wajub/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
 module Wajub
-  VERSION = '1.1.1'
+  VERSION = '1.3.0'
   API_URL = 'https://api.wajub.com'
 end

data/lib/wajub/webhooks.rb

@@ -15,8 +15,13 @@ module Wajub
       @secret = secret.to_s
     end
 
+    # A missing signature or timestamp header (nil, as request.headers returns
+    # it) raises WebhookSignatureVerificationError, like a wrong one.
     def construct_event(payload, signature, timestamp, tolerance = DEFAULT_TOLERANCE)
       raise ArgumentError, 'Wajub: webhook_secret is required for construct_event' if @secret.empty?
+      if signature.to_s.empty? || timestamp.to_s.empty?
+        raise WebhookSignatureVerificationError, 'Missing X-Wajub-Signature or X-Wajub-Timestamp header.'
+      end
       raise WebhookSignatureVerificationError, 'Invalid webhook signature format. Expected v1={hash}.' unless signature.start_with?('v1=')
       raise ArgumentError, 'Wajub: payload must be the raw request body as a String, not a parsed object' unless payload.is_a?(String)
 
@@ -26,8 +31,8 @@ module Wajub
 
       raise WebhookSignatureVerificationError, 'Webhook signature verification failed.' unless Crypto.timing_safe_equal(expected, received)
 
-      ts = Float(timestamp)
-      raise WebhookSignatureVerificationError, 'Invalid webhook timestamp.' unless ts.finite?
+      ts = Float(timestamp, exception: false)
+      raise WebhookSignatureVerificationError, 'Invalid webhook timestamp.' unless ts&.finite?
 
       drift = (Time.now.to_i - ts).abs
       if tolerance.positive? && drift > tolerance

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: wajub
 version: !ruby/object:Gem::Version
-  version: 1.1.1
+  version: 1.3.0
 platform: ruby
 authors:
 - Wajub
@@ -16,6 +16,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - LICENSE
 - README.md
 - lib/wajub.rb
@@ -37,6 +38,7 @@ licenses:
 metadata:
   homepage_uri: https://docs.wajub.com/libraries/sdks/ruby
   source_code_uri: https://github.com/wajubhq/wajub-ruby
+  changelog_uri: https://github.com/wajubhq/wajub-ruby/blob/main/CHANGELOG.md
 rdoc_options: []
 require_paths:
 - lib
@@ -51,7 +53,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.17
+rubygems_version: 4.0.21
 specification_version: 4
 summary: Official Wajub Ruby SDK
 test_files: []