@mohasinac/payment-razorpay 0.1.0

package/dist/index.cjs

@@ -0,0 +1,141 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  RazorpayProvider: () => RazorpayProvider,
+  paiseToRupees: () => paiseToRupees,
+  rupeesToPaise: () => rupeesToPaise,
+  verifyPaymentSignature: () => verifyPaymentSignature
+});
+module.exports = __toCommonJS(index_exports);
+var import_razorpay = __toESM(require("razorpay"), 1);
+var import_crypto = require("crypto");
+var RazorpayProvider = class {
+  constructor(config) {
+    this.razorpay = new import_razorpay.default({
+      key_id: config.keyId,
+      key_secret: config.keySecret
+    });
+    this.webhookSecret = config.webhookSecret;
+  }
+  async createOrder(amount, currency = "INR", metadata) {
+    var _a;
+    const order = await this.razorpay.orders.create({
+      amount,
+      currency,
+      notes: metadata
+    });
+    return {
+      id: String(order.id),
+      amount: Number(order.amount),
+      currency: String(order.currency),
+      status: "created",
+      receipt: (_a = order.receipt) != null ? _a : void 0,
+      metadata,
+      createdAt: new Date(Number(order.created_at) * 1e3).toISOString()
+    };
+  }
+  /**
+   * Verify Razorpay webhook signature (HMAC-SHA256 over raw body).
+   * Requires webhookSecret to be set in the constructor.
+   */
+  verifyWebhook(payload, signature) {
+    if (!this.webhookSecret) return false;
+    const expected = (0, import_crypto.createHmac)("sha256", this.webhookSecret).update(payload).digest("hex");
+    if (signature.length !== 64 || expected.length !== 64) return false;
+    return (0, import_crypto.timingSafeEqual)(
+      Buffer.from(expected, "hex"),
+      Buffer.from(signature, "hex")
+    );
+  }
+  async capturePayment(paymentId) {
+    var _a;
+    const payment = await this.razorpay.payments.fetch(paymentId);
+    return {
+      id: String(payment.id),
+      orderId: String((_a = payment.order_id) != null ? _a : ""),
+      amount: Number(payment.amount),
+      currency: String(payment.currency),
+      status: payment.status === "captured" ? "captured" : "failed",
+      capturedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+  }
+  async refund(paymentId, amount) {
+    const refundData = {};
+    if (amount !== void 0) refundData.amount = amount;
+    const result = await this.razorpay.payments.refund(
+      paymentId,
+      refundData
+    );
+    return {
+      id: String(result.id),
+      paymentId,
+      amount: Number(result.amount),
+      currency: String(result.currency),
+      status: result.status === "processed" ? "processed" : "pending",
+      createdAt: new Date(Number(result.created_at) * 1e3).toISOString()
+    };
+  }
+  async getOrder(orderId) {
+    var _a;
+    const order = await this.razorpay.orders.fetch(orderId);
+    return {
+      id: String(order.id),
+      amount: Number(order.amount),
+      currency: String(order.currency),
+      status: "created",
+      receipt: (_a = order.receipt) != null ? _a : void 0,
+      createdAt: new Date(Number(order.created_at) * 1e3).toISOString()
+    };
+  }
+};
+function rupeesToPaise(rupees) {
+  return Math.round(rupees * 100);
+}
+function paiseToRupees(paise) {
+  return paise / 100;
+}
+function verifyPaymentSignature(params, keySecret) {
+  if (!keySecret) return false;
+  const expected = (0, import_crypto.createHmac)("sha256", keySecret).update(`${params.razorpay_order_id}|${params.razorpay_payment_id}`).digest("hex");
+  if (params.razorpay_signature.length !== 64) return false;
+  return (0, import_crypto.timingSafeEqual)(
+    Buffer.from(expected, "hex"),
+    Buffer.from(params.razorpay_signature, "hex")
+  );
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  RazorpayProvider,
+  paiseToRupees,
+  rupeesToPaise,
+  verifyPaymentSignature
+});

package/dist/index.d.cts

@@ -0,0 +1,58 @@
+import { IPaymentProvider, PaymentOrder, PaymentCapture, Refund } from '@mohasinac/contracts';
+
+/**
+ * @mohasinac/payment-razorpay — Razorpay IPaymentProvider implementation
+ *
+ * Implements the @mohasinac/contracts IPaymentProvider interface.
+ * Accepts credentials via constructor — no Firestore or DB dependency.
+ *
+ * @example
+ * ```ts
+ * import { RazorpayProvider } from "@mohasinac/payment-razorpay";
+ * import { registerProviders } from "@mohasinac/contracts";
+ *
+ * registerProviders({
+ *   payment: new RazorpayProvider({
+ *     keyId: process.env.RAZORPAY_KEY_ID!,
+ *     keySecret: process.env.RAZORPAY_KEY_SECRET!,
+ *     webhookSecret: process.env.RAZORPAY_WEBHOOK_SECRET,
+ *   }),
+ * });
+ * ```
+ */
+
+interface RazorpayConfig {
+    keyId: string;
+    keySecret: string;
+    webhookSecret?: string;
+}
+declare class RazorpayProvider implements IPaymentProvider {
+    private readonly razorpay;
+    private readonly webhookSecret?;
+    constructor(config: RazorpayConfig);
+    createOrder(amount: number, currency?: string, metadata?: Record<string, unknown>): Promise<PaymentOrder>;
+    /**
+     * Verify Razorpay webhook signature (HMAC-SHA256 over raw body).
+     * Requires webhookSecret to be set in the constructor.
+     */
+    verifyWebhook(payload: string, signature: string): boolean;
+    capturePayment(paymentId: string): Promise<PaymentCapture>;
+    refund(paymentId: string, amount?: number): Promise<Refund>;
+    getOrder(orderId: string): Promise<PaymentOrder>;
+}
+/** Convert rupees (float) → paise (integer) for Razorpay amount field */
+declare function rupeesToPaise(rupees: number): number;
+/** Convert paise (integer) → rupees (float) */
+declare function paiseToRupees(paise: number): number;
+interface RazorpayPaymentResult {
+    razorpay_order_id: string;
+    razorpay_payment_id: string;
+    razorpay_signature: string;
+}
+/**
+ * Verify Razorpay payment signature.
+ * Uses HMAC-SHA256 over `{orderId}|{paymentId}` with the key secret.
+ */
+declare function verifyPaymentSignature(params: RazorpayPaymentResult, keySecret: string): boolean;
+
+export { type RazorpayConfig, type RazorpayPaymentResult, RazorpayProvider, paiseToRupees, rupeesToPaise, verifyPaymentSignature };

package/dist/index.d.ts

@@ -0,0 +1,58 @@
+import { IPaymentProvider, PaymentOrder, PaymentCapture, Refund } from '@mohasinac/contracts';
+
+/**
+ * @mohasinac/payment-razorpay — Razorpay IPaymentProvider implementation
+ *
+ * Implements the @mohasinac/contracts IPaymentProvider interface.
+ * Accepts credentials via constructor — no Firestore or DB dependency.
+ *
+ * @example
+ * ```ts
+ * import { RazorpayProvider } from "@mohasinac/payment-razorpay";
+ * import { registerProviders } from "@mohasinac/contracts";
+ *
+ * registerProviders({
+ *   payment: new RazorpayProvider({
+ *     keyId: process.env.RAZORPAY_KEY_ID!,
+ *     keySecret: process.env.RAZORPAY_KEY_SECRET!,
+ *     webhookSecret: process.env.RAZORPAY_WEBHOOK_SECRET,
+ *   }),
+ * });
+ * ```
+ */
+
+interface RazorpayConfig {
+    keyId: string;
+    keySecret: string;
+    webhookSecret?: string;
+}
+declare class RazorpayProvider implements IPaymentProvider {
+    private readonly razorpay;
+    private readonly webhookSecret?;
+    constructor(config: RazorpayConfig);
+    createOrder(amount: number, currency?: string, metadata?: Record<string, unknown>): Promise<PaymentOrder>;
+    /**
+     * Verify Razorpay webhook signature (HMAC-SHA256 over raw body).
+     * Requires webhookSecret to be set in the constructor.
+     */
+    verifyWebhook(payload: string, signature: string): boolean;
+    capturePayment(paymentId: string): Promise<PaymentCapture>;
+    refund(paymentId: string, amount?: number): Promise<Refund>;
+    getOrder(orderId: string): Promise<PaymentOrder>;
+}
+/** Convert rupees (float) → paise (integer) for Razorpay amount field */
+declare function rupeesToPaise(rupees: number): number;
+/** Convert paise (integer) → rupees (float) */
+declare function paiseToRupees(paise: number): number;
+interface RazorpayPaymentResult {
+    razorpay_order_id: string;
+    razorpay_payment_id: string;
+    razorpay_signature: string;
+}
+/**
+ * Verify Razorpay payment signature.
+ * Uses HMAC-SHA256 over `{orderId}|{paymentId}` with the key secret.
+ */
+declare function verifyPaymentSignature(params: RazorpayPaymentResult, keySecret: string): boolean;
+
+export { type RazorpayConfig, type RazorpayPaymentResult, RazorpayProvider, paiseToRupees, rupeesToPaise, verifyPaymentSignature };

package/dist/index.js

@@ -0,0 +1,103 @@
+// src/index.ts
+import Razorpay from "razorpay";
+import { createHmac, timingSafeEqual } from "crypto";
+var RazorpayProvider = class {
+  constructor(config) {
+    this.razorpay = new Razorpay({
+      key_id: config.keyId,
+      key_secret: config.keySecret
+    });
+    this.webhookSecret = config.webhookSecret;
+  }
+  async createOrder(amount, currency = "INR", metadata) {
+    var _a;
+    const order = await this.razorpay.orders.create({
+      amount,
+      currency,
+      notes: metadata
+    });
+    return {
+      id: String(order.id),
+      amount: Number(order.amount),
+      currency: String(order.currency),
+      status: "created",
+      receipt: (_a = order.receipt) != null ? _a : void 0,
+      metadata,
+      createdAt: new Date(Number(order.created_at) * 1e3).toISOString()
+    };
+  }
+  /**
+   * Verify Razorpay webhook signature (HMAC-SHA256 over raw body).
+   * Requires webhookSecret to be set in the constructor.
+   */
+  verifyWebhook(payload, signature) {
+    if (!this.webhookSecret) return false;
+    const expected = createHmac("sha256", this.webhookSecret).update(payload).digest("hex");
+    if (signature.length !== 64 || expected.length !== 64) return false;
+    return timingSafeEqual(
+      Buffer.from(expected, "hex"),
+      Buffer.from(signature, "hex")
+    );
+  }
+  async capturePayment(paymentId) {
+    var _a;
+    const payment = await this.razorpay.payments.fetch(paymentId);
+    return {
+      id: String(payment.id),
+      orderId: String((_a = payment.order_id) != null ? _a : ""),
+      amount: Number(payment.amount),
+      currency: String(payment.currency),
+      status: payment.status === "captured" ? "captured" : "failed",
+      capturedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+  }
+  async refund(paymentId, amount) {
+    const refundData = {};
+    if (amount !== void 0) refundData.amount = amount;
+    const result = await this.razorpay.payments.refund(
+      paymentId,
+      refundData
+    );
+    return {
+      id: String(result.id),
+      paymentId,
+      amount: Number(result.amount),
+      currency: String(result.currency),
+      status: result.status === "processed" ? "processed" : "pending",
+      createdAt: new Date(Number(result.created_at) * 1e3).toISOString()
+    };
+  }
+  async getOrder(orderId) {
+    var _a;
+    const order = await this.razorpay.orders.fetch(orderId);
+    return {
+      id: String(order.id),
+      amount: Number(order.amount),
+      currency: String(order.currency),
+      status: "created",
+      receipt: (_a = order.receipt) != null ? _a : void 0,
+      createdAt: new Date(Number(order.created_at) * 1e3).toISOString()
+    };
+  }
+};
+function rupeesToPaise(rupees) {
+  return Math.round(rupees * 100);
+}
+function paiseToRupees(paise) {
+  return paise / 100;
+}
+function verifyPaymentSignature(params, keySecret) {
+  if (!keySecret) return false;
+  const expected = createHmac("sha256", keySecret).update(`${params.razorpay_order_id}|${params.razorpay_payment_id}`).digest("hex");
+  if (params.razorpay_signature.length !== 64) return false;
+  return timingSafeEqual(
+    Buffer.from(expected, "hex"),
+    Buffer.from(params.razorpay_signature, "hex")
+  );
+}
+export {
+  RazorpayProvider,
+  paiseToRupees,
+  rupeesToPaise,
+  verifyPaymentSignature
+};

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@mohasinac/payment-razorpay",
+  "version": "0.1.0",
+  "private": false,
+  "publishConfig": { "access": "public" },
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": ["dist"],
+  "scripts": {
+    "build": "tsup src/index.ts --format esm,cjs --dts",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@mohasinac/contracts": "^1.1.0",
+    "@mohasinac/errors": "^1.1.0"
+  },
+  "peerDependencies": {
+    "razorpay": ">=2.9.0"
+  },
+  "devDependencies": {
+    "razorpay": "^2.9.6",
+    "tsup": "^8.5.0",
+    "typescript": "^5.9.3"
+  }
+}