@pixelpay/sdk-core 2.1.1 → 2.1.3-beta.0

package/CHANGELOG.md

@@ -5,9 +5,31 @@ El formato se basa en [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 y este proyecto se adhiere a [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 Tipos de cambios: `Added`, `Changed`, `Deprecated`, `Removed`, `Fixed`, `Security`.
 
+## [v2.1.3-beta.0] - 2023-08-16
+### Added
+- Se agregó campo de cuotas para autenticación con 3D Secure
+
+## [v2.1.2] - 2023-08-16
+### Added
+- Se omiten los métodos de encriptación si la petición no lo requiere
+
+### Changed
+- En caso de fallos, se hacen reintentos para adquirir la llave pública del comercio
+- En caso de fallos, se hacen reintentos para encriptar los datos de tarjeta
+
+### Fixed
+- Se corrigió caso donde reintentos de transacciones con una misma instancia de `RequestBehaviour` encripta datos múltiples veces
+- Se corrigió encriptación para transacciones de 3D Secure
+- Se arregló conflicto de encriptación al reutilizar instancias de `RequestBehaviour`
+- Se arregló servicios de tokenización enviando fecha de expiración incorrecta si no se llenan los campos
+
 ## [v2.1.1] - 2023-08-09
+### Changed
+- Rollback temporal a v2.0.6
+
+## [v2.1.0] - 2023-07-18
 ### Added
-- Rollback a versión de SDK sin encriptación
+- Se agregó encriptación de datos de tarjeta.
 
 ## [v2.0.6] - 2023-06-09
 ### Added

package/lib/base/Helpers.d.ts

@@ -1,3 +1,4 @@
+import nacl from 'tweetnacl';
 declare const _default: {
     /**
      * Serialize object to JSON string without empties
@@ -5,7 +6,7 @@ declare const _default: {
      * @param value
      * @return
      */
-    objectToJson(value: any): string;
+    objectToJson(value: any, ignore?: string[]): string;
     /**
      * Helper to hash object by algorithm
      *
@@ -35,6 +36,21 @@ declare const _default: {
      * @return
      */
     parseAmount(amount: number | null | undefined): string | null;
+    /**
+     * Generate encryption key pair
+     *
+     * @return
+     */
+    getKeyPair(): nacl.BoxKeyPair;
+    /**
+     * Encrypt message, returns encrypted value concatenated with base64 nonce.
+     *
+     * @param message
+     * @param publicKey
+     * @param keyPair
+     * @return
+     */
+    encrypt(message: string | null, publicKey: string | null, keyPair: nacl.BoxKeyPair): string | null;
     /**
      * Verify if environment is a Browser
      */

package/lib/base/Helpers.js

@@ -10,7 +10,12 @@ var __assign = (this && this.__assign) || function () {
     };
     return __assign.apply(this, arguments);
 };
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+var tweetnacl_1 = __importDefault(require("tweetnacl"));
+var tweetnacl_util_1 = __importDefault(require("tweetnacl-util"));
 var crypto_js_1 = require("crypto-js");
 exports.default = {
     /**
@@ -19,10 +24,11 @@ exports.default = {
      * @param value
      * @return
      */
-    objectToJson: function (value) {
+    objectToJson: function (value, ignore) {
+        if (ignore === void 0) { ignore = []; }
         var filtered = __assign({}, value);
         for (var propName in filtered) {
-            if (filtered[propName] === null || filtered[propName] === undefined) {
+            if (filtered[propName] === null || filtered[propName] === undefined || ignore.includes(propName)) {
                 delete filtered[propName];
             }
         }
@@ -37,12 +43,12 @@ exports.default = {
      */
     hash: function (algorithm, value) {
         switch (algorithm) {
-            case "MD5":
+            case 'MD5':
                 return (0, crypto_js_1.MD5)(value).toString();
-            case "SHA-512":
+            case 'SHA-512':
                 return (0, crypto_js_1.SHA512)(value).toString();
             default:
-                return "";
+                return '';
         }
     },
     /**
@@ -81,11 +87,42 @@ exports.default = {
         }
         return null;
     },
+    /**
+     * Generate encryption key pair
+     *
+     * @return
+     */
+    getKeyPair: function () {
+        return tweetnacl_1.default.box.keyPair();
+    },
+    /**
+     * Encrypt message, returns encrypted value concatenated with base64 nonce.
+     *
+     * @param message
+     * @param publicKey
+     * @param keyPair
+     * @return
+     */
+    encrypt: function (message, publicKey, keyPair) {
+        if (!message) {
+            return null;
+        }
+        if (message.includes('|')) {
+            return message;
+        }
+        var nonce = tweetnacl_1.default.randomBytes(24);
+        var merchantPublicKey = tweetnacl_util_1.default.decodeBase64(publicKey);
+        var sharedKey = tweetnacl_1.default.box.before(merchantPublicKey, keyPair.secretKey);
+        var box = tweetnacl_1.default.box.after(tweetnacl_util_1.default.decodeUTF8(message), nonce, sharedKey);
+        var boxb64 = tweetnacl_util_1.default.encodeBase64(box);
+        var nonceb64 = tweetnacl_util_1.default.encodeBase64(nonce);
+        return "".concat(boxb64, "|").concat(nonceb64);
+    },
     /**
      * Verify if environment is a Browser
      */
     checkIsBrowser: function () {
-        return typeof window !== "undefined" && typeof window.document !== "undefined";
+        return typeof window !== 'undefined' && typeof window.document !== 'undefined';
     },
     /**
      * Append website script and load
@@ -95,11 +132,11 @@ exports.default = {
     addScriptToWebsite: function (src) {
         return new Promise(function (resolve, reject) {
             var id = (0, crypto_js_1.MD5)(src).toString();
-            var script = document.createElement("script");
+            var script = document.createElement('script');
             if (!document.querySelector("script[id=\"".concat(id, "\"]"))) {
                 script.id = id;
                 script.src = src;
-                script.type = "text/javascript";
+                script.type = 'text/javascript';
                 script.onload = resolve;
                 script.onerror = reject;
                 document.body.appendChild(script);

package/lib/base/Helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"Helpers.js","sourceRoot":"","sources":["../../src/base/Helpers.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,uCAAwC;AAExC,kBAAe;IACd;;;;;OAKG;IACH,YAAY,YAAC,KAAU;QACtB,IAAM,QAAQ,gBAAQ,KAAK,CAAE,CAAC;QAE9B,KAAK,IAAI,QAAQ,IAAI,QAAQ,EAAE;YAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE;gBACpE,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;aAC1B;SACD;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,YAAC,SAAiB,EAAE,KAAa;QACpC,QAAQ,SAAS,EAAE;YAClB,KAAK,KAAK;gBACT,OAAO,IAAA,eAAG,EAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;YAE9B,KAAK,SAAS;gBACb,OAAO,IAAA,kBAAM,EAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;YAEjC;gBACC,OAAO,EAAE,CAAC;SACX;IACF,CAAC;IAED;;;;;OAKG;IACH,SAAS,YAAC,KAAgC;QACzC,IAAI,KAAK,EAAE;YACV,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;SACpB;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,WAAW,YAAC,KAAgC;QAC3C,IAAI,KAAK,EAAE;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;SAChC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,WAAW,YAAC,MAAiC;QAC5C,IAAI,OAAO,MAAM,IAAI,QAAQ,IAAI,MAAM,GAAG,CAAC,EAAE;YAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;SACtB;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;OAEG;IACH,cAAc;QACb,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACH,kBAAkB,YAAC,GAAW;QAC7B,OAAO,IAAI,OAAO,CAAC,UAAC,OAAO,EAAE,MAAM;YAClC,IAAM,EAAE,GAAG,IAAA,eAAG,EAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC/B,IAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAEhD,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,sBAAc,EAAE,QAAI,CAAC,EAAE;gBAClD,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;gBACjB,MAAM,CAAC,IAAI,GAAG,iBAAiB,CAAC;gBAChC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;gBACxB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC;gBAExB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;aAClC;iBAAM;gBACN,OAAO,CAAC,IAAI,CAAC,CAAC;aACd;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,aAAa,YAAC,EAAU,EAAE,GAAW;QACpC,IAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,iBAAU,EAAE,CAAE,CAAC,CAAC;QAEnD,IAAI,EAAE,EAAE;YACP,OAAO;SACP;QAED,IAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,GAAG,iBAAU,EAAE,CAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QAErB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;CACD,CAAA"}
+{"version":3,"file":"Helpers.js","sourceRoot":"","sources":["../../src/base/Helpers.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAA6B;AAC7B,kEAAsC;AACtC,uCAAwC;AAExC,kBAAe;IACd;;;;;OAKG;IACH,YAAY,YAAC,KAAU,EAAE,MAAqB;QAArB,uBAAA,EAAA,WAAqB;QAC7C,IAAM,QAAQ,gBAAQ,KAAK,CAAE,CAAC;QAE9B,KAAK,IAAI,QAAQ,IAAI,QAAQ,EAAE;YAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACjG,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;aAC1B;SACD;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,YAAC,SAAiB,EAAE,KAAa;QACpC,QAAQ,SAAS,EAAE;YAClB,KAAK,KAAK;gBACT,OAAO,IAAA,eAAG,EAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;YAE9B,KAAK,SAAS;gBACb,OAAO,IAAA,kBAAM,EAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;YAEjC;gBACC,OAAO,EAAE,CAAC;SACX;IACF,CAAC;IAED;;;;;OAKG;IACH,SAAS,YAAC,KAAgC;QACzC,IAAI,KAAK,EAAE;YACV,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;SACpB;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,WAAW,YAAC,KAAgC;QAC3C,IAAI,KAAK,EAAE;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;SAChC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,WAAW,YAAC,MAAiC;QAC5C,IAAI,OAAO,MAAM,IAAI,QAAQ,IAAI,MAAM,GAAG,CAAC,EAAE;YAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;SACtB;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,UAAU;QACT,OAAO,mBAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,YAAC,OAAsB,EAAE,SAAwB,EAAE,OAAwB;QACjF,IAAI,CAAC,OAAO,EAAE;YACb,OAAO,IAAI,CAAC;SACZ;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;YAC1B,OAAO,OAAO,CAAC;SACf;QAED,IAAM,KAAK,GAAG,mBAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEnC,IAAM,iBAAiB,GAAG,wBAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAM,SAAS,GAAG,mBAAI,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAExE,IAAM,GAAG,GAAG,mBAAI,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAE3E,IAAM,MAAM,GAAG,wBAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAM,QAAQ,GAAG,wBAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAE9C,OAAO,UAAG,MAAM,cAAI,QAAQ,CAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,cAAc;QACb,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACH,kBAAkB,YAAC,GAAW;QAC7B,OAAO,IAAI,OAAO,CAAC,UAAC,OAAO,EAAE,MAAM;YAClC,IAAM,EAAE,GAAG,IAAA,eAAG,EAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC/B,IAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAEhD,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,sBAAc,EAAE,QAAI,CAAC,EAAE;gBAClD,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;gBACjB,MAAM,CAAC,IAAI,GAAG,iBAAiB,CAAC;gBAChC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;gBACxB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC;gBAExB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;aAClC;iBAAM;gBACN,OAAO,CAAC,IAAI,CAAC,CAAC;aACd;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,aAAa,YAAC,EAAU,EAAE,GAAW;QACpC,IAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,iBAAU,EAAE,CAAE,CAAC,CAAC;QAEnD,IAAI,EAAE,EAAE;YACP,OAAO;SACP;QAED,IAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,GAAG,iBAAU,EAAE,CAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QAErB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;CACD,CAAA"}

package/lib/base/RequestBehaviour.d.ts

@@ -1,3 +1,4 @@
+import nacl from 'tweetnacl';
 export default class RequestBehaviour {
     /**
      * Environment identifier (live|test|sandbox)
@@ -15,10 +16,33 @@ export default class RequestBehaviour {
      * SDK version
      */
     sdk_version: string;
+    /**
+     * For internal use to prevent encrypting same request instance twice
+     */
+    protected sdk_key_pair: nacl.BoxKeyPair;
     /**
      * Initialize request
      */
     constructor();
+    /**
+     * Get sdk_key_pair from current instance
+     *
+     * @return
+     */
+    getSDKKeyPair(): nacl.BoxKeyPair | null;
+    /**
+     * Check if current request needs encryption, must be overriden by inherited classes.
+     *
+     * @return
+     */
+    isEncryptable(): boolean;
+    /**
+     * Encrypt fields with sensitive data, must be overriden by inherited classes.
+     *
+     * @param publicKey
+     * @return
+     */
+    withEncryption(publicKey: string): string | null;
     /**
      * Serialize object to JSON string
      *

package/lib/base/RequestBehaviour.js

@@ -1,7 +1,10 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-var Helpers_1 = require("./Helpers");
-var version_1 = require("../version");
+var Helpers_1 = __importDefault(require("./Helpers"));
+var version_1 = __importDefault(require("../version"));
 var RequestBehaviour = /** @class */ (function () {
     /**
      * Initialize request
@@ -23,20 +26,49 @@ var RequestBehaviour = /** @class */ (function () {
          * SDK version
          */
         this.sdk_version = null;
+        /**
+         * For internal use to prevent encrypting same request instance twice
+         */
+        this.sdk_key_pair = null;
         this.lang = Intl.DateTimeFormat().resolvedOptions().locale;
-        this.from = "sdk-javascript";
+        this.from = 'sdk-javascript';
         this.sdk_version = version_1.default;
         if (this.lang != 'es' && this.lang != 'en') {
             this.lang = 'es';
         }
     }
+    /**
+     * Get sdk_key_pair from current instance
+     *
+     * @return
+     */
+    RequestBehaviour.prototype.getSDKKeyPair = function () {
+        return this.sdk_key_pair;
+    };
+    /**
+     * Check if current request needs encryption, must be overriden by inherited classes.
+     *
+     * @return
+     */
+    RequestBehaviour.prototype.isEncryptable = function () {
+        return false;
+    };
+    /**
+     * Encrypt fields with sensitive data, must be overriden by inherited classes.
+     *
+     * @param publicKey
+     * @return
+     */
+    RequestBehaviour.prototype.withEncryption = function (publicKey) {
+        return null;
+    };
     /**
      * Serialize object to JSON string
      *
      * @return
      */
     RequestBehaviour.prototype.toJson = function () {
-        return Helpers_1.default.objectToJson(this);
+        return Helpers_1.default.objectToJson(this, ['sdk_key_pair']);
     };
     return RequestBehaviour;
 }());

package/lib/base/RequestBehaviour.js.map

@@ -1 +1 @@
-{"version":3,"file":"RequestBehaviour.js","sourceRoot":"","sources":["../../src/base/RequestBehaviour.ts"],"names":[],"mappings":";;AAAA,qCAAgC;AAChC,sCAAiC;AAEjC;IAqBC;;OAEG;IACH;QAvBA;;WAEG;QACH,QAAG,GAAW,IAAI,CAAC;QAEnB;;WAEG;QACH,SAAI,GAAW,IAAI,CAAC;QAEpB;;WAEG;QACH,SAAI,GAAW,IAAI,CAAC;QAEpB;;WAEG;QACH,gBAAW,GAAW,IAAI,CAAC;QAM1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,iBAAO,CAAC;QAE3B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE;YAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;SACjB;IACF,CAAC;IAED;;;;OAIG;IACH,iCAAM,GAAN;QACC,OAAO,iBAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACF,uBAAC;AAAD,CAAC,AA1CD,IA0CC"}
+{"version":3,"file":"RequestBehaviour.js","sourceRoot":"","sources":["../../src/base/RequestBehaviour.ts"],"names":[],"mappings":";;;;;AACA,sDAAgC;AAChC,uDAAiC;AAEjC;IA0BC;;OAEG;IACH;QA5BA;;WAEG;QACH,QAAG,GAAW,IAAI,CAAC;QAEnB;;WAEG;QACH,SAAI,GAAW,IAAI,CAAC;QAEpB;;WAEG;QACH,SAAI,GAAW,IAAI,CAAC;QAEpB;;WAEG;QACH,gBAAW,GAAW,IAAI,CAAC;QAE3B;;WAEG;QACO,iBAAY,GAAoB,IAAI,CAAC;QAM9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,iBAAO,CAAC;QAE3B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE;YAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;SACjB;IACF,CAAC;IAED;;;;OAIG;IACH,wCAAa,GAAb;QACC,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,wCAAa,GAAb;QACC,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,yCAAc,GAAd,UAAe,SAAiB;QAC/B,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,iCAAM,GAAN;QACC,OAAO,iBAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IACrD,CAAC;IACF,uBAAC;AAAD,CAAC,AA3ED,IA2EC"}

package/lib/base/Response.js

@@ -1,6 +1,9 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-var Helpers_1 = require("./Helpers");
+var Helpers_1 = __importDefault(require("./Helpers"));
 var Response = /** @class */ (function () {
     function Response() {
         /**

package/lib/base/Response.js.map

@@ -1 +1 @@
-{"version":3,"file":"Response.js","sourceRoot":"","sources":["../../src/base/Response.ts"],"names":[],"mappings":";;AAAA,qCAAgC;AAEhC;IAAA;QAMC;;WAEG;QACH,WAAM,GAAW,IAAI,CAAC;QAOtB;;WAEG;QACH,YAAO,GAAY,KAAK,CAAC;QAEzB;;WAEG;QACH,YAAO,GAAW,IAAI,CAAC;QAEvB;;WAEG;QACH,SAAI,GAAQ,SAAS,CAAC;QAEtB;;WAEG;QACH,WAAM,GAAW,SAAS,CAAC;IA4D5B,CAAC;IA1DA;;;;OAIG;IACH,4BAAS,GAAT,UAAU,MAAc;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,4BAAS,GAAT;QACC,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACH,gCAAa,GAAb,UAAc,GAAW;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YACjB,OAAO,KAAK,CAAC;SACb;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,0BAAO,GAAP,UAAQ,GAAW;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACf,OAAO,IAAI,CAAC;SACZ;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE;YACnC,OAAO,IAAI,CAAC;SACZ;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,yBAAM,GAAN;QACC,OAAO,iBAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACF,eAAC;AAAD,CAAC,AA9FD,IA8FC"}
+{"version":3,"file":"Response.js","sourceRoot":"","sources":["../../src/base/Response.ts"],"names":[],"mappings":";;;;;AAAA,sDAAgC;AAEhC;IAAA;QAMC;;WAEG;QACH,WAAM,GAAW,IAAI,CAAC;QAOtB;;WAEG;QACH,YAAO,GAAY,KAAK,CAAC;QAEzB;;WAEG;QACH,YAAO,GAAW,IAAI,CAAC;QAEvB;;WAEG;QACH,SAAI,GAAQ,SAAS,CAAC;QAEtB;;WAEG;QACH,WAAM,GAAW,SAAS,CAAC;IA4D5B,CAAC;IA1DA;;;;OAIG;IACH,4BAAS,GAAT,UAAU,MAAc;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,4BAAS,GAAT;QACC,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACH,gCAAa,GAAb,UAAc,GAAW;QACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YACjB,OAAO,KAAK,CAAC;SACb;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,0BAAO,GAAP,UAAQ,GAAW;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACf,OAAO,IAAI,CAAC;SACZ;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE;YACnC,OAAO,IAAI,CAAC;SACZ;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,yBAAM,GAAN;QACC,OAAO,iBAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACF,eAAC;AAAD,CAAC,AA9FD,IA8FC"}

package/lib/base/ServiceBehaviour.d.ts

@@ -6,6 +6,10 @@ export default class ServiceBehaviour {
      * Settings service model
      */
     settings: Settings;
+    /**
+     * Public key from pair generated by current instance.
+     */
+    private sdk_public_key;
     /**
      * Initialize service
      */
@@ -33,6 +37,32 @@ export default class ServiceBehaviour {
      * @returns
      */
     private exceptionResponse;
+    /**
+     * Verify and set request encryption values
+     *
+     * @param request
+     */
+    private validateEncryption;
+    /**
+     * Resiliently fetch merchant public key, trying at least 3 times before failing
+     *
+     * @throws InvalidCredentialsException
+     */
+    private validateMerchantPublicKey;
+    /**
+     * Resiliently generate keys and encrypt request, trying at least 3 times before failing
+     *
+     * @param request
+     * @throws FailedEncryptionException
+     */
+    private validateSDKPublicKey;
+    /**
+     * Fetch merchant public key for encryption
+     *
+     * @return
+     * @throws InvalidCredentialsException
+     */
+    private fetchMerchantPublicKey;
     /**
      * Get API route
      *

package/lib/base/ServiceBehaviour.js

@@ -35,24 +35,30 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-var axios_1 = require("axios");
-var InvalidCredentialsException_1 = require("../exceptions/InvalidCredentialsException");
-var Response_1 = require("./Response");
-var ErrorResponse_1 = require("../responses/ErrorResponse");
-var FailureResponse_1 = require("../responses/FailureResponse");
-var InputErrorResponse_1 = require("../responses/InputErrorResponse");
-var NetworkFailureResponse_1 = require("../responses/NetworkFailureResponse");
-var NoAccessResponse_1 = require("../responses/NoAccessResponse");
-var NotFoundResponse_1 = require("../responses/NotFoundResponse");
-var PayloadResponse_1 = require("../responses/PayloadResponse");
-var PaymentDeclinedResponse_1 = require("../responses/PaymentDeclinedResponse");
-var PreconditionalResponse_1 = require("../responses/PreconditionalResponse");
-var SuccessResponse_1 = require("../responses/SuccessResponse");
-var TimeoutResponse_1 = require("../responses/TimeoutResponse");
+var axios_1 = __importDefault(require("axios"));
+var InvalidCredentialsException_1 = __importDefault(require("../exceptions/InvalidCredentialsException"));
+var FailedEncryptionException_1 = __importDefault(require("../exceptions/FailedEncryptionException"));
+var RequestBehaviour_1 = __importDefault(require("./RequestBehaviour"));
+var Response_1 = __importDefault(require("./Response"));
+var ErrorResponse_1 = __importDefault(require("../responses/ErrorResponse"));
+var FailureResponse_1 = __importDefault(require("../responses/FailureResponse"));
+var InputErrorResponse_1 = __importDefault(require("../responses/InputErrorResponse"));
+var NetworkFailureResponse_1 = __importDefault(require("../responses/NetworkFailureResponse"));
+var NoAccessResponse_1 = __importDefault(require("../responses/NoAccessResponse"));
+var NotFoundResponse_1 = __importDefault(require("../responses/NotFoundResponse"));
+var PayloadResponse_1 = __importDefault(require("../responses/PayloadResponse"));
+var PaymentDeclinedResponse_1 = __importDefault(require("../responses/PaymentDeclinedResponse"));
+var PreconditionalResponse_1 = __importDefault(require("../responses/PreconditionalResponse"));
+var SuccessResponse_1 = __importDefault(require("../responses/SuccessResponse"));
+var TimeoutResponse_1 = __importDefault(require("../responses/TimeoutResponse"));
 axios_1.default.defaults.validateStatus = function () {
     return true;
 };
+var PUBLIC_KEY_PATH = 'api/v2/merchant/public_key';
 var ServiceBehaviour = /** @class */ (function () {
     /**
      * Initialize service
@@ -69,7 +75,7 @@ var ServiceBehaviour = /** @class */ (function () {
      */
     ServiceBehaviour.prototype.buildRequest = function (url, transaction) {
         if (!this.settings.auth_key || !this.settings.auth_hash) {
-            throw new InvalidCredentialsException_1.default("The merchant credentials are not definied (key/hash).");
+            throw new InvalidCredentialsException_1.default('The merchant credentials are not definied (key/hash).');
         }
         if (this.settings.environment != null) {
             transaction.env = this.settings.environment;
@@ -84,7 +90,10 @@ var ServiceBehaviour = /** @class */ (function () {
             'x-auth-hash': this.settings.auth_hash,
         };
         if (this.settings.auth_user) {
-            headers["x-auth-user"] = this.settings.auth_user;
+            headers['x-auth-user'] = this.settings.auth_user;
+        }
+        if (this.sdk_public_key) {
+            headers['x-auth-secure'] = this.sdk_public_key;
         }
         return axios_1.default.create({
             baseURL: this.settings.endpoint,
@@ -163,6 +172,107 @@ var ServiceBehaviour = /** @class */ (function () {
         response.message = e.message;
         return response;
     };
+    /**
+     * Verify and set request encryption values
+     *
+     * @param request
+     */
+    ServiceBehaviour.prototype.validateEncryption = function (request) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (!request.isEncryptable()) {
+                            return [2 /*return*/];
+                        }
+                        return [4 /*yield*/, this.validateMerchantPublicKey()];
+                    case 1:
+                        _a.sent();
+                        this.validateSDKPublicKey(request);
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    /**
+     * Resiliently fetch merchant public key, trying at least 3 times before failing
+     *
+     * @throws InvalidCredentialsException
+     */
+    ServiceBehaviour.prototype.validateMerchantPublicKey = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            var tries, _a;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        tries = 0;
+                        _b.label = 1;
+                    case 1:
+                        if (!(!this.settings.public_key && tries < 3)) return [3 /*break*/, 3];
+                        _a = this.settings;
+                        return [4 /*yield*/, this.fetchMerchantPublicKey()];
+                    case 2:
+                        _a.public_key = _b.sent();
+                        tries++;
+                        return [3 /*break*/, 1];
+                    case 3:
+                        if (this.settings.public_key == null) {
+                            throw new InvalidCredentialsException_1.default('Could not obtain necessary credentials for transaction.');
+                        }
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    /**
+     * Resiliently generate keys and encrypt request, trying at least 3 times before failing
+     *
+     * @param request
+     * @throws FailedEncryptionException
+     */
+    ServiceBehaviour.prototype.validateSDKPublicKey = function (request) {
+        var tries = 0;
+        var lastError = null;
+        while (!this.sdk_public_key && tries < 3 || tries === 0) {
+            try {
+                this.sdk_public_key = request.withEncryption(this.settings.public_key);
+            }
+            catch (err) {
+                lastError = err;
+            }
+            finally {
+                tries++;
+            }
+        }
+        if (!this.sdk_public_key && lastError) {
+            throw lastError;
+        }
+        if (!this.sdk_public_key) {
+            throw new FailedEncryptionException_1.default('Could not process encryption, please try again.');
+        }
+    };
+    /**
+     * Fetch merchant public key for encryption
+     *
+     * @return
+     * @throws InvalidCredentialsException
+     */
+    ServiceBehaviour.prototype.fetchMerchantPublicKey = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            var response;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.get(PUBLIC_KEY_PATH, new RequestBehaviour_1.default())];
+                    case 1:
+                        response = _a.sent();
+                        if (response.success) {
+                            return [2 /*return*/, response.getData('public_key')];
+                        }
+                        return [2 /*return*/, null];
+                }
+            });
+        });
+    };
     /**
      * Get API route
      *
@@ -170,7 +280,7 @@ var ServiceBehaviour = /** @class */ (function () {
      * @return
      */
     ServiceBehaviour.prototype.getRoute = function (route) {
-        return this.settings.endpoint + "/" + route;
+        return this.settings.endpoint + '/' + route;
     };
     /**
      * API POST request
@@ -186,15 +296,18 @@ var ServiceBehaviour = /** @class */ (function () {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this.buildRequest(url, body).post(url, JSON.parse(body.toJson()))];
+                        _a.trys.push([0, 3, , 4]);
+                        return [4 /*yield*/, this.validateEncryption(body)];
                     case 1:
+                        _a.sent();
+                        return [4 /*yield*/, this.buildRequest(url, body).post(url, JSON.parse(body.toJson()))];
+                    case 2:
                         response = _a.sent();
                         return [2 /*return*/, this.parseResponse(response.data, response.status)];
-                    case 2:
+                    case 3:
                         e_1 = _a.sent();
                         return [2 /*return*/, this.exceptionResponse(e_1)];
-                    case 3: return [2 /*return*/];
+                    case 4: return [2 /*return*/];
                 }
             });
         });
@@ -213,15 +326,18 @@ var ServiceBehaviour = /** @class */ (function () {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this.buildRequest(url, body).put(url, JSON.parse(body.toJson()))];
+                        _a.trys.push([0, 3, , 4]);
+                        return [4 /*yield*/, this.validateEncryption(body)];
                     case 1:
+                        _a.sent();
+                        return [4 /*yield*/, this.buildRequest(url, body).put(url, JSON.parse(body.toJson()))];
+                    case 2:
                         response = _a.sent();
                         return [2 /*return*/, this.parseResponse(response.data, response.status)];
-                    case 2:
+                    case 3:
                         e_2 = _a.sent();
                         return [2 /*return*/, this.exceptionResponse(e_2)];
-                    case 3: return [2 /*return*/];
+                    case 4: return [2 /*return*/];
                 }
             });
         });
@@ -240,17 +356,20 @@ var ServiceBehaviour = /** @class */ (function () {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        _a.trys.push([0, 2, , 3]);
+                        _a.trys.push([0, 3, , 4]);
+                        return [4 /*yield*/, this.validateEncryption(body)];
+                    case 1:
+                        _a.sent();
                         return [4 /*yield*/, this.buildRequest(url, body).delete(url, {
                                 params: JSON.parse(body.toJson()),
                             })];
-                    case 1:
+                    case 2:
                         response = _a.sent();
                         return [2 /*return*/, this.parseResponse(response.data, response.status)];
-                    case 2:
+                    case 3:
                         e_3 = _a.sent();
                         return [2 /*return*/, this.exceptionResponse(e_3)];
-                    case 3: return [2 /*return*/];
+                    case 4: return [2 /*return*/];
                 }
             });
         });
@@ -269,17 +388,22 @@ var ServiceBehaviour = /** @class */ (function () {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this.buildRequest(url, body).get(url, {
-                                params: JSON.parse(body.toJson()),
-                            })];
+                        _a.trys.push([0, 4, , 5]);
+                        if (!(url !== PUBLIC_KEY_PATH)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.validateEncryption(body)];
                     case 1:
+                        _a.sent();
+                        _a.label = 2;
+                    case 2: return [4 /*yield*/, this.buildRequest(url, body).get(url, {
+                            params: JSON.parse(body.toJson()),
+                        })];
+                    case 3:
                         response = _a.sent();
                         return [2 /*return*/, this.parseResponse(response.data, response.status)];
-                    case 2:
+                    case 4:
                         e_4 = _a.sent();
                         return [2 /*return*/, this.exceptionResponse(e_4)];
-                    case 3: return [2 /*return*/];
+                    case 5: return [2 /*return*/];
                 }
             });
         });