medusa-payu-payment-plugin 1.1.0

package/.medusa/server/src/admin/index.js

@@ -0,0 +1,22 @@
+"use strict";
+const widgetModule = { widgets: [] };
+const routeModule = {
+  routes: []
+};
+const menuItemModule = {
+  menuItems: []
+};
+const formModule = { customFields: {} };
+const displayModule = {
+  displays: {}
+};
+const i18nModule = { resources: {} };
+const plugin = {
+  widgetModule,
+  routeModule,
+  menuItemModule,
+  formModule,
+  displayModule,
+  i18nModule
+};
+module.exports = plugin;

package/.medusa/server/src/admin/index.mjs

@@ -0,0 +1,23 @@
+const widgetModule = { widgets: [] };
+const routeModule = {
+  routes: []
+};
+const menuItemModule = {
+  menuItems: []
+};
+const formModule = { customFields: {} };
+const displayModule = {
+  displays: {}
+};
+const i18nModule = { resources: {} };
+const plugin = {
+  widgetModule,
+  routeModule,
+  menuItemModule,
+  formModule,
+  displayModule,
+  i18nModule
+};
+export {
+  plugin as default
+};

package/.medusa/server/src/providers/payu/client.js

@@ -0,0 +1,134 @@
+"use strict";
+/**
+ * PayU SDK Client
+ * Manual hash implementation based on PayU documentation
+ * https://docs.payu.in/docs/generate-hash-merchant-hosted
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PayuClient = void 0;
+exports.generateTxnId = generateTxnId;
+const crypto_1 = __importDefault(require("crypto"));
+/**
+ * PayU Client for payment operations
+ */
+class PayuClient {
+    constructor(config, logger) {
+        this.config = config;
+        this.logger = logger;
+    }
+    /**
+     * Get PayU payment URL
+     */
+    getPaymentUrl() {
+        return this.config.environment === "production"
+            ? "https://secure.payu.in/_payment"
+            : "https://test.payu.in/_payment";
+    }
+    /**
+     * Generate payment hash
+     *
+     * Formula from PayU docs:
+     * sha512(key|txnid|amount|productinfo|firstname|email|udf1|udf2|udf3|udf4|udf5||||||salt)
+     *
+     * Note: "||||||" is a literal string (6 pipes) appended after udf5
+     */
+    generatePaymentHash(params) {
+        const key = this.config.merchantKey;
+        const salt = this.config.merchantSalt;
+        const udf1 = params.udf1 || "";
+        const udf2 = params.udf2 || "";
+        const udf3 = params.udf3 || "";
+        const udf4 = params.udf4 || "";
+        const udf5 = params.udf5 || "";
+        // Exact formula from PayU docs:
+        // sha512(key|txnid|amount|productinfo|firstname|email|udf1|udf2|udf3|udf4|udf5||||||SALT)
+        // The ||||||SALT means 5 empty reserved fields between udf5 and SALT (creating 6 pipes)
+        const hashString = `${key}|${params.txnid}|${params.amount}|${params.productinfo}|${params.firstname}|${params.email}|${udf1}|${udf2}|${udf3}|${udf4}|${udf5}||||||${salt}`;
+        const generatedHash = crypto_1.default.createHash("sha512").update(hashString).digest("hex").toLowerCase();
+        this.logger?.debug?.(`PayU hash generated for txnid: ${params.txnid}`);
+        return generatedHash;
+    }
+    /**
+     * Verify response hash from PayU callback/webhook
+     *
+     * Reverse hash formula:
+     * sha512(salt|status||||||udf5|udf4|udf3|udf2|udf1|email|firstname|productinfo|amount|txnid|key)
+     */
+    verifyResponseHash(params) {
+        const salt = this.config.merchantSalt;
+        const key = this.config.merchantKey;
+        const udf1 = params.udf1 || "";
+        const udf2 = params.udf2 || "";
+        const udf3 = params.udf3 || "";
+        const udf4 = params.udf4 || "";
+        const udf5 = params.udf5 || "";
+        let hashString;
+        if (params.additionalCharges) {
+            hashString = `${params.additionalCharges}|${salt}|${params.status}||||||${udf5}|${udf4}|${udf3}|${udf2}|${udf1}|${params.email}|${params.firstname}|${params.productinfo}|${params.amount}|${params.txnid}|${key}`;
+        }
+        else {
+            hashString = `${salt}|${params.status}||||||${udf5}|${udf4}|${udf3}|${udf2}|${udf1}|${params.email}|${params.firstname}|${params.productinfo}|${params.amount}|${params.txnid}|${key}`;
+        }
+        const calculatedHash = crypto_1.default.createHash("sha512").update(hashString).digest("hex").toLowerCase();
+        return calculatedHash === params.hash.toLowerCase();
+    }
+    /**
+     * Verify payment status with PayU API
+     */
+    async verifyPayment(txnid) {
+        const command = "verify_payment";
+        const hashString = `${this.config.merchantKey}|${command}|${txnid}|${this.config.merchantSalt}`;
+        const hash = crypto_1.default.createHash("sha512").update(hashString).digest("hex");
+        const apiUrl = this.config.environment === "production"
+            ? "https://info.payu.in/merchant/postservice.php?form=2"
+            : "https://test.payu.in/merchant/postservice.php?form=2";
+        const response = await fetch(apiUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                key: this.config.merchantKey,
+                command: command,
+                var1: txnid,
+                hash: hash,
+            }),
+        });
+        return response.json();
+    }
+    /**
+     * Initiate refund
+     */
+    async refund(mihpayid, tokenId, amount) {
+        const command = "cancel_refund_transaction";
+        const hashString = `${this.config.merchantKey}|${command}|${mihpayid}|${this.config.merchantSalt}`;
+        const hash = crypto_1.default.createHash("sha512").update(hashString).digest("hex");
+        const apiUrl = this.config.environment === "production"
+            ? "https://info.payu.in/merchant/postservice.php?form=2"
+            : "https://test.payu.in/merchant/postservice.php?form=2";
+        const response = await fetch(apiUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                key: this.config.merchantKey,
+                command: command,
+                var1: mihpayid,
+                var2: tokenId,
+                var3: amount,
+                hash: hash,
+            }),
+        });
+        return response.json();
+    }
+}
+exports.PayuClient = PayuClient;
+/**
+ * Generate unique transaction ID
+ */
+function generateTxnId() {
+    const timestamp = Date.now();
+    const random = crypto_1.default.randomBytes(4).toString("hex");
+    return `TXN_${timestamp}_${random}`;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/providers/payu/index.js

@@ -0,0 +1,51 @@
+"use strict";
+/**
+ * PayU Payment Provider Module
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PAYU_PROVIDER_ID = exports.PayuPaymentProviderService = void 0;
+const service_1 = __importStar(require("./service"));
+exports.PayuPaymentProviderService = service_1.default;
+Object.defineProperty(exports, "PAYU_PROVIDER_ID", { enumerable: true, get: function () { return service_1.PAYU_PROVIDER_ID; } });
+const utils_1 = require("@medusajs/framework/utils");
+exports.default = (0, utils_1.ModuleProvider)(utils_1.Modules.PAYMENT, {
+    services: [service_1.default],
+});
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvcHJvdmlkZXJzL3BheXUvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IjtBQUFBOztHQUVHOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFFSCxxREFBd0U7QUFPL0QscUNBUEYsaUJBQTBCLENBT0U7QUFBRSxpR0FQQSwwQkFBZ0IsT0FPQTtBQU5yRCxxREFBbUU7QUFFbkUsa0JBQWUsSUFBQSxzQkFBYyxFQUFDLGVBQU8sQ0FBQyxPQUFPLEVBQUU7SUFDM0MsUUFBUSxFQUFFLENBQUMsaUJBQTBCLENBQUM7Q0FDekMsQ0FBQyxDQUFBO0FBR0YsMENBQXVCIn0=

package/.medusa/server/src/providers/payu/service.js

@@ -0,0 +1,323 @@
+"use strict";
+/**
+ * PayU Payment Provider Service
+ * MedusaJS 2 Payment Provider for PayU India
+ *
+ * Implements redirect-based payment flow using official payu-websdk
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PAYU_PROVIDER_ID = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const client_1 = require("./client");
+exports.PAYU_PROVIDER_ID = "payu";
+/**
+ * PayU Payment Provider Service
+ *
+ * Flow:
+ * 1. initiatePayment - Returns session data with payment URL and form data
+ * 2. Frontend redirects customer to PayU checkout
+ * 3. Customer completes payment on PayU
+ * 4. PayU redirects back and sends webhook
+ * 5. authorizePayment - Verifies and marks payment as authorized
+ */
+class PayuPaymentProviderService extends utils_1.AbstractPaymentProvider {
+    constructor(container, config) {
+        super(container, config);
+        if (!config.merchantKey || !config.merchantSalt) {
+            throw new Error("PayU: merchantKey and merchantSalt are required. " +
+                "Set PAYU_MERCHANT_KEY and PAYU_MERCHANT_SALT environment variables.");
+        }
+        this.config_ = {
+            merchantKey: config.merchantKey,
+            merchantSalt: config.merchantSalt,
+            environment: config.environment || "test",
+            autoCapture: config.autoCapture ?? true,
+        };
+        this.logger_ = container.logger;
+        this.client_ = new client_1.PayuClient(this.config_, this.logger_);
+        this.logger_?.info?.(`PayU initialized in ${this.config_.environment} mode`);
+    }
+    /**
+     * Format amount to string with 2 decimals (PayU requirement)
+     */
+    formatAmount(amount) {
+        const num = typeof amount === "string" ? parseFloat(amount) : Number(amount);
+        return num.toFixed(2);
+    }
+    /**
+     * Initiate payment session
+     */
+    async initiatePayment(input) {
+        const { amount, context } = input;
+        try {
+            const txnid = (0, client_1.generateTxnId)();
+            const formattedAmount = this.formatAmount(amount);
+            const customer = context?.customer;
+            const email = customer?.email || "customer@example.com";
+            const firstname = customer?.first_name || "Customer";
+            const phone = customer?.phone || "";
+            const productinfo = input.data?.productinfo || "Order Payment";
+            const storefrontUrl = process.env.STOREFRONT_URL || "http://localhost:8000";
+            const countryCode = input.data?.country_code || "in";
+            const surl = `${storefrontUrl}/${countryCode}/order/confirmed`;
+            const furl = `${storefrontUrl}/${countryCode}/checkout?payment_status=failed`;
+            // Generate hash using SDK
+            const hash = this.client_.generatePaymentHash({
+                txnid,
+                amount: formattedAmount,
+                productinfo,
+                firstname,
+                email,
+            });
+            const sessionData = {
+                txnid,
+                amount: formattedAmount,
+                productinfo,
+                firstname,
+                email,
+                phone,
+                hash,
+                paymentUrl: this.client_.getPaymentUrl(),
+                status: "pending",
+                countryCode,
+            };
+            this.logger_?.debug?.(`PayU payment initiated: ${txnid}`);
+            return {
+                id: txnid,
+                data: {
+                    ...sessionData,
+                    form_data: {
+                        key: this.config_.merchantKey,
+                        txnid,
+                        amount: formattedAmount,
+                        productinfo,
+                        firstname,
+                        email,
+                        phone,
+                        surl,
+                        furl,
+                        hash,
+                        service_provider: "payu_paisa",
+                    },
+                },
+            };
+        }
+        catch (error) {
+            this.logger_?.error?.(`PayU initiatePayment error: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Authorize payment after PayU callback
+     */
+    async authorizePayment(input) {
+        try {
+            const sessionData = input.data;
+            if (sessionData.status === "authorized" || sessionData.status === "captured") {
+                return {
+                    status: utils_1.PaymentSessionStatus.AUTHORIZED,
+                    data: input.data,
+                };
+            }
+            const response = await this.client_.verifyPayment(sessionData.txnid);
+            if (response.status === 1) {
+                const txn = response.transaction_details[sessionData.txnid];
+                if (txn?.status === "success") {
+                    this.logger_?.info?.(`PayU authorized: ${sessionData.txnid}`);
+                    return {
+                        status: utils_1.PaymentSessionStatus.AUTHORIZED,
+                        data: {
+                            ...sessionData,
+                            status: "authorized",
+                            payuTransactionId: txn.mihpayid,
+                            payuResponse: txn,
+                        },
+                    };
+                }
+            }
+            return {
+                status: utils_1.PaymentSessionStatus.ERROR,
+                data: { ...sessionData, status: "failed" },
+            };
+        }
+        catch (error) {
+            this.logger_?.error?.(`PayU authorizePayment error: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Capture payment (PayU auto-captures)
+     */
+    async capturePayment(input) {
+        const sessionData = input.data;
+        return {
+            data: { ...sessionData, status: "captured" },
+        };
+    }
+    /**
+     * Refund payment
+     */
+    async refundPayment(input) {
+        try {
+            const sessionData = input.data;
+            if (!sessionData.payuTransactionId) {
+                throw new Error("No PayU transaction ID found");
+            }
+            const tokenId = `REF_${sessionData.payuTransactionId}_${Date.now()}`;
+            const refundAmount = this.formatAmount(input.amount);
+            const response = await this.client_.refund(sessionData.payuTransactionId, tokenId, refundAmount);
+            if (response.status === 1) {
+                this.logger_?.info?.(`PayU refund successful: ${sessionData.txnid}`);
+                return {
+                    data: {
+                        ...sessionData,
+                        status: "refunded",
+                        refund: { tokenId, amount: refundAmount, response },
+                    },
+                };
+            }
+            throw new Error(`Refund failed: ${response.msg}`);
+        }
+        catch (error) {
+            this.logger_?.error?.(`PayU refundPayment error: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Cancel payment
+     */
+    async cancelPayment(input) {
+        const sessionData = input.data;
+        return {
+            data: { ...sessionData, status: "cancelled" },
+        };
+    }
+    /**
+     * Delete payment session
+     */
+    async deletePayment(input) {
+        return { data: input.data };
+    }
+    /**
+     * Get payment status
+     */
+    async getPaymentStatus(input) {
+        const sessionData = input.data;
+        const statusMap = {
+            pending: utils_1.PaymentSessionStatus.PENDING,
+            authorized: utils_1.PaymentSessionStatus.AUTHORIZED,
+            captured: utils_1.PaymentSessionStatus.AUTHORIZED,
+            failed: utils_1.PaymentSessionStatus.ERROR,
+            refunded: utils_1.PaymentSessionStatus.AUTHORIZED,
+            cancelled: utils_1.PaymentSessionStatus.CANCELED,
+        };
+        return { status: statusMap[sessionData.status] || utils_1.PaymentSessionStatus.PENDING };
+    }
+    /**
+     * Retrieve payment details
+     */
+    async retrievePayment(input) {
+        return { data: input.data };
+    }
+    /**
+     * Update payment session
+     */
+    async updatePayment(input) {
+        try {
+            const { data, amount } = input;
+            const sessionData = data;
+            if (amount) {
+                const formattedAmount = this.formatAmount(amount);
+                const storefrontUrl = process.env.STOREFRONT_URL || "http://localhost:8000";
+                const hash = this.client_.generatePaymentHash({
+                    txnid: sessionData.txnid,
+                    amount: formattedAmount,
+                    productinfo: sessionData.productinfo,
+                    firstname: sessionData.firstname,
+                    email: sessionData.email,
+                });
+                return {
+                    data: {
+                        ...sessionData,
+                        amount: formattedAmount,
+                        hash,
+                        form_data: {
+                            key: this.config_.merchantKey,
+                            txnid: sessionData.txnid,
+                            amount: formattedAmount,
+                            productinfo: sessionData.productinfo,
+                            firstname: sessionData.firstname,
+                            email: sessionData.email,
+                            phone: sessionData.phone,
+                            surl: `${storefrontUrl}/${sessionData.countryCode || 'in'}/order/confirmed`,
+                            furl: `${storefrontUrl}/${sessionData.countryCode || 'in'}/checkout?payment_status=failed`,
+                            hash,
+                            service_provider: "payu_paisa",
+                        },
+                    },
+                };
+            }
+            return { data: data };
+        }
+        catch (error) {
+            this.logger_?.error?.(`PayU updatePayment error: ${error}`);
+            throw error;
+        }
+    }
+    /**
+     * Handle webhook from PayU
+     */
+    async getWebhookActionAndData(data) {
+        try {
+            const webhook = data.data;
+            this.logger_?.info?.(`PayU webhook: txnid=${webhook.txnid}, status=${webhook.status}`);
+            // Verify hash
+            const isValid = this.client_.verifyResponseHash({
+                status: webhook.status,
+                email: webhook.email,
+                firstname: webhook.firstname,
+                productinfo: webhook.productinfo,
+                amount: webhook.amount,
+                txnid: webhook.txnid,
+                hash: webhook.hash,
+                udf1: webhook.udf1,
+                udf2: webhook.udf2,
+                udf3: webhook.udf3,
+                udf4: webhook.udf4,
+                udf5: webhook.udf5,
+            });
+            if (!isValid) {
+                this.logger_?.warn?.(`PayU webhook: Invalid hash for ${webhook.txnid}`);
+                return { action: "not_supported" };
+            }
+            const sessionId = webhook.udf1 || webhook.txnid;
+            const status = webhook.status.toLowerCase();
+            if (status === "success") {
+                return {
+                    action: "authorized",
+                    data: {
+                        session_id: sessionId,
+                        amount: new utils_1.BigNumber(parseFloat(webhook.amount)),
+                    },
+                };
+            }
+            if (status === "failure" || status === "failed") {
+                return {
+                    action: "failed",
+                    data: {
+                        session_id: sessionId,
+                        amount: new utils_1.BigNumber(parseFloat(webhook.amount)),
+                    },
+                };
+            }
+            return { action: "not_supported" };
+        }
+        catch (error) {
+            this.logger_?.error?.(`PayU webhook error: ${error}`);
+            return { action: "not_supported" };
+        }
+    }
+}
+PayuPaymentProviderService.identifier = exports.PAYU_PROVIDER_ID;
+exports.default = PayuPaymentProviderService;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/providers/payu/types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * PayU Payment Provider Types
+ * Type definitions for PayU India payment gateway integration
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvcHJvdmlkZXJzL3BheXUvdHlwZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IjtBQUFBOzs7R0FHRyJ9

package/.medusa/server/src/workflows/index.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * PayU Payment Plugin Workflows
+ *
+ * Export all workflows from this file for plugin consumers
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyPayuPaymentWorkflow = void 0;
+var verify_payu_payment_1 = require("./verify-payu-payment");
+Object.defineProperty(exports, "verifyPayuPaymentWorkflow", { enumerable: true, get: function () { return verify_payu_payment_1.verifyPayuPaymentWorkflow; } });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvd29ya2Zsb3dzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7QUFBQTs7OztHQUlHOzs7QUFFSCw2REFJOEI7QUFIMUIsZ0lBQUEseUJBQXlCLE9BQUEifQ==

package/.medusa/server/src/workflows/verify-payu-payment.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * Verify PayU Payment Workflow
+ *
+ * Workflow to verify payment status with PayU API
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyPayuPaymentWorkflow = void 0;
+const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
+const client_1 = require("../providers/payu/client");
+/**
+ * Step: Verify payment with PayU API
+ */
+const verifyPaymentStep = (0, workflows_sdk_1.createStep)("verify-payu-payment-step", async (input) => {
+    const { txnid, merchantKey = process.env.PAYU_MERCHANT_KEY || "", merchantSalt = process.env.PAYU_MERCHANT_SALT || "", environment = process.env.PAYU_ENVIRONMENT || "test", } = input;
+    if (!merchantKey || !merchantSalt) {
+        return new workflows_sdk_1.StepResponse({
+            success: false,
+            status: "error",
+            error: "PayU configuration missing",
+        });
+    }
+    try {
+        const config = { merchantKey, merchantSalt, environment };
+        const client = new client_1.PayuClient(config);
+        const response = await client.verifyPayment(txnid);
+        if (response.status === 1) {
+            const txn = response.transaction_details[txnid];
+            if (txn) {
+                return new workflows_sdk_1.StepResponse({
+                    success: true,
+                    status: txn.status,
+                    transaction: txn,
+                });
+            }
+        }
+        return new workflows_sdk_1.StepResponse({
+            success: false,
+            status: "not_found",
+            error: response.msg || "Transaction not found",
+        });
+    }
+    catch (error) {
+        return new workflows_sdk_1.StepResponse({
+            success: false,
+            status: "error",
+            error: error.message,
+        });
+    }
+});
+/**
+ * Verify PayU Payment Workflow
+ */
+exports.verifyPayuPaymentWorkflow = (0, workflows_sdk_1.createWorkflow)("verify-payu-payment", (input) => {
+    const result = verifyPaymentStep(input);
+    return new workflows_sdk_1.WorkflowResponse(result);
+});
+exports.default = exports.verifyPayuPaymentWorkflow;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidmVyaWZ5LXBheXUtcGF5bWVudC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uL3NyYy93b3JrZmxvd3MvdmVyaWZ5LXBheXUtcGF5bWVudC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiO0FBQUE7Ozs7R0FJRzs7O0FBRUgscUVBSzBDO0FBQzFDLHFEQUFxRDtBQXVCckQ7O0dBRUc7QUFDSCxNQUFNLGlCQUFpQixHQUFHLElBQUEsMEJBQVUsRUFDaEMsMEJBQTBCLEVBQzFCLEtBQUssRUFBRSxLQUE2QixFQUFrRCxFQUFFO0lBQ3BGLE1BQU0sRUFDRixLQUFLLEVBQ0wsV0FBVyxHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsaUJBQWlCLElBQUksRUFBRSxFQUNqRCxZQUFZLEdBQUcsT0FBTyxDQUFDLEdBQUcsQ0FBQyxrQkFBa0IsSUFBSSxFQUFFLEVBQ25ELFdBQVcsR0FBSSxPQUFPLENBQUMsR0FBRyxDQUFDLGdCQUEwQyxJQUFJLE1BQU0sR0FDbEYsR0FBRyxLQUFLLENBQUE7SUFFVCxJQUFJLENBQUMsV0FBVyxJQUFJLENBQUMsWUFBWSxFQUFFLENBQUM7UUFDaEMsT0FBTyxJQUFJLDRCQUFZLENBQUM7WUFDcEIsT0FBTyxFQUFFLEtBQUs7WUFDZCxNQUFNLEVBQUUsT0FBTztZQUNmLEtBQUssRUFBRSw0QkFBNEI7U0FDdEMsQ0FBQyxDQUFBO0lBQ04sQ0FBQztJQUVELElBQUksQ0FBQztRQUNELE1BQU0sTUFBTSxHQUF1QixFQUFFLFdBQVcsRUFBRSxZQUFZLEVBQUUsV0FBVyxFQUFFLENBQUE7UUFDN0UsTUFBTSxNQUFNLEdBQUcsSUFBSSxtQkFBVSxDQUFDLE1BQU0sQ0FBQyxDQUFBO1FBQ3JDLE1BQU0sUUFBUSxHQUFHLE1BQU0sTUFBTSxDQUFDLGFBQWEsQ0FBQyxLQUFLLENBQUMsQ0FBQTtRQUVsRCxJQUFJLFFBQVEsQ0FBQyxNQUFNLEtBQUssQ0FBQyxFQUFFLENBQUM7WUFDeEIsTUFBTSxHQUFHLEdBQUcsUUFBUSxDQUFDLG1CQUFtQixDQUFDLEtBQUssQ0FBQyxDQUFBO1lBQy9DLElBQUksR0FBRyxFQUFFLENBQUM7Z0JBQ04sT0FBTyxJQUFJLDRCQUFZLENBQUM7b0JBQ3BCLE9BQU8sRUFBRSxJQUFJO29CQUNiLE1BQU0sRUFBRSxHQUFHLENBQUMsTUFBTTtvQkFDbEIsV0FBVyxFQUFFLEdBQXlDO2lCQUN6RCxDQUFDLENBQUE7WUFDTixDQUFDO1FBQ0wsQ0FBQztRQUVELE9BQU8sSUFBSSw0QkFBWSxDQUFDO1lBQ3BCLE9BQU8sRUFBRSxLQUFLO1lBQ2QsTUFBTSxFQUFFLFdBQVc7WUFDbkIsS0FBSyxFQUFFLFFBQVEsQ0FBQyxHQUFHLElBQUksdUJBQXVCO1NBQ2pELENBQUMsQ0FBQTtJQUNOLENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2IsT0FBTyxJQUFJLDRCQUFZLENBQUM7WUFDcEIsT0FBTyxFQUFFLEtBQUs7WUFDZCxNQUFNLEVBQUUsT0FBTztZQUNmLEtBQUssRUFBRyxLQUFlLENBQUMsT0FBTztTQUNsQyxDQUFDLENBQUE7SUFDTixDQUFDO0FBQ0wsQ0FBQyxDQUNKLENBQUE7QUFFRDs7R0FFRztBQUNVLFFBQUEseUJBQXlCLEdBQUcsSUFBQSw4QkFBYyxFQUNuRCxxQkFBcUIsRUFDckIsQ0FBQyxLQUE2QixFQUFFLEVBQUU7SUFDOUIsTUFBTSxNQUFNLEdBQUcsaUJBQWlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDdkMsT0FBTyxJQUFJLGdDQUFnQixDQUFDLE1BQU0sQ0FBQyxDQUFBO0FBQ3ZDLENBQUMsQ0FDSixDQUFBO0FBRUQsa0JBQWUsaUNBQXlCLENBQUEifQ==

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 SAM-AEL
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,290 @@
+# PayU Payment Plugin for MedusaJS 2
+
+PayU India payment gateway plugin for MedusaJS 2.x with redirect-based checkout flow.
+
+[![npm version](https://img.shields.io/npm/v/medusa-payu-payment-plugin.svg)](https://www.npmjs.com/package/medusa-payu-payment-plugin)
+[![MedusaJS](https://img.shields.io/badge/MedusaJS-2.x-7C3AED)](https://medusajs.com/)
+[![PayU India](https://img.shields.io/badge/PayU-India-00B9F1)](https://payu.in/)
+[![License](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D20-brightgreen)](https://nodejs.org/)
+
+## Features
+
+- ✅ **Redirect-based checkout** - Seamless PayU hosted checkout integration
+- ✅ **Webhook support** - Automatic payment status updates via PayU webhooks
+- ✅ **Refund support** - Full and partial refunds through PayU API
+- ✅ **Hash verification** - Secure SHA-512 transaction validation
+- ✅ **TypeScript** - Full type safety with comprehensive type definitions
+- ✅ **Payment verification workflow** - Built-in workflow for custom payment verification
+
+## Installation
+
+```bash
+npm install medusa-payu-payment-plugin
+# or
+yarn add medusa-payu-payment-plugin
+```
+
+## Configuration
+
+### 1. Environment Variables
+
+Add to your `.env` file:
+
+```env
+# PayU Credentials
+PAYU_MERCHANT_KEY=your_merchant_key
+PAYU_MERCHANT_SALT=your_merchant_salt
+PAYU_ENVIRONMENT=test  # or "production"
+
+# Your storefront URL (for redirect callbacks)
+STOREFRONT_URL=http://localhost:8000
+```
+
+### 2. MedusaJS Config
+
+Add to your `medusa-config.ts`:
+
+```typescript
+import { defineConfig } from "@medusajs/framework/utils"
+
+export default defineConfig({
+  // ... other config
+  modules: [
+    {
+      resolve: "@medusajs/medusa/payment",
+      options: {
+        providers: [
+          {
+            resolve: "medusa-payu-payment-plugin/providers/payu",
+            id: "payu",
+            options: {
+              merchantKey: process.env.PAYU_MERCHANT_KEY,
+              merchantSalt: process.env.PAYU_MERCHANT_SALT,
+              environment: process.env.PAYU_ENVIRONMENT || "test",
+            },
+          },
+        ],
+      },
+    },
+  ],
+})
+```
+
+### 3. Enable for Region
+
+In Medusa Admin:
+1. Go to **Settings → Regions**
+2. Select your region
+3. Add `payu` as a payment provider
+
+## Frontend Integration
+
+### Payment Flow Overview
+
+1. Customer selects PayU at checkout
+2. Frontend retrieves payment session from cart
+3. Frontend creates a form and redirects to PayU
+4. Customer completes payment on PayU's hosted page
+5. PayU redirects back to your storefront
+6. Webhook updates order status automatically
+
+### React/Next.js Example
+
+```tsx
+"use client"
+
+function PayUPaymentButton({ cart }) {
+  const handlePayment = async () => {
+    // Get PayU payment session
+    const paymentSession = cart.payment_collection?.payment_sessions?.find(
+      (session) => session.provider_id === "pp_payu_payu"
+    )
+
+    if (!paymentSession?.data?.form_data) {
+      console.error("PayU session not found")
+      return
+    }
+
+    const { form_data, paymentUrl } = paymentSession.data
+
+    // Create and submit hidden form
+    const form = document.createElement("form")
+    form.method = "POST"
+    form.action = paymentUrl
+
+    Object.entries(form_data).forEach(([key, value]) => {
+      const input = document.createElement("input")
+      input.type = "hidden"
+      input.name = key
+      input.value = String(value)
+      form.appendChild(input)
+    })
+
+    document.body.appendChild(form)
+    form.submit()
+  }
+
+  return (
+    <button 
+      onClick={handlePayment}
+      className="btn-primary"
+    >
+      Pay with PayU
+    </button>
+  )
+}
+```
+
+### Payment Session Structure
+
+The payment session data contains:
+
+```typescript
+{
+  txnid: string           // Unique transaction ID
+  amount: string          // Amount with 2 decimals (e.g., "999.00")
+  productinfo: string     // Product/order description
+  firstname: string       // Customer first name
+  email: string           // Customer email
+  phone: string           // Customer phone
+  hash: string            // Security hash (SHA-512)
+  paymentUrl: string      // PayU checkout URL
+  status: string          // Payment status
+  form_data: {            // Ready-to-submit form data
+    key: string           // Merchant key
+    txnid: string
+    amount: string
+    productinfo: string
+    firstname: string
+    email: string
+    phone: string
+    surl: string          // Success redirect URL
+    furl: string          // Failure redirect URL
+    hash: string
+    service_provider: string
+  }
+}
+```
+
+## Webhook Setup
+
+Configure the webhook URL in your PayU dashboard:
+
+```
+https://your-backend.com/hooks/payment/pp_payu_payu
+```
+
+The webhook handler automatically:
+- Verifies the response hash for security
+- Updates payment status (authorized/failed)
+- Triggers order completion workflow
+
+## API Reference
+
+### Provider ID
+
+```
+pp_payu_payu
+```
+
+### Supported Methods
+
+| Method | Description |
+|--------|-------------|
+| `initiatePayment` | Creates payment session with hash and form data |
+| `authorizePayment` | Verifies payment status with PayU API |
+| `capturePayment` | Marks payment as captured (auto-capture enabled) |
+| `refundPayment` | Initiates full or partial refund |
+| `cancelPayment` | Cancels pending payment |
+| `getWebhookActionAndData` | Handles PayU webhook callbacks |
+
+### Exported Workflow
+
+You can use the verify payment workflow in your custom code:
+
+```typescript
+import { verifyPayuPaymentWorkflow } from "medusa-payu-payment-plugin/workflows"
+
+// In your API route or subscriber
+const { result } = await verifyPayuPaymentWorkflow(container).run({
+  input: {
+    txnid: "TXN_1234567890_abcd",
+  },
+})
+
+if (result.success) {
+  console.log("Payment status:", result.status)
+  console.log("Transaction details:", result.transaction)
+}
+```
+
+## Environment Variables
+
+| Variable | Description | Required |
+|----------|-------------|----------|
+| `PAYU_MERCHANT_KEY` | PayU Merchant Key | Yes |
+| `PAYU_MERCHANT_SALT` | PayU Merchant Salt (Salt V1) | Yes |
+| `PAYU_ENVIRONMENT` | `test` or `production` | No (default: `test`) |
+| `STOREFRONT_URL` | Your storefront URL for redirects | Yes |
+
+## Testing
+
+Use PayU test credentials in your test environment:
+
+- **Test URL**: https://test.payu.in
+- **Test Cards**: [PayU Test Cards Documentation](https://devguide.payu.in/docs/test-integration/test-cards/)
+
+### Common Test Card Numbers
+
+| Card Type | Number | CVV | Expiry |
+|-----------|--------|-----|--------|
+| Visa | 4012001038443335 | 123 | Any future date |
+| Mastercard | 5123456789012346 | 123 | Any future date |
+
+## Troubleshooting
+
+### Hash Mismatch Error
+
+Ensure:
+1. You're using the correct Salt version (this plugin uses Salt V1)
+2. Amount has exactly 2 decimal places (e.g., `"999.00"`)
+3. All mandatory fields match exactly between hash generation and form submission
+
+### Webhook Not Received
+
+1. Verify webhook URL is correct in PayU dashboard
+2. Ensure your server is publicly accessible
+3. Check server logs for incoming webhook requests
+4. Verify SSL certificate is valid (required for production)
+
+### Payment Session Not Found
+
+Ensure:
+1. PayU is enabled as a payment provider for the region
+2. Payment collection is initialized before accessing session
+3. Provider ID is `pp_payu_payu` (includes the prefix)
+
+## Contributing
+
+Contributions are welcome! Please feel free to submit a Pull Request.
+
+1. Fork the repository
+2. Create your feature branch (`git checkout -b feature/amazing-feature`)
+3. Commit your changes (`git commit -m 'Add amazing feature'`)
+4. Push to the branch (`git push origin feature/amazing-feature`)
+5. Open a Pull Request
+
+## License
+
+MIT © [SAM-AEL](https://github.com/SAM-AEL)
+
+See [LICENSE](LICENSE) for more information.
+
+## Links
+
+- [GitHub Repository](https://github.com/SAM-AEL/medusa-payu-payment-plugin)
+- [npm Package](https://www.npmjs.com/package/medusa-payu-payment-plugin)
+- [PayU Developer Documentation](https://devguide.payu.in/)
+- [MedusaJS Documentation](https://docs.medusajs.com/)
+- [Changelog](CHANGELOG.md)

package/package.json

@@ -0,0 +1,84 @@
+{
+  "name": "medusa-payu-payment-plugin",
+  "version": "1.1.0",
+  "description": "PayU India payment gateway plugin for MedusaJS 2.x with redirect-based checkout, webhook support, hash verification, and refunds.",
+  "author": "SAM-AEL (https://github.com/SAM-AEL)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SAM-AEL/medusa-payu-payment-plugin.git"
+  },
+  "homepage": "https://github.com/SAM-AEL/medusa-payu-payment-plugin#readme",
+  "bugs": {
+    "url": "https://github.com/SAM-AEL/medusa-payu-payment-plugin/issues"
+  },
+  "files": [
+    ".medusa/server"
+  ],
+  "exports": {
+    "./package.json": "./package.json",
+    "./workflows": "./.medusa/server/src/workflows/index.js",
+    "./.medusa/server/src/modules/*": "./.medusa/server/src/modules/*/index.js",
+    "./modules/*": "./.medusa/server/src/modules/*/index.js",
+    "./providers/*": "./.medusa/server/src/providers/*/index.js",
+    "./*": "./.medusa/server/src/*.js",
+    "./admin": {
+      "import": "./.medusa/server/src/admin/index.mjs",
+      "require": "./.medusa/server/src/admin/index.js",
+      "default": "./.medusa/server/src/admin/index.js"
+    }
+  },
+  "keywords": [
+    "medusa",
+    "medusajs",
+    "medusa-v2",
+    "medusa-plugin",
+    "medusa-plugin-payment",
+    "medusa-plugin-integration",
+    "payment",
+    "payment-gateway",
+    "payu",
+    "payu-india",
+    "india",
+    "ecommerce",
+    "checkout",
+    "redirect-payment"
+  ],
+  "scripts": {
+    "build": "medusa plugin:build",
+    "dev": "medusa plugin:develop",
+    "prepublishOnly": "medusa plugin:build"
+  },
+  "devDependencies": {
+    "@medusajs/admin-sdk": "2.11.2",
+    "@medusajs/cli": "2.11.2",
+    "@medusajs/framework": "2.11.2",
+    "@medusajs/icons": "2.11.2",
+    "@medusajs/medusa": "2.11.2",
+    "@medusajs/test-utils": "2.11.2",
+    "@medusajs/ui": "4.0.25",
+    "@swc/core": "1.5.7",
+    "@types/node": "^20.0.0",
+    "@types/react": "^18.3.2",
+    "@types/react-dom": "^18.2.25",
+    "prop-types": "^15.8.1",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.6.2",
+    "vite": "^5.2.11"
+  },
+  "dependencies": {},
+  "peerDependencies": {
+    "@medusajs/admin-sdk": "2.11.2",
+    "@medusajs/cli": "2.11.2",
+    "@medusajs/framework": "2.11.2",
+    "@medusajs/icons": "2.11.2",
+    "@medusajs/medusa": "2.11.2",
+    "@medusajs/test-utils": "2.11.2",
+    "@medusajs/ui": "4.0.25"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}