node-paytmpg 7.0.1 → 7.1.2

package/README.MD

@@ -176,9 +176,17 @@ Common:
 Gateway-specific:
 
 - Paytm: `paytm_url`, `MID`, `WEBSITE`, `CHANNEL_ID`, `INDUSTRY_TYPE_ID`
+  - Sandbox: https://securegw-stage.paytm.in
+  - Prod: https://securegw.paytm.in
 - Razorpay: `razor_url`, `KEY`, `SECRET`
+  - Sandbox: https://api.razorpay.com/
+  - Prod: https://api.razorpay.com/
 - PayU: `payu_url`, `KEY`, `SECRET`
+  - Sandbox: https://test.payu.in/_payment
+  - Prod: https://secure.payu.in/_payment
 - Open Money: `open_money_url`, `KEY`, `SECRET`
+  - Sandbox: https://sandbox-icp-api.bankopen.co/api
+  - Prod: https://icp-api.bankopen.co/api
 
 UI / behavior:
 

package/dist/app/controllers/payment.controller.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -7,10 +40,9 @@ exports.PaymentController = void 0;
 const package_json_1 = __importDefault(require("../../package.json"));
 const checksum_1 = __importDefault(require("./checksum/checksum"));
 const PaytmChecksum_1 = __importDefault(require("./checksum/PaytmChecksum"));
+const crypto = __importStar(require("crypto"));
 const path_1 = __importDefault(require("path"));
 const axios_1 = __importDefault(require("axios"));
-//@ts-ignore
-const nodejs_base64_converter_1 = __importDefault(require("nodejs-base64-converter"));
 const razorpay_1 = __importDefault(require("razorpay"));
 const open_money_1 = __importDefault(require("./adapters/open_money"));
 const payu_1 = __importDefault(require("./adapters/payu"));
@@ -40,6 +72,66 @@ class PaymentController {
         this.useController = new user_controller_1.NPUserController(this.db, this.tableNames.USER);
         this.configure(config);
     }
+    encodeTxnDataForUrl(txnDataJson) {
+        // Accept either an object or a JSON string.
+        const payloadStr = typeof txnDataJson === 'string' ? txnDataJson : JSON.stringify(txnDataJson);
+        // Derive a 32-byte key from config.SECRET (fallback to config.KEY).
+        const secret = String(this.config.SECRET || this.config.KEY || '');
+        if (!secret) {
+            // No secret available — fallback to url-safe base64 (not secure).
+            return Buffer.from(payloadStr, 'utf8').toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+        }
+        const key = crypto.createHash('sha256').update(secret).digest(); // 32 bytes
+        const iv = crypto.randomBytes(12); // 12 bytes recommended for GCM
+        const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+        const encrypted = Buffer.concat([cipher.update(payloadStr, 'utf8'), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        // Store as: iv (12) | tag (16) | ciphertext — then URL-safe base64
+        const out = Buffer.concat([iv, tag, encrypted]).toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+        return out;
+    }
+    decodeTxnDataFromUrl(encodedStr) {
+        if (!encodedStr)
+            return '';
+        // Convert back to standard base64 and pad
+        let b64 = encodedStr.replace(/-/g, '+').replace(/_/g, '/');
+        const pad = b64.length % 4;
+        if (pad)
+            b64 += '='.repeat(4 - pad);
+        const raw = Buffer.from(b64, 'base64');
+        // If too short to contain iv+tag, treat as plain base64 payload
+        if (raw.length < 12 + 16 + 1) {
+            try {
+                return raw.toString('utf8');
+            }
+            catch (e) {
+                return '';
+            }
+        }
+        try {
+            const iv = raw.slice(0, 12);
+            const tag = raw.slice(12, 28);
+            const ciphertext = raw.slice(28);
+            const secret = String(this.config.SECRET || this.config.KEY || '');
+            if (!secret)
+                return raw.toString('utf8');
+            const key = crypto.createHash('sha256').update(secret).digest();
+            const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+            decipher.setAuthTag(tag);
+            const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString('utf8');
+            return decrypted;
+        }
+        catch (err) {
+            // Fallback: return plain base64-decoded string (best-effort)
+            try {
+                return Buffer.from(b64, 'base64').toString('utf8');
+            }
+            catch (e) {
+                console.log('decodeTxnDataFromUrl error', e);
+                return '';
+            }
+        }
+    }
     configure(config) {
         const viewRoot = config.templateDir
             ? config.templateDir
@@ -95,7 +187,7 @@ class PaymentController {
         const vp = this.viewPath;
         const razorPayInstance = this.razorPayInstance;
         if (!req.body.ORDER_ID && !req.body.EMAIL && ((_a = req.query) === null || _a === void 0 ? void 0 : _a.to)) {
-            let toData = JSON.parse(nodejs_base64_converter_1.default.decode(req.query.to));
+            let toData = JSON.parse(this.decodeTxnDataFromUrl(req.query.to));
             req.body.NAME = toData.NAME;
             req.body.EMAIL = toData.EMAIL;
             req.body.TXN_AMOUNT = toData.TXN_AMOUNT;
@@ -377,7 +469,8 @@ class PaymentController {
                     pname: req.body.PRODUCT_NAME,
                     extra: '',
                     returnUrl: req.body.RETURN_URL || '',
-                    webhookUrl: req.body.WEBHOOK_URL || ''
+                    webhookUrl: req.body.WEBHOOK_URL || '',
+                    clientId: req.body.CLIENT_ID || ''
                 };
                 try {
                     const txn = await this.insertTransactionInDb(txnTask);
@@ -548,6 +641,15 @@ class PaymentController {
             callbacks.onFinish(req.body.ORDERID, objForUpdate);
         }
         objForUpdate.readonly = "readonly";
+        if (webhookUrl) {
+            try {
+                await axios_1.default.post(webhookUrl, objForUpdate);
+                console.log("Sent webhook to ", webhookUrl, 'orderId:', req.body.ORDERID, 'txnId:', req.body.TXNID);
+            }
+            catch (e) {
+                console.log("Error sending webhook to ", webhookUrl, (e === null || e === void 0 ? void 0 : e.message) || e, 'orderId:', req.body.ORDERID, 'txnId:', req.body.TXNID);
+            }
+        }
         if (returnUrl) {
             const separator = returnUrl.indexOf('?') > -1 ? '&' : '?';
             return res.redirect(`${returnUrl}${separator}status=${objForUpdate.status}&ORDERID=${objForUpdate.orderId}&TXNID=${objForUpdate.txnId}`);
@@ -753,10 +855,11 @@ class PaymentController {
                 pname: req.body.PRODUCT_NAME,
                 returnUrl: req.body.RETURN_URL || '',
                 webhookUrl: req.body.WEBHOOK_URL || '',
-                extra: (req.body.EXTRA || '')
+                extra: (req.body.EXTRA || ''),
+                clientId: req.body.CLIENT_ID || ''
             };
             const txn = await this.insertTransactionInDb(txnTask);
-            const urlData64 = nodejs_base64_converter_1.default.encode(JSON.stringify({
+            const urlData64 = this.encodeTxnDataForUrl(JSON.stringify({
                 NAME: txn.name,
                 EMAIL: txn.email,
                 MOBILE_NO: txn.phone,
@@ -764,7 +867,8 @@ class PaymentController {
                 RETURN_URL: txn.returnUrl,
                 WEBHOOK_URL: txn.webhookUrl,
                 TXN_AMOUNT: txn.amount,
-                PRODUCT_NAME: txn.pname
+                PRODUCT_NAME: txn.pname,
+                clientId: txn.clientId
             }));
             txn.payurl = config.host_url + '/' + config.path_prefix + '/init?to=' + urlData64;
             res.send(txn);

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "node-paytmpg",
-    "version": "7.0.1",
+    "version": "7.1.2",
     "description": "Payment Gateway Integration using NodeJS",
     "main": "dist/index.js",
     "scripts": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-paytmpg",
-  "version": "7.0.1",
+  "version": "7.1.2",
   "description": "Payment Gateway Integration using NodeJS",
   "main": "dist/index.js",
   "scripts": {