dana-python 2.2.1__tar.gz → 3.0.0__tar.gz

{dana_python-2.2.1/dana_python.egg-info → dana_python-3.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dana-python
-Version: 2.2.1
+Version: 3.0.0
 Summary: API Client (SDK) for DANA APIs based on https://dashboard.dana.id/api-docs
 Author-email: DANA Package Manager  <package-manager@dana.id>
 Maintainer-email: DANA Package Manager  <package-manager@dana.id>
@@ -8,19 +8,16 @@ License-Expression: Apache-2.0
 Project-URL: homepage, https://dashboard.dana.id/api-docs
 Project-URL: repository, https://github.com/dana-id/dana-python
 Keywords: DANA,DANA ID Docs,DANA SDK,DANA Python,DANA API Client,DANA Python API Client,DANA Python SDK
-Requires-Python: >3.9.1
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: annotated-types==0.7.0
-Requires-Dist: cffi==2.0.0
-Requires-Dist: cryptography<46.0.0,>=44.0.2
-Requires-Dist: pycparser==2.23
+Requires-Dist: annotated-types>=0.7.0
+Requires-Dist: cryptography>=50.0.0
 Requires-Dist: pydantic<3.0.0,>=2.10.6
 Requires-Dist: pydantic-core<3.0.0,>=2.27.2
-Requires-Dist: python-dateutil==2.9.0.post0
-Requires-Dist: six==1.17.0
+Requires-Dist: python-dateutil>=2.9.0.post0
 Requires-Dist: typing-extensions<5.0.0,>=4.12.2
-Requires-Dist: urllib3<3.0.0,>=2.3.0
+Requires-Dist: urllib3<3.0.0,>=2.8.0
 Dynamic: license-file
 
 # dana-python
@@ -62,7 +59,7 @@ Here is the link: https://github.com/dana-id/uat-script.
 
 ## Requirements.
 
-Python 3.9.1+
+Python 3.10+ (patched releases: 3.11.17, 3.12.15, 3.13.17, 3.14.9, 3.15.1 or later)
 
 ## Installation & Usage
 ### pip install

{dana_python-2.2.1 → dana_python-3.0.0}/README.md

@@ -37,7 +37,7 @@ Here is the link: https://github.com/dana-id/uat-script.
 
 ## Requirements.
 
-Python 3.9.1+
+Python 3.10+ (patched releases: 3.11.17, 3.12.15, 3.13.17, 3.14.9, 3.15.1 or later)
 
 ## Installation & Usage
 ### pip install

{dana_python-2.2.1 → dana_python-3.0.0}/dana/utils/snap_configuration.py

@@ -231,9 +231,9 @@ class SnapConfiguration(BaseConfiguration):
     ) -> None:
         """Constructor
         """
-        self.host = "http://api.sandbox.dana.id" if (api_key["DANA_ENV"] == Env.SANDBOX or api_key["ENV"] == Env.SANDBOX) else \
+        self.host = "https://api.sandbox.dana.id" if (api_key["DANA_ENV"] == Env.SANDBOX or api_key["ENV"] == Env.SANDBOX) else \
         "https://api.saas.dana.id" if (api_key["DANA_ENV"] == Env.PRODUCTION or api_key["ENV"] == Env.PRODUCTION) else None
-        self._base_path = "http://api.sandbox.dana.id" if (api_key["DANA_ENV"] == Env.SANDBOX or api_key["ENV"] == Env.SANDBOX) else \
+        self._base_path = "https://api.sandbox.dana.id" if (api_key["DANA_ENV"] == Env.SANDBOX or api_key["ENV"] == Env.SANDBOX) else \
         "https://api.saas.dana.id" if (api_key["DANA_ENV"] == Env.PRODUCTION or api_key["ENV"] == Env.PRODUCTION) else None
         """Default Base url
         """
@@ -595,7 +595,7 @@ class SnapConfiguration(BaseConfiguration):
 
         host_settings = [
             {
-                'url': "http://api.sandbox.dana.id",
+                'url': "https://api.sandbox.dana.id",
                 'description': "No description provided",
             }
         ] if (self.api_key["DANA_ENV"] == Env.SANDBOX or self.api_key["ENV"] == Env.SANDBOX) else [

{dana_python-2.2.1 → dana_python-3.0.0}/dana/webhook/webhook.py

@@ -25,7 +25,7 @@ from cryptography.hazmat.primitives.asymmetric import padding
 
 from dana.webhook.finish_notify_request import FinishNotifyRequest
 
-# Sandbox gateway public key used for webhook signature verification when DANA_ENV/ENV is sandbox.
+# Sandbox gateway public key used for webhook signature verification only when DANA_ENV/ENV is explicitly sandbox.
 SANDBOX_WEBHOOK_PUBLIC_KEY = """-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaKVGRbin4Wh4KN35OPh
 ytJBjYTz7QZKSZjmHfiHxFmulfT87rta+IvGJ0rCBgg+1EtKk1hX8G5gPGJs1htJ
@@ -37,9 +37,41 @@ X6JV1OSST1C9sbPGzMHZ8AGB51BM0mok7davD/5irUk+f0C25OgzkwtxAt80dkDo
 -----END PUBLIC KEY-----"""
 
 
+def resolve_webhook_key_content(public_key=None, public_key_path=None) -> str:
+    """
+    Selects the webhook public key content.
+
+    The sandbox key is used only when the environment is explicitly sandbox
+    (first non-empty of DANA_ENV, ENV, trimmed and lower-cased). In any other
+    case, including when neither variable is set, the supplied key is used:
+    public_key_path first, then public_key.
+
+    Raises:
+        ValueError: If no key is available or the key file cannot be read.
+    """
+    env = (os.getenv("DANA_ENV") or os.getenv("ENV") or "").strip().lower()
+    if env == "sandbox":
+        return SANDBOX_WEBHOOK_PUBLIC_KEY
+    if public_key_path:
+        try:
+            return Path(public_key_path).read_text().strip()
+        except Exception as e:
+            raise ValueError(f"Failed to read key from file path '{public_key_path}': {e}")
+    if public_key:
+        return public_key.strip()
+    raise ValueError(
+        "Either 'public_key' or 'public_key_path' must be provided. "
+        "In production, pass your DANA public key via 'public_key' or 'public_key_path'. "
+        "Set DANA_ENV=sandbox to use the built-in sandbox key."
+    )
+
+
 class WebhookParser:
     """
-    Verifies incoming webhook signatures and parse webhook request into FinishNotifyRequest object
+    Verifies incoming webhook signatures and parse webhook request into FinishNotifyRequest object.
+
+    The built-in sandbox key is used only when DANA_ENV (or ENV) is explicitly "sandbox";
+    otherwise the supplied public_key_path / public_key is required.
     """
     def __init__(self, public_key: str = None, public_key_path: str = None):
         """
@@ -48,23 +80,13 @@ class WebhookParser:
             public_key (str, optional): The public key as a string. Defaults to None.
             public_key_path (str, optional): Path to the public key PEM file. Defaults to None.
                                           If provided, this will be prioritized over public_key.
+            When DANA_ENV (or ENV) is "sandbox", the built-in sandbox key is used and both
+            arguments are ignored. For any other value, including unset, one of them is required.
         Raises:
-            ValueError: If neither public_key nor public_key_path is provided,
+            ValueError: If no key is available (and the environment is not sandbox),
                         if the key file cannot be read, or if the key format is invalid.
         """
-        key_input_content = ""
-        env = (os.getenv("DANA_ENV") or os.getenv("ENV") or "").strip().lower()
-        if env == "sandbox" or env == "":
-            key_input_content = SANDBOX_WEBHOOK_PUBLIC_KEY
-        elif public_key_path:
-            try:
-                key_input_content = Path(public_key_path).read_text().strip()
-            except Exception as e:
-                raise ValueError(f"Failed to read key from file path '{public_key_path}': {e}")
-        elif public_key:
-            key_input_content = public_key.strip()
-        else:
-            raise ValueError("Either 'public_key' or 'public_key_path' must be provided.")
+        key_input_content = resolve_webhook_key_content(public_key, public_key_path)
 
         if not key_input_content:
              raise ValueError("Key content is empty.")

dana_python-3.0.0/dana/widget/v1/util.py

@@ -0,0 +1,338 @@
+# Copyright 2026 PT Espay Debit Indonesia Koe
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import os
+import uuid
+import json
+import base64
+import hashlib
+import urllib.parse
+from datetime import datetime, timezone, timedelta
+from typing import Optional, Dict, Any
+from dana.widget.v1.models import WidgetPaymentResponse, ApplyOTTResponse
+from dana.utils.snap_header import SnapHeader
+
+# For cryptography operations
+try:
+    from cryptography.hazmat.primitives.asymmetric import padding
+    from cryptography.hazmat.primitives import hashes
+    from cryptography.hazmat.primitives.serialization import load_pem_private_key
+    CRYPTOGRAPHY_AVAILABLE = True
+except ImportError:
+    CRYPTOGRAPHY_AVAILABLE = False
+
+# Import enum values - assuming these are defined in the generated code
+try:
+    from dana.widget.v1.enum import Mode, TerminalType
+except ImportError:
+    # If enums aren't available, define Mode as a simple class
+    class Mode:
+        API = "API"
+        DEEPLINK = "DEEPLINK"
+
+    class TerminalType:
+        WEB = "WEB"
+
+
+class Util:
+    """
+    Utility class for the Dana Widget API.
+    """
+
+    _OAUTH_QUERY_ESCAPE_KEYS = frozenset(
+        {"redirectUrl", "timestamp", "seamlessData", "seamlessSign"}
+    )
+
+    @staticmethod
+    def generate_channel_id() -> str:
+        """Channel ID for widget OAuth URLs (max 5 chars). Matches Go GenerateChannelId."""
+        channel_id = os.environ.get("CHANNEL_ID") or "95221"
+        return channel_id[:5]
+
+    @staticmethod
+    def generate_scopes() -> str:
+        """OAuth scopes based on environment. Matches Go GenerateScopes."""
+        env = os.environ.get("ENV") or os.environ.get("DANA_ENV") or "sandbox"
+        if env.lower() != "production":
+            return "CASHIER,AGREEMENT_PAY,QUERY_BALANCE,DEFAULT_BASIC_PROFILE,MINI_DANA"
+        return "MINI_DANA,CASHIER,QUERY_BALANCE,DEFAULT_BASIC_PROFILE"
+
+    @staticmethod
+    def generate_timestamp() -> str:
+        """Timestamp in Asia/Jakarta RFC3339 format. Matches Go GenerateTimestamp."""
+        try:
+            from zoneinfo import ZoneInfo
+
+            now = datetime.now(ZoneInfo("Asia/Jakarta"))
+        except Exception:
+            now = datetime.now(timezone.utc) + timedelta(hours=7)
+        return now.strftime("%Y-%m-%dT%H:%M:%S+07:00")
+
+    @staticmethod
+    def _get_attr(data, name: str, default=None):
+        if isinstance(data, dict):
+            return data.get(name, default)
+        return getattr(data, name, default)
+
+    @staticmethod
+    def _is_field_set(data, field_name: str) -> bool:
+        fields_set = getattr(data, "model_fields_set", None)
+        if fields_set is None:
+            fields_set = getattr(data, "__fields_set__", None)
+        if fields_set is not None:
+            return field_name in fields_set
+        if isinstance(data, dict):
+            return field_name in data
+        return getattr(data, field_name, None) is not None
+
+    @staticmethod
+    def _normalize_seamless_data(seamless_data) -> Dict[str, Any]:
+        if seamless_data is None:
+            return {}
+
+        if isinstance(seamless_data, dict):
+            raw = dict(seamless_data)
+        elif hasattr(seamless_data, "model_dump"):
+            raw = seamless_data.model_dump(exclude_none=True)
+        elif hasattr(seamless_data, "dict"):
+            raw = seamless_data.dict(exclude_none=True)
+        else:
+            try:
+                raw = vars(seamless_data)
+            except TypeError:
+                raw = json.loads(json.dumps(seamless_data))
+
+        result = {
+            key: value
+            for key, value in raw.items()
+            if value is not None and value != ""
+        }
+
+        if "mobileNumber" in result:
+            result["mobile"] = result.pop("mobileNumber")
+        if "mobile_number" in result:
+            result["mobile"] = result.pop("mobile_number")
+
+        return result
+
+    @staticmethod
+    def _build_oauth_query_string(url_params: Dict[str, str]) -> str:
+        parts = []
+        for key, value in url_params.items():
+            if value is None:
+                continue
+            if key in Util._OAUTH_QUERY_ESCAPE_KEYS:
+                parts.append(f"{key}={urllib.parse.quote(str(value), safe='')}")
+            else:
+                parts.append(f"{key}={value}")
+        return "&".join(parts)
+
+    @staticmethod
+    def generate_oauth_url(data, private_key: Optional[str] = None, private_key_path: Optional[str] = None) -> str:
+        """
+        Generate OAuth URL for testing
+
+        Args:
+            data: OAuth URL data object
+            private_key: Optional private key content
+            private_key_path: Optional path to private key file
+
+        Returns:
+            str: The generated OAuth URL
+        """
+        env = os.environ.get("DANA_ENV") or os.environ.get("ENV") or "sandbox"
+        mode = Util._get_attr(data, "mode") or Mode.API
+
+        if mode == Mode.DEEPLINK:
+            base_url = (
+                "https://m.dana.id/n/link/binding"
+                if env.lower() == "production"
+                else "https://m.sandbox.dana.id/n/link/binding"
+            )
+        else:
+            base_url = (
+                "https://m.dana.id/v1.0/get-auth-code"
+                if env.lower() == "production"
+                else "https://m.sandbox.dana.id/v1.0/get-auth-code"
+            )
+
+        partner_id = os.environ.get("X_PARTNER_ID")
+        if not partner_id:
+            raise RuntimeError("X_PARTNER_ID is not defined")
+
+        state = Util._get_attr(data, "state")
+        if not state:
+            state = str(uuid.uuid4())
+
+        channel_id = Util.generate_channel_id()
+
+        scopes = Util._get_attr(data, "scopes")
+        if scopes:
+            scopes = ",".join(scopes) if isinstance(scopes, (list, tuple)) else scopes
+        else:
+            scopes = Util.generate_scopes()
+
+        external_id = Util._get_attr(data, "external_id")
+        if not external_id:
+            external_id = str(uuid.uuid4())
+
+        merchant_id = Util._get_attr(data, "merchant_id") or os.environ.get("MERCHANT_ID", "")
+        timestamp = Util.generate_timestamp()
+        request_id = None
+
+        if mode == Mode.DEEPLINK:
+            request_id = str(uuid.uuid4())
+            url_params = {
+                "partnerId": partner_id,
+                "scopes": scopes,
+                "terminalType": TerminalType.WEB,
+                "externalId": external_id,
+                "requestId": request_id,
+                "redirectUrl": Util._get_attr(data, "redirect_url"),
+                "state": state,
+            }
+        else:
+            url_params = {
+                "partnerId": partner_id,
+                "scopes": scopes,
+                "externalId": external_id,
+                "channelId": channel_id,
+                "redirectUrl": Util._get_attr(data, "redirect_url"),
+                "timestamp": timestamp,
+                "state": state,
+                "isSnapBI": "true",
+            }
+            if merchant_id:
+                url_params["merchantId"] = merchant_id
+
+            sub_merchant_id = Util._get_attr(data, "sub_merchant_id")
+            if sub_merchant_id:
+                url_params["subMerchantId"] = sub_merchant_id
+
+            if Util._is_field_set(data, "lang"):
+                lang = Util._get_attr(data, "lang")
+                if lang:
+                    url_params["lang"] = lang
+
+            if Util._is_field_set(data, "allow_registration"):
+                allow_registration = Util._get_attr(data, "allow_registration")
+                if allow_registration is not None:
+                    url_params["allowRegistration"] = (
+                        "true" if allow_registration else "false"
+                    )
+
+        seamless_data = Util._normalize_seamless_data(Util._get_attr(data, "seamless_data"))
+        if seamless_data:
+            if mode == Mode.DEEPLINK and request_id:
+                seamless_data["externalUid"] = external_id
+                seamless_data["reqTime"] = timestamp
+                seamless_data["verifiedTime"] = "0"
+                seamless_data["reqMsgId"] = request_id
+
+            seamless_data_json = json.dumps(seamless_data, separators=(",", ":"))
+            url_params["seamlessData"] = seamless_data_json
+
+            pk = private_key or os.environ.get("PRIVATE_KEY")
+            pk_path = private_key_path or os.environ.get("PRIVATE_KEY_PATH")
+            seamless_sign = Util.generate_seamless_sign(seamless_data, pk, pk_path)
+            if seamless_sign:
+                url_params["seamlessSign"] = seamless_sign
+
+        query_string = Util._build_oauth_query_string(url_params)
+        return f"{base_url}?{query_string}"
+
+    @staticmethod
+    def generate_seamless_sign(seamless_data: Dict[str, Any], private_key: Optional[str] = None, private_key_path: Optional[str] = None) -> str:
+        """
+        Generate seamless sign for OAuth URL
+
+        Args:
+            seamless_data: The seamless data to sign
+            private_key: Optional private key content
+            private_key_path: Optional path to private key file
+
+        Returns:
+            str: The generated signature
+        """
+        try:
+            usable_private_key = SnapHeader.get_usable_private_key(private_key, private_key_path)
+            data_to_sign = json.dumps(seamless_data, separators=(",", ":")).encode()
+
+            if CRYPTOGRAPHY_AVAILABLE:
+                key = load_pem_private_key(usable_private_key.encode(), password=None)
+                signature = key.sign(
+                    data_to_sign,
+                    padding.PKCS1v15(),
+                    hashes.SHA256(),
+                )
+                return base64.b64encode(signature).decode()
+
+            return hashlib.sha256(data_to_sign + str(int(datetime.now().timestamp())).encode()).hexdigest()
+
+        except Exception:
+            return hashlib.sha256(
+                (json.dumps(seamless_data, separators=(",", ":")) + str(int(datetime.now().timestamp()))).encode()
+            ).hexdigest()
+
+    @staticmethod
+    def generate_complete_payment_url(widget_payment_response: WidgetPaymentResponse = None, apply_ott_response: ApplyOTTResponse = None) -> str:
+        """
+        Combines the webRedirectUrl from WidgetPaymentResponse with the OTT token from ApplyOTTResponse
+
+        Args:
+            widget_payment_response: The widget payment response
+            apply_ott_response: The apply OTT response
+
+        Returns:
+            str: The generated payment URL or empty string if inputs are invalid
+        """
+        if widget_payment_response is None or apply_ott_response is None:
+            return ""
+
+        web_redirect_url = getattr(widget_payment_response, "web_redirect_url", None)
+        if not web_redirect_url:
+            return ""
+
+        user_resources = getattr(apply_ott_response, "user_resources", None)
+        if not user_resources or len(user_resources) == 0:
+            return web_redirect_url
+
+        ott_value = getattr(user_resources[0], "value", None) if user_resources else None
+        if not ott_value:
+            return web_redirect_url
+
+        parsed = urllib.parse.urlparse(web_redirect_url)
+        q = dict(urllib.parse.parse_qsl(parsed.query, keep_blank_values=True))
+        q["ott"] = str(ott_value)
+        new_query = urllib.parse.urlencode(q)
+        return urllib.parse.urlunparse((
+            parsed.scheme,
+            parsed.netloc,
+            parsed.path,
+            parsed.params,
+            new_query,
+            parsed.fragment,
+        ))

{dana_python-2.2.1 → dana_python-3.0.0/dana_python.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dana-python
-Version: 2.2.1
+Version: 3.0.0
 Summary: API Client (SDK) for DANA APIs based on https://dashboard.dana.id/api-docs
 Author-email: DANA Package Manager  <package-manager@dana.id>
 Maintainer-email: DANA Package Manager  <package-manager@dana.id>
@@ -8,19 +8,16 @@ License-Expression: Apache-2.0
 Project-URL: homepage, https://dashboard.dana.id/api-docs
 Project-URL: repository, https://github.com/dana-id/dana-python
 Keywords: DANA,DANA ID Docs,DANA SDK,DANA Python,DANA API Client,DANA Python API Client,DANA Python SDK
-Requires-Python: >3.9.1
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: annotated-types==0.7.0
-Requires-Dist: cffi==2.0.0
-Requires-Dist: cryptography<46.0.0,>=44.0.2
-Requires-Dist: pycparser==2.23
+Requires-Dist: annotated-types>=0.7.0
+Requires-Dist: cryptography>=50.0.0
 Requires-Dist: pydantic<3.0.0,>=2.10.6
 Requires-Dist: pydantic-core<3.0.0,>=2.27.2
-Requires-Dist: python-dateutil==2.9.0.post0
-Requires-Dist: six==1.17.0
+Requires-Dist: python-dateutil>=2.9.0.post0
 Requires-Dist: typing-extensions<5.0.0,>=4.12.2
-Requires-Dist: urllib3<3.0.0,>=2.3.0
+Requires-Dist: urllib3<3.0.0,>=2.8.0
 Dynamic: license-file
 
 # dana-python
@@ -62,7 +59,7 @@ Here is the link: https://github.com/dana-id/uat-script.
 
 ## Requirements.
 
-Python 3.9.1+
+Python 3.10+ (patched releases: 3.11.17, 3.12.15, 3.13.17, 3.14.9, 3.15.1 or later)
 
 ## Installation & Usage
 ### pip install

{dana_python-2.2.1 → dana_python-3.0.0}/dana_python.egg-info/SOURCES.txt

@@ -237,12 +237,15 @@ dana_python.egg-info/SOURCES.txt
 dana_python.egg-info/dependency_links.txt
 dana_python.egg-info/requires.txt
 dana_python.egg-info/top_level.txt
+tests/test_dependency_floors.py
 tests/test_disbursement_api.py
 tests/test_disbursement_custom_validation_enrich.py
 tests/test_merchant_management_api.py
 tests/test_payment_gateway_api.py
 tests/test_payment_gateway_with_automation.py
+tests/test_snap_configuration.py
 tests/test_snap_header.py
 tests/test_webhook.py
+tests/test_webhook_key_selection.py
 tests/test_widget_api.py
 tests/test_widget_with_automation.py

dana_python-3.0.0/dana_python.egg-info/requires.txt

@@ -0,0 +1,7 @@
+annotated-types>=0.7.0
+cryptography>=50.0.0
+pydantic<3.0.0,>=2.10.6
+pydantic-core<3.0.0,>=2.27.2
+python-dateutil>=2.9.0.post0
+typing-extensions<5.0.0,>=4.12.2
+urllib3<3.0.0,>=2.8.0

{dana_python-2.2.1 → dana_python-3.0.0}/pyproject.toml

@@ -1,10 +1,10 @@
 [project]
 name = "dana-python"
-version = "2.2.1"
+version = "3.0.0"
 readme = "README.md"
 description = "API Client (SDK) for DANA APIs based on https://dashboard.dana.id/api-docs"
 license = "Apache-2.0"
-requires-python = ">3.9.1"
+requires-python = ">=3.10"
 authors = [
   { name = "DANA Package Manager ", email = "package-manager@dana.id" },
 ]
@@ -13,16 +13,13 @@ maintainers = [
 ]
 keywords = ["DANA", "DANA ID Docs", "DANA SDK", "DANA Python", "DANA API Client", "DANA Python API Client", "DANA Python SDK"]
 dependencies = [
-  "annotated-types==0.7.0",
-  "cffi==2.0.0",
-  "cryptography>=44.0.2,<46.0.0",
-  "pycparser==2.23",
+  "annotated-types>=0.7.0",
+  "cryptography>=50.0.0",
   "pydantic>=2.10.6,<3.0.0",
   "pydantic-core>=2.27.2,<3.0.0",
-  "python-dateutil==2.9.0.post0",
-  "six==1.17.0",
+  "python-dateutil>=2.9.0.post0",
   "typing-extensions>=4.12.2,<5.0.0",
-  "urllib3>=2.3.0,<3.0.0"
+  "urllib3>=2.8.0,<3.0.0"
 ]
 
 [project.urls]

dana_python-3.0.0/tests/test_dependency_floors.py

@@ -0,0 +1,25 @@
+from importlib.metadata import version
+try:
+    import tomllib  # 3.11+
+except ModuleNotFoundError:  # Python 3.10
+    import tomli as tomllib
+from pathlib import Path
+
+PYPROJECT = tomllib.loads((Path(__file__).parent.parent / "pyproject.toml").read_text())
+
+def _major_minor(v):
+    return tuple(int(p) for p in v.split(".")[:2])
+
+def test_requires_python_floor():
+    assert PYPROJECT["project"]["requires-python"] == ">=3.10"
+
+def test_cryptography_spec_has_floor_and_no_cap():
+    spec = next(d for d in PYPROJECT["project"]["dependencies"] if d.startswith("cryptography"))
+    assert spec == "cryptography>=50.0.0"
+
+def test_urllib3_spec():
+    assert "urllib3>=2.8.0,<3.0.0" in PYPROJECT["project"]["dependencies"]
+
+def test_installed_versions_are_patched():
+    assert _major_minor(version("cryptography")) >= (50, 0)
+    assert _major_minor(version("urllib3")) >= (2, 8)

{dana_python-2.2.1 → dana_python-3.0.0}/tests/test_payment_gateway_api.py

@@ -12,6 +12,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 import json
+import os
+
 import pytest
 from dana.payment_gateway.v1 import PaymentGatewayApi
 from dana.payment_gateway.v1.models import ConsultPayPaymentInfo, ConsultPayRequest, CreateOrderByApiRequest, CreateOrderByRedirectRequest, QueryPaymentRequest, CancelOrderRequest, RefundOrderRequest, Money, PayOptionDetail
@@ -21,6 +23,7 @@ from dana.webhook import WebhookParser
 from dana.utils.snap_header import SnapHeader
 # Import fixtures directly from their modules to avoid circular imports
 from tests.fixtures.api_client import api_instance_payment_gateway, api_instance_payment_gateway_with_key_path
+from tests.helpers.env_credentials import external_shop_id
 from tests.fixtures.payment_gateway import consult_pay_request, consult_pay_request_without_buyer, consult_pay_request_with_external_store_id, create_order_by_api_request, query_payment_request, cancel_order_request, refund_order_request, webhook_key_pair
 
 
@@ -51,6 +54,8 @@ class TestPaymentGatewayApi:
 
     def test_consult_pay_with_external_store_id(self, api_instance_payment_gateway: PaymentGatewayApi, consult_pay_request_with_external_store_id: ConsultPayRequest):
         """Should give success response code and message and correct mandatory fields"""
+        if not external_shop_id():
+            pytest.skip("EXTERNAL_SHOP_ID is required for consult pay with external store id")
         
         api_response = api_instance_payment_gateway.consult_pay(consult_pay_request_with_external_store_id)
 
@@ -80,6 +85,10 @@ class TestPaymentGatewayApi:
         assert api_response.response_code == '2005400'
         assert api_response.response_message == 'Successful'
 
+    @pytest.mark.skipif(
+        "CI" in os.environ or "GITLAB_CI" in os.environ,
+        reason="CI: sandbox merchant lacks cancel permission (4035715 / 5005701)",
+    )
     def test_cancel_order_success(self, api_instance_payment_gateway: PaymentGatewayApi, create_order_by_api_request: CreateOrderByApiRequest, cancel_order_request: CancelOrderRequest):
         """Should successfully cancel an order and return success response code"""
         
@@ -642,8 +651,12 @@ class TestPaymentGatewaySandboxPayMethodPayOptionValidation:
     ):
         from tests.fixtures.payment_gateway import PaymentGatewayFixtures
 
+        shop_id = external_shop_id()
+        if not shop_id:
+            pytest.skip("EXTERNAL_SHOP_ID is required for create order with external store id")
+
         request = PaymentGatewayFixtures.get_create_order_by_redirect_request()
-        request.external_store_id = 'test_shop'
+        request.external_store_id = shop_id
         response = api_instance_payment_gateway.create_order(request)
 
         if response.response_message: