paytechuz 0.2.16__tar.gz → 0.2.18__tar.gz

{paytechuz-0.2.16 → paytechuz-0.2.18}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: paytechuz
-Version: 0.2.16
+Version: 0.2.18
 Summary: Unified Python package for Uzbekistan payment gateways
 Home-page: https://github.com/Muhammadali-Akbarov/paytechuz
 Author: Muhammadali Akbarov

{paytechuz-0.2.16 → paytechuz-0.2.18}/examples/paytechuz_fastapi/main.py

@@ -91,12 +91,12 @@ async def payme_webhook(request: Request, db: Session = Depends(get_db)):
     )
     return await handler.handle_webhook(request)
 
+
 @app.post("/payments/click/webhook")
 async def click_webhook(request: Request, db: Session = Depends(get_db)):
     handler = CustomClickWebhookHandler(
         db=db,
         service_id="your_service_id",
-        merchant_id="your_merchant_id",
         secret_key="your_secret_key",
         account_model=Order
     )

{paytechuz-0.2.16 → paytechuz-0.2.18}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "paytechuz"
-version = "0.2.16"
+version = "0.2.18"
 description = "Unified Python package for Uzbekistan payment gateways"
 readme = "README.md"
 requires-python = ">=3.7"

{paytechuz-0.2.16 → paytechuz-0.2.18}/setup.py

@@ -8,7 +8,7 @@ long_description = (here / "README.md").read_text(encoding="utf-8")
 
 setup(
     name='paytechuz',
-    version='0.2.16',
+    version='0.2.18',
     license='MIT',
     author="Muhammadali Akbarov",
     author_email='muhammadali17abc@gmail.com',

{paytechuz-0.2.16 → paytechuz-0.2.18}/src/integrations/fastapi/routes.py

@@ -7,11 +7,10 @@ import json
 import logging
 from datetime import datetime
 from decimal import Decimal
-from typing import Dict, Any, Optional, Callable
+from typing import Dict, Any, Optional
 
 from fastapi import (
     APIRouter,
-    Depends,
     HTTPException,
     Request,
     Response,
@@ -919,37 +918,48 @@ class ClickWebhookHandler:
         """
         Check authentication using signature.
         """
-        if str(params.get('service_id')) != self.service_id:
+        if not all([self.service_id, self.secret_key]):
             raise HTTPException(
                 status_code=status.HTTP_401_UNAUTHORIZED,
-                detail="Invalid service ID"
+                detail="Missing required settings: service_id or secret_key"
             )
 
-        # Check signature if secret key is provided
-        if self.secret_key:
-            sign_string = params.get('sign_string')
-            sign_time = params.get('sign_time')
+        if str(params.get("service_id")) != self.service_id:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail="Invalid service ID"
+            )
 
-            if not sign_string or not sign_time:
-                raise HTTPException(
-                    status_code=status.HTTP_401_UNAUTHORIZED,
-                    detail="Missing signature parameters"
-                )
+        sign_string = params.get("sign_string")
+        sign_time = params.get("sign_time")
 
-            # Create string to sign
-            to_sign = f"{params.get('click_trans_id')}{params.get('service_id')}"
-            to_sign += f"{self.secret_key}{params.get('merchant_trans_id')}"
-            to_sign += f"{params.get('amount')}{params.get('action')}"
-            to_sign += f"{sign_time}"
+        if not sign_string or not sign_time:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail="Missing signature parameters"
+            )
 
-            # Generate signature
-            signature = hashlib.md5(to_sign.encode('utf-8')).hexdigest()
+        # Prepare signature components
+        text_parts = [
+            str(params.get("click_trans_id") or ""),
+            str(params.get("service_id") or ""),
+            str(self.secret_key or ""),
+            str(params.get("merchant_trans_id") or ""),
+            str(params.get("merchant_prepare_id") or ""),
+            str(params.get("amount") or ""),
+            str(params.get("action") or ""),
+            str(sign_time)
+        ]
+
+        # Calculate hash
+        calculated_hash = hashlib.md5("".join(text_parts).encode("utf-8")).hexdigest()
+
+        if calculated_hash != sign_string:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail="Invalid signature"
+            )
 
-            if signature != sign_string:
-                raise HTTPException(
-                    status_code=status.HTTP_401_UNAUTHORIZED,
-                    detail="Invalid signature"
-                )
 
     def _find_account(self, merchant_trans_id: str) -> Any:
         """

{paytechuz-0.2.16 → paytechuz-0.2.18}/src/paytechuz/__init__.py

@@ -6,7 +6,7 @@ payment systems in Uzbekistan. It supports Django, Flask, and FastAPI.
 """
 from typing import Any
 
-__version__ = '0.2.15'
+__version__ = '0.2.17'
 
 # Import framework integrations - these imports are used to check availability
 # of frameworks, not for direct usage

{paytechuz-0.2.16 → paytechuz-0.2.18}/src/paytechuz.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: paytechuz
-Version: 0.2.16
+Version: 0.2.18
 Summary: Unified Python package for Uzbekistan payment gateways
 Home-page: https://github.com/Muhammadali-Akbarov/paytechuz
 Author: Muhammadali Akbarov