paytechuz 0.2.20__py3-none-any.whl → 0.2.21__py3-none-any.whl

paytechuz/integrations/fastapi/routes.py

@@ -989,42 +989,47 @@ class ClickWebhookHandler:
         """
         Check authentication using signature.
         """
-        if str(params.get('service_id')) != self.service_id:
+        if not all([self.service_id, self.secret_key]):
             raise HTTPException(
                 status_code=status.HTTP_401_UNAUTHORIZED,
-                detail="Invalid service ID"
+                detail="Missing required settings: service_id or secret_key"
             )
 
-        # Check signature if secret key is provided
-        if self.secret_key:
-            sign_string = params.get('sign_string')
-            sign_time = params.get('sign_time')
+        if str(params.get("service_id")) != self.service_id:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail="Invalid service ID"
+            )
 
-            if not sign_string or not sign_time:
-                raise HTTPException(
-                    status_code=status.HTTP_401_UNAUTHORIZED,
-                    detail="Missing signature parameters"
-                )
+        sign_string = params.get("sign_string")
+        sign_time = params.get("sign_time")
 
-            # Create string to sign
-            to_sign = (
-                f"{params.get('click_trans_id')}"
-                f"{params.get('service_id')}"
-                f"{self.secret_key}"
-                f"{params.get('merchant_trans_id')}"
-                f"{params.get('amount')}"
-                f"{params.get('action')}"
-                f"{sign_time}"
+        if not sign_string or not sign_time:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail="Missing signature parameters"
             )
 
-            # Generate signature
-            signature = hashlib.md5(to_sign.encode('utf-8')).hexdigest()
+        # Prepare signature components
+        text_parts = [
+            str(params.get("click_trans_id") or ""),
+            str(params.get("service_id") or ""),
+            str(self.secret_key or ""),
+            str(params.get("merchant_trans_id") or ""),
+            str(params.get("merchant_prepare_id") or ""),
+            str(params.get("amount") or ""),
+            str(params.get("action") or ""),
+            str(sign_time)
+        ]
+
+        # Calculate hash
+        calculated_hash = hashlib.md5("".join(text_parts).encode("utf-8")).hexdigest()
 
-            if signature != sign_string:
-                raise HTTPException(
-                    status_code=status.HTTP_401_UNAUTHORIZED,
-                    detail="Invalid signature"
-                )
+        if calculated_hash != sign_string:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail="Invalid signature"
+            )
 
     def _find_account(self, merchant_trans_id: str) -> Any:
         """

{paytechuz-0.2.20.dist-info → paytechuz-0.2.21.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: paytechuz
-Version: 0.2.20
+Version: 0.2.21
 Summary: Unified Python package for Uzbekistan payment gateways
 Home-page: https://github.com/Muhammadali-Akbarov/paytechuz
 Author: Muhammadali Akbarov

{paytechuz-0.2.20.dist-info → paytechuz-0.2.21.dist-info}/RECORD

@@ -59,9 +59,9 @@ paytechuz/integrations/django/migrations/0001_initial.py,sha256=SWHIUuwq91crzaxa
 paytechuz/integrations/django/migrations/__init__.py,sha256=KLQ5NdjOMLDS21-u3b_g08G1MjPMMhG95XI_N8m4FSo,41
 paytechuz/integrations/fastapi/__init__.py,sha256=DLnhAZQZf2ghu8BuFFfE7FzbNKWQQ2SLG8qxldRuwR4,565
 paytechuz/integrations/fastapi/models.py,sha256=9IqrsndIVuIDwDbijZ89biJxEWQASXRBfWVShxgerAc,5113
-paytechuz/integrations/fastapi/routes.py,sha256=61jsHsgGJZ_-ISfG2J1MSOCqIOLQ18C1boc9MVddkvg,37652
+paytechuz/integrations/fastapi/routes.py,sha256=t8zbqhMZsaJmEvMDgmF-NoRmbqksfX_AvIrx-3kCjg8,37845
 paytechuz/integrations/fastapi/schemas.py,sha256=PgRqviJiD4-u3_CIkUOX8R7L8Yqn8L44WLte7968G0E,3887
-paytechuz-0.2.20.dist-info/METADATA,sha256=_MGqOZihEdgBfy_F3IWzM5uSbYS6KMiNJHaqIQH1Bkk,11464
-paytechuz-0.2.20.dist-info/WHEEL,sha256=tZoeGjtWxWRfdplE7E3d45VPlLNQnvbKiYnx7gwAy8A,92
-paytechuz-0.2.20.dist-info/top_level.txt,sha256=v03IobsNVIGSgCareObqCsEwLgXOpwBvBTWy3y8-G_M,37
-paytechuz-0.2.20.dist-info/RECORD,,
+paytechuz-0.2.21.dist-info/METADATA,sha256=dHA9NdyvhNtzp8F0V7gmF8KC75OauwM_Yyy9cd8PRjw,11464
+paytechuz-0.2.21.dist-info/WHEEL,sha256=tZoeGjtWxWRfdplE7E3d45VPlLNQnvbKiYnx7gwAy8A,92
+paytechuz-0.2.21.dist-info/top_level.txt,sha256=v03IobsNVIGSgCareObqCsEwLgXOpwBvBTWy3y8-G_M,37
+paytechuz-0.2.21.dist-info/RECORD,,