paytechuz 0.2.22__py3-none-any.whl → 0.2.24__py3-none-any.whl

paytechuz/__init__.py

@@ -6,7 +6,7 @@ payment systems in Uzbekistan. It supports Django, Flask, and FastAPI.
 """
 from typing import Any
 
-__version__ = '0.2.19'
+__version__ = '0.2.24'
 
 # Import framework integrations - these imports are used to check availability
 # of frameworks, not for direct usage

paytechuz/integrations/django/webhooks.py

@@ -786,30 +786,37 @@ class ClickWebhook(View):
         """
         Check authentication using signature.
         """
-        if str(params.get('service_id')) != self.service_id:
+        # Check if service_id and secret_key are set
+        if not self.service_id or not self.secret_key:
+            raise PermissionDenied("Missing required settings: service_id or secret_key")
+
+        if str(params.get("service_id")) != self.service_id:
             raise PermissionDenied("Invalid service ID")
 
-        # Check signature if secret key is provided
-        if self.secret_key:
-            sign_string = params.get('sign_string')
-            sign_time = params.get('sign_time')
+        sign_string = params.get("sign_string")
+        sign_time = params.get("sign_time")
 
-            if not sign_string or not sign_time:
-                raise PermissionDenied("Missing signature parameters")
+        if not sign_string or not sign_time:
+            raise PermissionDenied("Missing signature parameters")
 
-            # Create string to sign
-            to_sign = (
-                f"{params.get('click_trans_id')}{params.get('service_id')}"
-            )
-            to_sign += f"{self.secret_key}{params.get('merchant_trans_id')}"
-            to_sign += f"{params.get('amount')}{params.get('action')}"
-            to_sign += f"{sign_time}"
+        # Prepare signature components; note merchant_prepare_id added compared to your original
+        text_parts = [
+            str(params.get("click_trans_id") or ""),
+            str(params.get("service_id") or ""),
+            str(self.secret_key or ""),
+            str(params.get("merchant_trans_id") or ""),
+            str(params.get("merchant_prepare_id") or ""),  # added here
+            str(params.get("amount") or ""),
+            str(params.get("action") or ""),
+            str(sign_time)
+        ]
+
+        # Calculate hash
+        calculated_hash = hashlib.md5("".join(text_parts).encode("utf-8")).hexdigest()
 
-            # Generate signature
-            signature = hashlib.md5(to_sign.encode('utf-8')).hexdigest()
+        if calculated_hash != sign_string:
+            raise PermissionDenied("Invalid signature")
 
-            if signature != sign_string:
-                raise PermissionDenied("Invalid signature")
 
     def _find_account(self, merchant_trans_id):
         """

{paytechuz-0.2.22.dist-info → paytechuz-0.2.24.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: paytechuz
-Version: 0.2.22
+Version: 0.2.24
 Summary: Unified Python package for Uzbekistan payment gateways
 Home-page: https://github.com/Muhammadali-Akbarov/paytechuz
 Author: Muhammadali Akbarov

{paytechuz-0.2.22.dist-info → paytechuz-0.2.24.dist-info}/RECORD

@@ -1,4 +1,4 @@
-paytechuz/__init__.py,sha256=d-9AjWthchZAE_ykEjoBZ79o32gzqM1jZkkAQd-jB8s,1754
+paytechuz/__init__.py,sha256=ODKIHhEIrUJ9I-8OQ22jNkG0W8PCHxWi3DBFXFQLqYk,1754
 paytechuz/core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 paytechuz/core/base.py,sha256=Es6eEGNgDjQJe-kEJVAHSAh8AWbgtIuQMm0xn7qfjl4,2549
 paytechuz/core/constants.py,sha256=P2zeZ_cfZIttdC1vqkpIngkfRFh6loWzJYEgzQb5cKA,1660
@@ -23,14 +23,14 @@ paytechuz/integrations/django/apps.py,sha256=Q9wG2osL7_Ip2BcAkq7lmmhu4UKJAg6UtSs
 paytechuz/integrations/django/models.py,sha256=x3cVLY812Xts5oNk4VmCzK3zjb0FXQON9WV41PCtxaw,5696
 paytechuz/integrations/django/signals.py,sha256=VtNYEAnu13wi9PqadEaCU9LY_k2tY26AS4bnPIAqw7M,1319
 paytechuz/integrations/django/views.py,sha256=TL-LNbwrLvYjoBvGxm_yZjMVLBqelorgKjr4l3sKH1Y,3037
-paytechuz/integrations/django/webhooks.py,sha256=6GlLgLEizMjkD7dYR3AoLcLmZnMPwi3IaqB0Kln7dSk,31759
+paytechuz/integrations/django/webhooks.py,sha256=gATM5oxoNKznnCHHYanjwhgdpeoRGIhDGRxVO3SIYYU,32048
 paytechuz/integrations/django/migrations/0001_initial.py,sha256=SWHIUuwq91crzaxa9v1UK0kay8CxsjUo6t4bqg7j0Gw,1896
 paytechuz/integrations/django/migrations/__init__.py,sha256=KLQ5NdjOMLDS21-u3b_g08G1MjPMMhG95XI_N8m4FSo,41
 paytechuz/integrations/fastapi/__init__.py,sha256=DLnhAZQZf2ghu8BuFFfE7FzbNKWQQ2SLG8qxldRuwR4,565
 paytechuz/integrations/fastapi/models.py,sha256=9IqrsndIVuIDwDbijZ89biJxEWQASXRBfWVShxgerAc,5113
 paytechuz/integrations/fastapi/routes.py,sha256=t8zbqhMZsaJmEvMDgmF-NoRmbqksfX_AvIrx-3kCjg8,37845
 paytechuz/integrations/fastapi/schemas.py,sha256=PgRqviJiD4-u3_CIkUOX8R7L8Yqn8L44WLte7968G0E,3887
-paytechuz-0.2.22.dist-info/METADATA,sha256=JNeDz3IQeu9uOtMOt48IsarEErU6mMLAv6GWndyBgW4,10084
-paytechuz-0.2.22.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-paytechuz-0.2.22.dist-info/top_level.txt,sha256=oloyKGNVj9Z2h3wpKG5yPyTlpdpWW0-CWr-j-asCWBc,10
-paytechuz-0.2.22.dist-info/RECORD,,
+paytechuz-0.2.24.dist-info/METADATA,sha256=wWTY1mR8E2eE9ChZjydxSYQoITVmPwWpjqV0sCiMH_8,10084
+paytechuz-0.2.24.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+paytechuz-0.2.24.dist-info/top_level.txt,sha256=oloyKGNVj9Z2h3wpKG5yPyTlpdpWW0-CWr-j-asCWBc,10
+paytechuz-0.2.24.dist-info/RECORD,,