python-redsys 2.0.0__tar.gz → 2.1.0__tar.gz

{python_redsys-2.0.0/python_redsys.egg-info → python_redsys-2.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-redsys
-Version: 2.0.0
+Version: 2.1.0
 Summary: A simple, lightweight client to handle payments through the RedSys platform.
 Author-email: David Díaz <d.diazp@gmail.com>
 License-Expression: Apache-2.0
@@ -48,6 +48,17 @@ pip install "python-redsys[http]"
 
 Requires Python 3.10+. Runtime dependencies: `cryptography` and `pydantic` (v2).
 
+## Status
+
+| | |
+|---|---|
+| Version | 2.1.0; 1.x receives fixes until 2026-12-31 |
+| Python | 3.10 to 3.15 |
+| RedSys documents followed | Redirection guide 4.2 (2026-02-04), REST guide 4.0.1 (2025-10-17), Bizum guide 2.6 (2026-08-25) |
+| Signature versions | `HMAC_SHA512_V2` (default), `HMAC_SHA512_V1`, `HMAC_SHA256_V1` |
+| Verified against the RedSys test environment | Redirect connection in a browser, with the 3DS challenge, for all three signature versions (2026-10-25); direct connection end to end (3DS initialization, challenged payment, refund, stored-card token charged as a merchant-initiated payment) on demand by the *Live* workflow |
+| Not yet verified live | Frictionless 3DS and the 3DSMethod step |
+
 ## Upgrading from 1.x
 
 2.0 has a new API. The [migration guide](docs/migration-1x-to-2x.md) lists every change; 1.x receives fixes until 2026-12-31.
@@ -194,7 +205,7 @@ client.payment(
 ).send()
 ```
 
-`redsys.cof` provides the indicator constants (`INITIAL`/`SUBSEQUENT`, `RECURRING`/`INSTALLMENT`/...) and the `REQUEST_TOKEN` sentinel. The periodic fields (`sum_total`, `date_frequency`, `charge_expiry_date`) are also accepted by `DirectClient.payment()`. `redsys.sca` holds the PSD2 exemption codes for `excep_sca` (`LWV`, `TRA`, `MIT`, `COR`, `ATD`); `sca.QUERY` on `inicia()` asks which exemptions the card allows, returned in `response.excep_sca`.
+`redsys.cof` provides the indicator constants (`INITIAL`/`SUBSEQUENT`, `RECURRING`/`INSTALLMENT`/...) and the `REQUEST_TOKEN` sentinel. The token and COF fields are also accepted by `RedirectClient.payment()`, so the first payment can run on the RedSys page. The periodic fields (`sum_total`, `date_frequency`, `charge_expiry_date`) are accepted by `DirectClient.payment()`. `redsys.sca` holds the PSD2 exemption codes for `excep_sca` (`LWV`, `TRA`, `MIT`, `COR`, `ATD`); `sca.QUERY` on `inicia()` asks which exemptions the card allows, returned in `response.excep_sca`.
 
 ## Signature versions
 

{python_redsys-2.0.0 → python_redsys-2.1.0}/README.md

@@ -19,6 +19,17 @@ pip install "python-redsys[http]"
 
 Requires Python 3.10+. Runtime dependencies: `cryptography` and `pydantic` (v2).
 
+## Status
+
+| | |
+|---|---|
+| Version | 2.1.0; 1.x receives fixes until 2026-12-31 |
+| Python | 3.10 to 3.15 |
+| RedSys documents followed | Redirection guide 4.2 (2026-02-04), REST guide 4.0.1 (2025-10-17), Bizum guide 2.6 (2026-08-25) |
+| Signature versions | `HMAC_SHA512_V2` (default), `HMAC_SHA512_V1`, `HMAC_SHA256_V1` |
+| Verified against the RedSys test environment | Redirect connection in a browser, with the 3DS challenge, for all three signature versions (2026-10-25); direct connection end to end (3DS initialization, challenged payment, refund, stored-card token charged as a merchant-initiated payment) on demand by the *Live* workflow |
+| Not yet verified live | Frictionless 3DS and the 3DSMethod step |
+
 ## Upgrading from 1.x
 
 2.0 has a new API. The [migration guide](docs/migration-1x-to-2x.md) lists every change; 1.x receives fixes until 2026-12-31.
@@ -165,7 +176,7 @@ client.payment(
 ).send()
 ```
 
-`redsys.cof` provides the indicator constants (`INITIAL`/`SUBSEQUENT`, `RECURRING`/`INSTALLMENT`/...) and the `REQUEST_TOKEN` sentinel. The periodic fields (`sum_total`, `date_frequency`, `charge_expiry_date`) are also accepted by `DirectClient.payment()`. `redsys.sca` holds the PSD2 exemption codes for `excep_sca` (`LWV`, `TRA`, `MIT`, `COR`, `ATD`); `sca.QUERY` on `inicia()` asks which exemptions the card allows, returned in `response.excep_sca`.
+`redsys.cof` provides the indicator constants (`INITIAL`/`SUBSEQUENT`, `RECURRING`/`INSTALLMENT`/...) and the `REQUEST_TOKEN` sentinel. The token and COF fields are also accepted by `RedirectClient.payment()`, so the first payment can run on the RedSys page. The periodic fields (`sum_total`, `date_frequency`, `charge_expiry_date`) are accepted by `DirectClient.payment()`. `redsys.sca` holds the PSD2 exemption codes for `excep_sca` (`LWV`, `TRA`, `MIT`, `COR`, `ATD`); `sca.QUERY` on `inicia()` asks which exemptions the card allows, returned in `response.excep_sca`.
 
 ## Signature versions
 

{python_redsys-2.0.0 → python_redsys-2.1.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "python-redsys"
-version = "2.0.0"
+version = "2.1.0"
 description = "A simple, lightweight client to handle payments through the RedSys platform."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -40,7 +40,8 @@ lint = ["ruff", "mypy"]
 dev = [
     { include-group = "test" },
     { include-group = "lint" },
-    "pre-commit",
+    # filelock releases with the 2026 security fixes need Python 3.11; pre-commit pulls it in.
+    "pre-commit; python_version >= '3.11'",
 ]
 
 [tool.setuptools.packages.find]
@@ -60,6 +61,9 @@ select = ["E", "F", "I", "B", "UP"]
 [tool.ruff.format]
 quote-style = "single"
 
+[tool.coverage.report]
+fail_under = 95
+
 [tool.mypy]
 python_version = "3.10"
 ignore_missing_imports = true

{python_redsys-2.0.0 → python_redsys-2.1.0/python_redsys.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-redsys
-Version: 2.0.0
+Version: 2.1.0
 Summary: A simple, lightweight client to handle payments through the RedSys platform.
 Author-email: David Díaz <d.diazp@gmail.com>
 License-Expression: Apache-2.0
@@ -48,6 +48,17 @@ pip install "python-redsys[http]"
 
 Requires Python 3.10+. Runtime dependencies: `cryptography` and `pydantic` (v2).
 
+## Status
+
+| | |
+|---|---|
+| Version | 2.1.0; 1.x receives fixes until 2026-12-31 |
+| Python | 3.10 to 3.15 |
+| RedSys documents followed | Redirection guide 4.2 (2026-02-04), REST guide 4.0.1 (2025-10-17), Bizum guide 2.6 (2026-08-25) |
+| Signature versions | `HMAC_SHA512_V2` (default), `HMAC_SHA512_V1`, `HMAC_SHA256_V1` |
+| Verified against the RedSys test environment | Redirect connection in a browser, with the 3DS challenge, for all three signature versions (2026-10-25); direct connection end to end (3DS initialization, challenged payment, refund, stored-card token charged as a merchant-initiated payment) on demand by the *Live* workflow |
+| Not yet verified live | Frictionless 3DS and the 3DSMethod step |
+
 ## Upgrading from 1.x
 
 2.0 has a new API. The [migration guide](docs/migration-1x-to-2x.md) lists every change; 1.x receives fixes until 2026-12-31.
@@ -194,7 +205,7 @@ client.payment(
 ).send()
 ```
 
-`redsys.cof` provides the indicator constants (`INITIAL`/`SUBSEQUENT`, `RECURRING`/`INSTALLMENT`/...) and the `REQUEST_TOKEN` sentinel. The periodic fields (`sum_total`, `date_frequency`, `charge_expiry_date`) are also accepted by `DirectClient.payment()`. `redsys.sca` holds the PSD2 exemption codes for `excep_sca` (`LWV`, `TRA`, `MIT`, `COR`, `ATD`); `sca.QUERY` on `inicia()` asks which exemptions the card allows, returned in `response.excep_sca`.
+`redsys.cof` provides the indicator constants (`INITIAL`/`SUBSEQUENT`, `RECURRING`/`INSTALLMENT`/...) and the `REQUEST_TOKEN` sentinel. The token and COF fields are also accepted by `RedirectClient.payment()`, so the first payment can run on the RedSys page. The periodic fields (`sum_total`, `date_frequency`, `charge_expiry_date`) are accepted by `DirectClient.payment()`. `redsys.sca` holds the PSD2 exemption codes for `excep_sca` (`LWV`, `TRA`, `MIT`, `COR`, `ATD`); `sca.QUERY` on `inicia()` asks which exemptions the card allows, returned in `response.excep_sca`.
 
 ## Signature versions
 

python_redsys-2.1.0/redsys/api/transactions.py

@@ -0,0 +1,74 @@
+AUTHORIZATION = 0
+"""Authorization."""
+
+PREAUTHORIZATION = 1
+"""Pre-authorization."""
+
+CONFIRMATION = 2
+"""Confirmation."""
+
+REFUND = 3
+"""Refund."""
+
+AUTHENTICATION = 7
+"""Authentication."""
+
+AUTHENTICATION_CONFIRMATION = 8
+"""Authentication confirmation"""
+
+CANCELLATION = 9
+"""Cancellation"""
+
+REPLACEMENT_PREAUTHORIZATION = 11
+"""Replacement preauthorization: extends an existing preauthorization."""
+
+PAY_GOLD = 15
+"""Pay gold"""
+
+AUTHENTICATION_PUCE = 17
+"""PUCE authentication"""
+
+REFUND_WITHOUT_ORIGINAL = 34
+"""Refund without original"""
+
+BETTING_PRICE = 37
+"""Betting price"""
+
+PAY_GOLD_AUTHORIZATION = 38
+"""PayGold authorization: the cardholder completes a PayGold request (type 15); sent by RedSys, not the merchant."""
+
+DELETE_REFERENCE = 44
+"""Delete a stored card reference (token)."""
+
+PAYMENT_CANCELLATION = 45
+"""Payment cancellation, for merchant time-outs or technical errors."""
+
+REFUND_CANCELLATION = 46
+"""Refund cancellation, within 48 hours of the refund."""
+
+AUTHENTICATION_CONFIRMATION_CANCELLATION = 47
+"""Cancellation of an authentication confirmation (type 8)."""
+
+PARTIAL_CONFIRMATION = 48
+"""Partial confirmation of a preauthorization."""
+
+TRANSACTION_TYPES = (
+    AUTHORIZATION,
+    PREAUTHORIZATION,
+    CONFIRMATION,
+    REFUND,
+    AUTHENTICATION,
+    AUTHENTICATION_CONFIRMATION,
+    CANCELLATION,
+    REPLACEMENT_PREAUTHORIZATION,
+    PAY_GOLD,
+    AUTHENTICATION_PUCE,
+    REFUND_WITHOUT_ORIGINAL,
+    BETTING_PRICE,
+    PAY_GOLD_AUTHORIZATION,
+    DELETE_REFERENCE,
+    PAYMENT_CANCELLATION,
+    REFUND_CANCELLATION,
+    AUTHENTICATION_CONFIRMATION_CANCELLATION,
+    PARTIAL_CONFIRMATION,
+)

{python_redsys-2.0.0 → python_redsys-2.1.0}/redsys/clients.py

@@ -209,6 +209,11 @@ class _DirectBase(Client):
         transactions.CONFIRMATION: ConfirmationMessage,
         transactions.REFUND: RefundMessage,
         transactions.CANCELLATION: CancellationMessage,
+        transactions.REPLACEMENT_PREAUTHORIZATION: DirectPreauthorizationMessage,
+        transactions.PARTIAL_CONFIRMATION: ConfirmationMessage,
+        transactions.PAYMENT_CANCELLATION: CancellationMessage,
+        transactions.REFUND_CANCELLATION: CancellationMessage,
+        transactions.AUTHENTICATION_CONFIRMATION_CANCELLATION: CancellationMessage,
     }
 
     @property

{python_redsys-2.0.0 → python_redsys-2.1.0}/redsys/models.py

@@ -20,7 +20,7 @@ from json import dumps, loads
 from typing import Any
 from warnings import warn
 
-from pydantic import BaseModel, ConfigDict, Field, field_serializer, field_validator, model_validator
+from pydantic import AliasChoices, BaseModel, ConfigDict, Field, field_serializer, field_validator, model_validator
 
 from redsys.api.currencies import CURRENCIES, CURRENCY_DECIMALS
 from redsys.api.transactions import TRANSACTION_TYPES
@@ -43,10 +43,14 @@ def decode_merchant_parameters(data: bytes) -> dict:
     return loads(b64decode(data + b'=' * (-len(data) % 4)).decode('utf-8'))
 
 
+def currency_decimals(currency: int | None) -> int:
+    """ISO-4217 minor-unit exponent of a currency; 2 when unknown."""
+    return CURRENCY_DECIMALS.get(currency, 2) if currency is not None else 2
+
+
 def minor_units_factor(currency: int | None) -> int:
     """Power-of-ten factor that converts major units to the wire minor units."""
-    decimals = CURRENCY_DECIMALS.get(currency, 2) if currency is not None else 2
-    return 10**decimals
+    return 10 ** currency_decimals(currency)
 
 
 class BaseRequest(BaseModel):
@@ -117,7 +121,19 @@ class BaseRequest(BaseModel):
         return b64encode(dumps(self.prepare_parameters(), sort_keys=True).encode('utf-8'))
 
 
-class _RedirectFields(BaseModel):
+class _StoredCredentialFields(BaseModel):
+    """Tokenization and credential-on-file fields, accepted by both connections."""
+
+    identifier: str | None = Field(
+        None, alias='Ds_Merchant_Identifier', max_length=40, description='Stored-card token; see redsys.api.cof.'
+    )
+    direct_payment: str | None = Field(None, alias='Ds_Merchant_DirectPayment', description='"true" or "moto".')
+    cof_ini: str | None = Field(None, alias='Ds_Merchant_Cof_Ini', max_length=1, description='See redsys.api.cof.')
+    cof_type: str | None = Field(None, alias='Ds_Merchant_Cof_Type', max_length=1, description='See redsys.api.cof.')
+    cof_txnid: str | None = Field(None, alias='Ds_Merchant_Cof_Txnid', max_length=15)
+
+
+class _RedirectFields(_StoredCredentialFields):
     """Fields of the redirect connection (browser form)."""
 
     merchant_url: str | None = Field(None, alias='Ds_Merchant_MerchantURL', max_length=250)
@@ -137,24 +153,20 @@ class _RedirectFields(BaseModel):
     )
 
 
-class _DirectFields(BaseModel):
+class _DirectFields(_StoredCredentialFields):
     """Fields of the direct connection (server-to-server card data, 3DS, stored credentials)."""
 
     pan: str | None = Field(None, alias='Ds_Merchant_Pan', max_length=19, pattern=r'^[0-9]{12,19}$')
     expiry_date: str | None = Field(None, alias='Ds_Merchant_ExpiryDate', pattern=r'^[0-9]{4}$', description='YYMM.')
     cvv2: str | None = Field(None, alias='Ds_Merchant_Cvv2', pattern=r'^[0-9]{3,4}$')
-    identifier: str | None = Field(
-        None, alias='Ds_Merchant_Identifier', max_length=40, description='Stored-card token; see redsys.api.cof.'
-    )
     idoper: str | None = Field(None, alias='Ds_Merchant_Idoper', max_length=40, description='inSite operation token.')
-    direct_payment: str | None = Field(None, alias='Ds_Merchant_DirectPayment', description='"true" or "moto".')
     emv3ds: dict[str, Any] | None = Field(None, alias='Ds_Merchant_EMV3DS', description='Build with redsys.threeds.')
-    cof_ini: str | None = Field(None, alias='Ds_Merchant_Cof_Ini', max_length=1, description='See redsys.api.cof.')
-    cof_type: str | None = Field(None, alias='Ds_Merchant_Cof_Type', max_length=1, description='See redsys.api.cof.')
-    cof_txnid: str | None = Field(None, alias='Ds_Merchant_Cof_Txnid', max_length=15)
     # RedSys spells the wire name "Frecuency".
     date_frequency: str | None = Field(None, alias='Ds_Merchant_DateFrecuency', description='Days between charges.')
     charge_expiry_date: str | None = Field(None, alias='Ds_Merchant_ChargeExpiryDate', description='yyyy-MM-dd.')
+    dcc: str | dict[str, Any] | None = Field(
+        None, alias='Ds_Merchant_DCC', description='"Y" on the 3DS initialization; then the accepted offer.'
+    )
     excep_sca: str | None = Field(
         None,
         alias='Ds_Merchant_Excep_SCA',
@@ -243,13 +255,17 @@ class Response(BaseModel):
     secure_payment: str | None = Field(None, alias='Ds_SecurePayment')
     authorization_code: str | None = Field(None, alias='Ds_AuthorisationCode')
     error_code: str | None = Field(None, alias='Ds_ErrorCode')
-    card_number: str | None = Field(None, alias='Ds_CardNumber')
+    # REST responses send Ds_CardNumber; redirect notifications send Ds_Card_Number.
+    card_number: str | None = Field(
+        None, alias='Ds_CardNumber', validation_alias=AliasChoices('Ds_CardNumber', 'Ds_Card_Number', 'card_number')
+    )
     expiry_date: str | None = Field(None, alias='Ds_ExpiryDate')
     card_psd2: str | None = Field(None, alias='Ds_Card_PSD2')
     excep_sca: str | None = Field(
         None, alias='Ds_Excep_SCA', description='Exemptions the card allows, from the 3DS initialization.'
     )
     emv3ds: dict[str, Any] | None = Field(None, alias='Ds_EMV3DS')
+    dcc: dict[str, Any] | None = Field(None, alias='Ds_DCC', description='Offer from the 3DS initialization.')
     identifier: str | None = Field(None, alias='Ds_Merchant_Identifier', description='Token returned on request.')
     cof_txnid: str | None = Field(None, alias='Ds_Merchant_Cof_Txnid')
     processed_pay_method: str | None = Field(None, alias='Ds_ProcessedPayMethod', description='68 = Bizum.')
@@ -269,7 +285,8 @@ class Response(BaseModel):
     def from_merchant_parameters(cls, merchant_parameters: bytes) -> 'Response':
         response = cls.model_validate(decode_merchant_parameters(merchant_parameters))
         if response.amount is not None:
-            response.amount = response.amount / minor_units_factor(response.currency)
+            # scaleb keeps the currency's decimals: 100 EUR minor units read as 1.00, not 1.
+            response.amount = response.amount.scaleb(-currency_decimals(response.currency))
         return response
 
     def get_order(self) -> str | None:
@@ -336,5 +353,6 @@ __all__ = [
     'CancellationMessage',
     'Response',
     'decode_merchant_parameters',
+    'currency_decimals',
     'minor_units_factor',
 ]

{python_redsys-2.0.0 → python_redsys-2.1.0}/tests/test_direct.py

@@ -35,6 +35,12 @@ def _client(cls=DirectClient, **overrides):
     return cls(SECRET, **params)
 
 
+def _decoded_params(request):
+    from redsys.models import decode_merchant_parameters
+
+    return decode_merchant_parameters(request.merchant_parameters)
+
+
 def _payment(client):
     return client.payment(
         order=ORDER,
@@ -169,3 +175,20 @@ def test_async_inicia_posts_and_parses():
     assert response.is_paid()
     assert captured['url'] == 'https://sis-t.redsys.es:25443/sis/rest/iniciaPeticionREST'
     assert set(captured['json']) == {SIGNATURE_VERSION, MERCHANT_PARAMETERS, SIGNATURE}
+
+
+def test_extra_transaction_types_build_on_their_message():
+    from redsys import transactions
+
+    client = DirectClient('sq7HjrUOBfKmC576ILgskD5srU870gJ7', merchant_code='999008881', terminal=1, sandbox=True)
+    for code in (11, 44, 45, 46, 47, 48):
+        assert code in transactions.TRANSACTION_TYPES
+        request = client.request(code, order='000000000001', amount=Decimal('1.00'), currency=978)
+        assert _decoded_params(request)['Ds_Merchant_TransactionType'] == code
+
+
+def test_dcc_passes_through_request_and_response():
+    client = DirectClient('sq7HjrUOBfKmC576ILgskD5srU870gJ7', merchant_code='999008881', terminal=1, sandbox=True)
+    offer = {'monedaDCC': '840', 'importeDCC': '117'}
+    request = client.payment(order='000000000001', amount=Decimal('1.00'), currency=978, dcc=offer)
+    assert _decoded_params(request)['Ds_Merchant_DCC'] == offer

{python_redsys-2.0.0 → python_redsys-2.1.0}/tests/test_live.py

@@ -16,7 +16,7 @@ import pytest
 pytestmark = pytest.mark.skipif(os.environ.get('REDSYS_LIVE') != '1', reason='set REDSYS_LIVE=1 to run')
 httpx = pytest.importorskip('httpx')
 
-from redsys import currencies, threeds  # noqa: E402
+from redsys import cof, currencies, sca, threeds  # noqa: E402
 from redsys.clients import HMAC_SHA256_V1, HMAC_SHA512_V1, HMAC_SHA512_V2, DirectClient  # noqa: E402
 
 SECRET = 'sq7HjrUOBfKmC576ILgskD5srU870gJ7'
@@ -68,9 +68,8 @@ def test_live_payment_without_authentication_requires_sca(version):
     assert response.response_code == 195
 
 
-@pytest.mark.parametrize('version', VERSIONS)
-def test_live_challenged_payment_then_refund(version):
-    client, operation = _client(version), _operation()
+def _challenged_payment(client, operation, **fields):
+    """Initialization, authentication with the simulator's challenge, and the final authorization."""
     card_config = client.inicia(emv3ds=threeds.card_data(), **operation, **CARD).send()
     authentication = threeds.authentication_data(
         three_ds_server_trans_id=card_config.three_ds_server_trans_id,
@@ -79,13 +78,39 @@ def test_live_challenged_payment_then_refund(version):
         browser=BROWSER,
         three_ds_comp_ind='N',
     )
-    challenge = client.payment(emv3ds=authentication, **operation, **CARD).send()
+    challenge = client.payment(emv3ds=authentication, **operation, **CARD, **fields).send()
     assert challenge.requires_challenge()
 
     cres = _answer_simulated_challenge(challenge)
     final = threeds.challenge_response(cres=cres, protocol_version=challenge.protocol_version)
-    payment = client.payment(emv3ds=final, **operation, **CARD).send()
+    return client.payment(emv3ds=final, **operation, **CARD, **fields).send()
+
+
+@pytest.mark.parametrize('version', VERSIONS)
+def test_live_challenged_payment_then_refund(version):
+    client, operation = _client(version), _operation()
+    payment = _challenged_payment(client, operation)
     assert payment.is_paid() and payment.authorization_code
 
     refund = client.refund(**operation).send()
     assert refund.is_refunded()
+
+
+@pytest.mark.parametrize('version', VERSIONS)
+def test_live_token_then_merchant_initiated_charge(version):
+    client = _client(version)
+    first = _challenged_payment(
+        client, _operation(), identifier=cof.REQUEST_TOKEN, cof_ini=cof.INITIAL, cof_type=cof.RECURRING
+    )
+    assert first.is_paid() and first.identifier and first.cof_txnid
+
+    charge = client.payment(
+        identifier=first.identifier,
+        cof_ini=cof.SUBSEQUENT,
+        cof_type=cof.RECURRING,
+        cof_txnid=first.cof_txnid,
+        excep_sca=sca.MIT,
+        direct_payment='true',
+        **_operation(),
+    ).send()
+    assert charge.is_paid()

{python_redsys-2.0.0 → python_redsys-2.1.0}/tests/test_models.py

@@ -158,9 +158,9 @@ def test_response_predicates_and_code():
 
 
 def test_response_keeps_unmapped_fields():
-    resp = _response(Ds_Response='0000', Ds_Order='1', Ds_Amount='100', Ds_Card_Number='454881******0003')
+    resp = _response(Ds_Response='0000', Ds_Order='1', Ds_Amount='100', Ds_Control_1790968949956='1790968949956')
     assert resp.is_paid()
-    assert resp.model_extra == {'Ds_Card_Number': '454881******0003'}
+    assert resp.model_extra == {'Ds_Control_1790968949956': '1790968949956'}
 
 
 def test_response_amount_euro_and_processed_pay_method():
@@ -195,6 +195,9 @@ def test_request_amount_scaled_by_currency_exponent():
 def test_response_amount_scaled_by_currency_exponent():
     assert _response(Ds_Response='0000', Ds_Order='1', Ds_Amount='1056', Ds_Currency='978').amount == Decimal('10.56')
     assert _response(Ds_Response='0000', Ds_Order='1', Ds_Amount='1000', Ds_Currency='392').amount == Decimal('1000')
+    # The currency's decimals are kept, as RedSys shows them: 100 EUR minor units are 1.00.
+    assert str(_response(Ds_Response='0000', Ds_Order='1', Ds_Amount='100', Ds_Currency='978').amount) == '1.00'
+    assert str(_response(Ds_Response='0000', Ds_Order='1', Ds_Amount='100', Ds_Currency='392').amount) == '100'
 
 
 def test_response_is_canceled():
@@ -333,3 +336,24 @@ def test_response_bizum_fields():
     )
     assert (resp.processed_pay_method, resp.bizum_id_oper, resp.bizum_cuenta_truncada) == ('68', '9382755', 'XXXX4000')
     assert resp.model_extra == {}
+
+
+def test_response_card_number_from_redirect_and_rest_names():
+    # Redirect notifications send Ds_Card_Number (seen live 2026-10-25); REST responses send Ds_CardNumber.
+    redirect = _response(Ds_Response='0000', Ds_Order='1', Ds_Card_Number='454881******0003')
+    rest = _response(Ds_Response='0000', Ds_Order='1', Ds_CardNumber='454881******0003')
+    assert redirect.card_number == rest.card_number == '454881******0003'
+    assert redirect.model_extra == {}
+
+
+def test_response_dcc_object():
+    resp = _response(Ds_Order='1', Ds_DCC={'InfoMonedaTarjeta': {'monedaDCC': '840'}})
+    assert resp.dcc == {'InfoMonedaTarjeta': {'monedaDCC': '840'}}
+    assert resp.model_extra == {}
+
+
+def test_redirect_accepts_stored_credential_fields():
+    params = _valid(identifier='REQUIRED', cof_ini='S', cof_type='R', direct_payment='true').prepare_parameters()
+    assert params['Ds_Merchant_Identifier'] == 'REQUIRED'
+    assert (params['Ds_Merchant_Cof_Ini'], params['Ds_Merchant_Cof_Type']) == ('S', 'R')
+    assert params['Ds_Merchant_DirectPayment'] == 'true'

python_redsys-2.0.0/redsys/api/transactions.py

@@ -1,46 +0,0 @@
-AUTHORIZATION = 0
-"""Authorization."""
-
-PREAUTHORIZATION = 1
-"""Pre-authorization."""
-
-CONFIRMATION = 2
-"""Confirmation."""
-
-REFUND = 3
-"""Refund."""
-
-AUTHENTICATION = 7
-"""Authentication."""
-
-AUTHENTICATION_CONFIRMATION = 8
-"""Authentication confirmation"""
-
-CANCELLATION = 9
-"""Cancellation"""
-
-PAY_GOLD = 15
-"""Pay gold"""
-
-AUTHENTICATION_PUCE = 17
-"""PUCE authentication"""
-
-REFUND_WITHOUT_ORIGINAL = 34
-"""Refund without original"""
-
-BETTING_PRICE = 37
-"""Betting price"""
-
-TRANSACTION_TYPES = (
-    AUTHORIZATION,
-    PREAUTHORIZATION,
-    CONFIRMATION,
-    REFUND,
-    AUTHENTICATION,
-    AUTHENTICATION_CONFIRMATION,
-    CANCELLATION,
-    PAY_GOLD,
-    AUTHENTICATION_PUCE,
-    REFUND_WITHOUT_ORIGINAL,
-    BETTING_PRICE,
-)