internetee-registry/app/models/payment_orders/every_pay.rb

module PaymentOrders
  class EveryPay < PaymentOrder
    USER       = ENV['payments_every_pay_api_user']
    KEY        = ENV['payments_every_pay_api_key']
    ACCOUNT_ID = ENV['payments_every_pay_seller_account']
    SUCCESSFUL_PAYMENT = %w[settled authorized].freeze

    CONFIG_NAMESPACE = 'every_pay'

    def self.config_namespace_name
      CONFIG_NAMESPACE
    end

    def form_fields
      base_json = base_params
      base_json[:nonce] = SecureRandom.hex(15)
      hmac_fields = (base_json.keys + ['hmac_fields']).sort.uniq!

      base_json[:hmac_fields] = hmac_fields.join(',')
      hmac_string = hmac_fields.map { |key, _v| "#{key}=#{base_json[key]}" }.join('&')
      hmac = OpenSSL::HMAC.hexdigest('sha1', KEY, hmac_string)
      base_json[:hmac] = hmac

      base_json
    end

    def valid_response_from_intermediary?
      return false unless response

      valid_hmac? && valid_amount? && valid_account?
    end

    def settled_payment?
      SUCCESSFUL_PAYMENT.include?(response['payment_state'])
    end

    def complete_transaction
      return unless valid_response_from_intermediary? && settled_payment?
      self.status = 'paid'

      transaction = BankTransaction.where(description: invoice.order).first_or_initialize(
        description: invoice.order,
        reference_no: invoice.reference_no,
        currency: invoice.currency,
        iban: invoice.seller_iban
      )

      transaction.sum = response['amount']
      transaction.paid_at = Date.strptime(response['timestamp'], '%s')
      transaction.buyer_name = response['cc_holder_name']

      transaction.save!
      transaction.autobind_invoice(invoice_no: invoice.number)
    end

    def base_params
      {
        api_username: USER,
        account_id: ACCOUNT_ID,
        timestamp: Time.now.to_i.to_s,
        callback_url: response_url,
        customer_url: return_url,
        amount: number_with_precision(invoice.total, precision: 2),
        order_reference: SecureRandom.hex(15),
        transaction_type: 'charge',
        hmac_fields: ''
      }.with_indifferent_access
    end

    def valid_hmac?
      hmac_fields = response['hmac_fields'].split(',')
      hmac_hash = {}
      hmac_fields.map do |field|
        hmac_hash[field] = response[field]
      end

      hmac_string = hmac_hash.map { |key, _v| "#{key}=#{hmac_hash[key]}" }.join('&')
      expected_hmac = OpenSSL::HMAC.hexdigest('sha1', KEY, hmac_string)
      expected_hmac == response['hmac']
    end

    def valid_amount?
      invoice.total == BigDecimal(response['amount'])
    end

    def valid_account?
      response['account_id'] == ACCOUNT_ID
    end
  end
end