291 lines
14 KiB
Python
291 lines
14 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
import codecs
|
|
from unittest import TestCase
|
|
from decimal import Decimal
|
|
import base64
|
|
import mock
|
|
from six.moves.urllib import parse as urllib
|
|
from xml.etree import ElementTree as ET
|
|
|
|
import eopayment.paybox as paybox
|
|
import eopayment
|
|
|
|
BACKEND_PARAMS = {
|
|
'platform': u'test',
|
|
'site': u'12345678',
|
|
'rang': u'001',
|
|
'identifiant': u'12345678',
|
|
'shared_secret': u'0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF',
|
|
'callback': u'http://example.com/callback',
|
|
}
|
|
|
|
class PayboxTests(TestCase):
|
|
def test_sign(self):
|
|
key = b'0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF'
|
|
key = codecs.decode(key, 'hex')
|
|
d = dict(paybox.sign([
|
|
['PBX_SITE', u'12345678'],
|
|
['PBX_RANG', u'32'],
|
|
['PBX_IDENTIFIANT', u'12345678'],
|
|
['PBX_TOTAL', u'999'],
|
|
['PBX_DEVISE', u'978'],
|
|
['PBX_CMD', u'appel à Paybox'],
|
|
['PBX_PORTEUR', u'test@paybox.com'],
|
|
['PBX_RETOUR', u'Mt:M;Ref:R;Auto:A;Erreur:E'],
|
|
['PBX_HASH', u'SHA512'],
|
|
['PBX_TIME', u'2015-06-08T16:21:16+02:00'],
|
|
],
|
|
key))
|
|
result = '7E74D8E9A0DBB65AAE51C5C50C2668FD98FC99AEDF18244BB1935F602B6C2E953B61FD84364F34FDB88B049901C0A07F6040AF446BBF5589113F48A733D551D4'
|
|
self.assertIn('PBX_HMAC', d)
|
|
self.assertEqual(d['PBX_HMAC'], result)
|
|
|
|
def test_request(self):
|
|
backend = eopayment.Payment('paybox', BACKEND_PARAMS)
|
|
time = '2015-07-15T18:26:32+02:00'
|
|
email = 'bdauvergne@entrouvert.com'
|
|
order_id = '20160216'
|
|
transaction = '1234'
|
|
amount = '19.99'
|
|
transaction_id, kind, what = backend.request(
|
|
Decimal(amount), email=email, orderid=order_id,
|
|
transaction_id=transaction, time=time)
|
|
self.assertEqual(kind, eopayment.FORM)
|
|
self.assertEqual(transaction_id, '1234')
|
|
root = ET.fromstring(str(what))
|
|
self.assertEqual(root.tag, 'form')
|
|
self.assertEqual(root.attrib['method'], 'POST')
|
|
self.assertEqual(root.attrib['action'], paybox.URLS['test'])
|
|
expected_form_values = {
|
|
'PBX_RANG': '01',
|
|
'PBX_SITE': '12345678',
|
|
'PBX_IDENTIFIANT': '12345678',
|
|
'PBX_RETOUR': 'montant:M;reference:R;code_autorisation:A;erreur:E;numero_appel:T;numero_transaction:S;signature:K',
|
|
'PBX_TIME': time,
|
|
'PBX_PORTEUR': email,
|
|
'PBX_CMD': order_id + eopayment.common.ORDERID_TRANSACTION_SEPARATOR + transaction,
|
|
'PBX_TOTAL': amount.replace('.', ''),
|
|
'PBX_DEVISE': '978',
|
|
'PBX_HASH': 'SHA512',
|
|
'PBX_HMAC': '6C70F35F9C6F6C9AB16D1E766EF981D241CB527C2E547205622DFFAF5B1B6C0F47E1DE2D3A1CE579F97AD19F87C3AE63E89B22F4B6D1E118685F5DD977891668',
|
|
'PBX_ARCHIVAGE': '1234',
|
|
'PBX_REPONDRE_A': 'http://example.com/callback',
|
|
'PBX_AUTOSEULE': 'N'
|
|
}
|
|
|
|
form_params = {}
|
|
for node in root:
|
|
self.assertIn(node.attrib['type'], ('hidden', 'submit'))
|
|
if node.attrib['type'] == 'submit':
|
|
self.assertEqual(set(node.attrib.keys()), set(['type', 'value']))
|
|
if node.attrib['type'] == 'hidden':
|
|
self.assertEqual(set(node.attrib.keys()), set(['type', 'name', 'value']))
|
|
name = node.attrib['name']
|
|
form_params[name] = node.attrib['value']
|
|
self.assertEqual(form_params, expected_form_values)
|
|
|
|
def test_request_with_capture_day(self):
|
|
params = BACKEND_PARAMS.copy()
|
|
time = '2018-08-21T10:26:32+02:00'
|
|
email = 'user@entrouvert.com'
|
|
order_id = '20180821'
|
|
transaction = '1234'
|
|
amount = '42.99'
|
|
|
|
for capture_day in ('7', '07'):
|
|
params['capture_day'] = capture_day
|
|
backend = eopayment.Payment('paybox', params)
|
|
transaction_id, kind, what = backend.request(
|
|
Decimal(amount), email=email, orderid=order_id,
|
|
transaction_id=transaction, time=time)
|
|
root = ET.fromstring(str(what))
|
|
|
|
form_params = dict(((node.attrib['name'], node.attrib['value']) for node in root if node.attrib['type'] == 'hidden'))
|
|
self.assertIn('PBX_DIFF', form_params)
|
|
self.assertEqual(form_params['PBX_DIFF'], '07')
|
|
|
|
# capture_day can be used as a request argument
|
|
params = BACKEND_PARAMS.copy()
|
|
backend = eopayment.Payment('paybox', params)
|
|
transaction_id, kind, what = backend.request(
|
|
Decimal(amount), email=email, orderid=order_id,
|
|
transaction_id=transaction, time=time, capture_day=2)
|
|
root = ET.fromstring(str(what))
|
|
|
|
form_params = dict(((
|
|
node.attrib['name'], node.attrib['value']) for node in root
|
|
if node.attrib['type'] == 'hidden'))
|
|
self.assertIn('PBX_DIFF', form_params)
|
|
self.assertEqual(form_params['PBX_DIFF'], '02')
|
|
|
|
# capture_day passed as a request argument
|
|
# overrides capture_day from backend params
|
|
params = BACKEND_PARAMS.copy()
|
|
params['capture_day'] = '7'
|
|
backend = eopayment.Payment('paybox', params)
|
|
transaction_id, kind, what = backend.request(
|
|
Decimal(amount), email=email, orderid=order_id,
|
|
transaction_id=transaction, time=time, capture_day=2)
|
|
root = ET.fromstring(str(what))
|
|
|
|
form_params = dict(((
|
|
node.attrib['name'], node.attrib['value']) for node in root
|
|
if node.attrib['type'] == 'hidden'))
|
|
self.assertIn('PBX_DIFF', form_params)
|
|
self.assertEqual(form_params['PBX_DIFF'], '02')
|
|
|
|
|
|
def test_request_with_authorization_only(self):
|
|
params = BACKEND_PARAMS.copy()
|
|
time = '2018-08-21T10:26:32+02:00'
|
|
email = 'user@entrouvert.com'
|
|
order_id = '20180821'
|
|
transaction = '1234'
|
|
amount = '42.99'
|
|
|
|
params['capture_mode'] = 'AUTHOR_CAPTURE'
|
|
backend = eopayment.Payment('paybox', params)
|
|
transaction_id, kind, what = backend.request(
|
|
Decimal(amount), email=email, orderid=order_id,
|
|
transaction_id=transaction, time=time)
|
|
root = ET.fromstring(str(what))
|
|
|
|
form_params = dict(((node.attrib['name'], node.attrib['value']) for node in root if node.attrib['type'] == 'hidden'))
|
|
self.assertEqual(form_params['PBX_AUTOSEULE'], 'O')
|
|
|
|
def test_response(self):
|
|
backend = eopayment.Payment('paybox', BACKEND_PARAMS)
|
|
order_id = '20160216'
|
|
transaction = '1234'
|
|
reference = order_id + eopayment.common.ORDERID_TRANSACTION_SEPARATOR + transaction
|
|
data = {'montant': '4242', 'reference': reference,
|
|
'code_autorisation': 'A', 'erreur': '00000'}
|
|
response = backend.response(urllib.urlencode(data))
|
|
self.assertEqual(response.order_id, order_id)
|
|
|
|
with self.assertRaisesRegexp(eopayment.ResponseError, 'missing erreur or reference'):
|
|
backend.response('foo=bar')
|
|
|
|
def test_perform_operations(self):
|
|
operations = {'validate': '00002', 'cancel': '00055'}
|
|
for operation_name, operation_code in operations.items():
|
|
params = BACKEND_PARAMS.copy()
|
|
params['cle'] = 'cancelling_key'
|
|
backend = eopayment.Payment('paybox', params)
|
|
bank_data = {'numero_transaction': ['13957441'],
|
|
'numero_appel': ['30310733'],
|
|
'reference': ['830657461681']
|
|
}
|
|
backend_raw_response = u"""NUMTRANS=0013989865&NUMAPPEL=0030378572&NUMQUESTION=0013989862&SITE=1999888&RANG=32&AUTORISATION=XXXXXX&CODEREPONSE=00000&COMMENTAIRE=Demande traitée avec succès&REFABONNE=&PORTEUR="""
|
|
backend_expected_response = {"CODEREPONSE": "00000",
|
|
"RANG": "32",
|
|
"AUTORISATION": "XXXXXX",
|
|
"NUMTRANS": "0013989865",
|
|
"PORTEUR": "",
|
|
"COMMENTAIRE": u"Demande traitée avec succès",
|
|
"SITE": "1999888",
|
|
"NUMAPPEL": "0030378572",
|
|
"REFABONNE": "",
|
|
"NUMQUESTION": "0013989862"}
|
|
|
|
with mock.patch('eopayment.paybox.requests.post') as requests_post:
|
|
response = mock.Mock(status_code=200, text=backend_raw_response)
|
|
requests_post.return_value = response
|
|
backend_response = getattr(backend, operation_name)(Decimal('10'), bank_data)
|
|
self.assertEqual(requests_post.call_args[0][0], 'https://preprod-ppps.paybox.com/PPPS.php')
|
|
params_sent = requests_post.call_args[0][1]
|
|
# make sure the date parameter is present
|
|
assert 'DATEQ' in params_sent
|
|
# don't care about its value
|
|
params_sent.pop('DATEQ')
|
|
expected_params = {'CLE': 'cancelling_key',
|
|
'VERSION': '00103',
|
|
'TYPE': operation_code,
|
|
'MONTANT': Decimal('1000'),
|
|
'NUMAPPEL': '30310733',
|
|
'NUMTRANS': '13957441',
|
|
'NUMQUESTION': '0013957441',
|
|
'REFERENCE': '830657461681',
|
|
'RANG': backend.backend.rang,
|
|
'SITE': backend.backend.site,
|
|
'DEVISE': backend.backend.devise
|
|
}
|
|
self.assertEqual(params_sent, expected_params)
|
|
self.assertEqual(backend_response, backend_expected_response)
|
|
|
|
params['platform'] = 'prod'
|
|
backend = eopayment.Payment('paybox', params)
|
|
with mock.patch('eopayment.paybox.requests.post') as requests_post:
|
|
response = mock.Mock(status_code=200, text=backend_raw_response)
|
|
requests_post.return_value = response
|
|
getattr(backend, operation_name)(Decimal('10'), bank_data)
|
|
self.assertEqual(requests_post.call_args[0][0], 'https://ppps.paybox.com/PPPS.php')
|
|
|
|
with mock.patch('eopayment.paybox.requests.post') as requests_post:
|
|
error_response = u"""CODEREPONSE=00015&COMMENTAIRE=PAYBOX : Transaction non trouvée"""
|
|
response = mock.Mock(status_code=200, text=error_response)
|
|
requests_post.return_value = response
|
|
self.assertRaisesRegexp(eopayment.ResponseError, 'Transaction non trouvée', getattr(backend, operation_name),
|
|
Decimal('10'), bank_data)
|
|
|
|
|
|
def test_validate_payment(self):
|
|
params = BACKEND_PARAMS.copy()
|
|
params['cle'] = 'cancelling_key'
|
|
backend = eopayment.Payment('paybox', params)
|
|
bank_data = {'numero_transaction': ['13957441'],
|
|
'numero_appel': ['30310733'],
|
|
'reference': ['830657461681']
|
|
}
|
|
backend_raw_response = u"""NUMTRANS=0013989865&NUMAPPEL=0030378572&NUMQUESTION=0013989862&SITE=1999888&RANG=32&AUTORISATION=XXXXXX&CODEREPONSE=00000&COMMENTAIRE=Demande traitée avec succès&REFABONNE=&PORTEUR="""
|
|
|
|
with mock.patch('eopayment.paybox.requests.post') as requests_post:
|
|
response = mock.Mock(status_code=200, text=backend_raw_response)
|
|
requests_post.return_value = response
|
|
backend.validate(Decimal(13), bank_data)
|
|
|
|
|
|
def test_rsa_signature_validation(self):
|
|
pkey = '''-----BEGIN PUBLIC KEY-----
|
|
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDUgYufHuheMztK1LhQSG6xsOzb
|
|
UX4D2A/QcMvkEcRVXFx5tQqcE9/JnMqE41TF/ebn7jC/MBxxtPFkUN7+EZoeMN7x
|
|
OWzAMDm/xsCWRvvel4GGixgm3aQRUPyTrlm4Ksy32Ya0rNnEDMAvB3dxOn7cp8GR
|
|
ZdzrudBlevZXpr6iYwIDAQAB
|
|
-----END PUBLIC KEY-----'''
|
|
data = 'coin\n'
|
|
sig64 = '''VCt3sgT0ecacmDEWWNVXJ+jGmIPBMApK42tBJV0FlDjpllOGPy8MsAmLW4/QjTtx
|
|
z0Dkz0NjxvU+5WzQZh9Uuxr/egRCwV4NMRWqu0zaVVioeBvl4/5CWm4f4/1L9+0m
|
|
FBFKOZhgBJnkC+l6+XhT4aYWKaQ4ocmOMV92yjeXTE4='''
|
|
self.assertTrue(paybox.verify(data, base64.b64decode(sig64), key=pkey))
|
|
|
|
def test_request_manual_validation(self):
|
|
params = BACKEND_PARAMS.copy()
|
|
time = '2018-08-21T10:26:32+02:00'
|
|
email = 'user@entrouvert.com'
|
|
order_id = '20180821'
|
|
transaction = '1234'
|
|
amount = '42.99'
|
|
|
|
backend = eopayment.Payment('paybox', params)
|
|
|
|
transaction_id, kind, what = backend.request(
|
|
Decimal(amount), email=email, orderid=order_id,
|
|
transaction_id=transaction, time=time)
|
|
root = ET.fromstring(str(what))
|
|
form_params = dict((
|
|
(node.attrib['name'], node.attrib['value']) for node in root
|
|
if node.attrib['type'] == 'hidden'))
|
|
self.assertIn('PBX_AUTOSEULE', form_params)
|
|
self.assertEqual(form_params['PBX_AUTOSEULE'], 'N')
|
|
|
|
transaction_id, kind, what = backend.request(
|
|
Decimal(amount), email=email, orderid=order_id,
|
|
transaction_id=transaction, time=time, manual_validation=True)
|
|
root = ET.fromstring(str(what))
|
|
form_params = dict((
|
|
(node.attrib['name'], node.attrib['value']) for node in root
|
|
if node.attrib['type'] == 'hidden'))
|
|
self.assertIn('PBX_AUTOSEULE', form_params)
|
|
self.assertEqual(form_params['PBX_AUTOSEULE'], 'O')
|