wepay / Ruby-SDK

  class Client

    # Stage API endpoint

    STAGE_API_ENDPOINT = "https://stage.wepayapi.com/v2"

    # Stage UI endpoint

    STAGE_UI_ENDPOINT = "https://stage.wepay.com/v2"

    # Production API endpoint

    PRODUCTION_API_ENDPOINT = "https://wepayapi.com/v2"

    # Production UI endpoint

    PRODUCTION_UI_ENDPOINT = "https://www.wepay.com/v2"

    attr_reader :api_endpoint

    attr_reader :api_version

    attr_reader :client_id

    attr_reader :client_secret

    attr_reader :ui_endpoint

    def initialize(client_id, client_secret, use_stage = true, api_version = nil)

      @client_id     = client_id.to_s

      @client_secret = client_secret.to_s

      @api_version   = api_version.to_s

      if use_stage

        @api_endpoint = STAGE_API_ENDPOINT

        @ui_endpoint  = STAGE_UI_ENDPOINT

      else

        @api_endpoint = PRODUCTION_API_ENDPOINT

        @ui_endpoint  = PRODUCTION_UI_ENDPOINT

      end

    end

    ##

    # Execute a call to the WePay API.

    ##

    def call(call, access_token = false, params = {}, risk_token = false, client_ip = false)

      path = call.start_with?('/') ? call : call.prepend('/')

      url  = URI.parse(api_endpoint + path)

      call = Net::HTTP::Post.new(url.path, {

        'Content-Type' => 'application/json',

        'User-Agent'   => 'WePay Ruby SDK'

      })

      unless params.empty?

        call.body = params.to_json

      end

      if access_token then call.add_field('Authorization', "Bearer #{access_token}"); end

      if @api_version then call.add_field('Api-Version', @api_version); end

      if risk_token then call.add_field('WePay-Risk-Token', risk_token); end

      if client_ip then call.add_field('Client-IP', client_ip); end

      make_request(call, url)

    end

    ##

    # Returns the OAuth 2.0 URL that users should be redirected to for

    # authorizing your API application. The `redirect_uri` must be a

    # fully-qualified URL (e.g., `https://www.wepay.com`).

    ##

    def oauth2_authorize_url(

      redirect_uri,

      user_email   = false,

      user_name    = false,

      permissions  = "manage_accounts,collect_payments,view_user,send_money,preapprove_payments,manage_subscriptions",

      user_country = false

    )

      url = @ui_endpoint +

            '/oauth2/authorize?client_id=' + @client_id.to_s +

            '&redirect_uri=' + redirect_uri +

            '&scope=' + permissions

      url += user_name ?    '&user_name='    + CGI::escape(user_name)    : ''

      url += user_email ?   '&user_email='   + CGI::escape(user_email)   : ''

    end

    ##

    # Call the `/v2/oauth2/token` endpoint to exchange an OAuth 2.0 `code` for an `access_token`.

    ##

    def oauth2_token(code, redirect_uri)

      call('/oauth2/token', false, {

        'client_id'     => @client_id,

        'client_secret' => @client_secret,

        'redirect_uri'  => redirect_uri,

        'code'          => code

      })

    end

private

    ##

    # Make the HTTP request to the endpoint.

    ##

    def make_request(call, url)

      request              = Net::HTTP.new(url.host, url.port)

      request.read_timeout = 30

      request.use_ssl      = true

      response = request.start { |http| http.request(call) }

      JSON.parse(response.body)

    end

  end

end