opensoul.org - Paypal IPN in Rails with Active Merchant Comments

Comment on 'Paypal IPN in Rails with Active Merchant' by KeenToLearnRails

2010-03-11T00:33:36Z

Hi,

Would anyone help me to resolve this problem “email address for the business is not present in the encrypted blob”? I have already spent two days trying to resolve this problme with no success.

I am building an on-line shopping application using Ruby on Rails. The payment is made via paypal. It works only I didn’t encrypted the payment information. The problem is it always returns an error stating that “email address for the business is not present in the encrypted blob”.. I follow the RailsCast 143 to implement the paypal security. The following are the step how to i implment the paypal security.

1. Log on the linux box and create a private key and my public certificate private key openssl genrsa -out app_key.pem 1024

My Public Certificate openssl req -new -key app_key.pem -x509 -days 365 -out app_cert.pem

2. Upload my public certificate to Paypal sandbox and get the CERT_ID

3. Download Paypal public certificate: paypal_cert.pem

Now I have 3 files under the certs directory • app_cert.pem • app_key.pem • paypal_cert.pem

In my controller, it calls the encrypt function

values = { :business => “help.s_1260152087_biz@gmail.com”, :cmd => “_cart”, :upload => 1, :currency_code => “AUD”, :handling_cart => @order_log.postage, :return => return_paypal_url, :notify_url => notify_return_url, :cert_id => “STVF85MBT8XWS” } counter = 0 @orders = Order.find(:all,:conditions => { :order_log_id => order_log_id.to_i }) @orders.each do | order | counter = counter + 1 RAILS_DEFAULT_LOGGER.info “item name[” + order.item_name + ” |price[” + order.price.to_s + “]” values.merge!({ “item_number_#{counter}” => counter, “item_name_#{counter}” => order.item_name, “amount_#{counter}” => order.price, “quantity_#{counter}” => order.quantity }) end encrypted_string = encrypt_for_paypal(values.to_query)

=== class ShippingDetail < ActiveRecord::Base PAYPAL_CERT_PEM = File.read(”#{Rails.root}/certs/paypal_cert.pem”) APP_CERT_PEM = File.read(”#{Rails.root}/certs/app_cert.pem”) APP_KEY_PEM = File.read(”#{Rails.root}/certs/app_key.pem”)

def encrypt_for_paypal(values) signed = OpenSSL::PKCS7::sign(OpenSSL::X509::Certificate.new(APP_CERT_PEM), OpenSSL::PKey::RSA.new(APP_KEY_PEM, ’’), values.map { |k, v| ”#{k}=#{v}” }.join(”\n”), [], OpenSSL::PKCS7::BINARY) OpenSSL::PKCS7::encrypt([OpenSSL::X509::Certificate.new(PAYPAL_CERT_PEM)], signed.to_der, OpenSSL::Cipher::Cipher::new(“DES3”), OpenSSL::PKCS7::BINARY).to_s.gsub(”\n”, ””) end

end

Web Page = The value of the encrypted field is encrypted.

== But the Paypal returns error “Email address for the business is not presented in the encrypted blob”

Please help me to resolve this proble.. Because of this problem, we cannot launch our web site.

Comment on 'Paypal IPN in Rails with Active Merchant' by JJ

2009-11-02T10:38:49Z

How to check my paypal balance via Active Merchant?

Comment on 'Paypal IPN in Rails with Active Merchant' by JJ

2009-10-19T14:44:41Z

to add another parametr to FORM (:lc => “EN” – language) ?[/quote]

Dirty hack:

function AddLangToPaypalForm(lang){

var el = document.createElement('input');
  el.setAttribute('type', 'hidden');
  el.setAttribute('name', 'lc');
el.setAttribute('value', lang);
  var form = document.getElementById('paypal_form');
  form.appendChild(el);

}

Comment on 'Paypal IPN in Rails with Active Merchant' by Don

2009-07-13T13:22:39Z

How to add another parametr to FORM (:lc => “EN” – language) ?

Comment on 'Paypal IPN in Rails with Active Merchant' by JJ

2009-01-29T09:06:51Z

With installed plugin collectiveidea-money and

money :current_cost #campaign.rb:6

I can’t restart server:

C:/ruby/ruby/lib/ruby/gems/1.8/gems/activesupport-2.1.2/lib/active_support/core_ext/hash/keys.rb:47:in `assert_valid_keys’: Unknown key(s): constructor, converter (ArgumentError) from C:/ruby/ruby/lib/ruby/gems/1.8/gems/activerecord-2.1.2/lib/active_record/aggregations.rb:145:in `composed_of’ from C:/ruby/rails_apps/project_1/vendor/plugins/collectiveidea-money/lib/money/rails.rb:16:in `money’ from C:/ruby/rails_apps/project_1/app/models/campaign.rb:6 from C:/ruby/ruby/lib/ruby/gems/1.8/gems/activesupport-2.1.2/lib/active_support/dependencies.rb:216:in `load_without_new_constant_marking’ from C:/ruby/ruby/lib/ruby/gems/1.8/gems/activesupport-2.1.2/lib/active_support/dependencies.rb:216:in `load_file’ from C:/ruby/ruby/lib/ruby/gems/1.8/gems/activesupport-2.1.2/lib/active_support/dependencies.rb:355:in `new_constants_in’ from C:/ruby/ruby/lib/ruby/gems/1.8/gems/activesupport-2.1.2/lib/active_support/dependencies.rb:215:in `load_file’ from C:/ruby/ruby/lib/ruby/gems/1.8/gems/activesupport-2.1.2/lib/active_support/dependencies.rb:96:in `require_or_load’ ... 36 levels… from C:/ruby/ruby/lib/ruby/gems/1.8/gems/rails-2.1.2/lib/commands/server.rb:39 from C:/ruby/ruby/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:27:in `gem_original_require’ from C:/ruby/ruby/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:27:in `require’ from script/server:3

without this plugin (with money :current_cost) I have error:

undefined method `money’ for #

Comment on 'Paypal IPN in Rails with Active Merchant' by Brandon

2009-01-28T13:41:09Z

JJ: Make sure you restart your server after installing plugins.

Comment on 'Paypal IPN in Rails with Active Merchant' by JJ

2009-01-28T09:27:48Z

I have another error:

undefined method `money’ for #

[code] class Campaign < ActiveRecord::Base money :current_cost end [/code]

in environment.rb I have

require ‘money’

Comment on 'Paypal IPN in Rails with Active Merchant' by Brandon

2009-01-28T01:14:01Z

JJ,

Your model attributes need to be Money objects. See http://github.com/collectiveidea/money

Comment on 'Paypal IPN in Rails with Active Merchant' by JJ

2009-01-27T12:48:59Z

Hi,

I have errors in notify action


if notify.acknowledge 
      campaign = Campaign.find(notify.item_id)
      begin

        if notify.complete? and campaign.current_cost == notify.amount
.
.
.

campaign.current_cost is float and the error is “undefined method `cents’ for 240.0:Float”

Another error


if notify.acknowledge 
      campaign = Campaign.find(notify.item_id)
      begin

        if notify.complete? 
            campaign.user.account.update_attribute(:balance, campaign.user.account.balance + notify.amount)
.
.
.

Balance is float and the error is “Money can’t be coerced into Float “

Any ideas?

Comment on 'Paypal IPN in Rails with Active Merchant' by Brandon

2008-12-23T17:03:08Z

Todd,

Keep in mind that Paypal will send you an IPN any time the status of the payment changes. For example, for an e-check, they’ll send the IPN with a pending status when the check is submitted, and then again when the check clears. So check notify.status to see if that is changing.

Comment on 'Paypal IPN in Rails with Active Merchant' by Todd

2008-12-16T15:46:31Z

Thanks for the write-up. I’m using AM to process my IPNs but I’m having some problems. PayPal is continuing to send IPNs after I call notify.acknowledge, so I’m assuming there is something wrong with the acknowledgment. I posted something on PayPal and this was the response I got

http://www.paypaldeveloper.com/pdn/board/message?board.id=ipn&thread.id=15228

Has anyone else run into this issue? Any ideas? I can process the IPN without any problems, but I don’t want PayPal re-sending IPNs when its not necessary.

Thanks.

Comment on 'Paypal IPN in Rails with Active Merchant' by arash

2008-11-18T06:14:35Z

Possible security hole? The confirmation never checks to make sure the receivers email address in the Paypal IPN is equal to the PAYPAL_ACCOUNT variable. Does this need to be done?

Eg. If a hacker takes the form variables that are generated by your app, and uses it for a payment on his own Website Payments Pro Merchant Paypal account and configures it to send its IPN notification to your controller, does that not effectively trick your app into thinking that a payment was sent (since the notify.acknowledge will be true since it is a real IPN notification sent by Paypal). Or does notify.acknowledge check to make sure the receiver_email in the IPN equals PAYPAL_ACCOUNT.

Please let me know as I am pondering this.

Comment on 'Paypal IPN in Rails with Active Merchant' by skylarking

2008-11-14T20:36:13Z

Well, ok after a lot of headaches I’ve found out (thanks to this post on http://groups.google.com/group/activemerchant/browse_thread/thread/3198117936621ff7 by Cody Fauser ) that:

1) DO NOT KNOW WHY??? – DO NOT ASK ME since i wasted 3 days after this.. but it seems that following your guidelines on the site my gateway (PAYPAL STANDARD) doesn’t use notifications and just redirects the customer’s browser back to the seller’s site ( my success action in paymentscontroller).

Solution to this, do not ask me why? is to get rid of the notify url aka ipn action in the form helper and just move the whole notification thing into my success action of course doing there all the logic. This way it works fine, I’d like to receive any feedback from someone with more experience working with rails paypal and Am in general

Comment on 'Paypal IPN in Rails with Active Merchant' by skylarking

2008-11-14T16:20:30Z

Thanks for your great article! You did a great job in explaining how to integrate the wonderful AM plugin to in an existing rails app. Now, everything seems to work flawlessly here, except for 1 thing. Actually I’ve setup my paymentscontroller actions to be: success, cancel and ipn. It seems I can succesfully pay by using the sandbox paypal account or cancel by going back to my corresponding success or cancel pages (actions), but I am having an hard time trying to understand why each time I receive the paypal post request back to my app it just “hangs” there ( actually I got the IPN since i can see in console all the params paypal is sending). It seems I cannot actually create my @payment. I’ve understand that by default the payment status is set on “Pending” and it changes to “Complete” when you accept it by accessing your SELLER/BUSINESS paypal account. Now, since the action(the ipn as well as the success and cancel) is setup into my form helper and i haven’t setup an IPN URL in paypal, would it be possible to be notified when the status of the payment changes from pending to complete?Or do i need to actually configure the ipn url to be a public one by creating a new controller and action and set up that one url in paypal?Also, does the Notification.acknowledge method check only for a correct post back to paypal when it first posts the IPN to my site or it does check that the status says ‘Complete’, reason why i cannot actually save my @payment to the database seems in the IPN it says ‘Pending’? Last but not least since I am using named routes for my success, cancel and ipn actions, which methods should they have?Except for the redirect from paypal (success and cancel that should be :get) would the ipn be a :post? Thanks in advance

Comment on 'Paypal IPN in Rails with Active Merchant' by Dave Clausen

2008-09-02T15:26:52Z

Spencer, I’m dealing with the security issue by using a shared secret in the POST url as outlined on page 26-27 of Paypal’s Order Management Integration Guide located at: https://www.paypal.com/en_US/pdf/PP_OrderManagement_IntegrationGuide.pdf

Hope that helps.

Comment on 'Paypal IPN in Rails with Active Merchant' by Spencer Alexander

2008-08-05T22:03:19Z

Question regarding security: On the notify action, where we format the POST we get from paypal using Paypal::Notification.new(request.raw_post), do we need to worry at all about security and the validity of the POST? In otherwords, does Paypal::Notification automatically communicate with Paypal one final time to ensure that the POST is legit?

Thanks again for the great tutorial!

Comment on 'Paypal IPN in Rails with Active Merchant' by Spencer Alexander

2008-08-05T19:28:46Z

Great article! I’ve had a tough time getting everything set up with paypal and active merchant (not much documentation), and it’s great to come across well written tutorials like this.

Keep up the good work!

Comment on 'Paypal IPN in Rails with Active Merchant' by Brian

2008-06-27T04:53:44Z

This looks great…last thing I’m wondering is how to process anything other than a successful order. Such as a subscription cancellation, etc. Are these in the notify.status variable?

Comment on 'Paypal IPN in Rails with Active Merchant' by Ramon Tayag

2008-05-30T10:56:07Z

This definitely clears things up further! Thank you. However, how is payment.rb supposed to be?

Comment on 'Paypal IPN in Rails with Active Merchant' by Noah

2008-05-03T21:31:48Z

Just a thought, but when PayPal has to convert currencies, they send back the status as pending, which causes the “If notify.complete?” to return false, so you may want to change it to something like this to perform different actions on different statuses.

if notify.acknowledge
      begin
        case notify.status
        when "Completed" 
          @order.paypal_status = notify.status
          @order.transaction_id = notify.transaction_id
        when "Pending" 
          @order.paypal_status = "Pending because: #{params[:pending_reason]}" 
          @order.transaction_id = notify.transaction_id
        else
          @order.paypal_status = notify.status
          logger.error("Failed to verify Paypal's notification, please investigate")
        end
      ensure
        @order.save
      end
    end

Comment on 'Paypal IPN in Rails with Active Merchant' by Roger Pack

2008-03-14T06:31:23Z

gem install money, maybe?

Comment on 'Paypal IPN in Rails with Active Merchant' by Joel

2008-02-14T18:53:42Z

Hi, this is cool, but I get:

NameError (undefined local variable or method `‘money’’ for main:Object): /app/controllers/payments_controller.rb:2

I have installed the money gem, do I need to do a require ‘money’ in the environment.rb file? I tried that and I get:

/Library/Ruby/Gems/1.8/gems/money-1.7.1/lib/support/cattr_accessor.rb:7:in `cattr_reader’: undefined method `id2name’ for {:instance_writer=>false}:Hash (NoMethodError) from /Library/Ruby/Gems/1.8/gems/money-1.7.1/lib/support/cattr_accessor.rb:5:in `each’ from /Library/Ruby/Gems/1.8/gems/money-1.7.1/lib/support/cattr_accessor.rb:5:in `cattr_reader’ from /Library/Ruby/Gems/1.8/gems/money-1.7.1/lib/support/cattr_accessor.rb:54:in `cattr_accessor’ from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/gems/1.8/gems/activerecord-1.15.6/lib/active_record/base.rb:268

at server startup, any ideas?

Comment on 'Paypal IPN in Rails with Active Merchant' by Vishwa

2007-12-08T16:04:13Z

Phil, If you are still hitting this issue {NameError (uninitialized constant AccountController::Paypal): Where is this PayPal class? It doesn’t seem to be in active merchant.}

you might want to try ActiveMerchant::Billing::Integrations::Paypal.

Additionally ensure that you have done a require ‘active_merchant’ in your environment.rb

Comment on 'Paypal IPN in Rails with Active Merchant' by Matthias

2007-10-25T15:14:07Z

thanks brandon

that’s the part who content the price

def populate_order 
  for cart_item in @cart.cart_items 
    order_item = OrderItem.new( 
      :book_id => cart_item.book_id, 
      :price => cart_item.price - current_user.offre, 
      :amount => cart_item.amount,
  :form_choice => cart_item.form_choice,
  :time_choice => cart_item.time_choice,
  :expire_at => cart_item.expire_at    
    ) 
    @order.order_items << order_item 
  end 
end

I don’t really understand your solution…

Comment on 'Paypal IPN in Rails with Active Merchant' by Brandon

2007-10-23T21:07:52Z

Matthias,

The amount field is expecting a Money object, and if it doesn’t get one, it converts the integer, treating it as cents.

So you’ll want to pass in the number as cents. If the amount is being stored in a model, you might want to check out acts_as_money

Comment on 'Paypal IPN in Rails with Active Merchant' by Matthias

2007-10-23T09:35:04Z

Hi, i have just a little problem. When i process order and i look for the result in my paypal account i find my order, but the big problem is my total is divised by 100. Result i process an order with a total : 60 and the result in my paypal account is 0,60

Does someone can help me ??

Comment on 'Paypal IPN in Rails with Active Merchant' by Jordan Brough

2007-10-11T05:10:27Z

Thanks for the post, just what I was looking for. Would be nice if PayPal was just set up so easy that we didn’t need a tool like ActiveMerchant though…

Comment on 'Paypal IPN in Rails with Active Merchant' by Phil

2007-09-29T12:15:26Z

Looks good, but, why do I get this on the notify:

NameError (uninitialized constant AccountController::Paypal):

Where is this PayPal class? It doesn’t seem to be in active merchant.

Comment on 'Paypal IPN in Rails with Active Merchant' by Dinesh

2007-09-08T22:02:44Z

Very helpful Brandon, I could able to set up my test paypal account in less than 15 min. Thanks a lot.

Comment on 'Paypal IPN in Rails with Active Merchant' by Brandon

2007-09-05T13:14:01Z

Mike: Thanks, I’ve updated the url in the post.

Comment on 'Paypal IPN in Rails with Active Merchant' by Mike

2007-09-04T18:00:02Z

Thanks very much for such a helpful Active Merchant example.

The command you have listed for installing the AM plugin gives an access denied error, which I believe is because the repository has been moved. The new repository is at: http://activemerchant.googlecode.com/svn/trunk/active_merchant

Comment on 'Paypal IPN in Rails with Active Merchant' by Brandon

2007-08-10T02:00:09Z

Observer,

The problem is that due to the way Paypal’s website payments work, the user needs to post all that data to paypal. So no matter how you try to obfuscate it, you’re still dependent on the client to post all the details.

Comment on 'Paypal IPN in Rails with Active Merchant' by Observer

2007-08-09T22:24:14Z

This is a great example. Thanks for the informative blog post. I’m wondering if maybe you might want to hide a lot of the details in the view in a controller, as in, just post the enrollment and user id and populate and redirect the form. You can certainly encrypt a button through PayPal, but this might give you another way to hide details that someone can’t try and use to create a fake form post with an alteration.

Comment on 'Paypal IPN in Rails with Active Merchant' by Justin

2007-07-17T18:49:42Z

IPN Seems to be working for the most part, but the “If notify.complete?” part is never TRUE. What determines if that is true or not? Is there something I need to do for it to be true? Or is it completely in Paypal’s hands?

Comment on 'Paypal IPN in Rails with Active Merchant' by Justin

2007-07-16T14:36:22Z

If I have require ‘money’ in the environment.rb file I don’t need it in the controller right?

FYI: I was using “require ‘activemerchant’” in the environment.rb file which wasn’t working. I didn’t realize that I needed an underscore. Adding “require ‘active_merchant’” works just fine. Thanks Brandon.

Comment on 'Paypal IPN in Rails with Active Merchant' by inboulder

2007-07-15T20:31:50Z

note: to get anything out of the notify object you need to put require ‘money’ in the controller.

Comment on 'Paypal IPN in Rails with Active Merchant' by Justin

2007-07-12T22:22:34Z

I tried “require ‘activemerchant’” and got the error:

warning: already initialized constant OPTIONS

Comment on 'Paypal IPN in Rails with Active Merchant' by Justin

2007-07-12T22:19:34Z

Solved my problem after a LOT of looking.

I originally installed ActiveMerchant using “gem install”.

My problem went away only after I installed ActiveMerchant as a PLUGIN. This is different from a GEM.

Comment on 'Paypal IPN in Rails with Active Merchant' by Brandon

2007-07-12T21:49:26Z

Justin,

Do you have ActiveMerchant installed as a plugin or a gem? If you have the gem installed, then you also need to do require 'active_merchant' in your environment.rb file

Comment on 'Paypal IPN in Rails with Active Merchant' by Justin

2007-07-12T21:43:46Z

I keep getting “uninitialized constant ActiveMerchant (NameError)” when trying to start the server with “ActiveMerchant::Billing::Base.mode = :test” in the environment.rb file.

I have “require_gem ‘money’” in the environment.rb file.

Comment on 'Paypal IPN in Rails with Active Merchant' by Frank

2007-06-12T11:15:58Z

Wow, that looks great… I’m going to try it for my current project. Thank you

Comment on 'Paypal IPN in Rails with Active Merchant' by Haig Didizian

2006-12-08T16:01:28Z

Thanks for this, Brandon. You saved me a good bit of time. I just wanted to add that I needed to put “require_gem ‘money’” into my environment.rb file to avoid a NameError exception during the notification phase.