gem "payu_pl"

client = PayuPl::Client.new(
  client_id: ENV.fetch("PAYU_CLIENT_ID"),
  client_secret: ENV.fetch("PAYU_CLIENT_SECRET"),
  environment: :sandbox # or :production
)

client.oauth_token
# => {"access_token"=>"...", "token_type"=>"bearer", "expires_in"=>43199, ...}

payload = {
  notifyUrl: "https://example.com/payu/notify",
  customerIp: "127.0.0.1",
  merchantPosId: ENV.fetch("PAYU_POS_ID"),
  description: "RTV market",
  currencyCode: "PLN",
  totalAmount: "21000",
  products: [
    { name: "Wireless Mouse", unitPrice: "21000", quantity: "1" }
  ]
}

response = client.create_order(payload)
redirect_uri = response["redirectUri"]
order_id = response["orderId"]

client.retrieve_order(order_id)

client.capture_order(order_id) # full capture (empty JSON body)

client.capture_order(order_id, amount: "1000", currency_code: "PLN") # partial capture

client.cancel_order(order_id)

client.create_refund(order_id, description: "Refund")
client.create_refund(order_id, description: "Partial refund", amount: "1000")

client.list_refunds(order_id)
client.retrieve_refund(order_id, "5000000142")

client.retrieve_transactions(order_id)

# config/routes.rb
post '/webhooks/payu', to: 'webhooks/payu#create'

# app/controllers/webhooks/payu_controller.rb
class Webhooks::PayuController < ApplicationController
  skip_before_action :verify_authenticity_token

  def create
    result = PayuPl::Webhooks::Validator.new(request).validate_and_parse
    
    if result.failure?
      Rails.logger.error("PayU webhook validation failed: #{result.error}")
      return head :bad_request
    end

    payload = result.data
    order_id = payload.dig('order', 'orderId')
    status = payload.dig('order', 'status')
    
    # Process the webhook...
    # (check for duplicates, enqueue background job, etc.)
    
    head :ok
  end
end

# 1. Via initializer (recommended)
# config/initializers/payu.rb
PayuPl.configure do |config|
  config.second_key = ENV.fetch('PAYU_SECOND_KEY')
end

# 2. Via ENV variable (automatic fallback)
ENV['PAYU_SECOND_KEY'] = 'your_second_key'

# 3. Pass directly to validator
validator = PayuPl::Webhooks::Validator.new(request, second_key: 'custom_key')

logger = Logger.new(STDOUT)
validator = PayuPl::Webhooks::Validator.new(request, logger: logger)
result = validator.validate_and_parse

validator = PayuPl::Webhooks::Validator.new(request)

begin
  validator.verify_signature!
  # Signature is valid
rescue => e
  # Signature validation failed
  Rails.logger.error("Invalid signature: #{e.message}")
end

result = validator.validate_and_parse

if result.success?
  payload = result.data
  # Access webhook data
  order_id = payload.dig('order', 'orderId')
  status = payload.dig('order', 'status')
  
  # Convert amount from minor units (2900 = 29.00 PLN)
  total_amount = payload.dig('order', 'totalAmount').to_i / 100.0
  currency = payload.dig('order', 'currencyCode')
else
  error_message = result.error
  # Handle validation error
end

# Sinatra
post '/webhooks/payu' do
  result = PayuPl::Webhooks::Validator.new(request).validate_and_parse
  
  if result.success?
    # Process webhook
    status 200
  else
    status 400
  end
end

# Hanami
module Web::Controllers::Webhooks
  class Payu
    include Web::Action

    def call(params)
      result = PayuPl::Webhooks::Validator.new(request).validate_and_parse
      
      if result.success?
        # Process webhook
        self.status = 200
      else
        self.status = 400
      end
    end
  end
end

client.retrieve_shop_data("SHOP_ID")

# Standard Payout
standard_payout = {
  shopId: "1a2B3Cx",
  payout: {
    extPayoutId: "payout-123",
    amount: 10_000,
    description: "Payout"
  }
}

# Bank Account Payout
bank_account_payout = {
  shopId: "1a2B3Cx",
  payout: { extPayoutId: "payout-124", amount: 10_000, description: "Payout" },
  account: { accountNumber: "PL61109010140000071219812874" },
  customerAddress: { name: "Jane Doe" }
}

# Card Payout (use either cardToken or card)
card_payout = {
  shopId: "1a2B3Cx",
  payout: { extPayoutId: "payout-125", amount: 10_000, description: "Payout" },
  payee: { extCustomerId: "customer-id-1", accountCreationDate: "2025-03-27T00:00:00.000Z", email: "email@email.com" },
  customerAddress: { name: "Jane Doe" },
  cardToken: "TOKC_..."
}

# Payout for Marketplace
marketplace_payout = {
  shopId: "1a2B3Cx",
  account: { extCustomerId: "submerchant1" },
  payout: { extPayoutId: "payout-126", amount: 10_000, currencyCode: "PLN", description: "Payout" }
}

# FxPayout
fx_payout = {
  shopId: "1a2B3Cx",
  account: { extCustomerId: "submerchant1" },
  payout: { extPayoutId: "payout-127", amount: 10_000, currencyCode: "PLN", description: "Payout" },
  fxData: { partnerId: "...", currencyCode: "EUR", amount: 2500, rate: 0.25, tableId: "2055" }
}

client.create_payout(standard_payout)
client.retrieve_payout("PAYOUT_ID")

statement = client.retrieve_statement("REPORT_ID")
# => { data: "...", filename: "...", content_type: "...", http_status: 200 }

safe_filename = File.basename(statement.fetch(:filename)).gsub(/[^0-9A-Za-z.\-]/, "_")
File.binwrite(safe_filename, statement.fetch(:data))