search

csob / paymentgateway

English documentation of the ČSOB Payment Gateway that offers an API for credit card payments, Apple Pay, Google Pay, mallpay and ČSOB Payment Button.
https://platbakartou.csob.cz/platebni-brana
GNU General Public License v3.0
121 stars 68 forks source link

applepay/start invalid payload #537

Closed burrak closed 3 years ago

burrak commented 3 years ago

Dobrý den, při odeslání requestu na endpoint applepay/init se mi vrací tato odpověď:

{
    "dttm": "20201020151413",
    "signature": "IIkD5v2Of4VQ28ivNpg1dYJq734IVmeGOoFtncwalnVsbE43rpw60uAPdkqe4AwSkgTJ/AAD/WR9c3Syqfy0sNM3FDuMnHyWUvdfwJ3AVZw44LW+F7nR1mapqv9dTCy0LI/HQTBa3A7Gi4cYT0fTpqRIo9SGPJRyrQztvoq0+XAyOLVYN4Dhyns3uwNxAkxRKsF14ZIHpcxRQ3GShQznEOGzH3ANOjmSqqPeIssWfSEH2PXJHJBXVvXaIqiVazUCAp6zk02chUc2x9Pjp373vxvoeA1akQLjbQRzFoeeOyW3Q9jRWEIINHkXnTzioMziXSVkqb5xBy71DGPSkbf9lw==",
    "payId": "534e26342e3d2FJ",
    "resultCode": 900,
    "resultMessage": "invalid payload (verification/decryption)",
    "paymentStatus": 6
}
"payload":"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"

Zkoušel jsem již vše možné, ale nedaří se mi zjistit, kde je problém.

janbrasna commented 3 years ago

Ten "payload" vypadá správně sestavený, nicméně ten se posílá až do applepay/start — chyba se tedy týká jiného problému v applepay/init postu.

burrak commented 3 years ago

@janbrasna přepsal jsem se, posílám to samozřejmě na applepay/start, správně je to v titulku

janbrasna commented 3 years ago

👍 tak pak sem zkuste poslat cely odchozi json (vc. nepovinnych nebo prazdnych polozek, tak jak ho posilate), a string k podpisu ze ktereho ten podpis pak pocitate — treba tam bude neco videt… — jinak bude potreba pockat na support z banky az to pripadne dohleda podle logu, na cem to neproslo.

dkomarek2 commented 3 years ago

Dobrý den,

zkontroloval jsem zmíněný request v našem logu a "applepay/init" se zpracoval v pořádku ale "applepay/start" vyvolal následující chyby:

Takže máte chybu v parametru "payload" v "applepay/start". Doporučuju si tedy zkontrolovat implementaci tohoto requestu, viz:

S pozdravem,

Daniel Komárek IT application specialist

burrak commented 3 years ago

JSON, tak jak jej posílám:

{
    "merchantId": "M1MIPS0131",
    "payId": "c0739bd2b1f32FJ",
    "payload": "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",
    "totalAmount": "500",
    "dttm": "20201022145105",
    "signature": "f5eDtiX8YLKcuWW35S1sZJGqkmyfSM\/o2ftAa0vDO8HTs3Wc+yxa6tTgJ35XmTMSnNMcRkQ9h3VgiGeft85HUhUp16lUvRMPbPG47\/fNeoXMl60VOBS+MkUpTiZZIfuF5JUBEvZa9j7APiXWC6m2unUiC2+CCKx7cHTPHUdHrn\/YdYL8xqlDE3GkrjgRFNy8R78Tsi41Zvut6LOJI1Lmo2\/FYD6IhXLlcoM5391e8wC5haCMfewGlIsly+BdLH6DByFDqYDmQ\/USOvOUFla+NxqjwFzSnxMZx5R8O+ZJwEywR9J8NoRpTNI7wBQsS+k6bretuLJGztiN1PCkjnbQKQ=="
}

podpisový string:

M1MIPS0131|88918ef1a0528FJ|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|500|20201022145511

a samotný payload od Apple:

{
    "version": "EC_v1",
    "data": "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",
    "signature": "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",
    "header": {
        "ephemeralPublicKey": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEz5DznRKa6ch7JjVroDTbTJcY2QQUBdyHjGCGjuCklYEDDfit/MXYm31cDIXK08hWELIPwnZbEJvBRlrM20jBIA==",
        "publicKeyHash": "4lfVq7cRzeIMEndotdFScaXn0KHtSu2mSU55wPM+dbs=",
        "transactionId": "4be82f8e546b403c619b2ef890b46e6b42f91f419600db1db72887dbef94063d"
    }
}
janbrasna commented 3 years ago

@dkomarek2 Jenze ten base64 je spravny… tj. pokud ho takto presne i dostavate doruceny, tak odpovida tomu apple payment objektu, stejne tak podpis se da z base64 rozbalit tzn. ta exception reference na MAC/GCM spis ukazuje na "nejake interni" asym krypto, nez na vylozene enkodovani/payloady tady toho transportu…

Jenze pokud je v poradku applepay/init (tj. neni problem s klici, prod vs. int, nebo SHA1 vs. SHA256), tak uz netusim proc by to nemelo jit rozbalit, ta data resp. i jejich obalky vypadaji na prvni pohled platne a i se daji spravne rozparsovat (ala console.log(JSON.parse(window.atob("…b64payload…")));…), tzn. bych spis hledal jestli nevznika problem v podepisovani toho digestu (precijen je relativne dlouhy), nebo presneji patral co presne ta exception znamena… (dekoduje se co konkretne? obchodnikovym Apple Developer klicem vnitrek toho payment object payloadu na vytezeni nejakych autentizacnich/autorizacnich kryptogramu do CAVV atp.? tj. by to znamenalo, ze tyhle "vnitrni" payloady co dodava Apple uz samy o sobe obsahuji nejakou chybu v hashovani?)

janbrasna commented 3 years ago

@burrak Tzn. otazka zda mate spravne zavedene ty Apple Pay Merchant certifikaty viz postup wiki/Apple-Pay#vytvoření-merchant-id vc. aktivace toho jedineho spravneho aktivniho v posmanu?

burrak commented 3 years ago

@janbrasna @dkomarek2 takjsem udělal nějaké změny v postování payloadu z JS do backendu, a tentokrát mi API vrací toto:

 resultMessage: invalid payload (paymentDataType)
dkomarek2 commented 3 years ago

Dobrý den,

zkontroloval jsem váš pokus z 23.10.2020 17:06 a opět prošel "applepay/init" ale poté "applepay/start" skončil s tímto:

Pro vaši případnou kontrolu uvedu obsah JSONu, který jsme obdrželi:

{ "merchantId": "M1MIPS0131", "payId": "735447dfa3e21FJ", "payload": "eyJ2ZXJzaW9uIjoiRUNfdjEiLCJkYXRhIjoiMTQyemlteGhSdjJoaGVqL0JYRHVZSFB5OGhOdWl5RHQzbHd3Q3gvWm41TnBIUEQyOGZGbUpnZHJxVXlWb1FSNHF5Rk84UzJ0NkJFYU5kbjB0NjBBNUcraExPRW85NCs3bTl2U0toem4zdHlPVlNXS3NtVGtGc21YdjRSeUpGNVhkaFZxUGt2ek9rOGt3ZG5waUlOeW9RU2NrR2YrYjJBZ2p4UU9pS1JPcEIxV205T013U0NTdWVsNnV1eHh4U1FtWEhhZllWNnRNTEtkVWdwZEdpQ2I2Z2N0UGl2dGJLV1NuazAyWXR4MVVNRnhlclI4dm84VVhaeTZ3dEd6cHZUSkpteEpFay9lcGhuSlI5Q014K0t3L2p6SHBKbWFFSnk5WXpjK3NNYUpiVVVVMVpQVFJ5R0VmSytrNjUwWmE0SGswbGwzZmlpeStTcU9sbktJTFR2bFZydCtsc0hFWjMrMmF4aTA4SzdmaGlJcjcwY3lpVjBPMEl4a1AvdlY1RWUzT3RVUUN3WS9BODRJSHhTTkIrYWNYMVV1WEVQWVBTazNxMTJwSkR0K1YvdmRuOFZwY0F1TFdod3pSZmk4MXpQTnNvWWRIMEwwMVIwTHRHQ1hicmtXaTVkYzl3ejhIc0JyanVyQVZnQVZyMHpnc2VhRjcxc0txdmFoN1drT0ZpUmVVd0diWW1SMjBJQlYxdVRONlZLdXZQeVJtSjF1YnQyL0RmSmNVNUdmam1PUHFMZjVHdm53Z25QemV3PT0iLCJzaWduYXR1cmUiOiJNSUFHQ1NxR1NJYjNEUUVIQXFDQU1JQUNBUUV4RHpBTkJnbGdoa2dCWlFNRUFnRUZBRENBQmdrcWhraUc5dzBCQndFQUFLQ0FNSUlENHpDQ0E0aWdBd0lCQWdJSVREQkJTVkdkVkRZd0NnWUlLb1pJemowRUF3SXdlakV1TUN3R0ExVUVBd3dsUVhCd2JHVWdRWEJ3YkdsallYUnBiMjRnU1c1MFpXZHlZWFJwYjI0Z1EwRWdMU0JITXpFbU1DUUdBMVVFQ3d3ZFFYQndiR1VnUTJWeWRHbG1hV05oZEdsdmJpQkJkWFJvYjNKcGRIa3hFekFSQmdOVkJBb01Da0Z3Y0d4bElFbHVZeTR4Q3pBSkJnTlZCQVlUQWxWVE1CNFhEVEU1TURVeE9EQXhNekkxTjFvWERUSTBNRFV4TmpBeE16STFOMW93WHpFbE1DTUdBMVVFQXd3Y1pXTmpMWE50Y0MxaWNtOXJaWEl0YzJsbmJsOVZRelF0VUZKUFJERVVNQklHQTFVRUN3d0xhVTlUSUZONWMzUmxiWE14RXpBUkJnTlZCQW9NQ2tGd2NHeGxJRWx1WXk0eEN6QUpCZ05WQkFZVEFsVlRNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRFFnQUV3aFYzN2V2V3g3SWhqMmpkY0pDaElZM0hzTDF2TENnOWhHQ1YyVXIwcFVFYmcwSU8yQkh6UUg2RE14OGNWTVAzNnpJZzFyclYxTy8wa29tSlBud1BFNk9DQWhFd2dnSU5NQXdHQTFVZEV3RUIvd1FDTUFBd0h3WURWUjBqQkJnd0ZvQVVJL0pKeEUrVDVPOG41c1QyS0d3L29ydjlMa3N3UlFZSUt3WUJCUVVIQVFFRU9UQTNNRFVHQ0NzR0FRVUZCekFCaGlsb2RIUndPaTh2YjJOemNDNWhjSEJzWlM1amIyMHZiMk56Y0RBMExXRndjR3hsWVdsallUTXdNakNDQVIwR0ExVWRJQVNDQVJRd2dnRVFNSUlCREFZSktvWklodmRqWkFVQk1JSCtNSUhEQmdnckJnRUZCUWNDQWpDQnRneUJzMUpsYkdsaGJtTmxJRzl1SUhSb2FYTWdZMlZ5ZEdsbWFXTmhkR1VnWW5rZ1lXNTVJSEJoY25SNUlHRnpjM1Z0WlhNZ1lXTmpaWEIwWVc1alpTQnZaaUIwYUdVZ2RHaGxiaUJoY0hCc2FXTmhZbXhsSUhOMFlXNWtZWEprSUhSbGNtMXpJR0Z1WkNCamIyNWthWFJwYjI1eklHOW1JSFZ6WlN3Z1kyVnlkR2xtYVdOaGRHVWdjRzlzYVdONUlHRnVaQ0JqWlhKMGFXWnBZMkYwYVc5dUlIQnlZV04wYVdObElITjBZWFJsYldWdWRITXVNRFlHQ0NzR0FRVUZCd0lCRmlwb2RIUndPaTh2ZDNkM0xtRndjR3hsTG1OdmJTOWpaWEowYVdacFkyRjBaV0YxZEdodmNtbDBlUzh3TkFZRFZSMGZCQzB3S3pBcG9DZWdKWVlqYUhSMGNEb3ZMMk55YkM1aGNIQnNaUzVqYjIwdllYQndiR1ZoYVdOaE15NWpjbXd3SFFZRFZSME9CQllFRkpSWDIyL1ZkSUdHaVlsMkwzNVhoUWZubTFna01BNEdBMVVkRHdFQi93UUVBd0lIZ0RBUEJna3Foa2lHOTJOa0JoMEVBZ1VBTUFvR0NDcUdTTTQ5QkFNQ0Ewa0FNRVlDSVFDK0NWY2Y1eDRlYzF0VjVhK3N0TWN2NjBSZk1CaFNJc2NsRUFLMkhyMXZWUUloQU5HTE5RcGQxdDF1c1hSZ05iRWVzczZIejZQbXIyeTlnNENKRGNnczNhcGpNSUlDN2pDQ0FuV2dBd0lCQWdJSVNXMHZ2enFZMnBjd0NnWUlLb1pJemowRUF3SXdaekViTUJrR0ExVUVBd3dTUVhCd2JHVWdVbTl2ZENCRFFTQXRJRWN6TVNZd0pBWURWUVFMREIxQmNIQnNaU0JEWlhKMGFXWnBZMkYwYVc5dUlFRjFkR2h2Y21sMGVURVRNQkVHQTFVRUNnd0tRWEJ3YkdVZ1NXNWpMakVMTUFrR0ExVUVCaE1DVlZNd0hoY05NVFF3TlRBMk1qTTBOak13V2hjTk1qa3dOVEEyTWpNME5qTXdXakI2TVM0d0xBWURWUVFERENWQmNIQnNaU0JCY0hCc2FXTmhkR2x2YmlCSmJuUmxaM0poZEdsdmJpQkRRU0F0SUVjek1TWXdKQVlEVlFRTERCMUJjSEJzWlNCRFpYSjBhV1pwWTJGMGFXOXVJRUYxZEdodmNtbDBlVEVUTUJFR0ExVUVDZ3dLUVhCd2JHVWdTVzVqTGpFTE1Ba0dBMVVFQmhNQ1ZWTXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVHdGeEdFR2Rka2hkVWFYaVdCQjNib2dLTHYzbnV1VGVDTi9FdVQ0VE5XMVdaYk5hNGkwSmQyRFNKT2U3b0kvWFlYem9qTGRydG1jTDdJNkNtRS8xUkZvNEgzTUlIME1FWUdDQ3NHQVFVRkJ3RUJCRG93T0RBMkJnZ3JCZ0VGQlFjd0FZWXFhSFIwY0RvdkwyOWpjM0F1WVhCd2JHVXVZMjl0TDI5amMzQXdOQzFoY0hCc1pYSnZiM1JqWVdjek1CMEdBMVVkRGdRV0JCUWo4a25FVDVQazd5Zm14UFlvYkQraXUvMHVTekFQQmdOVkhSTUJBZjhFQlRBREFRSC9NQjhHQTFVZEl3UVlNQmFBRkx1dzNxRllNNGlhcElxWjNyNjk2Ni9heXlTck1EY0dBMVVkSHdRd01DNHdMS0Fxb0NpR0ptaDBkSEE2THk5amNtd3VZWEJ3YkdVdVkyOXRMMkZ3Y0d4bGNtOXZkR05oWnpNdVkzSnNNQTRHQTFVZER3RUIvd1FFQXdJQkJqQVFCZ29xaGtpRzkyTmtCZ0lPQkFJRkFEQUtCZ2dxaGtqT1BRUURBZ05uQURCa0FqQTZ6M0tEVVJhWnNZYjdOY05XeW1LLzlCZnQyUTkxVGFLT3Z2R2NnVjVDdDRuNG1QZWJXWitZMVVFTmo1M3B3djRDTURJdDFVUWhzS01GZDJ4ZDh6ZzdrR2Y5RjN3c0lXMldUOFp5YVlJU2IxVDRlbjBibWN1YkNZa2hZUWFaRHdtU0hRQUFNWUlCaXpDQ0FZY0NBUUV3Z1lZd2VqRXVNQ3dHQTFVRUF3d2xRWEJ3YkdVZ1FYQndiR2xqWVhScGIyNGdTVzUwWldkeVlYUnBiMjRnUTBFZ0xTQkhNekVtTUNRR0ExVUVDd3dkUVhCd2JHVWdRMlZ5ZEdsbWFXTmhkR2x2YmlCQmRYUm9iM0pwZEhreEV6QVJCZ05WQkFvTUNrRndjR3hsSUVsdVl5NHhDekFKQmdOVkJBWVRBbFZUQWdoTU1FRkpVWjFVTmpBTkJnbGdoa2dCWlFNRUFnRUZBS0NCbFRBWUJna3Foa2lHOXcwQkNRTXhDd1lKS29aSWh2Y05BUWNCTUJ3R0NTcUdTSWIzRFFFSkJURVBGdzB5TURFd01qTXhOVEExTkRoYU1Db0dDU3FHU0liM0RRRUpOREVkTUJzd0RRWUpZSVpJQVdVREJBSUJCUUNoQ2dZSUtvWkl6ajBFQXdJd0x3WUpLb1pJaHZjTkFRa0VNU0lFSUM3QzIzalBhTGpIdG94NXA4ZmV5am9TQVE4Z2JtZlE1dGdoNUlRVUxSR25NQW9HQ0NxR1NNNDlCQU1DQkVZd1JBSWdXbFpOMFNTQi96M3ZCWnhrZEdOZG1obUNHT25wbmlaSjJKNzBtOXlZMGpRQ0lCS0MzdWNkRE54VkU3aVZmV1Rqczdnd2NubWxSNXZ2SmFmTkticHE4WDFJQUFBQUFBQUEiLCJoZWFkZXIiOnsiZXBoZW1lcmFsUHVibGljS2V5IjoiTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFUWx0dUp2a3Fxb1ExRm5udHVrWGdlMjYxOE8yeTVHWTZCUW0yS3g2SG0vckNZUXlnM2JuR3owSkNnaVJDa0grd2hNdEcvODFwNlRSV2VsblFacjdIRVE9PSIsInB1YmxpY0tleUhhc2giOiJKaVdRekpXZkJPa0VFakF2alpWVVZLWU1DSEh1OEFQSTlmYW12bFk5MEo4PSIsInRyYW5zYWN0aW9uSWQiOiIwMjQ2ZmJkNjU4MTEyZWVkMzQyMmUwZDhmYzg2Y2VmMjFhMjRmMjJmMzc5MjYzNjkyNGM1ZjU2ZDExYTdjMDE1In19", "totalAmount": "500", "dttm": "20201023170651", "signature": "D98TQETKxPDRcJGeUw5yHkUmw48YbKnlzS77FZJ5c2vEYlLfRSlH/e+39Q4YdS3DgQWSwA4wKoguG04kQ2U8pFJe2L8HFbbSlTdtuOepGFbfvdryxSbthSyU/LIP1OUYFL+DKhrGbvw3zRn04vcCrphC95U+AdI20x9B8OYTEY8hMzOUdX3+H/8aMWsO7KJn46zY+VWRHAnyqKtWvhzM19h8A6yF3E2iG0/+sb3R7kq4pWFO+6edJpnKt4OtiejiMjldOfJqWoskZgSKa26+msgxv6lpbgFsvyotMkGajsNoWboC0VOnGjGbHLGDQ0B5pXFjmbfBfN7eMAP6+37LXg==" }

Snad vám to pomůže při analýze problému.

S pozdravem,

Daniel Komárek IT application specialist

janbrasna commented 3 years ago

@dkomarek2 A co v realu znamenaji ty vyjimky jako "AEADBadTagException: mac check in GCM failed" nebo "invalid paymentDataType: EMV" … to jsou nejake interni chyby? V dokumentaci o nicem takovem neni ani slovo — kde to vznika / co to znamena? Muze za to obchodnik, nebo Apple, nebo zakaznik, nebo nejake nastaveni v bance, prip. problem s klici atp.?

dkomarek2 commented 3 years ago

@janbrasna nechal jsem se informovat od kolegy z vývoje a prý by se mohlo jednat o špatný "Apple Pay Payment Processing Certificate" ale je to jen domněnka.

burrak commented 3 years ago

@janbrasna třeba u mě byla ta chyba invalid paymentDataType: EMV způsobená tím, že jsem do Applu posílal v merchantCapabilities parametr supportsEMV, a celý payload pak byl špatně

janbrasna commented 3 years ago

@burrak OK, to jsou nejake parametry pro Cinu a jejich karetni specifika (kde se misto kryptogramu predava snad PIN nebo takneco…), vlastne to meni uz samotne init moznosti atp., takze tam opravdu chapu ze to cele neprojde… jen ty "duvody" pro ty chyby jsou divne 🤷‍♂️ … Ale bohuzel Apple neni uplne povestny tim, ze by dobre handloval okrajove stavy, popisoval chyby, nebo takovy proces dobre dokumentoval…;)