I've fixed this problem now
The signature was invalid because the url params I was signing with were not all there.
Here's my Ruby solution in case any other Ruby developers hit the same problem:
module PesaPal
require 'active_support'
include ActiveSupport::Configurable
self.configure do |config|
config.test_mode = true
config.consumer_key = "<my key>"
config.consumer_secret = "<consumer secret>"
end
end
class TransactionUrl
require 'oauth'
require 'uri'
require 'active_support/core_ext/object/to_query'
require 'htmlentities'
attr_reader :post_data_xml, :callback_url, :token
HTTP_METHOD = 'get'
API_ACTION = '/API/PostPesapalDirectOrderV4'
def initialize(post_data_xml, callback_url)
@post_data_xml = post_data_xml
@callback_url = callback_url
@token = nil
end
def api_domain
PesaPal.config[:test_mode] ? 'http://demo.pesapal.com' : 'https://www.pesapal.com'
end
def url
"#{api_domain}#{signed_request.path}"
end
def consumer
@consumer ||= begin
OAuth::Consumer.new(consumer_key, consumer_secret, {
site: api_domain,
http_method: HTTP_METHOD,
scheme: :query_string
})
end
end
def consumer_key
PesaPal.config[:consumer_key]
end
def consumer_secret
PesaPal.config[:consumer_secret]
end
def signed_request
consumer.create_signed_request HTTP_METHOD, request_url, nil, {}, params
end
def request_url
API_ACTION + "?" + params_to_string
end
def params
@params ||= {
'oauth_callback' => callback_url,
'pesapal_request_data' => escaped_xml,
}
end
def params_to_string
strings = []
for key, value in params
strings << "#{key}=#{CGI::escape(value)}"
end
strings.join('&')
end
def escaped_xml
html_escaped_xml = HTMLEntities.new.encode(post_data_xml)
end
end
@amount = 12.34;
@desc = "Bob Description";
@type = "MERCHANT"; # default value = MERCHANT
@reference = 808; # unique order id of the transaction, generated by merchant
@first_name = "bob"; # [optional]
@last_name = "mck"; # [optional]
@email = "[email protected]";
@phonenumber = '"
XML = "<put your XML here>"
CALLBACK = "http://katanacode.com"
t = TransactionUrl.new(XML, CALLBACK)
puts t.url
