require 'nokogiri'

module ActiveMerchant #:nodoc:
  module Billing #:nodoc:
    class ProPayGateway < Gateway
      self.test_url = 'https://xmltest.propay.com/API/PropayAPI.aspx'
      self.live_url = 'https://epay.propay.com/api/propayapi.aspx'

      self.supported_countries = ['US', 'CA']
      self.default_currency = 'USD'
      self.money_format = :cents
      self.supported_cardtypes = [:visa, :master, :american_express, :discover]

      self.homepage_url = 'https://www.propay.com/'
      self.display_name = 'ProPay'

      STATUS_RESPONSE_CODES = {
        "00" => "Success",
        "20" => "Invalid username",
        "21" => "Invalid transType",
        "22" => "Invalid Currency Code",
        "23" => "Invalid accountType",
        "24" => "Invalid sourceEmail",
        "25" => "Invalid firstName",
        "26" => "Invalid mInitial",
        "27" => "Invalid lastName",
        "28" => "Invalid billAddr",
        "29" => "Invalid aptNum",
        "30" => "Invalid city",
        "31" => "Invalid state",
        "32" => "Invalid billZip",
        "33" => "Invalid mailAddr",
        "34" => "Invalid mailApt",
        "35" => "Invalid mailCity",
        "36" => "Invalid mailState",
        "37" => "Invalid mailZip",
        "38" => "Invalid dayPhone",
        "39" => "Invalid evenPhone",
        "40" => "Invalid ssn",
        "41" => "Invalid dob",
        "42" => "Invalid recEmail",
        "43" => "Invalid knownAccount",
        "44" => "Invalid amount",
        "45" => "Invalid invNum",
        "46" => "Invalid rtNum",
        "47" => "Invalid accntNum",
        "48" => "Invalid ccNum",
        "49" => "Invalid expDate",
        "50" => "Invalid cvv2",
        "51" => "Invalid transNum and/or Unable to act perform actions on transNum due to funding",
        "52" => "Invalid splitNum",
        "53" => "A ProPay account with this email address already exists AND/OR User has no account number",
        "54" => "A ProPay account with this social security number already exists",
        "55" => "The email address provided does not correspond to a ProPay account.",
        "56" => "Recipient’s email address shouldn’t have a ProPay account and does",
        "57" => "Cannot settle transaction because it already expired",
        "58" => "Credit card declined",
        "59" => "Invalid Credential or IP address not allowed",
        "60" => "Credit card authorization timed out; retry at a later time",
        "61" => "Amount exceeds single transaction limit",
        "62" => "Amount exceeds monthly volume limit",
        "63" => "Insufficient funds in account",
        "64" => "Over credit card use limit",
        "65" => "Miscellaneous error",
        "66" => "Denied a ProPay account",
        "67" => "Unauthorized service requested",
        "68" => "Account not affiliated",
        "69" => "Duplicate invoice number (The same card was charged for the same amount with the same invoice number (including blank invoices) in a 1 minute period. Details about the original transaction are included whenever a 69 response is returned. These details include a repeat of the auth code, the original AVS response, and the original CVV response.)",
        "70" => "Duplicate external ID",
        "71" => "Account previously set up, but problem affiliating it with partner",
        "72" => "The ProPay Account has already been upgraded to a Premium Account",
        "73" => "Invalid Destination Account",
        "74" => "Account or Trans Error",
        "75" => "Money already pulled",
        "76" => "Not Premium (used only for push/pull transactions)",
        "77" => "Empty results",
        "78" => "Invalid Authentication",
        "79" => "Generic account status error",
        "80" => "Invalid Password",
        "81" => "Account Expired",
        "82" => "InvalidUserID",
        "83" => "BatchTransCountError",
        "84" => "InvalidBeginDate",
        "85" => "InvalidEndDate",
        "86" => "InvalidExternalID",
        "87" => "DuplicateUserID",
        "88" => "Invalid track 1",
        "89" => "Invalid track 2",
        "90" => "Transaction already refunded",
        "91" => "Duplicate Batch ID"
      }

      TRANSACTION_RESPONSE_CODES = {
        "00" => "Success",
        "1" => "Transaction blocked by issuer",
        "4" => "Pick up card and deny transaction",
        "5" => "Problem with the account",
        "6" => "Customer requested stop to recurring payment",
        "7" => "Customer requested stop to all recurring payments",
        "8" => "Honor with ID only",
        "9" => "Unpaid items on customer account",
        "12" => "Invalid transaction",
        "13" => "Amount Error",
        "14" => "Invalid card number",
        "15" => "No such issuer. Could not route transaction",
        "16" => "Refund error",
        "17" => "Over limit",
        "19" => "Reenter transaction or the merchant account may be boarded incorrectly",
        "25" => "Invalid terminal 41 Lost card",
        "43" => "Stolen card",
        "51" => "Insufficient funds",
        "52" => "No such account",
        "54" => "Expired card",
        "55" => "Incorrect PIN",
        "57" => "Bank does not allow this type of purchase",
        "58" => "Credit card network does not allow this type of purchase for your merchant account.",
        "61" => "Exceeds issuer withdrawal limit",
        "62" => "Issuer does not allow this card to be charged for your business.",
        "63" => "Security Violation",
        "65" => "Activity limit exceeded",
        "75" => "PIN tries exceeded",
        "76" => "Unable to locate account",
        "78" => "Account not recognized",
        "80" => "Invalid Date",
        "82" => "Invalid CVV2",
        "83" => "Cannot verify the PIN",
        "85" => "Service not supported for this card",
        "93" => "Cannot complete transaction. Customer should call 800 number.",
        "95" => "Misc Error Transaction failure",
        "96" => "Issuer system malfunction or timeout.",
        "97" => "Approved for a lesser amount. ProPay will not settle and consider this a decline.",
        "98" => "Failure HV",
        "99" => "Generic decline or unable to parse issuer response code"
      }

      def initialize(options={})
        requires!(options, :cert_str)
        super
      end

      def purchase(money, payment, options={})
        request = build_xml_request do |xml|
          add_invoice(xml, money, options)
          add_payment(xml, payment, options)
          add_address(xml, options)
          add_account(xml, options)
          add_recurring(xml, options)
          xml.transType "04"
        end

        commit(request)
      end

      def authorize(money, payment, options={})
        request = build_xml_request do |xml|
          add_invoice(xml, money, options)
          add_payment(xml, payment, options)
          add_address(xml, options)
          add_account(xml, options)
          add_recurring(xml, options)
          xml.transType "05"
        end

        commit(request)
      end

      def capture(money, authorization, options={})
        request = build_xml_request do |xml|
          add_invoice(xml, money, options)
          add_account(xml, options)
          xml.transNum authorization
          xml.transType "06"
        end

        commit(request)
      end

      def refund(money, authorization, options={})
        request = build_xml_request do |xml|
          add_invoice(xml, money, options)
          add_account(xml, options)
          xml.transNum authorization
          xml.transType "07"
        end

        commit(request)
      end

      def void(authorization, options={})
        refund(nil, authorization, options)
      end

      def credit(money, payment, options={})
        request = build_xml_request do |xml|
          add_invoice(xml, money, options)
          add_payment(xml, payment, options)
          add_account(xml, options)
          xml.transType "35"
        end

        commit(request)
      end

      def verify(credit_card, options={})
        MultiResponse.run(:use_first_response) do |r|
          r.process { authorize(100, credit_card, options) }
          r.process(:ignore_result) { void(r.authorization, options) }
        end
      end

      def supports_scrubbing?
        true
      end

      def scrub(transcript)
        transcript.
          gsub(%r((<certStr>).+(</certStr>)), '\1[FILTERED]\2').
          gsub(%r((<ccNum>).+(</ccNum>)), '\1[FILTERED]\2').
          gsub(%r((<CVV2>).+(</CVV2>)), '\1[FILTERED]\2')
      end

      private

      def add_payment(xml, payment, options)
        xml.ccNum payment.number
        xml.expDate "#{format(payment.month, :two_digits)}#{format(payment.year, :two_digits)}"
        xml.CVV2 payment.verification_value
        xml.cardholderName payment.name
      end

      def add_address(xml, options)
        if address = options[:billing_address] || options[:address]
          xml.addr address[:address1]
          xml.aptNum address[:address2]
          xml.city address[:city]
          xml.state address[:state]
          xml.zip address[:zip]
        end
      end

      def add_account(xml, options)
        xml.accountNum options[:account_num]
      end

      def add_invoice(xml, money, options)
        xml.amount amount(money)
        xml.currencyCode options[:currency] || currency(money)
        xml.invNum options[:order_id] || SecureRandom.hex(25)
      end

      def add_recurring(xml, options)
        xml.recurringPayment options[:recurring_payment]
      end

      def parse(body)
        results  = {}
        xml = Nokogiri::XML(body)
        resp = xml.xpath("//XMLResponse/XMLTrans")
        resp.children.each do |element|
          results[element.name.underscore.downcase.to_sym] = element.text
        end
        results
      end

      def commit(parameters)
        url = (test? ? test_url : live_url)
        response = parse(ssl_post(url, parameters))

        Response.new(
          success_from(response),
          message_from(response),
          response,
          authorization: authorization_from(response),
          avs_result: AVSResult.new(code: response[:avs]),
          cvv_result: CVVResult.new(response[:cvv2_resp]),
          test: test?,
          error_code: error_code_from(response)
        )
      end

      def success_from(response)
        response[:status] == "00"
      end

      def message_from(response)
        return "Success" if success_from(response)
        message = STATUS_RESPONSE_CODES[response[:status]]
        message += " - #{TRANSACTION_RESPONSE_CODES[response[:response_code]]}" if response[:response_code]

        message
      end

      def authorization_from(response)
        response[:trans_num]
      end

      def error_code_from(response)
        unless success_from(response)
          response[:status]
        end
      end

      def build_xml_request
        builder = Nokogiri::XML::Builder.new do |xml|
          xml.XMLRequest do
            xml.certStr @options[:cert_str]
            xml.class_ "partner"
            xml.XMLTrans do
              yield(xml)
            end
          end
        end

        builder.to_xml
      end
    end

    def underscore(camel_cased_word)
      camel_cased_word.to_s.gsub(/::/, '/').
        gsub(/([A-Z]+)([A-Z][a-z])/,'\1_\2').
        gsub(/([a-z\d])([A-Z])/,'\1_\2').
        tr("-", "_").
        downcase
    end
  end
end