Authentication

const NodeRSA = require("node-rsa");
const {
  KEYUTIL,
  KJUR,
  hextob64,
  hextob64u,
  RSAKey,
  b64tohex
} = require("jsrsasign");
const axios = require("axios");

// Replace "TODO" with OPay Public Key
const opayPublicKey = `
-----BEGIN PUBLIC KEY-----
todo something...
-----END PUBLIC KEY-----
`;

// Replace "TODO" with Merchant Private Key
const merchantPrivateKey = `
-----BEGIN PRIVATE KEY-----
todo something...
-----END PRIVATE KEY-----
`;

/**
 * Custom RSA
 */
class CustomRsa {
  constructor({ opayPublicKey, merchantPrivateKey }) {
    this.data = null;
    this.opayPublicKey = opayPublicKey || "";
    this.merchantPrivateKey = merchantPrivateKey || "";
  }
  encrypt(data, timestamp) {
    this.data = data || this.data;
    if (!this.data || !timestamp) return "";

    const rsa = new NodeRSA({ b: 1024 });
    rsa.setOptions({ encryptionScheme: { scheme: "pkcs1" } });
    rsa.importKey(this.opayPublicKey, "pkcs8-public-pem");
    const encrypted = rsa.encrypt(
      JSON.stringify(this._traverseData(data)),
      "base64"
    );
    const encryptData = {
      paramContent: encrypted,
      sign: this._setSign(encrypted + timestamp)
    };
    return encryptData;
  }
  decrypt(data) {
    const rsa = new NodeRSA(this.merchantPrivateKey);
    rsa.setOptions({ encryptionScheme: { scheme: "pkcs1" } });
    const decrypted = rsa.decrypt(data.data, "utf8");
    const responseData = JSON.parse(decrypted);
    const { sign } = data;
    delete data.sign;
    return {
      verify: this._verfiySign(sign, this._traverseData(data)),
      data: responseData
    };
  }
  _setSign(inputString = "{}") {
    const rsa = KEYUTIL.getKey(this.merchantPrivateKey);
    const sig = new KJUR.crypto.Signature({
      alg: "SHA256withRSA"
    });
    sig.init(rsa);
    sig.updateString(inputString);
    return hextob64(sig.sign());
  }
  _verfiySign(sign, data) {
    let signatureVf = new KJUR.crypto.Signature({
      alg: "SHA256withRSA",
      prvkeypem: this.opayPublicKey
    });
    let mapSplicing = "";
    for (let k in data) {
      if (mapSplicing) {
        mapSplicing += "&";
      }
      mapSplicing += `${k}=${data[k]}`;
    }
    signatureVf.updateString(mapSplicing);
    return signatureVf.verify(b64tohex(sign));
  }
  _getDataType(data) {
    return Object.prototype.toString.call(data);
  }
  _traverseData(data) {
    let r = null;
    switch (this._getDataType(data)) {
      case "[object Object]":
        r = {};
        const keyArr = Object.keys(data).sort();
        keyArr.forEach(key => {
          const val = data[key];
          r[key] = this._traverseData(val);
        });
        break;
      case "[object Array]":
        result = [];
        data.sort().forEach(item => {
          r.push(this._traverseData(item));
        });
        break;
      default:
        r = data;
    }
    return r;
  }
}

/**
 * Test case
 */
(() => {
  const interfaceParameters = {
    // todo something...
    headMerchantId: "256622092286390",
    merchantId: "256622092286391",
    outOrderNo: "2334345345348734",
    amount: "2200.00",
    currency: "NGN",
    orderExpireTime: 300,
    productInfo: JSON.stringify({
      filmName: "Avatar:The Way of Water",
      filmTitle: "ticket title",
      filmTicketNum: "film ticker number",
      seatNum: "Seat number(multiple seats, concatenate)",
      filmTicketAmount: "100",
      filmFeeAmount: "5",
      filmDate: "movie date 2024-05-12",
      filmTime: "movie showtime, 19:00"
    }),
    isSplit: "N",
    remark: "test film app",
    sceneEnum: "COLLECTION_SDK",
    subSceneEnum: "LOGISTIC",
    sn: "9210264890"
  };

  const crsa = new CustomRsa({
    opayPublicKey,
    merchantPrivateKey
  });
  const timestamp = new Date().getTime();
  const encryptData = crsa.encrypt(interfaceParameters, timestamp);

  console.info("encryptData ==>", encryptData);
  axios({
    method: "POST",
    url: "https://payapi.opayweb.com/openApi/order/checkout/createOrder",
    headers: {
      "Content-Type": "application/json",
      version: "V1.0.1",
      bodyFormat: "JSON",
      clientAuthKey: "9a2ca7297afd493a84d7a538a04e210m", // todo something...
      timestamp: timestamp
    },
    data: encryptData
  })
    .then(res => {
      console.info("res ==>", res.data);
      const { code, message } = res.data;
      if (code == "00000") {
        const { verify, data } = crsa.decrypt(res.data);
        console.log("Verify sign:", verify); // Verify sign: true
        console.log("Decrypt response data:", data); // Decrypt response data: { orderNo: '20240314998765432101' }  
      } else {
        throw new Error(message);
      }
    })
    .catch(err => {
      console.log("err ==>", err);
    });
})();