solidus-adyen 0.1.2

data/bin/checkout.rb

@@ -0,0 +1,111 @@
+#!/usr/bin/env ruby
+require "bundler/setup"
+require "capybara"
+require "capybara"
+require "capybara/dsl"
+require "capybara/poltergeist"
+require "pry"
+
+Capybara.default_driver = :poltergeist
+
+class Driver
+  include Capybara::DSL
+
+  def amex_purchase
+    checkout :norway
+
+    click_link "American Express"
+
+    fill_in "card.cardNumber", with: "370000000000002"
+    fill_in "card.cardHolderName", with: "John Doe"
+    select "08", from: "card.expiryMonth"
+    select "2018", from: "card.expiryYear"
+    fill_in "card.cvcCode", with: "7373"
+
+    click_button "continue"
+    click_button "pay"
+  end
+
+  def sofort_purchase
+    checkout :germany
+
+    click_link "Sofort Banking"
+    fill_in "Account number", with: "88888888"
+    fill_in "PIN", with: "12345"
+    click_button "Next"
+    find(
+      "label",
+      text: "23456789 - Girokonto (Max Mustermann)",
+      match: :prefer_exact).
+    click
+    click_button "Next"
+    fill_in "TAN", with: "12345"
+    click_button "Next"
+  end
+
+  def ideal_purchase issuer
+    checkout :norway
+
+    click_link "iDEAL"
+    select issuer
+    click_button "continue"
+    click_button "Continue"
+  end
+
+  def login
+    visit "http://localhost:3000/login"
+    fill_in "Email", with: "spree@example.com", match: :first
+    fill_in "Password", with: "spree123"
+
+    click_button "Login"
+  end
+
+  def checkout address_type
+    visit "http://localhost:3000/"
+    click_link "Ruby on Rails Tote", match: :first
+    click_button "Add To Cart"
+    click_button "Checkout"
+    fill_address address_type
+    click_button "Save and Continue"
+    click_button "Save and Continue"
+    choose "Adyen"
+  end
+
+  def fill_address type
+    fill_in "First Name", with: "John"
+    fill_in "Last Name", with: "Doe"
+    fill_in "Phone", with: "250-111-1111"
+    case type
+    when :norway
+      fill_norway_address
+    when :germany
+      fill_german_address
+    end
+  end
+
+  def fill_german_address
+    fill_in "Street Address", with: "Gleimstraße 62"
+    fill_in "City", with: "Berlin"
+    select "Germany"
+    select "Berlin"
+    fill_in "Zip", with: "13355"
+  end
+
+  def fill_norway_address
+    fill_in "Street Address", with: "Noordwal 540"
+    fill_in "City", with: "Den Haag"
+    select "Netherlands"
+    select "Zuid-Holland"
+    fill_in "Zip", with: "2513dz"
+  end
+end
+
+driver = Driver.new
+
+driver.login
+driver.sofort_purchase
+driver.amex_purchase
+driver.ideal_purchase "Test Issuer"
+# driver.ideal_purchase "Test Issuer Refused"
+# driver.ideal_purchase "Test Issuer Pending"
+# driver.ideal_purchase "Test Issuer Cancelled"

data/bin/regen.sh

@@ -0,0 +1 @@
+rm -rf spec/dummy && bundle install && rake test_app && cd spec/dummy && rake db:migrate && rails s

data/config/initializers/solidus_adyen.rb

@@ -0,0 +1 @@
+Rails.application.config.assets.precompile += %w( spree/checkout/payment/adyen.js )

data/config/locales/en.yml

@@ -0,0 +1,23 @@
+---
+en:
+  spree:
+    adyen:
+      communication:
+        communication:
+          payment_method: "Payment method"
+          event_code: "Event code"
+          result: "Result"
+          message: "Message"
+          Reason: "Reason"
+          amount: "Amount"
+  solidus-adyen:
+    payment:
+      failure: "Action failed, check reason for more information."
+      success: "Action succeeded."
+      unprocessed: "Action was not processed: payment may require manual resolution."
+    manual_refund:
+      order_button: "manual refund required"
+      log_message: A cancellation was attempted on this payment but the payment
+        method only supports manual refunds.
+        Please attempt to refund this payment through the Adyen customer area
+        or contact an Adyen representative to assist.

data/config/routes.rb

@@ -0,0 +1,13 @@
+Spree::Core::Engine.routes.draw do
+  namespace :adyen do
+    resource :hpp, only: [] do
+      member do
+        get :directory
+      end
+    end
+  end
+
+  get "checkout/payment/adyen", to: "adyen_redirect#confirm", as: :adyen_confirmation
+  post "adyen/notify", to: "adyen_notifications#notify"
+  post "adyen/authorise3d", to: "adyen_redirect#authorise3d", as: :adyen_authorise3d
+end

data/db/migrate/20131017040945_create_adyen_notifications.rb

@@ -0,0 +1,29 @@
+# @private
+class CreateAdyenNotifications < ActiveRecord::Migration
+  
+  def self.up
+    create_table :adyen_notifications do |t|
+      t.boolean  :live,                  :null => false, :default => false
+      t.string   :event_code,            :null => false, :limit => 40
+      t.string   :psp_reference,         :null => false, :limit => 50
+      t.string   :original_reference,    :null => true
+      t.string   :merchant_reference,    :null => false
+      t.string   :merchant_account_code, :null => false
+      t.datetime :event_date,            :null => false
+      t.boolean  :success,               :null => false, :default => false
+      t.string   :payment_method,        :null => true
+      t.string   :operations,            :null => true
+      t.text     :reason,                :null => true
+      t.string   :currency,              :null => true, :limit => 3
+      t.integer  :value,                 :null => true
+      t.boolean  :processed,             :null => false, :default => false
+      t.timestamps
+    end
+     
+    add_index :adyen_notifications, [:psp_reference, :event_code, :success], :unique => true, :name => "adyen_notification_uniqueness"
+  end
+
+  def self.down
+    drop_table :adyen_notifications
+  end
+end

data/db/migrate/20150911201942_add_index_adyen_notifications_psp_reference.rb

@@ -0,0 +1,5 @@
+class AddIndexAdyenNotificationsPspReference < ActiveRecord::Migration
+  def change
+    add_index :adyen_notifications, [:psp_reference], unique: true
+  end
+end

data/db/migrate/20150914162539_create_spree_adyen_hpp_sources.rb

@@ -0,0 +1,21 @@
+# Fields come from
+# https://docs.adyen.com/display/TD/HPP+payment+response
+class CreateSpreeAdyenHppSources < ActiveRecord::Migration
+  def change
+    create_table :spree_adyen_hpp_sources do |t|
+      t.string :auth_result
+      t.string :psp_reference
+      t.string :merchant_reference
+      t.string :skin_code
+      t.string :merchant_sig
+      t.string :payment_method
+      t.string :shopper_locale
+      t.string :merchant_return_data
+
+      t.timestamps
+    end
+
+    add_index :spree_adyen_hpp_sources, :psp_reference, unique: true
+    add_index :spree_adyen_hpp_sources, :merchant_reference
+  end
+end

data/db/migrate/20151007090519_add_days_to_ship_to_config.rb

@@ -0,0 +1,5 @@
+class AddDaysToShipToConfig < ActiveRecord::Migration
+  def change
+    add_column :spree_adyen_hpp_sources, :days_to_ship, :integer
+  end
+end

data/db/migrate/20151020230830_remove_indices_on_adyen_notifications.rb

@@ -0,0 +1,6 @@
+class RemoveIndicesOnAdyenNotifications < ActiveRecord::Migration
+  def change
+    remove_index :adyen_notifications, name: "adyen_notification_uniqueness"
+    remove_index :adyen_notifications, [:psp_reference]
+  end
+end

data/db/migrate/20151106093023_allow_merchant_reference_to_be_null_for_adyen_notification.rb

@@ -0,0 +1,5 @@
+class AllowMerchantReferenceToBeNullForAdyenNotification < ActiveRecord::Migration
+  def change
+    change_column :adyen_notifications, :merchant_reference, :string, null: true
+  end
+end

data/lib/solidus-adyen.rb

@@ -0,0 +1 @@
+require "spree/adyen"

data/lib/spree/adyen/engine.rb

@@ -0,0 +1,32 @@
+module Spree
+  module Adyen
+    class Engine < ::Rails::Engine
+      engine_name "solidus-adyen"
+
+      isolate_namespace Spree::Adyen
+
+      config.autoload_paths += Dir["#{config.root}/lib/**/"]
+
+      config.autoload_paths += %W(
+        #{config.root}/app/controllers/concerns
+        #{config.root}/app/models/concerns
+      )
+
+      config.generators do |g|
+        g.test_framework :rspec
+      end
+
+      initializer "spree.solidus-adyen.payment_methods", after: "spree.register.payment_methods" do |app|
+        app.config.spree.payment_methods << Gateway::AdyenHPP
+      end
+
+      def self.activate
+        Spree::Payment.include Spree::Adyen::Payment
+        Spree::Order.include Spree::Adyen::Order
+        Spree::Admin::RefundsController.include Spree::Adyen::Admin::RefundsController
+      end
+
+      config.to_prepare(&method(:activate).to_proc)
+    end
+  end
+end

data/lib/spree/adyen/form.rb

@@ -0,0 +1,135 @@
+require "json"
+
+module Spree
+  module Adyen
+    module Form
+      Form = ::Adyen::Form
+      UrlHelper = Object.new.extend ActionView::Helpers::UrlHelper
+
+      class << self
+        def payment_methods_from_directory order, payment_method
+          payment_methods(order, payment_method)
+        end
+
+        def select_url order, payment_method
+          endpoint_url "select", order, payment_method
+        end
+
+        def directory_url order, payment_method
+          endpoint_url "directory", order, payment_method
+        end
+
+        def details_url order, payment_method, brand_code
+          endpoint_url(
+            "details", order, payment_method, { brandCode: brand_code })
+        end
+
+        def details_url_with_issuer order, payment_method, brand_code, issuer_id
+          endpoint_url(
+            "details",
+            order,
+            payment_method,
+            {
+              brandCode: brand_code,
+              issuerId: issuer_id
+            }
+          )
+        end
+
+        def endpoint_url endpoint, order, payment_method, opts = {}
+          base = URI::parse(url payment_method, endpoint)
+
+          URI::HTTPS.build(
+            host: base.host,
+            path: base.path,
+            query: params(order, payment_method).merge(opts).to_query)
+        end
+
+        private
+        def payment_methods order, payment_method
+          url = directory_url(order, payment_method)
+
+          form_payment_methods_and_urls(
+            JSON.parse(::Net::HTTP.get(url)),
+            order,
+            payment_method
+          )
+        end
+
+        def url payment_method, endpoint
+          server = payment_method.preferences.fetch(:server)
+          Form.url(server, endpoint)
+        end
+
+        def form_payment_methods_and_urls response, order, payment_method
+          response.fetch("paymentMethods").map do |brand|
+            issuers = brand.fetch("issuers", []).map do |issuer|
+              form_issuer(issuer, order, payment_method, brand)
+            end
+            form_payment_method(brand, order, payment_method, issuers)
+          end
+        end
+
+        def form_issuer issuer, order, payment_method, brand
+          {
+            name: issuer["name"],
+            payment_url: details_url_with_issuer(
+              order,
+              payment_method,
+              brand["brandCode"],
+              issuer["issuerId"]
+            ).to_s
+          }
+        end
+
+        def form_payment_method brand, order, payment_method, issuers
+          {
+            brand_code: brand["brandCode"],
+            name: brand["name"],
+            payment_url: details_url(
+              order,
+              payment_method,
+              brand["brandCode"]
+            ).to_s,
+            issuers: issuers
+          }
+        end
+
+        def params order, payment_method
+          merchant_return_data = [
+            order.guest_token,
+            payment_method.id
+          ].
+          join("|")
+
+          Form.flat_payment_parameters default_params.
+            merge(order_params order).
+            merge(payment_method_params payment_method).
+            merge(merchant_return_data: merchant_return_data)
+        end
+
+        # TODO set this in the adyen config
+        def default_params
+          { session_validity: 10.minutes.from_now,
+            recurring: false }
+        end
+
+        def order_params order
+          { currency_code: order.currency,
+            merchant_reference: order.number.to_s,
+            country_code: order.billing_address.country.iso,
+            payment_amount: (order.total * 100).to_int
+          }
+        end
+
+        def payment_method_params payment_method
+          { merchant_account: payment_method.merchant_account,
+            skin_code: payment_method.skin_code,
+            shared_secret: payment_method.shared_secret,
+            ship_before_date: payment_method.ship_before_date
+          }
+        end
+      end
+    end
+  end
+end

data/lib/spree/adyen/hpp_check.rb

@@ -0,0 +1,11 @@
+module Spree
+  module Adyen
+    # Used when we have to override functionally inside spree, usually payments,
+    # that is a conditional flow only on hpp payments.
+    module HppCheck
+      def hpp_payment? payment = self
+        payment.source.class == Spree::Adyen::HppSource
+      end
+    end
+  end
+end

data/lib/spree/adyen/url.rb

@@ -0,0 +1,30 @@
+module Spree
+  module Adyen
+    module URL
+      def self.payment_adyen_customer_area_url(psp_reference:, merchant_account:)
+        ::URI::HTTPS.build(
+          host: "ca-test.adyen.com",
+          path: "/ca/ca/accounts/showTx.shtml",
+          query:
+          { txType: "Payment",
+            accountKey: "MerchantAccount.#{merchant_account}",
+            pspReference: psp_reference
+        }.to_query
+        ).to_s
+      end
+
+      def self.modify_search_url(query:)
+        ::URI::HTTPS.build(
+          host: "ca-test.adyen.com",
+          path: "/ca/ca/payments/modifySearch.shtml",
+          query:
+          { uxEvent: "PAYMENT_SEARCH",
+            query: query,
+            search: "Search"
+        }.to_query
+        ).to_s
+      end
+    end
+  end
+end
+

data/lib/spree/adyen/version.rb

@@ -0,0 +1,5 @@
+module Spree
+  module Adyen
+    VERSION = "0.1.2"
+  end
+end

data/lib/spree/adyen.rb

@@ -0,0 +1,6 @@
+require "spree/adyen/version"
+require "adyen"
+require "spree_core"
+require "spree/adyen/engine"
+require "spree/adyen/form"
+require "spree/adyen/hpp_check"

data/solidus-adyen.gemspec

@@ -0,0 +1,51 @@
+# coding: utf-8
+lib = File.expand_path("../lib", __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require "spree/adyen/version"
+
+Gem::Specification.new do |spec|
+  spec.name          = "solidus-adyen"
+  spec.version       = Spree::Adyen::VERSION
+  spec.authors       = ["Dylan Kendal"]
+  spec.email         = ["dylan@stembolt.com"]
+  spec.description   = "Adyen HPP payments for Solidus Stores"
+  spec.summary       = "Adyen HPP payments for Solidus Stores"
+  spec.homepage      = "https://github.com/StemboltHQ/solidus-adyen"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files`.split($/)
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib"]
+
+  spec.add_runtime_dependency "adyen", "~> 1.4"
+  spec.add_runtime_dependency "solidus_core", "~> 1.0"
+  spec.add_runtime_dependency "bourbon"
+
+  spec.add_development_dependency "solidus", "~> 1.0"
+  spec.add_development_dependency "solidus_auth_devise", "~> 1.2"
+  spec.add_development_dependency "solidus_sample", "~> 1.0"
+
+  spec.add_development_dependency "sass-rails", "~> 4.0.2"
+  spec.add_development_dependency "coffee-rails"
+
+  spec.add_development_dependency "sqlite3"
+
+  spec.add_development_dependency "rspec-rails", "~> 3.3"
+  spec.add_development_dependency "rspec-activemodel-mocks"
+  spec.add_development_dependency "factory_girl"
+  spec.add_development_dependency "shoulda-matchers"
+
+  spec.add_development_dependency "simplecov"
+  spec.add_development_dependency "simplecov-rcov"
+
+  spec.add_development_dependency "awesome_print"
+  spec.add_development_dependency "pry-rails"
+  spec.add_development_dependency "better_errors"
+  spec.add_development_dependency "binding_of_caller"
+  spec.add_development_dependency "pry-stack_explorer"
+
+  spec.add_development_dependency "capybara"
+  spec.add_development_dependency "poltergeist"
+  spec.add_development_dependency "launchy"
+end

data/spec/controllers/concerns/spree/adyen/admin/refunds_controller_spec.rb

@@ -0,0 +1,76 @@
+require "spec_helper"
+
+RSpec.describe Spree::Admin::RefundsController do
+  stub_authorization!
+  include_context "mock adyen api", success: true
+  routes { Spree::Core::Engine.routes }
+
+  describe "POST create" do
+    subject { post :create, params }
+
+    let(:params) do
+      {
+        "refund" => {
+          "amount" => amount,
+          "refund_reason_id" => reason.id
+        },
+        "order_id" => order.number,
+        "payment_id" => payment.id
+      }
+    end
+
+    let(:reason) { create :refund_reason }
+    let(:order) { create :order, currency: "EUR" }
+    let(:amount) { 100.0 }
+    let(:payment_opts) { {state: "completed", amount: 100.0} }
+
+    before do
+      payment.capture_events.create!(amount: 100.0)
+    end
+
+    context "when the payment comes from Adyen Hosted Payment Pages" do
+      let(:payment) { create :hpp_payment, order: order, **payment_opts }
+
+      it "does not create the record" do
+        expect { subject }.to_not change { payment.reload.refunds.count }
+      end
+
+      it "sets the success flash" do
+        subject
+        expect(flash[:success]).to eq "Refund request was received"
+      end
+
+      it "requests the refund" do
+        expect_any_instance_of(Spree::Payment).
+          to receive(:credit!).
+          with(10000, currency: "EUR")
+        subject
+      end
+
+      it { is_expected.to have_http_status :redirect }
+
+      context "and the refund is invalid" do
+        let(:amount) { 0 }
+
+        it "displays an error" do
+          is_expected.to have_http_status :ok
+          expect(flash[:error]).to be_present
+        end
+
+        it "doesn't attempt to credit the payment" do
+          expect_any_instance_of(Spree::Payment).
+            to_not receive(:credit!)
+          subject
+        end
+      end
+    end
+
+    context "when any other kind of payment" do
+      let(:payment) { create :payment, **payment_opts }
+
+      it "creates the refund" do
+        expect { subject }.to change { payment.reload.refunds.count }.by(1)
+      end
+    end
+  end
+end

data/spec/controllers/spree/adyen/hpps_controller_spec.rb

@@ -0,0 +1,43 @@
+require "spec_helper"
+
+RSpec.describe Spree::Adyen::HppsController, type: :controller do
+  describe "GET directory" do
+    let(:order) { create :order }
+    let(:payment_method) { create :hpp_gateway }
+    let(:parsed_directory_response) { [{
+      name: "American Express",
+      brandCode: "amex",
+      payment_url: "www.test-payment-url.com/amex"}] }
+
+    before do
+      allow(Spree::Adyen::Form).to receive(:payment_methods_from_directory).
+        with(order, payment_method).
+        and_return(parsed_directory_response)
+    end
+
+    context "html response" do
+      subject {
+        get :directory,
+        order_id: order.id,
+        payment_method_id: payment_method.id }
+
+      it { is_expected.to have_http_status :ok }
+      it { is_expected.to render_template "directory" }
+    end
+
+    context "json response" do
+      subject {
+        get :directory,
+        order_id: order.id,
+        payment_method_id: payment_method.id,
+        format: :json }
+
+      it { is_expected.to have_http_status :ok }
+      
+      it "renders a json response" do
+        subject
+        expect(response.body).to eq parsed_directory_response.to_json
+      end
+    end
+  end
+end