solidus_afterpay 0.1.0

data/config/routes.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+SolidusAfterpay::Engine.routes.draw do
+  match '/callbacks/confirm', to: '/solidus_afterpay/callbacks#confirm', via: %i[get post]
+  get '/callbacks/cancel', to: '/solidus_afterpay/callbacks#cancel'
+  post '/checkouts', to: '/solidus_afterpay/checkouts#create'
+end

data/db/migrate/20210813142725_create_solidus_afterpay_payment_sources.rb

@@ -0,0 +1,12 @@
+class CreateSolidusAfterpayPaymentSources < SolidusSupport::Migration[4.2]
+  def change
+    create_table :solidus_afterpay_payment_sources do |t|
+      t.string :token
+      t.references :payment_method, index: true
+
+      t.timestamps
+    end
+
+    add_foreign_key :solidus_afterpay_payment_sources, :spree_payment_methods, column: :payment_method_id
+  end
+end

data/lib/generators/solidus_afterpay/install/install_generator.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+module SolidusAfterpay
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      class_option :auto_run_migrations, type: :boolean, default: false
+      source_root File.expand_path('templates', __dir__)
+
+      def copy_initializer
+        template 'initializer.rb', 'config/initializers/solidus_afterpay.rb'
+      end
+
+      def add_javascripts
+        append_file 'vendor/assets/javascripts/spree/frontend/all.js', "//= require spree/frontend/solidus_afterpay\n"
+        append_file 'vendor/assets/javascripts/spree/backend/all.js', "//= require spree/backend/solidus_afterpay\n"
+      end
+
+      def add_stylesheets
+        inject_into_file 'vendor/assets/stylesheets/spree/frontend/all.css', " *= require spree/frontend/solidus_afterpay\n", before: %r{\*/}, verbose: true # rubocop:disable Layout/LineLength
+        inject_into_file 'vendor/assets/stylesheets/spree/backend/all.css', " *= require spree/backend/solidus_afterpay\n", before: %r{\*/}, verbose: true # rubocop:disable Layout/LineLength
+      end
+
+      def add_migrations
+        run 'bin/rails railties:install:migrations FROM=solidus_afterpay'
+      end
+
+      def mount_engine
+        insert_into_file File.join('config', 'routes.rb'), after: "Rails.application.routes.draw do\n" do
+          "mount SolidusAfterpay::Engine, at: '/solidus_afterpay'\n"
+        end
+      end
+
+      def run_migrations
+        run_migrations = options[:auto_run_migrations] || ['', 'y', 'Y'].include?(ask('Would you like to run the migrations now? [Y/n]')) # rubocop:disable Layout/LineLength
+        if run_migrations
+          run 'bin/rails db:migrate'
+        else
+          puts 'Skipping bin/rails db:migrate, don\'t forget to run it!' # rubocop:disable Rails/Output
+        end
+      end
+    end
+  end
+end

data/lib/generators/solidus_afterpay/install/templates/initializer.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+SolidusAfterpay.configure do |config|
+  config.use_solidus_api = false
+end

data/lib/solidus_afterpay/configuration.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module SolidusAfterpay
+  class Configuration
+    attr_accessor :use_solidus_api
+  end
+
+  class << self
+    def configuration
+      @configuration ||= Configuration.new
+    end
+
+    alias config configuration
+
+    def configure
+      yield configuration
+    end
+
+    def api_base_controller_parent_class
+      return ::Spree::Api::BaseController if configuration.use_solidus_api
+
+      SolidusAfterpay::BaseController
+    end
+  end
+end

data/lib/solidus_afterpay/engine.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+require 'solidus_core'
+require 'solidus_support'
+
+module SolidusAfterpay
+  class Engine < Rails::Engine
+    include SolidusSupport::EngineExtensions
+
+    isolate_namespace ::Spree
+
+    engine_name 'solidus_afterpay'
+
+    # use rspec for tests
+    config.generators do |g|
+      g.test_framework :rspec
+    end
+
+    initializer "spree.payment_methods.register_afterpay_payment_method",
+      after: "spree.register.payment_methods" do |app|
+      app.config.spree.payment_methods << "SolidusAfterpay::PaymentMethod"
+      Spree::PermittedAttributes.source_attributes.concat [:token]
+    end
+  end
+end

data/lib/solidus_afterpay/testing_support/factories.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :afterpay_payment_method, class: SolidusAfterpay::PaymentMethod do
+    name { 'Afterpay' }
+  end
+end
+
+FactoryBot.define do
+  factory :afterpay_payment, parent: :payment do
+    association(:payment_method, factory: :afterpay_payment_method)
+  end
+end
+
+FactoryBot.define do
+  factory :afterpay_payment_source, class: SolidusAfterpay::PaymentSource do
+    association(:payment_method, factory: :afterpay_payment_method)
+    token { "12345678910" }
+  end
+end

data/lib/solidus_afterpay/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module SolidusAfterpay
+  VERSION = '0.1.0'
+end

data/lib/solidus_afterpay.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+require 'solidus_afterpay/configuration'
+require 'solidus_afterpay/version'
+require 'solidus_afterpay/engine'

data/solidus_afterpay.gemspec

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+require_relative 'lib/solidus_afterpay/version'
+
+Gem::Specification.new do |spec|
+  spec.name = 'solidus_afterpay'
+  spec.version = SolidusAfterpay::VERSION
+  spec.authors = ['Christian Rimondi', 'Jordy Garcia']
+  spec.email = 'contact@solidus.io'
+
+  spec.summary = 'Solidus extension for using Afterpay in your store.'
+  spec.homepage = 'https://github.com/solidusio-contrib/solidus_afterpay#readme'
+  spec.license = 'Apache-2.0'
+
+  spec.metadata['homepage_uri'] = spec.homepage
+  spec.metadata['source_code_uri'] = 'https://github.com/solidusio-contrib/solidus_afterpay'
+  spec.metadata['changelog_uri'] = 'https://github.com/solidusio-contrib/solidus_afterpay/blob/master/CHANGELOG.md'
+
+  spec.required_ruby_version = Gem::Requirement.new('~> 2.5')
+
+  # Specify which files should be added to the gem when it is released.
+  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
+  files = Dir.chdir(__dir__) { `git ls-files -z`.split("\x0") }
+
+  spec.files = files.grep_v(%r{^(test|spec|features)/})
+  spec.test_files = files.grep(%r{^(test|spec|features)/})
+  spec.bindir = "exe"
+  spec.executables = files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_dependency 'afterpay', '~> 0.2.0'
+  spec.add_dependency 'solidus_core', ['>= 2.0.0', '< 4']
+  spec.add_dependency 'solidus_support', '~> 0.5'
+
+  spec.add_development_dependency 'solidus_dev_support', '~> 2.5'
+  spec.add_development_dependency 'vcr', '~> 6.0'
+  spec.add_development_dependency 'webmock', '~> 3.14'
+end

data/spec/fixtures/vcr_casettes/create_checkout/invalid.yml

@@ -0,0 +1,65 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://global-api-sandbox.afterpay.com/v2/checkouts
+    body:
+      encoding: UTF-8
+      string: '{"amount":{"amount":"110.0","currency":"USD"},"consumer":{"phoneNumber":null,"givenNames":"John","surname":"Von
+        Doe","email":"email1@example.com"},"billing":{"name":"John Von Doe","line1":"PO
+        Box 1337","line2":"Northwest","area1":"Herndon","area2":null,"region":"AL","postcode":"10001","countryCode":null,"phoneNumber":"555-555-0199"},"shipping":{"name":"John
+        Von Doe","line1":"A Different Road","line2":"Northwest","area1":"Herndon","area2":null,"region":"AL","postcode":"10002","countryCode":null,"phoneNumber":"555-555-0199"},"courier":null,"items":[{"name":"Product
+        #1 - 4517","sku":"SKU-1","pageUrl":null,"imageUrl":null,"quantity":1,"price":{"amount":"10.0","currency":"USD"},"categories":null,"estimatedShipmentDate":null}],"discounts":null,"merchant":{"redirectConfirmUrl":"INVALID_URL","redirectCancelUrl":"https://merchantsite.com/cancel"},"paymentType":null,"merchantReference":"R454538030","taxAmount":null,"shippingAmount":null}'
+    headers:
+      User-Agent:
+      - SolidusAfterpay/0.0.1 (Solidus/3.0.1; Ruby/2.6.6; Merchant/100101481) https://
+      Authorization:
+      - Basic <ENCODED_AUTH_HEADER>
+      Content-Type:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+  response:
+    status:
+      code: 422
+      message: Unprocessable Entity
+    headers:
+      Date:
+      - Wed, 25 Aug 2021 14:56:00 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '161'
+      Connection:
+      - keep-alive
+      Http-Correlation-Id:
+      - wcojzlfj2rfkqm4w6ayrvuynnq
+      X-Envoy-Upstream-Service-Time:
+      - '1'
+      Cf-Cache-Status:
+      - DYNAMIC
+      Expect-Ct:
+      - max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
+      Set-Cookie:
+      - __cf_bm=458888e7b4f03e70f12df97baec05158b5a76852-1629903360-1800-AQkZgFhWlLVhjIocg7r7deIfz1lAUyyEaisx9bXg9Ocwas501JwTxgqXWs2R9DAqrFXrRyfdIntHiY5D3U7kGXrmhCgTFYrDxPixPtLPZ+1b;
+        path=/; expires=Wed, 25-Aug-21 15:26:00 GMT; domain=.afterpay.com; HttpOnly;
+        Secure; SameSite=None
+      Strict-Transport-Security:
+      - max-age=31536000; includeSubDomains; preload
+      Server:
+      - cloudflare
+      Cf-Ray:
+      - 6845aa213deecd3a-FCO
+    body:
+      encoding: UTF-8
+      string: |-
+        {
+          "errorCode" : "invalid_object",
+          "errorId" : "6a7240c88a0d76d5",
+          "message" : "merchant.redirectConfirmUrl must be a valid URL",
+          "httpStatusCode" : 422
+        }
+  recorded_at: Wed, 25 Aug 2021 14:56:00 GMT
+recorded_with: VCR 6.0.0

data/spec/fixtures/vcr_casettes/create_checkout/valid.yml

@@ -0,0 +1,64 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://global-api-sandbox.afterpay.com/v2/checkouts
+    body:
+      encoding: UTF-8
+      string: '{"amount":{"amount":"110.0","currency":"USD"},"consumer":{"phoneNumber":null,"givenNames":"John","surname":"Von
+        Doe","email":"email3@example.com"},"billing":{"name":"John Von Doe","line1":"PO
+        Box 1337","line2":"Northwest","area1":"Herndon","area2":null,"region":"AL","postcode":"10005","countryCode":null,"phoneNumber":"555-555-0199"},"shipping":{"name":"John
+        Von Doe","line1":"A Different Road","line2":"Northwest","area1":"Herndon","area2":null,"region":"AL","postcode":"10006","countryCode":null,"phoneNumber":"555-555-0199"},"courier":null,"items":[{"name":"Product
+        #3 - 9548","sku":"SKU-3","pageUrl":null,"imageUrl":null,"quantity":1,"price":{"amount":"10.0","currency":"USD"},"categories":null,"estimatedShipmentDate":null}],"discounts":null,"merchant":{"redirectConfirmUrl":"https://merchantsite.com/confirm","redirectCancelUrl":"https://merchantsite.com/cancel"},"paymentType":null,"merchantReference":"R444808561","taxAmount":null,"shippingAmount":null}'
+    headers:
+      User-Agent:
+      - SolidusAfterpay/0.0.1 (Solidus/3.0.1; Ruby/2.6.6; Merchant/100101481) https://
+      Authorization:
+      - Basic <ENCODED_AUTH_HEADER>
+      Content-Type:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+  response:
+    status:
+      code: 201
+      message: Created
+    headers:
+      Date:
+      - Wed, 25 Aug 2021 14:56:00 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '249'
+      Connection:
+      - keep-alive
+      Http-Correlation-Id:
+      - rdpkhcwkeqlv2irhiask3pltjm
+      X-Envoy-Upstream-Service-Time:
+      - '37'
+      Cf-Cache-Status:
+      - DYNAMIC
+      Expect-Ct:
+      - max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
+      Set-Cookie:
+      - __cf_bm=f6c4d0cdcaa29e5fddf69187d3f8669a0ff92516-1629903360-1800-AROMdFTai3kYVqaapy1FVuhHoAKL/UoScijdZgg9OdkkdqwLfjx1l7Cxk6Yqm0qHyKkjCQ7NGmcCyeB39rNMBT1lETNAwhlDqfY+CJ6kAb6/;
+        path=/; expires=Wed, 25-Aug-21 15:26:00 GMT; domain=.afterpay.com; HttpOnly;
+        Secure; SameSite=None
+      Strict-Transport-Security:
+      - max-age=31536000; includeSubDomains; preload
+      Server:
+      - cloudflare
+      Cf-Ray:
+      - 6845aa243bb0fc89-FCO
+    body:
+      encoding: UTF-8
+      string: |-
+        {
+          "token" : "002.nq5oa41fisldkbfvtfjqc9nl1c6jhjna0b92osmstabi2lse",
+          "expires" : "2021-08-25T17:56:00.817Z",
+          "redirectCheckoutUrl" : "https://portal.sandbox.afterpay.com/us/checkout/?token=002.nq5oa41fisldkbfvtfjqc9nl1c6jhjna0b92osmstabi2lse"
+        }
+  recorded_at: Wed, 25 Aug 2021 14:56:00 GMT
+recorded_with: VCR 6.0.0

data/spec/fixtures/vcr_casettes/credit/invalid.yml

@@ -0,0 +1,61 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://global-api-sandbox.afterpay.com/v2/payments/INVALID_RESPONSE_CODE/refund
+    body:
+      encoding: UTF-8
+      string: '{"requestId":null,"merchantReference":null,"refundMerchantReference":null,"amount":{"amount":"10.0","currency":"USD"}}'
+    headers:
+      User-Agent:
+      - SolidusAfterpay/0.0.1 (Solidus/3.0.1; Ruby/2.6.6; Merchant/100101481) https://
+      Authorization:
+      - Basic <ENCODED_AUTH_HEADER>
+      Content-Type:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+  response:
+    status:
+      code: 404
+      message: Not Found
+    headers:
+      Date:
+      - Wed, 25 Aug 2021 14:56:01 GMT
+      Content-Type:
+      - application/json
+      Transfer-Encoding:
+      - chunked
+      Connection:
+      - keep-alive
+      Http-Correlation-Id:
+      - niezt4yj2dkazwuaxcylyctiia
+      X-Envoy-Upstream-Service-Time:
+      - '5'
+      Cf-Cache-Status:
+      - DYNAMIC
+      Expect-Ct:
+      - max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
+      Set-Cookie:
+      - __cf_bm=81e813f9b6a9b6041a3d539ff719c1362dbee0d7-1629903361-1800-AVFdNDg4AQvJHpdIrmZWTC4rShEPzouH1zIL4mzM59aQ+YuVenlK7OdUtpsPgycODEOuYbUcqh368D3EFoYFQLmPl8XrO0VfJz5ZC/d+lxpP;
+        path=/; expires=Wed, 25-Aug-21 15:26:01 GMT; domain=.afterpay.com; HttpOnly;
+        Secure; SameSite=None
+      Strict-Transport-Security:
+      - max-age=31536000; includeSubDomains; preload
+      Server:
+      - cloudflare
+      Cf-Ray:
+      - 6845aa2a69d4cd26-FCO
+    body:
+      encoding: ASCII-8BIT
+      string: |-
+        {
+          "errorCode" : "not_found",
+          "errorId" : "c7585eb6f53f5af5",
+          "message" : "Afterpay payment ID not found.",
+          "httpStatusCode" : 404
+        }
+  recorded_at: Wed, 25 Aug 2021 14:56:01 GMT
+recorded_with: VCR 6.0.0

data/spec/fixtures/vcr_casettes/credit/valid.yml

@@ -0,0 +1,63 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://global-api-sandbox.afterpay.com/v2/payments/100101768366/refund
+    body:
+      encoding: UTF-8
+      string: '{"requestId":null,"merchantReference":null,"refundMerchantReference":null,"amount":{"amount":"10.0","currency":"USD"}}'
+    headers:
+      User-Agent:
+      - SolidusAfterpay/0.0.1 (Solidus/3.0.1; Ruby/2.6.6; Merchant/100101481) https://
+      Authorization:
+      - Basic <ENCODED_AUTH_HEADER>
+      Content-Type:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+  response:
+    status:
+      code: 201
+      message: Created
+    headers:
+      Date:
+      - Wed, 25 Aug 2021 14:56:33 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '140'
+      Connection:
+      - keep-alive
+      Http-Correlation-Id:
+      - 24wpvce67xhgrrg5pqe3fgduda
+      X-Envoy-Upstream-Service-Time:
+      - '54'
+      Cf-Cache-Status:
+      - DYNAMIC
+      Expect-Ct:
+      - max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
+      Set-Cookie:
+      - __cf_bm=e9f4b17314baa927279640073ce9b4ff5a20400f-1629903393-1800-ATEYxDJqfplwOhv7PEuvKTFvzf0cFIA+ctvgNlZuMf4O535a4edKPQ9QImknp0pT7qSY2FRZdUqe/b84LTROEUWm/jP2XhxTGtcGJcCBLyDH;
+        path=/; expires=Wed, 25-Aug-21 15:26:33 GMT; domain=.afterpay.com; HttpOnly;
+        Secure; SameSite=None
+      Strict-Transport-Security:
+      - max-age=31536000; includeSubDomains; preload
+      Server:
+      - cloudflare
+      Cf-Ray:
+      - 6845aaf1fb7fcd42-FCO
+    body:
+      encoding: UTF-8
+      string: |-
+        {
+          "amount" : {
+            "amount" : "10.00",
+            "currency" : "USD"
+          },
+          "refundId" : "1934419",
+          "refundedAt" : "2021-08-25T14:56:33.753Z"
+        }
+  recorded_at: Wed, 25 Aug 2021 14:56:33 GMT
+recorded_with: VCR 6.0.0