spree_braintree_vzero 3.5.1

data/config/routes.rb

@@ -0,0 +1,7 @@
+Spree::Core::Engine.routes.draw do
+  namespace :api, defaults: { format: 'json' } do
+    namespace :v1 do
+      resource :braintree_client_token, only: :create, controller: 'braintree_client_token'
+    end
+  end
+end

data/db/migrate/20150904143013_create_spree_braintree_checkouts.rb

@@ -0,0 +1,9 @@
+class CreateSpreeBraintreeCheckouts < SpreeExtension::Migration[4.2]
+  def change
+    create_table :spree_braintree_checkouts do |t|
+      t.string :transaction_id, index: true
+      t.string :state, index: true
+      t.timestamps null: false
+    end
+  end
+end

data/db/migrate/20151002094655_add_braintree_id_to_spree_addresses.rb

@@ -0,0 +1,5 @@
+class AddBraintreeIdToSpreeAddresses < SpreeExtension::Migration[4.2]
+  def change
+    add_column :spree_addresses, :braintree_id, :string
+  end
+end

data/db/migrate/20151018123907_add_braintree_token_and_nonce_to_spree_payments.rb

@@ -0,0 +1,6 @@
+class AddBraintreeTokenAndNonceToSpreePayments < SpreeExtension::Migration[4.2]
+  def change
+    add_column :spree_payments, :braintree_token, :string
+    add_column :spree_payments, :braintree_nonce, :string
+  end
+end

data/db/migrate/20151027135109_add_paypal_email_to_spree_braintree_checkout.rb

@@ -0,0 +1,5 @@
+class AddPaypalEmailToSpreeBraintreeCheckout < SpreeExtension::Migration[4.2]
+  def change
+    add_column :spree_braintree_checkouts, :paypal_email, :string
+  end
+end

data/db/migrate/20151028095515_add_advanced_fraud_data_to_spree_braintree_checkout.rb

@@ -0,0 +1,5 @@
+class AddAdvancedFraudDataToSpreeBraintreeCheckout < SpreeExtension::Migration[4.2]
+  def change
+    add_column :spree_braintree_checkouts, :advanced_fraud_data, :string
+  end
+end

data/db/migrate/20151202095956_add_risk_id_and_risk_decision_to_spree_braintree_checkouts.rb

@@ -0,0 +1,6 @@
+class AddRiskIdAndRiskDecisionToSpreeBraintreeCheckouts < SpreeExtension::Migration[4.2]
+  def change
+    add_column :spree_braintree_checkouts, :risk_id, :string
+    add_column :spree_braintree_checkouts, :risk_decision, :string
+  end
+end

data/db/migrate/20151211100203_add_braintree_last_digits_and_braintree_card_type_to_spree_braintree_checkouts.rb

@@ -0,0 +1,6 @@
+class AddBraintreeLastDigitsAndBraintreeCardTypeToSpreeBraintreeCheckouts < SpreeExtension::Migration[4.2]
+  def change
+    add_column :spree_braintree_checkouts, :braintree_last_digits, :string, limit: 4
+    add_column :spree_braintree_checkouts, :braintree_card_type, :string
+  end
+end

data/db/migrate/20160112153422_add_admin_payment_to_spree_braintree_checkout.rb

@@ -0,0 +1,5 @@
+class AddAdminPaymentToSpreeBraintreeCheckout < SpreeExtension::Migration[4.2]
+  def change
+    add_column :spree_braintree_checkouts, :admin_payment, :bool
+  end
+end

data/gemfiles/spree_3_5.gemfile

@@ -0,0 +1,12 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "spree", "~> 3.5.0"
+gem "pg"
+gem "mysql2"
+gem "webmock", ">= 2.3.1"
+gem "rails-controller-testing"
+gem 'sprockets', '~> 3.7'
+
+gemspec path: "../"

data/gemfiles/spree_3_5_spree_auth_devise.gemfile

@@ -0,0 +1,13 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "spree", "~> 3.5.0"
+gem "pg"
+gem "mysql2"
+gem "webmock", ">= 2.3.1"
+gem "rails-controller-testing"
+gem "spree_auth_devise", "~> 3.3.0"
+gem 'sprockets', '~> 3.7'
+
+gemspec path: "../"

data/gemfiles/spree_3_7.gemfile

@@ -0,0 +1,12 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem 'sassc-rails'
+gem "spree", "~> 3.7.1"
+gem "pg"
+gem "mysql2"
+gem "webmock", ">= 2.3.1"
+gem "rails-controller-testing"
+
+gemspec path: "../"

data/gemfiles/spree_3_7_spree_auth_devise.gemfile

@@ -0,0 +1,13 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem 'sassc-rails'
+gem "spree", "~> 3.7.1"
+gem "pg"
+gem "mysql2"
+gem "webmock", ">= 2.3.1"
+gem "rails-controller-testing"
+gem "spree_auth_devise", "~> 3.5.2"
+
+gemspec path: "../"

data/gemfiles/spree_4_0.gemfile

@@ -0,0 +1,11 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "spree", "~> 4.0.0"
+gem "pg"
+gem "mysql2"
+gem "webmock", ">= 2.3.1"
+gem "rails-controller-testing"
+
+gemspec path: "../"

data/gemfiles/spree_4_0_spree_auth_devise.gemfile

@@ -0,0 +1,12 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "spree", "~> 4.0.0"
+gem "pg"
+gem "mysql2"
+gem "webmock", ">= 2.3.1"
+gem "rails-controller-testing"
+gem "spree_auth_devise", "~> 4.0.0"
+
+gemspec path: "../"

data/gemfiles/spree_master.gemfile

@@ -0,0 +1,11 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "spree", github: "spree/spree", branch: "master"
+gem "pg"
+gem "mysql2"
+gem "webmock", ">= 2.3.1"
+gem "rails-controller-testing"
+
+gemspec path: "../"

data/gemfiles/spree_master_spree_auth_devise.gemfile

@@ -0,0 +1,12 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "spree", github: "spree/spree", branch: "master"
+gem "pg"
+gem "mysql2"
+gem "webmock", ">= 2.3.1"
+gem "rails-controller-testing"
+gem "spree_auth_devise", github: "spree/spree_auth_devise", branch: "master"
+
+gemspec path: "../"

data/lib/generators/spree_braintree_vzero/install/install_generator.rb

@@ -0,0 +1,34 @@
+module SpreeBraintreeVzero
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      class_option :auto_run_migrations, type: :boolean, default: false
+
+      def add_javascripts
+        append_file 'vendor/assets/javascripts/spree/frontend/all.js', "//= require spree/frontend/spree_braintree_vzero\n"
+        append_file 'vendor/assets/javascripts/spree/backend/all.js', "//= require spree/backend/spree_braintree_vzero\n"
+      end
+
+      def add_schedule
+        create_file 'config/schedule.rb' unless File.exist?('config/schedule.rb')
+        append_file 'config/schedule.rb' do
+          "\nevery '0 4,10,16,22 * * * *' do
+            rake 'spree_braintree_vzero:update_states'
+          end"
+        end
+      end
+
+      def add_migrations
+        run 'bundle exec rake railties:install:migrations FROM=spree_braintree_vzero'
+      end
+
+      def run_migrations
+        run_migrations = options[:auto_run_migrations] || ['', 'y', 'Y'].include?(ask('Would you like to run the migrations now? [Y/n]'))
+        if run_migrations
+          run 'bundle exec rake db:migrate'
+        else
+          puts 'Skipping rake db:migrate, don\'t forget to run it!'
+        end
+      end
+    end
+  end
+end

data/lib/spree_braintree_vzero.rb

@@ -0,0 +1,6 @@
+require 'spree_core'
+require 'spree_braintree_vzero/engine'
+require 'spree_braintree_vzero/version'
+require 'spree_extension'
+
+require 'spree_braintree_vzero/railtie' if defined?(Rails)

data/lib/spree_braintree_vzero/engine.rb

@@ -0,0 +1,28 @@
+module SpreeBraintreeVzero
+  class Engine < Rails::Engine
+    require 'spree/core'
+    isolate_namespace Spree
+    engine_name 'spree_braintree_vzero'
+
+    # use rspec for tests
+    config.generators do |g|
+      g.test_framework :rspec
+    end
+
+    def self.activate
+      Dir.glob(File.join(File.dirname(__FILE__), '../../app/**/*_decorator*.rb')) do |c|
+        Rails.configuration.cache_classes ? require(c) : load(c)
+      end
+    end
+
+    config.to_prepare &method(:activate).to_proc
+
+    initializer 'spree.braintree_vzero.payment_methods', after: 'spree.register.payment_methods' do |app|
+      app.config.spree.payment_methods += [
+        Spree::Gateway::BraintreeVzeroDropInUi,
+        Spree::Gateway::BraintreeVzeroPaypalExpress,
+        Spree::Gateway::BraintreeVzeroHostedFields
+      ]
+    end
+  end
+end

data/lib/spree_braintree_vzero/factories.rb

@@ -0,0 +1,10 @@
+FactoryBot.define do
+  # Define your Spree extensions Factories within this file to enable applications, and other extensions to use and override them.
+  #
+  # Example adding this to your spec_helper will load these Factories for use:
+  # require 'spree_braintree_vzero/factories'
+
+  Dir[Dir.pwd + '/spec/factories/**/*'].each do |factory|
+    require File.expand_path(factory)
+  end
+end

data/lib/spree_braintree_vzero/railtie.rb

@@ -0,0 +1,8 @@
+require 'rails/railtie'
+module SpreeBraintreeVzero
+  class Railtie < Rails::Railtie
+    rake_tasks do
+      load 'tasks/spree_braintree_vzero.rake'
+    end
+  end
+end

data/lib/spree_braintree_vzero/version.rb

@@ -0,0 +1,17 @@
+module SpreeBraintreeVzero
+  module_function
+
+  # Returns the version of the currently loaded SpreeBraintreeVzero as a
+  # <tt>Gem::Version</tt>.
+  def version
+    Gem::Version.new VERSION::STRING
+  end
+
+  module VERSION
+    MAJOR = 3
+    MINOR = 5
+    TINY  = 1
+
+    STRING = [MAJOR, MINOR, TINY].compact.join('.')
+  end
+end

data/lib/tasks/spree_braintree_vzero.rake

@@ -0,0 +1,6 @@
+namespace :spree_braintree_vzero do
+  desc 'Updates states for BraintreeCheckouts and associated Orders with Payments'
+  task update_states: :environment do
+    puts Spree::BraintreeCheckout.update_states
+  end
+end

data/spec/controllers/spree/api/v1/braintree_client_token_controller_spec.rb

@@ -0,0 +1,49 @@
+require 'spec_helper'
+
+describe Spree::Api::V1::BraintreeClientTokenController, :vcr, type: :controller do
+  let!(:gateway) { create(:vzero_gateway, auto_capture: true) }
+  let(:order) { create(:order) }
+
+  describe 'POST #create' do
+    context 'guest checkout' do
+      it 'returns proper json data when gateway not specified' do
+        post :create, params: { order_number: order.number }
+        expect(response).to have_http_status 200
+        expect(json_response['client_token']).not_to be nil
+        expect(json_response['payment_method_id']).not_to be nil
+      end
+
+      it 'returns proper json data when gateway specified' do
+        post :create, params: { payment_method_id: gateway.id, order_number: order.number }
+        expect(response).to have_http_status 200
+        expect(json_response['client_token']).not_to be nil
+        expect(json_response['payment_method_id']).to eq gateway.id
+      end
+    end
+
+    context 'user checkout' do
+      let!(:user) { create(:user) }
+      before { user.generate_spree_api_key! }
+
+      it 'returns proper json data when gateway not specified' do
+        post :create, params: { order_number: order.number, token: user.spree_api_key }
+        expect(response).to have_http_status 200
+        expect(json_response['client_token']).not_to be nil
+        expect(json_response['payment_method_id']).not_to be nil
+      end
+
+      it 'returns proper json data when gateway specified' do
+        post :create, params: {  payment_method_id: gateway.id, token: user.spree_api_key, order_number: order.number }
+        expect(response).to have_http_status 200
+        expect(json_response['client_token']).not_to be nil
+        expect(json_response['payment_method_id']).to eq gateway.id
+      end
+    end
+  end
+
+  private
+
+  def json_response
+    JSON.parse(response.body)
+  end
+end

data/spec/controllers/spree/checkout_controller_spec.rb

@@ -0,0 +1,85 @@
+require 'spec_helper'
+
+describe Spree::CheckoutController, :vcr, type: :controller do
+  let(:user) { create(:user) }
+  let(:order) { OrderWalkthrough.up_to(:payment) }
+
+  before do
+    allow(controller).to receive_messages try_spree_current_user: user
+    allow(controller).to receive_messages spree_current_user: user
+    allow(controller).to receive_messages current_order: order
+  end
+
+  context '#update' do
+    context 'braintree payment' do
+      let(:braintree_payment_method) { create(:vzero_gateway) }
+      let(:params) do
+        {
+          order: {
+            payments_attributes: [{
+              'payment_method_id' => braintree_payment_method.id,
+              'braintree_token' => 'k5jkr6',
+              'braintree_nonce' => '4cdec532-b616-41cc-babf-c1d5cfbbe6c2',
+              'amount' => 23
+            }],
+            coupon_code: ''
+          },
+          device_data: '{\"device_session_id\":\"ce3a962b468a0c912b6cf53f72f154e3\",\"fraud_merchant_id\":\"600000\",\"correlation_id\":\"d61971aadd35b3da938a99902a299be6\"}',
+          state: 'payment'
+        }
+      end
+
+      before do
+        allow(order).to receive_messages state: 'payment'
+        allow(controller).to receive_messages check_authorization: true
+      end
+
+      it 'advanced_fraud_data in source should be updated' do
+        expect(order.payments).to be_empty
+        put :update, params: params
+        expect(order.reload.payments.last.source.advanced_fraud_data).to eq params[:device_data]
+      end
+
+      it 'when nonce, credit card data in source should be updated from params' do
+        params[:order][:payments_attributes].first.delete('braintree_token')
+        params[:braintree_last_two] = '12'
+        put :update, params: params
+        expect(order.reload.payments.last.source.braintree_last_digits).to eq params[:braintree_last_two]
+      end
+
+      it 'when token, credit card data in source should be updated from Braintree Vault' do
+        token = params[:order][:payments_attributes].first['braintree_token']
+        vaulted_payment_method = braintree_payment_method.vaulted_payment_method(token)
+        put :update, params: params
+        expect(order.reload.payments.last.source.braintree_last_digits).to eq vaulted_payment_method.last_4
+      end
+
+      context 'when user tries to steal other user card' do
+        let(:other_user) { create(:user) }
+        let!(:card) { create(:credit_card, number: '123456', user: other_user) }
+
+        it 'does not create payment' do
+          params[:order].merge!(existing_card: card.id)
+
+          expect(order.payments).to be_empty
+          put :update, params: params
+          expect(order.reload.payments).to be_empty
+        end
+      end
+    end
+
+    context 'braintree paypal express payment' do
+      before do
+        order.payments << create(:braintree_vzero_paypal_payment)
+        order.update(state: 'confirm')
+        allow(controller).to receive_messages check_authorization: true
+      end
+
+      it 'amount in payment should be updated' do
+        expect(order.reload.payments.sum(:amount)).to eq 0
+        put :update, params: { state: 'confirm' }
+        expect(order.reload.payments.last.amount).to eq order.order_total_after_store_credit
+      end
+    end
+  end
+end

data/spec/controllers/spree/orders_controller_spec.rb

@@ -0,0 +1,97 @@
+require 'spec_helper'
+
+describe Spree::OrdersController, type: :controller do
+  let(:user) { create(:user) }
+  let!(:country) { create(:country, iso: 'US') }
+  let!(:state) { create(:state, country: country) }
+
+  context '#update' do
+    let(:order) { OrderWalkthrough.up_to(:payment) }
+
+    before do
+      allow(controller).to receive_messages(try_spree_current_user: user)
+      allow(controller).to receive :check_authorization
+      allow(controller).to receive_messages current_order: order
+    end
+
+    context 'standard checkout for order with braintree paypal express payment' do
+      before { order.payments << create(:braintree_vzero_paypal_payment) }
+
+      it 'it should invalidate paypal express payment' do
+        expect(order.reload.payments.valid.count).to eq 1
+        put :update, params: { order_id: order.id }
+        expect(order.reload.payments.valid.count).to eq 0
+      end
+    end
+
+    context 'paypal express checkout' do
+      let(:payment_method) { create(:vzero_paypal_gateway) }
+      let(:params) do
+        {
+          order_id: order.id,
+          order: {
+            line_items_attributes: {
+              '0' => {
+                quantity: '1',
+                id: '127'
+              }
+            },
+            ship_address: {
+              zipcode: '95131',
+              full_name: 'undefined',
+              firstname: 'Spree',
+              lastname: 'Buyer',
+              address1: '1 Main St',
+              address2: 'undefined',
+              city: 'San Jose',
+              country: 'US',
+              state: Spree::State.first.abbr
+            },
+            email: 'spree_buyer@spreetest.com'
+          },
+          paypal: {
+            payment_method_id: payment_method.id.to_s,
+            payment_method_nonce: '2f7126df-ceee-40a6-a7b4-ab1b799810f3'
+          },
+          device_data: '{\"device_session_id\":\"4523fd012467562ec455926850f7ce11\",\"fraud_merchant_id\":\"600000\"}',
+          checkout: 'true'
+        }
+      end
+
+      it 'it should save address both as billing and shipping (even when phone number is not passed)' do
+        put :update, params: params
+        data = params.slice(:order)[:order].slice(:ship_address)[:ship_address]
+        [order.ship_address, order.bill_address].each do |address|
+          expect(address.zipcode).to eq data[:zipcode]
+          expect(address.firstname).to eq data[:firstname]
+          expect(address.lastname).to eq data[:lastname]
+          expect(address.address1).to eq data[:address1]
+          expect(address.address2).to be_blank
+          expect(address.city).to eq data[:city]
+          expect(address.country.iso).to eq data[:country]
+          expect(address.state.abbr).to eq data[:state]
+          expect(address.phone).to be_blank
+        end
+      end
+
+      it 'it should redirect to address page when address is invalid' do
+        put :update, params: params
+
+        [order.ship_address, order.bill_address].each do |address|
+          expect(address).to be_invalid
+        end
+        expect(response).to redirect_to checkout_state_path(:address, paypal_email: params[:order][:email])
+      end
+
+      it 'it should redirect to address page when address is valid' do
+        params[:order][:ship_address][:phone] = '123456789'
+        put :update, params: params
+
+        [order.ship_address, order.bill_address].each do |address|
+          expect(address).to be_valid
+        end
+        expect(response).to redirect_to checkout_state_path(:address, paypal_email: params[:order][:email])
+      end
+    end
+  end
+end