spree_stripe 1.0.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: b9ff8503fd4b39888f48c4be858858eb6050eb4949171f498f5f8d1eb5c4b1e2
+  data.tar.gz: 72f161cfc29653e564f12b759954221f6d9c5c4e8803a9f6a148925952da2906
+SHA512:
+  metadata.gz: 5ea0227d2b1461807f37babce54421d410f7f582e057821ed845c5a73b4eeb35bb6f1ca74999066852fedc07d1317b6ea6b7d1cee7547b482ccd04020546cb0a
+  data.tar.gz: 5b09ba2480311dcff8609d18471e757e49543ef517eaccce70b89816846504407159db6420f964082c0a23647a265fdea1ac08c3bb459bdae87d8ff8f1a6373b

data/LICENSE.md

@@ -0,0 +1,14 @@
+# LICENSE
+
+Copyright (c) 2025 Vendo Connect Inc.
+All rights reserved.
+
+This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program.  If not, see [https://www.gnu.org/licenses/](https://www.gnu.org/licenses/).

data/README.md

@@ -0,0 +1,132 @@
+<p align="center">
+  <a href="https://spreecommerce.org">
+    <img alt="Spree Commerce x Stripe integration" src="https://vendo-production-res.cloudinary.com/image/upload/w_2000/q_auto/v1742930549/docs/github/Spree_Commerce_open-source_eCommerce_Stripe_payments_integration_-_Github_xlrcn8.jpg">
+  </a>
+
+# Spree Stripe
+
+This is the official Stripe payment gateway extension for [Spree Commerce](https://spreecommerce.org) [open-source eCommerce platform](https://spreecommerce.org/). 
+
+If you like what you see, consider giving this repo a GitHub star :star:
+
+Thank you for supporting Spree open-source :heart:
+
+> [!IMPORTANT]
+> This Stripe integration for Spree is free to use for private projects but requires a [Commercial License](https://spreecommerce.org/why-consider-a-commercial-license-for-your-multi-tenant-or-saas-spree-based-project/) if you're planning to use it for your [SaaS](https://spreecommerce.org/multi-tenant-white-label-ecommerce/) or a [multi-tenant eCommerce](https://spreecommerce.org/multi-tenant-white-label-ecommerce/) website. 
+> Feel free to [reach out](https://spreecommerce.org/get-started/) to learn more.
+
+> [!TIP]
+> Looking for a [Stripe Connect integration](#looking-for-a-stripe-connect-integration-for-spree) for Spree? It's available with the [Enterprise Edition](https://spreecommerce.org/spree-commerce-version-comparison-community-edition-vs-enterprise-edition/).
+
+## Features
+
+- Support for quick checkout using Apple Pay, Google Pay, Stripe Link
+- Support for 3D Secure and other security standards
+- Support for off-session payments
+- Support for Storefront API integration (see the API docs [here](https://spreecommerce.org/docs/api-reference/storefront/stripe)).
+- Accept payments in over 130 currencies
+- Accept Credit Cards, Apple Pay, Google Pay, and more
+- Accept SEPA Direct Debit payments
+- Accept iDEAL payments
+- Accept SOFORT payments
+- Accept Bancontact payments
+- Accept Alipay payments
+- Accept WeChat Pay payments
+- Accept Afterpay, Klarna, Affirm, and more
+
+## What's new?
+
+### Installment (BNPL) payments indicator on PDP (Product Detail Page)
+
+![Spree_x_Stripe_-_BNPL_Installment_payments_Product_Card_PDP_Product_Detail_Page](https://vendo-production-res.cloudinary.com/image/upload/w_2000/q_auto/v1742983146/docs/github/Spree_x_Stripe_-_BNPL_Installment_payments_Product_Card_PDP_Product_Detail_Page_amhfkw.jpg)
+
+### Quick payment options on the cart (Apple Pay, Google Pay, Link)
+
+![Apple_Pay_Google_Pay_Link_-_Quick_payment_options_on_the_cart](https://vendo-production-res.cloudinary.com/image/upload/w_2000/q_auto/v1742930027/docs/github/Spree_x_Stripe_-_Apple_Pay_Google_Pay_Link_-_Quick_payment_options_on_the_cart_aw45x9.jpg)
+
+### Quick payments bypassing checkout 1st step (Apple Pay, Google Pay, Link)
+
+![Apple_Pay_Google_Pay_Link_-_Quick_payments_bypassing_checkout](https://vendo-production-res.cloudinary.com/image/upload/w_2000/q_auto/v1742930027/docs/github/Spree_x_Stripe_-_Apple_Pay_Google_Pay_Link_-_Quick_payments_bypassing_checkout_on_Cart_n6gbh6.jpg)
+
+### Various payment options on the payment step (cards, BNPL, Apple Pay, Google Pay, Link)
+
+![Quick payments bypassing checkout 1st step (Apple Pay, Google_Pay, Link)](https://vendo-production-res.cloudinary.com/image/upload/w_2000/q_auto/v1742930027/docs/github/Spree_x_Stripe_-_Apple_Pay_Google_Pay_Link_-_Checkout_payment_step_rxxnr9.jpg)
+
+## Spree 5 Demo
+
+Check out the [Spree Commerce demo](https://demo.spreecommerce.org/) for yourself, including this Stripe integration.
+
+This demo runs on Spree 5 which is the biggest Spree release ever. Stay tuned for the official announcement on all the exciting features and integrations - coming up soon!
+
+![Spree Commerce 5 version](https://vendo-production-res.cloudinary.com/image/upload/w_2000/q_auto/v1742985405/docs/github/Spree_Commerce_open-source_eCommerce_myzurl.jpg)
+
+## Installation
+
+1. Add this extension to your Gemfile with this line:
+
+    ```ruby
+    bundle add spree_stripe --github=spree/spree_stripe
+    ```
+
+2. Run the install generator
+
+    ```ruby
+    bundle exec rails g spree_stripe:install
+    ```
+
+3. Restart your server
+
+  If your server was running, restart it so that it can find the assets properly.
+
+## Developing
+
+1. Create a dummy app
+
+    ```bash
+    bundle update
+    bundle exec rake test_app
+    ```
+
+2. Add your new code
+3. Run tests
+
+    ```bash
+    bundle exec rspec
+    ```
+
+When testing your applications integration with this extension you may use it's factories.
+Simply add this require statement to your spec_helper:
+
+```ruby
+require 'spree_stripe/factories'
+```
+
+## Releasing a new version
+
+```shell
+bundle exec gem bump -p -t
+bundle exec gem release
+```
+
+For more options please see [gem-release README](https://github.com/svenfuchs/gem-release)
+
+## Contributing
+
+If you'd like to contribute, please take a look at the
+[instructions](CONTRIBUTING.md) for installing dependencies and crafting a good
+pull request.
+
+Copyright (c) 2025 [Vendo Connect Inc.](https://getvendo.com), released under [AGPL 3.0 license](https://github.com/spree/spree_stripe/blob/main/LICENSE.md). Please refer to [this blog post](https://spreecommerce.org/why-spree-is-changing-its-open-source-license-to-agpl-3-0-and-introducing-a-commercial-license/) and [that blog post](https://spreecommerce.org/open-source-ecommerce-transparency/) to learn more about Spree licensing. 
+
+## Looking for a Stripe Connect integration for Spree?
+
+Spree Commerce [Enterprise Edition](https://spreecommerce.org/spree-commerce-version-comparison-community-edition-vs-enterprise-edition/) comes with a fully automated Stripe Connect integration for a [multi-vendor marketplace use case](https://spreecommerce.org/marketplace-ecommerce/):
+
+- Automated split payments between marketplace and vendors
+- Support for multiple payment methods including cards and digital wallets
+- Configurable marketplace fees and commission structures
+- Automated payouts to vendors
+- Comprehensive transaction reporting
+- Built-in fraud prevention tools
+
+Feel free to [reach out](https://spreecommerce.org/get-started/) to learn more.

data/Rakefile

@@ -0,0 +1,21 @@
+require 'bundler'
+Bundler::GemHelper.install_tasks
+
+require 'rspec/core/rake_task'
+require 'spree/testing_support/extension_rake'
+
+RSpec::Core::RakeTask.new
+
+task :default do
+  if Dir['spec/dummy'].empty?
+    Rake::Task[:test_app].invoke
+    Dir.chdir('../../')
+  end
+  Rake::Task[:spec].invoke
+end
+
+desc 'Generates a dummy app for testing'
+task :test_app do
+  ENV['LIB_NAME'] = 'spree_stripe'
+  Rake::Task['extension:test_app'].invoke
+end

data/app/assets/config/spree_stripe_manifest.js

@@ -0,0 +1,3 @@
+//= link spree_stripe/application.js
+//= link_tree ../../javascript/spree_stripe/controllers .js
+//= link_tree ../../../vendor/javascript .js

data/app/controllers/spree/api/v2/storefront/stripe/base_controller.rb

@@ -0,0 +1,21 @@
+module Spree
+  module Api
+    module V2
+      module Storefront
+        module Stripe
+          class BaseController < ::Spree::Api::V2::BaseController
+            before_action :require_stripe_gateway
+
+            def require_stripe_gateway
+              render_error_payload('Stripe gateway is not present') unless stripe_gateway
+            end
+
+            def stripe_gateway
+              @stripe_gateway ||= current_store.stripe_gateway
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/storefront/stripe/payment_intents_controller.rb

@@ -0,0 +1,61 @@
+module Spree
+  module Api
+    module V2
+      module Storefront
+        module Stripe
+          class PaymentIntentsController < BaseController
+            include Spree::Api::V2::Storefront::OrderConcern
+            before_action :ensure_order
+
+            # POST /api/v2/storefront/stripe/payment_intents
+            def create
+              spree_authorize! :update, spree_current_order, order_token
+
+              stripe_payment_method_id = permitted_attributes[:stripe_payment_method_id].presence
+              stripe_payment_method_id ||= spree_current_order.valid_credit_cards.where(payment_method: stripe_gateway).first&.gateway_payment_profile_id
+
+              @payment_intent = SpreeStripe::CreatePaymentIntent.new.call(
+                spree_current_order,
+                stripe_gateway,
+                stripe_payment_method_id: stripe_payment_method_id,
+                off_session: permitted_attributes[:off_session] || false
+              )
+
+              render_serialized_payload { serialize_resource(@payment_intent) }
+            end
+
+            # GET /api/v2/storefront/stripe/payment_intents
+            def show
+              spree_authorize! :show, spree_current_order, order_token
+
+              @payment_intent = spree_current_order.payment_intents.find(params[:id])
+
+              render_serialized_payload { serialize_resource(@payment_intent) }
+            end
+
+            # PATCH /api/v2/storefront/stripe/payment_intents/:id
+            def update
+              spree_authorize! :update, spree_current_order, order_token
+
+              @payment_intent = spree_current_order.payment_intents.find(params[:id])
+              @payment_intent.attributes = permitted_attributes
+              @payment_intent.save!
+
+              render_serialized_payload { serialize_resource(@payment_intent) }
+            end
+
+            private
+
+            def permitted_attributes
+              params.require(:payment_intent).permit(:amount, :stripe_payment_method_id, :off_session)
+            end
+
+            def resource_serializer
+              Spree::V2::Storefront::PaymentIntentSerializer
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/api/v2/storefront/stripe/setup_intents_controller.rb

@@ -0,0 +1,19 @@
+module Spree
+  module Api
+    module V2
+      module Storefront
+        module Stripe
+          class SetupIntentsController < BaseController
+            before_action :require_spree_current_user
+
+            def create
+              setup_intent = SpreeStripe::CreateSetupIntent.call(gateway: stripe_gateway, user: try_spree_current_user)
+
+              render_serialized_payload(200) { setup_intent.value }
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree_stripe/apple_pay_domain_verification_controller.rb

@@ -0,0 +1,11 @@
+module SpreeStripe
+  class ApplePayDomainVerificationController < ::Spree::StoreController
+    def show
+      gateway = SpreeStripe::Gateway.last
+
+      raise ActiveRecord::RecordNotFound if gateway.nil? || !gateway.apple_domain_association_file_content
+
+      render plain: gateway.apple_domain_association_file_content
+    end
+  end
+end

data/app/controllers/spree_stripe/payment_intents_controller.rb

@@ -0,0 +1,61 @@
+# this is the endpoint that Stripe JS SDK will redirect customer to after payment
+# it will handle the payment intent status and process the payment
+module SpreeStripe
+  class PaymentIntentsController < Spree::StoreController
+    include Spree::CheckoutAnalyticsHelper
+
+    # GET /spree/payment_intents/:id
+    def show
+      # fetch the payment intent active record
+      @payment_intent_record = SpreeStripe::PaymentIntent.find(params[:id])
+
+      # fetch the stripe payment intent
+      @stripe_payment_intent = @payment_intent_record.stripe_payment_intent
+
+      @order = @payment_intent_record.order
+
+      # if somehow order was canceled, we need to redirect the customer to the cart
+      # this is a rare case, but we need to handle it
+      if @order.canceled?
+        flash[:error] = Spree.t(:order_canceled)
+        redirect_to spree.cart_path, status: :see_other
+      # if the order is already completed (race condition)
+      # we need to redirect the customer to the complete checkout page
+      # but we need to make sure not to set the session flag to indicate that the order was placed now
+      # because we don't know if the order was actually placed or not
+      elsif @order.completed?
+        redirect_to spree.checkout_complete_path(@order.token), status: :see_other
+      # if the payment intent is successful, we need to process the payment and complete the order
+      elsif @stripe_payment_intent.status == 'succeeded'
+        @order = SpreeStripe::CompleteOrder.new(payment_intent: @payment_intent_record).call
+
+        # set the session flag to indicate that the order was placed now
+        track_checkout_completed if @order.completed?
+
+        # redirect the customer to the complete checkout page
+        redirect_to spree.checkout_complete_path(@order.token), status: :see_other
+      else
+        handle_failure(Spree.t("stripe.payment_intent_errors.#{@stripe_payment_intent.status}"))
+      end
+    rescue Spree::Core::GatewayError => e
+      handle_failure(e.message)
+    end
+
+    private
+
+    def handle_failure(error_message)
+      flash[:error] = error_message
+
+      Rails.logger.error("Payment failed for order #{@order.id}: #{@stripe_payment_intent.status}")
+
+      # remove the payment intent record, so after returning to the checkout page, the customer can try again with a new payment intent
+      @payment_intent_record.destroy!
+
+      # this should be a rare race condition, but we need to handle it
+      payment = @order.payments.valid.find_by(response_code: @stripe_payment_intent.id)
+      payment.void! if payment.present?
+
+      redirect_to spree.checkout_path(@order.token), status: :see_other
+    end
+  end
+end

data/app/controllers/spree_stripe/store_controller_decorator.rb

@@ -0,0 +1,9 @@
+module SpreeStripe
+  module StoreControllerDecorator
+    def self.prepended(base)
+      base.helper SpreeStripe::BaseHelper
+    end
+  end
+end
+
+Spree::StoreController.prepend(SpreeStripe::StoreControllerDecorator) if defined?(Spree::StoreController)

data/app/controllers/stripe_event/webhook_controller_decorator.rb

@@ -0,0 +1,17 @@
+module StripeEvent
+  module WebhookControllerDecorator
+    def secrets(payload, signature)
+      all_signing_keys = SpreeStripe::WebhookKey.pluck(:signing_secret).uniq.compact
+      all_signing_keys << ENV['STRIPE_SIGNING_SECRET'] if ENV['STRIPE_SIGNING_SECRET'].present?
+
+      return all_signing_keys if all_signing_keys.any?
+
+      raise Stripe::SignatureVerificationError.new(
+        'Cannot verify signature without a `StripeEvent.signing_secret`',
+        signature, http_body: payload
+      )
+    end
+  end
+
+  WebhookController.prepend(WebhookControllerDecorator)
+end

data/app/helpers/spree_stripe/base_helper.rb

@@ -0,0 +1,13 @@
+module SpreeStripe
+  module BaseHelper
+    def current_stripe_gateway
+      @current_stripe_gateway ||= current_store.stripe_gateway
+    end
+
+    def current_stripe_payment_intent
+      return if current_stripe_gateway.nil?
+
+      @current_stripe_payment_intent ||= SpreeStripe::CreatePaymentIntent.new.call(@order, current_stripe_gateway)
+    end
+  end
+end

data/app/javascript/spree_stripe/application.js

@@ -0,0 +1,18 @@
+import '@hotwired/turbo-rails'
+import { Application } from '@hotwired/stimulus'
+
+let application
+
+if (typeof window.Stimulus === "undefined") {
+  application = Application.start()
+  application.debug = false
+  window.Stimulus = application
+} else {
+  application = window.Stimulus
+}
+
+import CheckoutStripeButtonController from 'spree_stripe/controllers/stripe_button_controller'
+import CheckoutStripeController from 'spree_stripe/controllers/stripe_controller'
+
+application.register('checkout-stripe-button', CheckoutStripeButtonController)
+application.register('checkout-stripe', CheckoutStripeController)