spree_vpago 0.1.0.pre.beta

data/app/overrides/spree/admin/payment_methods/index/list.html.erb.deface

@@ -0,0 +1,45 @@
+<!-- replace ".table-responsive" -->
+
+<div class="table-responsive border rounded bg-white">
+  <table class="table sortable" id='listing_payment_methods' data-hook data-sortable-link="<%= update_positions_admin_payment_methods_url %>">
+    <thead class="text-muted">
+      <tr data-hook="admin_payment_methods_index_headers">
+        <th></th>
+        <th><%= Spree.t(:name) %></th>
+        <th><%= Spree.t(:provider) %></th>
+        <th class="text-center"><%= Spree.t(:transaction_type) %></th>
+        <th class="text-center"><%= Spree.t(:display) %></th>
+        <th class="text-center"><%= Spree.t(:active) %></th>
+        <th data-hook="admin_payment_methods_index_header_actions" class="actions"></th>
+      </tr>
+    </thead>
+    <tbody id="sortVert">
+      <% @payment_methods.each do |method| %>
+        <tr id="<%= spree_dom_id method %>" data-hook="admin_payment_methods_index_rows">
+          <td class="move-handle text-center">
+            <% if can?(:edit, method) %>
+              <%= svg_icon name: "grip-vertical.svg", width: '18', height: '18' %>
+            <% end %>
+          </td>
+          <td><%= method.name %></td>
+          <td><%= method.type.split('::', 3).last %></td>
+          <td class="text-center">
+            <% if method.enable_pre_auth? %>
+              <span class="badge badge-pill badge-info">Pre-Auth</span>
+            <% else %>
+              <span class="badge badge-pill badge-success">Purchase</span>
+            <% end %>
+          </td>
+          <td class="text-center"><%= Spree.t("admin.display_on.#{method.display_on}") %></td>
+          <td class="text-center"><%= active_badge(method.active) %></td>
+          <td data-hook="admin_payment_methods_index_row_actions" class="actions">
+            <span class="d-flex justify-content-end">
+              <%= link_to_edit(method, no_text: true) if can? :edit, method %>
+              <%= link_to_delete(method, no_text: true) if can? :delete, method %>
+            </span>
+          </td>
+        </tr>
+      <% end %>
+    </tbody>
+  </table>
+</div>

data/app/overrides/spree/admin/payment_methods/index/payment_methods_tabs.html.erb.deface

@@ -0,0 +1,9 @@
+<!-- insert_before "erb[silent]:contains('content_for :page_actions')" -->
+
+<%= render partial: 'spree/admin/shared/payment_methods_tabs' %>
+
+<% if params[:tab] == 'vendors' %>
+  <div class="alert alert-info mb-3">
+    <%= svg_icon name: "info-circle.svg", classes: 'mr-2', width: '16', height: '16' %> Payment methods for each vendor. Once set, only those payment methods will be displayed to user.
+  </div>
+<% end %>

data/app/overrides/spree/admin/payment_methods/index/vendor_body.html.erb.deface

@@ -0,0 +1,5 @@
+<!-- insert_before "[data-hook='admin_payment_methods_index_row_actions']" -->
+
+<% if params[:tab] == 'vendors' %>
+  <td class="text-center"><%= method.vendor&.name || 'N/A' %></td>
+<% end %>

data/app/overrides/spree/admin/payment_methods/index/vendor_header.html.erb.deface

@@ -0,0 +1,5 @@
+<!-- insert_before "[data-hook='admin_payment_methods_index_header_actions']" -->
+
+<% if params[:tab] == 'vendors' %>
+  <th class="text-center"><%= Spree.t(:vendor) %></th>
+<% end %>

data/app/overrides/spree/admin/payments/_list/actions.html.erb.deface

@@ -0,0 +1,13 @@
+<!-- replace ".payment-action-buttons" -->
+
+<span class="d-flex justify-content-center payment-action-buttons">
+    <% payment.actions.each do |action| %>
+        <% if action == 'credit' %>
+            <%= link_to_with_icon('exit.svg', Spree.t(:refund), new_admin_order_payment_refund_path(@order, payment), no_text: true, class: "btn btn-light btn-sm") if can?(:create, Spree::Refund) %>
+        <% elsif action == 'open_checkout' %>
+            <%= link_to_with_icon('qr-code.svg', Spree.t(action), payment.checkout_url, target: '_blank', no_text: true, class: "btn btn-light btn-sm") %>
+        <% else %>
+            <%= link_to_with_icon(action + '.svg', Spree.t(action), fire_admin_order_payment_path(@order, payment, e: action), method: :put, no_text: true, data: { action: action }, class: "btn btn-light btn-sm") if can?(action.to_sym, payment) %>
+        <% end %>
+    <% end %>
+</span>

data/app/overrides/spree/admin/promotions/_promotion_action/run_by_field.html.erb.deface

@@ -0,0 +1,13 @@
+<!-- insert_after "erb[loud]:contains('hidden_field_tag')" -->
+
+<div class="form-group card-body mb-0 pb-0">
+  <% field_name = "#{param_prefix}[run_by]" %>
+  <%= label_tag field_name do %>
+    <span class="mr-1" type="button" data-toggle="popover" data-trigger="hover" data-placement="left" data-content="This promotion is covered by <%= promotion_action.run_by %>. This information is crucial for the financial report.">
+      <%= svg_icon name: "info-circle-fill.svg", width: '12', height: '12' %>
+    </span>
+    <%= Spree.t(:run_by) %>
+  <% end %>
+  <%= select_tag field_name, options_from_collection_for_select(Spree::PromotionAction.run_bies.keys, :to_s, :capitalize, promotion_action.run_by),
+        class: 'type-select select2' %>
+</div>

data/app/overrides/spree/admin/shared/_order_tabs/payouts.html.erb.deface

@@ -0,0 +1,8 @@
+<!-- insert_after "[data-hook='admin_order_tabs_payments']" -->
+
+<li class="nav-item" data-hook='admin_order_tabs_payouts'>
+  <%= link_to_with_icon 'wallet2.svg',
+    Spree.t(:payouts),
+    admin_order_payouts_url(@order),
+    class: "#{'active' if current == :payouts} nav-link" %>
+</li>

data/app/overrides/spree/admin/shared/_product_tabs/payout_profile_products.html.erb.deface

@@ -0,0 +1,8 @@
+<!-- insert_after "erb[silent]:contains('Spree::Price')" -->
+
+<%= content_tag :li, class: 'nav-item' do %>
+  <%= link_to_with_icon 'wallet2.svg',
+    Spree.t(:payout),
+    admin_product_payout_profile_products_url(@product),
+    class: "nav-link #{'active' if current == :payout_profile_products}" %>
+<% end if can?(:admin, Spree::PayoutProfileProduct) %>

data/app/overrides/spree/admin/shared/sub_menu/_integrations/payout_profiles.html.erb.deface

@@ -0,0 +1,3 @@
+<!-- insert_bottom "[data-hook='admin_integrations']" -->
+
+<%= tab :payout_profiles, match_path: '/payout_profiles', label: 'Payout Profiles' if can? :manage, Spree::PayoutProfiles %>

data/app/overrides/spree/admin/shipping_methods/_form/handle_by.html.erb.deface

@@ -0,0 +1,12 @@
+<!-- insert_before "[data-hook='admin_shipping_method_form_display_field']" -->
+
+<div data-hook="admin_shipping_method_form_handle_by_field" class="col-12 col-lg-6">
+  <%= f.field_container :handle_by do %>
+    <%= f.label :handle_by, raw(Spree.t(:handle_by) + required_span_tag) %>
+    <%= f.select :handle_by, Spree::ShippingMethod.handle_bies.keys.map {|item| [item.capitalize, item]}, {}, :class => "fullwidth select2" %>
+    <%= f.error_message_on :handle_by %>
+    <small class="form-text text-muted">
+      This information is crucial for the financial report.
+    </small>
+  <% end %>
+</div>

data/app/overrides/spree/admin/shipping_methods/edit/shipping_method_tabs.html.erb.deface

@@ -0,0 +1,3 @@
+<!-- insert_before "[data-hook='admin_shipping_method_edit_form_header']" -->
+
+<%= render partial: 'spree/admin/shared/shipping_method_tabs', locals: { current: :edit } %>

data/app/overrides/spree/admin/tax_categories/_form/collect_by_field.html.erb.deface

@@ -0,0 +1,10 @@
+<!-- insert_top "[data-hook='admin_tax_category_form_fields']" -->
+
+<%= f.field_container :collect_by do %>
+  <%= f.label :collect_by, raw(Spree.t(:collect_by) + required_span_tag) %>
+  <%= f.select :collect_by, Spree::TaxCategory.collect_bies.keys.map {|item| [item.capitalize, item]}, {}, :class => "fullwidth select2" %>
+  <%= f.error_message_on :collect_by %>
+  <small class="form-text text-muted">
+    This information is crucial for the financial report.
+  </small>
+<% end %>

data/app/overrides/spree/admin/tax_categories/index/collect_by_table_body.html.erb.deface

@@ -0,0 +1,4 @@
+<!-- insert_top "[data-hook='tax_row']" -->
+
+<td><%= tax_category.id %></td>
+<td class="text-center"><%= tax_category.collect_by.to_s.capitalize %></td>

data/app/overrides/spree/admin/tax_categories/index/collect_by_table_header.html.erb.deface

@@ -0,0 +1,4 @@
+<!-- insert_top "[data-hook='tax_header']" -->
+
+<th><%= Spree.t(:id) %></th>
+<th class="text-center"><%= Spree.t(:collect_by) %></th>

data/app/serializers/spree/api/v2/platform/vpago_payment_source_serializer.rb

@@ -0,0 +1,11 @@
+module Spree
+  module Api
+    module V2
+      module Platform
+        class VpagoPaymentSourceSerializer < BaseSerializer
+          set_type :vpago_payment_source
+        end
+      end
+    end
+  end
+end

data/app/serializers/spree/v2/storefront/payment_method_serializer_decorator.rb

@@ -0,0 +1,23 @@
+module Spree
+  module V2
+    module Storefront
+      module PaymentMethodSerializerDecorator
+        def self.prepended(base)
+          base.attribute :icon_name do |payment_method|
+            return nil if payment_method.preferences.blank?
+  
+            payment_method.preferences[:icon_name]
+          end
+
+          base.attribute :payment_option do |payment_method|
+            pref = payment_method.preferences
+
+            pref.blank? || pref[:payment_option].blank? ? payment_method.method_type : pref[:payment_option]
+          end
+        end
+      end
+    end
+  end
+end
+
+Spree::V2::Storefront::PaymentMethodSerializer.prepend(Spree::V2::Storefront::PaymentMethodSerializerDecorator)

data/app/serializers/spree/v2/storefront/payment_redirect_serializer.rb

@@ -0,0 +1,13 @@
+module Spree
+  module V2
+    module Storefront
+      class PaymentRedirectSerializer < BaseSerializer
+        set_type :payment_redirect
+
+        attributes :id, :amount, :response_code, :number, :state,
+                   :payment_method_id, :payment_method_type, :payment_method_name, 
+                   :redirect_options, :gateway_params, :action_url
+      end
+    end
+  end
+end

data/app/serializers/spree/v2/storefront/payment_serializer_decorator.rb

@@ -0,0 +1,13 @@
+module Spree
+  module V2
+    module Storefront
+      module PaymentSerializerDecorator
+        def self.prepended(base)
+          base.attributes :pre_auth_status, :checkout_url
+        end
+      end
+    end
+  end
+end
+
+Spree::V2::Storefront::PaymentSerializer.prepend(Spree::V2::Storefront::PaymentSerializerDecorator)

data/app/serializers/spree/v2/storefront/vpago_payment_source_serializer.rb

@@ -0,0 +1,9 @@
+module Spree
+  module V2
+    module Storefront
+      class VpagoPaymentSourceSerializer < BaseSerializer
+        set_type :vpago_payment_source
+      end
+    end
+  end
+end

data/app/services/vpago/payment_finder.rb

@@ -0,0 +1,27 @@
+module Vpago
+  class PaymentFinder
+    attr_reader :params_hash
+
+    def initialize(params_hash)
+      @params_hash = params_hash
+    end
+
+    def find_and_verify
+      find_and_verify!
+    rescue StandardError, ActiveRecord::RecordNotFound => e
+      Rails.logger.error("PaymentJwtVerifier#find_and_verify error: #{e.class} - #{e.message}")
+      nil
+    end
+
+    def find_and_verify!
+      order = Spree::Order.find_by!(number: params_hash[:order_number])
+      verify_jwt!(order)
+
+      Spree::Payment.find_by!(number: params_hash[:payment_number])
+    end
+
+    def verify_jwt!(order)
+      JWT.decode(params_hash[:order_jwt_token], order.token, 'HS256')
+    end
+  end
+end

data/app/services/vpago/payment_processor.rb

@@ -0,0 +1,72 @@
+module Vpago
+  class PaymentProcessor
+    attr_accessor :payment, :error
+
+    def initialize(payment:)
+      @payment = payment
+      @error = nil
+    end
+
+    def call
+      process_payment!
+      return process_order if payment.completed? || payment.pending?
+
+      mark_payment_process_failed
+    rescue Spree::Core::GatewayError, StateMachines::InvalidTransition => e
+      mark_payment_process_failed(e.message)
+    end
+
+    private
+
+    def process_payment!
+      user_informer.payment_is_processing(processing: true)
+      payment.process!
+    end
+
+    def process_order
+      user_informer.order_is_processing(processing: true)
+      completer = Spree::Checkout::Complete.new.call(order: payment.order)
+
+      if completer.success?
+        mark_order_process_completed
+      else
+        mark_order_process_failed(completer.error.to_s)
+      end
+    end
+
+    def mark_order_process_completed
+      payment.capture! if payment.pending?
+      user_informer.order_is_completed(processing: false)
+    end
+
+    def mark_order_process_failed(message)
+      user_informer.order_process_failed(processing: payment.pending?, log_message: message)
+
+      if payment.pending?
+        payment.void_transaction!
+        user_informer.payment_is_refunded(processing: false)
+      end
+
+      failure(message)
+    end
+
+    def mark_payment_process_failed(message = nil)
+      message ||= Spree.t(:payment_process_failed)
+
+      user_informer.payment_process_failed(processing: false, log_message: message)
+      failure(message)
+    end
+
+    def user_informer
+      @user_informer ||= ::Vpago::UserInformers::Firebase.new(payment.order)
+    end
+
+    def success?
+      @error.nil?
+    end
+
+    def failure(error)
+      @error = error
+    end
+  end
+end

data/app/services/vpago/payment_redirect_handler.rb

@@ -0,0 +1,194 @@
+require 'faraday'
+
+module Vpago
+  class PaymentRedirectHandler
+    include ActiveModel::Serialization
+
+    attr_accessor :redirect_options, :error_message
+    attr_reader :payment, :gateway_params, :action_url, :vapgo_checkout_service,
+                :override_return_deeplink_url
+
+    delegate :id, :amount, :response_code, :number, :state,
+             :payment_method_id, :payment_method_name,
+             to: :payment
+
+    def initialize(payment:, override_return_deeplink_url: nil)
+      @payment = payment
+      @override_return_deeplink_url = override_return_deeplink_url
+
+      @vapgo_checkout_service = payment.payment_method.vapgo_checkout_service.presence&.new(
+        payment,
+        { override_return_deeplink_url: override_return_deeplink_url }
+      )
+
+      @gateway_params = vapgo_checkout_service&.gateway_params
+      @action_url = vapgo_checkout_service&.action_url
+    end
+
+    def process
+      validate_payment
+      check_and_process_payment
+
+      self
+    end
+
+    def check_and_process_payment
+      @payment.process!
+
+      if payment_method.type_payway_v2?
+        process_aba_v2_gateway
+      elsif payment_method.type_payway?
+        process_aba_gateway
+      elsif payment_method.type_wingsdk?
+        process_wing_gateway
+      elsif payment_method.type_acleda?
+        process_acleda_gateway
+      elsif payment_method.type_acleda_mobile?
+        process_acleda_mobile
+      end
+    end
+
+    def process_acleda_gateway
+      data = {
+        href: "#{ENV.fetch('DEFAULT_URL_HOST', nil)}/acleda_redirects?payment_number=#{@payment.number}"
+      }
+
+      @redirect_options = data
+    end
+
+    def process_acleda_mobile
+      service = Vpago::AcledaMobile::Checkout.new(@payment)
+      service.call
+
+      @redirect_options = service.results
+    end
+
+    def process_aba_v2_gateway
+      payment_option = @payment.payment_method.preferences[:payment_option]
+
+      if %w[abapay abapay_khqr_deeplink].include?(payment_option)
+        process_abapay_v2_deeplink
+      else
+        # construct web url for render web view.
+        # same implementation for alipay, wechat, cards, abapay_khqr.
+
+        # - for abapay_khqr: in web view, it renders QR then request to open intent://ababank.com?... for app to open ABA app.
+        # - for others: it only renders QR
+        process_payway_v2_card
+      end
+    end
+
+    def process_payway_v2_card
+      ## TO DO: generate redirect url
+      data = {
+        href: "#{ENV.fetch('DEFAULT_URL_HOST', nil)}/payway_v2_card_popups?payment_number=#{@payment.number}"
+      }
+
+      @redirect_options = data
+    end
+
+    def process_abapay_v2_deeplink
+      response = send_process_payway_v2_payment
+
+      return unless response.status == 200
+
+      json_response = JSON.parse(response.body)
+
+      if json_response['status']['code'] == '00'
+        @redirect_options = json_response
+      else
+        @error_message = json_response['description']
+      end
+    end
+
+    def send_process_payway_v2_payment
+      options = {
+        app_checkout: true,
+        override_return_deeplink_url:
+      }
+
+      abapay_payment = ::Vpago::PaywayV2::Checkout.new(@payment, options)
+      gateway_params = abapay_payment.gateway_params
+
+      conn = Faraday::Connection.new do |faraday|
+        faraday.request :url_encoded
+      end
+
+      conn.post(abapay_payment.checkout_url, gateway_params) do |request|
+        request.headers['Referer'] = ENV.fetch('DEFAULT_URL_HOST', nil)
+      end
+    end
+
+    def process_aba_gateway
+      payment_option = @payment.payment_method.preferences[:payment_option]
+      payment_option == 'abapay' ? process_abapay_deeplink : process_payway_card
+    end
+
+    def process_payway_card
+      ## TO DO: generate redirect url
+      data = {
+        href: "#{ENV.fetch('DEFAULT_URL_HOST', nil)}/payway_card_popups?payment_number=#{@payment.number}"
+      }
+
+      @redirect_options = data
+    end
+
+    def process_wing_gateway
+      data = {
+        href: "#{ENV.fetch('DEFAULT_URL_HOST', nil)}/wing_redirects?payment_number=#{@payment.number}"
+      }
+
+      @redirect_options = data
+    end
+
+    def process_abapay_deeplink
+      send_process_payment
+
+      return unless @response.status == 200
+
+      json_response = JSON.parse(@response.body)
+
+      if json_response['status'] == '0'
+        @redirect_options = json_response
+      else
+        @error_message = json_response['description']
+      end
+    end
+
+    def send_process_payment
+      options = {
+        app_checkout: true
+      }
+
+      abapay_payment = ::Vpago::Payway::Checkout.new(@payment, options)
+      gateway_params = abapay_payment.gateway_params
+      gateway_params[:payment_option] = 'abapay_deeplink'
+
+      conn = Faraday::Connection.new do |faraday|
+        faraday.request :url_encoded
+      end
+
+      @response = conn.post(abapay_payment.action_url, gateway_params) do |request|
+        request.headers['Referer'] = ENV.fetch('DEFAULT_URL_HOST', nil)
+      end
+    end
+
+    def validate_payment
+      raise ActiveRecord::RecordNotFound if !payment_valid || !payment_method.vpago_payment?
+
+      true
+    end
+
+    def payment_method
+      @payment.payment_method
+    end
+
+    def payment_method_type
+      payment_method.type
+    end
+
+    def payment_valid
+      !::Spree::Payment::INVALID_STATES.include?(@payment.state)
+    end
+  end
+end

data/app/services/vpago/payment_url_constructor.rb

@@ -0,0 +1,32 @@
+require 'google/cloud/firestore'
+
+module Vpago
+  class PaymentUrlConstructor
+    attr_accessor :payment, :order
+
+    def initialize(payment)
+      @payment = payment
+      @order = payment.order
+    end
+
+    def checkout_url = "#{base_url}/vpago_payments/checkout?#{query}"
+    def processing_url = "#{base_url}/vpago_payments/processing?#{query}"
+    def success_url = "#{base_url}/vpago_payments/success?#{query}"
+    def process_payment_url = "#{base_url}/vpago_payments/process_payment?#{query}"
+
+    def query
+      { payment_number: payment.number, order_number: order.number, order_jwt_token: order_jwt_token }.to_query
+    end
+
+    private
+
+    def base_url
+      ENV.fetch('DEFAULT_URL_HOST')
+    end
+
+    def order_jwt_token
+      payload = { order_number: order.number, order_id: order.id }
+      JWT.encode(payload, order.token, 'HS256')
+    end
+  end
+end

data/app/services/vpago/payments/find_or_create.rb

@@ -0,0 +1,51 @@
+# Replacement for Spree::Payments::Create. To look for existing payment instead of always create new one.
+module Vpago
+  module Payments
+    class FindOrCreate
+      prepend Spree::ServiceModule::Base
+
+      def call(order:, params: {}) # rubocop:disable Lint/UnusedMethodArgument
+        ApplicationRecord.transaction do
+          run :find_payment_method
+          run :find_or_create_payment
+        end
+      end
+
+      def find_payment_method(order:, params:)
+        payment_method = order.available_payment_methods.find { |pm| pm.id.to_s == params[:payment_method_id]&.to_s }
+        return failure(nil, :payment_method_not_found) if payment_method.blank?
+
+        success(order: order, params: params, payment_method: payment_method)
+      end
+
+      def find_or_create_payment(order:, params:, payment_method:)
+        payment = order.payments.find_or_initialize_by(
+          state: :checkout,
+          amount: order.order_total_after_store_credit,
+          payment_method: payment_method
+        )
+
+        if payment_method&.source_required? && payment.source.blank?
+          source_attributes = {
+            payment_option: params[:payment_option],
+            payment_method_id: payment_method.id,
+            user_id: order.user&.id,
+            gateway_payment_profile_id: params[:gateway_payment_profile_id],
+            gateway_customer_profile_id: params[:gateway_customer_profile_id],
+            last_digits: params[:last_digits],
+            month: params[:month],
+            year: params[:year],
+            name: params[:name]
+          }.compact
+
+          payment.source = payment_method.payment_source_class.new(source_attributes)
+          payment.save!
+        end
+
+        return failure(payment) if payment.errors.any?
+
+        success(order: order)
+      end
+    end
+  end
+end

data/app/services/vpago/payout_profiles/payway/base_payout_profile_request.rb

@@ -0,0 +1,38 @@
+require 'faraday'
+
+module Vpago
+  module PayoutProfiles
+    module Payway
+      class BasePayoutProfileRequest
+        attr_reader :profile, :base_url, :error_messages
+
+        # to be override
+        def request_path; end
+
+        def initialize(profile)
+          @base_url = profile.preferred_base_url
+          @profile = profile
+          @error_messages = []
+        end
+
+        def connection
+          Faraday::Connection.new(url: base_url)
+        end
+
+        def request_to_payway
+          response = connection.post(request_path) do |request|
+            request.headers['language'] = 'en'
+            request.headers['Content-Type'] = 'application/json'
+            request.body = PayoutProfileRequestParamsBuilder.new(Date.current, profile).request_params.to_json
+          end
+
+          json_response = JSON.parse(response.body)
+
+          @error_messages << response.body if json_response.nil? || json_response['status'].nil?
+
+          json_response
+        end
+      end
+    end
+  end
+end