spree_vpago 2.4.0.pre.pre2 → 2.4.0.pre.pre3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e67f9f17cf4c31b88166afade1d7fb6cca4e5d849db06d3437ca2f06495a2a70
-  data.tar.gz: 9d4073b8a168900c3492f27d80034e7396526c5e9cbb139539a77cecbac3d79a
+  metadata.gz: e361db28503471424737c1633bb7e5fcacccdc7c1a63faddd76ad3e226ceb6f7
+  data.tar.gz: cd5936a07fdfcfb314ac0d068d88b0e6137e6f5cb7e37295aa034368bcea33af
 SHA512:
-  metadata.gz: 1d23aff10d339d0c4587645678dba14c8cb0e0e199161ae3f96189ef087fc8fb9345bb39dd826b3b030c1b7ccc5f45b84e866c8f9bb3f0baa5329a3ec97af589
-  data.tar.gz: afdc9d8cd84de339e2ec3323490765e2f2e709c18cbc1655f86dff7ceb60dfdb75fc14f1039b635a7b8877412515ec503395c3176be364af184c91f1008927ce
+  metadata.gz: e5691409e7f910c70fd1012358eafc766b45131e4db286106f5a58a8390c0f7bb2ad1fbba892805a6f7ab3b4ec75bb77f8df1e76ccde90f153efadc6e835bed0
+  data.tar.gz: 874db861928b7f5cd71ccd9d17172057de242748f2cc0c11735b03a49951c80151d02cde118ee4ea21961209113529bb1e89562c9e6e8e843f38c4369ef03f71

data/Gemfile.lock

@@ -1,13 +1,13 @@
 PATH
   remote: .
   specs:
-    spree_vpago (2.4.0.pre.pre2)
+    spree_vpago (2.4.0.pre.pre3)
       faraday
       google-cloud-firestore
       spree_api (>= 4.5)
       spree_backend (>= 4.5)
       spree_core (>= 4.5)
-      spree_extension
+      spree_extension (< 1.0)
       spree_multi_vendor (>= 2.4.1)
 
 GEM
@@ -128,7 +128,7 @@ GEM
       babel-source (>= 4.0, < 6)
       execjs (~> 2.0)
     base64 (0.3.0)
-    bcrypt (3.1.21)
+    bcrypt (3.1.22)
     bigdecimal (3.1.8)
     bootstrap (4.6.2.1)
       autoprefixer-rails (>= 9.1.0)
@@ -176,10 +176,11 @@ GEM
       rainbow (>= 2.1.0)
     diff-lcs (1.5.0)
     docile (1.4.0)
-    doorkeeper (5.8.2)
+    doorkeeper (5.9.9)
       railties (>= 5)
     erubi (1.12.0)
-    execjs (2.10.0)
+    execjs (2.10.2)
+      json (>= 2)
     factory_bot (4.11.1)
       activesupport (>= 3.0.0)
     faraday (2.7.4)
@@ -188,7 +189,7 @@ GEM
     faraday-http-cache (2.5.0)
       faraday (>= 0.8)
     faraday-net_http (3.0.2)
-    faraday-retry (2.3.2)
+    faraday-retry (2.4.0)
       faraday (~> 2.0)
     ffaker (2.21.0)
     ffi (1.15.5)
@@ -198,7 +199,7 @@ GEM
     flatpickr (4.6.13.1)
     friendly_id (5.5.0)
       activerecord (>= 4.0.0)
-    gapic-common (1.2.0)
+    gapic-common (1.5.0)
       faraday (>= 1.9, < 3.a)
       faraday-retry (>= 1.0, < 3.a)
       google-cloud-env (~> 2.2)
@@ -207,7 +208,7 @@ GEM
       googleapis-common-protos (~> 1.6)
       googleapis-common-protos-types (~> 1.15)
       googleauth (~> 1.12)
-      grpc (~> 1.66)
+      grpc (>= 1.83, < 2.a)
     gem-release (2.2.2)
     github_changelog_generator (1.16.4)
       activesupport
@@ -221,45 +222,45 @@ GEM
     globalid (1.1.0)
       activesupport (>= 5.0)
     glyphicons (1.0.2)
-    google-cloud-core (1.8.0)
+    google-cloud-core (1.9.0)
       google-cloud-env (>= 1.0, < 3.a)
       google-cloud-errors (~> 1.0)
-    google-cloud-env (2.3.1)
+    google-cloud-env (2.4.0)
       base64 (~> 0.2)
       faraday (>= 1.0, < 3.a)
-    google-cloud-errors (1.5.0)
-    google-cloud-firestore (3.1.1)
+    google-cloud-errors (1.7.0)
+    google-cloud-firestore (3.2.0)
       bigdecimal (~> 3.0)
       concurrent-ruby (~> 1.0)
       google-cloud-core (~> 1.7)
       google-cloud-firestore-v1 (~> 2.0)
       rbtree (~> 0.4.2)
-    google-cloud-firestore-v1 (2.3.0)
-      gapic-common (~> 1.2)
+    google-cloud-firestore-v1 (2.4.0)
+      gapic-common (~> 1.3)
       google-cloud-errors (~> 1.0)
       google-cloud-location (~> 1.0)
-    google-cloud-location (1.2.1)
-      gapic-common (~> 1.2)
+    google-cloud-location (1.5.1)
+      gapic-common (~> 1.3)
       google-cloud-errors (~> 1.0)
     google-logging-utils (0.2.0)
-    google-protobuf (4.33.4)
+    google-protobuf (4.33.6)
       bigdecimal
       rake (>= 13)
-    googleapis-common-protos (1.9.0)
+    googleapis-common-protos (1.10.0)
       google-protobuf (~> 4.26)
       googleapis-common-protos-types (~> 1.21)
       grpc (~> 1.41)
-    googleapis-common-protos-types (1.22.0)
+    googleapis-common-protos-types (1.23.0)
       google-protobuf (~> 4.26)
-    googleauth (1.16.1)
+    googleauth (1.17.4)
       faraday (>= 1.0, < 3.a)
       google-cloud-env (~> 2.2)
       google-logging-utils (~> 0.1)
       jwt (>= 1.4, < 4.0)
-      multi_json (~> 1.11)
       os (>= 0.9, < 2.0)
+      pstore (~> 0.1)
       signet (>= 0.16, < 2.a)
-    grpc (1.76.0)
+    grpc (1.84.0)
       google-protobuf (>= 3.25, < 5.0)
       googleapis-common-protos-types (~> 1.0)
     hashdiff (1.1.0)
@@ -369,6 +370,7 @@ GEM
     pry (0.14.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
+    pstore (0.2.1)
     public_suffix (5.0.1)
     puma (6.2.2)
       nio4r (~> 2.0)
@@ -412,13 +414,13 @@ GEM
       activerecord (>= 6.0.4)
       activesupport (>= 6.0.4)
       i18n
-    rbtree (0.4.6)
+    rbtree (0.4.7)
     redis (5.0.6)
       redis-client (>= 0.9.0)
     redis-client (0.14.1)
       connection_pool
     regexp_parser (2.11.3)
-    responders (3.2.0)
+    responders (3.2.1)
       actionpack (>= 7.0)
       railties (>= 7.0)
     rexml (3.2.9)
@@ -492,11 +494,10 @@ GEM
       websocket (~> 1.0)
     shoulda-matchers (6.2.0)
       activesupport (>= 5.2.0)
-    signet (0.21.0)
+    signet (0.22.0)
       addressable (~> 2.8)
       faraday (>= 0.17.5, < 3.a)
       jwt (>= 1.5, < 4.0)
-      multi_json (~> 1.10)
     simplecov (0.22.0)
       docile (~> 1.1)
       simplecov-html (~> 0.11)

data/app/controllers/spree/admin/payment_acleda_v2_base_controller.rb

@@ -0,0 +1,21 @@
+module Spree
+  module Admin
+    class PaymentAcledaV2BaseController < Spree::Admin::BaseController
+      include Spree::Backend::Callbacks
+
+      before_action :load_payment, only: %i[show update]
+      before_action :validate_order, only: [:update]
+
+      def validate_order
+        return unless @payment.order.completed?
+
+        flash[:error] = Spree.t('vpago.payments.not_allow_for_order_completed')
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      end
+
+      def load_payment
+        @payment = Payment.find_by!(number: params[:id])
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/payment_acleda_v2_checkers_controller.rb

@@ -0,0 +1,26 @@
+module Spree
+  module Admin
+    class PaymentAcledaV2CheckersController < PaymentAcledaV2BaseController
+      include Spree::Backend::Callbacks
+
+      def update
+        options = {
+          updated_by_user_id: try_spree_current_user.id,
+          updated_reason: Spree.t('vpago.payments.checker_updated_by_description')
+        }
+        spree_updater = Vpago::AcledaV2::PaymentRequestUpdater.new(@payment, options)
+        spree_updater.call
+
+        @payment.reload
+
+        if @payment.order.completed?
+          flash[:success] = Spree.t(:successfully_updated, resource: Spree.t(:payments))
+        else
+          flash[:error] = Spree.t(:unsuccessfully_updated, resource: Spree.t(:payments))
+        end
+
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/payment_acleda_v2_queriers_controller.rb

@@ -0,0 +1,38 @@
+module Spree
+  module Admin
+    class PaymentAcledaV2QueriersController < PaymentAcledaV2BaseController
+      include Spree::Backend::Callbacks
+
+      around_action :set_writing_role, only: %i[show]
+
+      def show
+        tran_status = @payment.payment_method.check_transaction(@payment)
+
+        if tran_status.success?
+          @payment.update_column(:gateway_status, true)
+          flash[:success] =
+            Spree.t('vpago.payments.payment_found_with_result', result: tran_status.json_response)
+        else
+          flash[:error] = Spree.t('vpago.payments.payment_not_found_with_error', error: tran_status.error_message)
+        end
+
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      rescue Faraday::TimeoutError, Faraday::ConnectionFailed => e
+        VpagoLogger.error(
+          label: 'Spree::Admin::PaymentAcledaV2QueriersController#show gateway_timeout',
+          data: { payment_number: @payment.number, error_class: e.class.name, error_message: e.message }
+        )
+        flash[:error] = Spree.t('vpago.payments.gateway_timeout')
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      end
+
+      private
+
+      def set_writing_role
+        ActiveRecord::Base.connected_to(role: :writing) do
+          yield if block_given?
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/payment_payway_queriers_controller.rb

@@ -16,6 +16,13 @@ module Spree
           flash[:error] = Spree.t('vpago.payments.payment_not_found_with_error', error: tran_status.error_message)
         end
 
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      rescue Faraday::TimeoutError, Faraday::ConnectionFailed => e
+        VpagoLogger.error(
+          label: 'Spree::Admin::PaymentPaywayQueriersController#show gateway_timeout',
+          data: { payment_number: @payment.number, error_class: e.class.name, error_message: e.message }
+        )
+        flash[:error] = Spree.t('vpago.payments.gateway_timeout')
         redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
       end
 

data/app/controllers/spree/admin/payment_vattanac_base_controller.rb

@@ -0,0 +1,21 @@
+module Spree
+  module Admin
+    class PaymentVattanacBaseController < Spree::Admin::BaseController
+      include Spree::Backend::Callbacks
+
+      before_action :load_payment, only: %i[show update]
+      before_action :validate_order, only: [:update]
+
+      def validate_order
+        return unless @payment.order.completed?
+
+        flash[:error] = Spree.t('vpago.payments.not_allow_for_order_completed')
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      end
+
+      def load_payment
+        @payment = Payment.find_by!(number: params[:id])
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/payment_vattanac_checkers_controller.rb

@@ -0,0 +1,26 @@
+module Spree
+  module Admin
+    class PaymentVattanacCheckersController < PaymentVattanacBaseController
+      include Spree::Backend::Callbacks
+
+      def update
+        options = {
+          updated_by_user_id: try_spree_current_user.id,
+          updated_reason: Spree.t('vpago.payments.checker_updated_by_description')
+        }
+        spree_updater = Vpago::Vattanac::PaymentRequestUpdater.new(@payment, options)
+        spree_updater.call
+
+        @payment.reload
+
+        if @payment.order.completed?
+          flash[:success] = Spree.t(:successfully_updated, resource: Spree.t(:payments))
+        else
+          flash[:error] = Spree.t(:unsuccessfully_updated, resource: Spree.t(:payments))
+        end
+
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/payment_vattanac_queriers_controller.rb

@@ -0,0 +1,38 @@
+module Spree
+  module Admin
+    class PaymentVattanacQueriersController < PaymentVattanacBaseController
+      include Spree::Backend::Callbacks
+
+      around_action :set_writing_role, only: %i[show]
+
+      def show
+        tran_status = @payment.payment_method.check_transaction(@payment)
+
+        if tran_status.success?
+          @payment.update_column(:gateway_status, true)
+          flash[:success] =
+            Spree.t('vpago.payments.payment_found_with_result', result: tran_status.json_response)
+        else
+          flash[:error] = Spree.t('vpago.payments.payment_not_found_with_error', error: tran_status.error_message)
+        end
+
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      rescue Faraday::TimeoutError, Faraday::ConnectionFailed => e
+        VpagoLogger.error(
+          label: 'Spree::Admin::PaymentVattanacQueriersController#show gateway_timeout',
+          data: { payment_number: @payment.number, error_class: e.class.name, error_message: e.message }
+        )
+        flash[:error] = Spree.t('vpago.payments.gateway_timeout')
+        redirect_to admin_order_payment_path(order_id: @payment.order.number, id: @payment.number)
+      end
+
+      private
+
+      def set_writing_role
+        ActiveRecord::Base.connected_to(role: :writing) do
+          yield if block_given?
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/vpago_payments_controller.rb

@@ -24,6 +24,12 @@ module Spree
     def processing
       @order = @payment.order
 
+      # Common, not an edge case: the gateway callback or the checkout page's transaction
+      # checker often completes the order before the browser lands here. Skipping this page
+      # also skips its Firebase listener, so success must post order_is_completed itself
+      # (render_success_script) or an embedding iframe modal never closes.
+      return redirect_to @payment.success_url, allow_other_host: true if @order.completed?
+
       VpagoLogger.log(label: 'Spree::VpagoPaymentsController#processing', data: vpago_log_context)
     end
 
@@ -60,6 +66,12 @@ module Spree
       else
         render json: { status: :pending }, status: :ok
       end
+    rescue Faraday::TimeoutError, Faraday::ConnectionFailed => e
+      VpagoLogger.error(
+        label: 'Spree::VpagoPaymentsController#check_transaction gateway_timeout',
+        data: vpago_log_context(error_class: e.class.name, error_message: e.message)
+      )
+      render json: { status: :pending }, status: :ok
     end
 
     # POST
@@ -146,9 +158,9 @@ module Spree
       raise ActiveRecord::RecordNotFound unless @payment.present?
     end
 
-    # frame-ancestors (set above) supersedes X-Frame-Options in modern
-    # browsers, but the default SAMEORIGIN header would still block legacy
-    # browsers from embedding these pages, so drop it for the iframe actions.
+    # These pages are embedded in iframes on many partner sites we don't
+    # enumerate, so framing is left unrestricted: no frame-ancestors policy, and
+    # Rails' default SAMEORIGIN header is dropped for the iframe actions.
     def allow_iframe_embedding
       response.headers.delete('X-Frame-Options')
     end

data/app/helpers/vpago/vpago_payments_helper.rb

@@ -13,6 +13,12 @@ module Vpago
       render partial: 'spree/vpago_payments/transaction_checker'
     end
 
+    # Host apps override success.html.erb; call this from every override so an
+    # embedding iframe modal still learns the order completed.
+    def render_success_script
+      render partial: 'spree/vpago_payments/success_script'
+    end
+
     # Each payment method may have their own additional processing script,
     # so we will look for the partial based on the payment method class name.
     #

data/app/models/vpago/payment_decorator.rb

@@ -109,10 +109,6 @@ module Vpago
       payment_method.type_vattanac_mini_app?
     end
 
-    def acleda_mini_app_payment?
-      payment_method.type_acleda_mini_app?
-    end
-
     def check_payment?
       payment_method.type_check?
     end

data/app/models/vpago/payment_method_decorator.rb

@@ -6,7 +6,6 @@ module Vpago
     TYPE_ACLEDA = 'Spree::Gateway::Acleda'.freeze
     TYPE_ACLEDA_V2 = 'Spree::Gateway::AcledaV2'.freeze
     TYPE_ACLEDA_MOBILE = 'Spree::Gateway::AcledaMobile'.freeze
-    TYPE_ACLEDA_MINI_APP = 'Spree::Gateway::AcledaMiniApp'.freeze
     TYPE_TRUE_MONEY = 'Spree::Gateway::TrueMoney'.freeze
     TYPE_VATTANAC = 'Spree::Gateway::Vattanac'.freeze
     TYPE_VATTANAC_MINI_APP = 'Spree::Gateway::VattanacMiniApp'.freeze
@@ -25,7 +24,6 @@ module Vpago
           Spree::PaymentMethod::TYPE_ACLEDA,
           Spree::PaymentMethod::TYPE_ACLEDA_V2,
           Spree::PaymentMethod::TYPE_ACLEDA_MOBILE,
-          Spree::PaymentMethod::TYPE_ACLEDA_MINI_APP,
           Spree::PaymentMethod::TYPE_VATTANAC,
           Spree::PaymentMethod::TYPE_VATTANAC_MINI_APP,
           Spree::PaymentMethod::TYPE_TRUE_MONEY,
@@ -82,6 +80,10 @@ module Vpago
         ::Vpago::Acleda::PaymentRequestUpdater
       elsif type_acleda_mobile?
         ::Vpago::AcledaMobile::PaymentRequestUpdater
+      elsif type_acleda_v2?
+        ::Vpago::AcledaV2::PaymentRequestUpdater
+      elsif type_vattanac?
+        ::Vpago::Vattanac::PaymentRequestUpdater
       end
     end
 
@@ -97,10 +99,6 @@ module Vpago
       type == Spree::PaymentMethod::TYPE_ACLEDA_V2
     end
 
-    def type_acleda_mini_app?
-      type == Spree::PaymentMethod::TYPE_ACLEDA_MINI_APP
-    end
-
     def type_payway?
       type == Spree::PaymentMethod::TYPE_PAYWAY
     end
@@ -113,6 +111,10 @@ module Vpago
       type == Spree::PaymentMethod::TYPE_WINGSDK
     end
 
+    def type_vattanac?
+      type == Spree::PaymentMethod::TYPE_VATTANAC
+    end
+
     def type_vattanac_mini_app?
       type == Spree::PaymentMethod::TYPE_VATTANAC_MINI_APP
     end

data/app/serializers/spree/v2/storefront/payment_method_serializer_decorator.rb

@@ -14,6 +14,12 @@ module Spree
 
             pref.blank? || pref[:payment_option].blank? ? payment_method.method_type : pref[:payment_option]
           end
+
+          # Overried the payment method type to show all payment methods as one list on App.
+          # Controlled by ENV["PAYMENT_METHOD_VIEW"] = "split" | "join" (default: "join").
+          base.attribute :type do |payment_method|
+            ENV.fetch('PAYMENT_METHOD_VIEW', 'join') == 'split' ? payment_method.type : 'payment_method'
+          end
         end
       end
     end

data/app/views/spree/admin/payments/source_views/_acleda_v2.html.erb

@@ -1,5 +1,5 @@
 <%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
     payment: payment,
-    check_status_url: '',
-    heal_payment_url: '',
+    check_status_url: admin_payment_acleda_v2_querier_path(payment),
+    heal_payment_url: admin_payment_acleda_v2_checker_path(payment),
     manual_update_payment_url: '' %>

data/app/views/spree/admin/payments/source_views/_vattanac.html.erb

@@ -1,6 +1,6 @@
 <%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
-    payment: payment, 
-    check_status_url: '',
-    heal_payment_url: '',
+    payment: payment,
+    check_status_url: admin_payment_vattanac_querier_path(payment),
+    heal_payment_url: admin_payment_vattanac_checker_path(payment),
     manual_update_payment_url: ''
 %>

data/app/views/spree/vpago_payments/_success_script.html.erb

@@ -0,0 +1,7 @@
+<script>
+  // processing redirects here without rendering once the order is complete, so its
+  // Firebase listener never posts this. success only renders for completed orders.
+  if (window.parent !== window) {
+    window.parent.postMessage("order_is_completed", "*");
+  }
+</script>

data/app/views/spree/vpago_payments/success.html.erb

@@ -1,3 +1,5 @@
 <h1>
   Success
 </h1>
+
+<%= render_success_script %>

data/config/locales/en.yml

@@ -35,5 +35,6 @@ en:
         failed_require_updated_reason: "You must provide update reason"
         payment_found_with_result: "Found payment with result: %{result}"
         payment_not_found_with_error: "Payment not found with error: %{error}"
+        gateway_timeout: "The payment gateway did not respond in time. Please try again shortly."
         query_status: "Query payment status"
         confirm_manual_update: "Are you sure to update this order to complete"

data/config/locales/km.yml

@@ -31,5 +31,6 @@ spree:
       failed_require_updated_reason: "អ្នកត្រូវតែផ្តល់ហេតុផល"
       payment_found_with_result: "រកឃើញការទូទាត់ជាមួយលទ្ធផល %{result}"
       payment_not_found_with_error: "ការទូទាត់មិនត្រូវបានរកឃើញដោយកំហុស: %{error}"
+      gateway_timeout: "ផ្នែកទូទាត់មិនបានឆ្លើយតបទាន់ពេលទេ។ សូមព្យាយាមម្តងទៀតក្នុងពេលឆាប់ៗនេះ។"
       query_status: "សួរស្ថានភាពបង់ប្រាក់"
       confirm_manual_update: "តើអ្នកប្រាកដជាធ្វើបច្ចុប្បន្នភាពការបញ្ជាទិញនេះដើម្បីបញ្ចប់"

data/config/routes.rb

@@ -17,13 +17,6 @@ Spree::Core::Engine.add_routes do
     resources :transactions, only: [:show]
   end
 
-  # ACLEDA Mini App session init (ACLEDA Mini App Integration Spec, Step 01).
-  # ACLEDA calls POST /miniapp/acleda with { phone, first_name, last_name }
-  # and receives a session-based miniAppUrl.
-  namespace :miniapp do
-    resources :acleda, only: [:create], controller: 'acledas'
-  end
-
   resource :vpago_payments do
     collection do
       get :checkout
@@ -80,6 +73,12 @@ Spree::Core::Engine.add_routes do
     resources :payment_payway_checkers
     resources :payment_payway_markers
 
+    resources :payment_acleda_v2_queriers, only: [:show]
+    resources :payment_acleda_v2_checkers, only: [:update]
+
+    resources :payment_vattanac_queriers, only: [:show]
+    resources :payment_vattanac_checkers, only: [:update]
+
     resources :products do
       resources :payout_profile_products
     end

data/lib/spree_vpago/engine.rb

@@ -23,7 +23,6 @@ module SpreeVpago
         Spree::Gateway::Acleda,
         Spree::Gateway::AcledaV2,
         Spree::Gateway::AcledaMobile,
-        Spree::Gateway::AcledaMiniApp,
         Spree::Gateway::Vattanac,
         Spree::Gateway::VattanacMiniApp,
         Spree::Gateway::TrueMoney,

data/lib/spree_vpago/version.rb

@@ -1,7 +1,7 @@
 module SpreeVpago
   module_function
 
-  VERSION = '2.4.0-pre2'.freeze
+  VERSION = '2.4.0-pre3'.freeze
 
   def version
     Gem::Version.new VERSION

data/lib/vpago/acleda_v2/payment_request_updater.rb

@@ -0,0 +1,54 @@
+module Vpago
+  module AcledaV2
+    class PaymentRequestUpdater < ::Vpago::PaymentRequestUpdater
+      def call
+        return if @payment.order.paid?
+
+        if items_eligible?
+          process_payment_status
+        else
+          mark_items_as_ineligible
+        end
+      end
+
+      private
+
+      def process_payment_status
+        checker = @payment.payment_method.check_transaction(@payment)
+
+        if checker.success?
+          mark_payment_as_success
+        elsif checker.failed? && !ignore_on_failed?
+          mark_payment_as_failed(checker.error_message)
+        end
+      rescue Faraday::TimeoutError, Faraday::ConnectionFailed => e
+        VpagoLogger.error(
+          label: 'Vpago::AcledaV2::PaymentRequestUpdater#process_payment_status gateway_timeout',
+          data: { payment_number: @payment.number, error_class: e.class.name, error_message: e.message }
+        )
+      end
+
+      def items_eligible?
+        @payment&.order&.line_items&.all?(&:sufficient_stock?) == true # rubocop:disable Style/SafeNavigationChainLength
+      end
+
+      def mark_items_as_ineligible
+        @error_message = 'Items are not eligible due to insufficient stock'
+        marker_options = @options.merge(status: false, description: @error_message)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+
+      def mark_payment_as_success
+        @error_message = nil
+        marker_options = @options.merge(status: true, description: nil)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+
+      def mark_payment_as_failed(error_message)
+        @error_message = error_message
+        marker_options = @options.merge(status: false, description: @error_message)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+    end
+  end
+end

data/lib/vpago/http_timeouts.rb

@@ -0,0 +1,6 @@
+module Vpago
+  module HttpTimeouts
+    OPEN_TIMEOUT = 5
+    TIMEOUT = 15
+  end
+end

data/lib/vpago/payway_v2/payment_request_updater.rb

@@ -28,6 +28,11 @@ module Vpago
         elsif checker.failed?
           mark_payment_as_failed(checker.error_message)
         end
+      rescue Faraday::TimeoutError, Faraday::ConnectionFailed => e
+        VpagoLogger.error(
+          label: 'Vpago::PaywayV2::PaymentRequestUpdater#process_payment_status gateway_timeout',
+          data: { payment_number: @payment.number, error_class: e.class.name, error_message: e.message }
+        )
       end
 
       def mark_payment_as_success(checker)

data/lib/vpago/payway_v2/transaction_status.rb

@@ -37,6 +37,8 @@ module Vpago
       def check_remote_status
         conn = Faraday::Connection.new do |faraday|
           faraday.request :url_encoded
+          faraday.options.open_timeout = Vpago::HttpTimeouts::OPEN_TIMEOUT
+          faraday.options.timeout = Vpago::HttpTimeouts::TIMEOUT
         end
 
         data = {

data/lib/vpago/payway_v2/transaction_status_v2.rb

@@ -52,6 +52,8 @@ module Vpago
       def check_remote_status
         conn = Faraday::Connection.new do |faraday|
           faraday.request :url_encoded
+          faraday.options.open_timeout = Vpago::HttpTimeouts::OPEN_TIMEOUT
+          faraday.options.timeout = Vpago::HttpTimeouts::TIMEOUT
         end
 
         data = {

data/lib/vpago/true_money/base.rb

@@ -100,7 +100,7 @@ module Vpago
       end
 
       def fetch_access_token
-        response = Faraday.post(
+        response = Faraday.new(request: { open_timeout: Vpago::HttpTimeouts::OPEN_TIMEOUT, timeout: Vpago::HttpTimeouts::TIMEOUT }).post(
           access_token_url,
           URI.encode_www_form(
             grant_type: 'client_credentials',

data/lib/vpago/true_money/transaction_status.rb

@@ -2,7 +2,7 @@ module Vpago
   module TrueMoney
     class TransactionStatus < Base
       def call
-        @response = Faraday.get(check_transaction_url, nil, default_headers)
+        @response = Faraday.new(request: { open_timeout: Vpago::HttpTimeouts::OPEN_TIMEOUT, timeout: Vpago::HttpTimeouts::TIMEOUT }).get(check_transaction_url, nil, default_headers)
       end
 
       def success?

data/lib/vpago/vattanac/base.rb

@@ -70,7 +70,8 @@ module Vpago
       private
 
       def fetch_access_token
-        response = Faraday.post(access_token_url, { username: username, password: password }.to_json, { 'Content-Type' => CONTENT_TYPE_JSON })
+        response = Faraday.new(request: { open_timeout: Vpago::HttpTimeouts::OPEN_TIMEOUT, timeout: Vpago::HttpTimeouts::TIMEOUT })
+                          .post(access_token_url, { username: username, password: password }.to_json, { 'Content-Type' => CONTENT_TYPE_JSON })
 
         raise "Access Token Error: #{response.status} - #{response.body}" unless response.success?
 
@@ -78,7 +79,7 @@ module Vpago
       end
 
       def post(url, body)
-        response = Faraday.post(url, body.to_json, default_headers)
+        response = Faraday.new(request: { open_timeout: Vpago::HttpTimeouts::OPEN_TIMEOUT, timeout: Vpago::HttpTimeouts::TIMEOUT }).post(url, body.to_json, default_headers)
         parse_json(response.body)
       end
     end

data/lib/vpago/vattanac/payment_request_updater.rb

@@ -0,0 +1,54 @@
+module Vpago
+  module Vattanac
+    class PaymentRequestUpdater < ::Vpago::PaymentRequestUpdater
+      def call
+        return if @payment.order.paid?
+
+        if items_eligible?
+          process_payment_status
+        else
+          mark_items_as_ineligible
+        end
+      end
+
+      private
+
+      def process_payment_status
+        checker = @payment.payment_method.check_transaction(@payment)
+
+        if checker.success?
+          mark_payment_as_success
+        elsif checker.failed? && !ignore_on_failed?
+          mark_payment_as_failed(checker.error_message)
+        end
+      rescue Faraday::TimeoutError, Faraday::ConnectionFailed => e
+        VpagoLogger.error(
+          label: 'Vpago::Vattanac::PaymentRequestUpdater#process_payment_status gateway_timeout',
+          data: { payment_number: @payment.number, error_class: e.class.name, error_message: e.message }
+        )
+      end
+
+      def items_eligible?
+        @payment&.order&.line_items&.all?(&:sufficient_stock?) == true # rubocop:disable Style/SafeNavigationChainLength
+      end
+
+      def mark_items_as_ineligible
+        @error_message = 'Items are not eligible due to insufficient stock'
+        marker_options = @options.merge(status: false, description: @error_message)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+
+      def mark_payment_as_success
+        @error_message = nil
+        marker_options = @options.merge(status: true, description: nil)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+
+      def mark_payment_as_failed(error_message)
+        @error_message = error_message
+        marker_options = @options.merge(status: false, description: @error_message)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+    end
+  end
+end

data/lib/vpago/vattanac/transaction_status.rb

@@ -13,6 +13,22 @@ module Vpago
         @response.dig('data', 'status') == 'SUCCESS'
       end
 
+      def error_message
+        @response.dig('msgEntity', 'message') || @response.dig('data', 'message') || 'Unknown error'
+      end
+
+      # msgEntity.code is the API-envelope result code ("0" = call succeeded; check
+      # data.status for the actual transaction state). Any other code is a gateway-level
+      # error with no transaction data (e.g. "03" / "Transaction not found") and is
+      # treated as terminal failure.
+      def failed?
+        @response.dig('msgEntity', 'code').to_s != '0'
+      end
+
+      def pending?
+        !success? && !failed?
+      end
+
       private
 
       def payload
@@ -20,4 +36,4 @@ module Vpago
       end
     end
   end
-end
+end

data/spree_vpago.gemspec

@@ -26,7 +26,7 @@ Gem::Specification.new do |s|
   s.add_dependency 'spree_api', spree_version
   s.add_dependency 'spree_backend', spree_version
   s.add_dependency 'spree_core', spree_version
-  s.add_dependency 'spree_extension'
+  s.add_dependency 'spree_extension', '< 1.0'
   s.add_dependency 'spree_multi_vendor', '>= 2.4.1'
 
   s.metadata['rubygems_mfa_required'] = 'true'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_vpago
 version: !ruby/object:Gem::Version
-  version: 2.4.0.pre.pre2
+  version: 2.4.0.pre.pre3
 platform: ruby
 authors:
 - You
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-17 00:00:00.000000000 Z
+date: 2026-09-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -84,16 +84,16 @@ dependencies:
   name: spree_extension
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '1.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '1.0'
 - !ruby/object:Gem::Dependency
   name: spree_multi_vendor
   requirement: !ruby/object:Gem::Requirement
@@ -151,11 +151,17 @@ files:
 - app/assets/javascripts/vpago/vpago_payments/user_informers/firebase.js
 - app/controllers/.gitkeep
 - app/controllers/spree/acleda_redirects_controller.rb
+- app/controllers/spree/admin/payment_acleda_v2_base_controller.rb
+- app/controllers/spree/admin/payment_acleda_v2_checkers_controller.rb
+- app/controllers/spree/admin/payment_acleda_v2_queriers_controller.rb
 - app/controllers/spree/admin/payment_methods_controller_decorator.rb
 - app/controllers/spree/admin/payment_payway_base_controller.rb
 - app/controllers/spree/admin/payment_payway_checkers_controller.rb
 - app/controllers/spree/admin/payment_payway_markers_controller.rb
 - app/controllers/spree/admin/payment_payway_queriers_controller.rb
+- app/controllers/spree/admin/payment_vattanac_base_controller.rb
+- app/controllers/spree/admin/payment_vattanac_checkers_controller.rb
+- app/controllers/spree/admin/payment_vattanac_queriers_controller.rb
 - app/controllers/spree/admin/payment_wing_sdk_base_controller.rb
 - app/controllers/spree/admin/payment_wing_sdk_checkers_controller.rb
 - app/controllers/spree/admin/payment_wing_sdk_markers_controller.rb
@@ -167,7 +173,6 @@ files:
 - app/controllers/spree/admin/payouts_controller.rb
 - app/controllers/spree/admin/suspicious_orders_controller.rb
 - app/controllers/spree/api/v2/storefront/checkout_controller_decorator.rb
-- app/controllers/spree/miniapp/acledas_controller.rb
 - app/controllers/spree/payway_card_popups_controller.rb
 - app/controllers/spree/payway_results_controller.rb
 - app/controllers/spree/payway_v2_card_popups_controller.rb
@@ -193,7 +198,6 @@ files:
 - app/models/.gitkeep
 - app/models/concerns/vpago/payoutable.rb
 - app/models/spree/gateway/acleda.rb
-- app/models/spree/gateway/acleda_mini_app.rb
 - app/models/spree/gateway/acleda_mobile.rb
 - app/models/spree/gateway/acleda_v2.rb
 - app/models/spree/gateway/payway.rb
@@ -258,7 +262,6 @@ files:
 - app/serializers/spree/v2/storefront/payment_serializer_decorator.rb
 - app/serializers/spree/v2/storefront/vpago_payment_source_serializer.rb
 - app/services/.gitkeep
-- app/services/vpago/acleda_mini_app/session/create.rb
 - app/services/vpago/aes_encrypter.rb
 - app/services/vpago/payment_finder.rb
 - app/services/vpago/payment_processable.rb
@@ -286,7 +289,6 @@ files:
 - app/views/spree/admin/payments/source_forms/_payment_payway.html.erb
 - app/views/spree/admin/payments/source_forms/_payway_v2.html.erb
 - app/views/spree/admin/payments/source_views/_acleda.html.erb
-- app/views/spree/admin/payments/source_views/_acleda_mini_app.html.erb
 - app/views/spree/admin/payments/source_views/_acleda_mobile.html.erb
 - app/views/spree/admin/payments/source_views/_acleda_v2.html.erb
 - app/views/spree/admin/payments/source_views/_payment_payway.html.erb
@@ -342,9 +344,9 @@ files:
 - app/views/spree/payway_results/success.html.erb
 - app/views/spree/payway_v2_card_popups/_form.html.erb
 - app/views/spree/payway_v2_card_popups/show.html.erb
+- app/views/spree/vpago_payments/_success_script.html.erb
 - app/views/spree/vpago_payments/_transaction_checker.html.erb
 - app/views/spree/vpago_payments/checkout.html.erb
-- app/views/spree/vpago_payments/forms/spree/gateway/_acleda_mini_app.html.erb
 - app/views/spree/vpago_payments/forms/spree/gateway/_acleda_v2.html.erb
 - app/views/spree/vpago_payments/forms/spree/gateway/_payway_v2.html.erb
 - app/views/spree/vpago_payments/forms/spree/gateway/_true_money.html.erb
@@ -396,7 +398,6 @@ files:
 - lib/vpago/acleda/deeplink_checkout.rb
 - lib/vpago/acleda/payment_request_updater.rb
 - lib/vpago/acleda/transaction_status.rb
-- lib/vpago/acleda_mini_app/checkout.rb
 - lib/vpago/acleda_mobile/base.rb
 - lib/vpago/acleda_mobile/callback_validator.php
 - lib/vpago/acleda_mobile/callback_validator.rb
@@ -406,7 +407,9 @@ files:
 - lib/vpago/acleda_mobile/transaction_status.rb
 - lib/vpago/acleda_v2/base.rb
 - lib/vpago/acleda_v2/checkout.rb
+- lib/vpago/acleda_v2/payment_request_updater.rb
 - lib/vpago/acleda_v2/transaction_status.rb
+- lib/vpago/http_timeouts.rb
 - lib/vpago/payment_amount_calculator.rb
 - lib/vpago/payment_request_updater.rb
 - lib/vpago/payment_status_marker.rb
@@ -430,6 +433,7 @@ files:
 - lib/vpago/true_money/transaction_status.rb
 - lib/vpago/vattanac/base.rb
 - lib/vpago/vattanac/checkout.rb
+- lib/vpago/vattanac/payment_request_updater.rb
 - lib/vpago/vattanac/transaction_status.rb
 - lib/vpago/vattanac_mini_app/base.rb
 - lib/vpago/vattanac_mini_app/checkout.rb

data/app/controllers/spree/miniapp/acledas_controller.rb

@@ -1,29 +0,0 @@
-module Spree
-  module Miniapp
-    # Partner Session Initialization API (ACLEDA Mini App Integration Spec, Step 01).
-    # ACLEDA (server-to-server) POSTs { phone, first_name, last_name }; we return a
-    # session-based miniAppUrl for ACLEDA to open in the WebView.
-    class AcledasController < Spree::Api::V2::BaseController
-      # POST /miniapp/acleda
-      def create
-        result = ::Vpago::AcledaMiniApp::Session::Create.call(
-          phone: session_params[:phone],
-          first_name: session_params[:first_name],
-          last_name: session_params[:last_name]
-        )
-
-        if result.success?
-          render json: { message: 'SUCCESS', miniAppUrl: result.value[:mini_app_url] }
-        else
-          render json: { message: 'FAILED', error: result.error.to_s }, status: :unprocessable_entity
-        end
-      end
-
-      private
-
-      def session_params
-        params.permit(:phone, :first_name, :last_name)
-      end
-    end
-  end
-end

data/app/models/spree/gateway/acleda_mini_app.rb

@@ -1,20 +0,0 @@
-module Spree
-  # ACLEDA Mini App payment method.
-  #
-  # Reuses the ACLEDA V2 integration in deeplink mode: the deeplink produced by
-  # ACLEDA's openSessionV2 API is handed to the ACLEDA super-app through the
-  # `acledaJSBridge` (startPayment) instead of redirecting the page. Server-side
-  # verification reuses AcledaV2's #check_transaction (getTxnStatus).
-  class Gateway::AcledaMiniApp < Gateway::AcledaV2
-    # override: partial to render in admin / checkout form lookup
-    def method_type
-      'acleda_mini_app'
-    end
-
-    # The mini app always uses the deeplink + JS bridge, so admins don't need to
-    # set the ACLEDA V2 mode.
-    def deeplink?
-      true
-    end
-  end
-end

data/app/services/vpago/acleda_mini_app/session/create.rb

@@ -1,99 +0,0 @@
-module Vpago
-  module AcledaMiniApp
-    module Session
-      # Partner Session Initialization (ACLEDA Mini App Integration Spec, Step 01).
-      #
-      # ACLEDA calls POST /miniapp/acleda with { phone, first_name, last_name }.
-      # We find or create the customer (tagged with the acleda_bank identity),
-      # mint a session JWT, and return a session-based miniAppUrl for ACLEDA to
-      # open in the WebView. The generic session_id OAuth grant validates the JWT
-      # when the WebView later authenticates.
-      class Create
-        prepend Spree::ServiceModule::Base
-
-        def call(phone: nil, first_name: nil, last_name: nil)
-          return failure(nil, 'phone is required') if phone.blank?
-
-          @phone = phone
-          @first_name = first_name
-          @last_name = last_name
-
-          user = find_or_create_user
-          return failure(user, 'user creation failed') if user.nil? || !user.persisted?
-
-          success(mini_app_url: mini_app_url(user))
-        end
-
-        private
-
-        attr_reader :phone, :first_name, :last_name
-
-        def find_or_create_user
-          identity = acleda_identity
-
-          # Returning customer: the ACLEDA identity already points at a user.
-          return identity.user if identity.persisted?
-
-          # New to ACLEDA: reuse a customer matched by phone, otherwise build one,
-          # then tag them with the acleda_bank identity so the lookup above hits
-          # next time.
-          user = find_existing_user || build_user
-          identity.name = full_name
-          user.user_identity_providers << identity
-          user.save
-
-          user
-        end
-
-        def acleda_identity
-          SpreeCmCommissioner::UserIdentityProvider.acleda_bank.find_or_initialize_by(sub: phone)
-        end
-
-        def find_existing_user
-          return if intel_phone.blank?
-
-          Spree::User.by_non_tenant.find_by(intel_phone_number: intel_phone)
-        end
-
-        def build_user
-          Spree::User.new(
-            first_name: first_name,
-            last_name: last_name,
-            phone_number: phone,
-            intel_phone_number: intel_phone,
-            password: SecureRandom.base64(16),
-            confirmed_at: Time.zone.now
-          )
-        end
-
-        def mini_app_url(user)
-          # A JWT signed with the user's secure_token. Passed as `session_key` (not
-          # `session_id`) so the OAuth grant routes it to the ACLEDA authenticator,
-          # which enforces the signature.
-          session_key = SpreeCmCommissioner::UserSessionJwtToken.encode(
-            { user_id: user.id },
-            user.reload.secure_token
-          )
-
-          "#{Spree::Store.default.formatted_url}/mini_app/acleda?session_key=#{session_key}&ds=#{CGI.escape(disable_services)}"
-        end
-
-        def full_name
-          [first_name, last_name].compact.join(' ').presence
-        end
-
-        def intel_phone
-          return @intel_phone if defined?(@intel_phone)
-
-          @intel_phone = SpreeCmCommissioner::PhoneNumberParser.call(phone_number: phone).intel_phone_number
-        end
-
-        # Services to disable in the mini app storefront. Configurable per ACLEDA's
-        # requirement; defaults to none.
-        def disable_services
-          ENV.fetch('ACLEDA_MINI_APP_DISABLE_SERVICES', '')
-        end
-      end
-    end
-  end
-end

data/app/views/spree/admin/payments/source_views/_acleda_mini_app.html.erb

@@ -1,6 +0,0 @@
-<%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
-    payment: payment,
-    check_status_url: '',
-    heal_payment_url: '',
-    manual_update_payment_url: ''
-%>

data/app/views/spree/vpago_payments/forms/spree/gateway/_acleda_mini_app.html.erb

@@ -1,93 +0,0 @@
-<%
-  opr_device = request.user_agent.to_s.downcase.match?(/iphone|ipad|ipod/) ? 'ios' : 'android'
-  checkout = ::Vpago::AcledaMiniApp::Checkout.new(@payment, { platform: 'app', opr_device: opr_device })
-
-  begin
-    checkout.call
-  rescue => e
-    Rails.logger.error("Acleda Mini App checkout.call failed: #{e.message}")
-  end
-%>
-
-<p id="unsupported-message"
-   style="margin-top: 10px; font-weight: bold; color: red; display: none;">
-</p>
-
-<% if checkout.failed? %>
-  <script>
-    console.error("[Vpago] Acleda Mini App checkout error: <%= j checkout.error_message.to_s %>");
-    document.addEventListener("DOMContentLoaded", () => {
-      const loadingContainer = document.getElementById('vpago_loading_container');
-      if (loadingContainer) {
-        loadingContainer.textContent = "We couldn't start your payment. Please go back and try again.";
-      }
-    });
-  </script>
-<% else %>
-  <script>
-    // ACLEDA JS bridge (unified iOS + Android). Defined before use so it is
-    // available when the native layer injects its handlers.
-    window.acledaJSBridge = window.acledaJSBridge || {
-      call: function (action, data = {}) {
-        const payload = { action, data };
-
-        // iOS WKWebView
-        if (
-          window.webkit &&
-          window.webkit.messageHandlers &&
-          window.webkit.messageHandlers.acledaIOSJSBridge
-        ) {
-          window.webkit.messageHandlers.acledaIOSJSBridge.postMessage(payload);
-          return true;
-        }
-
-        // Android WebView
-        if (
-          window.acledaAndroidJSBridge &&
-          typeof window.acledaAndroidJSBridge.postMessage === "function"
-        ) {
-          window.acledaAndroidJSBridge.postMessage(JSON.stringify(payload));
-          return true;
-        }
-
-        console.warn("[acledaJSBridge] Native bridge not found");
-        return false;
-      }
-    };
-
-    function showRedirectContainer(buttonLabel, onClick) {
-      const loadingContainer = document.getElementById('vpago_loading_container');
-      const redirectContainer = document.getElementById('vpago_redirect_container');
-      const redirectButton = document.getElementById('vpago_redirect_button');
-
-      redirectButton.textContent = buttonLabel;
-      redirectButton.addEventListener('click', onClick);
-
-      loadingContainer.style.display = 'none';
-      redirectContainer.style.removeProperty('display');
-    }
-
-    document.addEventListener("DOMContentLoaded", () => {
-      const acledaDeeplink = "<%= raw checkout.acleda_deeplink %>";
-      const processingUrl = "<%= raw @payment.processing_url %>";
-
-      // Native -> JS after payment completes. Primary completion signal; the
-      // transaction checker polling is the fallback.
-      window.onPaymentResult = function (result) {
-        console.log("[acledaJSBridge] Payment result:", result);
-        // result.batchId, result.status = "success" | "failed" | "cancelled"
-        window.location.href = processingUrl;
-      };
-
-      const startPayment = () => window.acledaJSBridge.call("startPayment", { acleda_deeplink: acledaDeeplink });
-
-      if (startPayment()) {
-        showRedirectContainer("Continue", startPayment);
-      } else {
-        const unsupported = document.getElementById('unsupported-message');
-        unsupported.style.display = 'block';
-        unsupported.innerText = 'Unsupported environment';
-      }
-    });
-  </script>
-<% end %>

data/lib/vpago/acleda_mini_app/checkout.rb

@@ -1,23 +0,0 @@
-module Vpago
-  module AcledaMiniApp
-    # ACLEDA Mini App checkout. Reuses ACLEDA V2's openSessionV2 flow to obtain a
-    # deeplink, which is passed to the ACLEDA super-app via the acledaJSBridge
-    # (startPayment) instead of redirecting the page.
-    class Checkout < Vpago::AcledaV2::Checkout
-      # The mini app always uses the deeplink + JS bridge, regardless of the
-      # gateway's configured mode.
-      def deeplink?
-        true
-      end
-
-      # The deeplink string handed to
-      #   acledaJSBridge.call('startPayment', { acleda_deeplink: ... })
-      # Ensures openSessionV2 has run (persisting paymentTokenid for later
-      # getTxnStatus verification) before returning the deeplinkUrl.
-      def acleda_deeplink
-        call if @response.nil?
-        deeplink_url
-      end
-    end
-  end
-end