spree_vpago 2.4.0.pre.pre2 → 2.4.0.pre.pre4

data/app/services/vpago/payment_finder.rb

@@ -19,6 +19,13 @@ module Vpago
         payment = Spree::Payment.find_by!(number: payload['paymentId'])
         payment.update(transaction_response: payload)
         payment
+      elsif wing_mini_app_callback?
+        payment = Spree::Payment.find_by!(number: params_hash[:orderRef])
+        verifier = Vpago::WingMiniApp::WebhookVerifier.new(params_hash, payment)
+        raise "Wing Mini App webhook: verification failed for payment #{payment.number}" unless verifier.valid?
+
+        payment.update(transaction_response: params_hash)
+        payment
       elsif acleda_v2_callback?
         # ACLEDA V2's static portal callback echoes back _transactionid, which is
         # the payment number we sent as transactionID/txid at openSessionV2.
@@ -42,5 +49,9 @@ module Vpago
     def acleda_v2_callback?
       params_hash[:_paymenttokenid].present?
     end
+
+    def wing_mini_app_callback?
+      params_hash[:orderRef].present? && params_hash[:secretKey].present?
+    end
   end
 end

data/app/services/vpago/wing_mini_app/session/create.rb

@@ -0,0 +1,55 @@
+module Vpago
+  module WingMiniApp
+    module Session
+      # Wing Mini App session init (getProfile). Same gates as ACLEDA, but the trust comes
+      # from a profile Wing signed and handed to the browser, not from a server-to-server
+      # call — so there is no key to name the caller with, only the signature to check.
+      class Create
+        prepend Spree::ServiceModule::Base
+
+        def call(profile:, gate:)
+          @gate = gate
+
+          return failure({ status: :unauthorized }, 'missing or unknown api key') unless gate.api_key_accepted?
+          return failure({ status: :forbidden }, 'address not allowed') unless gate.address_allowed?
+
+          verification = SpreeCmCommissioner::WingMiniApp::ProfileVerifier.call(profile: profile)
+          return failure(nil, verification.error) unless verification.success?
+
+          # After the signature, never before: a trip here is correctly signed traffic flooding us.
+          return failure({ status: :too_many_requests }, 'too many requests') if throttled?(profile)
+
+          user_result = SpreeCmCommissioner::WingMiniApp::FindOrCreateUser.call(profile: profile, gate: gate)
+          return failure(user_result.value, user_result.error) unless user_result.success?
+
+          success(mini_app_url: mini_app_url(user_result.value[:user]))
+        end
+
+        private
+
+        attr_reader :gate
+
+        def throttled?(profile)
+          gate.session_exceeded?(phone: intel_phone(profile[:phone] || profile['phone']))
+        end
+
+        def intel_phone(phone)
+          return nil if phone.blank?
+
+          SpreeCmCommissioner::PhoneNumberParser.call(phone_number: phone).intel_phone_number
+        end
+
+        def mini_app_url(user)
+          # A JWT signed with the user's secure_token. Passed as `wing_session_key`
+          # so the OAuth grant routes it to the Wing authenticator.
+          session_key = SpreeCmCommissioner::UserSessionJwtToken.encode(
+            { user_id: user.id },
+            user.reload.secure_token
+          )
+
+          "#{Spree::Store.default.formatted_url}/mini_app/wing?wing_session_key=#{session_key}"
+        end
+      end
+    end
+  end
+end

data/app/views/layouts/wing_mini_app.html.erb

@@ -0,0 +1,20 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Wing</title>
+
+  <%= csrf_meta_tags %>
+  <%= csp_meta_tag %>
+
+  <%= yield :head %>
+
+  <%= javascript_include_tag "vpago/wing_mini_app/web_jsbridge.bundle" %>
+  <%= javascript_include_tag "vpago/wing_mini_app/login" %>
+</head>
+
+<body>
+  <%= yield %>
+</body>
+</html>

data/app/views/spree/admin/payments/source_views/_acleda_v2.html.erb

@@ -1,5 +1,5 @@
 <%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
     payment: payment,
-    check_status_url: '',
-    heal_payment_url: '',
+    check_status_url: admin_payment_acleda_v2_querier_path(payment),
+    heal_payment_url: admin_payment_acleda_v2_checker_path(payment),
     manual_update_payment_url: '' %>

data/app/views/spree/admin/payments/source_views/_vattanac.html.erb

@@ -1,6 +1,6 @@
 <%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
-    payment: payment, 
-    check_status_url: '',
-    heal_payment_url: '',
+    payment: payment,
+    check_status_url: admin_payment_vattanac_querier_path(payment),
+    heal_payment_url: admin_payment_vattanac_checker_path(payment),
     manual_update_payment_url: ''
 %>

data/app/views/spree/admin/payments/source_views/_wing_mini_app.html.erb

@@ -0,0 +1,6 @@
+<%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
+    payment: payment,
+    check_status_url: '',
+    heal_payment_url: '',
+    manual_update_payment_url: ''
+%>

data/app/views/spree/mini_app/wings/show.html.erb

@@ -0,0 +1,44 @@
+<style>
+  body {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    height: 100vh;
+    margin: 0;
+    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+  }
+
+  #wing-mini-app-loading {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    gap: 16px;
+  }
+
+  #wing-mini-app-spinner {
+    width: 32px;
+    height: 32px;
+    border: 3px solid #e0e0e0;
+    border-top-color: #6b46c1;
+    border-radius: 50%;
+    animation: wing-mini-app-spin 0.8s linear infinite;
+  }
+
+  @keyframes wing-mini-app-spin {
+    to { transform: rotate(360deg); }
+  }
+
+  #wing-mini-app-status {
+    color: #666;
+    font-size: 14px;
+  }
+
+  #wing-mini-app-status.wing-mini-app-error {
+    color: #c0392b;
+  }
+</style>
+
+<div id="wing-mini-app-loading">
+  <div id="wing-mini-app-spinner"></div>
+  <div id="wing-mini-app-status">Signing you in&hellip;</div>
+</div>

data/app/views/spree/vpago_payments/_success_script.html.erb

@@ -0,0 +1,7 @@
+<script>
+  // processing redirects here without rendering once the order is complete, so its
+  // Firebase listener never posts this. success only renders for completed orders.
+  if (window.parent !== window) {
+    window.parent.postMessage("order_is_completed", "*");
+  }
+</script>

data/app/views/spree/vpago_payments/forms/spree/gateway/_acleda_mini_app.html.erb

@@ -2,92 +2,93 @@
   opr_device = request.user_agent.to_s.downcase.match?(/iphone|ipad|ipod/) ? 'ios' : 'android'
   checkout = ::Vpago::AcledaMiniApp::Checkout.new(@payment, { platform: 'app', opr_device: opr_device })
 
-  begin
-    checkout.call
-  rescue => e
-    Rails.logger.error("Acleda Mini App checkout.call failed: #{e.message}")
-  end
+  # openSessionV2 runs here and persists paymentTokenid for the later getTxnStatus check.
+  # Rejected session or transport error both end with no deeplink — the one failure to render.
+  acleda_deeplink =
+    begin
+      checkout.acleda_deeplink
+    rescue StandardError => e
+      Rails.logger.error("[Acleda] openSessionV2 raised: #{e.message}")
+      nil
+    end
+
+  Rails.logger.error("[Acleda] openSessionV2 failed: #{checkout.error_message}") if checkout.failed?
 %>
 
-<p id="unsupported-message"
+<p id="acleda-message"
    style="margin-top: 10px; font-weight: bold; color: red; display: none;">
 </p>
 
-<% if checkout.failed? %>
-  <script>
-    console.error("[Vpago] Acleda Mini App checkout error: <%= j checkout.error_message.to_s %>");
-    document.addEventListener("DOMContentLoaded", () => {
-      const loadingContainer = document.getElementById('vpago_loading_container');
-      if (loadingContainer) {
-        loadingContainer.textContent = "We couldn't start your payment. Please go back and try again.";
-      }
-    });
-  </script>
-<% else %>
-  <script>
-    // ACLEDA JS bridge (unified iOS + Android). Defined before use so it is
-    // available when the native layer injects its handlers.
-    window.acledaJSBridge = window.acledaJSBridge || {
-      call: function (action, data = {}) {
-        const payload = { action, data };
-
-        // iOS WKWebView
-        if (
-          window.webkit &&
-          window.webkit.messageHandlers &&
-          window.webkit.messageHandlers.acledaIOSJSBridge
-        ) {
-          window.webkit.messageHandlers.acledaIOSJSBridge.postMessage(payload);
-          return true;
-        }
-
-        // Android WebView
-        if (
-          window.acledaAndroidJSBridge &&
-          typeof window.acledaAndroidJSBridge.postMessage === "function"
-        ) {
-          window.acledaAndroidJSBridge.postMessage(JSON.stringify(payload));
-          return true;
-        }
-
-        console.warn("[acledaJSBridge] Native bridge not found");
-        return false;
-      }
-    };
+<script>
+  function showRedirectContainer(buttonLabel, onClick) {
+    const loadingContainer = document.getElementById('vpago_loading_container');
+    const redirectContainer = document.getElementById('vpago_redirect_container');
+    const redirectButton = document.getElementById('vpago_redirect_button');
+
+    redirectButton.textContent = buttonLabel;
+    redirectButton.addEventListener('click', onClick);
+
+    loadingContainer.style.display = 'none';
+    redirectContainer.style.removeProperty('display');
+  }
 
-    function showRedirectContainer(buttonLabel, onClick) {
-      const loadingContainer = document.getElementById('vpago_loading_container');
-      const redirectContainer = document.getElementById('vpago_redirect_container');
-      const redirectButton = document.getElementById('vpago_redirect_button');
+  function showError(detail) {
+    console.error('[Acleda] ' + detail);
 
-      redirectButton.textContent = buttonLabel;
-      redirectButton.addEventListener('click', onClick);
+    const message = document.getElementById('acleda-message');
+    message.innerText = "We couldn't start your ACLEDA payment.";
+    message.style.display = 'block';
+  }
 
-      loadingContainer.style.display = 'none';
-      redirectContainer.style.removeProperty('display');
+  document.addEventListener('DOMContentLoaded', () => {
+    const acledaDeeplink = "<%= raw acleda_deeplink %>";
+
+    if (!acledaDeeplink) {
+      showError('openSessionV2 returned no deeplinkUrl');
+      return;
     }
 
-    document.addEventListener("DOMContentLoaded", () => {
-      const acledaDeeplink = "<%= raw checkout.acleda_deeplink %>";
-      const processingUrl = "<%= raw @payment.processing_url %>";
-
-      // Native -> JS after payment completes. Primary completion signal; the
-      // transaction checker polling is the fallback.
-      window.onPaymentResult = function (result) {
-        console.log("[acledaJSBridge] Payment result:", result);
-        // result.batchId, result.status = "success" | "failed" | "cancelled"
-        window.location.href = processingUrl;
-      };
-
-      const startPayment = () => window.acledaJSBridge.call("startPayment", { acleda_deeplink: acledaDeeplink });
-
-      if (startPayment()) {
-        showRedirectContainer("Continue", startPayment);
-      } else {
-        const unsupported = document.getElementById('unsupported-message');
-        unsupported.style.display = 'block';
-        unsupported.innerText = 'Unsupported environment';
-      }
-    });
-  </script>
-<% end %>
+    const framed = window.top !== window.self;
+    const android = <%= (opr_device == 'android').to_json %>;
+
+    // The spec's `acledaJSBridge` does not exist in ACLEDA's Mini App (`window.webkit` is
+    // undefined), so they proposed this deeplink instead. getTxnStatus still confirms the
+    // payment, already polled by check_transaction_periodically.js.
+
+    // The three below open the wallet for the customer, so they tap Pay once and not twice.
+    // Two rules shape them: ACLEDA's WebView only launches the app for a navigation on the
+    // *top* frame, and a cross-origin iframe may navigate the top only while a tap's
+    // activation lasts — which the button has and the automatic run does not.
+    const openWallet = () => {
+      window.top.location.href = acledaDeeplink;
+    };
+
+    // So ask our web app, the page embedding this one, which *is* the top frame. It obeys
+    // only inside a bank mini app: anywhere else nothing intercepts the link and the checkout
+    // would really travel to ACLEDA's Play Store listing. Silence is fine — the button still works.
+    const askWebAppToOpen = () => {
+      window.parent.postMessage({ code: 'open_deeplink', url: acledaDeeplink }, '*');
+    };
+
+    // iOS resolves the universal link before the request is made, so a throwaway frame opens
+    // it. Android cannot: ACLEDA serves `frame-ancestors` on the link, so Chromium refuses to
+    // frame it at all.
+    const openThroughHiddenFrame = () => {
+      const frame = document.createElement('iframe');
+
+      frame.style.display = 'none';
+      frame.src = acledaDeeplink;
+
+      document.body.appendChild(frame);
+      setTimeout(() => frame.remove(), 1000);
+    };
+
+    if (!framed) openWallet();
+    else if (android) askWebAppToOpen();
+    else openThroughHiddenFrame();
+
+    // Straight away, not on re-show: opening the bank app only backgrounds this page, and
+    // waiting for it to come back left the customer stuck on "Loading..." with no way out.
+    showRedirectContainer('Pay with ACLEDA', openWallet);
+  });
+</script>

data/app/views/spree/vpago_payments/forms/spree/gateway/_wing_mini_app.html.erb

@@ -0,0 +1,88 @@
+<% content_for :head do %>
+  <%= javascript_include_tag 'vpago/wing_mini_app/web_jsbridge.bundle', 'data-turbo-track': 'reload' %>
+<% end %>
+
+<% checkout = ::Vpago::WingMiniApp::Checkout.new(@payment) %>
+
+<p id="wing-message"
+   style="margin-top: 10px; font-weight: bold; color: red; display: none;">
+</p>
+
+<script>
+  function showRedirectContainer(buttonLabel, onClick) {
+    const loadingContainer = document.getElementById('vpago_loading_container');
+    const redirectContainer = document.getElementById('vpago_redirect_container');
+    const redirectButton = document.getElementById('vpago_redirect_button');
+
+    redirectButton.textContent = buttonLabel;
+    redirectButton.addEventListener('click', onClick);
+
+    loadingContainer.style.display = 'none';
+    redirectContainer.style.removeProperty('display');
+  }
+
+  function showError(detail) {
+    console.error('[Wing] ' + detail);
+
+    const message = document.getElementById('wing-message');
+    message.innerText = "We couldn't start your Wing payment.";
+    message.style.display = 'block';
+  }
+
+  document.addEventListener('DOMContentLoaded', () => {
+    const processingUrl = "<%= raw @payment.processing_url %>";
+    const bridge = window.WebJSBridge && window.WebJSBridge.$bridge;
+
+    if (!bridge || !bridge.isAvailable()) {
+      showError('This page only works inside the Wing app.');
+      return;
+    }
+
+    // Whichever signal lands first wins; the rest are then noise from the same
+    // payment. Also keeps the fallback button from replacing a page already leaving.
+    let handedOff = false;
+
+    const goToProcessing = () => {
+      if (handedOff) return;
+      handedOff = true;
+
+      window.location.replace(processingUrl);
+    };
+
+    const startPayment = () => {
+      // Screen only, both here and in the relay below. Settlement stays server to
+      // server, where WebhookVerifier checks Wing's webhook before anything is
+      // captured, and the processing page keeps polling until that lands — so it is
+      // the safe destination even for a payment that failed.
+      bridge
+        .callHandler('doPayment', <%= raw checkout.signed_payload.to_json %>)
+        .then(() => goToProcessing())
+        .catch((error) => showError('doPayment call failed: ' + error.message));
+    };
+
+    // Wing delivers native -> web calls by evaluating JS against the main frame,
+    // which is our web app embedding this page, not this document — so in a framed
+    // checkout it is mini_app/wing_bridge.js over there that hears getStatus and
+    // posts the bare code on. Sender identity, not origin: this page and the web app
+    // are deliberately on different hosts.
+    window.addEventListener('message', (event) => {
+      if (event.source !== window.parent) return;
+      if (!event.data || event.data.code !== 'wing_payment_status') return;
+
+      goToProcessing();
+    });
+
+    // The same signal for an unframed checkout, where this document *is* the main
+    // frame and Wing reaches it directly.
+    bridge.registerHandler('getStatus', () => goToProcessing());
+
+    startPayment();
+
+    setTimeout(() => {
+      if (document.visibilityState === 'hidden') return;
+      if (handedOff) return;
+
+      showRedirectContainer('Pay with Wing', startPayment);
+    }, 1000);
+  });
+</script>

data/app/views/spree/vpago_payments/processing_scripts/spree/gateway/_wing_mini_app.html.erb

@@ -0,0 +1,15 @@
+<script>
+  // Wing settles only on its webhook — #purchase reads nothing but the
+  // transaction_response PaymentFinder stores on callback, and there is no status
+  // API to ask instead. Processing before it lands paints "Payment process failed"
+  // over a payment already debited, so skip it; the webhook enqueues
+  // PaymentProcessorJob itself.
+  //
+  // The replacement holds because the real definition is a classic script in the
+  // layout's head while vpago_payment_controller only connects at domReady, leaving
+  // this inline script in between. Load either of those differently and it stops —
+  // the log is how you would notice.
+  window.requestProcessPayment = function () {
+    return Promise.resolve();
+  };
+</script>

data/app/views/spree/vpago_payments/success.html.erb

@@ -1,3 +1,5 @@
 <h1>
   Success
 </h1>
+
+<%= render_success_script %>

data/config/locales/en.yml

@@ -35,5 +35,6 @@ en:
         failed_require_updated_reason: "You must provide update reason"
         payment_found_with_result: "Found payment with result: %{result}"
         payment_not_found_with_error: "Payment not found with error: %{error}"
+        gateway_timeout: "The payment gateway did not respond in time. Please try again shortly."
         query_status: "Query payment status"
         confirm_manual_update: "Are you sure to update this order to complete"

data/config/locales/km.yml

@@ -31,5 +31,6 @@ spree:
       failed_require_updated_reason: "អ្នកត្រូវតែផ្តល់ហេតុផល"
       payment_found_with_result: "រកឃើញការទូទាត់ជាមួយលទ្ធផល %{result}"
       payment_not_found_with_error: "ការទូទាត់មិនត្រូវបានរកឃើញដោយកំហុស: %{error}"
+      gateway_timeout: "ផ្នែកទូទាត់មិនបានឆ្លើយតបទាន់ពេលទេ។ សូមព្យាយាមម្តងទៀតក្នុងពេលឆាប់ៗនេះ។"
       query_status: "សួរស្ថានភាពបង់ប្រាក់"
       confirm_manual_update: "តើអ្នកប្រាកដជាធ្វើបច្ចុប្បន្នភាពការបញ្ជាទិញនេះដើម្បីបញ្ចប់"

data/config/routes.rb

@@ -17,11 +17,18 @@ Spree::Core::Engine.add_routes do
     resources :transactions, only: [:show]
   end
 
-  # ACLEDA Mini App session init (ACLEDA Mini App Integration Spec, Step 01).
-  # ACLEDA calls POST /miniapp/acleda with { phone, first_name, last_name }
-  # and receives a session-based miniAppUrl.
-  namespace :miniapp do
+  namespace :mini_app do
+    # ACLEDA calls POST /mini_app/acleda with { phone, first_name, last_name }
+    # and receives a session-based miniAppUrl.
     resources :acleda, only: [:create], controller: 'acledas'
+
+    # Wing Mini App WebView entry. Wing opens GET /mini_app/wing cold and the page
+    # itself authenticates via getProfile.
+    resource :wing, only: %i[show create], controller: 'wings' do
+      # Wing's settlement webhook: #callback verifies the payment via PaymentFinder and
+      # queues PaymentProcessorJob to complete the order unless it is already paid.
+      post :callback, on: :collection
+    end
   end
 
   resource :vpago_payments do
@@ -80,6 +87,12 @@ Spree::Core::Engine.add_routes do
     resources :payment_payway_checkers
     resources :payment_payway_markers
 
+    resources :payment_acleda_v2_queriers, only: [:show]
+    resources :payment_acleda_v2_checkers, only: [:update]
+
+    resources :payment_vattanac_queriers, only: [:show]
+    resources :payment_vattanac_checkers, only: [:update]
+
     resources :products do
       resources :payout_profile_products
     end

data/lib/spree_vpago/engine.rb

@@ -26,6 +26,7 @@ module SpreeVpago
         Spree::Gateway::AcledaMiniApp,
         Spree::Gateway::Vattanac,
         Spree::Gateway::VattanacMiniApp,
+        Spree::Gateway::WingMiniApp,
         Spree::Gateway::TrueMoney,
         Spree::PaymentMethod::CashOn
       )

data/lib/spree_vpago/version.rb

@@ -1,7 +1,7 @@
 module SpreeVpago
   module_function
 
-  VERSION = '2.4.0-pre2'.freeze
+  VERSION = '2.4.0-pre4'.freeze
 
   def version
     Gem::Version.new VERSION

data/lib/vpago/acleda_mini_app/checkout.rb

@@ -1,19 +1,15 @@
 module Vpago
   module AcledaMiniApp
-    # ACLEDA Mini App checkout. Reuses ACLEDA V2's openSessionV2 flow to obtain a
-    # deeplink, which is passed to the ACLEDA super-app via the acledaJSBridge
-    # (startPayment) instead of redirecting the page.
+    # ACLEDA Mini App checkout. Reuses ACLEDA V2's openSessionV2 flow to obtain the deeplink
+    # the payment page opens, instead of redirecting the page to ACLEDA.
     class Checkout < Vpago::AcledaV2::Checkout
-      # The mini app always uses the deeplink + JS bridge, regardless of the
-      # gateway's configured mode.
+      # The mini app always pays by deeplink, regardless of the gateway's configured mode.
       def deeplink?
         true
       end
 
-      # The deeplink string handed to
-      #   acledaJSBridge.call('startPayment', { acleda_deeplink: ... })
-      # Ensures openSessionV2 has run (persisting paymentTokenid for later
-      # getTxnStatus verification) before returning the deeplinkUrl.
+      # The deeplink _acleda_mini_app.html.erb opens. Ensures openSessionV2 has run
+      # (persisting paymentTokenid for the later getTxnStatus check) before returning it.
       def acleda_deeplink
         call if @response.nil?
         deeplink_url

data/lib/vpago/acleda_mini_app/session_hash_validator.rb

@@ -0,0 +1,35 @@
+module Vpago
+  module AcledaMiniApp
+    # Verifies the HMAC-SHA256 signature ACLEDA sends via the X-Acleda-Signature
+    # header on the Session Initialization request (POST /mini_app/acleda), before
+    # we look up or create the user. Mirrors AcledaMobile::CallbackValidator's
+    # keyed-HMAC pattern, but out-of-band in a header instead of the JSON body.
+    class SessionHashValidator
+      def initialize(options)
+        @options = options
+      end
+
+      def call
+        valid?
+      end
+
+      # The key ACLEDA signs with lives only on their Spree::OauthApplication
+      # (MiniAppProvider::AcledaBank#secret_key), so it can be rotated from the admin
+      def secret_key
+        @options[:secret_key].presence
+      end
+
+      def valid?
+        return false if secret_key.blank? || @options[:hash].blank?
+
+        ActiveSupport::SecurityUtils.secure_compare(computed_hash, @options[:hash].to_s)
+      end
+
+      def computed_hash
+        message = "#{@options[:phone]}#{@options[:first_name]}#{@options[:last_name]}"
+
+        OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), secret_key, message)
+      end
+    end
+  end
+end

data/lib/vpago/acleda_v2/payment_request_updater.rb

@@ -0,0 +1,54 @@
+module Vpago
+  module AcledaV2
+    class PaymentRequestUpdater < ::Vpago::PaymentRequestUpdater
+      def call
+        return if @payment.order.paid?
+
+        if items_eligible?
+          process_payment_status
+        else
+          mark_items_as_ineligible
+        end
+      end
+
+      private
+
+      def process_payment_status
+        checker = @payment.payment_method.check_transaction(@payment)
+
+        if checker.success?
+          mark_payment_as_success
+        elsif checker.failed? && !ignore_on_failed?
+          mark_payment_as_failed(checker.error_message)
+        end
+      rescue Faraday::TimeoutError, Faraday::ConnectionFailed => e
+        VpagoLogger.error(
+          label: 'Vpago::AcledaV2::PaymentRequestUpdater#process_payment_status gateway_timeout',
+          data: { payment_number: @payment.number, error_class: e.class.name, error_message: e.message }
+        )
+      end
+
+      def items_eligible?
+        @payment&.order&.line_items&.all?(&:sufficient_stock?) == true # rubocop:disable Style/SafeNavigationChainLength
+      end
+
+      def mark_items_as_ineligible
+        @error_message = 'Items are not eligible due to insufficient stock'
+        marker_options = @options.merge(status: false, description: @error_message)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+
+      def mark_payment_as_success
+        @error_message = nil
+        marker_options = @options.merge(status: true, description: nil)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+
+      def mark_payment_as_failed(error_message)
+        @error_message = error_message
+        marker_options = @options.merge(status: false, description: @error_message)
+        ::Vpago::PaymentStatusMarker.new(@payment, marker_options).call
+      end
+    end
+  end
+end