spree_vpago 2.3.8 → 2.3.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: feafa3aabbe7fd192e7d70028c28467cb990edda91c4e2180bcc127d445cdc9d
-  data.tar.gz: 0cfc058b9ff6f04a07cbde6c8ca29d3b46a00582c143e5cad6b3b672f635caf2
+  metadata.gz: 24c3243a11a22045eb530115ea1412bc74d8f9cc1d03ea821d5813f2859cf380
+  data.tar.gz: 26ade26146ad653b7dff55b117b099b3988fab1c210e04a5b27e6a25e2562df1
 SHA512:
-  metadata.gz: 49d235f5604b356f4ba1b555be0ce04e4946901319790d7d97a3ca3262e3445415d5a6980780d8ee27712da8b565ee5af3689726c9acb7bf1d20913c8a5c66df
-  data.tar.gz: b7e51eb7d0d57abb587036189d1d374bd43aee8586c55fc569b19692ff38e8cc9f9bcaa404b92b1e75fe30c87d63e0af77cbafea69ed82a921eeffc1c0b5b327
+  metadata.gz: 821eb790249845feafc9f5cfa1349e24a47d3426c48b194051f4351ec518935f96f51863f2ac5e9dbd69e139baafef01492eae79ea18f1ffd6d369cd593a9a9a
+  data.tar.gz: fc8c75f49fba47c371442c8dd089d0185f125ee0b6316d569e6121d2c0dab98b0e5c64d182334cc674bd2289a2f2620e9f6d3a17139f791acacf06097fc420a7

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    spree_vpago (2.3.8)
+    spree_vpago (2.3.9)
       faraday
       google-cloud-firestore
       spree_api (>= 4.5)

data/app/assets/javascripts/vpago/vpago_payments/user_informers/firebase.js

@@ -13693,10 +13693,10 @@ This typically indicates that your device does not have a healthy Internet conne
     firebaseConfigs,
     documentReferencePath,
     onPaymentIsProcessing,
+    onPaymentIsRetrying,
     onOrderIsProcessing,
     onOrderIsCompleted,
     onOrderProcessFailed,
-    onPaymentIsRefunded,
     onPaymentProcessFailed,
     onCompleted
   }) {
@@ -13713,6 +13713,9 @@ This typically indicates that your device does not have a healthy Internet conne
       let processing = documentData["processing"] === true;
       let reasonCode = documentData["reason_code"];
       let reasonMessage = documentData["reason_message"];
+      if (window.parent !== window) {
+        window.parent.postMessage(messageCode, "*");
+      }
       let orderCompleted = orderState === "complete";
       if (orderCompleted) {
         queueProcessor.queueStateChange({
@@ -13743,11 +13746,11 @@ This typically indicates that your device does not have a healthy Internet conne
             }
           });
           break;
-        case "order_is_processing":
+        case "payment_is_retrying":
           queueProcessor.queueStateChange({
             minDelayInMs: 1500,
             callback: async () => {
-              await onOrderIsProcessing(
+              await onPaymentIsRetrying(
                 orderState,
                 paymentState,
                 processing,
@@ -13757,11 +13760,11 @@ This typically indicates that your device does not have a healthy Internet conne
             }
           });
           break;
-        case "order_is_completed":
+        case "order_is_processing":
           queueProcessor.queueStateChange({
             minDelayInMs: 1500,
             callback: async () => {
-              await onOrderIsCompleted(
+              await onOrderIsProcessing(
                 orderState,
                 paymentState,
                 processing,
@@ -13771,11 +13774,11 @@ This typically indicates that your device does not have a healthy Internet conne
             }
           });
           break;
-        case "order_process_failed":
+        case "order_is_completed":
           queueProcessor.queueStateChange({
             minDelayInMs: 1500,
             callback: async () => {
-              await onOrderProcessFailed(
+              await onOrderIsCompleted(
                 orderState,
                 paymentState,
                 processing,
@@ -13785,11 +13788,11 @@ This typically indicates that your device does not have a healthy Internet conne
             }
           });
           break;
-        case "payment_is_refunded":
+        case "order_process_failed":
           queueProcessor.queueStateChange({
             minDelayInMs: 1500,
             callback: async () => {
-              await onPaymentIsRefunded(
+              await onOrderProcessFailed(
                 orderState,
                 paymentState,
                 processing,

data/app/controllers/spree/vpago_payments_controller.rb

@@ -8,11 +8,11 @@ module Spree
     rescue_from ActiveRecord::RecordNotFound, with: :render_not_found
     rescue_from CanCan::AccessDenied, with: :access_denied
 
+    before_action :find_payment, only: %i[checkout processing success]
+    after_action :allow_iframe_embedding, only: %i[checkout processing success]
+
     # GET
     def checkout
-      @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
-      raise ActiveRecord::RecordNotFound unless @payment.present?
-
       return redirect_to @payment.processing_url, allow_other_host: true unless @payment.checkout?
 
       @order = @payment.order
@@ -22,9 +22,6 @@ module Spree
 
     # GET
     def processing
-      @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
-      raise ActiveRecord::RecordNotFound unless @payment.present?
-
       @order = @payment.order
 
       VpagoLogger.log(label: 'Spree::VpagoPaymentsController#processing', data: vpago_log_context)
@@ -32,9 +29,6 @@ module Spree
 
     # GET
     def success
-      @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
-      raise ActiveRecord::RecordNotFound unless @payment.present?
-
       @order = @payment.order
       raise CanCan::AccessDenied unless @order.completed?
 
@@ -147,6 +141,18 @@ module Spree
       sanitized_params
     end
 
+    def find_payment
+      @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
+      raise ActiveRecord::RecordNotFound unless @payment.present?
+    end
+
+    # frame-ancestors (set above) supersedes X-Frame-Options in modern
+    # browsers, but the default SAMEORIGIN header would still block legacy
+    # browsers from embedding these pages, so drop it for the iframe actions.
+    def allow_iframe_embedding
+      response.headers.delete('X-Frame-Options')
+    end
+
     def render_not_found
       respond_to do |format|
         format.html { render file: Rails.public_path.join('404.html'), status: :not_found, layout: false }

data/app/javascripts/vpago/vpago_payments/user_informers/firebase.js

@@ -31,6 +31,10 @@ async function listenToProcessingState({
     let reasonCode = documentData["reason_code"];
     let reasonMessage = documentData["reason_message"];
 
+    if (window.parent !== window) {
+      window.parent.postMessage(messageCode, "*");
+    }
+
     let orderCompleted = orderState === "complete";
     if (orderCompleted) {
       queueProcessor.queueStateChange({
@@ -40,7 +44,7 @@ async function listenToProcessingState({
             orderState,
             paymentState,
             reasonCode,
-            reasonMessage
+            reasonMessage,
           );
         },
       });
@@ -57,7 +61,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -71,7 +75,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -85,7 +89,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -99,7 +103,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -113,7 +117,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });
@@ -127,7 +131,7 @@ async function listenToProcessingState({
               paymentState,
               processing,
               reasonCode,
-              reasonMessage
+              reasonMessage,
             );
           },
         });

data/lib/spree_vpago/version.rb

@@ -1,7 +1,7 @@
 module SpreeVpago
   module_function
 
-  VERSION = '2.3.8'.freeze
+  VERSION = '2.3.9'.freeze
 
   def version
     Gem::Version.new VERSION

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spree_vpago
 version: !ruby/object:Gem::Version
-  version: 2.3.8
+  version: 2.3.9
 platform: ruby
 authors:
 - You
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-07-22 00:00:00.000000000 Z
+date: 2026-07-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday