workarea-kount 3.3.0

data/test/services/workarea/kount/event_test.rb

@@ -0,0 +1,51 @@
+require 'test_helper'
+
+module Workarea
+  module Kount
+    class EventTest < Workarea::TestCase
+      def test_create
+        assert_instance_of(Kount::DmcEvent, Event.create(dmc_xml))
+        assert_instance_of(Kount::WorkflowEvent, Event.create(workflow_xml))
+      end
+
+      private
+
+        def dmc_xml
+          xml = <<~XML
+            <event>
+              <name>DMC_ADDRESS_ADD</name>
+              <key>
+                <address_1>Street Address </address_1>
+                <address_2>Optional Address </address_2>
+                <city>City </city>
+                <state>State </state>
+                <postal_code>Postal Code </postal_code>
+                <type>Address Type </type>
+              </key>
+              <old_value>null </old_value>
+              <new_value>New Status </new_value>
+              <agent>agent@email.com </agent>
+              <occurred>2015-09-05 13:19:24 </occurred>
+            </event>
+          XML
+
+          Nokogiri::XML.parse(xml).children.first
+        end
+
+        def workflow_xml
+          xml = <<~XML
+            <event>
+              <name>WORKFLOW_STATUS_EDIT</name>
+              <key order_number="D58470FCF0" site="DEFAULT">7JG1075ML345</key>
+              <old_value>R</old_value>
+              <new_value>A</new_value>
+              <agent>SYSTEM@KOUNT.NET</agent>
+              <occurred>2018-05-18 06:47:47.413756</occurred>
+            </event>
+          XML
+
+          Nokogiri::XML.parse(xml).children.first
+        end
+    end
+  end
+end

data/test/services/workarea/kount/order_fraud_update_service_test.rb

@@ -0,0 +1,48 @@
+require 'test_helper'
+
+module Workarea
+  module Kount
+    class OrderFraudUpdateServiceTest < Workarea::TestCase
+      setup :setup_sandbox_credentials
+      teardown :restore_credentials
+
+      def test_update_with_auth
+        VCR.use_cassette('kount/order_fraud_update') do
+          checkout = create_purchasable_checkout(order: {
+            kount_session_id: '12345666',
+            ip_address: '170.115.187.68'
+          })
+
+          assert(checkout.place_order)
+
+          update_response = OrderFraudUpdateService.new(
+            order: checkout.order,
+            payment: checkout.payment
+          ).perform!
+
+          assert(update_response.success?)
+        end
+      end
+
+      private
+
+        def setup_sandbox_credentials
+          @_old_credentials = Workarea::Kount.credentials
+
+          Rails.application.secrets.kount = {
+            merchant_id: '200755',
+            version: '0630',
+            key: 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiIyMDA3NTUiLCJhdWQiOiJLb3VudC4xIiwiaWF0IjoxNTAwNDA3NTE1LCJzY3AiOnsia2EiOm51bGwsImtjIjpudWxsLCJhcGkiOnRydWUsInJpcyI6dHJ1ZX19.1YwTR1G8qBQ_TDK8MBYxDB2EhpUD0IlwWdvqHVOnm0o',
+            ksalt: '4077th hawkeye trapper radar section-8',
+            is_test: true
+          }
+
+          Workarea.config.fraud_analyzer = 'Workarea::Checkout::Fraud::KountAnalyzer'
+        end
+
+        def restore_credentials
+          Rails.application.secrets.kount = @_old_credentials
+        end
+    end
+  end
+end

data/test/support/workarea/kount_api_config.rb

@@ -0,0 +1,27 @@
+module Workarea
+  module KountApiConfig
+    def self.included(test)
+      super
+      test.setup :set_kount_credentials
+      test.teardown :reset_kount_credentials
+    end
+
+    private
+
+      def set_kount_credentials
+        @_old_credentials = Workarea::Kount.credentials
+
+        Rails.application.secrets.kount = {
+          merchant_id: '200755',
+          version: '0630',
+          key: 'eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiIyMDA3NTUiLCJhdWQiOiJLb3VudC4xIiwiaWF0IjoxNTAwNDA3NTE1LCJzY3AiOnsia2EiOm51bGwsImtjIjpudWxsLCJhcGkiOnRydWUsInJpcyI6dHJ1ZX19.1YwTR1G8qBQ_TDK8MBYxDB2EhpUD0IlwWdvqHVOnm0o',
+          ksalt: '4077th hawkeye trapper radar section-8',
+          is_test: true
+        }
+      end
+
+      def reset_kount_credentials
+        Rails.application.secrets.kount = @_old_credentials
+      end
+  end
+end

data/test/system/workarea/kount_system_test.rb

@@ -0,0 +1,72 @@
+require 'test_helper'
+
+module Workarea
+  class KountSystemTest < Workarea::SystemTest
+    include Admin::IntegrationTest
+
+    def test_review_orders_are_index_in_admin_search
+      checkout = create_purchasable_checkout
+
+      checkout.order.update_attributes!(kount_decision: :review)
+      assert(checkout.handle_kount_review)
+
+      visit admin.root_path
+      fill_in 'q', with: checkout.order.id
+      click_button 'search_admin'
+
+      assert page.has_content? checkout.order.id
+    end
+
+    def test_decline_orders_are_index_in_admin_search
+      checkout = create_purchasable_checkout
+
+      checkout.order.update_attributes!(kount_decision: :decline)
+
+      visit admin.root_path
+      fill_in 'q', with: checkout.order.id
+      click_button 'search_admin'
+
+      assert page.has_content? checkout.order.id
+    end
+
+    def test_review_order_payments_have_kount_review_state
+      checkout = create_purchasable_checkout
+
+      checkout.order.update_attributes!(kount_decision: :review)
+      assert(checkout.handle_kount_review)
+
+      visit admin.order_path checkout.order
+
+      refute page.has_content? 'Pending'
+      assert page.has_content? 'Kount Review'
+    end
+
+    def test_decline_order_payments_have_kount_declined_state
+      checkout = create_purchasable_checkout
+
+      checkout.order.update_attributes!(kount_decision: :decline)
+
+      visit admin.order_path checkout.order
+
+      refute page.has_content? 'Pending'
+      assert page.has_content? 'Kount Declined'
+    end
+
+    def test_viewing_order_kount_card
+      checkout = create_purchasable_checkout
+
+      _kount_order = create_kount_order(id: checkout.order.id)
+
+      checkout.order.update_attributes!(kount_decision: :approve)
+      assert(checkout.place_order)
+
+      visit admin.kount_order_path checkout.order
+
+      assert page.has_content? t('workarea.admin.orders.cards.kount.decision')
+      assert page.has_content? t('workarea.admin.orders.cards.kount.score')
+      assert page.has_content? t('workarea.admin.orders.cards.kount.credit_cards')
+      assert page.has_content? t('workarea.admin.orders.cards.kount.email_addresses')
+      assert page.has_content? t('workarea.admin.orders.cards.kount.devices')
+    end
+  end
+end

data/test/system/workarea/storefront/kount_guest_checkout_system_test.rb

@@ -0,0 +1,32 @@
+require 'test_helper'
+
+module Workarea
+  module Storefront
+    class KountGuestCheckoutSystemTest < Workarea::SystemTest
+      include Storefront::SystemTest
+
+      setup :setup_checkout_specs
+      setup :start_guest_checkout
+
+      def test_fraud_payment_failure
+        assert_current_path(storefront.checkout_addresses_path)
+        fill_in 'email', with: 'decline@workarea.com'
+        fill_in_shipping_address
+        uncheck 'same_as_shipping'
+        fill_in_billing_address
+        click_button t('workarea.storefront.checkouts.continue_to_shipping')
+
+        assert_current_path(storefront.checkout_shipping_path)
+        click_button t('workarea.storefront.checkouts.continue_to_payment')
+
+        assert_current_path(storefront.checkout_payment_path)
+        fill_in_credit_card
+        fill_in 'credit_card[number]', with: '1'
+        click_button t('workarea.storefront.checkouts.place_order')
+
+        assert_current_path(storefront.checkout_place_order_path)
+        assert(page.has_content?('Error'))
+      end
+    end
+  end
+end

data/test/system/workarea/storefront/kount_logged_in_checkout_system_test.rb

@@ -0,0 +1,102 @@
+require 'test_helper'
+
+module Workarea
+  module Storefront
+    class KountLoggedInCheckoutSystemTest < Workarea::SystemTest
+      include Storefront::SystemTest
+
+      def test_review_orders_are_not_still_in_cart
+        # setup
+        Workarea.config.fraud_analyzer =
+          'Workarea::Checkout::Fraud::KountAnalyzer'
+        email = 'review@workarea.com'
+        create_supporting_data email: email
+        add_product_to_cart
+        add_user_data email: email
+        start_user_checkout email: email
+
+        click_button t('workarea.storefront.checkouts.place_order')
+        assert_current_path(storefront.checkout_confirmation_path)
+        assert(page.has_content?('Success'))
+        assert_equal(:review, Order.first.status)
+
+        visit storefront.cart_path
+
+        assert(page.has_no_content?('Integration Product'))
+      end
+
+      private
+
+        def create_supporting_data(email: 'bcrouse@workarea.com')
+          create_tax_category(
+            name: 'Sales Tax',
+            code: '001',
+            rates: [{ percentage: 0.07, country: 'US', region: 'PA' }]
+          )
+
+          create_shipping_service(
+            name: 'Ground',
+            tax_code: '001',
+            rates: [{ price: 7.to_m }]
+          )
+
+          create_inventory(id: 'SKU', policy: 'standard', available: 5)
+
+          @product = create_product(
+            id: 'INT_PRODUCT',
+            name: 'Integration Product',
+            variants: [{ sku: 'SKU',  tax_code: '001', regular: 5.to_m }]
+          )
+
+          create_user(email: email, password: 'W3bl1nc!')
+        end
+
+        def add_user_data(email: 'bcrouse@workarea.com')
+          user = User.find_by_email email
+
+          user.auto_save_shipping_address(
+            first_name: 'Ben',
+            last_name: 'Crouse',
+            street: '22 S. 3rd St.',
+            city: 'Philadelphia',
+            region: 'PA',
+            postal_code: '19106',
+            country: 'US',
+            phone_number: '2159251800'
+          )
+
+          user.auto_save_billing_address(
+            first_name: 'Ben',
+            last_name: 'Crouse',
+            street: '1019 S. 47th St.',
+            city: 'Philadelphia',
+            region: 'PA',
+            postal_code: '19143',
+            country: 'US',
+            phone_number: '2159251800'
+          )
+
+          profile = Payment::Profile.lookup(PaymentReference.new(user))
+          profile.credit_cards.create!(
+            first_name: 'Ben',
+            last_name: 'Crouse',
+            number: '1',
+            month: 1,
+            year: Time.current.year + 1,
+            cvv: '999'
+          )
+        end
+
+        def start_user_checkout(email: 'bcrouse@workarea.com')
+          visit storefront.checkout_path
+          click_link t('workarea.storefront.checkouts.login_title')
+
+          within '#login_form' do
+            fill_in 'email', with: email
+            fill_in 'password', with: 'W3bl1nc!'
+            click_button t('workarea.storefront.users.login')
+          end
+        end
+    end
+  end
+end

data/test/test_helper.rb

@@ -0,0 +1,16 @@
+require 'simplecov'
+
+SimpleCov.start 'rails' do
+  add_group 'View Models', 'app/view_models'
+  add_filter 'lib/workarea/kount/version.rb'
+  add_filter 'lib/workarea/mailer_previews/storefront/order_mailer_preview.rb'
+  add_filter 'lib/workarea/kount/bogus_gateway.rb'
+  add_filter %r{app/services/workarea/kount/event/.*\.rb}
+end
+
+ENV['RAILS_ENV'] = 'test'
+require File.expand_path('../../test/dummy/config/environment.rb', __FILE__)
+require 'rails/test_help'
+require 'workarea/test_help'
+
+Minitest.backtrace_filter = Minitest::BacktraceFilter.new

data/test/vcr_cassettes/kount/basic_fraud_test.yml

@@ -0,0 +1,43 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://risk.test.kount.net/
+    body:
+      encoding: UTF-8
+      string: MACK=Y&AUTH=A&SESS=12345666&MODE=Q&SITE=DEFAULT&S2A1=22+S.+3rd+St.&S2A2=Second+Floor&S2CI=Philadelphia&S2ST=PA&S2PC=19106&S2CC=US&S2PN&B2A1=22+S.+3rd+St.&B2A2=Second+Floor&B2CI=Philadelphia&B2ST=PA&B2PC=19106&B2CC=US&B2PN&PTYP=CARD&PTOK=411111WMS5YA6FUZA1KC&PENC=KHASH&SHTP=ST&TOTL=1100&CURR=USD&EMAL=bcrouse-new%40workarea.com&NAME=Ben+Crouse&IPAD=170.115.187.68&ORDR=21405EF57F&PROD_TYPE[]=Test+Product&PROD_DESC[]=Test+Product+-+&PROD_ITEM[]=SKU&PROD_PRICE[]=500&PROD_QUANT[]=2&VERS=0630&MERC=200755&FRMT=JSON
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - rest-client/2.0.2 (darwin17.4.0 x86_64) ruby/2.4.4p296
+      X-Kount-Api-Key:
+      - eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiIyMDA3NTUiLCJhdWQiOiJLb3VudC4xIiwiaWF0IjoxNTAwNDA3NTE1LCJzY3AiOnsia2EiOm51bGwsImtjIjpudWxsLCJhcGkiOnRydWUsInJpcyI6dHJ1ZX19.1YwTR1G8qBQ_TDK8MBYxDB2EhpUD0IlwWdvqHVOnm0o
+      Content-Length:
+      - '512'
+      Content-Type:
+      - application/x-www-form-urlencoded
+      Host:
+      - risk.test.kount.net
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Fri, 01 Jun 2018 12:44:28 GMT
+      Server:
+      - Apache
+      Content-Length:
+      - '941'
+      Content-Type:
+      - text/plain;charset=UTF-8
+    body:
+      encoding: UTF-8
+      string: '{"VERS":"0630","MODE":"Q","TRAN":"7J1X0DS1H8VX","MERC":"200755","SESS":"12345666","ORDR":"21405EF57F","AUTO":"A","SCOR":"34","GEOX":"US","BRND":"VISA","REGN":"US_PA","NETW":"N","KAPT":"N","CARDS":"1","DEVICES":"1","EMAILS":"1","VELO":"0","VMAX":"0","SITE":"DEFAULT","DEVICE_LAYERS":"....","FINGERPRINT":null,"TIMEZONE":null,"LOCALTIME":"
+        ","REGION":null,"COUNTRY":null,"PROXY":null,"JAVASCRIPT":null,"FLASH":null,"COOKIES":null,"HTTP_COUNTRY":null,"LANGUAGE":null,"MOBILE_DEVICE":null,"MOBILE_TYPE":null,"MOBILE_FORWARDER":null,"VOICE_DEVICE":null,"PC_REMOTE":null,"RULES_TRIGGERED":0,"COUNTERS_TRIGGERED":0,"REASON_CODE":null,"MASTERCARD":"","DDFS":null,"DSR":null,"UAS":null,"BROWSER":null,"OS":null,"PIP_IPAD":null,"PIP_LAT":null,"PIP_LON":null,"PIP_COUNTRY":null,"PIP_REGION":null,"PIP_CITY":null,"PIP_ORG":null,"IP_IPAD":null,"IP_LAT":null,"IP_LON":null,"IP_COUNTRY":null,"IP_REGION":null,"IP_CITY":null,"IP_ORG":null,"WARNING_COUNT":0}'
+    http_version: 
+  recorded_at: Fri, 01 Jun 2018 12:44:29 GMT
+recorded_with: VCR 2.9.3

data/test/vcr_cassettes/kount/integration/moneris_new_credit_card.yml

@@ -0,0 +1,84 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://esqa.moneris.com/gateway2/servlet/MpgRequest
+    body:
+      encoding: UTF-8
+      string: "<request><store_id>monca02501</store_id><api_token>YSI4CKbdvgSbr6is4JMZ</api_token><res_add_cc><pan>4111111111111111</pan><expdate>2101</expdate><crypt_type>7</crypt_type></res_add_cc></request>"
+    headers:
+      Content-Type:
+      - application/x-www-form-urlencoded
+      Connection:
+      - close
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+      User-Agent:
+      - Ruby
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Mon, 21 Sep 2020 18:36:53 GMT
+      X-Ua-Compatible:
+      - IE=Edge
+      Connection:
+      - close
+      Content-Type:
+      - text/html
+      Set-Cookie:
+      - TS019df888=015d06d254c8e6a1d7fac341c1d4e33abe70a8558e0ccc0b192b395eae3c6553e67eff9305bf693eec83c3b5c4a6904a092912b70d;
+        Path=/; Domain=.esqa.moneris.com; Secure
+      Transfer-Encoding:
+      - chunked
+    body:
+      encoding: UTF-8
+      string: <?xml version="1.0"?><response><receipt><DataKey>xoYWod1B0UxAR16TkhVX48yy1</DataKey><ReceiptId>null</ReceiptId><ReferenceNum>null</ReferenceNum><ResponseCode>001</ResponseCode><ISO>null</ISO><AuthCode>null</AuthCode><Message>Successfully
+        registered CC details.</Message><TransTime>14:36:53</TransTime><TransDate>2020-09-21</TransDate><TransType>null</TransType><Complete>true</Complete><TransAmount>null</TransAmount><CardType>null</CardType><TransID>null</TransID><TimedOut>false</TimedOut><CorporateCard>null</CorporateCard><RecurSuccess>null</RecurSuccess><AvsResultCode>null</AvsResultCode><CvdResultCode>null</CvdResultCode><ResSuccess>true</ResSuccess><PaymentType>cc</PaymentType><IsVisaDebit>null</IsVisaDebit><ResolveData><cust_id></cust_id><phone></phone><email></email><note></note><avs_street_number></avs_street_number><avs_street_name></avs_street_name><avs_zipcode></avs_zipcode><masked_pan>4111***1111</masked_pan><expdate>2101</expdate><crypt_type>7</crypt_type></ResolveData></receipt></response>
+    http_version:
+  recorded_at: Mon, 21 Sep 2020 18:36:53 GMT
+- request:
+    method: post
+    uri: https://esqa.moneris.com/gateway2/servlet/MpgRequest
+    body:
+      encoding: UTF-8
+      string: "<request><store_id>monca02501</store_id><api_token>YSI4CKbdvgSbr6is4JMZ</api_token><res_preauth_cc><data_key>xoYWod1B0UxAR16TkhVX48yy1</data_key><order_id>10E81C2F22_2020_09_21_14_36_53</order_id><amount>11.00</amount><crypt_type>7</crypt_type></res_preauth_cc></request>"
+    headers:
+      Content-Type:
+      - application/x-www-form-urlencoded
+      Connection:
+      - close
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+      User-Agent:
+      - Ruby
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Mon, 21 Sep 2020 18:36:53 GMT
+      X-Ua-Compatible:
+      - IE=Edge
+      Connection:
+      - close
+      Content-Type:
+      - text/html
+      Set-Cookie:
+      - TS019df888=015d06d254daf1e5ced1dfa9a9f751e875b1a340424965c106769e0b65f63995477863bf6c92883aeea931bb04844a8552f4a366df;
+        Path=/; Domain=.esqa.moneris.com; Secure
+      Transfer-Encoding:
+      - chunked
+    body:
+      encoding: UTF-8
+      string: <?xml version="1.0"?><response><receipt><DataKey>xoYWod1B0UxAR16TkhVX48yy1</DataKey><ReceiptId>10E81C2F22_2020_09_21_14_36_53</ReceiptId><ReferenceNum>660189810010090010</ReferenceNum><ResponseCode>027</ResponseCode><ISO>01</ISO><AuthCode>938169</AuthCode><Message>APPROVED           *                    =</Message><TransTime>14:36:53</TransTime><TransDate>2020-09-21</TransDate><TransType>01</TransType><Complete>true</Complete><TransAmount>11.00</TransAmount><CardType>V</CardType><TransID>159-0_15</TransID><TimedOut>false</TimedOut><CorporateCard>false</CorporateCard><RecurSuccess>null</RecurSuccess><AvsResultCode>null</AvsResultCode><CvdResultCode>null</CvdResultCode><ResSuccess>true</ResSuccess><PaymentType>cc</PaymentType><IsVisaDebit>false</IsVisaDebit><ResolveData><cust_id></cust_id><phone></phone><email></email><note></note><expdate>2101</expdate><masked_pan>4111***1111</masked_pan><crypt_type>7</crypt_type><avs_street_number></avs_street_number><avs_street_name></avs_street_name><avs_zipcode></avs_zipcode></ResolveData></receipt></response>
+    http_version:
+  recorded_at: Mon, 21 Sep 2020 18:36:54 GMT
+recorded_with: VCR 2.9.3