@fleetbase/storefront-engine 0.3.26 → 0.3.28

package/composer.json

@@ -1,6 +1,6 @@
 {
     "name": "fleetbase/storefront-api",
-    "version": "0.3.26",
+    "version": "0.3.28",
     "description": "Headless Commerce & Marketplace Extension for Fleetbase",
     "keywords": [
         "fleetbase-extension",

package/extension.json

@@ -1,6 +1,6 @@
 {
     "name": "Storefront",
-    "version": "0.3.26",
+    "version": "0.3.28",
     "description": "Headless Commerce & Marketplace Extension for Fleetbase",
     "repository": "https://github.com/fleetbase/storefront",
     "license": "AGPL-3.0-or-later",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@fleetbase/storefront-engine",
-    "version": "0.3.26",
+    "version": "0.3.28",
     "description": "Headless Commerce & Marketplace Extension for Fleetbase",
     "fleetbase": {
         "route": "storefront",

package/server/src/Http/Controllers/v1/CheckoutController.php

@@ -19,6 +19,7 @@ use Fleetbase\Storefront\Http\Requests\InitializeCheckoutRequest;
 use Fleetbase\Storefront\Models\Cart;
 use Fleetbase\Storefront\Models\Checkout;
 use Fleetbase\Storefront\Models\Customer;
+use Fleetbase\Storefront\Models\FoodTruck;
 use Fleetbase\Storefront\Models\Gateway;
 use Fleetbase\Storefront\Models\Product;
 use Fleetbase\Storefront\Models\Store;
@@ -475,8 +476,8 @@ class CheckoutController extends Controller
         $invoiceAmount       = $amount;
         $invoiceCode         = $gateway->sandbox ? 'TEST_INVOICE' : $gateway->config->invoice_id;
         $invoiceDescription  = $about->name . ' cart checkout';
-        $invoiceReceiverCode = $gateway->public_id;
-        $senderInvoiceNo     = $cart->id;
+        $invoiceReceiverCode = $checkout->public_id;
+        $senderInvoiceNo     = $checkout->public_id;
 
         // Create qpay invoice
         $invoice = $qpay->createSimpleInvoice($invoiceAmount, $invoiceCode, $invoiceDescription, $invoiceReceiverCode, $senderInvoiceNo, $callbackUrl);
@@ -491,69 +492,137 @@ class CheckoutController extends Controller
         ]);
     }
 
+    /**
+     * Capture and process QPay callback.
+     *
+     * This controller method handles QPay callback requests by verifying and processing
+     * payment information for a specified checkout. It performs the following steps:
+     *
+     * - Retrieves the checkout identifier from the request.
+     * - Looks up the associated Checkout and Gateway records.
+     * - If in sandbox mode and a test scenario is provided, it simulates a test payment
+     *   response for either success or error scenarios.
+     * - Initializes a QPay instance with the gateway configuration and sets the authentication token.
+     * - Retrieves the invoice ID from the checkout options and performs a payment check using QPay's API.
+     * - Publishes the payment data or error response to the SocketCluster channel.
+     *
+     * Depending on the 'respond' flag from the request, the method returns a JSON response
+     * or completes the processing without returning data.
+     *
+     * @param Request $request The HTTP request containing:
+     *                         - `checkout` (string): The public checkout identifier.
+     *                         - `respond` (boolean): Whether to return a JSON response.
+     *                         - `test` (string|null): A test scenario indicator ('success' or 'error') for sandbox mode.
+     *
+     * @return \Illuminate\Http\JsonResponse a JSON response with payment data or error details
+     *
+     * @throws \Exception if an error occurs during payment processing, an API error is returned
+     */
     public function captureQPayCallback(Request $request)
     {
-        $checkoutId = $request->input('checkout');
-        $respond    = $request->boolean('respond');
-        $test       = $request->input('test'); // success, error
-
-        if ($checkoutId) {
-            // Get the checkout instance
-            $checkout = Checkout::where('public_id', $checkoutId)->first();
-            if ($checkout) {
-                // Restore the payment gateway instance
-                $gateway = Gateway::where('uuid', $checkout->gateway_uuid)->first();
-                if ($gateway) {
-                    try {
-                        // If testing send back test data
-                        // Handle test below
-                        if ($gateway->sandbox && is_string($test) && in_array($test, ['success', 'error'])) {
-                            $data = ['error' => null, 'checkout' => $checkout->public_id, 'payment' => null];
-                            if ($test === 'success') {
-                                $data['payment'] = QPay::createTestPaymentDataFromCheckout($checkout);
-                            } else {
-                                $data['error'] = ['error' => 'PAYMENT_NOT_PAID', 'message' => 'Payment has not paid!'];
-                            }
-
-                            SocketClusterService::publish('checkout.' . $checkout->public_id, $data);
-                            if ($respond) {
-                                return response()->json($data);
-                            }
-
-                            return;
-                        }
-
-                        // Create qpay instance
-                        $qpay = QPay::instance($gateway->config->username, $gateway->config->password, $gateway->callback_url);
-                        if ($gateway->sandbox) {
-                            $qpay = $qpay->useSandbox();
-                        }
-
-                        // Set auth token
-                        $qpay = $qpay->setAuthToken();
-
-                        // Check payment status from qpay
-                        $payment = $qpay->paymentGet($checkoutId);
-                        if ($payment) {
-                            $data = [];
-                            if ($payment->error) {
-                                $data = ['error' => (array) $payment, 'checkout' => $checkout->public_id, 'payment' => null];
-                            } else {
-                                $data = ['payment' =>(array) $payment, 'checkout' => $checkout->public_id, 'error' => null];
-                            }
-
-                            SocketClusterService::publish('checkout.' . $checkout->public_id, $data);
-                            if ($respond) {
-                                return response()->json($data);
-                            }
-                        }
-                    } catch (\Exception $e) {
-                        Log::error('[QPAY CHECKOUT ERROR: ' . $e->getMessage() . ']', $checkout->toArray());
-                        if ($respond) {
-                            return response()->apiError($e->getMessage());
-                        }
-                    }
+        $checkoutId    = $request->input('checkout');
+        $shouldRespond = $request->boolean('respond');
+        $testScenario  = $request->input('test'); // Expected: 'success' or 'error'
+
+        if (!$checkoutId) {
+            return response()->json([
+                'error'    => 'CHECKOUT_ID_MISSING',
+                'checkout' => null,
+                'payment'  => null,
+            ]);
+        }
+
+        $checkout = Checkout::where('public_id', $checkoutId)->first();
+        if (!$checkout) {
+            return response()->json([
+                'error'    => 'CHECKOUT_SESSION_NOT_FOUND',
+                'checkout' => null,
+                'payment'  => null,
+            ]);
+        }
+
+        $gateway = Gateway::where('uuid', $checkout->gateway_uuid)->first();
+        if (!$gateway) {
+            return response()->json([
+                'error'    => 'GATEWAY_NOT_CONFIGURED',
+                'checkout' => $checkout->public_id,
+                'payment'  => null,
+            ]);
+        }
+
+        try {
+            // Handle test scenarios if in sandbox mode.
+            if ($gateway->sandbox && in_array($testScenario, ['success', 'error'], true)) {
+                $data = [
+                    'checkout' => $checkout->public_id,
+                    'payment'  => null,
+                    'error'    => null,
+                ];
+
+                if ($testScenario === 'success') {
+                    $data['payment'] = QPay::createTestPaymentDataFromCheckout($checkout);
+                } else {
+                    $data['error'] = [
+                        'error'   => 'PAYMENT_NOT_PAID',
+                        'message' => 'Payment has not been paid!',
+                    ];
                 }
+
+                SocketClusterService::publish('checkout.' . $checkout->public_id, $data);
+
+                return $shouldRespond ? response()->json($data) : response()->json();
+            }
+
+            // Create the QPay instance.
+            $qpay = QPay::instance(
+                $gateway->config->username,
+                $gateway->config->password,
+                $gateway->callback_url
+            );
+
+            if ($gateway->sandbox) {
+                $qpay->useSandbox();
+            }
+
+            $qpay->setAuthToken();
+
+            $invoiceId = $checkout->getOption('qpay_invoice_id');
+            if (!$invoiceId) {
+                Log::error("Missing QPay invoice ID for checkout: {$checkout->public_id}");
+
+                return response()->json([
+                    'error'    => 'MISSING_INVOICE_ID',
+                    'checkout' => $checkout->public_id,
+                    'payment'  => null,
+                ]);
+            }
+
+            $paymentCheck = $qpay->paymentCheck($invoiceId);
+
+            if (!$paymentCheck || empty($paymentCheck->count) || $paymentCheck->count < 1) {
+                return response()->json([
+                    'error'    => 'PAYMENT_NOTFOUND',
+                    'checkout' => $checkout->public_id,
+                    'payment'  => null,
+                ]);
+            }
+
+            $payment = data_get($paymentCheck, 'rows.0');
+            if ($payment) {
+                $data = [
+                    'checkout' => $checkout->public_id,
+                    'payment'  => (array) $payment,
+                    'error'    => null,
+                ];
+
+                SocketClusterService::publish('checkout.' . $checkout->public_id, $data);
+
+                return $shouldRespond ? response()->json($data) : response()->json();
+            }
+        } catch (\Exception $e) {
+            Log::error('[QPAY CHECKOUT ERROR]: ' . $e->getMessage(), ['checkout' => $checkout->toArray()]);
+            if ($shouldRespond) {
+                return response()->apiError($e->getMessage());
             }
         }
 
@@ -738,6 +807,18 @@ class CheckoutController extends Controller
             $origin = Arr::first($origin);
         }
 
+        // Check if the order origin is from a food truck via cart property
+        $foodTruck = collect($cart->items)
+            ->map(function ($cartItem) {
+                return data_get($cartItem, 'food_truck_id');
+            })
+            ->unique()
+            ->filter()
+            ->map(function ($foodTruckId) {
+                return FoodTruck::where('public_id', $foodTruckId)->first();
+            })
+            ->first();
+
         // if there is no origin attempt to get from cart
         if (!$origin) {
             $storeLocation = collect($cart->items)->map(function ($cartItem) {
@@ -818,6 +899,11 @@ class CheckoutController extends Controller
             ...$transactionDetails,
         ]);
 
+        // if there is a food truck include it in the order meta
+        if ($foodTruck) {
+            $orderMeta['food_truck_id'] = $foodTruck->public_id;
+        }
+
         // initialize order creation input
         $orderInput = [
             'company_uuid'     => $store->company_uuid ?? session('company'),

package/server/src/Http/Controllers/v1/CustomerController.php

@@ -176,8 +176,8 @@ class CustomerController extends Controller
         }
 
         // verify code
-        $isVerified = VerificationCode::where(['code' => $code, 'for' => 'storefront_create_customer', 'meta->identity' => $identity])->exists();
-        if (!$isVerified) {
+        $verificationCode = VerificationCode::where(['code' => $code, 'for' => 'storefront_create_customer', 'meta->identity' => $identity])->exists();
+        if (!$verificationCode) {
             return response()->apiError('Invalid verification code provided!');
         }
 
@@ -802,4 +802,99 @@ class CustomerController extends Controller
             return response()->apiError($e->getMessage());
         }
     }
+
+    public function startAccountClosure(Request $request)
+    {
+        $about    = Storefront::about(['company_uuid']);
+        if (!$about) {
+            return response()->apiError('Storefront not found.');
+        }
+
+        $customer = Storefront::getCustomerFromToken();
+        if (!$customer) {
+            return response()->apiError('Not authorized to view customers places');
+        }
+
+        // Get the user account for the contact/customer
+        $user = User::where(['uuid' => $customer->user_uuid])->first();
+        if (!$user) {
+            return response()->apiError('Customer user account not found.');
+        }
+
+        // Check for phone or email
+        if (!$user->phone && !$user->email) {
+            return response()->apiError('Customer account must have a valid email or phone number linked.');
+        }
+
+        // Send account closure confirmation with code
+        try {
+            if ($user->phone) {
+                VerificationCode::generateSmsVerificationFor($user, 'storefront_account_closure', [
+                    'messageCallback' => function ($verification) use ($about) {
+                        return "Your {$about->name} account closure verification code is {$verification->code}";
+                    },
+                    'meta' => ['identity' => $user->phone],
+                ]);
+            } elseif ($user->email) {
+                VerificationCode::generateEmailVerificationFor($user, 'storefront_account_closure', [
+                    'subject'         => $about->name . ' account closure request',
+                    'messageCallback' => function ($verification) use ($about) {
+                        return "Your {$about->name} account closure verification code is {$verification->code}";
+                    },
+                    'meta' => ['identity' => $user->email],
+                ]);
+            }
+
+            return response()->json(['status' => 'OK']);
+        } catch (\Exception $e) {
+            return response()->apiError($e->getMessage());
+        }
+
+        return response()->apiError('An uknown error occured attempting to close customer account.');
+    }
+
+    public function confirmAccountClosure(Request $request)
+    {
+        $code     = $request->input('code');
+        $about    = Storefront::about(['company_uuid']);
+        if (!$about) {
+            return response()->apiError('Storefront not found.');
+        }
+
+        $customer = Storefront::getCustomerFromToken();
+        if (!$customer) {
+            return response()->apiError('Not authorized to view customers places');
+        }
+
+        // Get the user account for the contact/customer
+        $user = User::where(['uuid' => $customer->user_uuid])->first();
+        if (!$user) {
+            return response()->apiError('Customer user account not found.');
+        }
+
+        // Get verification identity
+        $identity = $user->phone ?? $user->email;
+
+        // verify account closure code
+        $verificationCode = VerificationCode::where(['code' => $code, 'for' => 'storefront_account_closure', 'meta->identity' => $identity])->exists();
+        if (!$verificationCode && $code !== config('storefront.storefront_app.bypass_verification_code')) {
+            return response()->apiError('Invalid verification code provided!');
+        }
+
+        try {
+            // If the user type is `contact` or `customer` delete the user account
+            if ($user->isType(['contact', 'customer'])) {
+                $user->delete();
+            }
+
+            // Delete the customer
+            $customer->delete();
+
+            return response()->json(['status' => 'OK']);
+        } catch (\Exception $e) {
+            return response()->apiError($e->getMessage());
+        }
+
+        return response()->apiError('An uknown error occured attempting to close customer account.');
+    }
 }

package/server/src/Http/Controllers/v1/FoodTruckController.php

@@ -5,6 +5,7 @@ namespace Fleetbase\Storefront\Http\Controllers\v1;
 use Fleetbase\Http\Controllers\Controller;
 use Fleetbase\Storefront\Http\Resources\FoodTruck as FoodTruckResource;
 use Fleetbase\Storefront\Models\FoodTruck;
+use Illuminate\Database\Eloquent\ModelNotFoundException;
 use Illuminate\Http\Request;
 
 class FoodTruckController extends Controller
@@ -36,4 +37,22 @@ class FoodTruckController extends Controller
 
         return FoodTruckResource::collection($results);
     }
+
+    /**
+     * Finds a single Storefront FoodTruck resources.
+     *
+     * @return \Fleetbase\Http\Resources\EntityCollection
+     */
+    public function find($id)
+    {
+        // find for the food truck
+        try {
+            $foodTruck = FoodTruck::findRecordOrFail($id);
+        } catch (ModelNotFoundException $exception) {
+            return response()->error('Food Truck resource not found.');
+        }
+
+        // response the product resource
+        return new FoodTruckResource($foodTruck);
+    }
 }

package/server/src/Http/Resources/FoodTruck.php

@@ -20,23 +20,24 @@ class FoodTruck extends FleetbaseResource
     public function toArray($request)
     {
         return [
-            'id'                            => $this->when(Http::isInternalRequest(), $this->id, $this->public_id),
-            'uuid'                          => $this->when(Http::isInternalRequest(), $this->uuid),
-            'public_id'                     => $this->when(Http::isInternalRequest(), $this->public_id),
-            'company_uuid'                  => $this->when(Http::isInternalRequest(), $this->company_uuid),
-            'created_by_uuid'               => $this->when(Http::isInternalRequest(), $this->created_by_uuid),
-            'store_uuid'                    => $this->when(Http::isInternalRequest(), $this->store_uuid),
-            'service_area_uuid'             => $this->when(Http::isInternalRequest(), $this->service_area_uuid),
-            'zone_uuid'                     => $this->when(Http::isInternalRequest(), $this->zone_uuid),
-            'vehicle_uuid'                  => $this->when(Http::isInternalRequest(), $this->vehicle_uuid),
-            'vehicle'                       => $this->vehicle ? new VehicleResource($this->vehicle) : null,
-            'service_area'                  => $this->serviceArea ? new ServiceAreaResource($this->serviceArea) : null,
-            'zone'                          => $this->zone ? new ZoneResource($this->zone) : null,
-            'catalogs'                      => Catalog::collection($this->catalogs ?? []),
-            'online'                        => $this->vehicle ? $this->vehicle->online : false,
-            'status'                        => $this->status,
-            'created_at'                    => $this->created_at,
-            'updated_at'                    => $this->updated_at,
+            'id'                             => $this->when(Http::isInternalRequest(), $this->id, $this->public_id),
+            'uuid'                           => $this->when(Http::isInternalRequest(), $this->uuid),
+            'public_id'                      => $this->when(Http::isInternalRequest(), $this->public_id),
+            'company_uuid'                   => $this->when(Http::isInternalRequest(), $this->company_uuid),
+            'created_by_uuid'                => $this->when(Http::isInternalRequest(), $this->created_by_uuid),
+            'store_uuid'                     => $this->when(Http::isInternalRequest(), $this->store_uuid),
+            'service_area_uuid'              => $this->when(Http::isInternalRequest(), $this->service_area_uuid),
+            'zone_uuid'                      => $this->when(Http::isInternalRequest(), $this->zone_uuid),
+            'vehicle_uuid'                   => $this->when(Http::isInternalRequest(), $this->vehicle_uuid),
+            'vehicle'                        => $this->vehicle ? new VehicleResource($this->vehicle) : null,
+            'service_area'                   => $this->serviceArea ? new ServiceAreaResource($this->serviceArea) : null,
+            'zone'                           => $this->zone ? new ZoneResource($this->zone) : null,
+            'catalogs'                       => Catalog::collection($this->catalogs ?? []),
+            'location'                       => $this->vehicle ? $this->vehicle->location : null,
+            'online'                         => $this->vehicle ? $this->vehicle->online : false,
+            'status'                         => $this->status,
+            'created_at'                     => $this->created_at,
+            'updated_at'                     => $this->updated_at,
         ];
     }
 }

package/server/src/routes.php

@@ -113,6 +113,8 @@ Route::prefix(config('storefront.api.routing.prefix', 'storefront'))->namespace(
                     $router->post('request-creation-code', 'CustomerController@requestCustomerCreationCode');
                     $router->post('stripe-ephemeral-key', 'CustomerController@getStripeEphemeralKey');
                     $router->post('stripe-setup-intent', 'CustomerController@getStripeSetupIntent');
+                    $router->post('account-closure', 'CustomerController@startAccountClosure');
+                    $router->post('confirm-account-closure', 'CustomerController@confirmAccountClosure');
                 });
 
                 // hotfix! storefront-app sending customer update to /contacts/ route