@pandait.tech/payment-nuvei 1.1.2 → 1.1.5

package/dist/handlers/index.cjs

@@ -413,7 +413,7 @@ var NUVEI_ERROR_MESSAGES = {
   23: "Transacci\xF3n rechazada. Intenta de nuevo m\xE1s tarde.",
   31: "Tu banco requiere verificaci\xF3n OTP. Ingresa el c\xF3digo enviado a tu tel\xE9fono.",
   36: "Tu banco requiere verificaci\xF3n adicional 3DS. Completa el proceso en la ventana emergente.",
-  37: "Tu banco requiere verificaci\xF3n adicional 3DS. Completa el proceso en la ventana emergente."
+  37: "Tu banco rechaz\xF3 la autenticaci\xF3n 3DS. Intenta con otra tarjeta."
 };
 var THREEDS_AUTH_MESSAGES = {
   N: "Autenticaci\xF3n 3DS rechazada por tu banco. Intenta con otra tarjeta.",
@@ -899,8 +899,9 @@ function createWebhookHandler(deps) {
       const currentStatus = orderDoc.data()?.status;
       const finalStatuses = ["paid", "delivered", "shipped", "refunded"];
       const statusDetail = Number(transaction.status_detail);
-      const isAuthPending = statusDetail === 36 || statusDetail === 37;
-      const shouldUpdateStatus = isApproved || !isAuthPending && !finalStatuses.includes(currentStatus);
+      const currentStatusRaw = transaction.current_status;
+      const isPendingNotice = typeof currentStatusRaw === "string" && currentStatusRaw.toUpperCase() === "PENDING" || [1, 31, 35, 36].includes(statusDetail);
+      const shouldUpdateStatus = isApproved || !isPendingNotice && !finalStatuses.includes(currentStatus);
       const orderData = orderDoc.data() ?? {};
       const webhookAuthCode = transaction.authorization_code;
       const hasValidAuthCode = typeof webhookAuthCode === "string" && webhookAuthCode.trim().length > 0 && webhookAuthCode !== "null";
@@ -1253,7 +1254,29 @@ function create3dsCompleteHandler(deps) {
       const txId = verifyResult.transaction?.id ?? raw["transaction_id"] ?? transactionId;
       const txAuthCode = verifyResult.transaction?.authorization_code ?? raw["authorization_code"] ?? null;
       const isSuccess = (txStatus === "success" || txStatus === 1) && txStatusDetail === 3;
-      const isStillPending = !isSuccess && (txStatusDetail === 36 || txStatusDetail === 37 || txStatus === "pending");
+      const isStillPending = !isSuccess && // 37 = "Rejected by 3DS" (doc oficial): no espera. Un 37 que llegue pendiente
+      // sigue entrando por txStatus === "pending".
+      (txStatusDetail === 36 || txStatus === "pending");
+      if (!isSuccess && (txStatusDetail === 36 || txStatusDetail === 37)) {
+        const threeDSData = verifyResult["3ds"];
+        const challengeHtml = threeDSData?.browser_response?.challenge_request || threeDSData?.browser_response?.hidden_iframe || "";
+        if (challengeHtml) {
+          await db.collection("orders").doc(orderId).update({
+            nuveiTransactionId: txId,
+            isDeviceFingerprint: firestore.FieldValue.delete(),
+            updatedAt: /* @__PURE__ */ new Date(),
+            threeDSCres: firestore.FieldValue.delete()
+          });
+          return json({
+            challenge: true,
+            challengeHtml,
+            isDeviceFingerprint: false,
+            orderId,
+            nuveiTransactionId: txId,
+            statusDetail: txStatusDetail
+          });
+        }
+      }
       if (isStillPending) {
         logger.log(
           `[3ds-complete] Still pending: txStatus=${txStatus} detail=${txStatusDetail}. Polling continues.`
@@ -1297,26 +1320,6 @@ function create3dsCompleteHandler(deps) {
           orderId
         });
       }
-      if (txStatusDetail === 36 || txStatusDetail === 37) {
-        const threeDSData = verifyResult["3ds"];
-        const challengeHtml = threeDSData?.browser_response?.challenge_request || threeDSData?.browser_response?.hidden_iframe || "";
-        if (challengeHtml) {
-          await db.collection("orders").doc(orderId).update({
-            nuveiTransactionId: txId,
-            isDeviceFingerprint: firestore.FieldValue.delete(),
-            updatedAt: /* @__PURE__ */ new Date(),
-            threeDSCres: firestore.FieldValue.delete()
-          });
-          return json({
-            challenge: true,
-            challengeHtml,
-            isDeviceFingerprint: false,
-            orderId,
-            nuveiTransactionId: txId,
-            statusDetail: txStatusDetail
-          });
-        }
-      }
       await db.collection("orders").doc(orderId).update({
         status: "failed",
         chargeResponseAt: /* @__PURE__ */ new Date(),