@pandait.tech/payment-nuvei 1.1.4 → 1.1.5

package/dist/handlers/index.js

@@ -407,7 +407,7 @@ var NUVEI_ERROR_MESSAGES = {
   23: "Transacci\xF3n rechazada. Intenta de nuevo m\xE1s tarde.",
   31: "Tu banco requiere verificaci\xF3n OTP. Ingresa el c\xF3digo enviado a tu tel\xE9fono.",
   36: "Tu banco requiere verificaci\xF3n adicional 3DS. Completa el proceso en la ventana emergente.",
-  37: "Tu banco requiere verificaci\xF3n adicional 3DS. Completa el proceso en la ventana emergente."
+  37: "Tu banco rechaz\xF3 la autenticaci\xF3n 3DS. Intenta con otra tarjeta."
 };
 var THREEDS_AUTH_MESSAGES = {
   N: "Autenticaci\xF3n 3DS rechazada por tu banco. Intenta con otra tarjeta.",
@@ -894,7 +894,7 @@ function createWebhookHandler(deps) {
       const finalStatuses = ["paid", "delivered", "shipped", "refunded"];
       const statusDetail = Number(transaction.status_detail);
       const currentStatusRaw = transaction.current_status;
-      const isPendingNotice = typeof currentStatusRaw === "string" && currentStatusRaw.toUpperCase() === "PENDING" || [1, 31, 35, 36, 37].includes(statusDetail);
+      const isPendingNotice = typeof currentStatusRaw === "string" && currentStatusRaw.toUpperCase() === "PENDING" || [1, 31, 35, 36].includes(statusDetail);
       const shouldUpdateStatus = isApproved || !isPendingNotice && !finalStatuses.includes(currentStatus);
       const orderData = orderDoc.data() ?? {};
       const webhookAuthCode = transaction.authorization_code;
@@ -1248,7 +1248,29 @@ function create3dsCompleteHandler(deps) {
       const txId = verifyResult.transaction?.id ?? raw["transaction_id"] ?? transactionId;
       const txAuthCode = verifyResult.transaction?.authorization_code ?? raw["authorization_code"] ?? null;
       const isSuccess = (txStatus === "success" || txStatus === 1) && txStatusDetail === 3;
-      const isStillPending = !isSuccess && (txStatusDetail === 36 || txStatusDetail === 37 || txStatus === "pending");
+      const isStillPending = !isSuccess && // 37 = "Rejected by 3DS" (doc oficial): no espera. Un 37 que llegue pendiente
+      // sigue entrando por txStatus === "pending".
+      (txStatusDetail === 36 || txStatus === "pending");
+      if (!isSuccess && (txStatusDetail === 36 || txStatusDetail === 37)) {
+        const threeDSData = verifyResult["3ds"];
+        const challengeHtml = threeDSData?.browser_response?.challenge_request || threeDSData?.browser_response?.hidden_iframe || "";
+        if (challengeHtml) {
+          await db.collection("orders").doc(orderId).update({
+            nuveiTransactionId: txId,
+            isDeviceFingerprint: FieldValue.delete(),
+            updatedAt: /* @__PURE__ */ new Date(),
+            threeDSCres: FieldValue.delete()
+          });
+          return json({
+            challenge: true,
+            challengeHtml,
+            isDeviceFingerprint: false,
+            orderId,
+            nuveiTransactionId: txId,
+            statusDetail: txStatusDetail
+          });
+        }
+      }
       if (isStillPending) {
         logger.log(
           `[3ds-complete] Still pending: txStatus=${txStatus} detail=${txStatusDetail}. Polling continues.`
@@ -1292,26 +1314,6 @@ function create3dsCompleteHandler(deps) {
           orderId
         });
       }
-      if (txStatusDetail === 36 || txStatusDetail === 37) {
-        const threeDSData = verifyResult["3ds"];
-        const challengeHtml = threeDSData?.browser_response?.challenge_request || threeDSData?.browser_response?.hidden_iframe || "";
-        if (challengeHtml) {
-          await db.collection("orders").doc(orderId).update({
-            nuveiTransactionId: txId,
-            isDeviceFingerprint: FieldValue.delete(),
-            updatedAt: /* @__PURE__ */ new Date(),
-            threeDSCres: FieldValue.delete()
-          });
-          return json({
-            challenge: true,
-            challengeHtml,
-            isDeviceFingerprint: false,
-            orderId,
-            nuveiTransactionId: txId,
-            statusDetail: txStatusDetail
-          });
-        }
-      }
       await db.collection("orders").doc(orderId).update({
         status: "failed",
         chargeResponseAt: /* @__PURE__ */ new Date(),