evaldoc 1.0.0

package/docs/MANUAL_TEST_GUIDE.md

@@ -0,0 +1,327 @@
+# Manual Testing Guide - Stripe Connect Payment System
+
+## Prerequisites
+
+✅ Server running: `http://localhost:54112`
+✅ Stripe keys configured in `.env`
+✅ Firebase project access
+
+## Test Flow
+
+### Part 1: Provider Setup (Using Existing Provider)
+
+Since you already have providers in your system, let's use one for testing.
+
+#### 1. Sign into Provider Dashboard
+
+1. Go to: http://localhost:54112/app
+2. Sign in with an existing provider account
+3. You should see the dashboard
+
+#### 2. Enable Stripe Connect
+
+Open your browser's Developer Console (F12) and run:
+
+```javascript
+// Get your Firebase ID token
+firebase.auth().currentUser.getIdToken().then(token => {
+  console.log('Token:', token);
+
+  // Create Connect account
+  fetch('http://localhost:54112/api/stripe/create-connect-account', {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+      'Content-Type': 'application/json'
+    }
+  })
+  .then(r => r.json())
+  .then(data => {
+    console.log('✓ Connect Account Created:', data);
+    // Save account ID
+    window.stripeAccountId = data.accountId;
+  });
+});
+```
+
+#### 3. Get Onboarding Link
+
+```javascript
+firebase.auth().currentUser.getIdToken().then(token => {
+  fetch('http://localhost:54112/api/stripe/create-account-link', {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+      'Content-Type': 'application/json'
+    }
+  })
+  .then(r => r.json())
+  .then(data => {
+    console.log('✓ Onboarding Link:', data.url);
+    // Open in new tab
+    window.open(data.url, '_blank');
+  });
+});
+```
+
+#### 4. Complete Stripe Onboarding
+
+1. Click the onboarding link that opens
+2. **Use test mode details**:
+   - Business type: Individual
+   - Country: United States
+   - Name: Test Provider
+   - DOB: 01/01/1990
+   - SSN: 000-00-0000 (test mode)
+   - Address: Any valid US address
+   - Bank: Use test routing number `110000000`
+   - Account: Any 10-12 digits
+
+3. Complete all steps
+4. You'll be redirected back to `/app?onboarding=complete`
+
+#### 5. Set Subscription Pricing
+
+```javascript
+firebase.auth().currentUser.getIdToken().then(token => {
+  fetch('http://localhost:54112/api/stripe/set-pricing', {
+    method: 'POST',
+    headers: {
+      'Authorization': `Bearer ${token}`,
+      'Content-Type': 'application/json'
+    },
+    body: JSON.stringify({
+      currency: 'usd',
+      prices: {
+        day: 5.00,
+        week: 20.00,
+        month: 50.00
+      }
+    })
+  })
+  .then(r => r.json())
+  .then(data => {
+    console.log('✓ Pricing Set:', data);
+  });
+});
+```
+
+### Part 2: Patient Subscription
+
+#### 6. Get Provider Info
+
+First, get the provider's handle. In the console:
+
+```javascript
+// Get current provider data
+fetch('http://localhost:54112/api/me', {
+  headers: {
+    'Authorization': `Bearer ${await firebase.auth().currentUser.getIdToken()}`
+  }
+})
+.then(r => r.json())
+.then(data => {
+  console.log('Provider Handle:', data.handle);
+  window.providerHandle = data.handle;
+});
+```
+
+#### 7. Create Checkout Session (as Patient)
+
+```javascript
+// Simulate patient with session ID
+const patientSessionId = `test-patient-${Date.now()}`;
+
+fetch('http://localhost:54112/api/payment/create-checkout-session', {
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json'
+  },
+  body: JSON.stringify({
+    handle: window.providerHandle,  // Use provider handle from step 6
+    sessionId: patientSessionId,
+    interval: 'month'  // or 'week' or 'day'
+  })
+})
+.then(r => r.json())
+.then(data => {
+  console.log('✓ Checkout Session:', data);
+  console.log('Open this URL:', data.url);
+  window.open(data.url, '_blank');
+  // Save for later
+  window.patientSessionId = patientSessionId;
+});
+```
+
+#### 8. Complete Payment
+
+1. Click the checkout URL that opens
+2. **Use test card**:
+   - Card number: `4242 4242 4242 4242`
+   - Expiry: Any future date (e.g., `12/34`)
+   - CVC: Any 3 digits (e.g., `123`)
+   - ZIP: Any 5 digits (e.g., `12345`)
+
+3. Complete payment
+4. You'll be redirected to `/payment-success?session_id=...`
+
+#### 9. Check Access (After Payment)
+
+```javascript
+fetch('http://localhost:54112/api/payment/check-access', {
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json'
+  },
+  body: JSON.stringify({
+    handle: window.providerHandle,
+    sessionId: window.patientSessionId
+  })
+})
+.then(r => r.json())
+.then(data => {
+  console.log('✓ Access Status:', data);
+  // Should show: { hasAccess: true, type: 'subscription' }
+});
+```
+
+### Part 3: Verify in Firestore
+
+Check your Firestore database:
+
+1. **providers/{uid}** - Should have:
+   - `stripeAccountId`: "acct_..."
+   - `stripeOnboardingStatus`: "COMPLETE"
+   - `chargesEnabled`: true
+   - `payoutsEnabled`: true
+   - `stripePriceIds`: { day: "price_...", week: "price_...", month: "price_..." }
+
+2. **patients/{sessionId}** - Should have:
+   - `stripeCustomerId`: "cus_..."
+
+3. **subscriptions** - Should have a document with:
+   - `providerId`: provider UID
+   - `patientId`: session ID
+   - `status`: "active"
+   - `stripeSubscriptionId`: "sub_..."
+
+4. **access/{providerId}_{patientId}** - Should have:
+   - `status`: "ACTIVE"
+   - `stripeSubscriptionId`: "sub_..."
+
+### Part 4: Verify Revenue
+
+#### 10. Check Revenue in Provider Dashboard
+
+```javascript
+firebase.auth().currentUser.getIdToken().then(token => {
+  fetch('http://localhost:54112/api/payment/revenue', {
+    headers: {
+      'Authorization': `Bearer ${token}`
+    }
+  })
+  .then(r => r.json())
+  .then(data => {
+    console.log('✓ Revenue Analytics:', data);
+  });
+});
+```
+
+#### 11. Check Transaction History
+
+```javascript
+firebase.auth().currentUser.getIdToken().then(token => {
+  fetch('http://localhost:54112/api/payment/transactions', {
+    headers: {
+      'Authorization': `Bearer ${token}`
+    }
+  })
+  .then(r => r.json())
+  .then(data => {
+    console.log('✓ Transactions:', data);
+  });
+});
+```
+
+### Part 5: Verify in Stripe Dashboard
+
+1. Go to: https://dashboard.stripe.com/test/connect/accounts
+2. You should see the provider's Connect account
+3. Click on it to see details
+
+4. Go to: https://dashboard.stripe.com/test/subscriptions
+5. You should see the patient's subscription
+6. Note the **25% application fee** is listed
+
+7. Go to: https://dashboard.stripe.com/test/balance
+8. You should see your 25% platform fee in the balance
+
+## Expected Results
+
+✅ Provider has Stripe Connect account created
+✅ Provider completes onboarding
+✅ Provider sets subscription prices
+✅ Patient can create checkout session
+✅ Patient completes payment
+✅ Access is granted automatically
+✅ Revenue shows in provider dashboard
+✅ Platform receives 25% fee
+✅ Provider receives 75% in their Connect account
+
+## Troubleshooting
+
+### "Provider has not set up payments yet"
+- Run step 2 to create Connect account
+- Complete Stripe onboarding (step 4)
+
+### "Provider payment account not yet approved"
+- Complete all Stripe onboarding steps
+- Check `chargesEnabled` is true in Firestore
+
+### "month subscription not available"
+- Run step 5 to set pricing
+- Check `stripePriceIds.month` exists in Firestore
+
+### Access still shows `hasAccess: false`
+- Wait for webhooks to process (usually instant)
+- Check webhook secret is configured
+- Manually check `access` collection in Firestore
+
+## Clean Up Test Data
+
+```javascript
+// Cancel subscription
+fetch('http://localhost:54112/api/payment/cancel-subscription', {
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json'
+  },
+  body: JSON.stringify({
+    subscriptionId: 'sub_...',  // From Firestore or Stripe dashboard
+    cancelAtPeriodEnd: false  // Cancel immediately
+  })
+});
+```
+
+## Next Steps
+
+Once testing is successful:
+
+1. **Set up webhooks properly**:
+   - Go to https://dashboard.stripe.com/test/webhooks
+   - Add endpoint: `https://your-domain.com/api/payment/webhook`
+   - Copy webhook secret to `.env`
+
+2. **Switch to live mode**:
+   - Use live API keys (`pk_live_...` and `sk_live_...`)
+   - Complete business verification
+   - Update webhook URL to production
+
+3. **Add UI components** (optional):
+   - Onboarding button in provider dashboard
+   - Subscription picker for patients
+   - Revenue charts
+
+---
+
+**Note**: Since we don't have webhook secret yet, access control won't update automatically. You can manually update the `access` collection in Firestore for testing purposes.