/* This file is part of GNU Taler (C) 2020 Taler Systems S.A. GNU Taler is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3, or (at your option) any later version. GNU Taler is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with GNU Taler; see the file COPYING. If not, see */ /** * Imports. */ import { ConfirmPayResultType, MerchantApiClient, PreparePayResultType, URL, codecForMerchantOrderStatusUnpaid, } from "@gnu-taler/taler-util"; import { WalletApiOperation } from "@gnu-taler/taler-wallet-core"; import { GlobalTestState, harnessHttpLib } from "../harness/harness.js"; import { createSimpleTestkudosEnvironmentV2, withdrawViaBankV2, } from "../harness/helpers.js"; /** * Run test for basic, bank-integrated withdrawal. */ export async function runPaywallFlowTest(t: GlobalTestState) { // Set up test environment const { walletClient, bank, exchange, merchant } = await createSimpleTestkudosEnvironmentV2(t); const merchantClient = new MerchantApiClient(merchant.makeInstanceBaseUrl()); // Withdraw digital cash into the wallet. const wres = await withdrawViaBankV2(t, { walletClient, bank, exchange, amount: "TESTKUDOS:20", }); await wres.withdrawalFinishedCond; /** * ========================================================================= * Create an order and let the wallet pay under a session ID * * We check along the way that the JSON response to /orders/{order_id} * returns the right thing. * ========================================================================= */ let orderResp = await merchantClient.createOrder({ order: { summary: "Buy me!", amount: "TESTKUDOS:5", fulfillment_url: "https://example.com/article42", public_reorder_url: "https://example.com/article42-share", }, }); const firstOrderId = orderResp.order_id; let orderStatus = await merchantClient.queryPrivateOrderStatus({ orderId: orderResp.order_id, sessionId: "mysession-one", }); t.assertTrue(orderStatus.order_status === "unpaid"); const talerPayUriOne = orderStatus.taler_pay_uri; t.assertTrue(orderStatus.already_paid_order_id === undefined); let publicOrderStatusUrl = new URL(orderStatus.order_status_url); let publicOrderStatusResp = await harnessHttpLib.fetch( publicOrderStatusUrl.href, ); if (publicOrderStatusResp.status != 402) { throw Error( `expected status 402 (before claiming), but got ${publicOrderStatusResp.status}`, ); } let pubUnpaidStatus = codecForMerchantOrderStatusUnpaid().decode( publicOrderStatusResp.json(), ); console.log(pubUnpaidStatus); let preparePayResp = await walletClient.call( WalletApiOperation.PreparePayForUri, { talerPayUri: pubUnpaidStatus.taler_pay_uri, }, ); t.assertTrue(preparePayResp.status === PreparePayResultType.PaymentPossible); const proposalId = preparePayResp.proposalId; console.log("requesting", publicOrderStatusUrl.href); publicOrderStatusResp = await harnessHttpLib.fetch(publicOrderStatusUrl.href); console.log("response body", publicOrderStatusResp.json()); if (publicOrderStatusResp.status != 402) { throw Error( `expected status 402 (after claiming), but got ${publicOrderStatusResp.status}`, ); } pubUnpaidStatus = codecForMerchantOrderStatusUnpaid().decode( publicOrderStatusResp.json(), ); const confirmPayRes = await walletClient.call(WalletApiOperation.ConfirmPay, { proposalId: proposalId, }); t.assertTrue(confirmPayRes.type === ConfirmPayResultType.Done); publicOrderStatusResp = await harnessHttpLib.fetch(publicOrderStatusUrl.href); console.log(publicOrderStatusResp.json()); if (publicOrderStatusResp.status != 200) { console.log(publicOrderStatusResp.json()); throw Error( `expected status 200 (after paying), but got ${publicOrderStatusResp.status}`, ); } /** * ========================================================================= * Now change up the session ID! * ========================================================================= */ orderStatus = await merchantClient.queryPrivateOrderStatus({ orderId: orderResp.order_id, sessionId: "mysession-two", }); // Should be claimed (not paid!) because of a new session ID t.assertTrue(orderStatus.order_status === "claimed"); // Pay with new taler://pay URI, which should // have the new session ID! // Wallet should now automatically re-play payment. preparePayResp = await walletClient.call( WalletApiOperation.PreparePayForUri, { talerPayUri: talerPayUriOne, }, ); t.assertTrue(preparePayResp.status === PreparePayResultType.AlreadyConfirmed); t.assertTrue(preparePayResp.paid); /** * ========================================================================= * Now we test re-purchase detection. * ========================================================================= */ orderResp = await merchantClient.createOrder({ order: { summary: "Buy me!", amount: "TESTKUDOS:5", // Same fulfillment URL as previously! fulfillment_url: "https://example.com/article42", public_reorder_url: "https://example.com/article42-share", }, }); const secondOrderId = orderResp.order_id; orderStatus = await merchantClient.queryPrivateOrderStatus({ orderId: secondOrderId, sessionId: "mysession-three", }); t.assertTrue(orderStatus.order_status === "unpaid"); t.assertTrue(orderStatus.already_paid_order_id === undefined); publicOrderStatusUrl = new URL(orderStatus.order_status_url); // Here the re-purchase detection should kick in, // and the wallet should re-pay for the old order // under the new session ID (mysession-three). preparePayResp = await walletClient.call( WalletApiOperation.PreparePayForUri, { talerPayUri: orderStatus.taler_pay_uri, }, ); t.assertTrue(preparePayResp.status === PreparePayResultType.AlreadyConfirmed); t.assertTrue(preparePayResp.paid); // The first order should now be paid under "mysession-three", // as the wallet did re-purchase detection orderStatus = await merchantClient.queryPrivateOrderStatus({ orderId: firstOrderId, sessionId: "mysession-three", }); t.assertTrue(orderStatus.order_status === "paid"); // Check that with a completely new session ID, the status would NOT // be paid. orderStatus = await merchantClient.queryPrivateOrderStatus({ orderId: firstOrderId, sessionId: "mysession-four", }); t.assertTrue(orderStatus.order_status === "claimed"); // Now check if the public status of the new order is correct. console.log("requesting public status", publicOrderStatusUrl); // Ask the order status of the claimed-but-unpaid order publicOrderStatusResp = await harnessHttpLib.fetch(publicOrderStatusUrl.href); if (publicOrderStatusResp.status != 402) { throw Error(`expected status 402, but got ${publicOrderStatusResp.status}`); } pubUnpaidStatus = codecForMerchantOrderStatusUnpaid().decode( publicOrderStatusResp.json(), ); console.log(publicOrderStatusResp.json()); t.assertTrue(pubUnpaidStatus.already_paid_order_id === firstOrderId); } runPaywallFlowTest.suites = ["merchant", "wallet"];