Page MenuHomePhorge
Differential D1249 Diff 3490 src/tests/Feature/Controller/PaymentsStripeTest.php

Changeset View

Standalone View

View Options

src/tests/Feature/Controller/PaymentsStripeTest.php

<?php <?php
namespace Tests\Feature\Controller; namespace Tests\Feature\Controller;
use App\Http\Controllers\API\V4\PaymentsController; use App\Http\Controllers\API\V4\PaymentsController;
use App\Payment; use App\Payment;
use App\Providers\PaymentProvider; use App\Providers\PaymentProvider;
use App\Transaction;
use App\Wallet; use App\Wallet;
use App\WalletSetting; use App\WalletSetting;
use GuzzleHttp\Psr7\Response; use GuzzleHttp\Psr7\Response;
use Illuminate\Support\Facades\Bus;
use Tests\TestCase; use Tests\TestCase;
use Tests\StripeMocksTrait; use Tests\StripeMocksTrait;
class PaymentsStripeTest extends TestCase class PaymentsStripeTest extends TestCase
{ {
use StripeMocksTrait; use StripeMocksTrait;
/** /**
* {@inheritDoc} * {@inheritDoc}
*/ */
public function setUp(): void public function setUp(): void
{ {
parent::setUp(); parent::setUp();
// All tests in this file use Stripe // All tests in this file use Stripe
\config(['services.payment_provider' => 'stripe']); \config(['services.payment_provider' => 'stripe']);
$john = $this->getTestUser('john@kolab.org'); $john = $this->getTestUser('john@kolab.org');
$wallet = $john->wallets()->first(); $wallet = $john->wallets()->first();
$john->setSetting('mollie_id', null);
Payment::where('wallet_id', $wallet->id)->delete(); Payment::where('wallet_id', $wallet->id)->delete();
Wallet::where('id', $wallet->id)->update(['balance' => 0]); Wallet::where('id', $wallet->id)->update(['balance' => 0]);
WalletSetting::where('wallet_id', $wallet->id)->delete(); WalletSetting::where('wallet_id', $wallet->id)->delete();
Transaction::where('object_id', $wallet->id)
->where('type', Transaction::WALLET_CREDIT)->delete();
} }
/** /**
* {@inheritDoc} * {@inheritDoc}
*/ */
public function tearDown(): void public function tearDown(): void
{ {
$john = $this->getTestUser('john@kolab.org'); $john = $this->getTestUser('john@kolab.org');
$wallet = $john->wallets()->first(); $wallet = $john->wallets()->first();
$john->setSetting('mollie_id', null);
Payment::where('wallet_id', $wallet->id)->delete(); Payment::where('wallet_id', $wallet->id)->delete();
Wallet::where('id', $wallet->id)->update(['balance' => 0]); Wallet::where('id', $wallet->id)->update(['balance' => 0]);
WalletSetting::where('wallet_id', $wallet->id)->delete(); WalletSetting::where('wallet_id', $wallet->id)->delete();
Transaction::where('object_id', $wallet->id)
->where('type', Transaction::WALLET_CREDIT)->delete();
parent::tearDown(); parent::tearDown();
} }
/** /**
* Test creating/updating/deleting an outo-payment mandate * Test creating/updating/deleting an outo-payment mandate
* *
* @group stripe * @group stripe
*/ */
public function testMandates(): void public function testMandates(): void
{ {
Bus::fake();
// Unauth access not allowed // Unauth access not allowed
$response = $this->get("api/v4/payments/mandate"); $response = $this->get("api/v4/payments/mandate");
$response->assertStatus(401); $response->assertStatus(401);
$response = $this->post("api/v4/payments/mandate", []); $response = $this->post("api/v4/payments/mandate", []);
$response->assertStatus(401); $response->assertStatus(401);
$response = $this->put("api/v4/payments/mandate", []); $response = $this->put("api/v4/payments/mandate", []);
$response->assertStatus(401); $response->assertStatus(401);
$response = $this->delete("api/v4/payments/mandate"); $response = $this->delete("api/v4/payments/mandate");
▲ Show 20 Lines • Show All 49 Lines • ▼ Show 20 Lines public function testMandates(): void
// Test fetching the mandate information // Test fetching the mandate information
$response = $this->actingAs($user)->get("api/v4/payments/mandate"); $response = $this->actingAs($user)->get("api/v4/payments/mandate");
$response->assertStatus(200); $response->assertStatus(200);
$json = $response->json(); $json = $response->json();
$this->assertEquals(20.10, $json['amount']); $this->assertEquals(20.10, $json['amount']);
$this->assertEquals(0, $json['balance']); $this->assertEquals(0, $json['balance']);
$this->assertSame(false, $json['isDisabled']);
// We would have to invoke a browser to accept the "first payment" to make // We would have to invoke a browser to accept the "first payment" to make
// the mandate validated/completed. Instead, we'll mock the mandate object. // the mandate validated/completed. Instead, we'll mock the mandate object.
$setupIntent = '{ $setupIntent = '{
"id": "AAA", "id": "AAA",
"object": "setup_intent", "object": "setup_intent",
"created": 123456789, "created": 123456789,
"payment_method": "pm_YYY", "payment_method": "pm_YYY",
"status": "succeeded", "status": "succeeded",
"usage": "off_session" "usage": "off_session",
"customer": null
}'; }';
$paymentMethod = '{ $paymentMethod = '{
"id": "pm_YYY", "id": "pm_YYY",
"object": "payment_method", "object": "payment_method",
"card": { "card": {
"brand": "visa", "brand": "visa",
"country": "US", "country": "US",
"last4": "4242" "last4": "4242"
}, },
"created": 123456789, "created": 123456789,
"type": "card" "type": "card"
}'; }';
$client = $this->mockStripe(); $client = $this->mockStripe();
$client->addResponse($setupIntent); $client->addResponse($setupIntent);
$client->addResponse($paymentMethod); $client->addResponse($paymentMethod);
// As we do not use checkout page, we do not receive a webworker request // As we do not use checkout page, we do not receive a webworker request
// I.e. we have to fake the mandate id // I.e. we have to fake the mandate id
$wallet = $user->wallets()->first(); $wallet = $user->wallets()->first();
$wallet->setSetting('stripe_mandate_id', 'AAA'); $wallet->setSetting('stripe_mandate_id', 'AAA');
$wallet->setSetting('mandate_disabled', 1);
$response = $this->actingAs($user)->get("api/v4/payments/mandate"); $response = $this->actingAs($user)->get("api/v4/payments/mandate");
$response->assertStatus(200); $response->assertStatus(200);
$json = $response->json(); $json = $response->json();
$this->assertEquals(20.10, $json['amount']); $this->assertEquals(20.10, $json['amount']);
$this->assertEquals(0, $json['balance']); $this->assertEquals(0, $json['balance']);
$this->assertEquals('Visa (**** **** **** 4242)', $json['method']); $this->assertEquals('Visa (**** **** **** 4242)', $json['method']);
$this->assertSame(false, $json['isPending']); $this->assertSame(false, $json['isPending']);
$this->assertSame(true, $json['isValid']); $this->assertSame(true, $json['isValid']);
$this->assertSame(true, $json['isDisabled']);
// Test updating mandate details (invalid input) // Test updating mandate details (invalid input)
$wallet->setSetting('mandate_disabled', null);
$user->refresh();
$post = []; $post = [];
$response = $this->actingAs($user)->put("api/v4/payments/mandate", $post); $response = $this->actingAs($user)->put("api/v4/payments/mandate", $post);
$response->assertStatus(422); $response->assertStatus(422);
$json = $response->json(); $json = $response->json();
$this->assertSame('error', $json['status']); $this->assertSame('error', $json['status']);
$this->assertCount(2, $json['errors']); $this->assertCount(2, $json['errors']);
$this->assertSame('The amount field is required.', $json['errors']['amount'][0]); $this->assertSame('The amount field is required.', $json['errors']['amount'][0]);
$this->assertSame('The balance field is required.', $json['errors']['balance'][0]); $this->assertSame('The balance field is required.', $json['errors']['balance'][0]);
$post = ['amount' => -100, 'balance' => 0]; $post = ['amount' => -100, 'balance' => 0];
$response = $this->actingAs($user)->put("api/v4/payments/mandate", $post); $response = $this->actingAs($user)->put("api/v4/payments/mandate", $post);
$response->assertStatus(422); $response->assertStatus(422);
$json = $response->json(); $json = $response->json();
$this->assertSame('error', $json['status']); $this->assertSame('error', $json['status']);
$this->assertCount(1, $json['errors']); $this->assertCount(1, $json['errors']);
$this->assertSame("Minimum amount for a single payment is {$min}.", $json['errors']['amount']); $this->assertSame("Minimum amount for a single payment is {$min}.", $json['errors']['amount']);
// Test updating a mandate (valid input) // Test updating a mandate (valid input)
$client->addResponse($setupIntent);
$client->addResponse($paymentMethod);
$post = ['amount' => 30.10, 'balance' => 1]; $post = ['amount' => 30.10, 'balance' => 1];
$response = $this->actingAs($user)->put("api/v4/payments/mandate", $post); $response = $this->actingAs($user)->put("api/v4/payments/mandate", $post);
$response->assertStatus(200); $response->assertStatus(200);
$json = $response->json(); $json = $response->json();
$this->assertSame('success', $json['status']); $this->assertSame('success', $json['status']);
$this->assertSame('The auto-payment has been updated.', $json['message']); $this->assertSame('The auto-payment has been updated.', $json['message']);
$this->assertEquals(30.10, $wallet->getSetting('mandate_amount')); $this->assertEquals(30.10, $wallet->getSetting('mandate_amount'));
$this->assertEquals(1, $wallet->getSetting('mandate_balance')); $this->assertEquals(1, $wallet->getSetting('mandate_balance'));
$this->assertSame('AAA', $json['id']);
$this->assertFalse($json['isDisabled']);
// Test updating a disabled mandate (invalid input)
$wallet->setSetting('mandate_disabled', 1);
$wallet->balance = -2000;
$wallet->save();
$user->refresh(); // required so the controller sees the wallet update from above
$post = ['amount' => 15.10, 'balance' => 1];
$response = $this->actingAs($user)->put("api/v4/payments/mandate", $post);
$response->assertStatus(422);
$json = $response->json();
$this->assertSame('error', $json['status']);
$this->assertCount(1, $json['errors']);
$this->assertSame('The specified amount does not cover the balance on the account.', $json['errors']['amount']);
// Test updating a disabled mandate (valid input)
$client->addResponse($setupIntent);
$client->addResponse($paymentMethod);
$post = ['amount' => 30, 'balance' => 1];
$response = $this->actingAs($user)->put("api/v4/payments/mandate", $post);
$response->assertStatus(200);
$json = $response->json();
$this->assertSame('success', $json['status']);
$this->assertSame('The auto-payment has been updated.', $json['message']);
$this->assertSame('AAA', $json['id']);
$this->assertFalse($json['isDisabled']);
Bus::assertDispatchedTimes(\App\Jobs\WalletCharge::class, 1);
Bus::assertDispatched(\App\Jobs\WalletCharge::class, function ($job) use ($wallet) {
$job_wallet = $this->getObjectProperty($job, 'wallet');
return $job_wallet->id === $wallet->id;
});
$this->unmockStripe(); $this->unmockStripe();
// TODO: Delete mandate // TODO: Delete mandate
} }
/** /**
* Test creating a payment and receiving a status via webhook * Test creating a payment and receiving a status via webhook
* *
* @group stripe * @group stripe
*/ */
public function testStoreAndWebhook(): void public function testStoreAndWebhook(): void
{ {
Bus::fake();
// Unauth access not allowed // Unauth access not allowed
$response = $this->post("api/v4/payments", []); $response = $this->post("api/v4/payments", []);
$response->assertStatus(401); $response->assertStatus(401);
$user = $this->getTestUser('john@kolab.org'); $user = $this->getTestUser('john@kolab.org');
$post = ['amount' => -1]; $post = ['amount' => -1];
$response = $this->actingAs($user)->post("api/v4/payments", $post); $response = $this->actingAs($user)->post("api/v4/payments", $post);
Show All 20 Lines public function testStoreAndWebhook(): void
$this->assertCount(1, $payments); $this->assertCount(1, $payments);
$payment = $payments[0]; $payment = $payments[0];
$this->assertSame(1234, $payment->amount); $this->assertSame(1234, $payment->amount);
$this->assertSame(\config('app.name') . ' Payment', $payment->description); $this->assertSame(\config('app.name') . ' Payment', $payment->description);
$this->assertSame('open', $payment->status); $this->assertSame('open', $payment->status);
$this->assertEquals(0, $wallet->balance); $this->assertEquals(0, $wallet->balance);
// TODO: Test the webhook // Test the webhook
$post = [
'id' => "evt_1GlZ814fj3SIEU8wtxMZ4Nsa",
'object' => "event",
'api_version' => "2020-03-02",
'created' => 1590147209,
'data' => [
'object' => [
'id' => $payment->id,
'object' => "payment_intent",
'amount' => 1234,
'amount_capturable' => 0,
'amount_received' => 1234,
'capture_method' => "automatic",
'client_secret' => "pi_1GlZ7w4fj3SIEU8w1RlBpN4l_secret_UYRNDTUUU7nkYHpOLZMb3uf48",
'confirmation_method' => "automatic",
'created' => 1590147204,
'currency' => "chf",
'customer' => "cus_HKDZ53OsKdlM83",
'last_payment_error' => null,
'livemode' => false,
'metadata' => [],
'receipt_email' => "payment-test@kolabnow.com",
'status' => "succeeded"
]
],
'type' => "payment_intent.succeeded"
];
// Test payment succeeded event
$response = $this->webhookRequest($post);
$response->assertStatus(200);
$this->assertSame(PaymentProvider::STATUS_PAID, $payment->fresh()->status);
$this->assertEquals(1234, $wallet->fresh()->balance);
$transaction = $wallet->transactions()->where('type', Transaction::WALLET_CREDIT)->last();
$this->assertSame(1234, $transaction->amount);
$this->assertSame(
"Payment transaction {$payment->id} using Stripe",
$transaction->description
);
// Assert that email notification job wasn't dispatched,
// it is expected only for recurring payments
Bus::assertDispatchedTimes(\App\Jobs\PaymentEmail::class, 0);
// Test that balance didn't change if the same event is posted
$response = $this->webhookRequest($post);
$response->assertStatus(200);
$this->assertSame(PaymentProvider::STATUS_PAID, $payment->fresh()->status);
$this->assertEquals(1234, $wallet->fresh()->balance);
// Test for payment failure ('failed' status)
$payment->refresh();
$payment->status = PaymentProvider::STATUS_OPEN;
$payment->save();
$post['type'] = "payment_intent.payment_failed";
$post['data']['object']['status'] = 'failed';
$response = $this->webhookRequest($post);
$response->assertStatus(200);
$this->assertSame(PaymentProvider::STATUS_FAILED, $payment->fresh()->status);
$this->assertEquals(1234, $wallet->fresh()->balance);
// Assert that email notification job wasn't dispatched,
// it is expected only for recurring payments
Bus::assertDispatchedTimes(\App\Jobs\PaymentEmail::class, 0);
// Test for payment failure ('canceled' status)
$payment->refresh();
$payment->status = PaymentProvider::STATUS_OPEN;
$payment->save();
$post['type'] = "payment_intent.canceled";
$post['data']['object']['status'] = 'canceled';
$response = $this->webhookRequest($post);
$response->assertStatus(200);
$this->assertSame(PaymentProvider::STATUS_CANCELED, $payment->fresh()->status);
$this->assertEquals(1234, $wallet->fresh()->balance);
// Assert that email notification job wasn't dispatched,
// it is expected only for recurring payments
Bus::assertDispatchedTimes(\App\Jobs\PaymentEmail::class, 0);
}
/**
* Test receiving webhook request for setup intent
*
* @group stripe
*/
public function testCreateMandateAndWebhook(): void
{
$user = $this->getTestUser('john@kolab.org');
$wallet = $user->wallets()->first();
// Test creating a mandate (valid input)
$post = ['amount' => 20.10, 'balance' => 0];
$response = $this->actingAs($user)->post("api/v4/payments/mandate", $post);
$response->assertStatus(200);
$payment = $wallet->payments()->first();
$this->assertSame(PaymentProvider::STATUS_OPEN, $payment->status);
$this->assertSame(PaymentProvider::TYPE_MANDATE, $payment->type);
$this->assertSame(0, $payment->amount);
$post = [
'id' => "evt_1GlZ814fj3SIEU8wtxMZ4Nsa",
'object' => "event",
'api_version' => "2020-03-02",
'created' => 1590147209,
'data' => [
'object' => [
'id' => $payment->id,
'object' => "setup_intent",
'client_secret' => "pi_1GlZ7w4fj3SIEU8w1RlBpN4l_secret_UYRNDTUUU7nkYHpOLZMb3uf48",
'created' => 1590147204,
'customer' => "cus_HKDZ53OsKdlM83",
'last_setup_error' => null,
'metadata' => [],
'status' => "succeeded"
]
],
'type' => "setup_intent.succeeded"
];
// Test payment succeeded event
$response = $this->webhookRequest($post);
$response->assertStatus(200);
$payment->refresh();
$this->assertSame(PaymentProvider::STATUS_PAID, $payment->status);
$this->assertSame($payment->id, $wallet->fresh()->getSetting('stripe_mandate_id'));
// TODO: test other setup_intent.* events
} }
/** /**
* Test automatic payment charges * Test automatic payment charges
* *
* @group stripe * @group stripe
*/ */
public function testDirectCharge(): void public function testTopUpAndWebhook(): void
{ {
Bus::fake();
$user = $this->getTestUser('john@kolab.org'); $user = $this->getTestUser('john@kolab.org');
$wallet = $user->wallets()->first(); $wallet = $user->wallets()->first();
// Expect false result, as there's no mandate // Stripe API does not allow us to create a mandate easily
$result = PaymentsController::directCharge($wallet, 1234); // That's why we we'll mock API responses
// Create a fake mandate
$wallet->setSettings([
'mandate_amount' => 20.10,
'mandate_balance' => 10,
'stripe_mandate_id' => 'AAA',
]);
$setupIntent = json_encode([
"id" => "AAA",
"object" => "setup_intent",
"created" => 123456789,
"payment_method" => "pm_YYY",
"status" => "succeeded",
"usage" => "off_session",
"customer" => null
]);
$paymentMethod = json_encode([
"id" => "pm_YYY",
"object" => "payment_method",
"card" => [
"brand" => "visa",
"country" => "US",
"last4" => "4242"
],
"created" => 123456789,
"type" => "card"
]);
$paymentIntent = json_encode([
"id" => "pi_XX",
"object" => "payment_intent",
"created" => 123456789,
"amount" => 2010,
"currency" => "chf",
"description" => "Kolab Recurring Payment"
]);
$client = $this->mockStripe();
$client->addResponse($setupIntent);
$client->addResponse($paymentMethod);
$client->addResponse($setupIntent);
$client->addResponse($paymentIntent);
// Expect a recurring payment as we have a valid mandate at this point
$result = PaymentsController::topUpWallet($wallet);
$this->assertTrue($result);
// Check that the payments table contains a new record with proper amount
// There should be two records, one for the first payment and another for
// the recurring payment
$this->assertCount(1, $wallet->payments()->get());
$payment = $wallet->payments()->first();
$this->assertSame(2010, $payment->amount);
$this->assertSame(\config('app.name') . " Recurring Payment", $payment->description);
$this->assertSame("pi_XX", $payment->id);
// Expect no payment if the mandate is disabled
$wallet->setSetting('mandate_disabled', 1);
$result = PaymentsController::topUpWallet($wallet);
$this->assertFalse($result);
$this->assertCount(1, $wallet->payments()->get());
// Expect no payment if balance is ok
$wallet->setSetting('mandate_disabled', null);
$wallet->balance = 1000;
$wallet->save();
$result = PaymentsController::topUpWallet($wallet);
$this->assertFalse($result);
$this->assertCount(1, $wallet->payments()->get());
// Expect no payment if the top-up amount is not enough
$wallet->setSetting('mandate_disabled', null);
$wallet->balance = -2050;
$wallet->save();
$result = PaymentsController::topUpWallet($wallet);
$this->assertFalse($result); $this->assertFalse($result);
$this->assertCount(1, $wallet->payments()->get());
Bus::assertDispatchedTimes(\App\Jobs\PaymentMandateDisabledEmail::class, 1);
Bus::assertDispatched(\App\Jobs\PaymentMandateDisabledEmail::class, function ($job) use ($wallet) {
$job_wallet = $this->getObjectProperty($job, 'wallet');
return $job_wallet->id === $wallet->id;
});
// Expect no payment if there's no mandate
$wallet->setSetting('mollie_mandate_id', null);
$wallet->balance = 0;
$wallet->save();
$result = PaymentsController::topUpWallet($wallet);
$this->assertFalse($result);
$this->assertCount(1, $wallet->payments()->get());
Bus::assertDispatchedTimes(\App\Jobs\PaymentMandateDisabledEmail::class, 1);
$this->unmockStripe();
// Test webhook
$post = [
'id' => "evt_1GlZ814fj3SIEU8wtxMZ4Nsa",
'object' => "event",
'api_version' => "2020-03-02",
'created' => 1590147209,
'data' => [
'object' => [
'id' => $payment->id,
'object' => "payment_intent",
'amount' => 2010,
'capture_method' => "automatic",
'created' => 1590147204,
'currency' => "chf",
'customer' => "cus_HKDZ53OsKdlM83",
'last_payment_error' => null,
'metadata' => [],
'receipt_email' => "payment-test@kolabnow.com",
'status' => "succeeded"
]
],
'type' => "payment_intent.succeeded"
];
// Test payment succeeded event
$response = $this->webhookRequest($post);
$response->assertStatus(200);
$this->assertSame(PaymentProvider::STATUS_PAID, $payment->fresh()->status);
$this->assertEquals(2010, $wallet->fresh()->balance);
$transaction = $wallet->transactions()->where('type', Transaction::WALLET_CREDIT)->last();
$this->assertSame(2010, $transaction->amount);
$this->assertSame(
"Auto-payment transaction {$payment->id} using Stripe",
$transaction->description
);
// Assert that email notification job has been dispatched
Bus::assertDispatchedTimes(\App\Jobs\PaymentEmail::class, 1);
Bus::assertDispatched(\App\Jobs\PaymentEmail::class, function ($job) use ($payment) {
$job_payment = $this->getObjectProperty($job, 'payment');
return $job_payment->id === $payment->id;
});
Bus::fake();
// Test for payment failure ('failed' status)
$payment->refresh();
$payment->status = PaymentProvider::STATUS_OPEN;
$payment->save();
$wallet->setSetting('mandate_disabled', null);
$post['type'] = "payment_intent.payment_failed";
$post['data']['object']['status'] = 'failed';
$response = $this->webhookRequest($post);
$response->assertStatus(200);
$wallet->refresh();
$this->assertSame(PaymentProvider::STATUS_FAILED, $payment->fresh()->status);
$this->assertEquals(2010, $wallet->balance);
$this->assertTrue(!empty($wallet->getSetting('mandate_disabled')));
// Assert that email notification job has been dispatched
Bus::assertDispatchedTimes(\App\Jobs\PaymentEmail::class, 1);
Bus::assertDispatched(\App\Jobs\PaymentEmail::class, function ($job) use ($payment) {
$job_payment = $this->getObjectProperty($job, 'payment');
return $job_payment->id === $payment->id;
});
Bus::fake();
// Test for payment failure ('canceled' status)
$payment->refresh();
$payment->status = PaymentProvider::STATUS_OPEN;
$payment->save();
$post['type'] = "payment_intent.canceled";
$post['data']['object']['status'] = 'canceled';
$response = $this->webhookRequest($post);
$response->assertStatus(200);
$this->assertSame(PaymentProvider::STATUS_CANCELED, $payment->fresh()->status);
$this->assertEquals(2010, $wallet->fresh()->balance);
// Assert that email notification job wasn't dispatched,
// it is expected only for recurring payments
Bus::assertDispatchedTimes(\App\Jobs\PaymentEmail::class, 0);
}
/**
* Generate Stripe-Signature header for a webhook payload
*/
protected function webhookRequest($post)
{
$secret = \config('services.stripe.webhook_secret');
$ts = time();
// Problem with this is we need to have a valid mandate $payload = "$ts." . json_encode($post);
// And there's no easy way to confirm a created mandate. $sig = sprintf('t=%d,v1=%s', $ts, \hash_hmac('sha256', $payload, $secret));
// The only way seems to be to fire up Chrome on checkout page
// and do some actions with use of Dusk browser.
$this->markTestIncomplete(); return $this->withHeaders(['Stripe-Signature' => $sig])
->json('POST', "api/webhooks/payment/stripe", $post);
} }
} }