d19a14a45e
- InitiatePaymentAction + POST /api/v1/payments/{booking}/initiate
- Generic KBZ webhook (POST /api/v1/webhooks/{method}/{encryptBookingId?}),
signature verification per KBZ's real callback spec, PaymentGatewayInterface::handleWebhook()
- ConfirmPaymentAction: idempotent confirmation, PaymentCompleted/PaymentFailed events,
MarkBookingPaid listener
- RefundBookingAction + POST /api/v1/bookings/{booking}/refund: partial refunds validated
against remaining balance, RefundProcessed event, MarkBookingRefunded listener
- CancelBookingAction now refunds confirmed bookings instead of rejecting; BookingPolicy::cancel
requires process_refunds for confirmed bookings
- PaymentPlugin + PaymentResource/RefundResource Filament admin UI (read-only payments,
refund list + Process action)
- Booking detail page now shows related payments
- Fix CACHE_STORE mismatch (database -> redis) so tagged route caching works
- CLAUDE.md: never run migrate:fresh/migrate:refresh/db:wipe on dev without being asked
127 lines
4.6 KiB
PHP
127 lines
4.6 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use Livewire\Livewire;
|
|
use Modules\Booking\Enums\BookingStatus;
|
|
use Modules\Booking\Models\Booking;
|
|
use Modules\Payment\Contracts\PaymentGatewayInterface;
|
|
use Modules\Payment\Data\PaymentRequestData;
|
|
use Modules\Payment\Data\PaymentResultData;
|
|
use Modules\Payment\Data\RefundResultData;
|
|
use Modules\Payment\Enums\PaymentMethod;
|
|
use Modules\Payment\Enums\RefundStatus;
|
|
use Modules\Payment\Factories\PaymentGatewayFactory;
|
|
use Modules\Payment\Filament\Resources\Refunds\Pages\ListRefunds;
|
|
use Modules\Payment\Models\Payment;
|
|
use Modules\Payment\Models\Refund;
|
|
use Spatie\Permission\Models\Permission;
|
|
|
|
/**
|
|
* Never calls the real KBZ refund API in tests.
|
|
*/
|
|
class FakeFilamentRefundGateway implements PaymentGatewayInterface
|
|
{
|
|
public function initiate(PaymentRequestData $data): PaymentResultData
|
|
{
|
|
throw new RuntimeException('not needed for this test');
|
|
}
|
|
|
|
public function verify(string $gatewayTransactionId): PaymentResultData
|
|
{
|
|
throw new RuntimeException('not needed for this test');
|
|
}
|
|
|
|
public function refund(string $gatewayTransactionId, string $amount, string $reason): RefundResultData
|
|
{
|
|
return new RefundResultData(status: RefundStatus::Completed, gatewayRefundId: 'REFUND123', gatewayPayload: []);
|
|
}
|
|
|
|
public function handleWebhook(array $payload): PaymentResultData
|
|
{
|
|
throw new RuntimeException('not needed for this test');
|
|
}
|
|
}
|
|
|
|
beforeEach(function () {
|
|
foreach (['view_payments', 'process_refunds'] as $permission) {
|
|
Permission::findOrCreate($permission, 'web');
|
|
}
|
|
|
|
app(PaymentGatewayFactory::class)->register(PaymentMethod::KbzMiniApp, FakeFilamentRefundGateway::class);
|
|
});
|
|
|
|
test('a user with view_payments can list refunds', function () {
|
|
$viewer = User::factory()->create()->givePermissionTo('view_payments');
|
|
$this->actingAs($viewer);
|
|
|
|
$refunds = Refund::factory()->count(3)->create();
|
|
|
|
Livewire::test(ListRefunds::class)
|
|
->assertOk()
|
|
->assertCanSeeTableRecords($refunds);
|
|
});
|
|
|
|
test('the process action is hidden from a user without process_refunds', function () {
|
|
$viewer = User::factory()->create()->givePermissionTo('view_payments');
|
|
$this->actingAs($viewer);
|
|
|
|
Livewire::test(ListRefunds::class)
|
|
->assertActionHidden('process');
|
|
});
|
|
|
|
test('the process action is visible to a user with process_refunds', function () {
|
|
$admin = User::factory()->create()->givePermissionTo(['view_payments', 'process_refunds']);
|
|
$this->actingAs($admin);
|
|
|
|
Livewire::test(ListRefunds::class)
|
|
->assertActionVisible('process');
|
|
});
|
|
|
|
test('processing a refund via the action calls RefundBookingAction and cancels the booking', function () {
|
|
$admin = User::factory()->create()->givePermissionTo(['view_payments', 'process_refunds']);
|
|
$this->actingAs($admin);
|
|
|
|
$booking = Booking::factory()->create(['status' => BookingStatus::Confirmed, 'price' => 15000]);
|
|
$payment = Payment::factory()->completed()->create([
|
|
'booking_id' => $booking->id,
|
|
'gateway' => PaymentMethod::KbzMiniApp,
|
|
'amount' => 15000,
|
|
'gateway_transaction_id' => 'EVB-FILAMENT-REFUND-1',
|
|
]);
|
|
|
|
Livewire::test(ListRefunds::class)
|
|
->callAction('process', data: [
|
|
'payment_id' => $payment->id,
|
|
'amount' => 15000,
|
|
'reason' => 'customer requested cancellation',
|
|
])
|
|
->assertNotified();
|
|
|
|
expect($booking->refresh()->status)->toBe(BookingStatus::Cancelled)
|
|
->and(Refund::where('payment_id', $payment->id)->where('status', RefundStatus::Completed)->exists())->toBeTrue();
|
|
});
|
|
|
|
test('a non-completed payment is not offered in the process action\'s payment select', function () {
|
|
$admin = User::factory()->create()->givePermissionTo(['view_payments', 'process_refunds']);
|
|
$this->actingAs($admin);
|
|
|
|
$booking = Booking::factory()->create(['status' => BookingStatus::PendingPayment]);
|
|
$pendingPayment = Payment::factory()->create([
|
|
'booking_id' => $booking->id,
|
|
'gateway' => PaymentMethod::KbzMiniApp,
|
|
]);
|
|
|
|
// The Select itself rejects a value outside its "Completed only"
|
|
// options (domain.md §6) — RefundBookingAction's own guard against a
|
|
// non-confirmed booking is covered directly in RefundBookingActionTest.
|
|
Livewire::test(ListRefunds::class)
|
|
->callAction('process', data: [
|
|
'payment_id' => $pendingPayment->id,
|
|
'amount' => 1000,
|
|
'reason' => 'reason',
|
|
])
|
|
->assertHasFormErrors(['payment_id']);
|
|
|
|
expect(Refund::where('payment_id', $pendingPayment->id)->exists())->toBeFalse();
|
|
});
|