mirror of
https://github.com/hanzoai/commerce.git
synced 2026-10-30 15:08:42 +00:00
zeekay
73b7290e7f
Square keeps an event's created_at across every retry, and the receiver refused anything older than five minutes, so every retry of an event first sent while cloud was down (Recreate, ten rollouts a day) was refused until Square gave up. The verifier now lives in payment/providers/square and needs only the key and the URL; thirdparty/square is the API client and no longer registers itself or verifies anything, so every registry holds one Square type. Replay is stopped by the event id instead: each verified event is recorded once for the whole deployment, keyed on the verifying processor and the event id with an insert-if-absent swap, so a repeat is a duplicate under any path or org. The path names the one processor that verifies, and only one that holds its webhook secret may: an unknown name, or a verifier that needs no secret, is refused rather than tried. The books an event lands in are the verifying account's, else the deployment's brand — never a header or session, which on a replay are the replayer's. An effect that did not land (a store or the ledger did not answer) leaves the delivery open with a 503, so the provider redelivers; it used to be acknowledged and never retried. A settlement reads the payment index before the org's books, because an in-session charge's receipt is in the payer's org. POST /v1/commerce/webhooks/:provider is declared once, in setupRoutes, so standalone and embedded commerce serve the same address; the /v1/billing/webhooks spelling is gone. thirdparty/kms read /v1/kms/orgs/<org>/secrets/..., which cloud no longer serves, and was off in production anyway, so per-org payment credentials never loaded. It is deleted. secrets.Org reads orgs/<org>/<name> through the host's reader, the caller re-pointed at that org with zip.ActingAs so the KMS tenancy check admits it, and payment.Hydrate loads an org's credentials where the org receives the money: storefront checkout, storefront subscriptions and wire, and the brand's bank for the billing wire rail. Hanzo's own billing no longer reads the paying org's credentials; it charges the deployment's account, as it did. The standalone binary reads through hanzoai/kms/sdk/go.
84 lines
2.7 KiB
Go
84 lines
2.7 KiB
Go
package square
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/hanzoai/commerce/payment/processor"
|
|
)
|
|
|
|
// The customer and card-on-file calls the billing handlers make on the registered
|
|
// Square processor (api/billing/square_cardonfile.go asserts them), each refused on
|
|
// a provider with no API client.
|
|
|
|
// CreateCustomer creates a Square customer and returns its id.
|
|
func (p *Provider) CreateCustomer(ctx context.Context, email, name string, metadata map[string]interface{}) (string, error) {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return "", err
|
|
}
|
|
return p.inner.CreateCustomer(ctx, email, name, metadata)
|
|
}
|
|
|
|
// FindCustomer returns the oldest customer whose reference_id is reference, or "".
|
|
func (p *Provider) FindCustomer(ctx context.Context, reference string) (string, error) {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return "", err
|
|
}
|
|
return p.inner.FindCustomer(ctx, reference)
|
|
}
|
|
|
|
// GetCustomer reads a customer.
|
|
func (p *Provider) GetCustomer(ctx context.Context, customerID string) (map[string]interface{}, error) {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return nil, err
|
|
}
|
|
return p.inner.GetCustomer(ctx, customerID)
|
|
}
|
|
|
|
// UpdateCustomer changes a customer.
|
|
func (p *Provider) UpdateCustomer(ctx context.Context, customerID string, updates map[string]interface{}) error {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return err
|
|
}
|
|
return p.inner.UpdateCustomer(ctx, customerID, updates)
|
|
}
|
|
|
|
// DeleteCustomer removes a customer.
|
|
func (p *Provider) DeleteCustomer(ctx context.Context, customerID string) error {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return err
|
|
}
|
|
return p.inner.DeleteCustomer(ctx, customerID)
|
|
}
|
|
|
|
// AddPaymentMethod vaults a card nonce on a customer and returns the card id.
|
|
func (p *Provider) AddPaymentMethod(ctx context.Context, customerID, token string) (string, error) {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return "", err
|
|
}
|
|
return p.inner.AddPaymentMethod(ctx, customerID, token)
|
|
}
|
|
|
|
// Vault vaults a card nonce on a customer and returns the card as Square reports it.
|
|
func (p *Provider) Vault(ctx context.Context, customerID, token string) (processor.Card, error) {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return processor.Card{}, err
|
|
}
|
|
return p.inner.Vault(ctx, customerID, token)
|
|
}
|
|
|
|
// Cards lists the cards vaulted on a customer.
|
|
func (p *Provider) Cards(ctx context.Context, customerID string) ([]processor.Card, error) {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return nil, err
|
|
}
|
|
return p.inner.Cards(ctx, customerID)
|
|
}
|
|
|
|
// RemovePaymentMethod disables a vaulted card.
|
|
func (p *Provider) RemovePaymentMethod(ctx context.Context, customerID, paymentMethodID string) error {
|
|
if err := p.checkAvailable(); err != nil {
|
|
return err
|
|
}
|
|
return p.inner.RemovePaymentMethod(ctx, customerID, paymentMethodID)
|
|
}
|