mirror of
https://github.com/hanzoai/commerce.git
synced 2026-10-30 15:08:42 +00:00
zeekay
1943f1c093
Multi-tenant commerce and billing: orders, subscriptions, invoices, plans, usage metering and a credit ledger. One Go binary. MIT OR Apache-2.0. Claude-Session: https://claude.ai/code/session_01SAtaDFm8VDiWrhYHNNtxMw
58 lines
2.3 KiB
Go
58 lines
2.3 KiB
Go
package payment
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/hanzoai/commerce/models/organization"
|
|
)
|
|
|
|
// The env credential fallback (cloud orgs with no per-org Square creds) must
|
|
// surface the PRODUCTION app id + location for a LIVE org — the values the browser
|
|
// tokenizes against and commerce charges with. The org is the authority;
|
|
// SQUARE_ENVIRONMENT is set to the opposite here and must not participate.
|
|
func TestSquarePublicConfig_LiveOrgGetsProductionPair(t *testing.T) {
|
|
t.Setenv("SQUARE_ENVIRONMENT", "sandbox") // hostile: ignored
|
|
t.Setenv("SQUARE_APPLICATION_ID", "sq0idp-PROD")
|
|
t.Setenv("SQUARE_LOCATION_ID", "PRODLOC")
|
|
|
|
org := &organization.Organization{}
|
|
org.Live = true
|
|
got := SquarePublicConfig(org)
|
|
if got.ApplicationID != "sq0idp-PROD" || got.LocationID != "PRODLOC" {
|
|
t.Errorf("app/location = %q/%q, want sq0idp-PROD/PRODLOC", got.ApplicationID, got.LocationID)
|
|
}
|
|
if got.Environment != "production" {
|
|
t.Errorf("environment = %q, want production", got.Environment)
|
|
}
|
|
}
|
|
|
|
// The SAME per-org authority must select the SANDBOX public vars for a test-mode
|
|
// org, so the app id never straddles environments — on the same deployment that
|
|
// serves the live org above.
|
|
func TestSquarePublicConfig_TestOrgGetsSandboxPair(t *testing.T) {
|
|
t.Setenv("SQUARE_ENVIRONMENT", "production") // hostile: ignored
|
|
t.Setenv("SQUARE_APPLICATION_ID", "sq0idp-PROD")
|
|
t.Setenv("SQUARE_LOCATION_ID", "PRODLOC")
|
|
t.Setenv("SQUARE_SANDBOX_APPLICATION_ID", "sandbox-sq0idb-SBX")
|
|
t.Setenv("SQUARE_SANDBOX_LOCATION_ID", "SBXLOC")
|
|
|
|
got := SquarePublicConfig(&organization.Organization{})
|
|
if got.ApplicationID != "sandbox-sq0idb-SBX" || got.LocationID != "SBXLOC" {
|
|
t.Errorf("app/location = %q/%q, want sandbox pair", got.ApplicationID, got.LocationID)
|
|
}
|
|
if got.Environment != "sandbox" {
|
|
t.Errorf("environment = %q, want sandbox", got.Environment)
|
|
}
|
|
}
|
|
|
|
// Fail-closed, per tenant: an org that does not say Live gets sandbox, whatever
|
|
// the deployment env says — so a half-configured org can never silently charge
|
|
// live cards, and it cannot drag other tenants with it either.
|
|
func TestSquarePublicConfig_FailsClosedPerOrg(t *testing.T) {
|
|
t.Setenv("SQUARE_ENVIRONMENT", "production") // hostile: ignored
|
|
got := SquarePublicConfig(&organization.Organization{})
|
|
if got.Environment != "sandbox" {
|
|
t.Errorf("environment = %q, want sandbox (fail-closed)", got.Environment)
|
|
}
|
|
}
|