mirror of
https://github.com/hanzoai/commerce.git
synced 2026-10-30 15:08:42 +00:00
zooqueenandHanzo Dev
6c4f4d660b
thirdparty/square.FromEnv is the one reader of the deployment's Square account: SQUARE_SANDBOX_* for sandbox, SQUARE_* for production, never mixed. The five readers (the org processor, the public tenant config, the unified provider's env seed, the standalone init and payment links) call it, so an empty sandbox set is an unconfigured processor and a sandbox token is never paired with a production location. The resolver tests now set the sandbox names they expect and keep the production ones as hostile values a sandbox org must not show. Co-authored-by: Hanzo Dev <[email protected]>
104 lines
3.5 KiB
Go
104 lines
3.5 KiB
Go
// Copyright (c) 2014-present Hanzo AI, Inc.
|
|
// Licensed under MIT OR Apache-2.0. See LICENSE-MIT and LICENSE-APACHE.
|
|
|
|
package square
|
|
|
|
import (
|
|
"context"
|
|
"crypto/hmac"
|
|
"crypto/sha256"
|
|
"encoding/base64"
|
|
"fmt"
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
// TestConfigFromEnvSeedsWebhookValidation is the regression guard for the
|
|
// "square processor not configured" 401 on every inbound webhook: the
|
|
// registry Provider must be usable for SESSIONLESS signature validation
|
|
// straight from deployment env, with no per-tenant Configure() in front.
|
|
// It drives the REAL verification path end-to-end: env → configFromEnv →
|
|
// Configure → ValidateWebhook over a Square-spec signature
|
|
// (base64(HMAC-SHA256(key, notificationURL+body))).
|
|
func TestConfigFromEnvSeedsWebhookValidation(t *testing.T) {
|
|
const (
|
|
key = "test-signature-key"
|
|
url = "https://pay.example.test/v1/billing/webhooks/square"
|
|
)
|
|
t.Setenv("SQUARE_ENVIRONMENT", "production")
|
|
t.Setenv("SQUARE_ACCESS_TOKEN", "tok")
|
|
t.Setenv("SQUARE_LOCATION_ID", "loc")
|
|
t.Setenv("SQUARE_APPLICATION_ID", "app")
|
|
t.Setenv("SQUARE_WEBHOOK_SIGNATURE_KEY", key)
|
|
t.Setenv("SQUARE_WEBHOOK_URL", url)
|
|
|
|
cfg, ok := configFromEnv()
|
|
if !ok {
|
|
t.Fatal("configFromEnv() not ok with full env")
|
|
}
|
|
p := NewProvider(cfg)
|
|
if !p.IsAvailable(context.Background()) {
|
|
t.Fatal("env-seeded provider not available")
|
|
}
|
|
|
|
body := []byte(fmt.Sprintf(
|
|
`{"merchant_id":"m","type":"test.ping","event_id":"seed-test","created_at":%q,"data":{"type":"t","id":"i","object":{}}}`,
|
|
time.Now().UTC().Format(time.RFC3339)))
|
|
mac := hmac.New(sha256.New, []byte(key))
|
|
mac.Write([]byte(url))
|
|
mac.Write(body)
|
|
sig := base64.StdEncoding.EncodeToString(mac.Sum(nil))
|
|
|
|
evt, err := p.ValidateWebhook(context.Background(), body, sig)
|
|
if err != nil || evt == nil {
|
|
t.Fatalf("valid signature rejected: %v", err)
|
|
}
|
|
if evt.ID != "seed-test" {
|
|
t.Errorf("event id = %q", evt.ID)
|
|
}
|
|
|
|
if _, err := p.ValidateWebhook(context.Background(), append(body, ' '), sig); err == nil {
|
|
t.Error("tampered body accepted")
|
|
}
|
|
}
|
|
|
|
// TestConfigFromEnvSandboxAndAbsent covers the credential-set switch and the
|
|
// disabled path.
|
|
func TestConfigFromEnvSandboxAndAbsent(t *testing.T) {
|
|
t.Setenv("SQUARE_ENVIRONMENT", "sandbox")
|
|
t.Setenv("SQUARE_ACCESS_TOKEN", "prod-tok")
|
|
t.Setenv("SQUARE_LOCATION_ID", "prod-loc")
|
|
t.Setenv("SQUARE_SANDBOX_ACCESS_TOKEN", "sb-tok")
|
|
t.Setenv("SQUARE_SANDBOX_LOCATION_ID", "sb-loc")
|
|
t.Setenv("SQUARE_WEBHOOK_SIGNATURE_KEY", "")
|
|
t.Setenv("SQUARE_WEBHOOK_URL", "")
|
|
|
|
cfg, ok := configFromEnv()
|
|
if !ok || cfg.AccessToken != "sb-tok" || cfg.LocationID != "sb-loc" || cfg.Environment != "sandbox" {
|
|
t.Errorf("sandbox switch broken: ok=%v cfg=%+v", ok, cfg)
|
|
}
|
|
|
|
t.Setenv("SQUARE_ENVIRONMENT", "")
|
|
t.Setenv("SQUARE_ACCESS_TOKEN", "")
|
|
t.Setenv("SQUARE_SANDBOX_ACCESS_TOKEN", "")
|
|
if _, ok := configFromEnv(); ok {
|
|
t.Error("configFromEnv ok without an access token")
|
|
}
|
|
}
|
|
|
|
// A sandbox deployment with no sandbox account configures nothing: the
|
|
// production names are never read on the sandbox switch.
|
|
func TestConfigFromEnvSandboxReadsNoProductionName(t *testing.T) {
|
|
t.Setenv("SQUARE_ENVIRONMENT", "sandbox")
|
|
t.Setenv("SQUARE_ACCESS_TOKEN", "EAAA-prod-hostile")
|
|
t.Setenv("SQUARE_LOCATION_ID", "PRODLOC-hostile")
|
|
t.Setenv("SQUARE_APPLICATION_ID", "sq0idp-hostile")
|
|
t.Setenv("SQUARE_SANDBOX_ACCESS_TOKEN", "")
|
|
t.Setenv("SQUARE_SANDBOX_LOCATION_ID", "")
|
|
t.Setenv("SQUARE_SANDBOX_APPLICATION_ID", "")
|
|
|
|
if cfg, ok := configFromEnv(); ok {
|
|
t.Fatalf("sandbox configured from production names: %+v", cfg)
|
|
}
|
|
}
|