import { $inject, z } from "alepha"; import { $route, type ServerReply } from "alepha/server"; import { MemoryPaymentProvider } from "../providers/MemoryPaymentProvider.ts"; import { PaymentProvider } from "../providers/PaymentProvider.ts"; import { PaymentService } from "../services/PaymentService.ts"; const FORBIDDEN_HTML = "Mock checkout" + "

Mock checkout is only available with the in-memory payment provider.

"; const escapeHtml = (s: string) => s.replace(/[&<>"']/g, (c) => c === "&" ? "&" : c === "<" ? "<" : c === ">" ? ">" : c === '"' ? """ : "'", ); const formatAmount = (cents: number, currency: string) => { const value = (cents / 100).toFixed(2); return `${value} ${currency.toUpperCase()}`; }; const renderPage = (opts: { intentId: string; amount: string; returnUrl: string; }) => ` Checkout
Mode test — paiement simulé

Montant à payer

${escapeHtml(opts.amount)}

🔒 Aucune carte n'est débitée — environnement de développement

intent: ${opts.intentId}

`; const appendStatusParam = (returnUrl: string, status: "success" | "cancel") => { try { const url = new URL(returnUrl, "http://placeholder.local"); url.searchParams.set("booking", status); return returnUrl.startsWith("http") ? url.toString() : url.pathname + url.search + url.hash; } catch { return returnUrl; } }; export class MockCheckoutController { protected readonly url = "/payments/mock-checkout"; protected readonly payments = $inject(PaymentService); protected readonly provider = $inject(PaymentProvider); protected isMemoryProvider() { return this.provider instanceof MemoryPaymentProvider; } protected forbidden(reply: ServerReply) { reply.headers["content-type"] = "text/html; charset=utf-8"; reply.status = 403; return FORBIDDEN_HTML; } public readonly mockCheckoutPage = $route({ method: "GET", path: `${this.url}/:id`, schema: { params: z.object({ id: z.uuid() }), query: z.object({ returnUrl: z.text({ size: "rich" }).optional() }), }, handler: async ({ params, query, reply }) => { if (!this.isMemoryProvider()) return this.forbidden(reply); const intent = await this.payments.getIntent(params.id); reply.headers["content-type"] = "text/html; charset=utf-8"; return renderPage({ intentId: intent.id, amount: formatAmount(intent.amount, intent.currency), returnUrl: query.returnUrl ?? "/", }); }, }); public readonly mockCheckoutConfirm = $route({ method: "POST", path: `${this.url}/:id/confirm`, schema: { params: z.object({ id: z.uuid() }), body: z.object({ returnUrl: z.text({ size: "rich" }).optional() }), }, handler: async ({ params, body, reply }) => { if (!this.isMemoryProvider()) return this.forbidden(reply); await this.payments.handleWebhookEvent(params.id, "captured"); reply.redirect(appendStatusParam(body.returnUrl ?? "/", "success"), 302); }, }); public readonly mockCheckoutCancel = $route({ method: "POST", path: `${this.url}/:id/cancel`, schema: { params: z.object({ id: z.uuid() }), body: z.object({ returnUrl: z.text({ size: "rich" }).optional() }), }, handler: async ({ params, body, reply }) => { if (!this.isMemoryProvider()) return this.forbidden(reply); await this.payments.handleWebhookEvent(params.id, "failed"); reply.redirect(appendStatusParam(body.returnUrl ?? "/", "cancel"), 302); }, }); }