openfoodnetwork/lib/stripe/authorize_response_patcher.rb

# frozen_string_literal: true

# This class patches the Stripe API response to the authorize action
# It copies the authorization URL to a field that is recognized and persisted by Spree payments
module Stripe
  class AuthorizeResponsePatcher
    def initialize(response)
      @response = response
    end

    def call!
      if (url = url_for_authorization(@response)) && field_to_patch(@response).present?
        field_to_patch(@response)['message'] = url
      end

      @response
    end

    private

    def url_for_authorization(response)
      return unless %w(requires_source_action requires_action).include?(response.params["status"])

      next_action = response.params["next_source_action"] || response.params["next_action"]
      return unless next_action.present?

      next_action_type = next_action["type"]
      return unless %w(authorize_with_url redirect_to_url).include?(next_action_type)

      url = next_action[next_action_type]["url"]
      return url if url.match(%r{https?://\S+}) && url.include?("stripe.com")
    end

    # This field is used because the Spree code recognizes and stores it
    # This data is then used in Checkout::StripeRedirect
    def field_to_patch(response)
      response.cvv_result
    end
  end
end