Release v2.0.0-alpha.2 · Setono/SyliusQuickpayPlugin

Second pre-release of the 2.0 line. Everything from v2.0.0-alpha.1 plus:

New

A doctor command (#131): setono:sylius-quickpay:doctor verifies every configured Quickpay gateway against the Quickpay API — api key, private-key checksum self-test, agreement existence, order-prefix length and cross-gateway uniqueness, and the notify-route registration. --live additionally creates a money-less test payment and probes the payment link PUT permission, catching the classic Not authorized to PUT /payments/:id/link case before a customer does. Non-zero exit on failures, so it can run in CI or cron. See the README's Checking your configuration section.
Fraud signals surfaced (#132): a Fraud suspected badge on the admin operation history, an opt-in fraud.block_capture guard that skips the automatic capture on completion for flagged payments (leaving them for manual review — the transition itself proceeds), and a --fraud-suspected report mode on the reconciliation command that asks Quickpay directly for flagged payments across all configured gateways.

The api-key check no longer rejects locked-down api users (#141): Quickpay answers 401 on /ping both for an invalid key and for a valid key whose api user merely lacks the /ping permission, so the form-save credential check (and the doctor) now verify through a /payments read when the ping is rejected — a valid key always saves; only an explicit rejection on both endpoints counts as invalid.

composer require setono/sylius-quickpay-plugin:^2.0@alpha setono/payum-quickpay:^2.0@RC setono/quickpay-php-sdk:^1.2