Issues in the payment process

[Quetzacoalt91]

I have just made a new test with BlueSnap and I'm glad to see an order is not created anymore before the payment process.

But I'm still facing other issues:

• When the payment is completed, there is no way to go back to the shop (and validate the order)
• I cant pay an other amount than the price fixed in the BlueSnap interface with a contract number.

[LironAsias]

The first issue reported has been fixed.
"When the payment is completed, there is no way to go back to the shop (and validate the order) "
The sandbox BlueSnap account for your testing was missing a call back URL which has now been configured to: http://modules-bluesnap.test.prestashop.com/index.php?fc=module&module=bluesnap&controller=callback

[Quetzacoalt91]

Indeed, I now come back to the shop. But we can improve the redirect by showing the page order-confirmation instead of the order history ?

[pavelnovitsky]

BlueSnap Prestashop: Please, see our last commit f89c56a Now customer is redirected to the order-confirmation page

[Quetzacoalt91]

Indeed, I'm now on the properly page. The first point is almost fixed but you can still improve it by adding information for the customer.
Here is another module which had the same request to do: PrestaShopCorp/vtpayment#26

Have a look in their hookOrderConfirmation(), you will know how to give more information to the customer about his completed order. :)

[alexbelvg]

Done, and applied to 16-cart_id branch

[Quetzacoalt91]

Hi,

What about the issue about "I cant pay an other amount than the price fixed in the BlueSnap interface with a contract number." ? Did I miss something ?

[alexbelvg]

Hi,
you can pay an other amount , please check the videos
Part 1 ( I added the some products to the cart then I created the order )
http://youtu.be/x2e4wCPUMd8
Part 2 ( check order summary on Prestashop side and Bluesnap account)
http://youtu.be/6t9BTQphoec

I tested this issue at our server instance using the latest version of the payment module (the same version is pushed at the git)
https://sandbox.plimus.com/jsp/developer_login.jsp
Sandbox account credentials:
Username:alexejhuk
Password:Belvg123
Merchant account ID: 396972
API username: API_14074180364141593417936
API password:Belvg123
Store ID: 13661
Data Protection Key: Belvg123

Server credentials:
belvg.net/bluesnap_1608
belvg.net/bluesnap_1608/adm
team@prestashop.com
team1587

[Quetzacoalt91]

Great, thanks a lot for the videos, I will try again on my shops. I keep you in touch.

[Quetzacoalt91]

Okay, I now get a success message on the confirmation page.

I had to add the custom input in my contract configuration. Maybe it should be good if a How-To was written to explain how to configuration our account for BlueSnap with PrestaShop.

However, I wonder if we don't have a security issue. As you can see on the following screenshot, we have an order confirmation with an amount of 26.41$, but on the BlueSnap BO I still have 1$.

The payment should not be accepted but refused.

[pavelnovitsky]

Hi, this issue with wrong amount in BlueSnap BO is really strange. Can you, please, check if iframe url has "enc" variable and this variable is not empty?

May be @LironAsias can help to investigate it on the BlueSnap side?

[Quetzacoalt91]

Oh, you're right. It seems that a variable called enc exists but has no value:

./checkout?0-1.IFormSubmitListener-plimusContent-PHmain-plimusContent_PHmain2-plimusForm&storeId=13221&currency=USD&email=pub@prestashop.com&sku2149656=1&custom1=19&language=FRENCH&firstName=John&lastName=DOE&country=FR&enc&cinfo=7e433ef6-8e6b-46ef-ba9c-e15d7a2ddccc

You gave me access to your shop, so let me give you access to our one:
FO: http://modules-bluesnap.test.prestashop.com/
BO: http://modules-bluesnap.test.prestashop.com/admin-dev/
Login : francoisprestashop.com
MDP : 123456789

Please let me know if you need but don't have anymore the credentials you gave us for the bluesnap interface.

[pavelnovitsky]

Please, check log files: log/bluesnap_buynow_api.log and log/bluesnap_buynow_ipn.log
Did you provide server IP as Authorized IP in BlueSnap BO http://screencast.com/t/HB21hcO1wYD ?

[Quetzacoalt91]

Okay, now everything is running properly. But I didn't like the confirmation of the order with a wrong paid amount. It will be a huge problem if merchants think their order payment are validated but are actually not.
I'm not sure that the security check will see this error, so I ask immediately to fix it. Anyway, I send your module to the security team.

Meanwhile, it should be good if the configuration was described somewhere on the module configuration page in the back-office, because there was a lot of things to do and the actions must be done on too many pages.

[pavelnovitsky]

Hm, can you still reproduce this issue with wrong amount? Because in my tests I get one and the same amount in PrestaShop BO, BlueSanp BO, customer email notification and admin email notification

[Quetzacoalt91]

I think I can reproduce the error if I remove the shop from the authorized IP list.

[pavelnovitsky]

See, full process of the iframe link generation is like this:
collect order data, send API request to the BlueSnap and receive security token in response. With this token we encode valuable data such as qty, total amount, order id and using this encoded data build url for the iframe.

If your IP is not among trusted IPs BlueSnap won't authorize request and you can not process with later encoding.

As I know BlueSnap team has some process for setting store for every merchant and this issue with server IP is solved during this process. But, of course, this should be mentioned in documentation.

Can we close this issue?

[Quetzacoalt91]

So if cannot receive the security token in response, why the process is not blocked somewhere ? Because even if it is not defined, I still can proceed with the payment and I guess this should not happen when I see the issue with the payment amount.

Are you sure a test before the checkout is not missing ?

[pavelnovitsky]

Issue with Auth IPs is area of ​​responsibility of the BlueSnap and this should not happen in production. But we'll add additional check and error warning for this case.

[Quetzacoalt91]

Great, I'm waiting for it before closing this issue. 😄

[pavelnovitsky]

Hello, we added notification to the customer 3628259

[Quetzacoalt91]

Hi,

Sorry, I forgot to close it.