Issues in the payment process about bluesnap HOT 21 CLOSED

The first issue reported has been fixed.
"When the payment is completed, there is no way to go back to the shop (and validate the order) "
The sandbox BlueSnap account for your testing was missing a call back URL which has now been configured to: http://modules-bluesnap.test.prestashop.com/index.php?fc=module&module=bluesnap&controller=callback

from bluesnap.

Indeed, I now come back to the shop. But we can improve the redirect by showing the page order-confirmation instead of the order history ?

from bluesnap.

BlueSnap Prestashop: Please, see our last commit f89c56a Now customer is redirected to the order-confirmation page

from bluesnap.

Indeed, I'm now on the properly page. The first point is almost fixed but you can still improve it by adding information for the customer.
Here is another module which had the same request to do: PrestaShopCorp/vtpayment#26

Have a look in their hookOrderConfirmation(), you will know how to give more information to the customer about his completed order. :)

from bluesnap.

Done, and applied to 16-cart_id branch

from bluesnap.

Hi,

What about the issue about "I cant pay an other amount than the price fixed in the BlueSnap interface with a contract number." ? Did I miss something ?

from bluesnap.

Hi,
you can pay an other amount , please check the videos
Part 1 ( I added the some products to the cart then I created the order )
http://youtu.be/x2e4wCPUMd8
Part 2 ( check order summary on Prestashop side and Bluesnap account)
http://youtu.be/6t9BTQphoec

I tested this issue at our server instance using the latest version of the payment module (the same version is pushed at the git)
https://sandbox.plimus.com/jsp/developer_login.jsp
Sandbox account credentials:
Username:alexejhuk
Password:Belvg123
Merchant account ID: 396972
API username: API_14074180364141593417936
API password:Belvg123
Store ID: 13661
Data Protection Key: Belvg123

Server credentials:
belvg.net/bluesnap_1608
belvg.net/bluesnap_1608/adm
[email protected]
team1587

from bluesnap.

Great, thanks a lot for the videos, I will try again on my shops. I keep you in touch.

from bluesnap.

Okay, I now get a success message on the confirmation page.

I had to add the custom input in my contract configuration. Maybe it should be good if a How-To was written to explain how to configuration our account for BlueSnap with PrestaShop.

However, I wonder if we don't have a security issue. As you can see on the following screenshot, we have an order confirmation with an amount of 26.41$, but on the BlueSnap BO I still have 1$.

The payment should not be accepted but refused.

from bluesnap.

Hi, this issue with wrong amount in BlueSnap BO is really strange. Can you, please, check if iframe url has "enc" variable and this variable is not empty?

May be @LironAsias can help to investigate it on the BlueSnap side?

from bluesnap.

Oh, you're right. It seems that a variable called enc exists but has no value:

./checkout?0-1.IFormSubmitListener-plimusContent-PHmain-plimusContent_PHmain2-plimusForm&storeId=13221&currency=USD&[email protected]&sku2149656=1&custom1=19&language=FRENCH&firstName=John&lastName=DOE&country=FR&enc&cinfo=7e433ef6-8e6b-46ef-ba9c-e15d7a2ddccc

You gave me access to your shop, so let me give you access to our one:
FO: http://modules-bluesnap.test.prestashop.com/
BO: http://modules-bluesnap.test.prestashop.com/admin-dev/
Login : francoisprestashop.com
MDP : 123456789

Please let me know if you need but don't have anymore the credentials you gave us for the bluesnap interface.

from bluesnap.

Please, check log files: log/bluesnap_buynow_api.log and log/bluesnap_buynow_ipn.log
Did you provide server IP as Authorized IP in BlueSnap BO http://screencast.com/t/HB21hcO1wYD ?

from bluesnap.

Okay, now everything is running properly. But I didn't like the confirmation of the order with a wrong paid amount. It will be a huge problem if merchants think their order payment are validated but are actually not.
I'm not sure that the security check will see this error, so I ask immediately to fix it. Anyway, I send your module to the security team.

Meanwhile, it should be good if the configuration was described somewhere on the module configuration page in the back-office, because there was a lot of things to do and the actions must be done on too many pages.

from bluesnap.

Hm, can you still reproduce this issue with wrong amount? Because in my tests I get one and the same amount in PrestaShop BO, BlueSanp BO, customer email notification and admin email notification

from bluesnap.

I think I can reproduce the error if I remove the shop from the authorized IP list.

from bluesnap.

See, full process of the iframe link generation is like this:
collect order data, send API request to the BlueSnap and receive security token in response. With this token we encode valuable data such as qty, total amount, order id and using this encoded data build url for the iframe.

If your IP is not among trusted IPs BlueSnap won't authorize request and you can not process with later encoding.

As I know BlueSnap team has some process for setting store for every merchant and this issue with server IP is solved during this process. But, of course, this should be mentioned in documentation.

Can we close this issue?

from bluesnap.

So if cannot receive the security token in response, why the process is not blocked somewhere ? Because even if it is not defined, I still can proceed with the payment and I guess this should not happen when I see the issue with the payment amount.

Are you sure a test before the checkout is not missing ?

from bluesnap.

Issue with Auth IPs is area of ​​responsibility of the BlueSnap and this should not happen in production. But we'll add additional check and error warning for this case.

from bluesnap.

Great, I'm waiting for it before closing this issue. 😄

from bluesnap.

Hello, we added notification to the customer 3628259

from bluesnap.

Hi,

Sorry, I forgot to close it.

from bluesnap.