Kevin
ccc6f85809
Strangler-Refactoring der PAYONE-Zahlungslogik in eine testbare
Service-Schicht, ohne Verhalten in Checkout/Cron/IPN zu ändern.
Neue Services (app/Services/Payment/Payone):
- PayonePaymentService (+ PayonePaymentResult-DTO) für CC-/SEPA-Check
und Abo-Abbuchung
- PayoneRequestBuilder, PaymentMethodResolver, PayoneMethodConfig
- PayoneTransactionRecorder: zentrale PaymentTransaction-Erstellung
(API-Response, Invoice, Webhook) inkl. PCI-Redaction (cardpan/cardcvc2)
- PayoneWebhookHandler (+ PayoneWebhookResult): IPN/TSOK-Logik aus
Api\PayoneController; response('TSOK') statt echo/exit
- PayoneTransportException + Handler-Mapping (403) statt abort() im Service
Hotfixes (R1): var_dump/exit & bare exit() entfernt, Log-Redaction.
Security (R-Review):
- PAYONE_KEY_HASH (MD5-Hash, kein Klartext) mit Boot-Hard-Fail; schließt
zugleich die ''-Webhook-Bypass-Lücke. Artisan-Command payone:hash-key
(verdeckte Eingabe, optional --write) zur Hash-Erzeugung.
- Webhook: txaction Pflichtfeld, mode-Fallback auf payment->mode.
Pay\PayoneController ist @deprecated-Fassade (614 → 328 Zeilen),
delegiert an Services via Container-Singleton.
Migration: fehlende Spalte shopping_payments.carddata nachgezogen.
Tests: 47 grün (PayonePaymentService, Recorder, Webhook, Resolver,
TransportException, hash-key). End-to-End im Test-System verifiziert
(siehe dev/2026-06-09-payments).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
68 lines
2.4 KiB
PHP
68 lines
2.4 KiB
PHP
<?php
|
|
|
|
namespace App\Providers;
|
|
|
|
use App\Services\Payment\Payone\PayonePaymentService;
|
|
use Illuminate\Pagination\Paginator;
|
|
use Illuminate\Support\Facades\Schema;
|
|
use Illuminate\Support\Facades\URL;
|
|
use Illuminate\Support\ServiceProvider;
|
|
|
|
class AppServiceProvider extends ServiceProvider
|
|
{
|
|
/**
|
|
* Bootstrap any application services.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function boot()
|
|
{
|
|
Schema::defaultStringLength(191);
|
|
Paginator::defaultView('pagination::bootstrap-4');
|
|
Paginator::defaultSimpleView('pagination::simple-bootstrap-4');
|
|
|
|
if ($this->app->environment('production')) {
|
|
URL::forceScheme('https');
|
|
}
|
|
|
|
// Domain-bewusster View Composer für user_shop
|
|
// HOTFIX: DomainContext temporär deaktiviert
|
|
// TODO: Nach Claude v2 Implementation wieder aktivieren
|
|
\View::composer('*', function ($view) {
|
|
try {
|
|
// $context = app(\App\Domain\DomainContext::class);
|
|
// if ($context->type === 'main') {
|
|
// $view->with('user_shop', null);
|
|
// } else {
|
|
// $userShop = $context->userShop ?? \App\Services\Util::getUserShop();
|
|
// $view->with('user_shop', $userShop);
|
|
// }
|
|
|
|
// Temporär: Verwende immer das normale Verhalten
|
|
$view->with('user_shop', \App\Services\Util::getUserShop());
|
|
} catch (\Exception $e) {
|
|
// Fallback bei Fehlern
|
|
$view->with('user_shop', \App\Services\Util::getUserShop());
|
|
}
|
|
});
|
|
}
|
|
|
|
/**
|
|
* Register any application services.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function register()
|
|
{
|
|
// PAYONE payment service: built from merchant defaults, real Guzzle client at runtime.
|
|
// The per-request `mode` is always passed explicitly to the service methods, so the
|
|
// shared singleton needs only the base defaults from config.
|
|
$this->app->singleton(PayonePaymentService::class, function () {
|
|
return new PayonePaymentService(config('payone.defaults'));
|
|
});
|
|
|
|
if ($this->app->environment() !== 'production' && class_exists(\Barryvdh\LaravelIdeHelper\IdeHelperServiceProvider::class)) {
|
|
$this->app->register(\Barryvdh\LaravelIdeHelper\IdeHelperServiceProvider::class);
|
|
}
|
|
}
|
|
}
|