'Extra photos (500)', 'variant_id' => 'var_addon_photos', 'increments' => ['extra_photos' => 500], ]); Config::set('package-addons.provider', CheckoutSession::PROVIDER_LEMONSQUEEZY); Config::set('lemonsqueezy.api_key', 'test_key'); Config::set('lemonsqueezy.base_url', 'https://api.lemonsqueezy.com/v1'); Config::set('lemonsqueezy.store_id', 'store_123'); // Fake Lemon Squeezy response Http::fake([ 'https://api.lemonsqueezy.com/v1/checkouts' => Http::response([ 'data' => [ 'id' => 'chk_addon_123', 'attributes' => [ 'url' => 'https://checkout.lemonsqueezy.test/abcd', ], ], ], 200), ]); } public function test_checkout_creates_pending_addon_record(): void { $package = Package::factory()->endcustomer()->create([ 'max_photos' => 100, 'max_guests' => 50, 'gallery_days' => 7, ]); $event = Event::factory()->for($this->tenant)->create([ 'status' => 'published', ]); $eventPackage = EventPackage::create([ 'event_id' => $event->id, 'package_id' => $package->id, 'purchased_price' => $package->price, 'purchased_at' => now(), 'used_photos' => 0, 'used_guests' => 0, 'gallery_expires_at' => now()->addDays(7), ]); $response = $this->authenticatedRequest('POST', "/api/v1/tenant/events/{$event->slug}/addons/checkout", [ 'addon_key' => 'extra_photos_small', 'quantity' => 2, 'success_url' => 'https://app.fotospiel.test/event-admin/mobile/events/test-event/addons/success?addon_key=extra_photos_small', 'cancel_url' => 'https://app.fotospiel.test/event-admin/mobile/events/test-event/addons', 'accepted_terms' => true, 'accepted_waiver' => true, ]); $response->assertOk(); $response->assertJsonPath('checkout_id', 'chk_addon_123'); $this->assertDatabaseHas('event_package_addons', [ 'event_package_id' => $eventPackage->id, 'addon_key' => 'extra_photos_small', 'status' => 'pending', 'quantity' => 2, 'checkout_id' => 'chk_addon_123', ]); $addon = EventPackageAddon::where('event_package_id', $eventPackage->id)->latest()->first(); $this->assertSame(1000, $addon->extra_photos); // increments * quantity $this->assertSame('Extra photos (500)', $addon->metadata['label'] ?? null); $this->assertSame(500, $addon->metadata['increments']['extra_photos'] ?? null); $this->assertNull($addon->metadata['price_eur'] ?? null); $this->assertNotEmpty($addon->metadata['addon_intent'] ?? null); $this->assertStringContainsString('addon_intent=', (string) ($addon->metadata['success_url'] ?? '')); $this->assertStringContainsString('addon_intent=', (string) ($addon->metadata['cancel_url'] ?? '')); } public function test_paypal_checkout_creates_pending_addon_record(): void { Config::set('package-addons.provider', CheckoutSession::PROVIDER_PAYPAL); Config::set('checkout.currency', 'EUR'); Config::set('package-addons.extra_photos_small.price', 12.50); $package = Package::factory()->endcustomer()->create([ 'max_photos' => 100, 'max_guests' => 50, 'gallery_days' => 7, ]); $event = Event::factory()->for($this->tenant)->create([ 'status' => 'published', ]); $eventPackage = EventPackage::create([ 'event_id' => $event->id, 'package_id' => $package->id, 'purchased_price' => $package->price, 'purchased_at' => now(), 'used_photos' => 0, 'used_guests' => 0, 'gallery_expires_at' => now()->addDays(7), ]); $orders = Mockery::mock(PayPalOrderService::class); $orders->shouldReceive('createSimpleOrder') ->once() ->andReturn([ 'id' => 'ORDER-ADDON-1', 'links' => [ ['rel' => 'approve', 'href' => 'https://paypal.test/approve'], ], ]); $orders->shouldReceive('resolveApproveUrl') ->once() ->andReturn('https://paypal.test/approve'); $this->app->instance(PayPalOrderService::class, $orders); $response = $this->authenticatedRequest('POST', "/api/v1/tenant/events/{$event->slug}/addons/checkout", [ 'addon_key' => 'extra_photos_small', 'quantity' => 2, 'success_url' => 'https://app.fotospiel.test/event-admin/mobile/events/test-event/addons/success?addon_key=extra_photos_small', 'cancel_url' => 'https://app.fotospiel.test/event-admin/mobile/events/test-event/addons', 'accepted_terms' => true, 'accepted_waiver' => true, ]); $response->assertOk(); $response->assertJsonPath('checkout_id', 'ORDER-ADDON-1'); $response->assertJsonPath('checkout_url', 'https://paypal.test/approve'); $this->assertDatabaseHas('event_package_addons', [ 'event_package_id' => $eventPackage->id, 'addon_key' => 'extra_photos_small', 'status' => 'pending', 'quantity' => 2, 'checkout_id' => 'ORDER-ADDON-1', 'amount' => 25.00, 'currency' => 'EUR', ]); $addon = EventPackageAddon::where('event_package_id', $eventPackage->id)->latest()->first(); $this->assertSame(1000, $addon->extra_photos); $this->assertSame('Extra photos (500)', $addon->metadata['label'] ?? null); $this->assertSame(12.5, $addon->metadata['price_eur'] ?? null); $this->assertNotEmpty($addon->metadata['addon_intent'] ?? null); $this->assertStringContainsString('addon_intent=', (string) ($addon->metadata['paypal_success_url'] ?? '')); $this->assertStringContainsString('addon_intent=', (string) ($addon->metadata['paypal_cancel_url'] ?? '')); } public function test_ai_styling_checkout_persists_feature_entitlement_metadata(): void { Config::set('package-addons.provider', CheckoutSession::PROVIDER_PAYPAL); Config::set('checkout.currency', 'EUR'); Config::set('package-addons.ai_styling_unlock', [ 'label' => 'AI Styling Add-on', 'price' => 9.00, 'increments' => [], 'metadata' => [ 'scope' => 'feature', ], ]); $package = Package::factory()->endcustomer()->create([ 'max_photos' => 100, 'max_guests' => 50, 'gallery_days' => 7, ]); $event = Event::factory()->for($this->tenant)->create([ 'status' => 'published', ]); $eventPackage = EventPackage::create([ 'event_id' => $event->id, 'package_id' => $package->id, 'purchased_price' => $package->price, 'purchased_at' => now(), 'used_photos' => 0, 'used_guests' => 0, 'gallery_expires_at' => now()->addDays(7), ]); $orders = Mockery::mock(PayPalOrderService::class); $orders->shouldReceive('createSimpleOrder') ->once() ->andReturn([ 'id' => 'ORDER-AI-1', 'links' => [ ['rel' => 'approve', 'href' => 'https://paypal.test/approve-ai'], ], ]); $orders->shouldReceive('resolveApproveUrl') ->once() ->andReturn('https://paypal.test/approve-ai'); $this->app->instance(PayPalOrderService::class, $orders); $response = $this->authenticatedRequest('POST', "/api/v1/tenant/events/{$event->slug}/addons/checkout", [ 'addon_key' => 'ai_styling_unlock', 'quantity' => 1, 'accepted_terms' => true, 'accepted_waiver' => true, ]); $response->assertOk(); $response->assertJsonPath('checkout_id', 'ORDER-AI-1'); $this->assertDatabaseHas('event_package_addons', [ 'event_package_id' => $eventPackage->id, 'addon_key' => 'ai_styling_unlock', 'status' => 'pending', 'amount' => 9.00, 'currency' => 'EUR', ]); $addon = EventPackageAddon::where('event_package_id', $eventPackage->id)->latest()->first(); $this->assertSame('AI Styling Add-on', $addon->metadata['label'] ?? null); $this->assertSame('feature', $addon->metadata['scope'] ?? null); $this->assertSame(['ai_styling'], $addon->metadata['entitlements']['features'] ?? null); $this->assertEquals(9.0, $addon->metadata['price_eur'] ?? null); $this->assertSame(0, $addon->extra_photos); $this->assertSame(0, $addon->extra_guests); $this->assertSame(0, $addon->extra_gallery_days); } public function test_checkout_requires_both_legal_consents(): void { $package = Package::factory()->endcustomer()->create([ 'max_photos' => 100, 'max_guests' => 50, 'gallery_days' => 7, ]); $event = Event::factory()->for($this->tenant)->create([ 'status' => 'published', ]); EventPackage::create([ 'event_id' => $event->id, 'package_id' => $package->id, 'purchased_price' => $package->price, 'purchased_at' => now(), 'used_photos' => 0, 'used_guests' => 0, 'gallery_expires_at' => now()->addDays(7), ]); $response = $this->authenticatedRequest('POST', "/api/v1/tenant/events/{$event->slug}/addons/checkout", [ 'addon_key' => 'extra_photos_small', 'quantity' => 1, 'accepted_terms' => true, ]); $response->assertStatus(422); $response->assertJsonValidationErrors(['accepted_waiver']); } }