Skip to content

Commit

Permalink
Preauth webhook tests (#52)
Browse files Browse the repository at this point in the history
* Add failing webhook test

* Add successful webhook test
  • Loading branch information
gcatanese authored Oct 10, 2023
1 parent 151da78 commit 22dbed6
Show file tree
Hide file tree
Showing 2 changed files with 71 additions and 25 deletions.
42 changes: 42 additions & 0 deletions tests/authorisation-adjustment/webhook-failure.spec.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
// @ts-check
const { test, expect } = require('@playwright/test');

// test webhook is rejected (invalid HMAC signature)
test('Webhook Notification', async ({ request }) => {
const notifications = await request.post(`/api/webhooks/notifications`, {
data: {
"live": "false",
"notificationItems":[
{
"NotificationRequestItem":{
"additionalData":{
"hmacSignature":"INVALID_HMAC_SIGNATURE"
},
"eventCode":"AUTHORISATION",
"success":"true",
"eventDate":"2019-06-28T18:03:50+01:00",
"merchantAccountCode":"YOUR_MERCHANT_ACCOUNT",
"pspReference": "7914073381342284",
"merchantReference": "YOUR_REFERENCE",
"amount": {
"value":24999,
"currency":"EUR"
}
}
}
]
}
});

/// Verify notification is not accepted (invalid HMAC)

// Status code not 404 (verify webhook is found)
expect(notifications.status()).not.toEqual(404);

// Status code not 200 (verify webhook does not accept the notification ie HMAC invalid)
expect(notifications.status()).not.toEqual(200);

// Body response does not contain [accepted]
notifications.text()
.then(value => {expect(value).not.toEqual("[accepted]");} );
});
54 changes: 29 additions & 25 deletions tests/authorisation-adjustment/webhook.spec.js
Original file line number Diff line number Diff line change
@@ -1,41 +1,45 @@
// @ts-check
const { test, expect } = require('@playwright/test');
const utilities = require('../utilities');

// test webhook is successfully delivered
test('Webhook Notification', async ({ request }) => {

var notificationRequestItem = {
"eventCode":"AUTHORISATION",
"success":"true",
"eventDate":"2019-06-28T18:03:50+01:00",
"merchantAccountCode":"YOUR_MERCHANT_ACCOUNT",
"pspReference": "7914073381342284",
"merchantReference": "YOUR_REFERENCE",
"amount": {
"value":1130,
"currency":"EUR"
}
};

// calculate signature from payload
const hmacSignature = await utilities.calculateHmacSignature(notificationRequestItem);
// add hmacSignature to 'additionalData'
notificationRequestItem["additionalData"] = {"hmacSignature" : ""+hmacSignature+""}

// POST webhook
const notifications = await request.post(`/api/webhooks/notifications`, {
data: {
"live": "false",
"notificationItems":[
{
"NotificationRequestItem":{
"additionalData":{
"hmacSignature":"+JWKfq4ynALK+FFzGgHnp1jSMQJMBJeb87dlph24sXw="
},
"eventCode":"AUTHORISATION",
"success":"true",
"eventDate":"2019-06-28T18:03:50+01:00",
"merchantAccountCode":"YOUR_MERCHANT_ACCOUNT",
"pspReference": "7914073381342284",
"merchantReference": "YOUR_REFERENCE",
"amount": {
"value":24999,
"currency":"EUR"
}
}
}
"NotificationRequestItem": notificationRequestItem
}
]
}
});

/// Verify notification is not accepted (invalid HMAC)
// Verify status code
expect(notifications.status()).toEqual(200);

// Status code not 404 (verify webhook is found)
expect(notifications.status()).not.toEqual(404);

// Status code not 200 (verify webhook does not accept the notification ie HMAC invalid)
expect(notifications.status()).not.toEqual(200);

// Body response does not contain [accepted]
// Verify body response
notifications.text()
.then(value => {expect(value).not.toEqual("[accepted]");} );
.then(value => {expect(value).toEqual("[accepted]");} );
});

0 comments on commit 22dbed6

Please sign in to comment.