- PayFast (custom integration): signed form (PHP-style encoding, checked against a real sandbox), ITN checks (signature over all posted fields, PayFast host, VALID from /eng/query/validate, amount vs checkout). - ProviderCheckout records every checkout (amount, metadata, request); webhooks match payments to it and hold a different amount for review (ProviderTransaction.note). - /pay/<id>: payers choose a provider when several are on, and the browser posts PayFast's form from there, so payment links work for every provider. - Site settings → Payments: PayFast card (merchant ID/key, encrypted passphrase, sandbox/live) while PayFast is enabled. - Payer-facing wording no longer names Yoco; legal pages name both. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
25 lines
726 B
SQL
25 lines
726 B
SQL
-- AlterEnum
|
|
ALTER TYPE "AdminAuditAction" ADD VALUE 'payfast_config_updated';
|
|
|
|
-- AlterTable
|
|
ALTER TABLE "ProviderTransaction" ADD COLUMN "note" TEXT;
|
|
|
|
-- CreateTable
|
|
CREATE TABLE "ProviderCheckout" (
|
|
"id" TEXT NOT NULL,
|
|
"provider" TEXT,
|
|
"externalId" TEXT,
|
|
"redirectUrl" TEXT,
|
|
"amountCents" INTEGER NOT NULL,
|
|
"currency" TEXT NOT NULL DEFAULT 'ZAR',
|
|
"metadata" JSONB NOT NULL,
|
|
"request" JSONB NOT NULL,
|
|
"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
|
"updatedAt" TIMESTAMP(3) NOT NULL,
|
|
|
|
CONSTRAINT "ProviderCheckout_pkey" PRIMARY KEY ("id")
|
|
);
|
|
|
|
-- CreateIndex
|
|
CREATE INDEX "ProviderCheckout_provider_externalId_idx" ON "ProviderCheckout"("provider", "externalId");
|