From b0816231d6c0f2d93b275ef53fe3611bc6f20d8e Mon Sep 17 00:00:00 2001 From: Russ Long Date: Fri, 1 May 2026 08:18:26 -0400 Subject: [PATCH 01/26] feat: integrate North Embedded Checkout for bidder payments --- .env.example | 4 + .../Controllers/NorthCheckoutController.php | 153 ++++++++++++++++++ app/Http/Controllers/PagesController.php | 5 +- config/services.php | 6 + resources/views/mywinnings_results.blade.php | 28 ++++ resources/views/north_checkout.blade.php | 74 +++++++++ routes/web.php | 5 + 7 files changed, 274 insertions(+), 1 deletion(-) create mode 100644 app/Http/Controllers/NorthCheckoutController.php create mode 100644 resources/views/north_checkout.blade.php diff --git a/.env.example b/.env.example index 8222755..07e08d4 100644 --- a/.env.example +++ b/.env.example @@ -39,3 +39,7 @@ OIDC_CLIENT_ID= OIDC_CLIENT_SECRET= OIDC_REDIRECT_URI="${APP_URL}/auth/social/oidc/callback" +NORTH_CHECKOUT_ID= +NORTH_PROFILE_ID= +NORTH_PRIVATE_API_KEY= + diff --git a/app/Http/Controllers/NorthCheckoutController.php b/app/Http/Controllers/NorthCheckoutController.php new file mode 100644 index 0000000..941d72d --- /dev/null +++ b/app/Http/Controllers/NorthCheckoutController.php @@ -0,0 +1,153 @@ +firstOrFail(); + + // Check if already checked out + if (Checkout::where('bidder_num', $bidder->idbidders)->exists()) { + return redirect('/mywinnings?bidder_number=' . $bidder->bidder_assigned_number)->with('error', 'Bidder has already checked out.'); + } + + $winnings = WinningBids::where('winning_bidder_num', $bidder->idbidders)->get(); + $total_cost = $winnings->sum('winning_cost'); + + if ($total_cost <= 0) { + return redirect('/mywinnings?bidder_number=' . $bidder->bidder_assigned_number)->with('error', 'No winnings found for this bidder.'); + } + + return view('north_checkout', [ + 'bidder' => $bidder, + 'total_cost' => $total_cost, + ]); + } + + public function createSession(Request $request, $bidder_id) + { + $bidder = Bidders::findOrFail($bidder_id); + $winnings = WinningBids::where('winning_bidder_num', $bidder->idbidders)->get(); + $total_cost = $winnings->sum('winning_cost'); + + $apiKey = config('services.north.private_api_key'); + $checkoutId = config('services.north.checkout_id'); + $profileId = config('services.north.profile_id'); + + if (!$apiKey || !$checkoutId || !$profileId) { + return response()->json(['error' => 'North configuration missing.'], 500); + } + + $response = Http::withHeaders([ + 'Authorization' => 'Bearer ' . $apiKey, + ])->post('https://checkout.north.com/api/sessions', [ + 'checkoutId' => $checkoutId, + 'profileId' => $profileId, + 'amount' => $total_cost, + ]); + + if ($response->failed()) { + Log::error('North Session Creation Failed: ' . $response->body()); + return response()->json(['error' => 'Failed to create checkout session.'], 500); + } + + return response()->json($response->json()); + } + + public function verify(Request $request, $bidder_id) + { + $bidder = Bidders::findOrFail($bidder_id); + $sessionToken = $request->query('sessionToken'); + if (!$sessionToken) { + return redirect('/mywinnings?bidder_number=' . $bidder->bidder_assigned_number)->with('error', 'Missing session token.'); + } + + $apiKey = config('services.north.private_api_key'); + $response = Http::withHeaders([ + 'Authorization' => 'Bearer ' . $apiKey, + ])->get('https://checkout.north.com/api/sessions/status', [ + 'sessionToken' => $sessionToken, + ]); + + if ($response->failed()) { + Log::error('North Session Verification Failed: ' . $response->body()); + return redirect('/mywinnings?bidder_number=' . $bidder->bidder_assigned_number)->with('error', 'Failed to verify payment status.'); + } + + $status = $response->json(); + + // The North API status check might return success/completed. + // Based on docs, we should check status. + if (isset($status['status']) && ($status['status'] === 'completed' || $status['status'] === 'success')) { + // Check if already checked out to avoid duplicates + $existingCheckout = Checkout::where('bidder_num', $bidder->idbidders)->first(); + + if (!$existingCheckout) { + $winnertotal = $status['amount'] ?? WinningBids::where('winning_bidder_num', $bidder->idbidders)->sum('winning_cost'); + $payment_method = 3; // Credit Card + $cc_transaction = $status['transactionId'] ?? 'NORTH_EC'; + $cc_amount = $status['amount'] ?? $winnertotal; + $check_number = null; + + $checkout_id = DB::table('checkout')->insertGetID( + [ + 'bidder_num' => $bidder->idbidders, + 'winnertotal' => $winnertotal, + 'payment_method' => $payment_method, + 'check_number' => $check_number, + 'cc_transaction' => $cc_transaction, + 'cc_amount' => $cc_amount, + 'created_at' => now(), + 'updated_at' => now(), + ] + ); + } else { + $checkout_id = $existingCheckout->checkout_id; + $payment_method = $existingCheckout->payment_method; + $cc_transaction = $existingCheckout->cc_transaction; + $check_number = $existingCheckout->check_number; + } + + // Replicate the data for checkout_complete view + $checkout_list_results = DB::select("SELECT + *, items.item_assigned_num, items.item_desc + FROM winning_bids + INNER JOIN items AS items + ON winning_bids.winning_item_num=items.iditems + WHERE winning_bidder_num = $bidder->idbidders + "); + + $checkout_info_results = DB::select("SELECT + winning_bids.*, + bidders.*, + sum(winning_cost) AS total_cost + FROM winning_bids + INNER JOIN bidders AS bidders + ON winning_bids.winning_bidder_num=bidders.idbidders + WHERE winning_bidder_num = $bidder->idbidders + GROUP BY winning_bids.winning_bidder_num + "); + + return view('checkout_complete', [ + 'checkout_result' => $checkout_id, + 'checkout_list_results' => $checkout_list_results, + 'checkout_info_results' => $checkout_info_results, + 'payment_method' => $payment_method, + 'check_number' => $check_number, + 'cc_transaction' => $cc_transaction + ]); + } + + return redirect('/mywinnings?bidder_number=' . $bidder->bidder_assigned_number)->with('error', 'Payment not completed. Status: ' . ($status['status'] ?? 'unknown')); + } +} diff --git a/app/Http/Controllers/PagesController.php b/app/Http/Controllers/PagesController.php index 5078e37..2838c2d 100644 --- a/app/Http/Controllers/PagesController.php +++ b/app/Http/Controllers/PagesController.php @@ -535,10 +535,13 @@ class PagesController extends Controller $total_cost = $winnings->sum('winning_cost'); + $is_checked_out = \App\Models\Checkout::where('bidder_num', $bidder->idbidders)->exists(); + return view('mywinnings_results', [ 'bidder' => $bidder, 'winnings' => $winnings, - 'total_cost' => $total_cost + 'total_cost' => $total_cost, + 'is_checked_out' => $is_checked_out ]); } } diff --git a/config/services.php b/config/services.php index 0b3b30c..230389e 100644 --- a/config/services.php +++ b/config/services.php @@ -42,4 +42,10 @@ return [ 'redirect' => env('OIDC_REDIRECT_URI'), ], + 'north' => [ + 'checkout_id' => env('NORTH_CHECKOUT_ID'), + 'profile_id' => env('NORTH_PROFILE_ID'), + 'private_api_key' => env('NORTH_PRIVATE_API_KEY'), + ], + ]; diff --git a/resources/views/mywinnings_results.blade.php b/resources/views/mywinnings_results.blade.php index 5ad93e3..1bea837 100644 --- a/resources/views/mywinnings_results.blade.php +++ b/resources/views/mywinnings_results.blade.php @@ -8,6 +8,24 @@
Winnings for Bidder #{{ $bidder->bidder_assigned_number }} - {{ $bidder->bidder_fname }} {{ $bidder->bidder_lname }}
+ @if (isset($error)) +
+ {{ $error }} +
+ @endif + + @if (session('error')) +
+ {{ session('error') }} +
+ @endif + + @if (session('success')) +
+ {{ session('success') }} +
+ @endif + @if($winnings->count() > 0) @@ -33,6 +51,16 @@
+ + @if(!$is_checked_out) +
+ Pay Now with Credit Card +
+ @else +
+ Checked Out! Your payment has been processed. +
+ @endif @else

No winning bids found for this bidder number.

@endif diff --git a/resources/views/north_checkout.blade.php b/resources/views/north_checkout.blade.php new file mode 100644 index 0000000..a0478e0 --- /dev/null +++ b/resources/views/north_checkout.blade.php @@ -0,0 +1,74 @@ +@extends('layouts.app') + +@section('content') +
+
+
+
+
Checkout for Bidder #{{ $bidder->bidder_assigned_number }}
+ +
+

Total Amount Due: ${{ number_format($total_cost, 2) }}

+
+ +
+
+

Loading secure checkout...

+ +
+
+ +
+
+ Cancel and Return +
+
+
+
+
+
+ + + +@endsection diff --git a/routes/web.php b/routes/web.php index ee3faf9..2355d21 100644 --- a/routes/web.php +++ b/routes/web.php @@ -27,6 +27,11 @@ Route::get('showscoresbycar', [ 'uses' => 'PagesController@showscoresbycar']); Route::get('mywinnings', [ 'uses' => 'PagesController@myWinnings']); Route::post('mywinnings', [ 'uses' => 'PagesController@myWinnings']); +// North Embedded Checkout +Route::get('north/checkout/{bidder_id}', [ 'uses' => 'NorthCheckoutController@checkout' ])->name('north.checkout'); +Route::post('north/session/{bidder_id}', [ 'uses' => 'NorthCheckoutController@createSession' ])->name('north.session'); +Route::get('north/verify/{bidder_id}', [ 'uses' => 'NorthCheckoutController@verify' ])->name('north.verify'); + Route::group(['middleware' => 'auth'], function() { Route::get('bidders', [ 'uses' => 'PagesController@bidders']); Route::post('bidders', [ 'uses' => 'PagesController@bidders']); From d2d53e961b24672ffdef7d199897b2d6d880a73d Mon Sep 17 00:00:00 2001 From: Russ Long Date: Fri, 1 May 2026 08:32:31 -0400 Subject: [PATCH 02/26] fix: resolve invalid session token by correctly extracting token from North API response --- app/Http/Controllers/NorthCheckoutController.php | 16 ++++++++++++---- resources/views/north_checkout.blade.php | 6 ++++++ 2 files changed, 18 insertions(+), 4 deletions(-) diff --git a/app/Http/Controllers/NorthCheckoutController.php b/app/Http/Controllers/NorthCheckoutController.php index 941d72d..c84556a 100644 --- a/app/Http/Controllers/NorthCheckoutController.php +++ b/app/Http/Controllers/NorthCheckoutController.php @@ -53,15 +53,23 @@ class NorthCheckoutController extends Controller ])->post('https://checkout.north.com/api/sessions', [ 'checkoutId' => $checkoutId, 'profileId' => $profileId, - 'amount' => $total_cost, + 'amount' => (float)$total_cost, ]); if ($response->failed()) { - Log::error('North Session Creation Failed: ' . $response->body()); - return response()->json(['error' => 'Failed to create checkout session.'], 500); + Log::error('North Session Creation Failed: ' . $response->status() . ' ' . $response->body()); + return response()->json(['error' => 'Failed to create checkout session: ' . ($response->json('message') ?? 'Unknown error')], 500); } - return response()->json($response->json()); + $data = $response->json(); + $token = $data['token'] ?? $data['sessionToken'] ?? null; + + if (!$token) { + Log::error('North Session Token Missing in Response: ' . json_encode($data)); + return response()->json(['error' => 'Session token not found in API response.'], 500); + } + + return response()->json(['sessionToken' => $token]); } public function verify(Request $request, $bidder_id) diff --git a/resources/views/north_checkout.blade.php b/resources/views/north_checkout.blade.php index a0478e0..0084baa 100644 --- a/resources/views/north_checkout.blade.php +++ b/resources/views/north_checkout.blade.php @@ -47,6 +47,7 @@ }); const data = await response.json(); + console.log('North Session Response:', data); if (data.error) { document.getElementById('checkout-container').innerHTML = `
${data.error}
`; @@ -54,9 +55,14 @@ } const sessionToken = data.sessionToken; + if (!sessionToken) { + document.getElementById('checkout-container').innerHTML = `
Invalid session token received from server.
`; + return; + } // Initialize North Checkout // The global 'checkout' object is provided by checkout.js + console.log('Mounting checkout with token:', sessionToken); await checkout.mount(sessionToken, 'checkout-container'); // Handle completion From 06de3c01450c7a62ad36a3a8e1fc606f3d8a45cc Mon Sep 17 00:00:00 2001 From: Russ Long Date: Fri, 1 May 2026 08:35:41 -0400 Subject: [PATCH 03/26] fix: broaden session token extraction to handle various North API response formats --- app/Http/Controllers/NorthCheckoutController.php | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/app/Http/Controllers/NorthCheckoutController.php b/app/Http/Controllers/NorthCheckoutController.php index c84556a..18a6b1c 100644 --- a/app/Http/Controllers/NorthCheckoutController.php +++ b/app/Http/Controllers/NorthCheckoutController.php @@ -62,11 +62,18 @@ class NorthCheckoutController extends Controller } $data = $response->json(); - $token = $data['token'] ?? $data['sessionToken'] ?? null; + $token = $data['token'] ?? + $data['sessionToken'] ?? + $data['id'] ?? + $data['session_id'] ?? + ($data['session']['id'] ?? null); if (!$token) { Log::error('North Session Token Missing in Response: ' . json_encode($data)); - return response()->json(['error' => 'Session token not found in API response.'], 500); + return response()->json([ + 'error' => 'Session token not found in API response.', + 'debug_response' => $data + ], 500); } return response()->json(['sessionToken' => $token]); From 9587c4465712796abc28805a9285bf06aaafd9d2 Mon Sep 17 00:00:00 2001 From: Russ Long Date: Fri, 1 May 2026 08:38:47 -0400 Subject: [PATCH 04/26] fix: improve API request headers and error reporting for session creation and verification --- .../Controllers/NorthCheckoutController.php | 36 +++++++++++++++---- 1 file changed, 29 insertions(+), 7 deletions(-) diff --git a/app/Http/Controllers/NorthCheckoutController.php b/app/Http/Controllers/NorthCheckoutController.php index 18a6b1c..c2fb1dc 100644 --- a/app/Http/Controllers/NorthCheckoutController.php +++ b/app/Http/Controllers/NorthCheckoutController.php @@ -50,6 +50,8 @@ class NorthCheckoutController extends Controller $response = Http::withHeaders([ 'Authorization' => 'Bearer ' . $apiKey, + 'Accept' => 'application/json', + 'Content-Type' => 'application/json', ])->post('https://checkout.north.com/api/sessions', [ 'checkoutId' => $checkoutId, 'profileId' => $profileId, @@ -58,10 +60,24 @@ class NorthCheckoutController extends Controller if ($response->failed()) { Log::error('North Session Creation Failed: ' . $response->status() . ' ' . $response->body()); - return response()->json(['error' => 'Failed to create checkout session: ' . ($response->json('message') ?? 'Unknown error')], 500); + return response()->json([ + 'error' => 'Failed to create checkout session: ' . ($response->json('message') ?? 'Unknown error'), + 'status' => $response->status(), + 'body' => $response->body() + ], 500); } $data = $response->json(); + + // If json() is null but body is not empty, it might be a parsing error + if (is_null($data) && !empty($response->body())) { + Log::error('North Session Response is not JSON: ' . $response->body()); + return response()->json([ + 'error' => 'Response from North is not valid JSON.', + 'raw_body' => $response->body() + ], 500); + } + $token = $data['token'] ?? $data['sessionToken'] ?? $data['id'] ?? @@ -72,7 +88,8 @@ class NorthCheckoutController extends Controller Log::error('North Session Token Missing in Response: ' . json_encode($data)); return response()->json([ 'error' => 'Session token not found in API response.', - 'debug_response' => $data + 'debug_response' => $data, + 'raw_body' => $response->body() ], 500); } @@ -88,15 +105,20 @@ class NorthCheckoutController extends Controller } $apiKey = config('services.north.private_api_key'); + $checkoutId = config('services.north.checkout_id'); + $profileId = config('services.north.profile_id'); + $response = Http::withHeaders([ 'Authorization' => 'Bearer ' . $apiKey, - ])->get('https://checkout.north.com/api/sessions/status', [ - 'sessionToken' => $sessionToken, - ]); + 'SessionToken' => $sessionToken, + 'CheckoutId' => $checkoutId, + 'ProfileId' => $profileId, + 'Accept' => 'application/json', + ])->get('https://checkout.north.com/api/sessions/status'); if ($response->failed()) { - Log::error('North Session Verification Failed: ' . $response->body()); - return redirect('/mywinnings?bidder_number=' . $bidder->bidder_assigned_number)->with('error', 'Failed to verify payment status.'); + Log::error('North Session Verification Failed: ' . $response->status() . ' ' . $response->body()); + return redirect('/mywinnings?bidder_number=' . $bidder->bidder_assigned_number)->with('error', 'Failed to verify payment status. Status: ' . $response->status()); } $status = $response->json(); From 68f75ac2fc9f5607828749765e545e0f56ba731e Mon Sep 17 00:00:00 2001 From: Russ Long Date: Fri, 1 May 2026 08:41:58 -0400 Subject: [PATCH 05/26] feat: include products in checkout and increase form container size --- app/Http/Controllers/NorthCheckoutController.php | 11 ++++++++++- resources/views/north_checkout.blade.php | 13 +++++++++++++ 2 files changed, 23 insertions(+), 1 deletion(-) diff --git a/app/Http/Controllers/NorthCheckoutController.php b/app/Http/Controllers/NorthCheckoutController.php index c2fb1dc..23446b7 100644 --- a/app/Http/Controllers/NorthCheckoutController.php +++ b/app/Http/Controllers/NorthCheckoutController.php @@ -37,9 +37,17 @@ class NorthCheckoutController extends Controller public function createSession(Request $request, $bidder_id) { $bidder = Bidders::findOrFail($bidder_id); - $winnings = WinningBids::where('winning_bidder_num', $bidder->idbidders)->get(); + $winnings = WinningBids::with('items')->where('winning_bidder_num', $bidder->idbidders)->get(); $total_cost = $winnings->sum('winning_cost'); + $products = $winnings->map(function($winning) { + return [ + 'name' => $winning->items->item_desc ?? 'Auction Item', + 'price' => (float)$winning->winning_cost, + 'quantity' => 1 + ]; + })->toArray(); + $apiKey = config('services.north.private_api_key'); $checkoutId = config('services.north.checkout_id'); $profileId = config('services.north.profile_id'); @@ -56,6 +64,7 @@ class NorthCheckoutController extends Controller 'checkoutId' => $checkoutId, 'profileId' => $profileId, 'amount' => (float)$total_cost, + 'products' => $products, ]); if ($response->failed()) { diff --git a/resources/views/north_checkout.blade.php b/resources/views/north_checkout.blade.php index 0084baa..9d83388 100644 --- a/resources/views/north_checkout.blade.php +++ b/resources/views/north_checkout.blade.php @@ -1,6 +1,19 @@ @extends('layouts.app') @section('content') +
From 50826c8c2054cc79086765b01268ea2e91b94e32 Mon Sep 17 00:00:00 2001 From: Russ Long Date: Fri, 1 May 2026 08:43:26 -0400 Subject: [PATCH 06/26] update div height --- resources/views/north_checkout.blade.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/resources/views/north_checkout.blade.php b/resources/views/north_checkout.blade.php index 9d83388..080ef32 100644 --- a/resources/views/north_checkout.blade.php +++ b/resources/views/north_checkout.blade.php @@ -3,7 +3,7 @@ @section('content')
From fbb10a01d49c5412cf8a5583d07411411955343c Mon Sep 17 00:00:00 2001 From: Russ Long Date: Fri, 1 May 2026 08:46:46 -0400 Subject: [PATCH 08/26] ui: switch from min-height to explicit height for checkout container --- resources/views/north_checkout.blade.php | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/resources/views/north_checkout.blade.php b/resources/views/north_checkout.blade.php index 2e5a329..531bf57 100644 --- a/resources/views/north_checkout.blade.php +++ b/resources/views/north_checkout.blade.php @@ -3,15 +3,17 @@ @section('content')
From 3953a6f4c8e9bb3920c81a23bd3456a236dd00ba Mon Sep 17 00:00:00 2001 From: Russ Long Date: Fri, 1 May 2026 08:55:06 -0400 Subject: [PATCH 09/26] fix height --- resources/views/north_checkout.blade.php | 17 +---------------- 1 file changed, 1 insertion(+), 16 deletions(-) diff --git a/resources/views/north_checkout.blade.php b/resources/views/north_checkout.blade.php index 531bf57..9c3b2d8 100644 --- a/resources/views/north_checkout.blade.php +++ b/resources/views/north_checkout.blade.php @@ -1,21 +1,6 @@ @extends('layouts.app') @section('content') -
@@ -26,7 +11,7 @@

Total Amount Due: ${{ number_format($total_cost, 2) }}

-
+

Loading secure checkout...