implement authorization flow

Author: zcesur

lib/algora/bounties/bounties.ex

@@ -788,6 +788,27 @@ defmodule Algora.Bounties do
     )
   end
 
+  @spec authorize_payment(
+          %{
+            owner: User.t(),
+            amount: Money.t(),
+            bounty: Bounty.t(),
+            claims: [Claim.t()]
+          },
+          opts :: [ticket_ref: %{owner: String.t(), repo: String.t(), number: integer()}, recipient: User.t()]
+        ) ::
+          {:ok, String.t()} | {:error, atom()}
+  def authorize_payment(%{owner: owner, amount: amount, bounty: bounty, claims: claims}, opts \\ []) do
+    create_payment_session(
+      %{owner: owner, amount: amount, description: "Bounty payment for OSS contributions"},
+      ticket_ref: opts[:ticket_ref],
+      bounty: bounty,
+      claims: claims,
+      recipient: opts[:recipient],
+      capture_method: :manual
+    )
+  end
+
   @spec generate_line_items(
           %{owner: User.t(), amount: Money.t()},
           opts :: [
@@ -861,7 +882,8 @@ defmodule Algora.Bounties do
             tip_id: String.t(),
             bounty: Bounty.t(),
             claims: [Claim.t()],
-            recipient: User.t()
+            recipient: User.t(),
+            capture_method: :automatic | :automatic_async | :manual
           ]
         ) ::
           {:ok, String.t()} | {:error, atom()}
@@ -876,6 +898,18 @@ defmodule Algora.Bounties do
         bounty: opts[:bounty]
       )
 
+    payment_intent_data = %{
+      description: description,
+      metadata: %{"version" => Payments.metadata_version(), "group_id" => tx_group_id}
+    }
+
+    payment_intent_data =
+      if capture_method = opts[:capture_method] do
+        Map.put(payment_intent_data, :capture_method, capture_method)
+      else
+        payment_intent_data
+      end
+
     gross_amount = LineItem.gross_amount(line_items)
 
     bounty_id = if bounty = opts[:bounty], do: bounty.id
@@ -905,10 +939,7 @@ defmodule Algora.Bounties do
                group_id: tx_group_id
              }),
            {:ok, session} <-
-             Payments.create_stripe_session(owner, Enum.map(line_items, &LineItem.to_stripe/1), %{
-               description: description,
-               metadata: %{"version" => Payments.metadata_version(), "group_id" => tx_group_id}
-             }) do
+             Payments.create_stripe_session(owner, Enum.map(line_items, &LineItem.to_stripe/1), payment_intent_data) do
         {:ok, session.url}
       end
     end)

lib/algora/payments/payments.ex

@@ -36,16 +36,24 @@ defmodule Algora.Payments do
           {:ok, PSP.session()} | {:error, PSP.error()}
   def create_stripe_session(user, line_items, payment_intent_data) do
     with {:ok, customer} <- fetch_or_create_customer(user) do
-      PSP.Session.create(%{
+      opts = %{
         mode: "payment",
         customer: customer.provider_id,
         billing_address_collection: "required",
         line_items: line_items,
-        invoice_creation: %{enabled: true},
         success_url: "#{AlgoraWeb.Endpoint.url()}/payment/success",
         cancel_url: "#{AlgoraWeb.Endpoint.url()}/payment/canceled",
         payment_intent_data: payment_intent_data
-      })
+      }
+
+      opts =
+        if payment_intent_data[:capture_method] == :manual do
+          opts
+        else
+          Map.put(opts, :invoice_creation, %{enabled: true})
+        end
+
+      PSP.Session.create(opts)
     end
   end
 

lib/algora_web/live/contract_live.ex

@@ -18,7 +18,7 @@ defmodule AlgoraWeb.ContractLive do
 
   require Logger
 
-  defp tip_options, do: [{"None", 0}, {"10%", 10}, {"20%", 20}, {"50%", 50}]
+  # defp tip_options, do: [{"None", 0}, {"10%", 10}, {"20%", 20}, {"50%", 50}]
 
   defmodule RewardBountyForm do
     @moduledoc false
@@ -109,7 +109,7 @@ defmodule AlgoraWeb.ContractLive do
     ticket_body_html = Algora.Markdown.render(bounty.ticket.description)
 
     reward_changeset =
-      RewardBountyForm.changeset(%RewardBountyForm{}, %{tip_percentage: 0})
+      RewardBountyForm.changeset(%RewardBountyForm{}, %{amount: bounty.amount})
 
     {:ok, thread} = Chat.get_or_create_bounty_thread(bounty)
     messages = thread.id |> Chat.list_messages() |> Repo.preload(:sender)
@@ -233,6 +233,18 @@ defmodule AlgoraWeb.ContractLive do
     end
   end
 
+  @impl true
+  def handle_event("authorize_with_stripe", _params, socket) do
+    case authorize_payment(socket, socket.assigns.bounty) do
+      {:ok, session_url} ->
+        {:noreply, redirect(socket, external: session_url)}
+
+      {:error, reason} ->
+        Logger.error("Failed to create payment session: #{inspect(reason)}")
+        {:noreply, put_flash(socket, :error, "Something went wrong")}
+    end
+  end
+
   @impl true
   def handle_event(_event, _params, socket) do
     {:noreply, socket}
@@ -508,13 +520,13 @@ defmodule AlgoraWeb.ContractLive do
 
     <.drawer :if={@current_user} show={@show_reward_modal} on_cancel="close_drawer">
       <.drawer_header>
-        <.drawer_title>Pay Contract</.drawer_title>
+        <.drawer_title>Authorize payment</.drawer_title>
         <.drawer_description>
-          You can pay any amount at any time.
+          You will be charged once {@contractor.name} accepts the contract.
         </.drawer_description>
       </.drawer_header>
       <.drawer_content class="mt-4">
-        <.form for={@reward_form} phx-change="validate_reward" phx-submit="pay_with_stripe">
+        <.form for={@reward_form} phx-change="validate_reward" phx-submit="authorize_with_stripe">
           <div class="flex flex-col gap-8">
             <div class="grid grid-cols-2 gap-8">
               <.card>
@@ -527,9 +539,10 @@ defmodule AlgoraWeb.ContractLive do
                       label="Amount"
                       icon="tabler-currency-dollar"
                       field={@reward_form[:amount]}
+                      disabled
                     />
 
-                    <div>
+                    <%!-- <div>
                       <.label>Tip</.label>
                       <div class="mt-2">
                         <.radio_group
@@ -538,7 +551,7 @@ defmodule AlgoraWeb.ContractLive do
                           options={tip_options()}
                         />
                       </div>
-                    </div>
+                    </div> --%>
                   </div>
                 </.card_content>
               </.card>
@@ -590,7 +603,7 @@ defmodule AlgoraWeb.ContractLive do
                 Cancel
               </.button>
               <.button type="submit">
-                Pay with Stripe <.icon name="tabler-arrow-right" class="-mr-1 ml-2 h-4 w-4" />
+                Authorize with Stripe <.icon name="tabler-arrow-right" class="-mr-1 ml-2 h-4 w-4" />
               </.button>
             </div>
           </div>
@@ -625,6 +638,14 @@ defmodule AlgoraWeb.ContractLive do
     )
   end
 
+  defp authorize_payment(socket, bounty) do
+    Bounties.authorize_payment(
+      %{owner: bounty.owner, amount: bounty.amount, bounty: bounty, claims: []},
+      ticket_ref: socket.assigns.ticket_ref,
+      recipient: socket.assigns.contractor
+    )
+  end
+
   defp calculate_final_amount(data_or_changeset) do
     tip_percentage = get_field(data_or_changeset, :tip_percentage) || Decimal.new(0)
     amount = get_field(data_or_changeset, :amount) || Money.zero(:USD, no_fraction_if_integer: true)