# Part of Odoo. See LICENSE file for full copyright and licensing details. import json import uuid from datetime import timedelta from odoo import Command, fields import odoo.tests from odoo.addons.pos_self_order.tests.self_order_common_test import SelfOrderCommonTest @odoo.tests.tagged('post_install', '-at_install') class TestSelfOrderController(SelfOrderCommonTest): def make_request_to_controller(self, url, params): response = self.url_open(url, json.dumps({'jsonrpc': '2.0', 'params': params}), method='POST', headers={ 'Content-Type': 'application/json', } ) return response.json().get('result') def test_get_orders_by_access_token(self): self.pos_config.self_ordering_mode = 'mobile' self.pos_config.with_user(self.pos_user).open_ui() self.pos_config.current_session_id.set_opening_control(0, '') order_data = self._create_order_data( state='paid', product=self.cola, qty=3, price_unit=1.0, price_subtotal_incl=0 ) data = self.make_request_to_controller('/pos-self-order/process-order/mobile', order_data) order1 = self.env['pos.order'].browse(data['pos.order'][0]['id']) order1.state = 'paid' # Force paid order, the controller cannot set the state without payment. order_data = self._create_order_data( state='draft', product=self.cola, qty=3, price_unit=1.0, price_subtotal_incl=self.cola.lst_price ) data = self.make_request_to_controller('/pos-self-order/process-order/mobile', order_data) order2 = self.env['pos.order'].browse(data['pos.order'][0]['id']) self.assertEqual(order2.state, 'draft') params = { 'access_token': order1.config_id.access_token, 'order_access_tokens': [{ 'access_token': order1.access_token, 'state': order1.state, 'write_date': order1.write_date.strftime('%Y-%m-%d %H:%M:%S') }], } # At this point there is no change on the order, so no data is returned data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(data, {}) # Changing state in params should return the order to update it params['order_access_tokens'][0]['state'] = 'draft' # Server order is paid data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(len(data['pos.order']), 1) # No order access token should return no order params['order_access_tokens'] = [] data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(data, {}) # Two outdated order write_date should return both orders params['order_access_tokens'] = [{ 'access_token': order1.access_token, 'state': order1.state, 'write_date': (order1.write_date - timedelta(minutes=1)).strftime('%Y-%m-%d %H:%M:%S') }, { 'access_token': order2.access_token, 'state': order2.state, 'write_date': (order2.write_date - timedelta(minutes=1)).strftime('%Y-%m-%d %H:%M:%S') }] data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(len(data['pos.order']), 2) # Only one outdated order write_date should return one order params['order_access_tokens'] = [{ 'access_token': order1.access_token, 'state': order1.state, 'write_date': (order1.write_date - timedelta(minutes=1)).strftime('%Y-%m-%d %H:%M:%S') }, { 'access_token': order2.access_token, 'state': order2.state, 'write_date': order2.write_date.strftime('%Y-%m-%d %H:%M:%S') }] data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(len(data['pos.order']), 1) self.assertEqual(data['pos.order'][0]['id'], order1.id) # A cancelled order should be returned order2.cancel_order_from_pos() params['order_access_tokens'] = [{ 'access_token': order2.access_token, 'state': 'paid', 'write_date': order2.write_date.strftime('%Y-%m-%d %H:%M:%S') }] data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(len(data['pos.order']), 1) self.assertEqual(data['pos.order'][0]['id'], order2.id) self.assertEqual(data['pos.order'][0]['state'], 'cancel') # Up to date data should return no order params['order_access_tokens'] = [{ 'access_token': order1.access_token, 'state': order1.state, 'write_date': order1.write_date.strftime('%Y-%m-%d %H:%M:%S') }, { 'access_token': order2.access_token, 'state': order2.state, 'write_date': order2.write_date.strftime('%Y-%m-%d %H:%M:%S') }] data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(data, {}) # Only write date is provided params['order_access_tokens'] = [{ 'access_token': order2.access_token, 'write_date': '1970-01-01 00:00:00' }] data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(len(data['pos.order']), 1) self.assertEqual(data['pos.order'][0]['id'], order2.id) # Only state is provided params['order_access_tokens'] = [{ 'access_token': order2.access_token, 'state': 'paid' }] data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(len(data['pos.order']), 1) self.assertEqual(data['pos.order'][0]['id'], order2.id) def test_process_order_in_kiosk_allows_payment(self): self.pos_config.self_ordering_mode = 'kiosk' self.pos_config.with_user(self.pos_user).open_ui() order_data = self._create_order_data( state='draft', product=self.cola, qty=3, price_unit=1.0, price_subtotal_incl=3.0, payments=[[0, 0, {"payment_method_id": self.bank_payment_method.id, "amount": 3.0}]] ) data = self.make_request_to_controller('/pos-self-order/process-order/kiosk', order_data) pos_order = self.env['pos.order'].browse(data['pos.order'][0]['id']) self.assertEqual(len(pos_order.payment_ids), 1) def test_process_order_in_mobile_does_not_allow_payment(self): self.pos_config.self_ordering_mode = 'mobile' self.pos_config.with_user(self.pos_user).open_ui() order_data = self._create_order_data( state='draft', product=self.cola, qty=3, price_unit=1.0, price_subtotal_incl=3.0, payments=[[0, 0, {"payment_method_id": self.bank_payment_method.id, "amount": 3.0}]] ) data = self.make_request_to_controller('/pos-self-order/process-order/mobile', order_data) pos_order = self.env['pos.order'].browse(data['pos.order'][0]['id']) self.assertEqual(len(pos_order.payment_ids), 0) def test_access_right_with_message_follower(self): """ Test to ensure that user data is still displayed when a message follower is set on the order """ self.pos_config.self_ordering_mode = 'mobile' self.pos_config.with_user(self.pos_user).open_ui() self.pos_config.current_session_id.set_opening_control(0, '') order_data = self._create_order_data( state='draft', product=self.cola, qty=3, price_unit=1.0, price_subtotal_incl=0 ) data = self.make_request_to_controller('/pos-self-order/process-order/mobile', order_data) pos_order = self.env['pos.order'].browse(data['pos.order'][0]['id']) self.assertEqual(len(pos_order.message_follower_ids), 1) params = { 'access_token': pos_order.config_id.access_token, 'order_access_tokens': [{ 'access_token': pos_order.access_token, 'write_date': '1970-01-01 00:00:00' }], } data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertEqual(len(data['pos.order']), 1) self.assertEqual(data['pos.order'][0]['id'], pos_order.id) def _create_order_data(self, state, product, qty, price_unit, price_subtotal_incl=None, payments=[]): return { 'access_token': self.pos_config.access_token, 'table_identifier': self.pos_table_1.identifier, 'order': { 'table_id': self.pos_table_1.id, 'company_id': self.env.company.id, 'state': state, 'preset_id': self.in_preset.id, 'session_id': self.pos_config.current_session_id.id, 'amount_total': price_subtotal_incl, 'amount_paid': 0, 'amount_tax': 0, 'amount_return': 0, 'uuid': uuid.uuid4().hex, 'lines': [[0, 0, { 'uuid': uuid.uuid4().hex, 'product_id': product.id, 'qty': qty, 'price_unit': price_unit, 'price_subtotal': product.lst_price, 'tax_ids': [(6, 0, product.taxes_id.ids)], 'price_subtotal_incl': price_subtotal_incl or 0, }]], 'payment_ids': payments, } } def test_generate_return_values_includes_payment_method(self): self.pos_config.write({ 'self_ordering_mode': 'mobile', 'self_ordering_pay_after': 'each', }) self.pos_config.with_user(self.pos_user).open_ui() self.pos_config.current_session_id.set_opening_control(0, '') payment_method = self.pos_config.payment_method_ids[0] order = self.env['pos.order'].create({ 'amount_total': 2.2, 'amount_paid': 0, 'amount_tax': 0, 'amount_return': 0, 'date_order': fields.Datetime.to_string(fields.Datetime.now()), 'company_id': self.env.company.id, 'session_id': self.pos_config.current_session_id.id, 'lines': [Command.create({ 'product_id': self.cola.id, 'qty': 1, 'price_unit': 2.2, 'price_subtotal': 2.2, 'price_subtotal_incl': 2.2, })], }) order.lines._onchange_amount_line_all() order._compute_prices() payment_context = {"active_ids": order.ids, "active_id": order.id} order_payment = self.env['pos.make.payment'].with_context(**payment_context).create({ 'payment_method_id': payment_method.id, }) order_payment.with_context(**payment_context).check() params = { 'access_token': self.pos_config.access_token, 'order_access_tokens': [{ 'access_token': order.access_token, }], } data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertIn('pos.payment.method', data) returned_pm_ids = {pm['id'] for pm in data['pos.payment.method']} self.assertIn(payment_method.id, returned_pm_ids) # In kiosk mode, payment methods must not be sent to the client. self.pos_config.write({'self_ordering_mode': 'kiosk'}) data = self.make_request_to_controller('/pos-self-order/get-user-data', params) self.assertNotIn('pos.payment.method', data) def test_config_session_loaded_fields(self): self.pos_config.write({ 'use_presets': False, 'self_ordering_mode': 'mobile', 'self_ordering_pay_after': 'each', }) self.pos_config.with_user(self.pos_user).open_ui() self.pos_config.current_session_id.set_opening_control(0, "") data = self.make_request_to_controller('/pos-self/data/' + str(self.pos_config.id), {}) self.assertEqual(len(data['pos.config']), 1) config_data = data['pos.config'][0] self.assertEqual(config_data['id'], self.pos_config.id) self.assertEqual(config_data['self_ordering_mode'], 'mobile') self.assertTrue(len(config_data['_self_ordering_image_home_ids']) > 1) self.assertFalse(config_data.get('access_token')) self.assertFalse(config_data.get('self_ordering_url')) self.assertEqual(len(data['pos.session']), 1) session_data = data['pos.session'][0] self.assertEqual(session_data['id'], self.pos_config.current_session_id.id) self.assertEqual(session_data['state'], 'opened') self.assertFalse(config_data.get('access_token')) def test_order_sanatization(self): self.pos_config.write({ 'self_ordering_mode': 'mobile', 'self_ordering_pay_after': 'each', }) self.pos_config.with_user(self.pos_user).open_ui() self.pos_config.current_session_id.set_opening_control(0, '') params = { 'company_id': self.env.company.id, 'uuid': '61f8181c-18e1-4b83-8a7b-21224750fe2f', 'state': 'draft', 'preset_id': self.in_preset.id, 'session_id': self.pos_config.current_session_id.id, 'amount_total': 0, 'amount_paid': 0, 'account_move': 'test', # This field should be removed by the _check_pos_order method 'access_token': 'test', # This field should be removed by the _check_pos_order method 'amount_tax': 0, 'amount_return': 0, 'lines': [[0, 0, { 'product_id': self.cola.id, 'qty': 1, 'price_unit': self.cola.lst_price, 'price_subtotal': self.cola.lst_price, 'tax_ids': [(6, 0, self.cola.taxes_id.ids)], 'price_subtotal_incl': 0, }], ], } data = self.env['pos.order']._check_pos_order(self.pos_config, params, 'mobile') self.assertFalse('account_move' in data) # Do not add it back, if needed contact the PoS team. self.assertFalse('access_token' in data) # Do not add it back, if needed contact the PoS team.