From b4a9972ad70d747fc25e59a304d61c7d22762d51 Mon Sep 17 00:00:00 2001 From: asepharyana Date: Wed, 5 Aug 2026 15:58:47 +0700 Subject: [PATCH] docs: payment lifecycle complete (auto-paid refresh + dashboards) --- docs/dev-audit-findings.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/dev-audit-findings.md b/docs/dev-audit-findings.md index 3345394..bf55fa3 100644 --- a/docs/dev-audit-findings.md +++ b/docs/dev-audit-findings.md @@ -44,3 +44,9 @@ Tangani #1 dan #2 sebelum go-live. #2 adalah kelas bug "OTP di-generate tapi tak - FE: PaymentStep pilih VA/QRIS, rate real dari `mentoring_rate`; modal appointment: book -> create payment -> tampil VA/QR dengan `external_ref` + total + expiry -> success. Service lib: `postCreatePayment/getMyPayments/getPaymentById/postConfirmPayment`. - E2E verified (lokal :4099): create VA dan QRIS, confirm 200, re-confirm 409, non-admin 403, akses payment orang lain 403, session auto-confirmed. - TODO produksi: isi kredensial payment gateway (Midtrans/Xendit) + webhook callback; SMTP masih blocker (#1). + +## 5. Payment lifecycle complete: auto-paid refresh + dashboards (2026-08-05) +- POST /payments/{id}/refresh: polls Midtrans v2/{order_id}/status; settlement/capture -> payment paid + session confirmed automatically (e2e verified via sandbox simulator: VA paid -> refresh -> paid + confirmed) +- GET /payments/session/{id}: payments for one session, accessible by that session's mentee or mentor (powers both dashboards) +- Session mentor may confirm their own payments (previously admins only) — verified e2e +- FE: /mentoring/my-sessions (mentee) + /mentoring/mentor-dashboard (mentor), both with live payment status and refresh/confirm actions; QRIS step renders real QR from qr_string