Changeset 236922 in webkit

Timestamp:

Oct 8, 2018 10:22:18 AM (6 years ago)

Author:

aestes@apple.com

Message:

[Payment Request] Requests should be aborted after details settle when the user cancels
​https://bugs.webkit.org/show_bug.cgi?id=190333

Reviewed by Alex Christensen.

Source/WebCore:

In Payment Request's "update a PaymentRequest's details" algorithm, user agents are expected
to disable the payment UI when PaymentRequest details are being updated by the merchant.
This is to prevent the user from accepting a payment before updated details are displayed.

Further, Payment Request's "user aborts the payment request" algorithm says that the
algorithm should be terminated prior to throwing an AbortError if the request is currently
being updated, and also that user agents SHOULD ensure this never occurs. This is based on
the assumption that payment UIs are disabled during details updates.

For Apple Pay, while it is true that a payment cannot be accepted by the user while details
are being updated by the merchant, the payment UI is not completely disabled. In particular,
the user is allowed to abort the payment while details are being updated. We need to honor
the user's request to abort without doing so in the middle of a details update.

This patch defers a user-initiated abort until after details are settled, at which point the
promise returned by show() is rejected with an AbortError. This behaves as if the details
update promise were rejected by the merchant.

Added a test case to http/tests/paymentrequest/payment-request-show-method.https.html.

• Modules/paymentrequest/PaymentRequest.cpp:

(WebCore::PaymentRequest::settleDetailsPromise):
(WebCore::PaymentRequest::whenDetailsSettled):
(WebCore::PaymentRequest::cancel):

• Modules/paymentrequest/PaymentRequest.h:

LayoutTests:

• http/tests/paymentrequest/payment-request-show-method.https-expected.txt:
• http/tests/paymentrequest/payment-request-show-method.https.html:

Location:

trunk

Files:

• LayoutTests/ChangeLog (modified) (1 diff)
• LayoutTests/http/tests/paymentrequest/payment-request-show-method.https-expected.txt (modified) (1 diff)
• LayoutTests/http/tests/paymentrequest/payment-request-show-method.https.html (modified) (1 diff)
• Source/WebCore/ChangeLog (modified) (1 diff)
• Source/WebCore/Modules/paymentrequest/PaymentRequest.cpp (modified) (4 diffs)
• Source/WebCore/Modules/paymentrequest/PaymentRequest.h (modified) (1 diff)

trunk/LayoutTests/ChangeLog

@@ +1 @@
+2018-10-08  Andy Estes  <aestes@apple.com>
+
+        [Payment Request] Requests should be aborted after details settle when the user cancels
+        https://bugs.webkit.org/show_bug.cgi?id=190333
+
+        Reviewed by Alex Christensen.
+
+        * http/tests/paymentrequest/payment-request-show-method.https-expected.txt:
+        * http/tests/paymentrequest/payment-request-show-method.https.html:
+
 2018-10-08  Ryan Haddad  <ryanhaddad@apple.com>
 

trunk/LayoutTests/http/tests/paymentrequest/payment-request-show-method.https-expected.txt

@@ -5 +5 @@
 PASS If payment method consultation produces no supported method of payment, then return a promise rejected with a "NotSupportedError" DOMException. 
 PASS If the user aborts the payment request algorithm, then return a promise rejected with an "AbortError" DOMException. 
+PASS If the user aborts the payment request algorithm while details are updating, then reject the accept promise with an "AbortError" when the details settle. 
 PASS A request is updated when show()'s detail promise resolves. 
 PASS Change events do not occur until show()'s detail promise resolves. 

trunk/LayoutTests/http/tests/paymentrequest/payment-request-show-method.https.html

@@ -79 +79 @@
 user_activation_test(async t => {
   const request = new PaymentRequest(defaultMethods, defaultDetails);
+  const acceptPromise = request.show(new Promise(resolve => {
+    window.setTimeout(() => {
+      internals.mockPaymentCoordinator.cancelPayment();
+      window.setTimeout(() => resolve(defaultDetails));
+    });
+  })); // Sets state to "interactive"
+  await promise_rejects(t, "AbortError", acceptPromise);
+}, `If the user aborts the payment request algorithm while details are updating, then reject the accept promise with an "AbortError" when the details settle.`);
+
+user_activation_test(async t => {
+  const request = new PaymentRequest(defaultMethods, defaultDetails);
   const expectedLabel = "Updated Total";
   const expectedAmount = "2.00";

trunk/Source/WebCore/ChangeLog

@@ +1 @@
+2018-10-08  Andy Estes  <aestes@apple.com>
+
+        [Payment Request] Requests should be aborted after details settle when the user cancels
+        https://bugs.webkit.org/show_bug.cgi?id=190333
+
+        Reviewed by Alex Christensen.
+
+        In Payment Request's "update a PaymentRequest's details" algorithm, user agents are expected
+        to disable the payment UI when PaymentRequest details are being updated by the merchant.
+        This is to prevent the user from accepting a payment before updated details are displayed.
+
+        Further, Payment Request's "user aborts the payment request" algorithm says that the
+        algorithm should be terminated prior to throwing an AbortError if the request is currently
+        being updated, and also that user agents SHOULD ensure this never occurs. This is based on
+        the assumption that payment UIs are disabled during details updates.
+
+        For Apple Pay, while it is true that a payment cannot be accepted by the user while details
+        are being updated by the merchant, the payment UI is not completely disabled. In particular,
+        the user is allowed to abort the payment while details are being updated. We need to honor
+        the user's request to abort without doing so in the middle of a details update.
+
+        This patch defers a user-initiated abort until after details are settled, at which point the
+        promise returned by show() is rejected with an AbortError. This behaves as if the details
+        update promise were rejected by the merchant.
+
+        Added a test case to http/tests/paymentrequest/payment-request-show-method.https.html.
+
+        * Modules/paymentrequest/PaymentRequest.cpp:
+        (WebCore::PaymentRequest::settleDetailsPromise):
+        (WebCore::PaymentRequest::whenDetailsSettled):
+        (WebCore::PaymentRequest::cancel):
+        * Modules/paymentrequest/PaymentRequest.h:
+
 2018-10-08  Chris Dumez  <cdumez@apple.com>
 

trunk/Source/WebCore/Modules/paymentrequest/PaymentRequest.cpp

@@ -615 +615 @@
     auto scopeExit = makeScopeExit([&] {
         m_isUpdating = false;
+        m_isCancelPending = false;
         m_detailsPromise = nullptr;
     });
@@ -621 +622 @@
         return;
 
-    if (m_detailsPromise->status() == DOMPromise::Status::Rejected) {
+    if (m_isCancelPending || m_detailsPromise->status() == DOMPromise::Status::Rejected) {
         stop();
         return;
@@ -667 +668 @@
 void PaymentRequest::whenDetailsSettled(std::function<void()>&& callback)
 {
-    if (!m_detailsPromise) {
+    auto whenSettledFunction = [this, callback = WTFMove(callback)] {
         ASSERT(m_state == State::Interactive);
         ASSERT(!m_isUpdating);
+        ASSERT(!m_isCancelPending);
+        ASSERT_UNUSED(this, this);
         callback();
-        return;
-    }
-
-    m_detailsPromise->whenSettled([this, protectedThis = makeRefPtr(this), callback = WTFMove(callback)] {
-        if (m_state != State::Interactive)
-            return;
-
-        ASSERT(!m_isUpdating);
-        callback();
+    };
+
+    if (!m_detailsPromise) {
+        whenSettledFunction();
+        return;
+    }
+
+    m_detailsPromise->whenSettled([this, protectedThis = makeRefPtr(this), whenSettledFunction = WTFMove(whenSettledFunction)] {
+        if (m_state == State::Interactive)
+            whenSettledFunction();
     });
 }
@@ -720 +724 @@
         return;
 
-    if (m_isUpdating)
-        return;
-
     m_activePaymentHandler = nullptr;
+
+    if (m_isUpdating) {
+        m_isCancelPending = true;
+        return;
+    }
+
     stop();
 }

trunk/Source/WebCore/Modules/paymentrequest/PaymentRequest.h

@@ -137 +137 @@
     RefPtr<DOMPromise> m_merchantSessionPromise;
     bool m_isUpdating { false };
+    bool m_isCancelPending { false };
 };