simplex-chat/apps/simplex-badge-service/web/test/main-pay-repaint.test.ts

// A panel rebuild defeats the disabled attribute, and /api/invoice has no idempotency key, so a second POST is a second charge and a second code.
import assert from "node:assert/strict";
import { headingOf, inViewOf, installPage, primaryOf, settle, timedTest } from "./boot.js";

const payTest = timedTest(3000);

const page = installPage();
const { app, fetches } = page;
await import("../src/main.js");

const inView = (): ReturnType<typeof inViewOf> => inViewOf(app);

payTest("main: a repaint while the checkout is on the wire does not arm a second Pay", async () => {
  primaryOf(inView())!.click();
  inView().all("button.choice").find((c) => c.textContent.startsWith("Legend"))!.click();
  primaryOf(inView())!.click();
  inView().all("button.choice").find((c) => c.textContent.startsWith("12 months"))!.click();
  primaryOf(inView())!.click();
  assert.equal(headingOf(inView()), "Check your order");

  const before = fetches.length;
  page.respondWith({ status: 500, body: { error: "internal" } });
  inView().all("button.primary")[0]!.click();

  // No await here, so the POST stays on the wire while Back and Continue rebuild the Pay button without its disabled attribute.
  inView().all("button.back")[0]!.click();
  primaryOf(inView())!.click();
  const armed = primaryOf(inView());
  assert.ok(armed, "the rebuilt Pay button really is armed again, or this proves nothing");
  armed.click();

  // pay() hashes the code before posting, so the count that matters is after both clicks have reached the network.
  await settle();
  assert.equal(headingOf(inView()), "Check your order", "the answer belongs to a page that left");
  const posts = fetches.slice(before).filter((f) => f.url === "/api/invoice");
  assert.equal(posts.length, 1,
    `exactly one POST: a repaint must not let a second through (${JSON.stringify(fetches.slice(before).map((f) => f.url))})`);
});