Konfigürasyon ve Profiller — Bu Değer Nereden Geldi?

1
@ConfigurationProperties("vpos")
2
@Validated
3
public record VposProperties(
4
        @NotNull URI baseUrl,
5
        @NotBlank @Pattern(regexp = "\\d{6,12}") String merchantId,
6
        @NotBlank String terminalId,
7
        @NotBlank String storeKey,                    // signs the 3D Secure hash: a secret
8
        @DefaultValue("10s") @DurationMin(seconds = 2) Duration timeout,
9
        @DefaultValue ThreeDSecure threeDSecure) {
10

11
    // Nested group: vpos.three-d-secure.success-url, vpos.three-d-secure.fail-url
12
    public record ThreeDSecure(
13
            @DefaultValue("https://localhost:8443/payments/3d/ok") URI successUrl,
14
            @DefaultValue("https://localhost:8443/payments/3d/fail") URI failUrl) {
15
    }
16
}

1
@Component
2
class VposClient {
3

4
    private final RestClient http;
5
    private final VposProperties props;
6

7
    VposClient(RestClient.Builder builder, VposProperties props) {
8
        this.props = props;
9
        var requestFactory = new SimpleClientHttpRequestFactory();
10
        requestFactory.setConnectTimeout(props.timeout());
11
        requestFactory.setReadTimeout(props.timeout());
12
        this.http = builder
13
                .baseUrl(props.baseUrl().toString())
14
                .requestFactory(requestFactory)
15
                .build();
16
    }
17

18
    // Starts a 3D Secure payment: the customer is redirected to the card issuer
19
    // and comes back to successUrl or failUrl.
20
    ThreeDStart start(PaymentRequest request) {
21
        var body = ThreeDStartBody.of(request, props.merchantId(), props.terminalId(),
22
                props.threeDSecure().successUrl(), props.threeDSecure().failUrl());
23
        return http.post().uri("/3d/start")
24
                .header("X-Hash", Hashes.sign(body, props.storeKey()))   // key never leaves this class
25
                .body(body)
26
                .retrieve()
27
                .body(ThreeDStart.class);
28
    }
29
}

1
@SpringBootApplication
2
@EnableConfigurationProperties(VposProperties.class)
3
public class CheckoutApplication {
4

5
    public static void main(String[] args) {
6
        SpringApplication.run(CheckoutApplication.class, args);
7
    }
8
}

1
vpos:
2
  base-url: https://vpos-test.bank.example     # the bank's test environment
3
  merchant-id: "100200300"                     # quoted: keeps leading zeros if there are any
4
  terminal-id: T0001
5
  timeout: 10s          # always write the unit: a bare 10 would mean 10 ms
6
  three-d-secure:
7
    success-url: https://checkout.dev.example/payments/3d/ok
8
    fail-url: https://checkout.dev.example/payments/3d/fail
9

10
logging:
11
  level:
12
    com.fintech: INFO

1
# Only what differs in prod. The store key is NOT here:
2
# it comes from the environment (VPOS_STOREKEY).
3
vpos:
4
  base-url: https://vpos.bank.example
5
  merchant-id: "700800900"
6
  terminal-id: T0042
7
  three-d-secure:
8
    success-url: https://checkout.example/payments/3d/ok
9
    fail-url: https://checkout.example/payments/3d/fail
10

11
logging:
12
  level:
13
    com.fintech: WARN

1
apiVersion: apps/v1
2
kind: Deployment
3
metadata:
4
  name: checkout
5
spec:
6
  template:
7
    spec:
8
      containers:
9
        - name: checkout
10
          image: registry.example/checkout:2.7.0   # the same image in every environment
11
          env:
12
            - name: SPRING_PROFILES_ACTIVE
13
              value: prod
14
            # vpos.store-key -> VPOS_STOREKEY (dots to _, dashes removed, upper case)
15
            - name: VPOS_STOREKEY
16
              valueFrom:
17
                secretKeyRef: { name: vpos, key: store-key }