Feature #1028
closed
anonymous purchase
Description
we need to add a possibility for the client to purchase goods without final registration.
Files
| pop-up.docx (13.2 KB) pop-up.docx | |||
| Screenshot_2.png (29.9 KB) Screenshot_2.png | address problem (front) | ||
| Screenshot_3.png (38.6 KB) Screenshot_3.png | address problem (Pyxis) |
Updated by Mykola Romanov over 6 years ago
1. solution number one:
use the notion of "client leger". This is a kind of a regular client, who hasn't activated his account yet. his web account status is NAVER_ACTIVATED_WITH_A_WEAK_PASSWORD.
and he doesn't have a password set for his web account.
Updated by Yevgen Voronetskyy over 6 years ago
- Status changed from New to In Progress
Updated by Yevgen Voronetskyy over 6 years ago
491483 groupNumber for client leger - 1200226149 (test1@authent.ua) - in recette
Updated by Yevgen Voronetskyy over 6 years ago
test passed on recette Pyxis with swagger - 002454922
Updated by Mykola Romanov over 6 years ago
- Assignee changed from Yevgen Voronetskyy to Anonymous
Captcha has the aim to protect different systems from DDoS. the priority of protection is the following:
1. Pyxis from "Create Order call" (OK if we block the button "Підтвердити замовлення")
2. Move from "Registration call" (OK if we block the button "Підтвердити замовлення")
3. Move prom "preexistance search call" (NOT OK if we block the button "Підтвердити замовлення")
We need to protect the "Оформити замовлення" button by captcha to eliminate the p.3 vulnerability as well. (Alyona, please approve) Maybe move captcha to this button? All the next steps will be protected this way.
For more information about captcha v3 see #1003
Updated by Mykola Romanov over 6 years ago
if a client have already registered a light or a regular account on our website, the registration call will fail. The "preexistance" check will block us, by login already exists error.
The solution is to perform this "preexistance" check, when the client inputs his email address. If we find a match with an exisitng login - we display him the regular popup "log in or register" (event D, then event E from note 7). Then he passes on the current behaviour and the half-step process.
Updated by Mykola Romanov over 6 years ago
a. We let the Anonymous click on the "Оформити замовлення" button.
b. He fills in the information according to note 6.
c. The flag "use express-registration" is active by default
d. User deactivates the flag
e. The regular popup "log in or register" is displayed
f. if client closes it - the flag remains active
Updated by Mykola Romanov over 6 years ago
The email field is mandatory for "Підтвердити замовлення" button to work.
according to note 6 - it cannot be filled in by a matching (non-unique) email-address (login)
Updated by Yevgen Voronetskyy over 6 years ago
- Assignee changed from Anonymous to Mykola Romanov
- introduce the new concept of ExpressCustomer (aka LiteCustomer) - 4 days
- change security rules for /payment endpoints for ExpressCustomer - 2 day
- recaptcha v3 will be integrated from #1003 task - 1 day
- Move-WAC server-side impl for express registration - 3 days
- UI mockups is still missing for today, so we start with min of 4 days
Total:
14 days
- admin pages will be not impacted at all.
Updated by Anonymous over 6 years ago
- Assignee changed from Mykola Romanov to Anonymous
Design http://prntscr.com/oe574v
Updated by Anonymous over 6 years ago
Mykola Romanov wrote:
Captcha has the aim to protect different systems from DDoS. the priority of protection is the following:
1. Pyxis from "Create Order call" (OK if we block the button "Підтвердити замовлення")
2. Move from "Registration call" (OK if we block the button "Підтвердити замовлення")
3. Move prom "preexistance search call" (NOT OK if we block the button "Підтвердити замовлення")We need to protect the "Оформити замовлення" button by captcha to eliminate the p.3 vulnerability as well. (Alyona, please approve) Maybe move captcha to this button? All the next steps will be protected this way.
For more information about captcha v3 see #1003
Yes, I approve
Updated by Anonymous over 6 years ago
If the client uncheck "fast registration" http://prntscr.com/oe5qgu
After login he should see order summary next.
Updated by Yevgen Voronetskyy over 6 years ago
Implemention details for Denis - focus out
Updated by Yevgen Voronetskyy over 6 years ago
- Assignee changed from Anonymous to Mykola Romanov
- % Done changed from 0 to 60
Mykola, please, provide us fallback customer number for the prod env.
Updated by Anonymous over 6 years ago
We should show errors only if we have it after submitting the form
http://prntscr.com/ouhrfb
Updated by Anonymous over 6 years ago
We need to make a fallback if MOVE-WAC does not work. For example, make an order after x sec. even if we do not send the e-mail etc. (may be version 2).
Updated by Anonymous over 6 years ago
If account exists http://prntscr.com/ouiga0
Updated by Yevgen Voronetskyy over 6 years ago
- Translation missing: en.field_checklist changed from [] to [{"id":34,"is_done":false,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":35,"is_done":false,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false}]
Updated by Yevgen Voronetskyy over 6 years ago
- Translation missing: en.field_checklist changed from [{"id":34,"is_done":false,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":35,"is_done":false,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false}] to [{"id":34,"is_done":false,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":35,"is_done":false,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":36,"is_done":false,"subject":"non-regression tests for normal order creation","position":13,"issue_id":1028,"created_at":"2019-08-20T10:19:01.000Z","updated_at":"2019-08-20T10:19:01.000Z","is_section":false}]
Updated by Yevgen Voronetskyy over 6 years ago
- Translation missing: en.field_checklist changed from [{"id":34,"is_done":false,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":35,"is_done":false,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":36,"is_done":false,"subject":"non-regression tests for normal order creation","position":13,"issue_id":1028,"created_at":"2019-08-20T10:19:01.000Z","updated_at":"2019-08-20T10:19:01.000Z","is_section":false}] to [{"id":34,"is_done":false,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":35,"is_done":false,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":36,"is_done":false,"subject":"non-regression tests for normal order creation","position":13,"issue_id":1028,"created_at":"2019-08-20T10:19:01.000Z","updated_at":"2019-08-20T10:19:01.000Z","is_section":false},{"id":37,"is_done":false,"subject":"non-regression tests for all places where recaptcha is used","position":14,"issue_id":1028,"created_at":"2019-08-20T10:26:42.000Z","updated_at":"2019-08-20T10:26:42.000Z","is_section":false}]
Updated by Denys Bezuhlyi over 6 years ago
- Translation missing: en.field_checklist changed from [{"id":34,"is_done":false,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":35,"is_done":false,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T10:16:15.000Z","is_section":false},{"id":36,"is_done":false,"subject":"non-regression tests for normal order creation","position":13,"issue_id":1028,"created_at":"2019-08-20T10:19:01.000Z","updated_at":"2019-08-20T10:19:01.000Z","is_section":false},{"id":37,"is_done":false,"subject":"non-regression tests for all places where recaptcha is used","position":14,"issue_id":1028,"created_at":"2019-08-20T10:26:42.000Z","updated_at":"2019-08-20T10:26:42.000Z","is_section":false}] to [{"id":34,"is_done":true,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T18:12:31.000Z","is_section":false},{"id":35,"is_done":true,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T18:12:41.000Z","is_section":false},{"id":36,"is_done":false,"subject":"non-regression tests for normal order creation","position":13,"issue_id":1028,"created_at":"2019-08-20T10:19:01.000Z","updated_at":"2019-08-20T10:19:01.000Z","is_section":false},{"id":37,"is_done":false,"subject":"non-regression tests for all places where recaptcha is used","position":14,"issue_id":1028,"created_at":"2019-08-20T10:26:42.000Z","updated_at":"2019-08-20T10:26:42.000Z","is_section":false}]
Updated by Anonymous over 6 years ago
1) All fields show this kind of error when I am typing the word or telephone number http://prntscr.com/ovgopk
Updated by Anonymous over 6 years ago
2) When the customer is typing something (focus) we shouldn't show this error messages http://prntscr.com/ovhvkh
Updated by Anonymous over 6 years ago
There is no Viber notification, e-mail notification and letter with activation
Updated by Mykola Romanov over 6 years ago
please, change the fallback client to 1200344659
already done
Updated by Mykola Romanov over 6 years ago
- Assignee changed from Mykola Romanov to Anonymous
Updated by Mykola Romanov over 6 years ago
- File Screenshot_2.png Screenshot_2.png added
- File Screenshot_3.png Screenshot_3.png added
- Assignee changed from Anonymous to Yevgen Voronetskyy
express registration customer, making an order. The address is not updated to Pyxis for this order.
order: 003688783
client: 1200109785
Updated by Yevgen Voronetskyy over 6 years ago
- Assignee changed from Yevgen Voronetskyy to Mykola Romanov
We can't update address for anonymous customer.
We need to refactor the current logic to be able persiste the delivery address in customer preferences during move POST operation for express-registration.
We need 1 additional day.
Updated by Yevgen Voronetskyy over 6 years ago
- Status changed from In Progress to Resolved
- Translation missing: en.field_checklist changed from [{"id":34,"is_done":true,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T18:12:31.000Z","is_section":false},{"id":35,"is_done":true,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T18:12:41.000Z","is_section":false},{"id":36,"is_done":false,"subject":"non-regression tests for normal order creation","position":13,"issue_id":1028,"created_at":"2019-08-20T10:19:01.000Z","updated_at":"2019-08-20T10:19:01.000Z","is_section":false},{"id":37,"is_done":false,"subject":"non-regression tests for all places where recaptcha is used","position":14,"issue_id":1028,"created_at":"2019-08-20T10:26:42.000Z","updated_at":"2019-08-20T10:26:42.000Z","is_section":false}] to [{"id":34,"is_done":true,"subject":"Appropriate error handling (customer exists - activated/not_activated)","position":1,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T18:12:31.000Z","is_section":false},{"id":35,"is_done":true,"subject":"when order is created successfully we should remove from anonymous basket the corresponding products ","position":12,"issue_id":1028,"created_at":"2019-08-20T10:16:15.000Z","updated_at":"2019-08-20T18:12:41.000Z","is_section":false},{"issue_id":1028,"id":36,"is_done":true,"subject":"non-regression tests for normal order creation","position":13,"created_at":"2019-08-20T10:19:01.000Z","updated_at":"2019-08-27T13:04:39.000Z","is_section":false},{"issue_id":1028,"id":37,"is_done":true,"subject":"non-regression tests for all places where recaptcha is used","position":14,"created_at":"2019-08-20T10:26:42.000Z","updated_at":"2019-08-27T13:04:39.000Z","is_section":false}]
Updated by Mykola Romanov almost 6 years ago
- Status changed from Resolved to Closed
tested and confirmed