From 013b54350321d8e7fed2a716bc63a39688539295 Mon Sep 17 00:00:00 2001
From: morteza-mortezai <mrtz.mrtzi.1989@gmail.com>
Date: Mon, 19 Jan 2026 11:37:58 +0330
Subject: [PATCH] deny cash payment

---
 .../payment/controllers/payment.controller.ts | 13 ++++++-
 .../payment/services/payments.service.ts      | 38 ++++++++++++++++---
 2 files changed, 44 insertions(+), 7 deletions(-)

diff --git a/src/modules/payment/controllers/payment.controller.ts b/src/modules/payment/controllers/payment.controller.ts
index 8215693..b4a306d 100644
--- a/src/modules/payment/controllers/payment.controller.ts
+++ b/src/modules/payment/controllers/payment.controller.ts
@@ -3,6 +3,7 @@ import {
   Param,
   UseGuards,
   Query,
+  Delete,
 } from '@nestjs/common';
 import { PaymentService } from '../services/payments.service';
 import {
@@ -52,8 +53,16 @@ export class PaymentController {
   @UseGuards(AuthGuard)
   @ApiBearerAuth()
   @ApiOperation({ summary: 'Verify cash payment' })
-  verifyPayment(@Param('paymentId') paymentId: string) {
-    return this.paymentsService.verifyCashPayment(paymentId);
+  confirmPayment(@Param('paymentId') paymentId: string) {
+    return this.paymentsService.confirmCashPayment(paymentId);
+  }
+
+  @Delete('admin/payments/:paymentId/verify/cash')
+  @UseGuards(AuthGuard)
+  @ApiBearerAuth()
+  @ApiOperation({ summary: 'Deny cash payment' })
+  denyPayment(@Param('paymentId') paymentId: string) {
+    return this.paymentsService.denyCashPayment(paymentId);
   }
 
   // @UseGuards(AdminAuthGuard)
diff --git a/src/modules/payment/services/payments.service.ts b/src/modules/payment/services/payments.service.ts
index 96a291c..239c300 100644
--- a/src/modules/payment/services/payments.service.ts
+++ b/src/modules/payment/services/payments.service.ts
@@ -35,12 +35,9 @@ export class PaymentService {
 
   async payOrder(orderId: string, dto: PayOrderDto): Promise<{ paymentUrl: string | null }> {
 
-    const { method } = dto
-
     const ctx = await this.loadAndValidateOrder(orderId, dto)
 
-
-    switch (method) {
+    switch (dto.method) {
       case PaymentMethodEnum.Cash:
         await this.handleCashPayment(ctx);
         return { paymentUrl: null };
@@ -231,7 +228,7 @@ export class PaymentService {
     return this.paymentRepository.findAllPaginated({ ...dto, userId })
   }
 
-  async verifyCashPayment(paymentId: string): Promise<Payment> {
+  async confirmCashPayment(paymentId: string): Promise<Payment> {
     const payment = await this.em.transactional(async em => {
       const payment = await em.findOne(Payment, paymentId, { populate: ['order'] });
       if (!payment) {
@@ -246,6 +243,7 @@ export class PaymentService {
 
       payment.status = PaymentStatusEnum.Paid;
       payment.paidAt = new Date();
+      payment.failedAt = null;
 
       // TODO : use decimal js
       payment.order.paidAmount += payment.amount
@@ -259,5 +257,35 @@ export class PaymentService {
     return payment;
   }
 
+  async denyCashPayment(paymentId: string): Promise<Payment> {
+    const payment = await this.em.transactional(async em => {
+
+      const payment = await em.findOne(Payment, paymentId, { populate: ['order'] });
+
+      if (!payment) {
+        throw new NotFoundException(PaymentMessage.PAYMENT_NOT_FOUND);
+      }
+
+      if (payment.method !== PaymentMethodEnum.Cash) {
+        throw new BadRequestException(PaymentMessage.PAYMENT_METHOD_NOT_CASH);
+      }
+
+      if (payment.status == PaymentStatusEnum.Paid) {
+        payment.order.paidAmount -= payment.amount
+        payment.order.balance += payment.amount
+
+        em.persistAndFlush(payment.order)
+      }
+
+      payment.status = PaymentStatusEnum.Failed;
+      payment.failedAt = new Date();
+      payment.paidAt = null
+
+      em.persistAndFlush(payment);
+
+      return payment;
+    });
+    return payment;
+  }
 
 }