Disable link on attestation failures.

Author: carlosmuvi-stripe

paymentsheet/src/main/java/com/stripe/android/paymentsheet/state/PaymentElementLoader.kt

@@ -12,7 +12,9 @@ import com.stripe.android.core.utils.UserFacingLogger
 import com.stripe.android.googlepaylauncher.GooglePayEnvironment
 import com.stripe.android.googlepaylauncher.GooglePayRepository
 import com.stripe.android.link.LinkConfiguration
+import com.stripe.android.link.LinkConfigurationCoordinator
 import com.stripe.android.link.account.LinkStore
+import com.stripe.android.link.attestation.LinkAttestationCheck
 import com.stripe.android.link.gate.LinkGate
 import com.stripe.android.link.model.AccountStatus
 import com.stripe.android.link.model.LinkAppearance
@@ -150,6 +152,7 @@ internal class DefaultPaymentElementLoader @Inject constructor(
     private val accountStatusProvider: LinkAccountStatusProvider,
     private val logLinkHoldbackExperiment: LogLinkHoldbackExperiment,
     private val linkStore: LinkStore,
+    private val attestationCheck: LinkConfigurationCoordinator,
     private val linkGateFactory: LinkGate.Factory,
     private val externalPaymentMethodsRepository: ExternalPaymentMethodsRepository,
     private val userFacingLogger: UserFacingLogger,
@@ -483,6 +486,11 @@ internal class DefaultPaymentElementLoader @Inject constructor(
                 initializationMode = initializationMode,
                 linkAppearance = linkAppearance
             ) ?: return null
+        // Disable link if attestation is required and fails.
+        if (attestationPassed(linkConfig).not()) {
+            return null
+        }
+
         return loadLinkState(
             configuration = configuration,
             linkConfiguration = linkConfig,
@@ -491,6 +499,21 @@ internal class DefaultPaymentElementLoader @Inject constructor(
         )
     }
 
+    private suspend fun attestationPassed(linkConfig: LinkConfiguration): Boolean = runCatching {
+        val attestationResult = attestationCheck.linkAttestationCheck(linkConfig)
+            .invoke()
+        when (attestationResult) {
+            is LinkAttestationCheck.Result.AccountError,
+            is LinkAttestationCheck.Result.AttestationFailed,
+            is LinkAttestationCheck.Result.Error -> {
+                false
+            }
+            LinkAttestationCheck.Result.Successful -> {
+                true
+            }
+        }
+    }.getOrDefault(false)
+
     private suspend fun loadLinkState(
         configuration: CommonConfiguration,
         linkConfiguration: LinkConfiguration,
@@ -611,8 +634,8 @@ internal class DefaultPaymentElementLoader @Inject constructor(
             defaultBillingDetails = configuration.defaultBillingDetails,
             allowDefaultOptIn = elementsSession.allowLinkDefaultOptIn,
             googlePlacesApiKey = configuration.googlePlacesApiKey,
-            collectMissingBillingDetailsForExistingPaymentMethods =
-            configuration.link.collectMissingBillingDetailsForExistingPaymentMethods,
+            collectMissingBillingDetailsForExistingPaymentMethods = configuration
+                .link.collectMissingBillingDetailsForExistingPaymentMethods,
             allowUserEmailEdits = configuration.link.allowUserEmailEdits,
             skipWalletInFlowController = elementsSession.linkMobileSkipWalletInFlowController,
             customerId = elementsSession.customer?.session?.customerId,
@@ -678,6 +701,7 @@ internal class DefaultPaymentElementLoader @Inject constructor(
         customer: CustomerState?,
         isGooglePayReady: Boolean,
     ): PaymentSelection? {
+        return PaymentSelection.Link()
         val isDefaultPaymentMethodEnabled = metadata.customerMetadata?.isPaymentMethodSetAsDefaultEnabled ?: false
         val primaryPaymentSelection = if (isDefaultPaymentMethodEnabled) {
             customer?.paymentMethods?.firstOrNull {