Check if the SolidusBraintree PayPal checkout option is tracking the device data

[gsmendoza]

Goal

We want to ensure that the other SolidusBraintree payment options are tracking the device data so that the feature would be consistent across all SolidusBraintree payment options.

Requirement

Given we have Premium Fraud Tools enabled on our Braintree account And there is a user checking out an item When the user checks out the item using PayPal Checkout with Vault Then SolidusBraintree should collect the user's device data and send it to Braintree And Braintree should confirm that the device data has been captured, that is, it should include a risk data section in its transaction response, like this:

[Braintree]   <risk-data>
[Braintree]     <id>ka4fb2kz</id>
[Braintree]     <decision>Approve</decision>
[Braintree]     <fraud-service-provider>fraud_protection_advanced</fraud-service-provider>
[Braintree]     <device-data-captured type="boolean">true</device-data-captured>
[Braintree]     <liability-shift nil="true"/>
[Braintree]     <decision-reasons type="array"/>
[Braintree]     <transaction-risk-score>341</transaction-risk-score>
[Braintree]   </risk-data>

Background

We added device data collection in https://github.com/solidusio/solidus_braintree/pull/116 but it seems we only implemented it for the hosted form.

PayPal documentation

• According to https://developer.paypal.com/braintree/docs/guides/paypal/overview/javascript/v3,
  • Checkout - Device data is automatically included with each transaction
  • Checkout with Vault - Must collect and submit device data on non-recurring transactions created from the Vault
• https://developer.paypal.com/braintree/articles/guides/fraud-tools/premium/overview#payment-methods-supported doesn't include PayPal Checkout in its list of supported payment methods. Not sure if PayPal is not included because it's truly not supported, or not included just because we can assume it's already supported.