[Bug]: You can go to any checkout step without previous validation

[bartoszherba]

Expected Behavior

Whenever I visit checkout I can go through or go to a particular step only if previous step is completed and validated.

Actual Behavior

Once I land on checkout I can go to any step without validation of previous steps, eg. I can instantly go to the last step and try to place an order.

Possible Solution

Checkout navigation must follow rules:

• I can go to the next step only if the previous step is already completed and validated
• I can revisit any previous step at any time
• If I revisit one of the previous steps and change any data I will have to revalidate all next steps again (as previous data might have an impact on further calculation)

Steps to reproduce

Simply go to the checkout and instantly switch to the last step. You can even try to place an order without previously validated steps.

What version of Magento 2 integration are you using?

2.4.x

What version of Node.js are you using?

16.13.1

What browser (and version) are you using?

Version 96.0.4664.110 (Official Build) (arm64)

What operating system (and version) are you using?

macOS Monterey 12.1

Relevant log output

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

┆Attachments: image-20220125-133016.png

[sync-by-unito]

➤ Marcin Kwiatkowski commented:

Hi Kevin Gorjan, I added a few comments in the pull request.

[sync-by-unito]

➤ Kevin Gorjan commented:

Igor Wojciechowski

Tested on DEV and this works

[sync-by-unito]

➤ Igor Wojciechowski commented:

I believe the current solution relates only to the frontend - the tab buttons for each checkout step are disabled unless the previous steps are filled. However, I can still access each of the sections simply by entering via the URL. Shouldn’t we also add some server-side access guard and redirect customer to previous step/root when accessing section that should not be available?

IMO would be nice to add server-side validation of cart and address data.