Fix processing of account.application.deauthorized events

don't try to fetch the event as we lost access to remote account

pinax/stripe/tests/test_webhooks.py

@@ -602,14 +602,15 @@ def test_process_webhook(self, SyncMock, RetrieveMock):
         AccountUpdatedWebhook(event).process_webhook()
         self.assertTrue(SyncMock.called)
 
-    @patch("pinax.stripe.actions.accounts.deauthorize")
-    def test_process_deauthorize(self, DeauthorizeMock):
+    def test_process_deauthorize(self):
+        data = {"data": {"object": {"id": self.account.stripe_id}},
+                "account": self.account.stripe_id}
         event = Event.objects.create(
             kind=AccountApplicationDeauthorizeWebhook.name,
-            webhook_message={},
-            valid=True,
-            processed=False
+            webhook_message=data,
         )
-        event.validated_message = dict(data=dict(object=dict(id=self.account.stripe_id)))
-        AccountApplicationDeauthorizeWebhook(event).process_webhook()
-        self.assertTrue(DeauthorizeMock.called)
+        AccountApplicationDeauthorizeWebhook(event).process()
+        self.assertTrue(event.valid)
+        self.assertTrue(event.processed)
+        self.account.refresh_from_db()
+        self.assertFalse(self.account.authorized)

pinax/stripe/webhooks.py

@@ -144,8 +144,20 @@ class AccountApplicationDeauthorizeWebhook(Webhook):
     name = "account.application.deauthorized"
     description = "Occurs whenever a user deauthorizes an application. Sent to the related application only."
 
+    def validate(self):
+        """
+        Validate incoming events.
+
+        We don't fetch remote the event as we lost access to the account where the event belongs.
+        """
+        self.stripe_account = models.Account.objects.filter(
+            stripe_id=self.event.webhook_message["account"]).first()
+        self.event.validated_message = self.event.webhook_message
+        self.event.stripe_account = self.stripe_account
+        self.event.valid = True
+
     def process_webhook(self):
-        accounts.deauthorize(models.Account.objects.get(stripe_id=self.event.message["data"]["object"]["id"]))
+        accounts.deauthorize(self.stripe_account)
 
 
 class AccountExternalAccountCreatedWebhook(Webhook):