2015-02-08 15:14:58 +01:00
|
|
|
# lingo - basket and payment system
|
|
|
|
# Copyright (C) 2015 Entr'ouvert
|
|
|
|
#
|
|
|
|
# This program is free software: you can redistribute it and/or modify it
|
|
|
|
# under the terms of the GNU Affero General Public License as published
|
|
|
|
# by the Free Software Foundation, either version 3 of the License, or
|
|
|
|
# (at your option) any later version.
|
|
|
|
#
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
# GNU Affero General Public License for more details.
|
|
|
|
#
|
|
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
2015-02-08 11:32:29 +01:00
|
|
|
|
2015-12-02 11:07:49 +01:00
|
|
|
from decimal import Decimal, ROUND_HALF_UP
|
2015-02-08 15:14:58 +01:00
|
|
|
import json
|
|
|
|
|
2015-02-08 16:04:03 +01:00
|
|
|
from django.contrib.auth.models import User
|
2015-03-06 10:47:34 +01:00
|
|
|
from django.core.urlresolvers import reverse
|
2015-03-05 17:02:52 +01:00
|
|
|
from django.http import HttpResponse, HttpResponseRedirect
|
2016-02-19 11:13:37 +01:00
|
|
|
from django.http import HttpResponseForbidden, Http404
|
2015-03-06 10:47:34 +01:00
|
|
|
from django.template.response import TemplateResponse
|
2015-03-07 14:01:24 +01:00
|
|
|
from django.utils import timezone
|
2015-02-08 16:04:03 +01:00
|
|
|
from django.views.decorators.csrf import csrf_exempt
|
2015-09-04 10:41:57 +02:00
|
|
|
from django.views.generic import View, ListView, TemplateView
|
2015-12-31 16:16:04 +01:00
|
|
|
from django.conf import settings
|
2015-02-08 15:14:58 +01:00
|
|
|
|
2015-03-05 17:02:52 +01:00
|
|
|
import eopayment
|
|
|
|
|
2015-12-31 16:16:04 +01:00
|
|
|
from combo.utils import check_query
|
|
|
|
|
2015-05-12 17:34:48 +02:00
|
|
|
try:
|
|
|
|
from mellon.models import UserSAMLIdentifier
|
|
|
|
except ImportError:
|
|
|
|
UserSAMLIdentifier = None
|
|
|
|
|
2015-03-05 17:02:52 +01:00
|
|
|
from .models import Regie, BasketItem, Transaction
|
2015-02-08 15:14:58 +01:00
|
|
|
|
2016-02-16 19:43:14 +01:00
|
|
|
def get_eopayment_object(request, regie):
|
|
|
|
options = regie.service_options
|
|
|
|
options.update({
|
|
|
|
'automatic_return_url': request.build_absolute_uri(
|
|
|
|
reverse('lingo-callback', kwargs={'regie_pk': regie.id})),
|
|
|
|
'normal_return_url': request.build_absolute_uri(
|
|
|
|
reverse('lingo-return', kwargs={'regie_pk': regie.id})),
|
|
|
|
})
|
|
|
|
return eopayment.Payment(regie.service, options)
|
|
|
|
|
|
|
|
|
2015-02-08 15:14:58 +01:00
|
|
|
class RegiesApiView(ListView):
|
|
|
|
model = Regie
|
|
|
|
|
|
|
|
def get(self, request, *args, **kwargs):
|
|
|
|
response = HttpResponse(content_type='application/json')
|
|
|
|
data = {'data': [x.as_api_dict() for x in self.get_queryset()]}
|
|
|
|
json_str = json.dumps(data)
|
|
|
|
if 'jsonpCallback' in request.GET:
|
|
|
|
json_str = '%s(%s);' % (request.GET['jsonpCallback'], json_str)
|
|
|
|
response.write(json_str)
|
|
|
|
return response
|
2015-02-08 16:04:03 +01:00
|
|
|
|
|
|
|
|
|
|
|
class AddBasketItemApiView(View):
|
|
|
|
http_method_names = ['post', 'options']
|
|
|
|
|
|
|
|
@csrf_exempt
|
|
|
|
def dispatch(self, *args, **kwargs):
|
|
|
|
return super(AddBasketItemApiView, self).dispatch(*args, **kwargs)
|
|
|
|
|
2015-12-02 11:07:49 +01:00
|
|
|
def get_amount(self, amount):
|
|
|
|
if isinstance(amount, list):
|
2015-12-22 14:37:37 +01:00
|
|
|
d = Decimal(sum([Decimal(a) for a in amount]))
|
2015-12-02 11:07:49 +01:00
|
|
|
else:
|
|
|
|
d = Decimal(amount)
|
|
|
|
return d.quantize(Decimal('0.01'), ROUND_HALF_UP)
|
|
|
|
|
2015-02-08 16:04:03 +01:00
|
|
|
def post(self, request, *args, **kwargs):
|
2015-12-31 16:16:04 +01:00
|
|
|
key = getattr(settings, 'LINGO_API_SIGN_KEY', '12345')
|
|
|
|
if not check_query(request.META['QUERY_STRING'], key):
|
|
|
|
return HttpResponseForbidden()
|
2015-03-05 16:02:32 +01:00
|
|
|
|
|
|
|
request_body = json.loads(self.request.body)
|
2015-12-02 11:07:49 +01:00
|
|
|
extra = request_body.get('extra', {})
|
|
|
|
|
|
|
|
item = BasketItem(amount=0)
|
2015-12-22 14:37:37 +01:00
|
|
|
item.amount = self.get_amount(request.GET.getlist('amount'))
|
2015-12-02 11:07:49 +01:00
|
|
|
|
|
|
|
if request_body.get('amount'):
|
|
|
|
item.amount += self.get_amount(request_body['amount'])
|
2015-03-05 16:02:32 +01:00
|
|
|
|
2015-12-02 11:07:49 +01:00
|
|
|
if extra.get('amount'):
|
|
|
|
item.amount += self.get_amount(extra['amount'])
|
2015-02-08 16:04:03 +01:00
|
|
|
|
2015-03-05 16:02:32 +01:00
|
|
|
try:
|
|
|
|
if request.GET.get('NameId'):
|
2015-05-12 17:34:48 +02:00
|
|
|
if UserSAMLIdentifier is None:
|
|
|
|
raise Exception('missing mellon?')
|
|
|
|
try:
|
|
|
|
user = UserSAMLIdentifier.objects.get(name_id=request.GET.get('NameId')).user
|
|
|
|
except UserSAMLIdentifier.DoesNotExist:
|
|
|
|
raise Exception('unknown name id')
|
2015-03-05 16:02:32 +01:00
|
|
|
elif request.GET.get('email'):
|
|
|
|
user = User.objects.get(email=request.GET.get('email'))
|
|
|
|
else:
|
|
|
|
raise Exception('no user specified')
|
|
|
|
except User.DoesNotExist:
|
|
|
|
raise Exception('unknown user')
|
|
|
|
|
|
|
|
item.user = user
|
|
|
|
if request.GET.get('regie_id'):
|
|
|
|
item.regie = Regie.objects.get(id=request.GET.get('regie_id'))
|
|
|
|
else:
|
|
|
|
# if there's no regie specified, use the first one we get from the
|
|
|
|
# database...
|
|
|
|
item.regie = Regie.objects.all()[0]
|
|
|
|
|
|
|
|
item.subject = request_body.get('display_name')
|
|
|
|
item.source_url = request_body.get('url')
|
2015-02-08 16:04:03 +01:00
|
|
|
|
|
|
|
item.save()
|
2015-03-05 16:02:32 +01:00
|
|
|
|
2015-02-08 16:04:03 +01:00
|
|
|
response = HttpResponse(content_type='application/json')
|
|
|
|
response.write(json.dumps({'result': 'success'}))
|
|
|
|
return response
|
2015-03-05 17:02:52 +01:00
|
|
|
|
|
|
|
class PayView(View):
|
|
|
|
def post(self, request, *args, **kwargs):
|
2015-09-17 16:20:38 +02:00
|
|
|
regie_id = request.POST.get('regie')
|
2016-02-03 10:49:47 +01:00
|
|
|
next_url = request.POST.get('next_url')
|
2015-09-17 16:20:38 +02:00
|
|
|
if regie_id:
|
|
|
|
regie = Regie.objects.get(pk=regie_id)
|
|
|
|
if regie.is_remote():
|
|
|
|
items = []
|
|
|
|
remote_items_data = []
|
|
|
|
# get all items data from regie webservice
|
|
|
|
for item in request.POST.getlist('item'):
|
|
|
|
remote_items_data.append(regie.get_item(request, item))
|
|
|
|
remote_items = ','.join([x.id for x in remote_items_data])
|
|
|
|
else:
|
|
|
|
items = BasketItem.objects.filter(id__in=request.POST.getlist('item'), regie=regie)
|
|
|
|
remote_items = ''
|
|
|
|
else:
|
|
|
|
items = BasketItem.objects.filter(id__in=request.POST.getlist('item'))
|
|
|
|
# XXX: check all items are going to the same regie
|
|
|
|
regie = items[0].regie
|
|
|
|
remote_items = ''
|
2015-03-05 17:02:52 +01:00
|
|
|
|
|
|
|
transaction = Transaction()
|
2015-09-17 16:20:38 +02:00
|
|
|
if request.user.is_authenticated():
|
|
|
|
transaction.user = request.user
|
|
|
|
else:
|
|
|
|
transaction.user = None
|
2015-03-05 17:02:52 +01:00
|
|
|
transaction.save()
|
2015-09-17 16:20:38 +02:00
|
|
|
transaction.regie = regie
|
2015-03-05 17:02:52 +01:00
|
|
|
transaction.items = items
|
2015-09-17 16:20:38 +02:00
|
|
|
transaction.remote_items = remote_items
|
2015-04-21 16:40:46 +02:00
|
|
|
transaction.status = 0
|
2015-03-05 17:02:52 +01:00
|
|
|
|
2015-09-17 16:20:38 +02:00
|
|
|
if remote_items:
|
|
|
|
total_amount = sum([x.amount for x in remote_items_data])
|
|
|
|
else:
|
|
|
|
total_amount = sum([x.amount for x in items])
|
2015-12-08 15:30:41 +01:00
|
|
|
transaction.amount = total_amount
|
|
|
|
transaction.save()
|
2015-03-05 17:02:52 +01:00
|
|
|
|
2015-10-05 18:03:52 +02:00
|
|
|
if total_amount < regie.payment_min_amount:
|
2016-02-25 10:16:06 +01:00
|
|
|
messages.warning(request, _('Minimal payment amount is %s €.' % regie.payment_min_amount))
|
|
|
|
return HttpResponseRedirect(next_url)
|
2015-10-05 18:03:52 +02:00
|
|
|
|
2016-02-16 19:43:14 +01:00
|
|
|
payment = get_eopayment_object(request, regie)
|
2015-03-05 17:02:52 +01:00
|
|
|
(order_id, kind, data) = payment.request(total_amount,
|
2016-02-16 19:43:14 +01:00
|
|
|
email=request.user.email)
|
2015-03-05 17:02:52 +01:00
|
|
|
transaction.order_id = order_id
|
|
|
|
transaction.save()
|
2016-02-03 10:49:47 +01:00
|
|
|
if next_url:
|
|
|
|
# store the next url in session in order to be able to redirect to
|
|
|
|
# it if payment is canceled
|
|
|
|
request.session.setdefault('lingo_next_url',
|
|
|
|
{})[transaction.order_id] = request.build_absolute_uri(next_url)
|
2015-03-05 17:02:52 +01:00
|
|
|
|
|
|
|
# XXX: mark basket items as being processed (?)
|
|
|
|
|
|
|
|
if kind == eopayment.URL:
|
|
|
|
return HttpResponseRedirect(data)
|
2015-03-06 10:47:34 +01:00
|
|
|
elif kind == eopayment.FORM:
|
|
|
|
return TemplateResponse(request, 'lingo/payment_form.html', {'form': data})
|
2015-03-05 17:02:52 +01:00
|
|
|
|
|
|
|
raise NotImplementedError()
|
2015-03-06 10:47:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
class CallbackView(View):
|
2015-12-17 09:53:22 +01:00
|
|
|
def handle_callback(self, request, backend_response, **kwargs):
|
2015-03-06 10:47:34 +01:00
|
|
|
regie = Regie.objects.get(id=kwargs.get('regie_pk'))
|
2016-02-16 19:43:14 +01:00
|
|
|
payment = get_eopayment_object(request, regie)
|
2015-12-17 09:53:22 +01:00
|
|
|
payment_response = payment.response(backend_response)
|
2015-04-21 16:40:46 +02:00
|
|
|
if not payment_response.result == eopayment.CANCELLED:
|
|
|
|
# cancellation are not signed...
|
|
|
|
assert payment_response.signed is True
|
|
|
|
|
2016-02-19 11:13:37 +01:00
|
|
|
try:
|
|
|
|
transaction = Transaction.objects.get(order_id=payment_response.order_id)
|
|
|
|
except Transaction.DoesNotExist:
|
|
|
|
raise Http404
|
2015-04-21 16:40:46 +02:00
|
|
|
transaction.status = payment_response.result
|
2015-03-06 10:47:34 +01:00
|
|
|
transaction.bank_data = payment_response.bank_data
|
2015-03-07 14:01:24 +01:00
|
|
|
transaction.end_date = timezone.now()
|
2015-03-06 10:47:34 +01:00
|
|
|
transaction.save()
|
2015-04-21 16:40:46 +02:00
|
|
|
|
2015-09-17 16:20:38 +02:00
|
|
|
# check if transaction belongs to right regie
|
|
|
|
assert transaction.regie == regie
|
|
|
|
|
2015-04-21 16:40:46 +02:00
|
|
|
if payment_response.result != eopayment.PAID:
|
2015-10-13 12:29:53 +02:00
|
|
|
return HttpResponse()
|
2015-04-21 16:40:46 +02:00
|
|
|
|
2015-03-06 10:47:34 +01:00
|
|
|
for item in transaction.items.all():
|
|
|
|
item.payment_date = transaction.end_date
|
|
|
|
item.save()
|
2015-03-07 14:00:17 +01:00
|
|
|
try:
|
2016-01-10 15:54:39 +01:00
|
|
|
item.notify(request)
|
|
|
|
except RuntimeError:
|
|
|
|
# ignore errors, it should be retried later on if it fails
|
2015-03-07 14:00:17 +01:00
|
|
|
pass
|
2015-10-14 18:53:25 +02:00
|
|
|
if transaction.remote_items:
|
|
|
|
for item in transaction.remote_items.split(','):
|
2015-12-09 16:19:44 +01:00
|
|
|
regie.pay_item(request, item, transaction.order_id,
|
|
|
|
transaction.end_date)
|
2015-09-17 16:20:38 +02:00
|
|
|
|
2015-10-13 12:29:53 +02:00
|
|
|
return HttpResponse()
|
|
|
|
|
2015-12-17 09:53:22 +01:00
|
|
|
def get(self, request, *args, **kwargs):
|
|
|
|
return self.handle_callback(request, request.environ['QUERY_STRING'], **kwargs)
|
|
|
|
|
|
|
|
def post(self, request, *args, **kwargs):
|
|
|
|
return self.handle_callback(request, request.body, **kwargs)
|
|
|
|
|
|
|
|
@csrf_exempt
|
|
|
|
def dispatch(self, *args, **kwargs):
|
|
|
|
return super(CallbackView, self).dispatch(*args, **kwargs)
|
|
|
|
|
2015-10-13 12:29:53 +02:00
|
|
|
|
|
|
|
class ReturnView(View):
|
2016-02-16 19:43:14 +01:00
|
|
|
@csrf_exempt
|
|
|
|
def dispatch(self, *args, **kwargs):
|
|
|
|
return super(ReturnView, self).dispatch(*args, **kwargs)
|
2015-10-13 12:29:53 +02:00
|
|
|
|
|
|
|
def get(self, request, *args, **kwargs):
|
2016-02-16 19:43:14 +01:00
|
|
|
return self.handle_return(request, request.environ['QUERY_STRING'], **kwargs)
|
|
|
|
|
|
|
|
def post(self, request, *args, **kwargs):
|
|
|
|
return self.handle_return(request, request.body, **kwargs)
|
|
|
|
|
|
|
|
def handle_return(self, request, backend_response, **kwargs):
|
2015-10-13 12:29:53 +02:00
|
|
|
regie = Regie.objects.get(id=kwargs.get('regie_pk'))
|
2016-02-16 19:43:14 +01:00
|
|
|
payment = get_eopayment_object(request, regie)
|
2015-10-13 12:29:53 +02:00
|
|
|
try:
|
2016-02-16 19:43:14 +01:00
|
|
|
payment_response = payment.response(backend_response)
|
2015-10-13 12:29:53 +02:00
|
|
|
except:
|
|
|
|
# if eopayment can't get response from query string redirect to
|
|
|
|
# homepage
|
|
|
|
return HttpResponseRedirect('/')
|
|
|
|
|
|
|
|
transaction = Transaction.objects.get(order_id=payment_response.order_id)
|
|
|
|
|
2016-02-03 10:49:47 +01:00
|
|
|
if request.session.get('lingo_next_url'):
|
|
|
|
redirect_url = request.session['lingo_next_url'].get(transaction.order_id, '/')
|
|
|
|
return HttpResponseRedirect(redirect_url)
|
|
|
|
|
|
|
|
return HttpResponseRedirect('/')
|
2015-09-03 16:03:44 +02:00
|
|
|
|
|
|
|
|
|
|
|
class ItemDownloadView(View):
|
|
|
|
http_method_names = [u'get']
|
|
|
|
|
|
|
|
def get(self, request, *args, **kwargs):
|
|
|
|
regie = Regie.objects.get(pk=kwargs['regie_id'])
|
|
|
|
data = regie.download_item(request, kwargs['item_id'])
|
|
|
|
r = HttpResponse(data, content_type='application/pdf')
|
|
|
|
r['Content-Disposition'] = 'attachment; filename="%(item_id)s.pdf"' % kwargs
|
|
|
|
return r
|
2015-09-04 10:41:57 +02:00
|
|
|
|
|
|
|
|
|
|
|
class ItemView(TemplateView):
|
|
|
|
http_method_names = [u'get']
|
|
|
|
template_name = 'lingo/combo/item.html'
|
|
|
|
|
|
|
|
def get_context_data(self, **kwargs):
|
|
|
|
regie = Regie.objects.get(pk=kwargs['regie_id'])
|
|
|
|
item = regie.get_item(self.request, kwargs['item_id'])
|
|
|
|
return {'item': item, 'regie': regie}
|