612 lines
18 KiB
Ruby
612 lines
18 KiB
Ruby
class Public::OrdersController < ApplicationController
|
|
layout "public"
|
|
http_basic_authenticate_with name: "nico", password: "852321nb", only: :paid_force
|
|
before_filter :check_paybox_integrity!, :only => [:e_trans_cancel, :e_trans_ipn, :e_trans_refuse,:e_trans_effectue]
|
|
protect_from_forgery :except => [:hipay_ipn]
|
|
def billing
|
|
|
|
@annonce_account = current_annonce_account
|
|
@annonce_account.force_address = true
|
|
end
|
|
|
|
def new
|
|
@no_search = true
|
|
if params[:credit_product_id]
|
|
@credit_product = CreditProduct.find(params[:credit_product_id])
|
|
@order = Order.new(:devise => Devise.find(@credit_product.devise))
|
|
session[:order] = @order
|
|
session[:order].credit_product = @credit_product
|
|
|
|
|
|
|
|
elsif session[:order]
|
|
@order = Order.new(session[:order])
|
|
else
|
|
|
|
end
|
|
if params[:with_com]
|
|
@order.with_com = true
|
|
|
|
elsif
|
|
@order.with_com = false
|
|
|
|
end
|
|
@annonce_account = current_annonce_account
|
|
@annonce_account.force_address = true
|
|
@order.annonce_account = @annonce_account
|
|
|
|
if @order.billing_address?
|
|
else
|
|
render :action => :billing
|
|
end
|
|
|
|
|
|
end
|
|
|
|
def create
|
|
|
|
|
|
@order = Order.new session[:order]
|
|
@annonce_account = current_annonce_account
|
|
@order.annonce_account = @annonce_account
|
|
@order.name = current_annonce_account.name
|
|
@order.firstname = current_annonce_account.firstname
|
|
@order.address = current_annonce_account.address
|
|
@order.address2 = current_annonce_account.address2
|
|
@order.cp = current_annonce_account.cp
|
|
@order.city = current_annonce_account.city
|
|
@order.country = current_annonce_account.country
|
|
@order.pro = current_annonce_account.pro
|
|
@order.organisation = current_annonce_account.organisation
|
|
|
|
|
|
@order.name = @order.credit_product.name
|
|
@order.description = @order.credit_product.description
|
|
@order.nbr_credits = @order.credit_product.nbr_credits_final(current_annonce_account)
|
|
@order.validity = @order.credit_product.validity
|
|
@order.price_ht = @order.credit_product.price_ht_final(current_annonce_account)
|
|
@order.binary_points = @order.credit_product.binary_points_final(current_annonce_account)
|
|
@order.binary_percentage = @order.credit_product.binary_percentage
|
|
|
|
@order.nbr_parts = @order.credit_product.nbr_parts_final(current_annonce_account)
|
|
|
|
@order.with_com = params[:with_com]
|
|
|
|
if @order.with_com
|
|
@order.com_amount = @order.evaluate_use_coms
|
|
@order.amount_ht = @order.evaluate_price_with_coms_ht
|
|
@order.amount_ttc = @order.evaluate_price_with_coms_ttc
|
|
else
|
|
|
|
@order.amount_ht = @order.credit_product.price_ht_final(current_annonce_account)
|
|
@order.amount_ttc = @order.credit_product.price_ttc_final(current_annonce_account)
|
|
end
|
|
|
|
@order.cgv = params[:order][:cgv]
|
|
@order.retractation = params[:order][:retractation]
|
|
|
|
if @order.save
|
|
|
|
#redirect_to paid_public_order_path(@order)
|
|
if @order.with_com
|
|
@commission = current_annonce_account.commissions.new(:commission_type_id => 5, :amount => ((@order.com_amount)*(-1.0)))
|
|
@order.commission = @commission
|
|
@order.save
|
|
end
|
|
|
|
if @order.amount_ht == 0
|
|
@order.paid = true
|
|
@order.paid_at = Time.now
|
|
@order.payment_type_id = 3
|
|
|
|
@order.save
|
|
@order.after_paid(true)
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
else
|
|
render :action => "new"
|
|
end
|
|
|
|
|
|
end
|
|
|
|
def paid
|
|
@order = current_annonce_account.orders.find(params[:id])
|
|
|
|
if @order.devise_id == 1
|
|
|
|
if Rails.env.development?
|
|
|
|
@host_ts = "http://localhost:3000"
|
|
@server_host = "https://preprod-tpeweb.e-transactions.fr/cgi/MYchoix_pagepaiement.cgi"
|
|
@key = "a828b1a278581b8296aba818b9f3252f125a96ebe34d0f83fabd523dee60ca6dfed109c266d4b0a540ecc479c59c44846fe399756c267344f548e07e7a29f99f"
|
|
|
|
elsif Rails.env.production?
|
|
@host_ts = "https://sideplace.com"
|
|
@server_host = "https://tpeweb.e-transactions.fr/cgi/MYchoix_pagepaiement.cgi"
|
|
@key = "11003ee0bd90d3adc4df6a7a8f80e804079c0630b87fc8ad6f504ac4655224fb990e4d043d7f605454a229b7dd937dcece3a4d4e7115f01d686ddb6856f925ab"
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
require "time"
|
|
require "openssl"
|
|
require "base64"
|
|
require "rack"
|
|
|
|
options = {
|
|
:site => "1351265",
|
|
:rang => "01",
|
|
:identifiant => "277631463",
|
|
:total => (@order.amount_ttc*100).to_i.to_s,
|
|
:devise => "978",
|
|
:cmd => @order.id.to_s+"-"+SecureRandom.hex(3).to_s,
|
|
:porteur => @order.annonce_account.email,
|
|
:retour => "M:M;Ref:R;T:T;A:A;B:B;C:C;D:D;E:E;F:F;G:G;H:H;I:I;J:J;N:N;O:O;P:P;Q:Q;S:S;U:U;W:W;Y:Y;Z:Z;sign:K;",
|
|
:annule => "#{@host_ts}/public/orders/e_trans_cancel",
|
|
:effectue => "#{@host_ts}/public/orders/e_trans_effectue",
|
|
:refuse => "#{@host_ts}/public/orders/e_trans_refuse",
|
|
:repondre_a => "#{@host_ts}/public/orders/e_trans_ipn"
|
|
|
|
|
|
}
|
|
#Generation Hash + HMAC
|
|
formatted_options = Hash[options.map { |k, v| ["PBX_#{k.to_s.upcase}", v] }]
|
|
formatted_options["PBX_HASH"] = "SHA512"
|
|
|
|
date_iso = Time.now.utc.iso8601
|
|
formatted_options["PBX_TIME"] = date_iso
|
|
|
|
base_params_query = formatted_options.to_a.map { |a| a.join("=") }.join("&")
|
|
|
|
key = @key
|
|
|
|
binary_key = [key].pack("H*")
|
|
signature = OpenSSL::HMAC.hexdigest(OpenSSL::Digest::Digest.new('sha512'),
|
|
binary_key, base_params_query).upcase
|
|
|
|
formatted_options["PBX_HMAC"] = signature
|
|
|
|
formatted_options
|
|
@base_params_query = base_params_query
|
|
|
|
@paybox_hash = formatted_options
|
|
|
|
else
|
|
|
|
|
|
|
|
end
|
|
|
|
end
|
|
|
|
def hipay_confirm
|
|
@order = current_annonce_account.orders.find(params[:id])
|
|
|
|
flash[:notice] = "Merci pour votre paiement, si votre nombre de crédits n'a pas encore augmenté pas d'inquiétudes, cela peut prendre quelques minutes, merci de ré-actualiser la page."
|
|
redirect_to public_my_account_path
|
|
|
|
end
|
|
|
|
def hipay_decline
|
|
@order = current_annonce_account.orders.find(params[:id])
|
|
|
|
flash[:notice] = "Votre paiement n'a pas abouti, merci de bien vouloir essayer de nouveau ou nous contacter."
|
|
redirect_to paid_public_order_path(@order)
|
|
end
|
|
|
|
def paid_by_hipay
|
|
@order = current_annonce_account.orders.find(params[:id])
|
|
|
|
if Rails.env.development?
|
|
@host_sp = "http://78.245.74.12"
|
|
@host_hipay = "https://test-ws.hipay.com/soap/payment-v2?wsdl"
|
|
@host_hipay = "https://ws.hipay.com/soap/payment-v2?wsdl"
|
|
elsif Rails.env.production?
|
|
@host_sp = "https://sideplace.com"
|
|
@host_hipay = "https://ws.hipay.com/soap/payment-v2?wsdl"
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
@client = Savon.client(wsdl: @host_hipay, ssl_version: :TLSv1)
|
|
|
|
@client.operations
|
|
|
|
message = {
|
|
|
|
|
|
:categoryId => 644,
|
|
:amount => @order.amount_ttc,
|
|
:rating => "ALL",
|
|
:locale => "fr_FR",
|
|
:customerIpAddress => request.ip,
|
|
:merchantReference => @order.id ,
|
|
:description => "Commande de crédits d'annonce" ,
|
|
:executionDate => Time.now.to_s(:db),
|
|
:manualCapture => 0,
|
|
:customerEmail => @order.annonce_account.email,
|
|
:urlCallback => @host_sp+hipay_ipn_public_orders_path(),
|
|
:urlAccept => @host_sp+hipay_confirm_public_order_path(@order),
|
|
:urlDecline => @host_sp+hipay_decline_public_order_path(@order),
|
|
:urlCancel => @host_sp+paid_public_order_path(@order),
|
|
:urlLogo => "https://sideplace.com/black_logo.png",
|
|
|
|
|
|
}
|
|
|
|
if @order.devise.code == "USD"
|
|
message[:currency] = @order.devise.code
|
|
message[:wsLogin] = "10850b5beb65cbfacbd748fa231652f2"
|
|
message[:wsPassword] = "6df1b0ad1c55a1e511e33e7bc42ee3cc"
|
|
message[:websiteId] = 283694
|
|
|
|
elsif @order.devise.code == "CAD"
|
|
message[:currency] = @order.devise.code
|
|
message[:wsLogin] = "4b914f9a84e773fa07aff82ed896dd9c"
|
|
message[:wsPassword] = "26d098a1d239dca34c9c3aaf151a8673"
|
|
message[:websiteId] = 285311
|
|
|
|
elsif @order.devise.code == "GBP"
|
|
message[:currency] = @order.devise.code
|
|
message[:wsLogin] = "8dfff4b14fb9fd7e79b79e50e22fe242"
|
|
message[:wsPassword] = "7cd17cec7bbfccacfc96ff5f3710eb22"
|
|
message[:websiteId] = 285319
|
|
|
|
elsif @order.devise.code == "CHF"
|
|
message[:currency] = @order.devise.code
|
|
message[:wsLogin] = "9c8bb8673a712c6bb4a2e3c89f760e98"
|
|
message[:wsPassword] = "cff22a090bed10e0001754fb724c7843"
|
|
message[:websiteId] = 285320
|
|
|
|
elsif @order.devise.code == "AUD"
|
|
message[:currency] = @order.devise.code
|
|
message[:wsLogin] = "22804a107d27702252ae8833fcc98b5e"
|
|
message[:wsPassword] = "6b764308b87aef21a0ca7e88810d96e0"
|
|
message[:websiteId] = 285345
|
|
|
|
elsif @order.devise.code == "EUR"
|
|
message[:currency] = @order.devise.code
|
|
message[:wsLogin] = "cb9db4d771d58fa1354747f8891c3875"
|
|
message[:wsPassword] = "52d67e65baa8bd436a5dcbc7f3764efc"
|
|
message[:websiteId] = 320499
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@response = @client.call(:generate, :message => {:parameters => message})
|
|
|
|
@response.body
|
|
# => { find_user_response: { id: 42, name: 'Hoff' } }
|
|
if @response.body[:generate_response][:generate_result][:redirect_url] and @response.body[:generate_response][:generate_result][:redirect_url].to_s
|
|
redirect_to @response.body[:generate_response][:generate_result][:redirect_url].to_s
|
|
end
|
|
end
|
|
|
|
def hipay_ipn
|
|
data = Hash.from_xml(params[:xml])
|
|
@result = data["mapi"]["result"]
|
|
logger.info "test"
|
|
logger.debug @result
|
|
logger.info "test"
|
|
@order = Order.find(@result["idForMerchant"])
|
|
logger.debug @order
|
|
|
|
|
|
@hipay_history = @order.hipay_histories.new
|
|
|
|
@hipay_history[:operation] = @result["operation"]
|
|
@hipay_history[:status] = @result["status"]
|
|
@hipay_history[:transaction_date] = @result["date"].to_s+" "+@result["time"].to_s
|
|
@hipay_history[:origamount] = @result["origAmount"]
|
|
@hipay_history[:origcurrency] = @result["origCurrency"]
|
|
@hipay_history[:idformerchant] = @result["idForMerchant"]
|
|
@hipay_history[:emailclient] = @result["emailClient"]
|
|
@hipay_history[:idclient] = @result["idClient"]
|
|
@hipay_history[:merchantdatas] = @result["merchantDatas"]
|
|
@hipay_history[:cardcountry] = @result["cardCountry"]
|
|
@hipay_history[:ipcountry] = @result["ipCountry"]
|
|
@hipay_history[:transid] = @result["transid"]
|
|
@hipay_history[:is3ds] = @result["is3ds"]
|
|
@hipay_history[:paymentmethod] = @result["paymentMethod"]
|
|
@hipay_history[:customercountry] = @result["customerCountry"]
|
|
@hipay_history[:returncode] = @result["returnCode"]
|
|
@hipay_history[:returndescriptionshort] = @result["returnDescriptionShort"]
|
|
@hipay_history[:returndescriptionlong] = @result["returnDescriptionLong"]
|
|
|
|
@hipay_history.save
|
|
|
|
if @hipay_history.operation == "capture" and @hipay_history.status == "ok"
|
|
@order.paid = true
|
|
@order.paid_at = Time.now
|
|
@order.payment_type_id = 6
|
|
|
|
@order.save
|
|
@order.after_paid
|
|
else
|
|
|
|
end
|
|
render :inline => "ok"
|
|
|
|
|
|
end
|
|
|
|
def e_trans_cancel
|
|
params[:order_id] =params[:Ref].split('-')[0]
|
|
@order = current_annonce_account.orders.find(params[:order_id])
|
|
@etrans_history = EtransHistory.create(
|
|
:order => @order,
|
|
:M => params[:M],
|
|
:R => params[:Ref],
|
|
:T => params[:T],
|
|
:A => params[:A],
|
|
:B => params[:B],
|
|
:C => params[:C],
|
|
:D => params[:D],
|
|
:E => params[:E],
|
|
:F => params[:F],
|
|
:G => params[:G],
|
|
:H => params[:H],
|
|
:I => params[:I],
|
|
:J => params[:J],
|
|
:K => params[:K],
|
|
:N => params[:N],
|
|
:O => params[:O],
|
|
:P => params[:P],
|
|
:Q => params[:Q],
|
|
:S => params[:S],
|
|
:U => params[:U],
|
|
:W => params[:W],
|
|
:Y => params[:Y],
|
|
:Z => params[:Z]
|
|
)
|
|
end
|
|
|
|
def e_trans_refuse
|
|
params[:order_id] =params[:Ref].split('-')[0]
|
|
@order = current_annonce_account.orders.find(params[:order_id])
|
|
@etrans_history = EtransHistory.create(
|
|
:order => @order,
|
|
:M => params[:M],
|
|
:R => params[:Ref],
|
|
:T => params[:T],
|
|
:A => params[:A],
|
|
:B => params[:B],
|
|
:C => params[:C],
|
|
:D => params[:D],
|
|
:E => params[:E],
|
|
:F => params[:F],
|
|
:G => params[:G],
|
|
:H => params[:H],
|
|
:I => params[:I],
|
|
:J => params[:J],
|
|
:K => params[:K],
|
|
:N => params[:N],
|
|
:O => params[:O],
|
|
:P => params[:P],
|
|
:Q => params[:Q],
|
|
:S => params[:S],
|
|
:U => params[:U],
|
|
:W => params[:W],
|
|
:Y => params[:Y],
|
|
:Z => params[:Z]
|
|
)
|
|
|
|
end
|
|
|
|
def e_trans_ipn
|
|
params[:order_id] =params[:Ref].split('-')[0]
|
|
@order = Order.find(params[:order_id])
|
|
|
|
|
|
|
|
if !@order.paid and params[:E] == "00000"
|
|
|
|
@etrans_history = EtransHistory.create(
|
|
:order => @order,
|
|
:M => params[:M],
|
|
:R => params[:Ref],
|
|
:T => params[:T],
|
|
:A => params[:A],
|
|
:B => params[:B],
|
|
:C => params[:C],
|
|
:D => params[:D],
|
|
:E => params[:E],
|
|
:F => params[:F],
|
|
:G => params[:G],
|
|
:H => params[:H],
|
|
:I => params[:I],
|
|
:J => params[:J],
|
|
:K => params[:K],
|
|
:N => params[:N],
|
|
:O => params[:O],
|
|
:P => params[:P],
|
|
:Q => params[:Q],
|
|
:S => params[:S],
|
|
:U => params[:U],
|
|
:W => params[:W],
|
|
:Y => params[:Y],
|
|
:Z => params[:Z]
|
|
)
|
|
|
|
@order.paid = true
|
|
@order.paid_at = Time.now
|
|
@order.payment_type_id = 2
|
|
|
|
@order.save
|
|
@order.after_paid
|
|
end
|
|
|
|
render :inline => "OK"
|
|
|
|
|
|
end
|
|
|
|
def e_trans_effectue
|
|
params[:order_id] =params[:Ref].split('-')[0]
|
|
@order = current_annonce_account.orders.find(params[:order_id])
|
|
|
|
|
|
|
|
if !@order.paid and params[:E] == "00000"
|
|
|
|
@etrans_history = EtransHistory.create(
|
|
:order => @order,
|
|
:M => params[:M],
|
|
:R => params[:Ref],
|
|
:T => params[:T],
|
|
:A => params[:A],
|
|
:B => params[:B],
|
|
:C => params[:C],
|
|
:D => params[:D],
|
|
:E => params[:E],
|
|
:F => params[:F],
|
|
:G => params[:G],
|
|
:H => params[:H],
|
|
:I => params[:I],
|
|
:J => params[:J],
|
|
:K => params[:K],
|
|
:N => params[:N],
|
|
:O => params[:O],
|
|
:P => params[:P],
|
|
:Q => params[:Q],
|
|
:S => params[:S],
|
|
:U => params[:U],
|
|
:W => params[:W],
|
|
:Y => params[:Y],
|
|
:Z => params[:Z]
|
|
)
|
|
|
|
@order.paid = true
|
|
@order.paid_at = Time.now
|
|
@order.payment_type_id = 2
|
|
|
|
@order.save
|
|
@order.after_paid
|
|
end
|
|
|
|
end
|
|
|
|
|
|
def paid_force
|
|
|
|
@order = current_annonce_account.orders.find(params[:id])
|
|
if !@order.paid
|
|
@order.paid = true
|
|
@order.paid_at = Time.now
|
|
@order.payment_type_id = 1
|
|
|
|
@order.save
|
|
@order.after_paid(true)
|
|
end
|
|
|
|
redirect_to public_my_account_path
|
|
|
|
end
|
|
|
|
|
|
def bill_print_od
|
|
@order = current_annonce_account.orders.find(params[:id])
|
|
|
|
render :layout => false
|
|
|
|
|
|
|
|
|
|
|
|
end
|
|
|
|
|
|
def bill_print
|
|
@order = current_annonce_account.orders.find(params[:id])
|
|
|
|
@temp_file = "#{Rails.root}/pdf/order_bills/#{@order.bill_number}_temp.pdf"
|
|
@final_file = "#{Rails.root}/pdf/order_bills/#{@order.bill_number}.pdf"
|
|
|
|
|
|
view = ActionView::Base.new(Rails.root.join('app/views'))
|
|
view.class.include ApplicationHelper
|
|
view.class.include Rails.application.routes.url_helpers
|
|
|
|
pdf = view.render(
|
|
:pdf => "#{@order.bill_number}",
|
|
:template => "public/orders/bill_print.html.haml",
|
|
|
|
:locals => {:@order => @order})
|
|
|
|
# then save to a file
|
|
pdf = WickedPdf.new.pdf_from_string(pdf, :margin => { top: 0, # default 10 (mm)
|
|
bottom: 0,
|
|
left: 0,
|
|
right: 0 })
|
|
|
|
save_path = @temp_file
|
|
File.open(save_path, 'wb') do |file|
|
|
file << pdf
|
|
end
|
|
|
|
|
|
|
|
require 'posix/spawn'
|
|
|
|
::POSIX::Spawn::Child.new 'pdftk', @temp_file, 'background', Rails.root.join('pdf_stamp', 'orders.pdf').to_s, 'output', @final_file
|
|
|
|
#pdftk /Users/nico/Dev/sideplace_app.old/pdf/order_bills/SP20150700003.pdf background fond.pdf output sortie.pdf
|
|
|
|
|
|
|
|
|
|
@data_to_send = File.open( @final_file).read
|
|
|
|
send_data @data_to_send, :filename =>"facture.pdf" , :type => 'application/pdf',:disposition => (params[:inline] ? 'inline' : "attachment")
|
|
|
|
|
|
end
|
|
|
|
def bills
|
|
@no_search = true
|
|
end
|
|
|
|
protected
|
|
|
|
def check_paybox_integrity!
|
|
|
|
render :inline => "Bad response" unless params[:sign].present?
|
|
request_fullpath = request.fullpath
|
|
|
|
request_params = request_fullpath[request_fullpath.index("?")+1..request_fullpath.index("&sign")-1]
|
|
request_sign = request_fullpath[request_fullpath.index("&sign")+6..-1]
|
|
|
|
digest = OpenSSL::Digest::SHA1.new
|
|
public_key = OpenSSL::PKey::RSA.new(File.read(Rails.root.join('pubkey.pem')))
|
|
|
|
@verif = public_key.verify(digest, Base64.decode64(Rack::Utils.unescape(request_sign)), request_params)
|
|
|
|
if !@verif
|
|
render :inline => "Bad integrity test"
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
end
|