spree_vpago 0.1.0.pre.beta

data/app/services/vpago/payout_profiles/payway/open_ssl_encrypter.rb

@@ -0,0 +1,31 @@
+require 'openssl'
+
+module Vpago
+  module PayoutProfiles
+    module Payway
+      class OpenSslEncrypter
+        attr_reader :content, :rsa_public_key
+
+        def initialize(content:, rsa_public_key:)
+          @content = content
+          @rsa_public_key = OpenSSL::PKey::RSA.new(rsa_public_key)
+        end
+
+        def call
+          # Assumes 1024 bit key and encrypts in chunks.
+          maxlength = 117
+          output = ''
+
+          source = content.dup
+          while source != ''
+            input = source.slice!(0, maxlength)
+            encrypted = rsa_public_key.public_encrypt(input)
+            output += encrypted
+          end
+
+          Base64.strict_encode64(output)
+        end
+      end
+    end
+  end
+end

data/app/services/vpago/payout_profiles/payway/payout_profile_request_creator.rb

@@ -0,0 +1,50 @@
+module Vpago
+  module PayoutProfiles
+    module Payway
+      class PayoutProfileRequestCreator < BasePayoutProfileRequest
+        # override
+        def request_path
+          'api/merchant-portal/merchant-access/whitelist-account/add-whitelist-payout'
+        end
+
+        # code:
+        # "00": Success!
+        # "PTL148": Payee already exists.
+        def call
+          json_response = request_to_payway
+          return false if @error_messages.any?
+
+          code = json_response['status']['code']
+
+          if code == '00'
+            profile.verify!(json_response['data'])
+          elsif code == 'PTL148'
+            handle_existing_account(json_response)
+          elsif code.present?
+            profile.reset_verification!
+            @error_messages << json_response['status']
+          end
+
+          error_messages.empty?
+        end
+
+        # if bank return that account already created,
+        # but account is not yet exist in our database,
+        # we can call updater to verify the profile as well as get account infos from bank.
+        def handle_existing_account(json_response)
+          other_existing_profile = Spree::PayoutProfile.where.not(id: profile.id).find_by(
+            type: profile.type,
+            bank_account_number: profile.bank_account_number
+          )
+
+          if other_existing_profile.nil?
+            PayoutProfileRequestUpdater.new(profile).call
+          else
+            profile.reset_verification!
+            @error_messages << json_response['status']
+          end
+        end
+      end
+    end
+  end
+end

data/app/services/vpago/payout_profiles/payway/payout_profile_request_params_builder.rb

@@ -0,0 +1,58 @@
+module Vpago
+  module PayoutProfiles
+    module Payway
+      class PayoutProfileRequestParamsBuilder
+        attr_reader :request_time, :profile
+
+        def initialize(request_time, profile)
+          @request_time = request_time
+          @profile = profile
+        end
+
+        def api_key = profile.preferred_api_key
+        def rsa_public_key = profile.preferred_rsa_public_key
+        def merchant_id = profile.preferred_merchant_id
+        def payee = profile.preferred_payee
+        def status = profile.active ? '1' : '0'
+
+        def formatted_request_time
+          request_time.strftime('%Y%m%d%H%M%S')
+        end
+
+        def merchant_auth_data
+          {
+            'mc_id' => merchant_id,
+            'payee' => payee,
+            'status' => status
+          }.to_json
+        end
+
+        def merchant_auth
+          @merchant_auth ||= OpenSslEncrypter.new(
+            content: merchant_auth_data,
+            rsa_public_key: rsa_public_key
+          ).call
+        end
+
+        def hash_data
+          "#{formatted_request_time}#{merchant_auth}"
+        end
+
+        def encoded_hash
+          digest_name = OpenSSL::Digest.new('sha512')
+          hash = OpenSSL::HMAC.digest(digest_name, api_key, hash_data)
+          Base64.strict_encode64(hash)
+        end
+
+        def request_params
+          {
+            request_time: formatted_request_time,
+            merchant_id: merchant_id,
+            merchant_auth: merchant_auth,
+            hash: encoded_hash
+          }
+        end
+      end
+    end
+  end
+end

data/app/services/vpago/payout_profiles/payway/payout_profile_request_updater.rb

@@ -0,0 +1,28 @@
+module Vpago
+  module PayoutProfiles
+    module Payway
+      class PayoutProfileRequestUpdater < BasePayoutProfileRequest
+        # override
+        def request_path
+          'api/merchant-portal/merchant-access/whitelist-account/update-whitelist-status'
+        end
+
+        def call
+          json_response = request_to_payway
+          return false if error_messages.any?
+
+          code = json_response['status']['code']
+
+          if code == '00'
+            profile.verify!(json_response['data'])
+          else
+            profile.reset_verification!
+            @error_messages << json_response['status']
+          end
+
+          error_messages.empty?
+        end
+      end
+    end
+  end
+end

data/app/services/vpago/payway_return_options_builder.rb

@@ -0,0 +1,39 @@
+# Deprecated: No longer used anymore, should ask bank to put [json] by default. So we have unified return url for payment methods.
+module Vpago
+  class PaywayReturnOptionsBuilder
+    attr_reader :params
+
+    def initialize(params:)
+      @params = params
+    end
+
+    def options
+      if merchant_profile_content_type == 'html'
+        html_params
+      elsif merchant_profile_content_type == 'json'
+        json_params
+      end
+    end
+
+    def payment
+      @payment ||= Spree::Payment.find_by(number: tran_id)
+    end
+
+    def tran_id
+      @tran_id ||= options[:tran_id]
+    end
+
+    def json_params
+      { tran_id: params[:tran_id] }
+    end
+
+    def html_params
+      payload = JSON.parse(params[:response])
+      { tran_id: payload['tran_id'] }
+    end
+
+    def merchant_profile_content_type
+      ENV['PAYWAY_MERCHANT_PROFILE_CONTENT_TYPE'].presence || 'html'
+    end
+  end
+end

data/app/services/vpago/user_informers/firebase.rb

@@ -0,0 +1,52 @@
+require 'google/cloud/firestore'
+
+module Vpago
+  module UserInformers
+    class Firebase
+      attr_accessor :order
+
+      def initialize(order)
+        @order = order
+      end
+
+      def payment_is_processing(processing:, log_message: nil) = notify(:payment_is_processing, processing, log_message)
+      def order_is_processing(processing:, log_message: nil) = notify(:order_is_processing, processing, log_message)
+      def order_is_completed(processing:, log_message: nil) = notify(:order_is_completed, processing, log_message)
+      def order_process_failed(processing:, log_message: nil) = notify(:order_process_failed, processing, log_message)
+      def payment_is_refunded(processing:, log_message: nil) = notify(:payment_is_refunded, processing, log_message)
+      def payment_process_failed(processing:, log_message: nil) = notify(:payment_process_failed, processing, log_message)
+
+      def notify(message, processing, log_message = nil)
+        order.reload
+
+        data = {
+          processing: processing,
+          message_code: message,
+          log_message: log_message,
+          order_state: order.state,
+          payment_state: order.payment_state,
+          updated_at: Time.current
+        }.compact
+
+        firestore_reference.set(data, merge: true)
+        firestore_reference.col('histories').doc(message).set(data)
+      end
+
+      def firestore_reference
+        current_date = Time.current.strftime('%Y-%m-%d')
+        firestore.col('statuses')
+                 .doc('cart')
+                 .col(current_date)
+                 .doc(order.number)
+      end
+
+      def firestore
+        @firestore ||= Google::Cloud::Firestore.new(project_id: service_account[:project_id], credentials: service_account)
+      end
+
+      def service_account
+        @service_account ||= Rails.application.credentials.cloud_firestore_service_account
+      end
+    end
+  end
+end

data/app/views/layouts/acleda.html.erb

@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+  <html lang="en">
+  <head>
+      <title>Acleda</title>
+      <meta charset="utf-8">
+      <meta http-equiv="X-UA-Compatible" content="IE=edge">
+      <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height, target-densitydpi=device-dpi" />
+
+      <%= yield :head %>
+  </head>
+
+  <body>
+    <div class='container'>
+      <%= yield %>
+    </div>
+  </body>
+
+</html>

data/app/views/layouts/payway.html.erb

@@ -0,0 +1,24 @@
+<!DOCTYPE html>
+  <html lang="en">
+  <head>
+      <title>PaywayGateway</title>
+      <meta charset="utf-8">
+      <meta http-equiv="X-UA-Compatible" content="IE=edge">
+      <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height, target-densitydpi=device-dpi" />
+
+      <%= yield :head %>
+  </head>
+
+  <body>
+    <div class='container'>
+      <%= yield %>
+    </div>
+
+    <script type="text/javascript">
+      $(function(){
+        AbaPayway.checkout();
+      })
+    </script>
+  </body>
+
+</html>

data/app/views/layouts/payway_v2.html.erb

@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+  <html lang="en">
+  <head>
+      <title>PaywayGateway</title>
+      <meta charset="utf-8">
+      <meta http-equiv="X-UA-Compatible" content="IE=edge">
+      <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height, target-densitydpi=device-dpi" />
+
+      <%= yield :head %>
+  </head>
+
+  <body>
+    <div class='container'>
+      <%= yield %>
+    </div>
+  </body>
+
+</html>

data/app/views/layouts/vpago_payments.html.erb

@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Payment</title>
+
+  <%= csrf_meta_tags %>
+  <%= csp_meta_tag %>
+
+  <%= javascript_include_tag "vpago/vpago_payments/request_process_payment", 'data-turbo-track': 'reload' %>
+  <%= javascript_include_tag "vpago/vpago_payments/user_informers/#{user_informer}", 'data-turbo-track': 'reload' %>
+</head>
+
+<body>
+  <%= yield %>
+</body>
+</html>

data/app/views/layouts/wing.html.erb

@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+  <html lang="en">
+  <head>
+      <title>Wing</title>
+      <meta charset="utf-8">
+      <meta http-equiv="X-UA-Compatible" content="IE=edge">
+      <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height, target-densitydpi=device-dpi" />
+
+      <%= yield :head %>
+  </head>
+
+  <body>
+    <div class='container'>
+      <%= yield %>
+    </div>
+  </body>
+
+</html>

data/app/views/spree/_payment_icon.html.erb

@@ -0,0 +1,25 @@
+<%
+  is_payway = method.class == Spree::Gateway::Payway || method.class == Spree::Gateway::PaywayV2
+
+  if is_payway
+    is_card_payment = method.preferences[:payment_option] == 'cards'
+
+    pm_icon = is_card_payment ? 'card' : 'payway_abapay'
+    pm_name = is_card_payment ? t('payment.payway') : t('payment.abapay')
+    pm_description = is_card_payment ? t('payment.payway_description') : t('payment.abapay_description')
+  else
+    pm_icon = method.preferences[:icon_name].presence || 'card'
+    pm_name = Spree.t(method.name, scope: :payment_methods, default: method.name)
+    pm_description= method.description
+  end
+%>
+
+<div class="d-flex align-items-center">
+  <%= image_tag "payment_method_icons/#{pm_icon}.png", alt: method.name, class: 'payment-icon' %>
+  <div class="ml-3">
+    <p class="payment-label"><%= pm_name %></p>
+    <% if pm_description.present? %>
+      <p class="payment-description"><%= pm_description %></p>
+    <% end %>
+  </div>
+</div>

data/app/views/spree/acleda_redirects/show.html.erb

@@ -0,0 +1,3 @@
+<% if @client_redirect.present? %>
+  <%= render 'spree/checkout/payment/acleda_checkout_form', gateway_params: @client_redirect.gateway_params, action_url: @client_redirect.action_url %>
+<% end %>

data/app/views/spree/admin/payments/source_forms/_payment_payway.html.erb

@@ -0,0 +1,4 @@
+<%
+  # create payment on the backend
+  # we don't allow payment to be created by the backend
+%>

data/app/views/spree/admin/payments/source_forms/_payway_v2.html.erb

@@ -0,0 +1,7 @@
+<%
+  # create payment on the backend
+  # we don't allow payment to be created by the backend
+  
+%>
+
+

data/app/views/spree/admin/payments/source_views/_acleda.html.erb

@@ -0,0 +1 @@
+<%= render 'spree/admin/payments/source_views/vpago_payment_tmpl', payment: payment%>

data/app/views/spree/admin/payments/source_views/_acleda_mobile.html.erb

@@ -0,0 +1 @@
+<%= render 'spree/admin/payments/source_views/vpago_payment_tmpl', payment: payment%>

data/app/views/spree/admin/payments/source_views/_payment_payway.html.erb

@@ -0,0 +1,98 @@
+<% if payment.source.present? %>
+  <fieldset data-hook="mollie_payment_source">
+    
+    <legend>
+      <%= payment.source.payment_method.name %>
+    </legend>
+
+    <table class="table table-condensed table-bordered"> 
+
+       <tr>
+        <th width="210"><%= Spree.t('order_state', scope: :order_states) %></th>
+        <td><%= Spree.t(payment.order.state) %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('payment_state') %></th>
+        <td>
+          <%= Spree.t(payment.state, scope: :payment_states, default: payment.state.capitalize) %>
+        </td>
+      </tr>
+
+        <tr>
+          <th><%= Spree.t('vpago.payments.query_status') %></th>
+          <td><%= link_to Spree.t('vpago.payments.query_status'), admin_payment_payway_querier_path(payment) %></td>
+        </tr>
+        <tr>
+          <th><%= Spree.t('vpago.payments.check_and_heal') %></th>
+          <td><%= link_to Spree.t('vpago.payments.check_and_heal'), admin_payment_payway_checker_path(payment), method: :put %></td>
+        </tr>
+
+      <tr>
+        <th><%= Spree.t('vpago.payments.updated_by_user') %></th>
+        <td><%= payment.source.updated_by_user&.full_name %></td>
+      </tr>
+      <tr>
+        <th><%= Spree.t('vpago.payments.updated_by_user_at') %></th>
+        <td><%= payment.source.updated_by_user_at %></td>
+      </tr>
+      <tr>
+        <th><%= Spree.t('vpago.payments.updated_reason') %></th>
+        <td><%= payment.source.updated_reason %></td>
+      </tr>
+
+
+      <tr>
+        <th><%= Spree.t('user') %></th>
+        <td><%= "#{payment.source.user&.id} - #{payment.source.user&.full_name}" %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('transaction_id') %></th>
+        <td><%= payment.source.transaction_id %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('payment_status') %></th>
+        <td><%= payment.source.payment_status %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('payment_description') %></th>
+        <td><%= payment.source.payment_description %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('created_at') %></th>
+        <td><%= payment.source.created_at %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('updated_at') %></th>
+        <td><%= payment.source.updated_at %></td>
+      </tr>
+
+      <% if !payment.order.completed? %>
+        <tr>
+          <th><%= Spree.t('vpago.payments.manually_mark') %></th>
+          <td>
+              <%= form_with url: admin_payment_payway_marker_path(payment.number), method: :put do |f| %>
+                <div style='margin-top:10px;' >
+                  <%= f.text_area :updated_reason, class: 'form-control' %>
+                </div>
+
+                <div style='margin-top:10px;' >
+                  <%= f.button 'Save', class: 'btn btn-primary', data: { confirm: Spree.t('vpago.payments.confirm_manual_update')} %>
+                </div>
+              <% end %>
+          </td>
+        </tr>
+      <% end %>
+    </table>
+
+  </fieldset>
+<% else %>
+  <div class="alert alert-danger">
+    <%= Spree.t(:empty) %>
+  </div>
+<% end %>

data/app/views/spree/admin/payments/source_views/_payway_v2.html.erb

@@ -0,0 +1,5 @@
+<%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
+    payment: payment, 
+    check_status_url: admin_payment_payway_querier_path(payment),
+    heal_payment_url: admin_payment_payway_checker_path(payment),
+    manual_update_payment_url: admin_payment_payway_marker_path(payment.number) %>

data/app/views/spree/admin/payments/source_views/_vpago_payment_tmpl.html.erb

@@ -0,0 +1,113 @@
+<% if payment.source.present? %>
+  <fieldset data-hook="mollie_payment_source">
+    
+    <legend>
+      <%= payment.source.payment_method.name %>
+    </legend>
+
+    <table class="table table-condensed table-bordered"> 
+
+       <tr>
+        <th width="210"><%= Spree.t('order_state', scope: :order_states) %></th>
+        <td><%= Spree.t(payment.order.state) %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('payment_state') %></th>
+        <td>
+          <%= Spree.t(payment.state, scope: :payment_states, default: payment.state.capitalize) %>
+        </td>
+      </tr>
+
+      <% if check_status_url.present? %>
+        <tr>
+          <th><%= Spree.t('vpago.payments.query_status') %></th>
+          <td><%= link_to Spree.t('vpago.payments.query_status'), check_status_url %></td>
+        </tr>
+      <% end %>
+
+      <% if heal_payment_url.present? %>
+        <tr>
+          <th><%= Spree.t('vpago.payments.check_and_heal') %></th>
+          <td><%= link_to Spree.t('vpago.payments.check_and_heal'), heal_payment_url, method: :put %></td>
+        </tr>
+      <% end %>
+
+      <tr>
+        <th><%= Spree.t('vpago.payments.updated_by_user') %></th>
+        <td><%= payment.source.updated_by_user&.full_name %></td>
+      </tr>
+      <tr>
+        <th><%= Spree.t('vpago.payments.updated_by_user_at') %></th>
+        <td><%= payment.source.updated_by_user_at %></td>
+      </tr>
+      <tr>
+        <th><%= Spree.t('vpago.payments.updated_reason') %></th>
+        <td><%= payment.source.updated_reason %></td>
+      </tr>
+
+
+      <tr>
+        <th><%= Spree.t('user') %></th>
+        <td><%= "#{payment.source.user&.id} - #{payment.source.user&.full_name} - #{payment.source.user&.email || payment.source.user&.phone_number}" %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('transaction_id') %></th>
+        <td><%= payment.source.transaction_id %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('payment_status') %></th>
+        <td><%= payment.source.payment_status %></td>
+      </tr>
+
+      <tr>
+        <th> Transaction Response</th>
+        <td><%= payment.transaction_response %></td>
+      </tr>
+
+      <tr>
+        <th>Pre Auth Status</th>
+        <td><%= payment.pre_auth_response %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('payment_description') %></th>
+        <td><%= payment.source.payment_description %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('created_at') %></th>
+        <td><%= payment.source.created_at %></td>
+      </tr>
+
+      <tr>
+        <th><%= Spree.t('updated_at') %></th>
+        <td><%= payment.source.updated_at %></td>
+      </tr>
+
+      <% if !payment.order.completed? && manual_update_payment_url.present? %>
+        <tr>
+          <th><%= Spree.t('vpago.payments.manually_mark') %></th>
+          <td>
+              <%= form_with url: manual_update_payment_url, method: :put do |f| %>
+                <div style='margin-top:10px;' >
+                  <%= f.text_area :updated_reason, class: 'form-control' %>
+                </div>
+
+                <div style='margin-top:10px;' >
+                  <%= f.button 'Save', class: 'btn btn-primary', data: { confirm: Spree.t('vpago.payments.confirm_manual_update')} %>
+                </div>
+              <% end %>
+          </td>
+        </tr>
+      <% end %>
+    </table>
+
+  </fieldset>
+<% else %>
+  <div class="alert alert-danger">
+    <%= Spree.t(:empty) %>
+  </div>
+<% end %>

data/app/views/spree/admin/payments/source_views/_wingsdk.html.erb

@@ -0,0 +1,5 @@
+<%= render 'spree/admin/payments/source_views/vpago_payment_tmpl',
+    payment: payment, 
+    check_status_url: admin_payment_wing_sdk_querier_path(payment),
+    heal_payment_url: admin_payment_wing_sdk_checker_path(payment),
+    manual_update_payment_url: admin_payment_wing_sdk_marker_path(payment) %>