@stamhoofd/backend 2.39.1 → 2.40.1

package/src/endpoints/organization/webshops/PlaceOrderEndpoint.ts

@@ -1,12 +1,12 @@
 import { createMollieClient, PaymentMethod as molliePaymentMethod } from '@mollie/api-client';
 import { Decoder } from '@simonbackx/simple-encoding';
-import { DecodedRequest, Endpoint, Request, Response } from "@simonbackx/simple-endpoints";
+import { DecodedRequest, Endpoint, Request, Response } from '@simonbackx/simple-endpoints';
 import { SimpleError } from '@simonbackx/simple-errors';
 import { I18n } from '@stamhoofd/backend-i18n';
 import { Email } from '@stamhoofd/email';
 import { BalanceItem, BalanceItemPayment, MolliePayment, MollieToken, Order, PayconiqPayment, Payment, RateLimiter, Webshop, WebshopDiscountCode } from '@stamhoofd/models';
 import { QueueHandler } from '@stamhoofd/queues';
-import { BalanceItemStatus, Order as OrderStruct, OrderData, OrderResponse, Payment as PaymentStruct, PaymentMethod, PaymentMethodHelper, PaymentProvider, PaymentStatus, Version, Webshop as WebshopStruct,WebshopAuthType, BalanceItemType, BalanceItemRelationType, BalanceItemRelation } from "@stamhoofd/structures";
+import { BalanceItemStatus, Order as OrderStruct, OrderData, OrderResponse, Payment as PaymentStruct, PaymentMethod, PaymentMethodHelper, PaymentProvider, PaymentStatus, Version, Webshop as WebshopStruct, WebshopAuthType, BalanceItemType, BalanceItemRelationType, BalanceItemRelation } from '@stamhoofd/structures';
 import { Formatter } from '@stamhoofd/utility';
 
 import { BuckarooHelper } from '../../../helpers/BuckarooHelper';
@@ -15,36 +15,36 @@ import { StripeHelper } from '../../../helpers/StripeHelper';
 
 type Params = { id: string };
 type Query = undefined;
-type Body = OrderData
-type ResponseBody = OrderResponse
+type Body = OrderData;
+type ResponseBody = OrderResponse;
 
 export const demoOrderLimiter = new RateLimiter({
     limits: [
-        {   
+        {
             // Max 10 per hour
             limit: STAMHOOFD.environment === 'development' ? 100 : 10,
-            duration: 60 * 1000 * 60
+            duration: 60 * 1000 * 60,
         },
-        {   
+        {
             // Max 20 a day
             limit: STAMHOOFD.environment === 'development' ? 1000 : 20,
-            duration: 24 * 60 * 1000 * 60
-        }
-    ]
+            duration: 24 * 60 * 1000 * 60,
+        },
+    ],
 });
 
 /**
  * Allow to add, patch and delete multiple members simultaneously, which is needed in order to sync relational data that is saved encrypted in multiple members (e.g. parents)
  */
 export class PlaceOrderEndpoint extends Endpoint<Params, Query, Body, ResponseBody> {
-    bodyDecoder = OrderData as Decoder<OrderData>
+    bodyDecoder = OrderData as Decoder<OrderData>;
 
     protected doesMatch(request: Request): [true, Params] | [false] {
-        if (request.method != "POST") {
+        if (request.method !== 'POST') {
             return [false];
         }
 
-        const params = Endpoint.parseParameters(request.url, "/webshop/@id/order", { id: String });
+        const params = Endpoint.parseParameters(request.url, '/webshop/@id/order', { id: String });
 
         if (params) {
             return [true, params as Params];
@@ -54,188 +54,192 @@ export class PlaceOrderEndpoint extends Endpoint<Params, Query, Body, ResponseBo
 
     async handle(request: DecodedRequest<Params, Query, Body>) {
         const organization = await Context.setOrganizationScope();
-        await Context.optionalAuthenticate()
+        await Context.optionalAuthenticate();
 
         // Read + validate + update stock in one go, to prevent race conditions
-        const { webshop, order } = await QueueHandler.schedule("webshop-stock/"+request.params.id, async () => {
-            const webshopWithoutOrganization = await Webshop.getByID(request.params.id)
+        const { webshop, order } = await QueueHandler.schedule('webshop-stock/' + request.params.id, async () => {
+            const webshopWithoutOrganization = await Webshop.getByID(request.params.id);
             if (!webshopWithoutOrganization || webshopWithoutOrganization.organizationId !== organization.id) {
                 throw new SimpleError({
-                    code: "not_found",
-                    message: "Webshop not found",
-                    human: "Deze webshop bestaat niet (meer)"
-                })
+                    code: 'not_found',
+                    message: 'Webshop not found',
+                    human: 'Deze webshop bestaat niet (meer)',
+                });
             }
 
-            //const organization = (await Organization.getByID(webshopWithoutOrganization.organizationId))!
-            const webshop = webshopWithoutOrganization.setRelation(Webshop.organization, organization)
+            // const organization = (await Organization.getByID(webshopWithoutOrganization.organizationId))!
+            const webshop = webshopWithoutOrganization.setRelation(Webshop.organization, organization);
 
             if (webshop.meta.authType === WebshopAuthType.Required && !Context.user) {
                 throw new SimpleError({
-                    code: "not_authenticated",
-                    message: "Not authenticated",
-                    human: "Je moet inloggen om een bestelling te kunnen plaatsen.",
-                    statusCode: 401
-                })
+                    code: 'not_authenticated',
+                    message: 'Not authenticated',
+                    human: 'Je moet inloggen om een bestelling te kunnen plaatsen.',
+                    statusCode: 401,
+                });
             }
 
             // For non paid organizations, the limit is 10
             if (!organization.meta.packages.isPaid && STAMHOOFD.environment !== 'test') {
-                const limiter = demoOrderLimiter
+                const limiter = demoOrderLimiter;
 
                 try {
                     limiter.track(organization.id, 1);
-                } catch (e) {
+                }
+                catch (e) {
                     Email.sendWebmaster({
-                        subject: "[Limiet] Limiet bereikt voor aantal bestellingen",
-                        text: "Beste, \nDe limiet werd bereikt voor het aantal bestellingen per dag. \nVereniging: "+organization.id+" ("+organization.name+")" + "\n\n" + e.message + "\n\nStamhoofd"
-                    })
-                    
+                        subject: '[Limiet] Limiet bereikt voor aantal bestellingen',
+                        text: 'Beste, \nDe limiet werd bereikt voor het aantal bestellingen per dag. \nVereniging: ' + organization.id + ' (' + organization.name + ')' + '\n\n' + e.message + '\n\nStamhoofd',
+                    });
+
                     throw new SimpleError({
-                        code: "too_many_emails_period",
-                        message: "Too many e-mails limited",
-                        human: "Oeps! Om spam te voorkomen limiteren we het aantal test bestellingen die je per uur of dag kan plaatsen. Probeer over een uur opnieuw of schakel over naar een betaald abonnement.",
-                        field: "recipients"
-                    })
+                        code: 'too_many_emails_period',
+                        message: 'Too many e-mails limited',
+                        human: 'Oeps! Om spam te voorkomen limiteren we het aantal test bestellingen die je per uur of dag kan plaatsen. Probeer over een uur opnieuw of schakel over naar een betaald abonnement.',
+                        field: 'recipients',
+                    });
                 }
             }
 
-            const webshopStruct = WebshopStruct.create(webshop)
+            const webshopStruct = WebshopStruct.create(webshop);
 
-            const usedCodes = request.body.discountCodes.map(c => c.code)
+            const usedCodes = request.body.discountCodes.map(c => c.code);
             const uniqueCodes = Formatter.uniqueArray(usedCodes);
             if (uniqueCodes.length !== usedCodes.length) {
                 // Duplicate code usage is not allowed
                 throw new SimpleError({
-                    code: "duplicate_codes",
-                    message: "Duplicate usage of discount codes",
-                    human: "Sommige kortingcodes werden dubbel toegepast op jouw bestelling. Kijk het even na, dit is niet toegestaan.",
-                    field: "cart.discountCodes"
-                })
+                    code: 'duplicate_codes',
+                    message: 'Duplicate usage of discount codes',
+                    human: 'Sommige kortingcodes werden dubbel toegepast op jouw bestelling. Kijk het even na, dit is niet toegestaan.',
+                    field: 'cart.discountCodes',
+                });
             }
             if (uniqueCodes.length > 0) {
                 // Fetch new and update them
-                const codeModels = await WebshopDiscountCode.getActiveCodes(webshop.id, uniqueCodes)
+                const codeModels = await WebshopDiscountCode.getActiveCodes(webshop.id, uniqueCodes);
 
                 if (codeModels.length !== uniqueCodes.length) {
                     throw new SimpleError({
-                        code: "invalid_code",
-                        message: "Invalid discount code",
-                        human: "De kortingscode die je hebt toegevoegd is niet (meer) geldig",
-                        field: "cart.discountCodes"
-                    })
+                        code: 'invalid_code',
+                        message: 'Invalid discount code',
+                        human: 'De kortingscode die je hebt toegevoegd is niet (meer) geldig',
+                        field: 'cart.discountCodes',
+                    });
                 }
-                request.body.discountCodes = codeModels.map(c => c.getStructure())
+                request.body.discountCodes = codeModels.map(c => c.getStructure());
             }
 
-            request.body.validate(webshopStruct, organization.meta, request.i18n, false, Context.user?.getStructure())
-            request.body.update(webshopStruct)
+            request.body.validate(webshopStruct, organization.meta, request.i18n, false, Context.user?.getStructure());
+            request.body.update(webshopStruct);
 
-            const order = new Order().setRelation(Order.webshop, webshop)
-            order.data = request.body // TODO: validate
-            order.organizationId = organization.id
-            order.createdAt = new Date()
-            order.createdAt.setMilliseconds(0)
-            order.userId = Context.user?.id ?? null
+            const order = new Order().setRelation(Order.webshop, webshop);
+            order.data = request.body; // TODO: validate
+            order.organizationId = organization.id;
+            order.createdAt = new Date();
+            order.createdAt.setMilliseconds(0);
+            order.userId = Context.user?.id ?? null;
 
             // Always reserve the stock
-            await order.updateStock()
-            return { webshop, order, organization }
-        })
+            await order.updateStock();
+            return { webshop, order, organization };
+        });
 
         // The order now is valid, the stock is reserved for now (until the payment fails or expires)
-        const totalPrice = request.body.totalPrice
+        const totalPrice = request.body.totalPrice;
 
         try {
             if (totalPrice == 0) {
                 // Force unknown payment method
-                order.data.paymentMethod = PaymentMethod.Unknown
+                order.data.paymentMethod = PaymentMethod.Unknown;
 
                 // Mark this order as paid
-                await order.markPaid(null, organization, webshop)
-                await order.save()
-            } else {
-                const payment = new Payment()
-                payment.organizationId = organization.id
-                payment.method = request.body.paymentMethod
-                payment.status = PaymentStatus.Created
-                payment.price = totalPrice
-                payment.paidAt = null
+                await order.markPaid(null, organization, webshop);
+                await order.save();
+            }
+            else {
+                const payment = new Payment();
+                payment.organizationId = organization.id;
+                payment.method = request.body.paymentMethod;
+                payment.status = PaymentStatus.Created;
+                payment.price = totalPrice;
+                payment.paidAt = null;
 
                 // Determine the payment provider
                 // Throws if invalid
-                const {provider, stripeAccount} = await organization.getPaymentProviderFor(payment.method, webshop.privateMeta.paymentConfiguration)
-                payment.provider = provider
-                payment.stripeAccountId = stripeAccount?.id ?? null
+                const { provider, stripeAccount } = await organization.getPaymentProviderFor(payment.method, webshop.privateMeta.paymentConfiguration);
+                payment.provider = provider;
+                payment.stripeAccountId = stripeAccount?.id ?? null;
 
-                await payment.save()
+                await payment.save();
 
                 // Deprecated field
-                order.paymentId = payment.id
-                order.setRelation(Order.payment, payment)
+                order.paymentId = payment.id;
+                order.setRelation(Order.payment, payment);
 
                 // Save order to get the id
-                await order.save()
+                await order.save();
 
-                const balanceItemPayments: (BalanceItemPayment & { balanceItem: BalanceItem })[] = []
+                const balanceItemPayments: (BalanceItemPayment & { balanceItem: BalanceItem })[] = [];
 
                 // Create balance item
                 const balanceItem = new BalanceItem();
                 balanceItem.type = BalanceItemType.Order;
                 balanceItem.orderId = order.id;
-                balanceItem.unitPrice = totalPrice
-                balanceItem.description = webshop.meta.name
-                balanceItem.pricePaid = 0
+                balanceItem.unitPrice = totalPrice;
+                balanceItem.description = webshop.meta.name;
+                balanceItem.pricePaid = 0;
                 balanceItem.organizationId = organization.id;
                 balanceItem.status = BalanceItemStatus.Hidden;
                 balanceItem.relations = new Map([
                     [
-                        BalanceItemRelationType.Webshop, 
+                        BalanceItemRelationType.Webshop,
                         BalanceItemRelation.create({
                             id: webshop.id,
                             name: webshop.meta.name,
-                        })
-                    ]
-                ])
+                        }),
+                    ],
+                ]);
                 await balanceItem.save();
 
                 // Create one balance item payment to pay it in one payment
-                const balanceItemPayment = new BalanceItemPayment()
+                const balanceItemPayment = new BalanceItemPayment();
                 balanceItemPayment.balanceItemId = balanceItem.id;
                 balanceItemPayment.paymentId = payment.id;
                 balanceItemPayment.organizationId = organization.id;
                 balanceItemPayment.price = balanceItem.price;
                 await balanceItemPayment.save();
-                balanceItemPayments.push(balanceItemPayment.setRelation(BalanceItemPayment.balanceItem, balanceItem))
+                balanceItemPayments.push(balanceItemPayment.setRelation(BalanceItemPayment.balanceItem, balanceItem));
 
-                let paymentUrl: string | null = null
-                const description = webshop.meta.name+" - "+payment.id
+                let paymentUrl: string | null = null;
+                const description = webshop.meta.name + ' - ' + payment.id;
 
                 if (payment.method == PaymentMethod.Transfer) {
-                    await order.markValid(payment, [])
+                    await order.markValid(payment, []);
 
                     if (order.number) {
-                        balanceItem.description = order.generateBalanceDescription(webshop)
+                        balanceItem.description = order.generateBalanceDescription(webshop);
                     }
 
                     balanceItem.status = BalanceItemStatus.Pending;
-                    await balanceItem.save()
-                    await payment.save()
-                } else if (payment.method == PaymentMethod.PointOfSale) {
+                    await balanceItem.save();
+                    await payment.save();
+                }
+                else if (payment.method == PaymentMethod.PointOfSale) {
                     // Not really paid, but needed to create the tickets if needed
-                    await order.markPaid(payment, organization, webshop)
+                    await order.markPaid(payment, organization, webshop);
 
                     if (order.number) {
-                        balanceItem.description = order.generateBalanceDescription(webshop)
+                        balanceItem.description = order.generateBalanceDescription(webshop);
                     }
-                    
+
                     balanceItem.status = BalanceItemStatus.Pending;
-                    await balanceItem.save()
-                    await payment.save()
-                } else {
-                    const cancelUrl = "https://"+webshop.getHost()+'/payment?id='+encodeURIComponent(payment.id)+"&cancel=true"
-                    const redirectUrl = "https://"+webshop.getHost()+'/payment?id='+encodeURIComponent(payment.id)
-                    const exchangeUrl = 'https://'+organization.getApiHost()+"/v"+Version+"/payments/"+encodeURIComponent(payment.id)+"?exchange=true"
+                    await balanceItem.save();
+                    await payment.save();
+                }
+                else {
+                    const cancelUrl = 'https://' + webshop.getHost() + '/payment?id=' + encodeURIComponent(payment.id) + '&cancel=true';
+                    const redirectUrl = 'https://' + webshop.getHost() + '/payment?id=' + encodeURIComponent(payment.id);
+                    const exchangeUrl = 'https://' + organization.getApiHost() + '/v' + Version + '/payments/' + encodeURIComponent(payment.id) + '?exchange=true';
 
                     if (payment.provider === PaymentProvider.Stripe) {
                         const stripeResult = await StripeHelper.createPayment({
@@ -256,33 +260,34 @@ export class PlaceOrderEndpoint extends Endpoint<Params, Query, Body, ResponseBo
                             customer: {
                                 name: order.data.customer.name,
                                 email: order.data.customer.email,
-                            }
+                            },
                         });
-                        paymentUrl = stripeResult.paymentUrl
-                    } else if (payment.provider === PaymentProvider.Mollie) {
+                        paymentUrl = stripeResult.paymentUrl;
+                    }
+                    else if (payment.provider === PaymentProvider.Mollie) {
                         // Mollie payment
-                        const token = await MollieToken.getTokenFor(webshop.organizationId)
+                        const token = await MollieToken.getTokenFor(webshop.organizationId);
                         if (!token) {
-                            throw new SimpleError({ 
-                                code: "",
-                                message: "Betaling via " + PaymentMethodHelper.getName(payment.method) + " is onbeschikbaar"
-                            })
+                            throw new SimpleError({
+                                code: '',
+                                message: 'Betaling via ' + PaymentMethodHelper.getName(payment.method) + ' is onbeschikbaar',
+                            });
                         }
-                        const profileId = organization.privateMeta.mollieProfile?.id ?? await token.getProfileId(webshop.getHost())
+                        const profileId = organization.privateMeta.mollieProfile?.id ?? await token.getProfileId(webshop.getHost());
                         if (!profileId) {
                             throw new SimpleError({
-                                code: "",
-                                message: "Betaling via " + PaymentMethodHelper.getName(payment.method) + " is tijdelijk onbeschikbaar"
-                            })
+                                code: '',
+                                message: 'Betaling via ' + PaymentMethodHelper.getName(payment.method) + ' is tijdelijk onbeschikbaar',
+                            });
                         }
                         const mollieClient = createMollieClient({ accessToken: await token.getAccessToken() });
                         const molliePayment = await mollieClient.payments.create({
                             amount: {
                                 currency: 'EUR',
-                                value: (totalPrice / 100).toFixed(2)
+                                value: (totalPrice / 100).toFixed(2),
                             },
                             method: payment.method == PaymentMethod.Bancontact ? molliePaymentMethod.bancontact : (payment.method == PaymentMethod.iDEAL ? molliePaymentMethod.ideal : molliePaymentMethod.creditcard),
-                            testmode: organization.privateMeta.useTestPayments ?? STAMHOOFD.environment != 'production',
+                            testmode: organization.privateMeta.useTestPayments ?? STAMHOOFD.environment !== 'production',
                             profileId,
                             description,
                             redirectUrl,
@@ -291,54 +296,58 @@ export class PlaceOrderEndpoint extends Endpoint<Params, Query, Body, ResponseBo
                                 order: order.id,
                                 organization: organization.id,
                                 webshop: webshop.id,
-                                payment: payment.id
+                                payment: payment.id,
                             },
                         });
-                        console.log(molliePayment)
-                        paymentUrl = molliePayment.getCheckoutUrl()
+                        console.log(molliePayment);
+                        paymentUrl = molliePayment.getCheckoutUrl();
 
                         // Save payment
-                        const dbPayment = new MolliePayment()
-                        dbPayment.paymentId = payment.id
-                        dbPayment.mollieId = molliePayment.id
+                        const dbPayment = new MolliePayment();
+                        dbPayment.paymentId = payment.id;
+                        dbPayment.mollieId = molliePayment.id;
                         await dbPayment.save();
-                    } else if (payment.provider == PaymentProvider.Payconiq) {
-                        paymentUrl = await PayconiqPayment.createPayment(payment, organization, description, redirectUrl, exchangeUrl)
-                    } else if (payment.provider == PaymentProvider.Buckaroo) {
+                    }
+                    else if (payment.provider == PaymentProvider.Payconiq) {
+                        paymentUrl = await PayconiqPayment.createPayment(payment, organization, description, redirectUrl, exchangeUrl);
+                    }
+                    else if (payment.provider == PaymentProvider.Buckaroo) {
                         // Increase request timeout because buckaroo is super slow
-                        request.request.request?.setTimeout(60 * 1000)
-                        const buckaroo = new BuckarooHelper(organization.privateMeta?.buckarooSettings?.key ?? "", organization.privateMeta?.buckarooSettings?.secret ?? "", organization.privateMeta.useTestPayments ?? STAMHOOFD.environment != 'production')
-                        const ip = request.request.getIP()
-                        paymentUrl = await buckaroo.createPayment(payment, ip, description, redirectUrl, exchangeUrl)
-                        await payment.save()
+                        request.request.request?.setTimeout(60 * 1000);
+                        const buckaroo = new BuckarooHelper(organization.privateMeta?.buckarooSettings?.key ?? '', organization.privateMeta?.buckarooSettings?.secret ?? '', organization.privateMeta.useTestPayments ?? STAMHOOFD.environment !== 'production');
+                        const ip = request.request.getIP();
+                        paymentUrl = await buckaroo.createPayment(payment, ip, description, redirectUrl, exchangeUrl);
+                        await payment.save();
 
                         // TypeScript doesn't understand that the status can change and isn't a const....
                         if ((payment.status as any) === PaymentStatus.Failed) {
                             throw new SimpleError({
-                                code: "payment_failed",
-                                message: "Betaling via " + PaymentMethodHelper.getName(payment.method) + " is onbeschikbaar"
-                            })
+                                code: 'payment_failed',
+                                message: 'Betaling via ' + PaymentMethodHelper.getName(payment.method) + ' is onbeschikbaar',
+                            });
                         }
-                    } else {
-                        throw new Error("Unknown payment provider")
+                    }
+                    else {
+                        throw new Error('Unknown payment provider');
                     }
                 }
 
                 return new Response(OrderResponse.create({
                     paymentUrl: paymentUrl,
-                    order: OrderStruct.create({...order, payment: PaymentStruct.create(payment) })
+                    order: OrderStruct.create({ ...order, payment: PaymentStruct.create(payment) }),
                 }));
             }
-        } catch (e) {
+        }
+        catch (e) {
             // Mark order as failed to release stock
             if (order) {
-                await order.deleteOrderBecauseOfCreationError()
+                await order.deleteOrderBecauseOfCreationError();
             }
             throw e;
         }
-        
+
         return new Response(OrderResponse.create({
-            order: order.getStructureWithoutPayment()
+            order: order.getStructureWithoutPayment(),
         }));
     }
 }