node-paytmpg 3.0.4 → 4.1.0

package/.github/workflows/codeql-analysis.yml

@@ -0,0 +1,71 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ master ]
+  schedule:
+    - cron: '16 23 * * 4'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
+        # Learn more:
+        # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+        # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

package/.github/workflows/npm-publish.yml

@@ -0,0 +1,23 @@
+# This workflow will run tests using node and then publish a package to GitHub Packages when a release is created
+# For more information see: https://help.github.com/actions/language-and-framework-guides/publishing-nodejs-packages
+
+name: Node.js Package
+
+on:
+  release:
+    types: [created]
+  push:
+    branches: [ master ]
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+      - uses: actions/setup-node@v1
+        with:
+          node-version: 10
+      - run: npm install
+      - run: npm test
+      - uses: JS-DevTools/npm-publish@v1
+        with:
+          token: ${{ secrets.NPM_TOKEN }}

package/README.MD

@@ -1,9 +1,13 @@
 ## Node JS Payments Easy Integration
+
+[![NPM Publish](https://github.com/shiveshnavin/node_paytm/actions/workflows/nodejs.yml/badge.svg)](https://github.com/shiveshnavin/node_paytm/actions/workflows/npm-publish.yml)
+[![Node.js CI](https://github.com/shiveshnavin/node_paytm/actions/workflows/nodejs.yml/badge.svg)](https://github.com/shiveshnavin/node_paytm/actions/workflows/nodejs.yml)
+
 Support for : 
  - Paytm
  - RazorPay
  
-Does all the hardwork for you while integrating paytm with nodejs server. 
+Does all the hardwork for you while integrating payments in any express app. Comes with inbuilt UI and REST APIs for lightning fast development and prototyping .
 
 ## Example 
 
@@ -198,6 +202,25 @@ var User=PayTMPG.User;
 
 ```
 
+### Webhooks
+
+Webhooks can issued at at `/_pay/api/webhook` and are useful for payments captured late.
+
+If you are using `bodyparser` , make sure to remove these from your express app since the body parsers will be already added with the library .
+```
+    Comment these if present in your app
+    app.use(bodyParser.json());
+    app.use(bodyParser.urlencoded({ extended: true }));
+```
+
+#### For razorpay webhook
+Make sure to use the same secret in your webhook as the merchant secret.
+https://razorpay.com/docs/webhooks/
+
+#### For paytm
+Nothing extra needed
+https://developer.paytm.com/docs/callback-and-webhook/?ref=callbackWebhook
+
 
 
 License : GPL

package/app/controllers/checksum/PaytmChecksum.js

@@ -0,0 +1,94 @@
+"use strict";
+
+var crypto = require('crypto');
+
+class PaytmChecksum {
+
+	static encrypt(input, key) {
+		var cipher = crypto.createCipheriv('AES-128-CBC', key, PaytmChecksum.iv);
+		var encrypted = cipher.update(input, 'binary', 'base64');
+		encrypted += cipher.final('base64');
+		return encrypted;
+	}
+	static decrypt(encrypted, key) {
+		var decipher = crypto.createDecipheriv('AES-128-CBC', key, PaytmChecksum.iv);
+		var decrypted = decipher.update(encrypted, 'base64', 'binary');
+		try {
+			decrypted += decipher.final('binary');
+		}
+		catch (e) {
+			console.log(e);
+		}
+		return decrypted;
+	}
+	static generateSignature(params, key) {
+		if (typeof params !== "object" && typeof params !== "string") {
+			var error = "string or object expected, " + (typeof params) + " given.";
+			return Promise.reject(error);
+		}
+		if (typeof params !== "string"){
+			params = PaytmChecksum.getStringByParams(params);
+		}
+		return PaytmChecksum.generateSignatureByString(params, key);
+	}
+	
+
+	static verifySignature(params, key, checksum) {
+		if (typeof params !== "object" && typeof params !== "string") {
+		   	var error = "string or object expected, " + (typeof params) + " given.";
+			return Promise.reject(error);
+		}
+		if(params.hasOwnProperty("CHECKSUMHASH")){
+			delete params.CHECKSUMHASH
+		}
+		if (typeof params !== "string"){
+			params = PaytmChecksum.getStringByParams(params);
+		}
+		return PaytmChecksum.verifySignatureByString(params, key, checksum);
+	}
+
+	static async generateSignatureByString(params, key) {
+		var salt = await PaytmChecksum.generateRandomString(4);
+		return PaytmChecksum.calculateChecksum(params, key, salt);
+	}
+
+	static verifySignatureByString(params, key, checksum) {		
+		var paytm_hash = PaytmChecksum.decrypt(checksum, key);
+		var salt = paytm_hash.substr(paytm_hash.length - 4);
+		return (paytm_hash === PaytmChecksum.calculateHash(params, salt));
+	}
+
+	static generateRandomString(length) {
+		return new Promise(function (resolve, reject) {
+			crypto.randomBytes((length * 3.0) / 4.0, function (err, buf) {
+				if (!err) {
+					var salt = buf.toString("base64");
+					resolve(salt);					
+				}
+				else {
+					console.log("error occurred in generateRandomString: " + err);
+					reject(err);
+				}
+			});
+		});
+	}
+
+	static getStringByParams(params) {
+		var data = {};
+		Object.keys(params).sort().forEach(function(key,value) {
+			data[key] = (params[key] !== null && params[key].toLowerCase() !== "null") ? params[key] : "";
+		});
+		return Object.values(data).join('|');
+	}
+
+	static calculateHash(params, salt) {		
+		var finalString = params + "|" + salt;
+		return crypto.createHash('sha256').update(finalString).digest('hex') + salt;
+	}
+	static calculateChecksum(params, key, salt) {		
+		var hashString = PaytmChecksum.calculateHash(params, salt);
+		return PaytmChecksum.encrypt(hashString,key);
+	}
+}
+PaytmChecksum.iv = '@@@@&&&&####$$$$';
+module.exports = PaytmChecksum;

package/app/controllers/np_user.controller.js

@@ -15,14 +15,17 @@ module.exports = function (app, callbacks) {
   var module = {};
   var config = (app.get('np_config'))
 
+  let usingMultiDbOrm = false;
   if (config.db_url) {
     User = require('../models/np_user.model.js');
+    usingMultiDbOrm = false;
   } else if (app.multidborm) {
     User = require('../models/np_multidbplugin.js')('npusers',app.multidborm);
     User.db=app.multidborm;
     User.modelname='npusers'
     User.idFieldName='id'
     app.NPUser = User;
+    usingMultiDbOrm = true;
   }
   module.create = (userData, cb) => {
 
@@ -55,7 +58,7 @@ module.exports = function (app, callbacks) {
 
         //  console.log("User New : ",userData.name);
 
-        userData.id = makeid(IDLEN);
+        userData.id = "user_"+makeid(IDLEN);
         var userTask = new User(userData);
         userTask.save()
           .then(user => {
@@ -69,7 +72,7 @@ module.exports = function (app, callbacks) {
 
       }
 
-    },User);
+    },usingMultiDbOrm ? User : undefined);
 
   };
   return module;

package/app/controllers/payment_controller.js

@@ -5,6 +5,9 @@ var Transaction;
 var IDLEN = 10;
 var nodeBase64 = require('nodejs-base64-converter');
 var RazorPay = require('razorpay');
+const PaytmChecksum = require('./checksum/PaytmChecksum.js');
+const { stat } = require('fs');
+
 
 function sanitizeRequest(body) {
 
@@ -21,14 +24,19 @@ module.exports = function (app, callbacks) {
     if (config.razor_url)
         var razorPayInstance = new RazorPay({ key_id: config.KEY, key_secret: config.SECRET })
 
+    let usingMultiDbOrm = false;
     if (config.db_url) {
         Transaction = require('../models/np_transaction.model.js');
+        usingMultiDbOrm = false;
+
     } else if (app.multidborm) {
         Transaction = require('../models/np_multidbplugin.js')('nptransactions', app.multidborm);
         Transaction.db = app.multidborm;
         Transaction.modelname = 'nptransactions'
         Transaction.idFieldName = 'orderId'
         app.NPTransaction = Transaction;
+        usingMultiDbOrm = true;
+
     }
 
     var module = {};
@@ -101,7 +109,7 @@ module.exports = function (app, callbacks) {
             params['ORDER_ID'] = req.body.ORDER_ID;
             params['CUST_ID'] = req.body.CUST_ID;
             params['TXN_AMOUNT'] = req.body.TXN_AMOUNT;
-            params['CALLBACK_URL'] = req.body.CALLBACK_URL;
+            params['CALLBACK_URL'] = req.body.CALLBACK_URL + "?order_id=" + req.body.ORDER_ID;
             params['EMAIL'] = req.body.EMAIL;
             params['MOBILE_NO'] = req.body.MOBILE_NO;
             params['PRODUCT_NAME'] = req.body.PRODUCT_NAME;
@@ -109,24 +117,244 @@ module.exports = function (app, callbacks) {
 
             if (config.paytm_url) {
 
+                let initTxnbody = {
+                    "requestType": "Payment",
+                    "mid": params['MID'],
+                    "websiteName": params['WEBSITE'],
+                    "orderId": params['ORDER_ID'],
+                    "callbackUrl": params['CALLBACK_URL'],
+                    "txnAmount": {
+                        "value": params['TXN_AMOUNT'],
+                        "currency": params['CURRENCY'] || "INR",
+                    },
+                    "userInfo": {
+                        "custId": params['CUST_ID'],
+                        "mobile": params['MOBILE_NO'],
+                        "firstName": params['NAME'],
+                        "email": params['EMAIL']
+                    }
+                };
+                let checksum = await PaytmChecksum.generateSignature(JSON.stringify(initTxnbody), config.KEY)
+                let initTxnUrl = config.paytm_url + `/theia/api/v1/initiateTransaction?mid=${params['MID']}&orderId=${params['ORDER_ID']}`;
+
+                request.post(
+                    initTxnUrl,
+                    {
+                        json: {
+                            "body": initTxnbody,
+                            "head": {
+                                "signature": checksum,
+                                "channelId": params['CHANNEL_ID']
+                            }
+                        }
+                    },
+                    function (error, response, body) {
 
-                checksum_lib.genchecksum(params, config.KEY, function (err, checksum) {
+                        if (!error && response.statusCode != undefined
+                            && response.statusCode != NaN &&
+                            response.statusCode == 200 &&
+                            body.body &&
+                            body.body.resultInfo &&
+                            body.body.resultInfo.resultStatus == "S") {
 
 
-                    var txn_url = config.paytm_url + "/theia/processTransaction"; // for staging
+                            let paytmJsCheckouHtml = `<html>
+                <head>
+                <title>Merchant Checkout</title>
+                <meta name="viewport" content="width=device-width, height=device-height, initial-scale=1.0, maximum-scale=1.0"/>
+                
+                </head>
+                <body>
+                <center>
+                <h1>Please donot close this page or press the back button. Processing...</h1>
+                <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="margin:auto;background:#fff;display:block;" width="200px" height="200px" viewBox="0 0 100 100" preserveAspectRatio="xMidYMid">
+                    <g transform="rotate(0 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.9166666666666666s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(30 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.8333333333333334s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(60 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.75s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(90 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.6666666666666666s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(120 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.5833333333333334s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(150 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.5s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(180 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.4166666666666667s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(210 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.3333333333333333s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(240 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.25s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(270 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.16666666666666666s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(300 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="-0.08333333333333333s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g><g transform="rotate(330 50 50)">
+                    <rect x="47" y="24" rx="3" ry="6" width="6" height="12" fill="#fe718d">
+                        <animate attributeName="opacity" values="1;0" keyTimes="0;1" dur="1s" begin="0s" repeatCount="indefinite"></animate>
+                    </rect>
+                    </g>
+                    </svg>
+                </center>
+                <form id="cancelform" action="${params['CALLBACK_URL']}" method="post">
+                    <input type="hidden" name="TXNID" value="na"/>
+                    <input type="hidden" name="STATUS" value="TXN_FAILURE"/>
+                    <input type="hidden" name="CANCELLED" value="cancelled"/>
+                    <input id="RESPMSG" type="hidden" name="RESPMSG" value=""/>
+                    <input type="hidden" name="ORDERID" value="${params["ORDER_ID"]}"/>
+                </form>
+                
 
-                    // console.log(checksum)
-                    var form_fields = "";
-                    for (var x in params) {
-                        form_fields += "<input type='hidden' name='" + x + "' value='" + params[x] + "' >";
-                    }
-                    form_fields += "<input type='hidden' name='CHECKSUMHASH' value='" + checksum + "' >";
+                <script>
 
-                    res.writeHead(200, { 'Content-Type': 'text/html' });
-                    res.write('<html><head><title>Merchant Checkout Page</title></head><body><center><h1>Processing ! Please do not refresh this page...</h1></center><form method="post" action="' + txn_url + '" name="f1">' + form_fields + '</form><script type="text/javascript">document.f1.submit();</script></body></html>');
-                    res.end();
+                function getBodyColor(color){
+                        const hex = color.replace('#', '');
+                        const c_r = parseInt(hex.substr(0, 2), 16);
+                        const c_g = parseInt(hex.substr(2, 2), 16);
+                        const c_b = parseInt(hex.substr(4, 2), 16);
+                        const brightness = ((c_r * 299) + (c_g * 587) + (c_b * 114)) / 1000;
+                     //   console.log(brightness , brightness > 155 ? "#fff" : "#1a1a1c")
+                        return brightness > 155 ? "#1a1a1c" : "#ffffff";
+                }
+
+                function shadeColor(color, percent) {
+
+                    var R = parseInt(color.substring(1,3),16);
+                    var G = parseInt(color.substring(3,5),16);
+                    var B = parseInt(color.substring(5,7),16);
+                
+                    R = parseInt(R * (100 + percent) / 100);
+                    G = parseInt(G * (100 + percent) / 100);
+                    B = parseInt(B * (100 + percent) / 100);
+                
+                    R = (R<255)?R:255;  
+                    G = (G<255)?G:255;  
+                    B = (B<255)?B:255;  
+                
+                    var RR = ((R.toString(16).length==1)?"0"+R.toString(16):R.toString(16));
+                    var GG = ((G.toString(16).length==1)?"0"+G.toString(16):G.toString(16));
+                    var BB = ((B.toString(16).length==1)?"0"+B.toString(16):B.toString(16));
+                
+                    return "#"+RR+GG+BB;
+                }
+
+                function failTxn(reason) {
+                    var form = document.getElementById("cancelform");
+                    var element2 = document.getElementById("RESPMSG");  
+                    element2.value=reason;
+                    form.submit();
+                }
+                  function onScriptLoad(){
+                      var config = {
+                        "root": "",
+                        "flow": "DEFAULT",
+                        "style": {
+                         //    "bodyColor": shadeColor("${config.theme_color}",+40),
+                             "themeBackgroundColor": "${config.theme_color}",
+                             "themeColor": getBodyColor("${config.theme_color}"),
+                             "headerBackgroundColor": "${config.theme_color}",
+                             "headerColor": getBodyColor("${config.theme_color}")
+                        },
+                        "data": {
+                        "orderId": "${params['ORDER_ID']}", /* update order id */
+                        "token": "${body.body.txnToken}", /* update token value */
+                        "tokenType": "TXN_TOKEN",
+                        "amount": "${params['TXN_AMOUNT']}" /* update amount */
+                        },
+                        "handler": {
+                          "notifyMerchant": function(eventName,data){
+                           // console.log("notifyMerchant handler function called");
+                          //  console.log("eventName => ",eventName);
+                         //   console.log("data => ",data);
+                            if(eventName == "APP_CLOSED"){
+                                failTxn(eventName)
+                            }
+                          } 
+                        }
+                      };
+                
+                      if(window.Paytm && window.Paytm.CheckoutJS){
+                          window.Paytm.CheckoutJS.onLoad(function excecuteAfterCompleteLoad() {
+                              // initialze configuration using init method 
+                              window.Paytm.CheckoutJS.init(config).then(function onSuccess() {
+                                  // after successfully updating configuration, invoke JS Checkout
+                                  window.Paytm.CheckoutJS.invoke();
+                              }).catch(function onError(error){
+                              //    console.log("error => ",error);
+                                  failTxn(error.message)
+                              });
+                          });
+                      } 
+                  }
+                </script>
+                <script type="application/javascript" crossorigin="anonymous" src="${config.paytm_url}/merchantpgpui/checkoutjs/merchants/${params['MID']}.js" onload="onScriptLoad();" crossorigin="anonymous"></script>
+
+
+                </body>
+                </html>`
+                            return res.send(paytmJsCheckouHtml)
+
+                        }
+                        else {
+                            console.log('ERROR:::', error, '\n', body);
+                            res.status(500)
+                            var form_fields = "";
+                            let errorResp = {
+                                TXNID: "na",
+                                STATUS: "TXN_FAILURE",
+                                CANCELLED: "cancelled",
+                                ORDERID: params["ORDER_ID"]
+                            }
+                            for (var x in errorResp) {
+                                form_fields += "<input type='hidden' name='" + x + "' value='" + errorResp[x] + "' >";
+                            }
+                            form_fields += "<input type='hidden' name='CHECKSUMHASH' value='" + checksum + "' >";
+
+                            res.writeHead(200, { 'Content-Type': 'text/html' });
+                            res.write(`<html>
+
+                                        <head>
+                                            <title>Merchant Checkout Error</title>
+                                        </head>
+                                        
+                                        <body>
+                                            <center>
+                                                <h1>Something went wrong. Please wait you will be redirected automatically...</h1>
+                                            </center>
+                                            <form method="post" action="${params['CALLBACK_URL']}" name="f1">${form_fields}</form>
+                                            <script type="text/javascript">document.f1.submit();</script>
+                                        </body>
+                            
+                            </html>`);
+                            res.end();
+
+                        }
+                    }
+                );
 
-                });
             }
             else if (config.razor_url) {
 
@@ -246,7 +474,7 @@ module.exports = function (app, callbacks) {
 
                             onTxn(objForUpdate);
 
-                        }, Transaction);
+                        }, usingMultiDbOrm ? Transaction : undefined);
 
 
 
@@ -261,6 +489,7 @@ module.exports = function (app, callbacks) {
                                 orderId: orderId,
                                 cusId: user.id,
                                 time: Date.now(),
+                                timeStamp: Date.now(),
                                 status: 'INITIATED',
                                 name: user.name,
                                 email: user.email,
@@ -282,7 +511,7 @@ module.exports = function (app, callbacks) {
 
                         let orderId;
                         if (config.paytm_url) {
-                            orderId = makeid(config.id_length || IDLEN)
+                            orderId = "pay_" + makeid(config.id_length || IDLEN)
                             onOrder(orderId)
                         }
                         else if (config.razor_url) {
@@ -296,7 +525,7 @@ module.exports = function (app, callbacks) {
 
                             razorPayInstance.orders.create(options, function (err, order) {
                                 if (err) {
-                                    res.send({ message: "An error occurred ! " + err.message })
+                                    res.send({ message: "An error occurred ! " + err.description })
                                     return;
                                 }
                                 orderId = order.id
@@ -346,6 +575,44 @@ module.exports = function (app, callbacks) {
 
     }
 
+    function updateTransaction(req, res) {
+        var myquery = { orderId: req.body.ORDERID };
+
+        Transaction.findOne(myquery, function (err, objForUpdate) {
+
+            if (err) {
+                res.send({ message: "Transaction Not Found !", ORDERID: req.body.ORDERID, TXNID: req.body.TXNID })
+                return;
+            }
+            if (objForUpdate.status != ("INITIATED") && objForUpdate.status != ("TXN_PENDING")) {
+                res.send({ message: "Transaction already processed", status: objForUpdate.status, ORDERID: objForUpdate.orderId, TXNID: objForUpdate.TXNID, TXNID: req.body.TXNID })
+                return;
+            }
+            if (req.body.status == "paid" && !req.body.STATUS) {
+                req.body.STATUS = "TXN_SUCCESS"
+            }
+            objForUpdate.status = req.body.STATUS;
+            objForUpdate.TXNID = req.body.TXNID;
+            objForUpdate.extra = JSON.stringify(req.body);
+
+            var newvalues = { $set: objForUpdate };
+            Transaction.updateOne(myquery, newvalues, function (err, saveRes) {
+
+                if (err) {
+                    res.send({ message: "Error Occured !", ORDERID: req.body.ORDERID, TXNID: req.body.TXNID })
+                }
+                else {
+
+                    if (callbacks !== undefined)
+                        callbacks.onFinish(req.body.ORDERID, req.body);
+                    objForUpdate.readonly = "readonly"
+                    objForUpdate.action = config.homepage
+                    res.render(vp + "result.hbs", objForUpdate);
+                }
+            });
+
+        }, usingMultiDbOrm ? Transaction : undefined)
+    }
 
     module.callback = (req, res) => {
 
@@ -354,6 +621,10 @@ module.exports = function (app, callbacks) {
         if (config.paytm_url) {
             var checksumhash = req.body.CHECKSUMHASH;
             result = checksum_lib.verifychecksum(req.body, config.KEY, checksumhash);
+            if (req.body.STATUS == 'TXN_FAILURE' && req.body.CANCELLED == "cancelled" && req.body.TXNID) {
+                isCancelled = true;
+            }
+
         }
         else if (config.razor_url) {
 
@@ -374,7 +645,7 @@ module.exports = function (app, callbacks) {
                     req.body.razorpay_order_id = orderId
                 }
                 req.body.STATUS = 'TXN_FAILURE'
-                req.body.ORDERID = req.body.razorpay_order_id
+                req.body.ORDERID = req.body.razorpay_order_id || req.query.order_id
                 isCancelled = true;
             }
         }
@@ -385,34 +656,7 @@ module.exports = function (app, callbacks) {
 
         if (result || isCancelled) {
 
-            var myquery = { orderId: req.body.ORDERID };
-            Transaction.findOne(myquery, function (err, objForUpdate) {
-
-                if (err) {
-                    res.send({ message: "Transaction Not Found !", ORDERID: req.body.ORDERID, TXNID: req.body.TXNID })
-                    return;
-                }
-                objForUpdate.status = req.body.STATUS;
-                objForUpdate.TXNID = req.body.TXNID;
-                objForUpdate.extra = JSON.stringify(req.body);
-
-                var newvalues = { $set: objForUpdate };
-                Transaction.updateOne(myquery, newvalues, function (err, saveRes) {
-
-                    if (err) {
-                        res.send({ message: "Error Occured !", ORDERID: req.body.ORDERID, TXNID: req.body.TXNID })
-                    }
-                    else {
-
-                        if (callbacks !== undefined)
-                            callbacks.onFinish(req.body.ORDERID, req.body);
-                        objForUpdate.readonly = "readonly"
-                        objForUpdate.action = config.homepage
-                        res.render(vp + "result.hbs", objForUpdate);
-                    }
-                });
-
-            }, Transaction)
+            updateTransaction(req, res);
 
         }
         else {
@@ -423,6 +667,61 @@ module.exports = function (app, callbacks) {
 
     }
 
+    module.webhook = (req, res) => {
+        if (config.paytm_url) {
+            module.callback(req, res)
+        }
+        else if (config.razor_url) {
+            let events = ["payment.captured", "payment.pending", "payment.failed"]
+            if (req.body.event && events.indexOf(req.body.event) > -1) {
+                if (req.body.payload &&
+                    req.body.payload.payment &&
+                    req.body.payload.payment.entity) {
+
+                    let entity = req.body.payload.payment.entity;
+                    let razorpay_order_id = entity.order_id;
+                    let razorpay_payment_id = entity.id;
+                    let status = entity.status;
+                    let event = req.body.event;
+                    console.log(`Razorpay webhook payment order=${razorpay_order_id} payid=${razorpay_payment_id} status=${status}`)
+
+                    let reqBody = req.rawBody, signature = req.headers["x-razorpay-signature"];
+
+                    result = RazorPay.validateWebhookSignature(reqBody, req.headers['x-razorpay-signature'], config.SECRET)
+                    req.signatureVerified = result;
+                    if (true) {
+                        if (event == events[0]) {
+                            req.body.STATUS = "TXN_SUCCESS";
+                        }
+                        else if (event == events[1]) { //pending
+                            req.body.STATUS = "TXN_PENDING";
+                        }
+                        else { // failed
+                            req.body.STATUS = "TXN_FAILURE";
+                        }
+                        req.body.ORDERID = razorpay_order_id;
+                        req.body.TXNID = razorpay_payment_id;
+                        setTimeout(() => {
+                            updateTransaction(req, res)
+                        }, 3000)
+                    }
+                    else {
+                        res.status(401)
+                        res.send({ message: "Invalid Rzpay signature" })
+                    }
+                }
+                else {
+                    res.status(400)
+                    res.send({ message: "Invalid Payload" })
+                }
+            }
+            else {
+                res.status(400)
+                res.send({ message: "Unsupported event : " + req.body.event })
+            }
+        }
+    }
+
     module.createTxn = (req, res) => {
 
 
@@ -432,7 +731,7 @@ module.exports = function (app, callbacks) {
 
                 let id;
                 if (config.paytm_url) {
-                    id = makeid(config.id_length || IDLEN)
+                    id = "pay_" + makeid(config.id_length || IDLEN)
                 }
                 else if (config.razor_url) {
 
@@ -575,7 +874,7 @@ module.exports = function (app, callbacks) {
             }
 
 
-        }, Transaction);
+        }, usingMultiDbOrm ? Transaction : undefined);
 
 
     }

package/app/routes/payment_route.js

@@ -49,19 +49,21 @@ module.exports = (app, express, callbacks) => {
 
     app.set('view engine', 'handlebars');
 
+    let saveRawBody = function (req, res, buf, encoding) {      
+        req.rawBody = buf.toString();
+    }
     app.use(bodyParser.urlencoded({ extended: true }))
-    app.use(bodyParser.json())
+    app.use(bodyParser.json({ verify: saveRawBody }))
+
     app.use("/" + config.path_prefix, express.static(path.join(__dirname, '../../public')));
     app.use('/' + config.path_prefix, router);
 
-    router.all('/', function (req, res) {
-        res.send({ message: packageInfo.description, developer: packageInfo.author, version: packageInfo.version })
-
-    });
+    router.all('/', pc.init);
+    router.all('/init', pc.init);
 
-    router.all('/home', pc.home)
-    router.all('/init', pc.init)
+    // router.all('/home', pc.home)
     router.all('/callback', pc.callback)
+    router.all('/api/webhook', pc.webhook)
     router.all('/api/status', pc.status)
     router.all('/api/createTxn', pc.createTxn)
 

package/app/views/home.hbs

@@ -7,9 +7,6 @@
               <tr>  
                   <td>Name</td><td>{{name}}</td> 
               </tr>
-              <tr>  
-                  <td>Author</td><td><a href='https://www.linkedin.com/in/shiveshnavin/'>Shivesh Navin</a></td> 
-              </tr>
               <tr>  
                   <td>Version</td><td>{{version}}</td> 
               </tr>

package/example.js

@@ -24,6 +24,7 @@ app.set('np_config', {
     "INDUSTRY_TYPE_ID":"Retail",
     "homepage":"/",
     "path_prefix":"_pay",
+    "theme_color":"#231530",
     "db_url":MONGOURL // Remove this property in case you want to use multidborm
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-paytmpg",
-  "version": "3.0.4",
+  "version": "4.1.0",
   "description": "Payment Gateway Integration using NodeJS",
   "main": "index.js",
   "scripts": {
@@ -38,4 +38,4 @@
     "request": "^2.88.0",
     "util": "^0.11.1"
   }
-}
+}