node-paytmpg 5.3.2 → 6.4.2

package/app/controllers/payment_controller.js

@@ -6,9 +6,11 @@ var IDLEN = 10;
 var nodeBase64 = require('nodejs-base64-converter');
 var RazorPay = require('razorpay');
 var OpenMoney = require('./adapters/open_money')
+var PayU = require('./adapters/payu')
 const PaytmChecksum = require('./checksum/PaytmChecksum.js');
 const { stat } = require('fs');
 const { config } = require('process');
+const path = require('path');
 
 let loadingSVG = ` <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="margin:auto;background:#fff;display:block;" width="200px" height="200px" viewBox="0 0 100 100" preserveAspectRatio="xMidYMid">
 <g transform="rotate(0 50 50)">
@@ -76,12 +78,17 @@ module.exports = function (app, callbacks) {
 
     var razorPayInstance;
     var openMoneyInstance = new OpenMoney(config);
+    var payuInstance = new PayU(config)
 
-    if (config.razor_url)
+    if (config.razor_url) {
         razorPayInstance = new RazorPay({ key_id: config.KEY, key_secret: config.SECRET })
+    }
     if (config.open_money_url) {
         openMoneyInstance = new OpenMoney(config);
     }
+    if (config.payu_url) {
+        payuInstance = new PayU(config);
+    }
 
     let usingMultiDbOrm = false;
     if (config.db_url) {
@@ -89,7 +96,22 @@ module.exports = function (app, callbacks) {
         usingMultiDbOrm = false;
 
     } else if (app.multidborm) {
-        Transaction = require('../models/np_multidbplugin.js')('nptransactions', app.multidborm);
+        const sample = {
+            orderId: "string",
+            cusId: "string",
+            time: 1770051201752,
+            timeStamp: 1770051201752,
+            status: "string",
+            name: "string",
+            email: "string",
+            phone: "string",
+            amount: 1,
+            pname: "string",
+            extra: "stringlarge",
+            TXNID: "27118670199",
+            returnUrl: "string"
+        }
+        Transaction = require('../models/np_multidbplugin.js')('nptransactions', app.multidborm, sample);
         Transaction.db = app.multidborm;
         Transaction.modelname = 'nptransactions'
         Transaction.idFieldName = 'orderId'
@@ -111,7 +133,10 @@ module.exports = function (app, callbacks) {
         return text;
     }
 
-    var vp = __dirname + config.view_path
+    const viewRoot = config.templateDir
+        ? config.templateDir
+        : path.join(__dirname, '..', 'views');
+    var vp = config.resolved_view_path || (viewRoot.endsWith(path.sep) ? viewRoot : viewRoot + path.sep)
 
     module.home = (req, res) => {
 
@@ -123,25 +148,25 @@ module.exports = function (app, callbacks) {
 
     module.init = async function (req, res) {
 
-        if (!req.body.ORDER_ID && !req.body.EMAIL && req.query.to) {
-
+        if (!req.body.ORDER_ID && !req.body.EMAIL && req.query?.to) {
             let toData = JSON.parse(nodeBase64.decode(req.query.to));
             req.body.NAME = toData.NAME
             req.body.EMAIL = toData.EMAIL
+            req.body.TXN_AMOUNT = toData.TXN_AMOUNT
             req.body.MOBILE_NO = toData.MOBILE_NO
-            req.body.ORDER_ID = toData.ORDER_ID
+            req.body.ORDER_ID = toData.ORDER_ID || toData.ORDERID
+            req.body.PRODUCT_NAME = toData.PRODUCT_NAME
+            req.body.RETURN_URL = toData.RETURN_URL
         }
 
         sanitizeRequest(req.body);
         let gotAllParams = true;
-
+        let checkedFields = ['TXN_AMOUNT', 'PRODUCT_NAME', 'MOBILE_NO', 'NAME', 'EMAIL']
         if (req.body !== undefined) {
-            let checks = [req.body.TXN_AMOUNT, req.body.PRODUCT_NAME,
-            req.body.MOBILE_NO, req.body.NAME, req.body.EMAIL]
 
-            for (var i = 0; i < checks.length; i++) {
+            for (var i = 0; i < checkedFields.length; i++) {
 
-                if (checks[i] === undefined) {
+                if (req.body[checkedFields[i]] === undefined) {
                     gotAllParams = false;
                     break;
                 }
@@ -165,7 +190,7 @@ module.exports = function (app, callbacks) {
             params['WEBSITE'] = req.body.WEBSITE;
             params['CHANNEL_ID'] = req.body.CHANNEL_ID;
             params['INDUSTRY_TYPE_ID'] = req.body.INDUSTRY_TYPE_ID;
-            params['ORDER_ID'] = req.body.ORDER_ID;
+            params['ORDER_ID'] = req.body.ORDER_ID || req.body.ORDERID;
             params['CUST_ID'] = req.body.CUST_ID;
             params['TXN_AMOUNT'] = req.body.TXN_AMOUNT;
             params['CALLBACK_URL'] = req.body.CALLBACK_URL + "?order_id=" + req.body.ORDER_ID;
@@ -430,6 +455,10 @@ module.exports = function (app, callbacks) {
                 res.end();
 
             }
+            else if (config.payu_url) {
+                const payuRequest = payuInstance.generatePaymentRequest(params);
+                payuInstance.renderProcessingPage(params, payuRequest, res, loadingSVG);
+            }
             else if (config.open_money_url) {
                 try {
                     let pmttoken = await openMoneyInstance.generatePaymentToken(params);
@@ -453,8 +482,9 @@ module.exports = function (app, callbacks) {
                     openMoneyInstance.renderError(params, e, res)
                 }
             }
-            if (callbacks !== undefined)
+            if (callbacks && typeof callbacks.onStart === 'function') {
                 callbacks.onStart(params['ORDER_ID'], params);
+            }
         }
         else if ((req.body.ORDER_ID !== undefined && req.body.ORDER_ID.length > 2) || gotAllParams) {
 
@@ -487,7 +517,7 @@ module.exports = function (app, callbacks) {
                         let showConfirmation =
                             function (err, checksum) {
                                 res.render(vp + "init.hbs", {
-                                    action: '',
+                                    action:"/"+ config.path_prefix+"/init",
                                     readonly: 'readonly',
                                     BUTTON: 'Pay',
                                     NAME: params['NAME'],
@@ -511,6 +541,8 @@ module.exports = function (app, callbacks) {
                             checksum_lib.genchecksum(params, config.KEY, showConfirmation);
                         else if (config.razor_url) {
                             showConfirmation()
+                        } else if (config.payu_url) {
+                            showConfirmation()
                         } else if (config.open_money_url) {
                             showConfirmation()
                         }
@@ -519,49 +551,55 @@ module.exports = function (app, callbacks) {
 
 
 
-                    if ((req.body.ORDER_ID !== undefined && req.body.ORDER_ID.length > 2)) {
 
+                    function onOrder(orderId) {
 
-                        var myquery = { orderId: req.body.ORDER_ID };
-                        Transaction.findOne(myquery, function (err, orderData) {
+                        var txnTask = new Transaction({
+                            orderId: orderId,
+                            cusId: user.id,
+                            time: Date.now(),
+                            timeStamp: Date.now(),
+                            status: 'INITIATED',
+                            name: user.name,
+                            email: user.email,
+                            phone: user.phone,
+                            amount: req.body.TXN_AMOUNT,
+                            pname: req.body.PRODUCT_NAME,
+                            extra: '',
+                            returnUrl: req.body.RETURN_URL || ''
+                        });
 
-                            onTxn(orderData);
-
-                        }, usingMultiDbOrm ? Transaction : undefined);
+                        return txnTask.save().then(onTxn)
+                            .catch(err => {
 
+                                console.log(err)
+                                if (req.body.RETURN_URL) {
+                                    res.redirect(req.body.RETURN_URL + "?status=failed")
+                                    return;
+                                }
+                                res.redirect('')
+                            });
+                    }
 
+                    if ((req.body.ORDER_ID !== undefined && req.body.ORDER_ID.length > 2)) {
+                        var myquery = { orderId: req.body.ORDER_ID };
+                        Transaction.findOne(myquery, function (err, orderData) {
+                            if (err || (!orderData)) {
+                                if (gotAllParams) {
+                                    console.log("Creating new order for ", req.body.ORDER_ID)
+                                    onOrder(req.body.ORDER_ID)
+                                }
+                                else {
+                                    res.send({ message: "Order Not Found or missing required data: " + checkedFields.join(", "), ORDERID: req.body.ORDER_ID })
+                                }
+                            }
+                            else {
+                                onTxn(orderData);
+                            }
 
+                        }, usingMultiDbOrm ? Transaction : undefined);
                     }
                     else {
-
-
-                        function onOrder(orderId) {
-
-                            var txnTask = new Transaction({
-
-                                orderId: orderId,
-                                cusId: user.id,
-                                time: Date.now(),
-                                timeStamp: Date.now(),
-                                status: 'INITIATED',
-                                name: user.name,
-                                email: user.email,
-                                phone: user.phone,
-                                amount: req.body.TXN_AMOUNT,
-                                pname: req.body.PRODUCT_NAME,
-                                extra: ''
-
-                            });
-
-                            txnTask.save().then(onTxn)
-                                .catch(err => {
-
-                                    console.log(err)
-
-                                    res.redirect('')
-                                });
-                        }
-
                         let orderId;
                         if (config.paytm_url) {
                             orderId = "pay_" + makeid(config.id_length || IDLEN)
@@ -588,6 +626,9 @@ module.exports = function (app, callbacks) {
                         else if (config.open_money_url) {
                             orderId = "pay_" + makeid(config.id_length || IDLEN)
                             onOrder(orderId)
+                        } else if (config.payu_url) {
+                            orderId = "payu_" + makeid(config.id_length || IDLEN)
+                            onOrder(orderId)
                         }
 
 
@@ -608,7 +649,7 @@ module.exports = function (app, callbacks) {
 
             res.render(vp + "init.hbs", {
 
-                action: '',
+                action:"/"+ config.path_prefix+"/init",
                 readonly: '',
                 check: true,
                 BUTTON: 'Submit',
@@ -632,52 +673,96 @@ module.exports = function (app, callbacks) {
 
     }
 
-    function updateTransaction(req, res) {
-        var myquery = { orderId: req.body.ORDERID };
+    async function updateTransaction(req, res) {
+        var orderToFind = req.body.ORDERID || req.body.ORDER_ID || req.body.ORDERId || (req.query && req.query.order_id) || req.body.ORDER_ID;
+        var myquery = { orderId: orderToFind };
+
+        let objForUpdate = null;
+        try {
+            // try default
+            objForUpdate = await Transaction.findOne(myquery).catch(() => null);
+            // try id
+            if (!objForUpdate) objForUpdate = await Transaction.findOne({ id: orderToFind }).catch(() => null);
+            // try uppercase key
+            if (!objForUpdate) objForUpdate = await Transaction.findOne({ ORDERID: orderToFind }).catch(() => null);
+        } catch (e) {
+            // ignore lookup errors
+            objForUpdate = objForUpdate || null;
+        }
 
-        Transaction.findOne(myquery, function (err, objForUpdate) {
+        let returnUrl = objForUpdate ? objForUpdate.returnUrl : null;
+        if (returnUrl == 'undefined') returnUrl = undefined;
 
-            if (err) {
-                res.send({ message: "Transaction Not Found !", ORDERID: req.body.ORDERID, TXNID: req.body.TXNID })
-                return;
+        if (!objForUpdate) {
+            if (returnUrl) {
+                let separator = returnUrl.indexOf('?') > -1 ? '&' : '?';
+                returnUrl = returnUrl + separator + 'status=FAILED&message=txn_not_found&ORDERID=' + req.body.ORDERID;
+                return res.redirect(returnUrl);
             }
-            if (objForUpdate.status != ("INITIATED") && objForUpdate.status != ("TXN_PENDING") && objForUpdate.status != ("PENDING")) {
-                objForUpdate.readonly = "readonly"
-                objForUpdate.action = config.homepage
-                res.render(vp + "result.hbs", objForUpdate);
-                console.log("Transaction already processed ", req.body.ORDERID)
-                // res.send({ message: "Transaction already processed", status: objForUpdate.status, ORDERID: objForUpdate.orderId, TXNID: objForUpdate.TXNID, TXNID: req.body.TXNID })
-                return;
+            return res.send({ message: "Transaction Not Found !", ORDERID: req.body.ORDERID, TXNID: req.body.TXNID });
+        }
+
+        if (objForUpdate.status != ("INITIATED") && objForUpdate.status != ("TXN_PENDING") && objForUpdate.status != ("PENDING")) {
+            objForUpdate.readonly = "readonly";
+            objForUpdate.action = config.homepage;
+            if (returnUrl) {
+                let separator = returnUrl.indexOf('?') > -1 ? '&' : '?';
+                returnUrl = returnUrl + separator + 'status=' + objForUpdate.status + '&ORDERID=' + objForUpdate.orderId + '&TXNID=' + objForUpdate.TXNID;
+                return res.redirect(returnUrl);
             }
-            if (req.body.status == "paid" && !req.body.STATUS) {
-                req.body.STATUS = "TXN_SUCCESS"
+            else {
+                return res.render(vp + "result.hbs", objForUpdate);
             }
-            objForUpdate.status = req.body.STATUS;
-            objForUpdate.TXNID = req.body.TXNID;
-            objForUpdate.extra = JSON.stringify(req.body);
-
-            var newvalues = { $set: objForUpdate };
-            Transaction.updateOne(myquery, newvalues, function (err, saveRes) {
+        }
 
-                if (err) {
-                    res.send({ message: "Error Occured !", ORDERID: req.body.ORDERID, TXNID: req.body.TXNID })
-                }
-                else {
+        if (req.body.status == "paid" && !req.body.STATUS) req.body.STATUS = "TXN_SUCCESS";
+        objForUpdate.status = req.body.STATUS;
+        objForUpdate.TXNID = req.body.TXNID;
+        objForUpdate.extra = JSON.stringify(req.body);
 
-                    if (callbacks !== undefined)
-                        callbacks.onFinish(req.body.ORDERID, req.body);
-                    objForUpdate.readonly = "readonly"
-                    objForUpdate.action = config.homepage
-                    res.render(vp + "result.hbs", objForUpdate);
+        var newvalues = { $set: objForUpdate };
+        Transaction.updateOne(myquery, newvalues, function (err, saveRes) {
+            if (err) {
+                if (returnUrl) {
+                    let separator = returnUrl.indexOf('?') > -1 ? '&' : '?';
+                    returnUrl = returnUrl + separator + 'status=FAILED&message=update_error&ORDERID=' + req.body.ORDERID;
+                    return res.redirect(returnUrl);
                 }
-            });
+                return res.send({ message: "Error Occured !", ORDERID: req.body.ORDERID, TXNID: req.body.TXNID });
+            }
 
-        }, usingMultiDbOrm ? Transaction : undefined)
+            if (callbacks && typeof callbacks.onFinish === 'function') {
+                callbacks.onFinish(req.body.ORDERID, objForUpdate);
+            }
+            objForUpdate.readonly = "readonly";
+            objForUpdate.action = config.homepage;
+            if (returnUrl) {
+                let separator = returnUrl.indexOf('?') > -1 ? '&' : '?';
+                returnUrl = returnUrl + separator + 'status=' + objForUpdate.status + '&ORDERID=' + objForUpdate.orderId + '&TXNID=' + objForUpdate.TXNID;
+                return res.redirect(returnUrl);
+            }
+            res.render(vp + "result.hbs", objForUpdate);
+        });
     }
 
     module.callback = async (req, res) => {
         console.log("request_data ", req.originalUrl, JSON.stringify(req.body))
 
+        // Normalize common order id and txn id field names (support ORDER_ID, ORDERID, etc.)
+        try {
+            if ((!req.body.ORDERID || req.body.ORDERID === '') && req.body.ORDER_ID) {
+                req.body.ORDERID = req.body.ORDER_ID;
+            }
+            if ((!req.body.TXNID || req.body.TXNID === '') && req.body.TXN_ID) {
+                req.body.TXNID = req.body.TXN_ID;
+            }
+            if ((!req.body.ORDERID || req.body.ORDERID === '') && req.query && req.query.order_id) {
+                req.body.ORDERID = req.query.order_id;
+            }
+        } catch (e) {
+            // ignore
+        }
+
         var result = false;
         let isCancelled = false;
         if (config.paytm_url) {
@@ -721,6 +806,16 @@ module.exports = function (app, callbacks) {
                 isCancelled = true;
             }
         }
+        else if (config.payu_url) {
+            const payuRest = await payuInstance.verifyResult(req);
+            result = payuRest.valid;
+            req.body.STATUS = payuRest.STATUS;
+            req.body.TXNID = payuRest.TXNID;
+            req.body.ORDERID = payuRest.ORDERID || req.query.order_id;
+            req.body.extras = payuRest.data;
+            result = true;
+            isCancelled = payuRest.cancelled;
+        }
         else if (config.open_money_url) {
             let openRest = await openMoneyInstance.verifyResult(req);
             result = true;
@@ -806,6 +901,9 @@ module.exports = function (app, callbacks) {
                 res.send({ message: "Unsupported event : " + req.body.event })
             }
         }
+        else if (config.payu_url) {
+            payuInstance.processWebhook(req, res, updateTransaction)
+        }
         else if (config.open_money_url) {
             openMoneyInstance.processWebhook(req, res, updateTransaction)
         }
@@ -832,6 +930,9 @@ module.exports = function (app, callbacks) {
                     let order = await razorPayInstance.orders.create(options);
                     id = order.id;
                 }
+                else if (config.payu_url) {
+                    id = "payu_" + makeid(config.id_length || IDLEN)
+                }
                 else if (config.open_money_url) {
                     id = "pay_" + makeid(config.id_length || IDLEN)
                 }
@@ -847,6 +948,7 @@ module.exports = function (app, callbacks) {
                     phone: user.phone,
                     amount: req.body.TXN_AMOUNT,
                     pname: req.body.PRODUCT_NAME,
+                    returnUrl: req.body.RETURN_URL || '',
                     extra: (req.body.EXTRA || '')
 
                 });
@@ -857,7 +959,10 @@ module.exports = function (app, callbacks) {
                         NAME: txn.name,
                         EMAIL: txn.email,
                         MOBILE_NO: txn.phone,
-                        ORDER_ID: txn.orderId
+                        ORDER_ID: txn.orderId,
+                        RETURN_URL: txn.returnUrl,
+                        TXN_AMOUNT: txn.amount,
+                        PRODUCT_NAME: txn.pname
                     }))
 
                     txn.payurl = config.host_url + '/' + config.path_prefix + '/init?to=' + urlData64;
@@ -889,6 +994,7 @@ module.exports = function (app, callbacks) {
                 req.body.EMAIL = createTxnResult.email
                 req.body.MOBILE_NO = createTxnResult.phone
                 req.body.ORDER_ID = createTxnResult.orderId
+                req.body.RETURN_URL = createTxnResult.returnUrl
                 module.init(req, {
                     render: (renderPath, initResultRender) => {
                         // console.log(initResultRender)
@@ -968,8 +1074,9 @@ module.exports = function (app, callbacks) {
                                 res.send({ message: "Error Occured !", ORDERID: paytmResponse.ORDERID, TXNID: paytmResponse.TXNID })
                             }
                             else {
-                                if (callbacks !== undefined)
+                                if (callbacks && typeof callbacks.onFinish === 'function') {
                                     callbacks.onFinish(req.body.ORDER_ID, orderData);
+                                }
                                 res.send(paytmResponse)
                             }
                         });
@@ -1002,6 +1109,28 @@ module.exports = function (app, callbacks) {
                         res.send(orderData);
                     }
                 }
+                else if (config.payu_url) {
+                    let result = await payuInstance.getPaymentStatus(req.body.ORDER_ID)
+                    if (result && result.transaction_details && result.transaction_details[req.body.ORDER_ID]) {
+                        let txn = result.transaction_details[req.body.ORDER_ID];
+                        let status = 'TXN_FAILURE'
+                        if (txn.status == 'success') {
+                            status = 'TXN_SUCCESS'
+                        }
+                        else if (txn.status == 'pending') {
+                            status = 'TXN_PENDING'
+                        }
+                        onStatusUpdate({
+                            STATUS: status,
+                            ORDERID: req.body.ORDER_ID,
+                            TXNID: txn.mihpayid || txn.txnid,
+                            payu: txn
+                        })
+                    }
+                    else {
+                        res.send(orderData);
+                    }
+                }
                 else if (config.open_money_url) {
                     let extras = JSON.parse(orderData.extra)
                     if (!extras || !extras.layer_pay_token_id) {