pretix-thepay 9.0.18__py3-none-any.whl

pretix_thepay/pretix_plugin_urls.py

@@ -0,0 +1,10 @@
+"""
+URL configuration for pretix_thepay plugin.
+This file is automatically discovered by Pretix.
+"""
+from django.urls import path, include
+
+urlpatterns = [
+    path('thepay/', include('pretix_thepay.urls')),
+]
+

pretix_thepay/signals.py

@@ -0,0 +1,18 @@
+"""
+Signal handlers for The Pay payment provider registration.
+"""
+from django.dispatch import receiver
+from pretix.base.signals import register_payment_providers
+
+
+@receiver(register_payment_providers, dispatch_uid="payment_thepay")
+def register_payment_provider(sender, **kwargs):
+    """
+    Register The Pay payment provider with Pretix.
+    
+    This signal handler is called by Pretix to discover available
+    payment providers and registers the The Pay provider.
+    """
+    from .payment import ThePay
+    return ThePay
+

pretix_thepay/urls.py

@@ -0,0 +1,15 @@
+"""
+URL configuration for The Pay payment provider.
+
+Defines routes for handling payment gateway callbacks:
+- return: User redirect after payment completion
+- notify: Server-to-server notification (IPN)
+"""
+from django.urls import path
+from . import views
+
+urlpatterns = [
+    path('return/<str:order>/<int:payment>/<str:hash>/', views.ReturnView.as_view(), name='return'),
+    path('notify/<str:order>/<int:payment>/<str:hash>/', views.NotifyView.as_view(), name='notify'),
+]
+

pretix_thepay/views.py

@@ -0,0 +1,345 @@
+"""
+Views for handling The Pay payment gateway callbacks.
+
+This module provides views for processing user redirects and server-to-server
+notifications from the The Pay payment gateway, including signature verification
+and payment status updates.
+"""
+import logging
+from django.contrib import messages
+from django.http import HttpRequest, HttpResponse, HttpResponseBadRequest
+from django.shortcuts import redirect, get_object_or_404
+from django.urls import reverse, NoReverseMatch
+from django.utils.decorators import method_decorator
+from django.utils.translation import gettext_lazy as _
+from django.views import View
+from django.views.decorators.csrf import csrf_exempt
+from django_scopes import scopes_disabled
+from pretix.base.models import OrderPayment
+
+logger = logging.getLogger(__name__)
+
+
+def _order_redirect_url(request, order) -> str:
+    if hasattr(order, 'get_absolute_url'):
+        return order.get_absolute_url()
+    if hasattr(order, 'get_detail_url'):
+        return order.get_detail_url()
+    if hasattr(order, 'get_url'):
+        return order.get_url()
+    if hasattr(order, 'get_presale_url'):
+        return order.get_presale_url()
+    try:
+        patterns = [
+            ('presale:event.order', {
+                'organizer': order.event.organizer.slug,
+                'event': order.event.slug,
+                'code': order.code,
+                'secret': order.secret,
+            }),
+            ('presale:event.order', {
+                'event': order.event.slug,
+                'code': order.code,
+                'secret': order.secret,
+            }),
+            ('presale:event.order.by_code', {
+                'organizer': order.event.organizer.slug,
+                'event': order.event.slug,
+                'code': order.code,
+                'secret': order.secret,
+            }),
+            ('presale:event.order.by_code', {
+                'event': order.event.slug,
+                'code': order.code,
+                'secret': order.secret,
+            }),
+        ]
+        for name, kwargs in patterns:
+            try:
+                return reverse(name, kwargs=kwargs)
+            except NoReverseMatch:
+                continue
+    except Exception:
+        pass
+    try:
+        organizer = order.event.organizer.slug
+        event = order.event.slug
+        code = order.code
+        secret = order.secret
+        path = f'/{organizer}/{event}/order/{code}/{secret}/'
+        return request.build_absolute_uri(path)
+    except Exception:
+        return '/'
+
+
+def _store_thepay_state(payment_obj: OrderPayment, state: str) -> None:
+    info = getattr(payment_obj, 'info_data', None)
+    if info is None:
+        info = getattr(payment_obj, 'info', None) or {}
+    info['thepay_state'] = state
+    if hasattr(payment_obj, 'info_data'):
+        payment_obj.info_data = info
+    else:
+        payment_obj.info = info
+    payment_obj.save(update_fields=['info'])
+
+
+@method_decorator(csrf_exempt, name='dispatch')
+class ReturnView(View):
+    """
+    Handle user redirect return from The Pay payment gateway.
+    
+    Processes the payment response when the customer is redirected back
+    from the The Pay gateway after completing or canceling payment.
+    """
+
+    def get(self, request: HttpRequest, order: str, payment: int, hash: str):
+        return self._handle_response(request, order, payment, hash)
+
+    def post(self, request: HttpRequest, order: str, payment: int, hash: str):
+        return self._handle_response(request, order, payment, hash)
+
+    def _handle_response(self, request: HttpRequest, order: str, payment: int, hash: str):
+        """
+        Process The Pay return response.
+        
+        Verifies the payment signature, checks payment status,
+        and updates the payment state accordingly.
+        
+        Args:
+            request: HTTP request containing The Pay response parameters
+            order: Order code
+            payment: Payment ID
+            hash: Order secret hash for validation
+        """
+        try:
+            with scopes_disabled():
+                payment_obj = get_object_or_404(
+                    OrderPayment,
+                    id=payment,
+                    order__code=order,
+                    order__secret=hash
+                )
+            order_obj = payment_obj.order
+            event = order_obj.event
+
+            # Get payment provider
+            from pretix.base.models import Event
+            provider = event.get_payment_providers().get('thepay')
+            if not provider:
+                logger.error('The Pay provider not found')
+                messages.error(request, _('Payment provider not configured.'))
+                return redirect(order_obj.get_abandon_url())
+
+            # Get settings
+            settings_dict = provider.settings
+            api_password = settings_dict.get('api_password', '')
+
+            # Get response parameters
+            # The Pay return URL includes payment_uid and project_id
+            payment_uid = (
+                request.GET.get('payment_uid', '') or request.POST.get('payment_uid', '') or
+                request.GET.get('uid', '') or request.POST.get('uid', '')
+            )
+            signature = request.GET.get('signature', '') or request.POST.get('signature', '')
+
+            # If no payment_uid from callback, extract from payment.info (stored during creation)
+            if not payment_uid:
+                payment_info = getattr(payment_obj, 'info_data', None)
+                if payment_info is None:
+                    payment_info = getattr(payment_obj, 'info', None) or {}
+                payment_uid = payment_info.get('payment_uid') or payment_info.get('uid')
+                # Fallback: reconstruct from stored pattern
+                if not payment_uid:
+                    payment_uid = f'pretix-{payment_obj.id}-{order_obj.code}'
+
+            # Verify signature if provided
+            if signature and api_password:
+                params = dict(request.GET.items()) if request.method == 'GET' else dict(request.POST.items())
+                params.pop('signature', None)  # Remove signature from params for verification
+                
+                if not provider._verify_signature(params, signature, api_password):
+                    logger.error('The Pay signature verification failed')
+                    messages.error(request, _('Payment verification failed.'))
+                    return redirect(order_obj.get_abandon_url())
+
+            # Always query payment status via API (per The Pay spec)
+            payment_state = None
+            if payment_uid:
+                merchant_id = settings_dict.get('merchant_id', '')
+                project_id = settings_dict.get('project_id', '')
+                test_mode = settings_dict.get('test_mode', False)
+                api_url = provider._get_api_url(test_mode).rstrip('/')
+                payment_state = provider._get_payment_status(
+                    payment_uid, merchant_id, project_id, api_password, api_url
+                )
+                logger.info('The Pay return status for payment %s (uid=%s): %s', payment, payment_uid, payment_state)
+
+            # Check payment status
+            # The Pay payment states: 'paid', 'waiting_for_payment', 'expired', 'error', etc.
+            # According to OpenAPI spec: Enum_PaymentState
+            if payment_state:
+                _store_thepay_state(payment_obj, payment_state)
+            if payment_state in ('paid', 'refunded', 'partially_refunded'):
+                allowed_states = {OrderPayment.PAYMENT_STATE_PENDING}
+                created_state = getattr(OrderPayment, 'PAYMENT_STATE_CREATED', None)
+                if created_state:
+                    allowed_states.add(created_state)
+                if payment_obj.state in allowed_states:
+                    logger.info('The Pay payment %s state before confirm: %s', payment, payment_obj.state)
+                    with scopes_disabled():
+                        payment_obj.confirm()
+                    logger.info('The Pay payment %s confirmed for order %s', payment, order)
+                    if payment_state == 'paid':
+                        messages.success(request, _('Payment successful!'))
+                    else:
+                        messages.warning(request, _('Payment was refunded on The Pay side.'))
+                else:
+                    logger.info('The Pay payment %s already in state %s; skipping confirm', payment, payment_obj.state)
+                return redirect(_order_redirect_url(request, order_obj))
+            elif payment_state in ('expired', 'error', 'preauth_cancelled', 'preauth_expired'):
+                error_msg = _('Payment failed or expired.')
+                if payment_obj.state == OrderPayment.PAYMENT_STATE_PENDING:
+                    with scopes_disabled():
+                        payment_obj.fail(info={'error': f'Payment state: {payment_state}'})
+                    logger.warning(f'The Pay payment {payment} failed for order {order}: {payment_state}')
+                messages.error(request, error_msg)
+                return redirect(order_obj.get_abandon_url())
+            elif payment_state in ('waiting_for_payment', 'waiting_for_confirmation', 'preauthorized'):
+                # Payment is still processing
+                logger.info(f'The Pay payment {payment} is still processing: {payment_state}')
+                return redirect(_order_redirect_url(request, order_obj))
+            else:
+                # Unknown status or no status - keep pending
+                if payment_state:
+                    logger.warning(f'The Pay payment {payment} returned unknown status: {payment_state}')
+                else:
+                    logger.warning(f'The Pay payment {payment} - no status in callback and API query failed')
+                return redirect(_order_redirect_url(request, order_obj))
+
+        except Exception as e:
+            logger.error(f'Error processing The Pay return: {e}', exc_info=True)
+            messages.error(request, _('An error occurred while processing your payment.'))
+            try:
+                return redirect(order_obj.get_abandon_url())
+            except:
+                return HttpResponseBadRequest('Error processing payment')
+
+
+@method_decorator(csrf_exempt, name='dispatch')
+class NotifyView(View):
+    """
+    Handle server-to-server notification (IPN) from The Pay payment gateway.
+    
+    Processes asynchronous payment notifications sent by The Pay to confirm
+    payment status independently of user redirect.
+    """
+
+    def get(self, request: HttpRequest, order: str, payment: int, hash: str):
+        return self._handle_notification(request, order, payment, hash)
+
+    def post(self, request: HttpRequest, order: str, payment: int, hash: str):
+        return self._handle_notification(request, order, payment, hash)
+
+    def _handle_notification(self, request: HttpRequest, order: str, payment: int, hash: str):
+        """
+        Process The Pay server notification.
+        
+        Verifies the notification signature, checks payment status,
+        and updates the payment state. Returns HTTP 200 OK on success.
+        
+        Args:
+            request: HTTP request containing The Pay notification parameters
+            order: Order code
+            payment: Payment ID
+            hash: Order secret hash for validation
+        """
+        try:
+            with scopes_disabled():
+                payment_obj = get_object_or_404(
+                    OrderPayment,
+                    id=payment,
+                    order__code=order,
+                    order__secret=hash
+                )
+            order_obj = payment_obj.order
+            event = order_obj.event
+
+            # Get payment provider
+            from pretix.base.models import Event
+            provider = event.get_payment_providers().get('thepay')
+            if not provider:
+                logger.error('The Pay provider not found')
+                return HttpResponseBadRequest('Provider not configured')
+
+            # Get settings
+            settings_dict = provider.settings
+            api_password = settings_dict.get('api_password', '')
+
+            # Get notification parameters
+            # The Pay notifications include: payment_uid, project_id, type
+            payment_uid = (
+                request.GET.get('payment_uid', '') or request.POST.get('payment_uid', '') or
+                request.GET.get('uid', '') or request.POST.get('uid', '')
+            )
+            signature = request.GET.get('signature', '') or request.POST.get('signature', '')
+
+            # If no payment_uid from notification, extract from payment.info (stored during creation)
+            if not payment_uid:
+                payment_info = getattr(payment_obj, 'info_data', None)
+                if payment_info is None:
+                    payment_info = getattr(payment_obj, 'info', None) or {}
+                payment_uid = payment_info.get('payment_uid') or payment_info.get('uid')
+                # Fallback: reconstruct from stored pattern
+                if not payment_uid:
+                    payment_uid = f'pretix-{payment_obj.id}-{order_obj.code}'
+
+            # Verify signature if provided
+            if signature and api_password:
+                params = dict(request.GET.items()) if request.method == 'GET' else dict(request.POST.items())
+                params.pop('signature', None)
+                
+                if not provider._verify_signature(params, signature, api_password):
+                    logger.error('The Pay notification signature verification failed')
+                    return HttpResponseBadRequest('Invalid signature')
+
+            # Always query payment status via API (per The Pay spec)
+            payment_state = None
+            if payment_uid:
+                merchant_id = settings_dict.get('merchant_id', '')
+                project_id = settings_dict.get('project_id', '')
+                test_mode = settings_dict.get('test_mode', False)
+                api_url = provider._get_api_url(test_mode).rstrip('/')
+                payment_state = provider._get_payment_status(
+                    payment_uid, merchant_id, project_id, api_password, api_url
+                )
+                logger.info('The Pay notify status for payment %s (uid=%s): %s', payment, payment_uid, payment_state)
+
+            # Process payment status
+            # The Pay payment states: 'paid', 'waiting_for_payment', 'expired', 'error', etc.
+            # Notification type 'state_changed' indicates payment state has changed
+            if payment_state:
+                _store_thepay_state(payment_obj, payment_state)
+            if payment_state in ('paid', 'refunded', 'partially_refunded'):
+                allowed_states = {OrderPayment.PAYMENT_STATE_PENDING}
+                created_state = getattr(OrderPayment, 'PAYMENT_STATE_CREATED', None)
+                if created_state:
+                    allowed_states.add(created_state)
+                if payment_obj.state in allowed_states:
+                    logger.info('The Pay payment %s state before confirm (notify): %s', payment, payment_obj.state)
+                    with scopes_disabled():
+                        payment_obj.confirm()
+                    logger.info('The Pay payment %s confirmed via notification for order %s', payment, order)
+                else:
+                    logger.info('The Pay payment %s already in state %s; skipping confirm', payment, payment_obj.state)
+            elif payment_state in ('expired', 'error', 'preauth_cancelled', 'preauth_expired'):
+                if payment_obj.state == OrderPayment.PAYMENT_STATE_PENDING:
+                    with scopes_disabled():
+                        payment_obj.fail(info={'error': f'Payment state: {payment_state}'})
+                    logger.warning(f'The Pay payment {payment} failed via notification for order {order}: {payment_state}')
+
+            return HttpResponse('OK')
+
+        except Exception as e:
+            logger.error(f'Error processing The Pay notification: {e}', exc_info=True)
+            return HttpResponseBadRequest('Error processing notification')

pretix_thepay-9.0.18.dist-info/METADATA

@@ -0,0 +1,139 @@
+Metadata-Version: 2.1
+Name: pretix-thepay
+Version: 9.0.18
+Summary: The Pay payment provider for Pretix
+Author-email: KrisIsNew <thepay.pretix@krisisnew.xyz>
+Maintainer-email: KrisIsNew <thepay.pretix@krisisnew.xyz>
+License: Apache-2.0
+Project-URL: homepage, https://github.com/krisisnewxyz/pretix-thepay
+Project-URL: repository, https://github.com/krisisnewxyz/pretix-thepay
+Project-URL: documentation, https://github.com/krisisnewxyz/pretix-thepay
+Project-URL: issues, https://github.com/krisisnewxyz/pretix-thepay/issues
+Keywords: pretix,payment,thepay
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.8
+Description-Content-Type: text/x-rst
+Requires-Dist: pretix >=2.7.0
+Requires-Dist: requests >=2.25.0
+
+pretix-thepay
+=============
+
+The Pay payment provider plugin for Pretix. It creates payments via The Pay API,
+redirects customers to The Pay, and confirms payment status using the return and
+notification callbacks.
+
+Features
+--------
+
+- The Pay REST API integration (payment creation, status lookup)
+- Redirect-based checkout flow
+- Server-to-server notifications
+- Refunds (full and partial)
+- ISO 4217 currency support with correct minor units
+- Demo mode via Test Mode setting
+- Multi-language gateway support (Czech, Slovak, English)
+
+Requirements
+------------
+
+- Pretix >= 2.7.0
+- Python >= 3.8
+- requests >= 2.25.0
+
+Installation
+------------
+
+Install from PyPI::
+
+    pip install pretix-thepay
+
+Or install from source::
+
+    pip install -e /path/to/pretix-thepay
+
+Enable the plugin in ``pretix.cfg``::
+
+    [pretix]
+    plugins = pretix_thepay
+
+Restart Pretix after enabling the plugin.
+
+Configuration
+-------------
+
+In the Pretix control panel, enable The Pay and configure:
+
+- **Merchant ID**: Your The Pay merchant ID
+- **Project ID**: Your The Pay project ID
+- **API Password**: Your The Pay API password
+- **Language**: Default language for the payment gateway
+- **Test Mode**: Enable to use the demo environment
+
+Behavior
+--------
+
+1. The customer selects The Pay.
+2. Pretix creates a payment at The Pay and redirects the customer.
+3. The customer completes payment on The Pay.
+4. Pretix confirms the payment by querying The Pay from the return URL and from
+   notifications.
+
+Notes
+-----
+
+- Test Mode switches the API base URL to the demo environment.
+- The Pay requires a customer name plus email or phone; Pretix order data is used.
+
+Refunds
+-------
+
+Refunds are initiated from Pretix and sent to The Pay. The plugin supports full
+and partial refunds for payments that support automatic refunds in The Pay.
+
+Troubleshooting
+---------------
+
+Payment not created
+^^^^^^^^^^^^^^^^^^^
+
+- Verify Merchant ID, Project ID, and API Password
+- Check Pretix logs for The Pay API response details
+- Ensure the customer has a name and email or phone
+
+Notifications not arriving
+^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- Make sure Pretix is reachable from The Pay (public URL)
+- Confirm your server IP is allowed in The Pay administration
+
+Docker
+------
+
+For Pretix in Docker::
+
+    FROM pretix/standalone:stable
+    USER root
+    RUN pip3 install pretix-thepay
+    USER pretixuser
+    RUN cd /pretix/src && make production
+
+License
+-------
+
+Apache Software License 2.0
+
+References
+----------
+
+- `Pretix Plugin Development Guide <https://docs.pretix.eu/dev/development/api/index.html>`_
+- `The Pay API Documentation <https://docs.thepay.eu/>`_
+- `The Pay OpenAPI Spec <https://gate.thepay.cz/openapi.yaml>`_

pretix_thepay-9.0.18.dist-info/RECORD

@@ -0,0 +1,13 @@
+pretix_thepay/__init__.py,sha256=WM1ftBLz5HhVzbLgstZ_85ohCNYu5BlUZCwSETxLWhc,449
+pretix_thepay/apps.py,sha256=NuyUCL3dccqPU0DbGu4yS7JIey6kZ5-BXyYLvzDoNA0,1114
+pretix_thepay/payment.py,sha256=nmQyk5-ZB6_mHAAzcgnfoAUpCVMbg5IrudSXgtP8gtQ,31717
+pretix_thepay/pretix_plugin_urls.py,sha256=RDrQfsuBA326V7WBBKL6Q27aLCgXnGMINXaRYp6dO6U,211
+pretix_thepay/signals.py,sha256=t0w6D5DPv7cZPbewgol7IMl7DKtMGF30q4i-0wwqlB0,530
+pretix_thepay/urls.py,sha256=tG2vjSBIXtb4J0GuWrmjuC2NvXpvu3_5xf6kwZ9bHYI,478
+pretix_thepay/views.py,sha256=lgeC5FPjDOtdqm8UtxqHmKbx7e3mu2kRlpUXMMa1rvQ,16159
+pretix_thepay/locale/en/LC_MESSAGES/django.po,sha256=c2IiguXpHotpr3uBlDJR2GiVauyTpHMCFNHOqNMIn_M,104
+pretix_thepay-9.0.18.dist-info/METADATA,sha256=vNqYJdlNc4vjv5a-QOSJz36OZ4KAeAQ77LthvaCd-OY,3828
+pretix_thepay-9.0.18.dist-info/WHEEL,sha256=oiQVh_5PnQM0E3gPdiz09WCNmwiHDMaGer_elqB3coM,92
+pretix_thepay-9.0.18.dist-info/entry_points.txt,sha256=dlsZ6P-h88TN5VvfOmOGHQ-98-KCFjAdCi146Br5M-E,63
+pretix_thepay-9.0.18.dist-info/top_level.txt,sha256=n1Ysl4WizfC1AMjn6xkNQ9vh7T7OR-1z8ZEnNc_79mg,14
+pretix_thepay-9.0.18.dist-info/RECORD,,

pretix_thepay-9.0.18.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: bdist_wheel (0.42.0)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

pretix_thepay-9.0.18.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[pretix.plugin]
+pretix_thepay = pretix_thepay:PretixPluginMeta

pretix_thepay-9.0.18.dist-info/top_level.txt

@@ -0,0 +1 @@
+pretix_thepay