Split payments.backends and tests
Alice
8 years ago
parent
ffa2f00f67
commit
20241b2115
@ -1,679 +0,0 @@
|
||||
import json
|
||||
from ipaddress import IPv4Address, IPv4Network
|
||||
from decimal import Decimal
|
||||
|
||||
from django.shortcuts import redirect
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
from urllib.parse import urlencode
|
||||
from urllib.request import urlopen
|
||||
from django.core.urlresolvers import reverse
|
||||
from django.conf import settings as project_settings
|
||||
|
||||
|
||||
class BackendBase:
|
||||
backend_id = None
|
||||
backend_verbose_name = ""
|
||||
backend_display_name = ""
|
||||
backend_enabled = False
|
||||
backend_has_recurring = False
|
||||
|
||||
def __init__(self, settings):
|
||||
pass
|
||||
|
||||
def new_payment(self, payment):
|
||||
""" Initialize a payment and returns an URL to redirect the user.
|
||||
Can return a HTML string that will be sent back to the user in a
|
||||
default template (like a form) or a HTTP response (like a redirect).
|
||||
"""
|
||||
raise NotImplementedError()
|
||||
|
||||
def callback(self, payment, request):
|
||||
""" Handle a callback """
|
||||
raise NotImplementedError()
|
||||
|
||||
def callback_subscr(self, payment, request):
|
||||
""" Handle a callback (recurring payments) """
|
||||
raise NotImplementedError()
|
||||
|
||||
def cancel_subscription(self, subscr):
|
||||
""" Cancel a subscription """
|
||||
raise NotImplementedError()
|
||||
|
||||
def get_info(self):
|
||||
""" Returns some status (key, value) list """
|
||||
return ()
|
||||
|
||||
def get_ext_url(self, payment):
|
||||
""" Returns URL to external payment view, or None """
|
||||
return None
|
||||
|
||||
def get_subscr_ext_url(self, subscr):
|
||||
""" Returns URL to external payment view, or None """
|
||||
return None
|
||||
|
||||
|
||||
class BitcoinBackend(BackendBase):
|
||||
""" Bitcoin backend.
|
||||
Connects to a bitcoind.
|
||||
"""
|
||||
backend_id = 'bitcoin'
|
||||
backend_verbose_name = _("Bitcoin")
|
||||
backend_display_name = _("Bitcoin")
|
||||
|
||||
COIN = 100000000
|
||||
|
||||
def __init__(self, settings):
|
||||
from bitcoin import SelectParams
|
||||
from bitcoin.rpc import Proxy
|
||||
|
||||
self.btc_value = settings.get('BITCOIN_VALUE')
|
||||
self.account = settings.get('ACCOUNT', 'ccvpn3')
|
||||
|
||||
chain = settings.get('CHAIN')
|
||||
if chain:
|
||||
SelectParams(chain)
|
||||
|
||||
self.url = settings.get('URL')
|
||||
if not self.url:
|
||||
return
|
||||
|
||||
assert isinstance(self.btc_value, int)
|
||||
|
||||
self.make_rpc = lambda: Proxy(self.url)
|
||||
self.rpc = self.make_rpc()
|
||||
self.backend_enabled = True
|
||||
|
||||
def new_payment(self, payment):
|
||||
rpc = self.make_rpc()
|
||||
|
||||
# bitcoins amount = (amount in cents) / (cents per bitcoin)
|
||||
btc_price = round(Decimal(payment.amount) / self.btc_value, 5)
|
||||
|
||||
address = str(rpc.getnewaddress(self.account))
|
||||
|
||||
msg = _("Please send %(amount)s BTC to %(address)s")
|
||||
payment.status_message = msg % dict(amount=str(btc_price), address=address)
|
||||
payment.backend_extid = address
|
||||
payment.backend_data = dict(btc_price=str(btc_price), btc_address=address)
|
||||
payment.save()
|
||||
return redirect(reverse('payments:view', args=(payment.id,)))
|
||||
|
||||
def check(self, payment):
|
||||
rpc = self.make_rpc()
|
||||
|
||||
if payment.status != 'new':
|
||||
return
|
||||
|
||||
btc_price = payment.backend_data.get('btc_price')
|
||||
address = payment.backend_data.get('btc_address')
|
||||
if not btc_price or not address:
|
||||
return
|
||||
|
||||
btc_price = Decimal(btc_price)
|
||||
|
||||
received = Decimal(rpc.getreceivedbyaddress(address)) / self.COIN
|
||||
payment.paid_amount = int(received * self.btc_value)
|
||||
payment.backend_data['btc_paid_price'] = str(received)
|
||||
|
||||
if received >= btc_price:
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
|
||||
payment.status = 'confirmed'
|
||||
|
||||
payment.save()
|
||||
|
||||
def get_info(self):
|
||||
rpc = self.make_rpc()
|
||||
|
||||
try:
|
||||
info = rpc.getinfo()
|
||||
if not info:
|
||||
return [(_("Status"), "Error: got None")]
|
||||
except Exception as e:
|
||||
return [(_("Status"), "Error: " + repr(e))]
|
||||
v = info.get('version', 0)
|
||||
return (
|
||||
(_("Bitcoin value"), "%.2f €" % (self.btc_value / 100)),
|
||||
(_("Testnet"), info['testnet']),
|
||||
(_("Balance"), '{:f}'.format(info['balance'] / self.COIN)),
|
||||
(_("Blocks"), info['blocks']),
|
||||
(_("Bitcoind version"), '.'.join(str(v // 10 ** (2 * i) % 10 ** (2 * i))
|
||||
for i in range(3, -1, -1))),
|
||||
)
|
||||
|
||||
def get_ext_url(self, payment):
|
||||
if not payment.backend_extid:
|
||||
return None
|
||||
return 'http://blockr.io/address/info/%s' % payment.backend_extid
|
||||
|
||||
|
||||
class ManualBackend(BackendBase):
|
||||
""" Manual backend used to store and display informations about a
|
||||
payment processed manually.
|
||||
More a placeholder than an actual payment beckend, everything raises
|
||||
NotImplementedError().
|
||||
"""
|
||||
|
||||
backend_id = 'manual'
|
||||
backend_verbose_name = _("Manual")
|
||||
|
||||
|
||||
class PaypalBackend(BackendBase):
|
||||
backend_id = 'paypal'
|
||||
backend_verbose_name = _("PayPal")
|
||||
backend_display_name = _("PayPal")
|
||||
backend_has_recurring = True
|
||||
|
||||
def __init__(self, settings):
|
||||
self.test = settings.get('TEST', False)
|
||||
self.header_image = settings.get('HEADER_IMAGE', None)
|
||||
self.title = settings.get('TITLE', 'VPN Payment')
|
||||
self.currency = settings.get('CURRENCY', 'EUR')
|
||||
self.account_address = settings.get('ADDRESS')
|
||||
self.receiver_address = settings.get('RECEIVER', self.account_address)
|
||||
|
||||
if self.test:
|
||||
default_api = 'https://www.sandbox.paypal.com/'
|
||||
else:
|
||||
default_api = 'https://www.paypal.com/'
|
||||
self.api_base = settings.get('API_BASE', default_api)
|
||||
|
||||
if self.account_address:
|
||||
self.backend_enabled = True
|
||||
|
||||
def new_payment(self, payment):
|
||||
ROOT_URL = project_settings.ROOT_URL
|
||||
params = {
|
||||
'cmd': '_xclick',
|
||||
'notify_url': ROOT_URL + reverse('payments:cb_paypal', args=(payment.id,)),
|
||||
'item_name': self.title,
|
||||
'amount': '%.2f' % (payment.amount / 100),
|
||||
'currency_code': self.currency,
|
||||
'business': self.account_address,
|
||||
'no_shipping': '1',
|
||||
'return': ROOT_URL + reverse('payments:view', args=(payment.id,)),
|
||||
'cancel_return': ROOT_URL + reverse('payments:cancel', args=(payment.id,)),
|
||||
}
|
||||
|
||||
if self.header_image:
|
||||
params['cpp_header_image'] = self.header_image
|
||||
|
||||
payment.status_message = _("Waiting for PayPal to confirm the transaction... It can take up to a few minutes...")
|
||||
payment.save()
|
||||
|
||||
return redirect(self.api_base + '/cgi-bin/webscr?' + urlencode(params))
|
||||
|
||||
def new_subscription(self, rps):
|
||||
months = {
|
||||
'3m': 3,
|
||||
'6m': 6,
|
||||
'12m': 12,
|
||||
}[rps.period]
|
||||
|
||||
ROOT_URL = project_settings.ROOT_URL
|
||||
params = {
|
||||
'cmd': '_xclick-subscriptions',
|
||||
'notify_url': ROOT_URL + reverse('payments:cb_paypal_subscr', args=(rps.id,)),
|
||||
'item_name': self.title,
|
||||
'currency_code': self.currency,
|
||||
'business': self.account_address,
|
||||
'no_shipping': '1',
|
||||
'return': ROOT_URL + reverse('payments:return_subscr', args=(rps.id,)),
|
||||
'cancel_return': ROOT_URL + reverse('account:index'),
|
||||
|
||||
'a3': '%.2f' % (rps.period_amount / 100),
|
||||
'p3': str(months),
|
||||
't3': 'M',
|
||||
'src': '1',
|
||||
}
|
||||
|
||||
if self.header_image:
|
||||
params['cpp_header_image'] = self.header_image
|
||||
|
||||
rps.save()
|
||||
|
||||
return redirect(self.api_base + '/cgi-bin/webscr?' + urlencode(params))
|
||||
|
||||
def handle_verified_callback(self, payment, params):
|
||||
if self.test and params['test_ipn'] != '1':
|
||||
raise ValueError('Test IPN')
|
||||
|
||||
txn_type = params.get('txn_type')
|
||||
if txn_type not in (None, 'web_accept', 'express_checkout'):
|
||||
# Not handled here and can be ignored
|
||||
return
|
||||
|
||||
if params['payment_status'] == 'Refunded':
|
||||
payment.status = 'refunded'
|
||||
payment.status_message = None
|
||||
|
||||
elif params['payment_status'] == 'Completed':
|
||||
self.handle_completed_payment(payment, params)
|
||||
|
||||
def handle_verified_callback_subscr(self, subscr, params):
|
||||
if self.test and params['test_ipn'] != '1':
|
||||
raise ValueError('Test IPN')
|
||||
|
||||
txn_type = params.get('txn_type')
|
||||
if not txn_type.startswith('subscr_'):
|
||||
# Not handled here and can be ignored
|
||||
return
|
||||
|
||||
if txn_type == 'subscr_payment':
|
||||
if params['payment_status'] == 'Refunded':
|
||||
# FIXME: Find the payment and do something
|
||||
pass
|
||||
|
||||
elif params['payment_status'] == 'Completed':
|
||||
payment = subscr.create_payment()
|
||||
if not self.handle_completed_payment(payment, params):
|
||||
return
|
||||
|
||||
subscr.last_confirmed_payment = payment.created
|
||||
subscr.backend_extid = params.get('subscr_id', '')
|
||||
if subscr.status == 'new' or subscr.status == 'unconfirmed':
|
||||
subscr.status = 'active'
|
||||
subscr.save()
|
||||
elif txn_type == 'subscr_cancel' or txn_type == 'subscr_eot':
|
||||
subscr.status = 'cancelled'
|
||||
subscr.save()
|
||||
|
||||
def handle_completed_payment(self, payment, params):
|
||||
from payments.models import Payment
|
||||
|
||||
# Prevent making duplicate Payments if IPN is received twice
|
||||
pc = Payment.objects.filter(backend_extid=params['txn_id']).count()
|
||||
if pc > 0:
|
||||
return False
|
||||
|
||||
if self.receiver_address != params['receiver_email']:
|
||||
raise ValueError('Wrong receiver: ' + params['receiver_email'])
|
||||
if self.currency.lower() != params['mc_currency'].lower():
|
||||
raise ValueError('Wrong currency: ' + params['mc_currency'])
|
||||
|
||||
payment.paid_amount = int(float(params['mc_gross']) * 100)
|
||||
if payment.paid_amount < payment.amount:
|
||||
raise ValueError('Not fully paid.')
|
||||
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
|
||||
payment.backend_extid = params['txn_id']
|
||||
payment.status = 'confirmed'
|
||||
payment.status_message = None
|
||||
payment.save()
|
||||
return True
|
||||
|
||||
def verify_ipn(self, request):
|
||||
v_url = self.api_base + '/cgi-bin/webscr?cmd=_notify-validate'
|
||||
v_req = urlopen(v_url, data=request.body, timeout=5)
|
||||
v_res = v_req.read()
|
||||
return v_res == b'VERIFIED'
|
||||
|
||||
def callback(self, payment, request):
|
||||
if not self.verify_ipn(request):
|
||||
return False
|
||||
|
||||
params = request.POST
|
||||
|
||||
try:
|
||||
self.handle_verified_callback(payment, params)
|
||||
return True
|
||||
except (KeyError, ValueError) as e:
|
||||
payment.status = 'error'
|
||||
payment.status_message = None
|
||||
payment.backend_data['ipn_exception'] = repr(e)
|
||||
payment.backend_data['ipn_last_data'] = repr(request.POST)
|
||||
payment.save()
|
||||
raise
|
||||
|
||||
def callback_subscr(self, subscr, request):
|
||||
if not self.verify_ipn(request):
|
||||
return False
|
||||
|
||||
params = request.POST
|
||||
|
||||
try:
|
||||
self.handle_verified_callback_subscr(subscr, params)
|
||||
return True
|
||||
except (KeyError, ValueError) as e:
|
||||
subscr.status = 'error'
|
||||
subscr.status_message = None
|
||||
subscr.backend_data['ipn_exception'] = repr(e)
|
||||
subscr.backend_data['ipn_last_data'] = repr(request.POST)
|
||||
subscr.save()
|
||||
raise
|
||||
|
||||
def get_ext_url(self, payment):
|
||||
if not payment.backend_extid:
|
||||
return None
|
||||
url = 'https://history.paypal.com/webscr?cmd=_history-details-from-hub&id=%s'
|
||||
return url % payment.backend_extid
|
||||
|
||||
|
||||
class StripeBackend(BackendBase):
|
||||
backend_id = 'stripe'
|
||||
backend_verbose_name = _("Stripe")
|
||||
backend_display_name = _("Credit Card")
|
||||
backend_has_recurring = True
|
||||
|
||||
def get_plan_id(self, period):
|
||||
return 'ccvpn_' + period
|
||||
|
||||
def __init__(self, settings):
|
||||
if 'API_KEY' not in settings or 'PUBLIC_KEY' not in settings:
|
||||
return
|
||||
|
||||
import stripe
|
||||
self.stripe = stripe
|
||||
|
||||
stripe.api_key = settings['API_KEY']
|
||||
self.pubkey = settings['PUBLIC_KEY']
|
||||
self.header_image = settings.get('HEADER_IMAGE', '')
|
||||
self.currency = settings.get('CURRENCY', 'EUR')
|
||||
self.name = settings.get('NAME', 'VPN Payment')
|
||||
|
||||
self.backend_enabled = True
|
||||
|
||||
def new_payment(self, payment):
|
||||
desc = str(payment.time) + ' for ' + payment.user.username
|
||||
form = '''
|
||||
<form action="{post}" method="POST">
|
||||
<script
|
||||
src="https://checkout.stripe.com/checkout.js" class="stripe-button"
|
||||
data-key="{pubkey}"
|
||||
data-image="{img}"
|
||||
data-name="{name}"
|
||||
data-currency="{curr}"
|
||||
data-description="{desc}"
|
||||
data-amount="{amount}"
|
||||
data-email="{email}"
|
||||
data-locale="auto"
|
||||
data-zip-code="true"
|
||||
data-alipay="true">
|
||||
</script>
|
||||
</form>
|
||||
'''
|
||||
return form.format(
|
||||
post=reverse('payments:cb_stripe', args=(payment.id,)),
|
||||
pubkey=self.pubkey,
|
||||
img=self.header_image,
|
||||
email=payment.user.email or '',
|
||||
name=self.name,
|
||||
desc=desc,
|
||||
amount=payment.amount,
|
||||
curr=self.currency,
|
||||
)
|
||||
|
||||
def new_subscription(self, subscr):
|
||||
desc = 'Subscription (' + str(subscr.period) + ') for ' + subscr.user.username
|
||||
form = '''
|
||||
<form action="{post}" method="POST">
|
||||
<script
|
||||
src="https://checkout.stripe.com/checkout.js" class="stripe-button"
|
||||
data-key="{pubkey}"
|
||||
data-image="{img}"
|
||||
data-name="{name}"
|
||||
data-currency="{curr}"
|
||||
data-description="{desc}"
|
||||
data-amount="{amount}"
|
||||
data-email="{email}"
|
||||
data-locale="auto"
|
||||
data-zip-code="true"
|
||||
data-alipay="true">
|
||||
</script>
|
||||
</form>
|
||||
'''
|
||||
return form.format(
|
||||
post=reverse('payments:cb_stripe_subscr', args=(subscr.id,)),
|
||||
pubkey=self.pubkey,
|
||||
img=self.header_image,
|
||||
email=subscr.user.email or '',
|
||||
name=self.name,
|
||||
desc=desc,
|
||||
amount=subscr.period_amount,
|
||||
curr=self.currency,
|
||||
)
|
||||
|
||||
def cancel_subscription(self, subscr):
|
||||
if subscr.status not in ('new', 'unconfirmed', 'active'):
|
||||
return
|
||||
|
||||
try:
|
||||
cust = self.stripe.Customer.retrieve(subscr.backend_extid)
|
||||
except self.stripe.error.InvalidRequestError:
|
||||
return
|
||||
|
||||
try:
|
||||
# Delete customer and cancel any active subscription
|
||||
cust.delete()
|
||||
except self.stripe.error.InvalidRequestError:
|
||||
pass
|
||||
|
||||
subscr.status = 'cancelled'
|
||||
subscr.save()
|
||||
|
||||
def callback(self, payment, request):
|
||||
post_data = request.POST
|
||||
|
||||
token = post_data.get('stripeToken')
|
||||
if not token:
|
||||
payment.status = 'cancelled'
|
||||
payment.status_message = _("No payment information was received.")
|
||||
return
|
||||
|
||||
months = int(payment.time.days / 30)
|
||||
username = payment.user.username
|
||||
|
||||
try:
|
||||
charge = self.stripe.Charge.create(
|
||||
amount=payment.amount,
|
||||
currency=self.currency,
|
||||
card=token,
|
||||
description="%d months for %s" % (months, username),
|
||||
)
|
||||
payment.backend_extid = charge['id']
|
||||
|
||||
if charge['refunded'] or not charge['paid']:
|
||||
payment.status = 'rejected'
|
||||
payment.status_message = _("The payment has been refunded or rejected.")
|
||||
payment.save()
|
||||
return
|
||||
|
||||
payment.paid_amount = int(charge['amount'])
|
||||
|
||||
if payment.paid_amount < payment.amount:
|
||||
payment.status = 'error'
|
||||
payment.status_message = _("The paid amount is under the required amount.")
|
||||
payment.save()
|
||||
return
|
||||
|
||||
payment.status = 'confirmed'
|
||||
payment.status_message = None
|
||||
payment.save()
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
|
||||
except self.stripe.error.CardError as e:
|
||||
payment.status = 'rejected'
|
||||
payment.status_message = e.json_body['error']['message']
|
||||
payment.save()
|
||||
|
||||
def callback_subscr(self, subscr, request):
|
||||
post_data = request.POST
|
||||
token = post_data.get('stripeToken')
|
||||
if not token:
|
||||
subscr.status = 'cancelled'
|
||||
subscr.save()
|
||||
return
|
||||
|
||||
try:
|
||||
cust = self.stripe.Customer.create(
|
||||
source=token,
|
||||
plan=self.get_plan_id(subscr.period),
|
||||
)
|
||||
except self.stripe.error.InvalidRequestError:
|
||||
return
|
||||
|
||||
try:
|
||||
if subscr.status == 'new':
|
||||
subscr.status = 'unconfirmed'
|
||||
subscr.backend_extid = cust['id']
|
||||
subscr.save()
|
||||
except (self.stripe.error.InvalidRequestError, self.stripe.error.CardError) as e:
|
||||
subscr.status = 'error'
|
||||
subscr.backend_data['stripe_error'] = e.json_body['error']['message']
|
||||
subscr.save()
|
||||
|
||||
def webhook_payment_succeeded(self, event):
|
||||
from payments.models import Subscription, Payment
|
||||
|
||||
invoice = event['data']['object']
|
||||
customer_id = invoice['customer']
|
||||
|
||||
# Prevent making duplicate Payments if event is received twice
|
||||
pc = Payment.objects.filter(backend_extid=invoice['id']).count()
|
||||
if pc > 0:
|
||||
return
|
||||
|
||||
subscr = Subscription.objects.get(backend_extid=customer_id)
|
||||
payment = subscr.create_payment()
|
||||
payment.status = 'confirmed'
|
||||
payment.paid_amount = invoice['total']
|
||||
payment.backend_extid = invoice['id']
|
||||
payment.backend_data = {'event_id': event['id']}
|
||||
payment.save()
|
||||
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
payment.save()
|
||||
|
||||
subscr.status = 'active'
|
||||
subscr.save()
|
||||
|
||||
def webhook(self, request):
|
||||
try:
|
||||
event_json = json.loads(request.body.decode('utf-8'))
|
||||
event = self.stripe.Event.retrieve(event_json["id"])
|
||||
except (ValueError, self.stripe.error.InvalidRequestError):
|
||||
return False
|
||||
|
||||
if event['type'] == 'invoice.payment_succeeded':
|
||||
self.webhook_payment_succeeded(event)
|
||||
return True
|
||||
|
||||
def get_ext_url(self, payment):
|
||||
if not payment.backend_extid:
|
||||
return None
|
||||
return 'https://dashboard.stripe.com/payments/%s' % payment.backend_extid
|
||||
|
||||
def get_subscr_ext_url(self, subscr):
|
||||
if not subscr.backend_extid:
|
||||
return None
|
||||
return 'https://dashboard.stripe.com/customers/%s' % subscr.backend_extid
|
||||
|
||||
|
||||
class CoinbaseBackend(BackendBase):
|
||||
backend_id = 'coinbase'
|
||||
backend_verbose_name = _("Coinbase")
|
||||
backend_display_name = _("Bitcoin with CoinBase")
|
||||
|
||||
def __init__(self, settings):
|
||||
self.sandbox = settings.get('SANDBOX', False)
|
||||
if self.sandbox:
|
||||
default_site = 'https://sandbox.coinbase.com/'
|
||||
default_base = 'https://api.sandbox.coinbase.com/'
|
||||
else:
|
||||
default_site = 'https://www.coinbase.com/'
|
||||
default_base = 'https://api.coinbase.com/'
|
||||
|
||||
self.currency = settings.get('CURRENCY', 'EUR')
|
||||
self.key = settings.get('KEY')
|
||||
self.secret = settings.get('SECRET')
|
||||
self.base = settings.get('BASE_URL', default_base)
|
||||
self.site = settings.get('SITE_URL', default_site)
|
||||
|
||||
self.callback_secret = settings.get('CALLBACK_SECRET')
|
||||
self.callback_source_ip = settings.get('CALLBACK_SOURCE', '54.175.255.192/27')
|
||||
|
||||
if not self.key or not self.secret or not self.callback_secret:
|
||||
return
|
||||
|
||||
from coinbase.wallet.client import Client
|
||||
self.client = Client(self.key, self.secret, self.base)
|
||||
self.backend_enabled = True
|
||||
|
||||
def new_payment(self, payment):
|
||||
ROOT_URL = project_settings.ROOT_URL
|
||||
|
||||
months = int(payment.time.days / 30)
|
||||
username = payment.user.username
|
||||
|
||||
amount_str = '%.2f' % (payment.amount / 100)
|
||||
name = "%d months for %s" % (months, username)
|
||||
checkout = self.client.create_checkout(
|
||||
amount=amount_str,
|
||||
currency=self.currency,
|
||||
name=name,
|
||||
success_url=ROOT_URL + reverse('payments:view', args=(payment.id,)),
|
||||
cancel_url=ROOT_URL + reverse('payments:cancel', args=(payment.id,)),
|
||||
metadata={'payment_id': payment.id},
|
||||
)
|
||||
embed_id = checkout['embed_code']
|
||||
payment.backend_data['checkout_id'] = checkout['id']
|
||||
payment.backend_data['embed_code'] = checkout['embed_code']
|
||||
return redirect(self.site + 'checkouts/' + embed_id
|
||||
+ '?custom=' + str(payment.id))
|
||||
|
||||
def callback(self, Payment, request):
|
||||
if self.callback_source_ip:
|
||||
if ('.' in request.META['REMOTE_ADDR']) != ('.' in self.callback_source_ip):
|
||||
print("source IP version")
|
||||
print(repr(request.META.get('REMOTE_ADDR')))
|
||||
print(repr(self.callback_source_ip))
|
||||
return False # IPv6 TODO
|
||||
net = IPv4Network(self.callback_source_ip)
|
||||
if IPv4Address(request.META['REMOTE_ADDR']) not in net:
|
||||
print("source IP")
|
||||
return False
|
||||
|
||||
secret = request.GET.get('secret')
|
||||
if secret != self.callback_secret:
|
||||
print("secret")
|
||||
return False
|
||||
|
||||
data = json.loads(request.body.decode('utf-8'))
|
||||
order = data.get('order')
|
||||
|
||||
if not order:
|
||||
# OK but we don't care
|
||||
print("order")
|
||||
return True
|
||||
|
||||
id = order.get('custom')
|
||||
try:
|
||||
payment = Payment.objects.get(id=id)
|
||||
except Payment.DoesNotExist:
|
||||
# Wrong ID - Valid request, ignore
|
||||
print("wrong payment")
|
||||
return True
|
||||
|
||||
button = order.get('button')
|
||||
if not button:
|
||||
# Wrong structure.
|
||||
print("button")
|
||||
return False
|
||||
|
||||
payment.status = 'confirmed'
|
||||
payment.save()
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
return True
|
||||
|
||||
|
||||
@ -0,0 +1,8 @@
|
||||
# flake8: noqa
|
||||
|
||||
from .base import BackendBase, ManualBackend
|
||||
from .paypal import PaypalBackend
|
||||
from .bitcoin import BitcoinBackend
|
||||
from .stripe import StripeBackend
|
||||
from .coinbase import CoinbaseBackend
|
||||
|
||||
@ -0,0 +1,56 @@
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
|
||||
|
||||
class BackendBase:
|
||||
backend_id = None
|
||||
backend_verbose_name = ""
|
||||
backend_display_name = ""
|
||||
backend_enabled = False
|
||||
backend_has_recurring = False
|
||||
|
||||
def __init__(self, settings):
|
||||
pass
|
||||
|
||||
def new_payment(self, payment):
|
||||
""" Initialize a payment and returns an URL to redirect the user.
|
||||
Can return a HTML string that will be sent back to the user in a
|
||||
default template (like a form) or a HTTP response (like a redirect).
|
||||
"""
|
||||
raise NotImplementedError()
|
||||
|
||||
def callback(self, payment, request):
|
||||
""" Handle a callback """
|
||||
raise NotImplementedError()
|
||||
|
||||
def callback_subscr(self, payment, request):
|
||||
""" Handle a callback (recurring payments) """
|
||||
raise NotImplementedError()
|
||||
|
||||
def cancel_subscription(self, subscr):
|
||||
""" Cancel a subscription """
|
||||
raise NotImplementedError()
|
||||
|
||||
def get_info(self):
|
||||
""" Returns some status (key, value) list """
|
||||
return ()
|
||||
|
||||
def get_ext_url(self, payment):
|
||||
""" Returns URL to external payment view, or None """
|
||||
return None
|
||||
|
||||
def get_subscr_ext_url(self, subscr):
|
||||
""" Returns URL to external payment view, or None """
|
||||
return None
|
||||
|
||||
|
||||
class ManualBackend(BackendBase):
|
||||
""" Manual backend used to store and display informations about a
|
||||
payment processed manually.
|
||||
More a placeholder than an actual payment beckend, everything raises
|
||||
NotImplementedError().
|
||||
"""
|
||||
|
||||
backend_id = 'manual'
|
||||
backend_verbose_name = _("Manual")
|
||||
|
||||
|
||||
@ -0,0 +1,106 @@
|
||||
from decimal import Decimal
|
||||
|
||||
from django.shortcuts import redirect
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
from django.core.urlresolvers import reverse
|
||||
|
||||
from .base import BackendBase
|
||||
|
||||
|
||||
class BitcoinBackend(BackendBase):
|
||||
""" Bitcoin backend.
|
||||
Connects to a bitcoind.
|
||||
"""
|
||||
backend_id = 'bitcoin'
|
||||
backend_verbose_name = _("Bitcoin")
|
||||
backend_display_name = _("Bitcoin")
|
||||
|
||||
COIN = 100000000
|
||||
|
||||
def __init__(self, settings):
|
||||
from bitcoin import SelectParams
|
||||
from bitcoin.rpc import Proxy
|
||||
|
||||
self.btc_value = settings.get('BITCOIN_VALUE')
|
||||
self.account = settings.get('ACCOUNT', 'ccvpn3')
|
||||
|
||||
chain = settings.get('CHAIN')
|
||||
if chain:
|
||||
SelectParams(chain)
|
||||
|
||||
self.url = settings.get('URL')
|
||||
if not self.url:
|
||||
return
|
||||
|
||||
assert isinstance(self.btc_value, int)
|
||||
|
||||
self.make_rpc = lambda: Proxy(self.url)
|
||||
self.rpc = self.make_rpc()
|
||||
self.backend_enabled = True
|
||||
|
||||
def new_payment(self, payment):
|
||||
rpc = self.make_rpc()
|
||||
|
||||
# bitcoins amount = (amount in cents) / (cents per bitcoin)
|
||||
btc_price = round(Decimal(payment.amount) / self.btc_value, 5)
|
||||
|
||||
address = str(rpc.getnewaddress(self.account))
|
||||
|
||||
msg = _("Please send %(amount)s BTC to %(address)s")
|
||||
payment.status_message = msg % dict(amount=str(btc_price), address=address)
|
||||
payment.backend_extid = address
|
||||
payment.backend_data = dict(btc_price=str(btc_price), btc_address=address)
|
||||
payment.save()
|
||||
return redirect(reverse('payments:view', args=(payment.id,)))
|
||||
|
||||
def check(self, payment):
|
||||
rpc = self.make_rpc()
|
||||
|
||||
if payment.status != 'new':
|
||||
return
|
||||
|
||||
btc_price = payment.backend_data.get('btc_price')
|
||||
address = payment.backend_data.get('btc_address')
|
||||
if not btc_price or not address:
|
||||
return
|
||||
|
||||
btc_price = Decimal(btc_price)
|
||||
|
||||
received = Decimal(rpc.getreceivedbyaddress(address)) / self.COIN
|
||||
payment.paid_amount = int(received * self.btc_value)
|
||||
payment.backend_data['btc_paid_price'] = str(received)
|
||||
|
||||
if received >= btc_price:
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
|
||||
payment.status = 'confirmed'
|
||||
|
||||
payment.save()
|
||||
|
||||
def get_info(self):
|
||||
rpc = self.make_rpc()
|
||||
|
||||
try:
|
||||
info = rpc.getinfo()
|
||||
if not info:
|
||||
return [(_("Status"), "Error: got None")]
|
||||
except Exception as e:
|
||||
return [(_("Status"), "Error: " + repr(e))]
|
||||
v = info.get('version', 0)
|
||||
return (
|
||||
(_("Bitcoin value"), "%.2f €" % (self.btc_value / 100)),
|
||||
(_("Testnet"), info['testnet']),
|
||||
(_("Balance"), '{:f}'.format(info['balance'] / self.COIN)),
|
||||
(_("Blocks"), info['blocks']),
|
||||
(_("Bitcoind version"), '.'.join(str(v // 10 ** (2 * i) % 10 ** (2 * i))
|
||||
for i in range(3, -1, -1))),
|
||||
)
|
||||
|
||||
def get_ext_url(self, payment):
|
||||
if not payment.backend_extid:
|
||||
return None
|
||||
return 'http://blockr.io/address/info/%s' % payment.backend_extid
|
||||
|
||||
|
||||
@ -0,0 +1,110 @@
|
||||
import json
|
||||
from ipaddress import IPv4Address, IPv4Network
|
||||
|
||||
from django.shortcuts import redirect
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
from django.core.urlresolvers import reverse
|
||||
from django.conf import settings as project_settings
|
||||
|
||||
from .base import BackendBase
|
||||
|
||||
|
||||
class CoinbaseBackend(BackendBase):
|
||||
backend_id = 'coinbase'
|
||||
backend_verbose_name = _("Coinbase")
|
||||
backend_display_name = _("Bitcoin with CoinBase")
|
||||
|
||||
def __init__(self, settings):
|
||||
self.sandbox = settings.get('SANDBOX', False)
|
||||
if self.sandbox:
|
||||
default_site = 'https://sandbox.coinbase.com/'
|
||||
default_base = 'https://api.sandbox.coinbase.com/'
|
||||
else:
|
||||
default_site = 'https://www.coinbase.com/'
|
||||
default_base = 'https://api.coinbase.com/'
|
||||
|
||||
self.currency = settings.get('CURRENCY', 'EUR')
|
||||
self.key = settings.get('KEY')
|
||||
self.secret = settings.get('SECRET')
|
||||
self.base = settings.get('BASE_URL', default_base)
|
||||
self.site = settings.get('SITE_URL', default_site)
|
||||
|
||||
self.callback_secret = settings.get('CALLBACK_SECRET')
|
||||
self.callback_source_ip = settings.get('CALLBACK_SOURCE', '54.175.255.192/27')
|
||||
|
||||
if not self.key or not self.secret or not self.callback_secret:
|
||||
return
|
||||
|
||||
from coinbase.wallet.client import Client
|
||||
self.client = Client(self.key, self.secret, self.base)
|
||||
self.backend_enabled = True
|
||||
|
||||
def new_payment(self, payment):
|
||||
ROOT_URL = project_settings.ROOT_URL
|
||||
|
||||
months = int(payment.time.days / 30)
|
||||
username = payment.user.username
|
||||
|
||||
amount_str = '%.2f' % (payment.amount / 100)
|
||||
name = "%d months for %s" % (months, username)
|
||||
checkout = self.client.create_checkout(
|
||||
amount=amount_str,
|
||||
currency=self.currency,
|
||||
name=name,
|
||||
success_url=ROOT_URL + reverse('payments:view', args=(payment.id,)),
|
||||
cancel_url=ROOT_URL + reverse('payments:cancel', args=(payment.id,)),
|
||||
metadata={'payment_id': payment.id},
|
||||
)
|
||||
embed_id = checkout['embed_code']
|
||||
payment.backend_data['checkout_id'] = checkout['id']
|
||||
payment.backend_data['embed_code'] = checkout['embed_code']
|
||||
return redirect(self.site + 'checkouts/' + embed_id +
|
||||
'?custom=' + str(payment.id))
|
||||
|
||||
def callback(self, Payment, request):
|
||||
if self.callback_source_ip:
|
||||
if ('.' in request.META['REMOTE_ADDR']) != ('.' in self.callback_source_ip):
|
||||
print("source IP version")
|
||||
print(repr(request.META.get('REMOTE_ADDR')))
|
||||
print(repr(self.callback_source_ip))
|
||||
return False # IPv6 TODO
|
||||
net = IPv4Network(self.callback_source_ip)
|
||||
if IPv4Address(request.META['REMOTE_ADDR']) not in net:
|
||||
print("source IP")
|
||||
return False
|
||||
|
||||
secret = request.GET.get('secret')
|
||||
if secret != self.callback_secret:
|
||||
print("secret")
|
||||
return False
|
||||
|
||||
data = json.loads(request.body.decode('utf-8'))
|
||||
order = data.get('order')
|
||||
|
||||
if not order:
|
||||
# OK but we don't care
|
||||
print("order")
|
||||
return True
|
||||
|
||||
id = order.get('custom')
|
||||
try:
|
||||
payment = Payment.objects.get(id=id)
|
||||
except Payment.DoesNotExist:
|
||||
# Wrong ID - Valid request, ignore
|
||||
print("wrong payment")
|
||||
return True
|
||||
|
||||
button = order.get('button')
|
||||
if not button:
|
||||
# Wrong structure.
|
||||
print("button")
|
||||
return False
|
||||
|
||||
payment.status = 'confirmed'
|
||||
payment.save()
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
return True
|
||||
|
||||
|
||||
@ -0,0 +1,204 @@
|
||||
from django.shortcuts import redirect
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
from urllib.parse import urlencode
|
||||
from urllib.request import urlopen
|
||||
from django.core.urlresolvers import reverse
|
||||
from django.conf import settings as project_settings
|
||||
|
||||
from .base import BackendBase
|
||||
|
||||
|
||||
class PaypalBackend(BackendBase):
|
||||
backend_id = 'paypal'
|
||||
backend_verbose_name = _("PayPal")
|
||||
backend_display_name = _("PayPal")
|
||||
backend_has_recurring = True
|
||||
|
||||
def __init__(self, settings):
|
||||
self.test = settings.get('TEST', False)
|
||||
self.header_image = settings.get('HEADER_IMAGE', None)
|
||||
self.title = settings.get('TITLE', 'VPN Payment')
|
||||
self.currency = settings.get('CURRENCY', 'EUR')
|
||||
self.account_address = settings.get('ADDRESS')
|
||||
self.receiver_address = settings.get('RECEIVER', self.account_address)
|
||||
|
||||
if self.test:
|
||||
default_api = 'https://www.sandbox.paypal.com/'
|
||||
else:
|
||||
default_api = 'https://www.paypal.com/'
|
||||
self.api_base = settings.get('API_BASE', default_api)
|
||||
|
||||
if self.account_address:
|
||||
self.backend_enabled = True
|
||||
|
||||
def new_payment(self, payment):
|
||||
ROOT_URL = project_settings.ROOT_URL
|
||||
params = {
|
||||
'cmd': '_xclick',
|
||||
'notify_url': ROOT_URL + reverse('payments:cb_paypal', args=(payment.id,)),
|
||||
'item_name': self.title,
|
||||
'amount': '%.2f' % (payment.amount / 100),
|
||||
'currency_code': self.currency,
|
||||
'business': self.account_address,
|
||||
'no_shipping': '1',
|
||||
'return': ROOT_URL + reverse('payments:view', args=(payment.id,)),
|
||||
'cancel_return': ROOT_URL + reverse('payments:cancel', args=(payment.id,)),
|
||||
}
|
||||
|
||||
if self.header_image:
|
||||
params['cpp_header_image'] = self.header_image
|
||||
|
||||
payment.status_message = _("Waiting for PayPal to confirm the transaction... " +
|
||||
"It can take up to a few minutes...")
|
||||
payment.save()
|
||||
|
||||
return redirect(self.api_base + '/cgi-bin/webscr?' + urlencode(params))
|
||||
|
||||
def new_subscription(self, rps):
|
||||
months = {
|
||||
'3m': 3,
|
||||
'6m': 6,
|
||||
'12m': 12,
|
||||
}[rps.period]
|
||||
|
||||
ROOT_URL = project_settings.ROOT_URL
|
||||
params = {
|
||||
'cmd': '_xclick-subscriptions',
|
||||
'notify_url': ROOT_URL + reverse('payments:cb_paypal_subscr', args=(rps.id,)),
|
||||
'item_name': self.title,
|
||||
'currency_code': self.currency,
|
||||
'business': self.account_address,
|
||||
'no_shipping': '1',
|
||||
'return': ROOT_URL + reverse('payments:return_subscr', args=(rps.id,)),
|
||||
'cancel_return': ROOT_URL + reverse('account:index'),
|
||||
|
||||
'a3': '%.2f' % (rps.period_amount / 100),
|
||||
'p3': str(months),
|
||||
't3': 'M',
|
||||
'src': '1',
|
||||
}
|
||||
|
||||
if self.header_image:
|
||||
params['cpp_header_image'] = self.header_image
|
||||
|
||||
rps.save()
|
||||
|
||||
return redirect(self.api_base + '/cgi-bin/webscr?' + urlencode(params))
|
||||
|
||||
def handle_verified_callback(self, payment, params):
|
||||
if self.test and params['test_ipn'] != '1':
|
||||
raise ValueError('Test IPN')
|
||||
|
||||
txn_type = params.get('txn_type')
|
||||
if txn_type not in (None, 'web_accept', 'express_checkout'):
|
||||
# Not handled here and can be ignored
|
||||
return
|
||||
|
||||
if params['payment_status'] == 'Refunded':
|
||||
payment.status = 'refunded'
|
||||
payment.status_message = None
|
||||
|
||||
elif params['payment_status'] == 'Completed':
|
||||
self.handle_completed_payment(payment, params)
|
||||
|
||||
def handle_verified_callback_subscr(self, subscr, params):
|
||||
if self.test and params['test_ipn'] != '1':
|
||||
raise ValueError('Test IPN')
|
||||
|
||||
txn_type = params.get('txn_type')
|
||||
if not txn_type.startswith('subscr_'):
|
||||
# Not handled here and can be ignored
|
||||
return
|
||||
|
||||
if txn_type == 'subscr_payment':
|
||||
if params['payment_status'] == 'Refunded':
|
||||
# FIXME: Find the payment and do something
|
||||
pass
|
||||
|
||||
elif params['payment_status'] == 'Completed':
|
||||
payment = subscr.create_payment()
|
||||
if not self.handle_completed_payment(payment, params):
|
||||
return
|
||||
|
||||
subscr.last_confirmed_payment = payment.created
|
||||
subscr.backend_extid = params.get('subscr_id', '')
|
||||
if subscr.status == 'new' or subscr.status == 'unconfirmed':
|
||||
subscr.status = 'active'
|
||||
subscr.save()
|
||||
elif txn_type == 'subscr_cancel' or txn_type == 'subscr_eot':
|
||||
subscr.status = 'cancelled'
|
||||
subscr.save()
|
||||
|
||||
def handle_completed_payment(self, payment, params):
|
||||
from payments.models import Payment
|
||||
|
||||
# Prevent making duplicate Payments if IPN is received twice
|
||||
pc = Payment.objects.filter(backend_extid=params['txn_id']).count()
|
||||
if pc > 0:
|
||||
return False
|
||||
|
||||
if self.receiver_address != params['receiver_email']:
|
||||
raise ValueError('Wrong receiver: ' + params['receiver_email'])
|
||||
if self.currency.lower() != params['mc_currency'].lower():
|
||||
raise ValueError('Wrong currency: ' + params['mc_currency'])
|
||||
|
||||
payment.paid_amount = int(float(params['mc_gross']) * 100)
|
||||
if payment.paid_amount < payment.amount:
|
||||
raise ValueError('Not fully paid.')
|
||||
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
|
||||
payment.backend_extid = params['txn_id']
|
||||
payment.status = 'confirmed'
|
||||
payment.status_message = None
|
||||
payment.save()
|
||||
return True
|
||||
|
||||
def verify_ipn(self, request):
|
||||
v_url = self.api_base + '/cgi-bin/webscr?cmd=_notify-validate'
|
||||
v_req = urlopen(v_url, data=request.body, timeout=5)
|
||||
v_res = v_req.read()
|
||||
return v_res == b'VERIFIED'
|
||||
|
||||
def callback(self, payment, request):
|
||||
if not self.verify_ipn(request):
|
||||
return False
|
||||
|
||||
params = request.POST
|
||||
|
||||
try:
|
||||
self.handle_verified_callback(payment, params)
|
||||
return True
|
||||
except (KeyError, ValueError) as e:
|
||||
payment.status = 'error'
|
||||
payment.status_message = None
|
||||
payment.backend_data['ipn_exception'] = repr(e)
|
||||
payment.backend_data['ipn_last_data'] = repr(request.POST)
|
||||
payment.save()
|
||||
raise
|
||||
|
||||
def callback_subscr(self, subscr, request):
|
||||
if not self.verify_ipn(request):
|
||||
return False
|
||||
|
||||
params = request.POST
|
||||
|
||||
try:
|
||||
self.handle_verified_callback_subscr(subscr, params)
|
||||
return True
|
||||
except (KeyError, ValueError) as e:
|
||||
subscr.status = 'error'
|
||||
subscr.status_message = None
|
||||
subscr.backend_data['ipn_exception'] = repr(e)
|
||||
subscr.backend_data['ipn_last_data'] = repr(request.POST)
|
||||
subscr.save()
|
||||
raise
|
||||
|
||||
def get_ext_url(self, payment):
|
||||
if not payment.backend_extid:
|
||||
return None
|
||||
url = 'https://history.paypal.com/webscr?cmd=_history-details-from-hub&id=%s'
|
||||
return url % payment.backend_extid
|
||||
|
||||
@ -0,0 +1,230 @@
|
||||
import json
|
||||
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
from django.core.urlresolvers import reverse
|
||||
|
||||
from .base import BackendBase
|
||||
|
||||
|
||||
class StripeBackend(BackendBase):
|
||||
backend_id = 'stripe'
|
||||
backend_verbose_name = _("Stripe")
|
||||
backend_display_name = _("Credit Card")
|
||||
backend_has_recurring = True
|
||||
|
||||
def get_plan_id(self, period):
|
||||
return 'ccvpn_' + period
|
||||
|
||||
def __init__(self, settings):
|
||||
if 'API_KEY' not in settings or 'PUBLIC_KEY' not in settings:
|
||||
return
|
||||
|
||||
import stripe
|
||||
self.stripe = stripe
|
||||
|
||||
stripe.api_key = settings['API_KEY']
|
||||
self.pubkey = settings['PUBLIC_KEY']
|
||||
self.header_image = settings.get('HEADER_IMAGE', '')
|
||||
self.currency = settings.get('CURRENCY', 'EUR')
|
||||
self.name = settings.get('NAME', 'VPN Payment')
|
||||
|
||||
self.backend_enabled = True
|
||||
|
||||
def new_payment(self, payment):
|
||||
desc = str(payment.time) + ' for ' + payment.user.username
|
||||
form = '''
|
||||
<form action="{post}" method="POST">
|
||||
<script
|
||||
src="https://checkout.stripe.com/checkout.js" class="stripe-button"
|
||||
data-key="{pubkey}"
|
||||
data-image="{img}"
|
||||
data-name="{name}"
|
||||
data-currency="{curr}"
|
||||
data-description="{desc}"
|
||||
data-amount="{amount}"
|
||||
data-email="{email}"
|
||||
data-locale="auto"
|
||||
data-zip-code="true"
|
||||
data-alipay="true">
|
||||
</script>
|
||||
</form>
|
||||
'''
|
||||
return form.format(
|
||||
post=reverse('payments:cb_stripe', args=(payment.id,)),
|
||||
pubkey=self.pubkey,
|
||||
img=self.header_image,
|
||||
email=payment.user.email or '',
|
||||
name=self.name,
|
||||
desc=desc,
|
||||
amount=payment.amount,
|
||||
curr=self.currency,
|
||||
)
|
||||
|
||||
def new_subscription(self, subscr):
|
||||
desc = 'Subscription (' + str(subscr.period) + ') for ' + subscr.user.username
|
||||
form = '''
|
||||
<form action="{post}" method="POST">
|
||||
<script
|
||||
src="https://checkout.stripe.com/checkout.js" class="stripe-button"
|
||||
data-key="{pubkey}"
|
||||
data-image="{img}"
|
||||
data-name="{name}"
|
||||
data-currency="{curr}"
|
||||
data-description="{desc}"
|
||||
data-amount="{amount}"
|
||||
data-email="{email}"
|
||||
data-locale="auto"
|
||||
data-zip-code="true"
|
||||
data-alipay="true">
|
||||
</script>
|
||||
</form>
|
||||
'''
|
||||
return form.format(
|
||||
post=reverse('payments:cb_stripe_subscr', args=(subscr.id,)),
|
||||
pubkey=self.pubkey,
|
||||
img=self.header_image,
|
||||
email=subscr.user.email or '',
|
||||
name=self.name,
|
||||
desc=desc,
|
||||
amount=subscr.period_amount,
|
||||
curr=self.currency,
|
||||
)
|
||||
|
||||
def cancel_subscription(self, subscr):
|
||||
if subscr.status not in ('new', 'unconfirmed', 'active'):
|
||||
return
|
||||
|
||||
try:
|
||||
cust = self.stripe.Customer.retrieve(subscr.backend_extid)
|
||||
except self.stripe.error.InvalidRequestError:
|
||||
return
|
||||
|
||||
try:
|
||||
# Delete customer and cancel any active subscription
|
||||
cust.delete()
|
||||
except self.stripe.error.InvalidRequestError:
|
||||
pass
|
||||
|
||||
subscr.status = 'cancelled'
|
||||
subscr.save()
|
||||
|
||||
def callback(self, payment, request):
|
||||
post_data = request.POST
|
||||
|
||||
token = post_data.get('stripeToken')
|
||||
if not token:
|
||||
payment.status = 'cancelled'
|
||||
payment.status_message = _("No payment information was received.")
|
||||
return
|
||||
|
||||
months = int(payment.time.days / 30)
|
||||
username = payment.user.username
|
||||
|
||||
try:
|
||||
charge = self.stripe.Charge.create(
|
||||
amount=payment.amount,
|
||||
currency=self.currency,
|
||||
card=token,
|
||||
description="%d months for %s" % (months, username),
|
||||
)
|
||||
payment.backend_extid = charge['id']
|
||||
|
||||
if charge['refunded'] or not charge['paid']:
|
||||
payment.status = 'rejected'
|
||||
payment.status_message = _("The payment has been refunded or rejected.")
|
||||
payment.save()
|
||||
return
|
||||
|
||||
payment.paid_amount = int(charge['amount'])
|
||||
|
||||
if payment.paid_amount < payment.amount:
|
||||
payment.status = 'error'
|
||||
payment.status_message = _("The paid amount is under the required amount.")
|
||||
payment.save()
|
||||
return
|
||||
|
||||
payment.status = 'confirmed'
|
||||
payment.status_message = None
|
||||
payment.save()
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
|
||||
except self.stripe.error.CardError as e:
|
||||
payment.status = 'rejected'
|
||||
payment.status_message = e.json_body['error']['message']
|
||||
payment.save()
|
||||
|
||||
def callback_subscr(self, subscr, request):
|
||||
post_data = request.POST
|
||||
token = post_data.get('stripeToken')
|
||||
if not token:
|
||||
subscr.status = 'cancelled'
|
||||
subscr.save()
|
||||
return
|
||||
|
||||
try:
|
||||
cust = self.stripe.Customer.create(
|
||||
source=token,
|
||||
plan=self.get_plan_id(subscr.period),
|
||||
)
|
||||
except self.stripe.error.InvalidRequestError:
|
||||
return
|
||||
|
||||
try:
|
||||
if subscr.status == 'new':
|
||||
subscr.status = 'unconfirmed'
|
||||
subscr.backend_extid = cust['id']
|
||||
subscr.save()
|
||||
except (self.stripe.error.InvalidRequestError, self.stripe.error.CardError) as e:
|
||||
subscr.status = 'error'
|
||||
subscr.backend_data['stripe_error'] = e.json_body['error']['message']
|
||||
subscr.save()
|
||||
|
||||
def webhook_payment_succeeded(self, event):
|
||||
from payments.models import Subscription, Payment
|
||||
|
||||
invoice = event['data']['object']
|
||||
customer_id = invoice['customer']
|
||||
|
||||
# Prevent making duplicate Payments if event is received twice
|
||||
pc = Payment.objects.filter(backend_extid=invoice['id']).count()
|
||||
if pc > 0:
|
||||
return
|
||||
|
||||
subscr = Subscription.objects.get(backend_extid=customer_id)
|
||||
payment = subscr.create_payment()
|
||||
payment.status = 'confirmed'
|
||||
payment.paid_amount = invoice['total']
|
||||
payment.backend_extid = invoice['id']
|
||||
payment.backend_data = {'event_id': event['id']}
|
||||
payment.save()
|
||||
|
||||
payment.user.vpnuser.add_paid_time(payment.time)
|
||||
payment.user.vpnuser.on_payment_confirmed(payment)
|
||||
payment.user.vpnuser.save()
|
||||
payment.save()
|
||||
|
||||
subscr.status = 'active'
|
||||
subscr.save()
|
||||
|
||||
def webhook(self, request):
|
||||
try:
|
||||
event_json = json.loads(request.body.decode('utf-8'))
|
||||
event = self.stripe.Event.retrieve(event_json["id"])
|
||||
except (ValueError, self.stripe.error.InvalidRequestError):
|
||||
return False
|
||||
|
||||
if event['type'] == 'invoice.payment_succeeded':
|
||||
self.webhook_payment_succeeded(event)
|
||||
return True
|
||||
|
||||
def get_ext_url(self, payment):
|
||||
if not payment.backend_extid:
|
||||
return None
|
||||
return 'https://dashboard.stripe.com/payments/%s' % payment.backend_extid
|
||||
|
||||
def get_subscr_ext_url(self, subscr):
|
||||
if not subscr.backend_extid:
|
||||
return None
|
||||
return 'https://dashboard.stripe.com/customers/%s' % subscr.backend_extid
|
||||
@ -0,0 +1,6 @@
|
||||
# flake8: noqa
|
||||
|
||||
from .bitcoin import *
|
||||
from .paypal import *
|
||||
from .stripe import *
|
||||
|
||||
@ -0,0 +1,110 @@
|
||||
from datetime import timedelta
|
||||
|
||||
from django.test import TestCase
|
||||
from django.http import HttpResponseRedirect
|
||||
from django.contrib.auth.models import User
|
||||
|
||||
from payments.models import Payment
|
||||
from payments.backends import BitcoinBackend
|
||||
|
||||
from decimal import Decimal
|
||||
|
||||
|
||||
class FakeBTCRPCNew:
|
||||
def getnewaddress(self, account):
|
||||
return 'TEST_ADDRESS'
|
||||
|
||||
|
||||
class FakeBTCRPCUnpaid:
|
||||
def getreceivedbyaddress(self, address):
|
||||
assert address == 'TEST_ADDRESS'
|
||||
return Decimal('0')
|
||||
|
||||
|
||||
class FakeBTCRPCPartial:
|
||||
def getreceivedbyaddress(self, address):
|
||||
assert address == 'TEST_ADDRESS'
|
||||
return Decimal('0.5') * 100000000
|
||||
|
||||
|
||||
class FakeBTCRPCPaid:
|
||||
def getreceivedbyaddress(self, address):
|
||||
assert address == 'TEST_ADDRESS'
|
||||
return Decimal('1') * 100000000
|
||||
|
||||
|
||||
class BitcoinBackendTest(TestCase):
|
||||
def setUp(self):
|
||||
self.user = User.objects.create_user('test', 'test_user@example.com', None)
|
||||
|
||||
self.p = Payment.objects.create(
|
||||
user=self.user, time=timedelta(days=30), backend='bitcoin',
|
||||
amount=300)
|
||||
|
||||
def test_new(self):
|
||||
backend = BitcoinBackend(dict(BITCOIN_VALUE=300, URL=''))
|
||||
backend.make_rpc = FakeBTCRPCNew
|
||||
|
||||
backend.new_payment(self.p)
|
||||
redirect = backend.new_payment(self.p)
|
||||
self.assertEqual(self.p.backend_extid, 'TEST_ADDRESS')
|
||||
self.assertEqual(self.p.status, 'new')
|
||||
self.assertIn('btc_price', self.p.backend_data)
|
||||
self.assertIn('btc_address', self.p.backend_data)
|
||||
self.assertEqual(self.p.backend_data['btc_address'], 'TEST_ADDRESS')
|
||||
self.assertIsInstance(redirect, HttpResponseRedirect)
|
||||
self.assertEqual(redirect.url, '/payments/view/%d' % self.p.id)
|
||||
self.assertEqual(self.p.status_message, "Please send 1.00000 BTC to TEST_ADDRESS")
|
||||
|
||||
def test_rounding(self):
|
||||
""" Rounding test
|
||||
300 / 300 = 1 => 1.00000 BTC
|
||||
300 / 260 = Decimal('1.153846153846153846153846154') => 1.15385 BTC
|
||||
"""
|
||||
backend = BitcoinBackend(dict(BITCOIN_VALUE=300, URL=''))
|
||||
backend.make_rpc = FakeBTCRPCNew
|
||||
backend.new_payment(self.p)
|
||||
self.assertEqual(self.p.status_message, "Please send 1.00000 BTC to TEST_ADDRESS")
|
||||
|
||||
backend = BitcoinBackend(dict(BITCOIN_VALUE=260, URL=''))
|
||||
backend.make_rpc = FakeBTCRPCNew
|
||||
backend.new_payment(self.p)
|
||||
self.assertEqual(self.p.status_message, "Please send 1.15385 BTC to TEST_ADDRESS")
|
||||
|
||||
|
||||
class BitcoinBackendConfirmTest(TestCase):
|
||||
def setUp(self):
|
||||
self.user = User.objects.create_user('test', 'test_user@example.com', None)
|
||||
|
||||
self.p = Payment.objects.create(
|
||||
user=self.user, time=timedelta(days=30), backend='bitcoin',
|
||||
amount=300)
|
||||
|
||||
# call new_payment
|
||||
backend = BitcoinBackend(dict(BITCOIN_VALUE=300, URL=''))
|
||||
backend.make_rpc = FakeBTCRPCNew
|
||||
backend.new_payment(self.p)
|
||||
|
||||
def test_check_unpaid(self):
|
||||
backend = BitcoinBackend(dict(BITCOIN_VALUE=300, URL=''))
|
||||
backend.make_rpc = FakeBTCRPCUnpaid
|
||||
|
||||
backend.check(self.p)
|
||||
self.assertEqual(self.p.status, 'new')
|
||||
self.assertEqual(self.p.paid_amount, 0)
|
||||
|
||||
def test_check_partially_paid(self):
|
||||
backend = BitcoinBackend(dict(BITCOIN_VALUE=300, URL=''))
|
||||
backend.make_rpc = FakeBTCRPCPartial
|
||||
backend.check(self.p)
|
||||
self.assertEqual(self.p.status, 'new')
|
||||
self.assertEqual(self.p.paid_amount, 150)
|
||||
|
||||
def test_check_paid(self):
|
||||
backend = BitcoinBackend(dict(BITCOIN_VALUE=300, URL=''))
|
||||
backend.make_rpc = FakeBTCRPCPaid
|
||||
backend.check(self.p)
|
||||
self.assertEqual(self.p.paid_amount, 300)
|
||||
self.assertEqual(self.p.status, 'confirmed')
|
||||
|
||||
|
||||
@ -0,0 +1,81 @@
|
||||
from datetime import timedelta
|
||||
|
||||
from django.test import TestCase, RequestFactory
|
||||
from django.contrib.auth.models import User
|
||||
|
||||
from payments.models import Payment
|
||||
from payments.backends import StripeBackend
|
||||
|
||||
|
||||
class StripeBackendTest(TestCase):
|
||||
def setUp(self):
|
||||
self.user = User.objects.create_user('test', 'test_user@example.com', None)
|
||||
|
||||
def test_stripe(self):
|
||||
payment = Payment.objects.create(
|
||||
user=self.user,
|
||||
time=timedelta(days=30),
|
||||
backend='stripe',
|
||||
amount=300
|
||||
)
|
||||
|
||||
settings = dict(
|
||||
API_KEY='test_secret_key',
|
||||
PUBLIC_KEY='test_public_key',
|
||||
CURRENCY='EUR',
|
||||
NAME='Test Name',
|
||||
)
|
||||
|
||||
with self.settings(ROOT_URL='root'):
|
||||
backend = StripeBackend(settings)
|
||||
form_html = backend.new_payment(payment)
|
||||
|
||||
expected_form = '''
|
||||
<form action="/payments/callback/stripe/{id}" method="POST">
|
||||
<script
|
||||
src="https://checkout.stripe.com/checkout.js" class="stripe-button"
|
||||
data-key="test_public_key"
|
||||
data-image=""
|
||||
data-name="Test Name"
|
||||
data-currency="EUR"
|
||||
data-description="30 days, 0:00:00 for test"
|
||||
data-amount="300"
|
||||
data-email="test_user@example.com"
|
||||
data-locale="auto"
|
||||
data-zip-code="true"
|
||||
data-alipay="true">
|
||||
</script>
|
||||
</form>
|
||||
'''.format(id=payment.id)
|
||||
self.maxDiff = None
|
||||
self.assertEqual(expected_form, form_html)
|
||||
|
||||
def create_charge(**kwargs):
|
||||
self.assertEqual(kwargs, {
|
||||
'amount': 300,
|
||||
'currency': 'EUR',
|
||||
'card': 'TEST_TOKEN',
|
||||
'description': "1 months for test",
|
||||
})
|
||||
return {
|
||||
'id': 'TEST_CHARGE_ID',
|
||||
'refunded': False,
|
||||
'paid': True,
|
||||
'amount': 300,
|
||||
}
|
||||
|
||||
# Replace the Stripe api instance
|
||||
backend.stripe = type('Stripe', (object, ), {
|
||||
'Charge': type('Charge', (object, ), {
|
||||
'create': create_charge,
|
||||
}),
|
||||
'error': type('error', (object, ), {
|
||||
'CardError': type('CardError', (Exception, ), {}),
|
||||
}),
|
||||
})
|
||||
|
||||
request = RequestFactory().post('', {'stripeToken': 'TEST_TOKEN'})
|
||||
backend.callback(payment, request)
|
||||
|
||||
self.assertEqual(payment.backend_extid, 'TEST_CHARGE_ID')
|
||||
|
||||
Loading…
Reference in New Issue