95 lines
3.1 KiB
Python
95 lines
3.1 KiB
Python
# This file is part of Tryton. The COPYRIGHT file at the top level of
|
|
# this repository contains the full copyright notices and license terms.
|
|
import json
|
|
import logging
|
|
import httplib
|
|
|
|
import stripe
|
|
from werkzeug.exceptions import abort
|
|
from werkzeug.wrappers import Response
|
|
|
|
from trytond.wsgi import app
|
|
from trytond.protocols.wrappers import with_pool, with_transaction
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
@app.route(
|
|
'/<database_name>/account_payment_stripe/checkout/<model>/<id>',
|
|
methods=['GET', 'POST'])
|
|
@with_pool
|
|
@with_transaction()
|
|
def checkout(request, pool, model, id):
|
|
Payment = pool.get('account.payment')
|
|
Customer = pool.get('account.payment.stripe.customer')
|
|
ContactMechanism = pool.get('party.contact_mechanism')
|
|
if model == Payment.__name__:
|
|
Model = Payment
|
|
elif model == Customer.__name__:
|
|
Model = Customer
|
|
else:
|
|
abort(403)
|
|
try:
|
|
record, = Model.search([
|
|
('stripe_checkout_id', '=', id),
|
|
])
|
|
except ValueError:
|
|
abort(403)
|
|
if request.method == 'GET':
|
|
Report = pool.get('account.payment.stripe.checkout', type='report')
|
|
# TODO language
|
|
data = {
|
|
'model': Model.__name__,
|
|
}
|
|
ext, content, _, _ = Report.execute([record.id], data)
|
|
assert ext == 'html'
|
|
return Response(content, 200, content_type='text/html')
|
|
elif request.method == 'POST':
|
|
record.stripe_token = request.form['stripeToken']
|
|
record.stripe_chargeable = True
|
|
record.save()
|
|
email = request.form.get('stripeEmail')
|
|
if email:
|
|
for mechanism in record.party.contact_mechanisms:
|
|
if mechanism.type == 'email' and mechanism.value == email:
|
|
break
|
|
else:
|
|
mechanism = ContactMechanism(
|
|
type='email', value=email, party=record.party)
|
|
mechanism.save()
|
|
return Response(
|
|
'<body onload="window.close()">', 200, content_type='text/html')
|
|
|
|
|
|
@app.route(
|
|
'/<database_name>/account_payment_stripe/webhook/<account>',
|
|
methods={'POST'})
|
|
@with_pool
|
|
@with_transaction()
|
|
def webhooks_endpoint(request, pool, account):
|
|
Account = pool.get('account.payment.stripe.account')
|
|
account, = Account.search([
|
|
('webhook_identifier', '=', account),
|
|
])
|
|
|
|
if account.webhook_signing_secret:
|
|
sig_header = request.headers['STRIPE_SIGNATURE']
|
|
request_body = request.get_data(as_text=True)
|
|
try:
|
|
stripe.Webhook.construct_event(
|
|
request_body, sig_header, account.webhook_signing_secret)
|
|
except ValueError: # Invalid payload
|
|
abort(httplib.BAD_REQUEST)
|
|
except stripe.error.SignatureVerificationError:
|
|
abort(httplib.BAD_REQUEST)
|
|
else:
|
|
logger.warn("Stripe signature ignored")
|
|
|
|
payload = json.loads(request_body)
|
|
result = account.webhook(payload)
|
|
if result is None:
|
|
logger.info("No callback for payload type '%s'", payload['type'])
|
|
elif not result:
|
|
return Response(status=httplib.NOT_FOUND)
|
|
return Response(status=httplib.NO_CONTENT)
|