mirror of
https://gitlab.com/flectra-hq/flectra.git
synced 2026-10-25 23:40:05 -05:00
57 lines
2.4 KiB
Python
57 lines
2.4 KiB
Python
# -*- coding: utf-8 -*-
|
|
|
|
# Copyright 2015 Eezee-It
|
|
|
|
import json
|
|
import logging
|
|
import pprint
|
|
import werkzeug
|
|
|
|
from flectra import http
|
|
from flectra.http import request
|
|
|
|
_logger = logging.getLogger(__name__)
|
|
|
|
|
|
class SipsController(http.Controller):
|
|
_notify_url = '/payment/sips/ipn/'
|
|
_return_url = '/payment/sips/dpn/'
|
|
|
|
def sips_validate_data(self, **post):
|
|
sips = request.env['payment.acquirer'].search([('provider', '=', 'sips')], limit=1)
|
|
security = sips.sudo()._sips_generate_shasign(post)
|
|
if security == post['Seal']:
|
|
_logger.debug('Sips: validated data')
|
|
return request.env['payment.transaction'].sudo().form_feedback(post, 'sips')
|
|
_logger.warning('Sips: data are corrupted')
|
|
return False
|
|
|
|
@http.route('/payment/sips/ipn/', type='http', auth='public', methods=['POST'], csrf=False)
|
|
def sips_ipn(self, **post):
|
|
""" Sips IPN. """
|
|
_logger.info('Beginning Sips IPN form_feedback with post data %s', pprint.pformat(post)) # debug
|
|
if not post:
|
|
# SIPS sometimes sends empty notifications, the reason why is
|
|
# unclear but they tend to pollute logs and do not provide any
|
|
# meaningful information; log as a warning instead of a traceback
|
|
_logger.warning('Sips: received empty notification; skip.')
|
|
else:
|
|
self.sips_validate_data(**post)
|
|
return ''
|
|
|
|
@http.route('/payment/sips/dpn', type='http', auth="public", methods=['POST'], csrf=False, save_session=False)
|
|
def sips_dpn(self, **post):
|
|
""" Sips DPN
|
|
The session cookie created by Flectra has not the attribute SameSite. Most of browsers will force this attribute
|
|
with the value 'Lax'. After the payment, Sips will perform a POST request on this route. For all these reasons,
|
|
the cookie won't be added to the request. As a result, if we want to save the session, the server will create
|
|
a new session cookie. Therefore, the previous session and all related information will be lost, so it will lead
|
|
to undesirable behaviors. This is the reason why `save_session=False` is needed.
|
|
"""
|
|
try:
|
|
_logger.info('Beginning Sips DPN form_feedback with post data %s', pprint.pformat(post)) # debug
|
|
self.sips_validate_data(**post)
|
|
except:
|
|
pass
|
|
return werkzeug.utils.redirect('/payment/process')
|