Subversion Repositories SmartDukaan

package in.shop2020.serving.controllers;

import in.shop2020.config.ConfigException;

import in.shop2020.model.v1.order.RechargeOrder;

import in.shop2020.model.v1.order.RechargeOrderStatus;

import in.shop2020.model.v1.order.TransactionServiceException;

import in.shop2020.payments.Attribute;

import in.shop2020.payments.Payment;

import in.shop2020.payments.PaymentException;

import in.shop2020.payments.PaymentService.Client;

import in.shop2020.payments.PaymentStatus;

import in.shop2020.thrift.clients.PaymentClient;

import in.shop2020.thrift.clients.TransactionClient;

import in.shop2020.thrift.clients.UserClient;

import in.shop2020.thrift.clients.config.ConfigClient;

import java.io.IOException;

import javax.servlet.http.HttpServletRequest;

import org.apache.log4j.Logger;

import org.apache.struts2.interceptor.ServletRequestAware;

import org.apache.thrift.TException;

/**

 * This controller processes payment data received on the back channel from

 * HDFC. Since this request doesn't have any cookies associated with it, we

 * can't extend the BaseController which is intercepted by UserInterceptor. Thus

 * to get the parameters from the request, it implements the ServletRequestAware

 * interface.

 * 

 */

public class HdfcRechargeResponseController implements ServletRequestAware{

    /**

     * Enum of all statuses that can be returned by the HDFC gateway

     * 

     */

    private enum PaymentReturnStatus{

        APPROVED("APPROVED"),

        NOT_APPROVED("NOT APPROVED"),

        CAPTURED("CAPTURED"),

        NOT_CAPTURED ("NOT CAPTURED"),

        CANCELLED ("CANCELLED"),

        DENIED_BY_RISK("DENIED BY RISK"),

        HOST_TIMEOUT("HOST TIMEOUT");

        private String value;

        PaymentReturnStatus(String value) {

            this.value = value;

        }

        public String value(){

            return this.value;

        }

    }

    HttpServletRequest request;

    //private static Logger log = LoggerFactory.getLogger(HdfcPayResponseController.class);

    private static Logger log = Logger.getLogger(Class.class);

    public static String successUrl;

    public static String errorUrl;

    public static String AMOUNT = "amt";

    public static String TRACKID = "trackid";

    public static String RESULT = "result";

    public static String AUTH = "auth";

    public static String TRANID = "tranid";

    public static String PAYMENTID = "paymentid";

    public static String REF = "ref";

    public static String POSTDATE = "postdate";

    public static String ERROR = "Error";

    public static String ERRORTEXT = "ErrorText";

    public static String UDF5 = "udf5"; 

    static{

        try {

            successUrl = ConfigClient.getClient().get("recharge_success_url");

            errorUrl = ConfigClient.getClient().get("recharge_success_url");

        } catch (ConfigException e) {

            log.error("Unable to get success and error usr info from config server.");

        }

    }

    String redirectUrl;

    public HdfcRechargeResponseController() {

    }

    /**

     * Sets the redirectUrl instance variable which is used in the view to

     * redirect the customer to the success or failure page.

     * 

     * @return index in all cases.

     * @throws IOException

     * @throws SecurityException

     */

    public String create() throws IOException, SecurityException{

        log.info("Inside hdfc pay response Create");

        PaymentClient paymentServiceClient = null;

        TransactionClient transactionServiceClient = null;

        UserClient userServiceClient = null;

        try{

            paymentServiceClient = new PaymentClient();

            transactionServiceClient = new TransactionClient();

            userServiceClient = new UserClient();

        }catch(Exception e){

            //Nothing to worry. lets move forward

            log.error("Unable to initialize one of the clients", e);

        }

        Long txnId = null;

        String paymentId = request.getParameter(PAYMENTID);

        String result = request.getParameter(RESULT);

        String trackId = request.getParameter(TRACKID);

        long merchantPaymentId = Long.parseLong(trackId);

        String amount = request.getParameter(AMOUNT);

        String errorText = request.getParameter(ERRORTEXT);

        //FIXME dump them somewhere

        String udf5=request.getParameter(UDF5);

        //FIXME hdfc is sending comma separated amount, which is very disappointing. May be we get more surprises moving forward.

        amount= amount.replace(",", "");

        //Setting redirect URL to the error URL value by default.

        this.redirectUrl = errorUrl + "?paymentId=" + merchantPaymentId;

        Client paymentClient = paymentServiceClient.getClient();

        Payment payment = null;

        try {

            payment = paymentClient.getPayment(merchantPaymentId);

            txnId = payment.getMerchantTxnId();

            RechargeOrder rechargeOrder = transactionServiceClient.getClient().getRechargeOrdersForTransaction(txnId);

            if(!validatePaymentParams(paymentId, amount, udf5, payment))

                return "index";

            if (result != null && result.trim().equals(PaymentReturnStatus.APPROVED.value())) {

                log.info("Payment " + merchantPaymentId + " authorized successfully. Updating the database.");

                String description = "Payment authorized";

                updatePaymentDetails(merchantPaymentId, description, PaymentStatus.AUTHORIZED, request, paymentClient);

                transactionServiceClient.getClient().updateRechargeOrderStatus(rechargeOrder.getId(), RechargeOrderStatus.PAYMENT_SUCCESSFUL);

                this.redirectUrl = successUrl + "?paymentId=" + merchantPaymentId;

            } else {

                updatePaymentDetails(merchantPaymentId, errorText, PaymentStatus.FAILED, request, paymentClient);

                transactionServiceClient.getClient().updateRechargeOrderStatus(rechargeOrder.getId(), RechargeOrderStatus.PAYMENT_FAILED);

                this.redirectUrl = errorUrl + "?paymentId=" + merchantPaymentId;

            }

        } catch (PaymentException e1) {

            log.error("Payment exception. It is serious, check merchant payment id + " + merchantPaymentId, e1);

        } catch (TException e1) {

            log.error("Thrift exception. Check payment id "+ merchantPaymentId, e1);

        } catch (TransactionServiceException e) {

            // TODO Auto-generated catch block

            e.printStackTrace();

        }

        return "index";

    }

    private boolean validatePaymentParams(String paymentId, String amount, String udf5, Payment payment) {

        long merchantPaymentId = payment.getPaymentId();

        String dbUdf5="";

        double dbAmount = payment.getAmount();

        for(Attribute attribute: payment.getAttributes()){

            if(attribute.getName().trim().equalsIgnoreCase(UDF5)){

                dbUdf5 = attribute.getValue();

            }

        }

        // verify 3 things:  udf5, amount and paymentid

        //FIXME should we first dump the data and then verify these things. ?? 

        double returnedAmount = Double.parseDouble(amount);

        log.info(paymentId+ ":"+ payment.getGatewayPaymentId() + "\n" + returnedAmount + ":" + dbAmount + "\n" + dbUdf5 + ":" + udf5 );

        if(!(paymentId.equalsIgnoreCase(payment.getGatewayPaymentId()) && (Math.abs(dbAmount - returnedAmount) <= 0.50) && udf5.equalsIgnoreCase(dbUdf5))){

            log.error("Checks and balance failed on returned data");

            this.redirectUrl =  errorUrl + "?paymentId="+merchantPaymentId;

            return false;

        }

        return true;

    }

    private void updatePaymentDetails(long merchantPaymentId, String message, PaymentStatus status, HttpServletRequest req, Client paymentClient) {

        String paymentId = request.getParameter(PAYMENTID);

        String result = request.getParameter(RESULT);

        String postdate = request.getParameter(POSTDATE);

        String tranId = request.getParameter(TRANID);

        String auth = request.getParameter(AUTH);

        String ref = request.getParameter(REF);

        String sessionId = request.getSession().getId();

        String errorNo = request.getParameter(ERROR);

        try {

            paymentClient.updatePaymentDetails(merchantPaymentId, paymentId, sessionId, result, message, tranId, auth, ref, errorNo, status, postdate, null);

        } catch (PaymentException e1) {

            log.error("Unable to update payment details in our database.", e1);

        } catch (TException e1) {

            log.error("Unable to update payment details in our database. Thrift exception.", e1);

        }

    }

    public String getRedirectUrl(){

        return this.redirectUrl;

    }

    @Override

    public void setServletRequest(HttpServletRequest request) {

        this.request = request;

        for(Object param: request.getParameterMap().keySet()){

            log.info("PARAMS: " + param + " = "+ request.getParameter((String)param));

        }

    }

}