Subversion Repositories SmartDukaan

package in.shop2020.serving.controllers;

import in.shop2020.config.ConfigException;

import in.shop2020.datalogger.EventType;

import in.shop2020.payments.Attribute;

import in.shop2020.payments.Payment;

import in.shop2020.payments.PaymentException;

import in.shop2020.payments.PaymentStatus;

import in.shop2020.serving.services.CommonPaymentService;

import in.shop2020.thrift.clients.PaymentClient;

import in.shop2020.thrift.clients.TransactionClient;

import in.shop2020.thrift.clients.UserClient;

import in.shop2020.thrift.clients.config.ConfigClient;

import in.shop2020.utils.DataLogger;

import java.io.IOException;

import java.io.StringReader;

import java.security.MessageDigest;

import java.security.NoSuchAlgorithmException;

import java.util.ArrayList;

import java.util.List;

import java.util.Map;

import java.util.TreeMap;

import javax.servlet.http.HttpServletRequest;

import javax.swing.text.Document;

import javax.xml.parsers.DocumentBuilder;

import javax.xml.parsers.DocumentBuilderFactory;

import javax.xml.parsers.ParserConfigurationException;

import org.apache.log4j.Logger;

import org.apache.thrift.TException;

import org.w3c.dom.*;

import org.xml.sax.InputSource;

import org.xml.sax.SAXException;

@SuppressWarnings("serial")

public class InnovitiPayResponseController extends BaseController{

	private static Logger log = Logger.getLogger(Class.class);

	private static final String TXN_REF_NO = "txnRefNo";

	private static final String AUTH_CODE = "authCode";

	private static String successUrl;

	private static String errorUrl;

	/**

	 * The secret key used to decode RC4 encoded data.

	 */

	private static String accountKey;

	private static String salt;

	private String redirectUrl;

	static{

		try {

			successUrl = ConfigClient.getClient().get("ebs_success_url");

			errorUrl = ConfigClient.getClient().get("ebs_error_url");

			accountKey = ConfigClient.getClient().get("innoviti_account_id");

			salt = ConfigClient.getClient().get("innoviti_secret_key");

		} catch (ConfigException e) {

			log.error("Unable to get success and error usr info from config server.");

		}

	}

	private Map<String, String> paymentParams = new TreeMap<String, String>();

	public String create() {

//		String gatewayTxnId = request.getParameter("mihpayid");

//		String status = request.getParameter("status");

//		String key = request.getParameter("key");

//		String mode = request.getParameter("mode");

//		String txnid = request.getParameter("txnid");

//		String amount = request.getParameter("amount");

//		String hash  = request.getParameter("hash");

//		String bank_ref_num  = request.getParameter("bank_ref_num");

//		String PG_TYPE  = request.getParameter("PG_TYPE");

//		String Error  = request.getParameter("Error");

//		String unmappedstatus  = request.getParameter("unmappedstatus");

//		

		updatePaymentParams(request.getParameter("transresponse"));

		PaymentClient paymentServiceClient = null;

		TransactionClient transactionServiceClient = null;

		UserClient userServiceClient = null;

		try {

			paymentServiceClient = new PaymentClient();

			transactionServiceClient = new TransactionClient();

			userServiceClient = new UserClient();

		} catch (Exception e) {

			log.error("Unable to initialize one of the clients", e);

		}

		long merchantPaymentId = Long.parseLong(paymentParams.get("orderId"));

		String gatewayPaymentId = paymentParams.get("UnipayId");

		//double amount = Double.parseDouble(paymentParams.get("amount"));

		String gatewayTxnStatus = paymentParams.get("resCode");

		String gatewayTxnStatusDescription = paymentParams.get("resmsg");

		String authCode = paymentParams.get("authCode");

		String txnRefNo = paymentParams.get("txnRefNo");

		String txnDate = paymentParams.get("txnDate");

		String txnTime = paymentParams.get("txnTime");

		List<Attribute> attributes = new ArrayList<Attribute>();

		attributes.add(new Attribute(TXN_REF_NO, txnRefNo));

		attributes.add(new Attribute(AUTH_CODE, authCode));

		Payment payment = null;

		Long txnId = null;

		try {

			payment = paymentServiceClient.getClient().getPayment(merchantPaymentId);

			txnId = payment.getMerchantTxnId();

		} catch (PaymentException e1) {

			log.error("Payment exception. It is serious, check merchant payment id + " + merchantPaymentId, e1);

		} catch (TException e1) {

			log.error("Thrift exception. Check payment id "+ merchantPaymentId, e1);

		}

//		if(!validatePaymentParams(amount, payment, hash)){

//			this.redirectUrl = errorUrl + "?paymentId=" + merchantPaymentId;

//			return "index";

//		}

		if(gatewayTxnStatus.equalsIgnoreCase("00")){

			//Update payment status as authorized if payment is authorized.

			try {

				paymentServiceClient.getClient().updatePaymentDetails(merchantPaymentId, gatewayPaymentId,

						"", gatewayTxnStatus, gatewayTxnStatusDescription, "", "", "", "", PaymentStatus.AUTHORIZED, "", attributes);

			} catch (PaymentException e) {

				log.error("Unable to mark the payment as authorized", e);

			} catch (TException e) {

			    log.error("Unable to mark the payment as authorized", e);

			}

			CommonPaymentService.processSuccessfulTxn(txnId, userServiceClient, transactionServiceClient, false);

            this.redirectUrl = successUrl + "?paymentId=" + merchantPaymentId;	

		}else{

			try {

				paymentServiceClient.getClient().updatePaymentDetails(merchantPaymentId, gatewayPaymentId,

						"", gatewayTxnStatus, "Payment Failed at PG", "", "", "", "", PaymentStatus.FAILED, "", attributes);

			} catch (PaymentException e) {

			    log.error("Unable to mark the payment as failed", e);

			} catch (TException e) {

			    log.error("Unable to mark the payment as failed", e);

			}

			CommonPaymentService.processFailedTxn(txnId, transactionServiceClient);

			DataLogger.logData(EventType.PAYMENT_FAILURE, getSessionId(), userinfo.getUserId(), userinfo.getEmail(), Long.toString(merchantPaymentId), gatewayPaymentId,

                    gatewayTxnStatus, "Payment Failed at PG");

			this.redirectUrl = errorUrl + "?paymentId=" + merchantPaymentId;

		}

		log.info("User will be redirected to: " + this.redirectUrl);

		return "index";

	}

	private boolean validatePaymentParams(double returnedAmount, Payment payment, String hash){

		if(!(payment != null && Math.abs(payment.getAmount() - returnedAmount) <= 0.50 && hash.equals(getSecureHash()))){

			// We did not request this payment or the authorised amount is different.

			log.error("Checks and balance failed on returned data");

			return false;

		}

		return true;

	}

	public String getSecureHash(){

		try{

			String pass = salt + "|" + paymentParams.get("status") + "|||||||||||" + paymentParams.get("email") + "|" +  paymentParams.get("firstname") + "|" + paymentParams.get("productinfo") + "|" + paymentParams.get("amount") + "|" + paymentParams.get("txnid") + "|" + accountKey;

			System.out.println(pass);

			MessageDigest md = MessageDigest.getInstance("SHA-512");

			md.update(pass.getBytes(), 0, pass.getBytes().length);

			byte[] mdbytes = md.digest();

			//	convert the byte to hex format method

			StringBuffer sb = new StringBuffer();

			for (int i = 0; i < mdbytes.length; i++) {

				sb.append(Integer.toString((mdbytes[i] & 0xff) + 0x100, 16).substring(1));

			}

			return sb.toString();

		}catch(NoSuchAlgorithmException nsae){

			log.error("No such algorithm exception");

			return null;

		}

	}

	private void updatePaymentParams(String xmlString){

		System.out.println(xmlString);

		try{

			DocumentBuilder db = DocumentBuilderFactory.newInstance().newDocumentBuilder();

			InputSource is = new InputSource();

			is.setCharacterStream(new StringReader(xmlString));

			org.w3c.dom.Document doc = db.parse(is);

			NodeList nodes = doc.getElementsByTagName("sres");

			Element element = (Element) nodes.item(0);

			NodeList name = element.getElementsByTagName("orderId");

			Element line = (Element) name.item(0);

			System.out.println("orderId: " + getCharacterDataFromElement(line));

			paymentParams.put("orderId", getCharacterDataFromElement(line));

			name = element.getElementsByTagName("merchantId");

			line = (Element) name.item(0);

			System.out.println("merchantId: " + getCharacterDataFromElement(line));

			paymentParams.put("merchantId", getCharacterDataFromElement(line));

			name = element.getElementsByTagName("resCode");

			line = (Element) name.item(0);

			System.out.println("resCode: " + getCharacterDataFromElement(line));

			paymentParams.put("resCode", getCharacterDataFromElement(line));

			name = element.getElementsByTagName("resmsg");

			line = (Element) name.item(0);

			System.out.println("resmsg: " + getCharacterDataFromElement(line));

			paymentParams.put("resmsg", getCharacterDataFromElement(line));

			nodes = element.getElementsByTagName("respDet");

	    	element = (Element) nodes.item(0);

	    	name = element.getElementsByTagName("txnRefNo");

	    	line = (Element) name.item(0);

			System.out.println("txnRefNo: " + getCharacterDataFromElement(line));

			paymentParams.put("txnRefNo", getCharacterDataFromElement(line));

	    	name = element.getElementsByTagName("UnipayId");

	    	line = (Element) name.item(0);

			System.out.println("UnipayId: " + getCharacterDataFromElement(line));

			paymentParams.put("UnipayId", getCharacterDataFromElement(line));

	    	name = element.getElementsByTagName("rrnNo");

	    	line = (Element) name.item(0);

			System.out.println("rrnNo: " + getCharacterDataFromElement(line));

			paymentParams.put("rrnNo", getCharacterDataFromElement(line));

			name = element.getElementsByTagName("authCode");

	    	line = (Element) name.item(0);

			System.out.println("authCode: " + getCharacterDataFromElement(line));

			paymentParams.put("authCode", getCharacterDataFromElement(line));

			name = element.getElementsByTagName("txnDate");

	    	line = (Element) name.item(0);

			System.out.println("txnDate: " + getCharacterDataFromElement(line));

			paymentParams.put("txnDate", getCharacterDataFromElement(line));

			name = element.getElementsByTagName("txnTime");

	    	line = (Element) name.item(0);

			System.out.println("txnTime: " + getCharacterDataFromElement(line));

			paymentParams.put("txnTime", getCharacterDataFromElement(line));

		}catch (Exception e) {

			// TODO: handle exception

			//  throws ParserConfigurationException, SAXException, IOException

		}

	}

	public static String getCharacterDataFromElement(Element e) {

		Node child = e.getFirstChild();

		if (child instanceof CharacterData) {

			CharacterData cd = (CharacterData) child;

			return cd.getData();

		}

		return "";

	}

	public String getRedirectUrl(){

		return this.redirectUrl;

	}

	@Override

	public void setServletRequest(HttpServletRequest request) {

		this.request = request;

	}

	public Map<String, String> getPaymentParams() {

		return paymentParams;

	}

}