Subversion Repositories SmartDukaan

package in.shop2020.serving.controllers;

import in.shop2020.config.ConfigException;
import in.shop2020.model.v1.order.RechargeOrder;
import in.shop2020.model.v1.order.RechargeOrderStatus;
import in.shop2020.payments.Attribute;
import in.shop2020.payments.Payment;
import in.shop2020.payments.PaymentException;
import in.shop2020.payments.PaymentService.Client;
import in.shop2020.payments.PaymentStatus;
import in.shop2020.serving.services.CommonPaymentService;
import in.shop2020.thrift.clients.PaymentClient;
import in.shop2020.thrift.clients.TransactionClient;
import in.shop2020.thrift.clients.UserClient;
import in.shop2020.thrift.clients.config.ConfigClient;

import java.io.IOException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.text.SimpleDateFormat;
import java.util.ArrayList;
import java.util.Date;
import java.util.List;
import java.util.Map;
import java.util.TreeMap;

import javax.servlet.http.HttpServletRequest;

import org.apache.struts2.interceptor.ServletRequestAware;
import org.apache.thrift.TException;
import org.apache.log4j.Logger;

/**
 * This controller processes payment data received on the back channel from
 * HDFC. Since this request doesn't have any cookies associated with it, we
 * can't extend the BaseController which is intercepted by UserInterceptor. Thus
 * to get the parameters from the request, it implements the ServletRequestAware
 * interface.
 * 
 * @author Rajveer, Chandranshu
 * @
 */
public class HdfcPayResponseController implements ServletRequestAware{

        private static String rechargeResultUri;

        /**
         * The secret key used to decode RC4 encoded data.
         */
        private static String accountKey;

        private static String salt;
        
        private String eurl;
        private String surl;

        /**
         * Enum of all statuses that can be returned by the HDFC gateway
         * 
         * @author Chandranshu
         * 
         */
        private enum PaymentReturnStatus{
                APPROVED("APPROVED"),
                NOT_APPROVED("NOT APPROVED"),
                CAPTURED("CAPTURED"),
                NOT_CAPTURED ("NOT CAPTURED"),
                CANCELLED ("CANCELLED"),
                DENIED_BY_RISK("DENIED BY RISK"),
                HOST_TIMEOUT("HOST TIMEOUT");
                private String value;
                PaymentReturnStatus(String value) {
                        this.value = value;
                }
                public String value(){
                        return this.value;
                }
        }
        
        HttpServletRequest request;

        //private static Logger log = LoggerFactory.getLogger(HdfcPayResponseController.class);
        private static Logger log = Logger.getLogger(Class.class);

        public static String successUrl;
        public static String errorUrl;
        
        public static String AMOUNT = "Amount";
        public static String PAYMENTID = "PaymentID";
        public static String ERROR = "Error";
        public static String MERCHANTREFNO="MerchantRefNo";
        public static String RESPONSECODE="ResponseCode";
        public static String SECUREHASH="SecureHash";
        public static String RESPONSEMESSAGE  = "ResponseMessage";
        public static String ISFLAGGED = "IsFlagged";
        public static String TRANSACTIONID ="TransactionID";
        public static String PAYMENTMETHOD = "PaymentMethod";
        public static String REQUESTID= "RequestID";
        public static String DATECREATED = "DateCreated";
        public static String SUCCESS= "0";//responsecode for successfull transaction by hdfc gateway

        static{
                try {
                        ConfigClient cc = ConfigClient.getClient();
                        successUrl = cc.get("payment_success_url");
                        errorUrl = cc.get("payment_error_url");
                        rechargeResultUri = cc.get("recharge_result_uri");
                } catch (ConfigException e) {
                        log.error("Unable to get success and error usr info from config server.");
                }
        }
        String redirectUrl;
        
        public HdfcPayResponseController() {
                
        }
        
        private Map<String, String> paymentParams = new TreeMap<String, String>();

        /**
         * Sets the redirectUrl instance variable which is used in the view to
         * redirect the customer to the success or failure page.
         * 
         * @return index in all cases.
         * @throws IOException
         * @throws SecurityException
         */
        public String create() throws IOException, SecurityException{
                log.info("Inside hdfc pay response Create");
                eurl = errorUrl;
                surl = successUrl;
                updatePaymentParams(request.getParameterMap());

                PaymentClient paymentServiceClient = null;
                TransactionClient transactionServiceClient = null;
                UserClient userServiceClient = null;
                try {
                        userServiceClient = new UserClient();
                        paymentServiceClient = new PaymentClient();
                        transactionServiceClient = new TransactionClient();
                } catch (Exception e) {
                        log.error("Unable to initialize one of the clients", e);
                }
                
                long merchantPaymentId = Long.parseLong(paymentParams.get(MERCHANTREFNO));
                String gatewayPaymentId = paymentParams.get(PAYMENTID);
                double amount = Double.parseDouble(paymentParams.get(AMOUNT));
                String gatewayTxnStatus = paymentParams.get(RESPONSECODE);
                String hash = paymentParams.get(SECUREHASH);
                String transactionId = paymentParams.get(TRANSACTIONID);
                String requestId = paymentParams.get(REQUESTID);
                String error = paymentParams.get(ERROR);
                List<Attribute> attributes = new ArrayList<Attribute>();
                

                Payment payment = null;
                Long txnId = null;
                try {
                        payment = paymentServiceClient.getClient().getPayment(merchantPaymentId);
                        txnId = payment.getMerchantTxnId();
                } catch (PaymentException e1) {
                        log.error("Payment exception. It is serious, check merchant payment id + " + merchantPaymentId, e1);
                } catch (TException e1) {
                        log.error("Thrift exception. Check payment id "+ merchantPaymentId, e1);
                }
                
                if(payment.getStatus() != PaymentStatus.INIT){
                        // We have already processed a response for this payment. Processing
                        // it again may fail his orders. So, let's ask him to check his
                        // account.
                        return "ebs-pay-response-maybe";
                }

                if(payment.isIsDigital()){
                        eurl = rechargeResultUri;
                        surl = rechargeResultUri;
                }
                
                if(!validatePaymentParams(amount, payment, hash)){
                        this.redirectUrl = eurl + "?paymentId=" + merchantPaymentId;
                        return "index";
                }

                if(gatewayTxnStatus.equalsIgnoreCase(SUCCESS)){
                        try {
                                attributes.add(new Attribute(DATECREATED, paymentParams.get(DATECREATED)));
                                paymentServiceClient.getClient().updatePaymentDetails(merchantPaymentId, gatewayPaymentId,
                                                "", gatewayTxnStatus, "Transaction captured at PG", 
                                                transactionId, "", requestId, "", PaymentStatus.SUCCESS,
                                                                new SimpleDateFormat().format(new Date()), attributes);
                        } catch (PaymentException e) {
                                this.redirectUrl = eurl + "?paymentId=" + merchantPaymentId;
                                return "index";
                        } catch (TException e) {
                                this.redirectUrl = eurl + "?paymentId=" + merchantPaymentId;
                                return "index";
                        }
            if(payment.isIsDigital()){
                RechargeOrder rechargeOrder = null;
                try {
                    rechargeOrder = transactionServiceClient.getClient().getRechargeOrdersForTransaction(txnId);
                } catch (Exception e1) {
                    log.error("Problem with txn client while getting recharge object", e1);
                                this.redirectUrl = eurl + "?paymentId=" + merchantPaymentId;
                                return "index";
                }
                
                        try {
                            PaymentClient pcl = new PaymentClient();
                            boolean isCaptured = pcl.getClient().capturePayment(txnId, true);
                            
                            //Retry in case we are not able to capture first time
                            if(!isCaptured){
                                Thread.sleep(2000);
                                isCaptured = pcl.getClient().capturePayment(txnId, true);
                            }
                            if(!isCaptured){
                                Thread.sleep(2000);
                                isCaptured = pcl.getClient().capturePayment(txnId, true);
                            }
                            
                            if(isCaptured) {
                                transactionServiceClient.getClient().updateRechargeOrderStatus(rechargeOrder.getId(), RechargeOrderStatus.PAYMENT_SUCCESSFUL);
                            } else {
                        transactionServiceClient.getClient().updateRechargeOrderStatus(rechargeOrder.getId(), RechargeOrderStatus.PAYMENT_FAILED);
                            }
                        } catch (Exception e) {
                            log.error("Problem with txn client while trying to recharge", e);
                        }
            } else {
                        CommonPaymentService.processSuccessfulTxn(txnId, userServiceClient, transactionServiceClient, false);
            }
            this.redirectUrl = surl + "?paymentId=" + merchantPaymentId;
                        
                } else{
                        try {
                                attributes.add(new Attribute(ERROR, error));
                                paymentServiceClient.getClient().updatePaymentDetails(merchantPaymentId, gatewayPaymentId,
                                                "", gatewayTxnStatus, "Payment Failed at PG ", "", "", "", "", PaymentStatus.FAILED, new SimpleDateFormat().format(new Date()), attributes);
                        } catch (PaymentException e) {
                            log.error("Unable to mark the payment as failed", e);
                        } catch (TException e) {
                            log.error("Unable to mark the payment as failed", e);
                        }

                        if(!payment.isIsDigital()) {
                                CommonPaymentService.processFailedTxn(txnId, transactionServiceClient);
                        }

                        this.redirectUrl = eurl + "?paymentId=" + merchantPaymentId;
                }

                log.info("User will be redirected to: " + surl + "?paymentId=" + merchantPaymentId);
                return "index";

                
        }
        
        
        private boolean validatePaymentParams(double returnedAmount, Payment payment, String hash){
                boolean hashCheckResult= hash.equals(getSecureHash());
                hashCheckResult = true;//remove this and implement hash check
                if(!(payment != null && Math.abs(payment.getAmount() - returnedAmount) <= 0.50
                                && hashCheckResult)){
                        // We did not request this payment or the authorised amount is different.
                        log.error("Checks and balance failed on returned data");
                        return false;
                }
                return true;
        }


        public String getSecureHash(){
                /*try{
                        
                        //to do implement hash check
                }catch(Exception nsae){
                        log.error("No such algorithm exception");
                        return null;
                }*/
                return "";
        }

        private void updatePaymentParams(Map map){
                for(Object key : map.keySet()){
                    String keyStr = (String)key;
                    String[] vals = (String[])map.get(keyStr);
                    String value = vals[0];
                    System.out.println("Key " + (String)key + "     :    " + value);
                    paymentParams.put(keyStr, value);
                }
        }
/*      private boolean validatePaymentParams(String paymentId, String amount, String udf5, Payment payment) {
                long merchantPaymentId = payment.getPaymentId();
                String dbUdf5="";
                double dbAmount = payment.getAmount();
                for(Attribute attribute: payment.getAttributes()){
                        if(attribute.getName().trim().equalsIgnoreCase(UDF5)){
                                dbUdf5 = attribute.getValue();
                        }
                }
                // verify 3 things:  udf5, amount and paymentid
                //FIXME should we first dump the data and then verify these things. ?? 
                double returnedAmount = Double.parseDouble(amount);
                log.info(paymentId+ ":"+ payment.getGatewayPaymentId() + "\n" + returnedAmount + ":" + dbAmount + "\n" + dbUdf5 + ":" + udf5 );
                if(!(paymentId.equalsIgnoreCase(payment.getGatewayPaymentId()) && (Math.abs(dbAmount - returnedAmount) <= 0.50) && udf5.equalsIgnoreCase(dbUdf5))){
                        log.error("Checks and balance failed on returned data");
                        this.redirectUrl =  errorUrl + "?paymentId="+merchantPaymentId;
                        return false;
                }
                return true;
        }*/

/*      private void updatePaymentDetails(long merchantPaymentId, String message, PaymentStatus status, HttpServletRequest req, Client paymentClient) {
                String paymentId = request.getParameter(PAYMENTID);
                
                String sessionId = request.getSession().getId();
                String errorNo = request.getParameter(ERROR);
                try {
                        paymentClient.updatePaymentDetails(merchantPaymentId, paymentId, sessionId, result, message, tranId, auth, ref, errorNo, status, postdate, null);
                } catch (PaymentException e1) {
                        log.error("Unable to update payment details in our database.", e1);
                } catch (TException e1) {
                        log.error("Unable to update payment details in our database. Thrift exception.", e1);
                }
        }*/
        
        public String getRedirectUrl(){
                return this.redirectUrl;
        }

        @Override
        public void setServletRequest(HttpServletRequest request) {
                this.request = request;
                for(Object param: request.getParameterMap().keySet()){
                        log.info("PARAMS: " + param + " = "+ request.getParameter((String)param));
                }
        }
}