Subversion Repositories SmartDukaan

package in.shop2020.serving.controllers;

import in.shop2020.config.ConfigException;
import in.shop2020.payments.Attribute;
import in.shop2020.payments.Payment;
import in.shop2020.payments.PaymentException;
import in.shop2020.payments.PaymentService.Client;
import in.shop2020.payments.PaymentStatus;
import in.shop2020.serving.services.CommonPaymentService;
import in.shop2020.thrift.clients.PaymentClient;
import in.shop2020.thrift.clients.TransactionClient;
import in.shop2020.thrift.clients.UserClient;
import in.shop2020.thrift.clients.config.ConfigClient;

import java.io.IOException;

import javax.servlet.http.HttpServletRequest;

import org.apache.struts2.interceptor.ServletRequestAware;
import org.apache.thrift.TException;
import org.apache.log4j.Logger;

/**
 * This controller processes payment data received on the back channel from
 * HDFC. Since this request doesn't have any cookies associated with it, we
 * can't extend the BaseController which is intercepted by UserInterceptor. Thus
 * to get the parameters from the request, it implements the ServletRequestAware
 * interface.
 * 
 * @author Rajveer, Chandranshu
 * @
 */
public class HdfcPayResponseController implements ServletRequestAware{

        /**
         * Enum of all statuses that can be returned by the HDFC gateway
         * 
         * @author Chandranshu
         * 
         */
        private enum PaymentReturnStatus{
                APPROVED("APPROVED"),
                NOT_APPROVED("NOT APPROVED"),
                CAPTURED("CAPTURED"),
                NOT_CAPTURED ("NOT CAPTURED"),
                CANCELLED ("CANCELLED"),
                DENIED_BY_RISK("DENIED BY RISK"),
                HOST_TIMEOUT("HOST TIMEOUT");
                private String value;
                PaymentReturnStatus(String value) {
                        this.value = value;
                }
                public String value(){
                        return this.value;
                }
        }
        
        HttpServletRequest request;

        //private static Logger log = LoggerFactory.getLogger(HdfcPayResponseController.class);
        private static Logger log = Logger.getLogger(Class.class);

        public static String successUrl;
        public static String errorUrl;
        
        public static String AMOUNT = "amt";
        public static String TRACKID = "trackid";
        public static String RESULT = "result";
        public static String AUTH = "auth";
        public static String TRANID = "tranid";
        public static String PAYMENTID = "paymentid";
        public static String REF = "ref";
        public static String POSTDATE = "postdate";
        public static String ERROR = "Error";
        public static String ERRORTEXT = "ErrorText";
        public static String UDF5 = "udf5";     

        static{
                try {
                        successUrl = ConfigClient.getClient().get("payment_success_url");
                        errorUrl = ConfigClient.getClient().get("payment_error_url");
                } catch (ConfigException e) {
                        log.error("Unable to get success and error usr info from config server.");
                }
        }
        
        String redirectUrl;
        
        public HdfcPayResponseController() {
                
        }

        /**
         * Sets the redirectUrl instance variable which is used in the view to
         * redirect the customer to the success or failure page.
         * 
         * @return index in all cases.
         * @throws IOException
         * @throws SecurityException
         */
        public String create() throws IOException, SecurityException{
                log.info("Inside hdfc pay response Create");
                
                PaymentClient paymentServiceClient = null;
                TransactionClient transactionServiceClient = null;
                UserClient userServiceClient = null;
                try{
                        paymentServiceClient = new PaymentClient();
                        transactionServiceClient = new TransactionClient();
                        userServiceClient = new UserClient();
                }catch(Exception e){
                        //Nothing to worry. lets move forward
                        log.error("Unable to initialize one of the clients", e);
                }
                
                Long txnId = null;
                
                String paymentId = request.getParameter(PAYMENTID);
                String result = request.getParameter(RESULT);
                String trackId = request.getParameter(TRACKID);
                long merchantPaymentId = Long.parseLong(trackId);
                String amount = request.getParameter(AMOUNT);
                String errorText = request.getParameter(ERRORTEXT);
                
                //FIXME dump them somewhere
                String udf5=request.getParameter(UDF5);
                //FIXME hdfc is sending comma separated amount, which is very disappointing. May be we get more surprises moving forward.
                amount= amount.replace(",", "");
                
                //Setting redirect URL to the error URL value by default.
                this.redirectUrl = errorUrl + "?paymentId=" + merchantPaymentId;
                
                Client paymentClient = paymentServiceClient.getClient();
                Payment payment = null;
                try {
                        payment = paymentClient.getPayment(merchantPaymentId);
                        txnId = payment.getMerchantTxnId();
                        
                        if(!validatePaymentParams(paymentId, amount, udf5, payment))
                                return "index";
                } catch (PaymentException e1) {
                        log.error("Payment exception. It is serious, check merchant payment id + " + merchantPaymentId, e1);
                } catch (TException e1) {
                        log.error("Thrift exception. Check payment id "+ merchantPaymentId, e1);
                }
                
                if (result != null && result.trim().equals(PaymentReturnStatus.APPROVED.value())) {
                        log.info("Payment " + merchantPaymentId + " authorized successfully. Updating the database.");
                        String description = "Payment authorized";
                        updatePaymentDetails(merchantPaymentId, description, PaymentStatus.AUTHORIZED, request, paymentClient);

            CommonPaymentService.processSuccessfulTxn(txnId, userServiceClient, transactionServiceClient, false);

            this.redirectUrl = successUrl + "?paymentId=" + merchantPaymentId;
                } else {
                        updatePaymentDetails(merchantPaymentId, errorText, PaymentStatus.FAILED, request, paymentClient);

                        CommonPaymentService.processFailedTxn(txnId, transactionServiceClient);

                        this.redirectUrl = errorUrl + "?paymentId=" + merchantPaymentId;
                }
                
                return "index";
        }

        private boolean validatePaymentParams(String paymentId, String amount, String udf5, Payment payment) {
                long merchantPaymentId = payment.getPaymentId();
                String dbUdf5="";
                double dbAmount = payment.getAmount();
                for(Attribute attribute: payment.getAttributes()){
                        if(attribute.getName().trim().equalsIgnoreCase(UDF5)){
                                dbUdf5 = attribute.getValue();
                        }
                }
                // verify 3 things:  udf5, amount and paymentid
                //FIXME should we first dump the data and then verify these things. ?? 
                double returnedAmount = Double.parseDouble(amount);
                log.info(paymentId+ ":"+ payment.getGatewayPaymentId() + "\n" + returnedAmount + ":" + dbAmount + "\n" + dbUdf5 + ":" + udf5 );
                if(!(paymentId.equalsIgnoreCase(payment.getGatewayPaymentId()) && (Math.abs(dbAmount - returnedAmount) <= 0.50) && udf5.equalsIgnoreCase(dbUdf5))){
                        log.error("Checks and balance failed on returned data");
                        this.redirectUrl =  errorUrl + "?paymentId="+merchantPaymentId;
                        return false;
                }
                return true;
        }

        private void updatePaymentDetails(long merchantPaymentId, String message, PaymentStatus status, HttpServletRequest req, Client paymentClient) {
                String paymentId = request.getParameter(PAYMENTID);
                String result = request.getParameter(RESULT);
                String postdate = request.getParameter(POSTDATE);
                String tranId = request.getParameter(TRANID);
                String auth = request.getParameter(AUTH);
                String ref = request.getParameter(REF);
                
                String sessionId = request.getSession().getId();
                String errorNo = request.getParameter(ERROR);
                try {
                        paymentClient.updatePaymentDetails(merchantPaymentId, paymentId, sessionId, result, message, tranId, auth, ref, errorNo, status, postdate, null);
                } catch (PaymentException e1) {
                        log.error("Unable to update payment details in our database.", e1);
                } catch (TException e1) {
                        log.error("Unable to update payment details in our database. Thrift exception.", e1);
                }
        }
        
        public String getRedirectUrl(){
                return this.redirectUrl;
        }

        @Override
        public void setServletRequest(HttpServletRequest request) {
                this.request = request;
                for(Object param: request.getParameterMap().keySet()){
                        log.info("PARAMS: " + param + " = "+ request.getParameter((String)param));
                }
        }
}