Class: Spree::VpagoPaymentsController

Inherits:
ApplicationController
  • Object
show all
Defined in:
app/controllers/spree/vpago_payments_controller.rb

Instance Method Summary collapse

Instance Method Details

#access_denied ⇒ Object 



163
164
165
166
167
168
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 163

def access_denied
  respond_to do |format|
    format.html { render file: Rails.public_path.join('422.html'), status: :not_found, layout: false }
    format.json { render json: { status: :unauthorized }, status: :unauthorized }
  end
end

#allow_iframe_embedding ⇒ Object

frame-ancestors (set above) supersedes X-Frame-Options in modern browsers, but the default SAMEORIGIN header would still block legacy browsers from embedding these pages, so drop it for the iframe actions.



152
153
154
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 152

def allow_iframe_embedding
  response.headers.delete('X-Frame-Options')
end

#check_transaction ⇒ Object

GET

Raises:

  • (ActiveRecord::RecordNotFound) 


39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 39

def check_transaction
  @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
  raise ActiveRecord::RecordNotFound unless @payment.present?

  return render json: { status: :success }, status: :ok if @payment.completed?
  return render json: { status: :failed }, status: :ok if @payment.failed?

  unless @payment.payment_method.support_check_transaction_api?
    VpagoLogger.log(label: 'Spree::VpagoPaymentsController#check_transaction unsupported', data: vpago_log_context)
    return render json: { status: :pending }, status: :ok
  end

  checker = VpagoLogger.log(
    label: 'Spree::VpagoPaymentsController#check_transaction',
    data: vpago_log_context
  ) { @payment.payment_method.check_transaction(@payment) }

  if checker.success?
    render json: { status: :success }, status: :ok
  elsif checker.try(:failed?) == true
    render json: { status: :failed }, status: :ok
  else
    render json: { status: :pending }, status: :ok
  end
end

#checkout ⇒ Object

GET



15
16
17
18
19
20
21
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 15

def checkout
  return redirect_to @payment.processing_url, allow_other_host: true unless @payment.checkout?

  @order = @payment.order

  VpagoLogger.log(label: 'Spree::VpagoPaymentsController#checkout', data: vpago_log_context)
end

#find_payment ⇒ Object

Raises:

  • (ActiveRecord::RecordNotFound) 


144
145
146
147
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 144

def find_payment
  @payment = Vpago::PaymentFinder.new(params.permit!.to_h).find_and_verify
  raise ActiveRecord::RecordNotFound unless @payment.present?
end

#process_payment ⇒ Object

POST



66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 66

def process_payment
  return render json: { status: :ok }, status: :ok if request.method != 'POST'

  return_params = sanitize_return_params
  @payment = Vpago::PaymentFinder.new(return_params).find_and_verify

  if @payment.nil?
    VpagoLogger.error(
      label: 'Spree::VpagoPaymentsController#process_payment payment_not_found',
      data: vpago_log_context(params: return_params)
    )
    return render_not_found
  end

  VpagoLogger.log(label: 'Spree::VpagoPaymentsController#process_payment payment_found', data: vpago_log_context)

  # for ABA reviewing mode, we can disable pushback from bank, and only process it from our app UI instead.
  # This will give ABA team to know that we don't rely on just pushback and have fallback to process payment.
  if @payment.payment_method.type_payway_v2? && @payment.payment_method.reviewing_mode? && request_from_external_server?
    VpagoLogger.log(label: 'Spree::VpagoPaymentsController#process_payment skipped_reviewing_mode', data: vpago_log_context)
    return render json: { status: :ok }, status: :ok
  end

  unless @payment.order.paid?
    VpagoLogger.log(
      label: 'Spree::VpagoPaymentsController#process_payment enqueue_payment_processor_job',
      data: vpago_log_context
    ) { Vpago::PaymentProcessorJob.perform_later(payment_number: @payment.number) }
  end

  render json: { status: :ok }, status: :ok
rescue StandardError => e
  VpagoLogger.error(
    label: 'Spree::VpagoPaymentsController#process_payment failed',
    data: vpago_log_context(error_class: e.class.name, error_message: e.message, backtrace: e.backtrace&.first(5))
  )
  render json: { status: :internal_server_error, message: 'Failed to enqueue payment processor job' }, status: :internal_server_error
end

#processing ⇒ Object

GET



24
25
26
27
28
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 24

def processing
  @order = @payment.order

  VpagoLogger.log(label: 'Spree::VpagoPaymentsController#processing', data: vpago_log_context)
end

#render_not_found ⇒ Object 



156
157
158
159
160
161
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 156

def render_not_found
  respond_to do |format|
    format.html { render file: Rails.public_path.join('404.html'), status: :not_found, layout: false }
    format.json { render json: { status: :not_found }, status: :not_found }
  end
end

#request_from_external_server? ⇒ Boolean

Returns:

  • (Boolean) 


170
171
172
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 170

def request_from_external_server?
  params[:internal_client].blank? || params[:internal_client] == 'false'
end

#sanitize_return_params ⇒ Object 



135
136
137
138
139
140
141
142
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 135

def sanitize_return_params
  sanitized_params = params.permit!.to_h

  # In ABA case, it returns params in side return params.
  sanitized_params.merge!(JSON.parse(sanitized_params.delete(:return_params))) if sanitized_params[:return_params].present?

  sanitized_params
end

#success ⇒ Object

GET

Raises:

  • (CanCan::AccessDenied) 


31
32
33
34
35
36
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 31

def success
  @order = @payment.order
  raise CanCan::AccessDenied unless @order.completed?

  VpagoLogger.log(label: 'Spree::VpagoPaymentsController#success', data: vpago_log_context)
end

#true_money_process_payment ⇒ Object

POST



106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 106

def true_money_process_payment
  return render json: { status: { code: '000001', message: 'success' }, data: nil }, status: :ok if request.method != 'POST'

  @payment = Spree::Payment.find_by(number: params.dig(:data, :external_ref_id))

  if @payment.nil?
    VpagoLogger.error(
      label: 'Spree::VpagoPaymentsController#true_money_process_payment payment_not_found',
      data: vpago_log_context(external_ref_id: params.dig(:data, :external_ref_id))
    )
    return render_not_found
  end

  unless @payment.order.paid?
    VpagoLogger.log(
      label: 'Spree::VpagoPaymentsController#true_money_process_payment enqueue_payment_processor_job',
      data: vpago_log_context
    ) { Vpago::PaymentProcessorJob.perform_later(payment_number: @payment.number) }
  end

  render json: { status: { code: '000001', message: 'success' }, data: nil }, status: :ok
rescue StandardError => e
  VpagoLogger.error(
    label: 'Spree::VpagoPaymentsController#true_money_process_payment failed',
    data: vpago_log_context(error_class: e.class.name, error_message: e.message, backtrace: e.backtrace&.first(5))
  )
  render json: { status: :internal_server_error, message: 'Failed to enqueue payment processor job' }, status: :internal_server_error
end

#vpago_log_context(extra = {}) ⇒ Object 



174
175
176
177
178
179
180
181
182
183
184
 
# File 'app/controllers/spree/vpago_payments_controller.rb', line 174

def vpago_log_context(extra = {})
  {
    timestamp: Time.current.utc.iso8601(3),
    remote_ip: request.remote_ip,
    payment_number: @payment&.number,
    order_number: @payment&.order&.number,
    payment_method_type: @payment&.payment_method&.type,
    payment_method_name: @payment&.payment_method&.name,
    request_id: request.request_id
  }.merge(extra)
end