## $Id: browser.py 8256 2012-04-23 07:36:46Z henrik $
##
## Copyright (C) 2012 Uli Fouquet & Henrik Bettermann
## This program is free software; you can redistribute it and/or modify
## it under the terms of the GNU General Public License as published by
## the Free Software Foundation; either version 2 of the License, or
## (at your option) any later version.
##
## This program is distributed in the hope that it will be useful,
## but WITHOUT ANY WARRANTY; without even the implied warranty of
## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
## GNU General Public License for more details.
##
## You should have received a copy of the GNU General Public License
## along with this program; if not, write to the Free Software
## Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
##
from datetime import datetime
import httplib
import urllib
from xml.dom.minidom import parseString
import grok
from waeup.kofa.browser.layout import KofaPage, UtilityView
from waeup.kofa.accesscodes import create_accesscode
from waeup.uniben.students.interfaces import ICustomStudentOnlinePayment
from waeup.uniben.applicants.interfaces import ICustomApplicantOnlinePayment
from waeup.kofa.students.browser import write_log_message
from waeup.kofa.students.viewlets import RequestCallbackActionButton as RCABStudent
from waeup.kofa.applicants.viewlets import RequestCallbackActionButton as RCABApplicant
from waeup.uniben.students.utils import actions_after_student_payment
from waeup.uniben.applicants.utils import actions_after_applicant_payment
from waeup.uniben.interfaces import MessageFactory as _
# Interswitch test account data:
#
# Card Number: 6274807700000007
# Expiry Date: July 2012
# PIN: 0000
# Card Number: 6278050000000007
# Expiry Date: July 2012
# PIN: 0000
PRODUCT_ID = '57'
SITE_NAME = 'xyz.waeup.org'
PROVIDER_ACCT = '2345'
PROVIDER_BANK_ID = '8'
PROVIDER_ITEM_NAME = 'Kofa Provider Fee'
INSTITUTION_ACCT = '1234'
INSTITUTION_BANK_ID = '9'
INSTITUTION_NAME = 'Sample University'
CURRENCY = '566'
PAY_ITEM_ID = '5700'
QUERY_URL = 'https://testwebpay.interswitchng.com/test_paydirect/services/TransactionQueryURL.aspx'
POST_ACTION = 'https://testwebpay.interswitchng.com/test_paydirect/webpay/pay.aspx'
HOST = 'testwebpay.interswitchng.com'
URL = '/test_paydirect/services/TransactionQueryWs.asmx'
httplib.HTTPConnection.debuglevel = 0
def collect_xml_data(payment, xmldict):
xmldict['detail_ref'] = payment.p_id
xmldict['provider_amt'] = 100 * payment.surcharge_1
xmldict['provider_acct'] = PROVIDER_ACCT
xmldict['provider_bank_id'] = PROVIDER_BANK_ID
xmldict['provider_item_name'] = PROVIDER_ITEM_NAME
xmldict['institution_amt'] = 100 * payment.amount_auth
xmldict['institution_acct'] = INSTITUTION_ACCT
xmldict['institution_bank_id'] = INSTITUTION_BANK_ID
xmldict['institution_item_name'] = payment.p_category
xmldict['institution_name'] = INSTITUTION_NAME
# Interswitch amount is not part of the xml data
xmltext = """
""" % xmldict
xml_data = """""" % xmltext
return xml_data
def SOAP_post(soap_action,xml):
"""Handles making the SOAP request.
Further reading:
http://testwebpay.interswitchng.com/test_paydirect/services/TransactionQueryWs.asmx?op=getTransactionData
"""
h = httplib.HTTPConnection(HOST)
headers={
'Host':HOST,
'Content-Type':'text/xml; charset=utf-8',
'Content-Length':len(xml),
'SOAPAction':'"%s"' % soap_action,
}
h.request('POST', URL, body=xml,headers=headers)
r = h.getresponse()
d = r.read()
if r.status!=200:
raise ValueError('Error connecting: %s, %s' % (r.status, r.reason))
return d
def get_SOAP_response(product_id, transref):
xml="""\
%s
%s
""" % (product_id, transref)
result_xml=SOAP_post("http://tempuri.org/getTransactionData",xml)
doc=parseString(result_xml)
response=doc.getElementsByTagName('getTransactionDataResult')[0].firstChild.data
return response
def query_interswitch(user, payment, view):
ob_class = view.__implemented__.__name__
sr = get_SOAP_response(PRODUCT_ID, payment.p_id)
user.loggerInfo(ob_class, 'callback received: %s' % sr)
wlist = sr.split(':')
if len(wlist) != 7:
view.flash(_('Invalid callback: ${a}',
mapping = {'a': wlist}))
user.loggerInfo(ob_class,'invalid callback: %s' % payment.p_id)
return False
payment.r_code = wlist[0]
payment.r_desc = wlist[1]
payment.r_amount_approved = float(wlist[2]) / 100
payment.r_card_num = wlist[3]
payment.r_pay_reference = wlist[5]
if payment.r_code != '00':
view.flash(_('Unsuccessful callback: ${a}', mapping = {'a': wlist[1]}))
user.loggerInfo(ob_class,'unsuccessful callback: %s' % payment.p_id)
payment.p_state = 'failed'
return False
total_amount_auth = (
payment.amount_auth
+ payment.surcharge_1
+ payment.surcharge_2)
if payment.r_amount_approved != total_amount_auth:
view.flash(_('Wrong amount'))
user.loggerInfo(ob_class,'successful callback but wrong amount: %s'
% payment.p_id)
payment.p_state = 'failed'
return False
if wlist[4] != payment.p_id:
view.flash(_('Wrong transaction id'))
user.loggerInfo(ob_class,'successful callback but wrong transaction id: %s'
% payment.p_id)
payment.p_state = 'failed'
return False
user.loggerInfo(ob_class,'successful callback: %s' % payment.p_id)
payment.p_state = 'paid'
payment.payment_date = datetime.now()
return True
class InterswitchActionButtonStudent(RCABStudent):
grok.order(2)
grok.context(ICustomStudentOnlinePayment)
icon = 'actionicon_pay.png'
text = _('CollegePAY')
target = 'goto_interswitch'
@property
def target_url(self):
if self.context.p_state != 'unpaid':
return ''
return self.view.url(self.view.context, self.target)
class InterswitchActionButtonApplicant(RCABApplicant):
grok.order(2)
grok.context(ICustomApplicantOnlinePayment)
icon = 'actionicon_pay.png'
text = _('CollegePAY')
target = 'goto_interswitch'
@property
def target_url(self):
if self.context.p_state != 'unpaid':
return ''
return self.view.url(self.view.context, self.target)
# Deprecated
class InterswitchRequestCallbackActionButtonStudent(RCABStudent):
grok.order(3)
grok.context(ICustomStudentOnlinePayment)
icon = 'actionicon_call.png'
text = _('Request CollegePAY callback')
def target_url(self):
if self.context.p_state == 'paid':
return ''
site_redirect_url = self.view.url(self.view.context, 'isw_callback')
args = {
'transRef':self.context.p_id,
'prodID':PRODUCT_ID,
'redirectURL':site_redirect_url}
return QUERY_URL + '?%s' % urllib.urlencode(args)
# Alternative preferred solution
class InterswitchRequestWebserviceActionButtonStudent(RCABStudent):
grok.order(4)
grok.context(ICustomStudentOnlinePayment)
icon = 'actionicon_call.png'
text = _('Request CollegePAY webservice')
target = 'request_webservice'
class InterswitchRequestWebserviceActionButtonApplicant(RCABApplicant):
grok.order(4)
grok.context(ICustomApplicantOnlinePayment)
icon = 'actionicon_call.png'
text = _('Request CollegePAY webservice')
target = 'request_webservice'
class InterswitchPageStudent(KofaPage):
""" View which sends a POST request to the Interswitch
CollegePAY payment gateway.
"""
grok.context(ICustomStudentOnlinePayment)
grok.name('goto_interswitch')
grok.template('student_goto_interswitch')
grok.require('waeup.payStudent')
label = _('Submit data to CollegePAY (Interswitch Payment Gateway)')
submit_button = _('Submit')
action = POST_ACTION
site_name = SITE_NAME
currency = CURRENCY
pay_item_id = PAY_ITEM_ID
product_id = PRODUCT_ID
def update(self):
#if self.context.p_state != 'unpaid':
if self.context.p_state == 'paid':
self.flash(_("Payment ticket can't be re-send to CollegePAY."))
self.redirect(self.url(self.context, '@@index'))
return
self.student = self.context.getStudent()
certificate = getattr(self.student['studycourse'],'certificate',None)
xmldict = {}
if certificate is not None:
xmldict['department'] = certificate.__parent__.__parent__.code
xmldict['faculty'] = certificate.__parent__.__parent__.__parent__.code
else:
xmldict['department'] = None
xmldict['faculty'] = None
self.amount = (self.context.amount_auth + self.context.surcharge_1 +
self.context.surcharge_2 + self.context.surcharge_3)
self.amount_100 = 100 * self.amount
self.local_date_time = str(self.context.creation_date)
self.site_redirect_url = self.url(self.context, 'request_webservice')
self.xml_data = collect_xml_data(self.context, xmldict)
return
class InterswitchPageApplicant(InterswitchPageStudent):
""" View which sends a POST request to the Interswitch
CollegePAY payment gateway.
"""
grok.context(ICustomApplicantOnlinePayment)
grok.require('waeup.payApplicant')
grok.template('applicant_goto_interswitch')
def update(self):
if self.context.p_state != 'unpaid':
self.flash(_("Payment ticket can't be re-send to CollegePAY."))
self.redirect(self.url(self.context, '@@index'))
return
self.applicant = self.context.__parent__
xmldict = {}
xmldict['department'] = None
xmldict['faculty'] = None
self.amount = (self.context.amount_auth + self.context.surcharge_1 +
self.context.surcharge_2 + self.context.surcharge_3)
self.amount_100 = 100 * self.amount
self.local_date_time = str(self.context.creation_date)
self.site_redirect_url = self.url(self.context, 'request_webservice')
self.xml_data = collect_xml_data(self.context, xmldict)
return
# Deprecated
class InterswitchPaymentCallbackPageStudent(UtilityView, grok.View):
""" Callback view for the CollegePAY gateway
"""
grok.context(ICustomStudentOnlinePayment)
grok.name('isw_callback')
grok.require('waeup.payStudent')
# This view is not yet working for offline querying transactions
# since the query string differs from the query string sent after
# posting transactions. This Interswitch bug must be removed first.
# Alternatively, we could use the webservice only and replace
# the RequestCallbackActionButton by a RequestWebserviceActionButton
def update(self):
if self.context.p_state == 'paid':
self.flash(_('This ticket has already been paid.'))
return
student = self.context.getStudent()
query = self.request.form
write_log_message(self,'callback received: %s' % query)
self.context.r_card_num = query.get('cardNum', None)
self.context.r_code = query.get('resp', None)
self.context.r_pay_reference = query.get('payRef', None)
self.context.r_amount_approved = float(query.get('apprAmt', '0.0')) / 100
self.context.r_desc = query.get('desc', None)
if self.context.r_code != '00':
self.flash(_('Unsuccessful callback: ${a}',
mapping = {'a': query.get('desc', _('Incomplete query string.'))}))
write_log_message(self,'unsuccessful callback: %s' % self.context.p_id)
self.context.p_state = 'failed'
return
total_amount_auth = (
self.context.amount_auth
+ self.context.surcharge_1
+ self.context.surcharge_2)
if self.context.r_amount_approved != total_amount_auth:
self.flash(_('Wrong amount'))
write_log_message(
self,'successful but wrong amount: %s' % self.context.p_id)
self.context.p_state = 'failed'
return
try:
validation_list = get_SOAP_response(
PRODUCT_ID, self.context.p_id).split(':')
# Validation does not make sense yet since the query string
# formats are conflicting. We are only printing the validation
# string, nothing else.
print 'WARNING: Webservice validation is not yet implemented'
print 'validation list: %s' % validation_list
except:
print 'Connection to webservice failed.'
# Add webservice validation here
write_log_message(self,'valid callback: %s' % self.context.p_id)
self.context.p_state = 'paid'
self.context.payment_date = datetime.now()
actions_after_student_payment(student, self.context, self)
return
def render(self):
self.redirect(self.url(self.context, '@@index'))
return
# Alternative solution, replaces InterswitchPaymentCallbackPage
class InterswitchPaymentRequestWebservicePageStudent(UtilityView, grok.View):
""" Request webservice view for the CollegePAY gateway
"""
grok.context(ICustomStudentOnlinePayment)
grok.name('request_webservice')
grok.require('waeup.payStudent')
def update(self):
if self.context.p_state == 'paid':
self.flash(_('This ticket has already been paid.'))
return
student = self.context.getStudent()
if query_interswitch(student, self.context, self):
actions_after_student_payment(student, self.context, self)
return
def render(self):
self.redirect(self.url(self.context, '@@index'))
return
class InterswitchPaymentRequestWebservicePageApplicant(UtilityView, grok.View):
""" Request webservice view for the CollegePAY gateway
"""
grok.context(ICustomApplicantOnlinePayment)
grok.name('request_webservice')
grok.require('waeup.payApplicant')
def update(self):
if self.context.p_state == 'paid':
self.flash(_('This ticket has already been paid.'))
return
applicant = self.context.__parent__
if query_interswitch(applicant, self.context, self):
actions_after_applicant_payment(student, self.context, self)
return
def render(self):
self.redirect(self.url(self.context, '@@index'))
return