Add /ipn/ API route to process PayPal IPNs
This commit is contained in:
@@ -0,0 +1,293 @@
|
||||
import datetime
|
||||
import json
|
||||
import requests
|
||||
from rest_framework.exceptions import ValidationError
|
||||
from uuid import uuid4
|
||||
|
||||
from django.db.models import Sum
|
||||
from django.utils import timezone
|
||||
|
||||
from . import models, serializers, utils
|
||||
|
||||
SANDBOX = True
|
||||
if SANDBOX:
|
||||
VERIFY_URL = 'https://ipnpb.sandbox.paypal.com/cgi-bin/webscr'
|
||||
OUR_EMAIL = 'seller@paypalsandbox.com'
|
||||
OUR_CURRENCY = 'USD'
|
||||
else:
|
||||
VERIFY_URL = 'https://ipnpb.paypal.com/cgi-bin/webscr'
|
||||
OUR_EMAIL = 'dunno'
|
||||
OUR_CURRENCY = 'CAD'
|
||||
|
||||
def parse_paypal_date(string):
|
||||
'''
|
||||
Convert paypal date string into python datetime. Paypal's a bunch of idiots.
|
||||
Their API returns dates in some custom format, so we have to parse it.
|
||||
|
||||
Stolen from:
|
||||
https://github.com/spookylukey/django-paypal/blob/master/paypal/standard/forms.py
|
||||
|
||||
Return the UTC python datetime.
|
||||
'''
|
||||
MONTHS = [
|
||||
'Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug',
|
||||
'Sep', 'Oct', 'Nov', 'Dec',
|
||||
]
|
||||
|
||||
value = string.strip()
|
||||
try:
|
||||
time_part, month_part, day_part, year_part, zone_part = value.split()
|
||||
month_part = month_part.strip('.')
|
||||
day_part = day_part.strip(',')
|
||||
month = MONTHS.index(month_part) + 1
|
||||
day = int(day_part)
|
||||
year = int(year_part)
|
||||
hour, minute, second = map(int, time_part.split(':'))
|
||||
dt = datetime.datetime(year, month, day, hour, minute, second)
|
||||
except ValueError as e:
|
||||
raise ValidationError('Invalid date format {} {}'.format(
|
||||
value, str(e)
|
||||
))
|
||||
|
||||
if zone_part in ['PDT', 'PST']:
|
||||
# PST/PDT is 'US/Pacific' and ignored, localize only cares about date
|
||||
dt = timezone.pytz.timezone('US/Pacific').localize(dt)
|
||||
dt = dt.astimezone(timezone.pytz.UTC)
|
||||
else:
|
||||
raise ValidationError('Bad timezone: ' + zone_part)
|
||||
return dt
|
||||
|
||||
def record_ipn(data):
|
||||
'''
|
||||
Record each individual IPN (even dupes) for logging and debugging
|
||||
'''
|
||||
return models.IPN.objects.create(
|
||||
data=data.urlencode(),
|
||||
status='New',
|
||||
)
|
||||
|
||||
def update_ipn(ipn, status):
|
||||
ipn.status = status
|
||||
ipn.save()
|
||||
|
||||
def verify_paypal_ipn(data):
|
||||
params = data.copy()
|
||||
params['cmd'] = '_notify-validate'
|
||||
headers = {
|
||||
'content-type': 'application/x-www-form-urlencoded',
|
||||
'user-agent': 'spaceport',
|
||||
}
|
||||
|
||||
try:
|
||||
r = requests.post(VERIFY_URL, params=params, headers=headers, timeout=2)
|
||||
r.raise_for_status()
|
||||
if r.text != 'VERIFIED':
|
||||
return False
|
||||
except BaseException as e:
|
||||
print('Problem verifying IPN: {} - {}'.format(e.__class__.__name__, str(e)))
|
||||
return False
|
||||
|
||||
return True
|
||||
|
||||
def build_tx(data):
|
||||
amount = float(data['mc_gross'])
|
||||
return dict(
|
||||
account_type='PayPal',
|
||||
amount=amount,
|
||||
date=parse_paypal_date(data['payment_date']),
|
||||
info_source='PayPal IPN',
|
||||
payment_method=data['payment_type'],
|
||||
paypal_payer_id=data['payer_id'],
|
||||
paypal_txn_id=data['txn_id'],
|
||||
reference_number=data['txn_id'],
|
||||
)
|
||||
|
||||
def create_unmatched_member_tx(data):
|
||||
transactions = models.Transaction.objects
|
||||
|
||||
report_memo = 'Cant link sender name: {} {}, email: {}, note: {}'.format(
|
||||
data['first_name'],
|
||||
data['last_name'],
|
||||
data['payer_email'],
|
||||
data['custom'],
|
||||
)
|
||||
|
||||
return transactions.create(
|
||||
**build_tx(data),
|
||||
report_memo=report_memo,
|
||||
report_type='Unmatched Member',
|
||||
)
|
||||
|
||||
def create_member_dues_tx(data, member, num_months):
|
||||
transactions = models.Transaction.objects
|
||||
|
||||
# new member 3 for 2 will have to be manual anyway
|
||||
if num_months == 11:
|
||||
num_months = 12
|
||||
deal = '12 for 11, '
|
||||
else:
|
||||
deal = ''
|
||||
|
||||
user = getattr(member, 'user', None)
|
||||
memo = '{}{} {} - Protospace Membership, {}'.format(
|
||||
deal,
|
||||
data['first_name'],
|
||||
data['last_name'],
|
||||
data['payer_email'],
|
||||
)
|
||||
|
||||
tx = transactions.create(
|
||||
**build_tx(data),
|
||||
member_id=member.id,
|
||||
memo=memo,
|
||||
number_of_membership_months=num_months,
|
||||
user=user,
|
||||
)
|
||||
utils.tally_membership_months(member)
|
||||
return tx
|
||||
|
||||
def create_unmatched_purchase_tx(data, member):
|
||||
transactions = models.Transaction.objects
|
||||
|
||||
user = getattr(member, 'user', None)
|
||||
report_memo = 'Unknown payment reason: {} {}, email: {}, note: {}'.format(
|
||||
data['first_name'],
|
||||
data['last_name'],
|
||||
data['payer_email'],
|
||||
data['custom'],
|
||||
)
|
||||
|
||||
return transactions.create(
|
||||
**build_tx(data),
|
||||
member_id=member.id,
|
||||
report_memo=report_memo,
|
||||
report_type='Unmatched Purchase',
|
||||
user=user,
|
||||
)
|
||||
|
||||
def create_member_training_tx(data, member, training):
|
||||
transactions = models.Transaction.objects
|
||||
|
||||
user = getattr(member, 'user', None)
|
||||
memo = '{} {} - {} Course, email: {}, session: {}, training: {}'.format(
|
||||
data['first_name'],
|
||||
data['last_name'],
|
||||
training.session.course.name,
|
||||
data['payer_email'],
|
||||
str(training.session.id),
|
||||
str(training.id),
|
||||
)
|
||||
|
||||
return transactions.create(
|
||||
**build_tx(data),
|
||||
member_id=member.id,
|
||||
memo=memo,
|
||||
user=user,
|
||||
)
|
||||
|
||||
def check_training(data, member, training_id, amount):
|
||||
trainings = models.Training.objects
|
||||
|
||||
if not trainings.filter(id=training_id).exists():
|
||||
return False
|
||||
|
||||
training = trainings.get(id=training_id)
|
||||
|
||||
if training.attendance_status != 'waiting for payment':
|
||||
return False
|
||||
|
||||
if not training.session:
|
||||
return False
|
||||
|
||||
if training.session.is_cancelled:
|
||||
return False
|
||||
|
||||
if training.session.cost != amount:
|
||||
return False
|
||||
|
||||
if not training.user:
|
||||
return False
|
||||
|
||||
if training.user.member != member:
|
||||
return False
|
||||
|
||||
training.attendance_status = 'confirmed'
|
||||
training.save()
|
||||
|
||||
print('Amount valid for training cost, id:', training.id)
|
||||
return create_member_training_tx(data, member, training)
|
||||
|
||||
|
||||
def process_paypal_ipn(data):
|
||||
'''
|
||||
Receive IPN from PayPal, then verify it. If it's good, try to associate it
|
||||
with a member. If the value is a multiple of member dues, credit that many
|
||||
months of membership. Ignore if payment incomplete or duplicate IPN.
|
||||
|
||||
Blocks the IPN POST response, so keep it quick.
|
||||
'''
|
||||
ipn = record_ipn(data)
|
||||
|
||||
if verify_paypal_ipn(data):
|
||||
print('IPN verified')
|
||||
else:
|
||||
update_ipn(ipn, 'Verification Failed')
|
||||
return False
|
||||
|
||||
amount = float(data['mc_gross'])
|
||||
|
||||
if data['payment_status'] != 'Completed':
|
||||
print('Payment not yet completed, ignoring')
|
||||
update_ipn(ipn, 'Payment Incomplete')
|
||||
return False
|
||||
|
||||
if data['receiver_email'] != OUR_EMAIL:
|
||||
print('Payment not for us, ignoring')
|
||||
update_ipn(ipn, 'Invalid Receiver')
|
||||
return False
|
||||
|
||||
if data['mc_currency'] != OUR_CURRENCY:
|
||||
print('Payment currency invalid, ignoring')
|
||||
update_ipn(ipn, 'Invalid Currency')
|
||||
return False
|
||||
|
||||
transactions = models.Transaction.objects
|
||||
members = models.Member.objects
|
||||
hints = models.PayPalHint.objects
|
||||
|
||||
if transactions.filter(paypal_txn_id=data['txn_id']).exists():
|
||||
print('Duplicate transaction, ignoring')
|
||||
update_ipn(ipn, 'Duplicate')
|
||||
return False
|
||||
|
||||
if not hints.filter(account=data['payer_id']).exists():
|
||||
print('Unable to associate with member, reporting')
|
||||
update_ipn(ipn, 'Accepted, Unmatched Member')
|
||||
return create_unmatched_member_tx(data)
|
||||
|
||||
member_id = hints.get(account=data['payer_id']).member_id
|
||||
member = members.get(id=member_id)
|
||||
monthly_fees = member.monthly_fees
|
||||
|
||||
if amount.is_integer() and amount % monthly_fees == 0:
|
||||
num_months = int(amount // monthly_fees)
|
||||
else:
|
||||
num_months = 0
|
||||
|
||||
if num_months:
|
||||
print('Amount valid for membership dues, adding months:', num_months)
|
||||
update_ipn(ipn, 'Accepted, Member Dues')
|
||||
return create_member_dues_tx(data, member, num_months)
|
||||
|
||||
try:
|
||||
custom_json = json.loads(data['custom'])
|
||||
except (KeyError, ValueError):
|
||||
custom_json = False
|
||||
|
||||
if custom_json and 'training' in custom_json:
|
||||
tx = check_training(data, member, custom_json['training'], amount)
|
||||
if tx: return tx
|
||||
|
||||
print('Unable to find a reason for payment, reporting')
|
||||
update_ipn(ipn, 'Accepted, Unmatched Purchase')
|
||||
return create_unmatched_purchase_tx(data, member)
|
||||
Reference in New Issue
Block a user