bornhack-website/shop/views.py

import hashlib

from django.http import HttpResponseRedirect, Http404
from django.views.generic import CreateView, TemplateView, ListView, DetailView, View, FormView
from django.core.urlresolvers import reverse_lazy
from django.conf import settings
from django.contrib.auth.mixins import LoginRequiredMixin
from django.http import HttpResponse
from django.contrib import messages

from .models import Order, Product, EpayCallback, EpayPayment, OrderProductRelation
from .forms import CheckoutForm, AddToOrderForm


class ShopIndexView(ListView):
    model = Product
    template_name = "shop_index.html"

    def get_context_data(self, **kwargs):
        context = super(ShopIndexView, self).get_context_data(**kwargs)
        context['orders'] = Order.objects.filter(user=self.request.user)
        return context


class ProductDetailView(LoginRequiredMixin, FormView):
    model = Product
    template_name = 'product_detail.html'
    form_class = AddToOrderForm
    context_object_name = 'product'

    def get(self, request, *args, **kwargs):
        self.product = Product.objects.get(pk=kwargs.get('pk'))

    def form_valid(self, form):
        ### do we have an open order?
        try:
            order = Order.objects.get(user=self.request.user, finalized=False)
        except Order.DoesNotExist:
            ### no open order - open a new one
            order = Order.objects.create(user=request.user)

        ### get product from kwargs
        if self.product in order.products.all():
            ### this product is already added to this order, increase count by one
            OrderProductRelation.objects.filter(product=self.product, order=order).update(quantity=F('quantity') + 1)
        else:
            order.products.add(self.product)

        ### done
        return super(ProductDetailView, self).form_valid(form)


class OrderDetailView(LoginRequiredMixin, DetailView):
    model = Product
    template_name = 'order_detail.html'
    context_object_name = 'order'


class CheckoutView(LoginRequiredMixin, FormView):
    """
    Shows a summary of all products contained in an order, 
    total price, VAT info, and a button to finalize order and go to payment
    """
    model = Order
    template_name = 'checkout.html'
    form_class = CheckoutForm
    context_object_name = 'order'

    def get(self, request, *args, **kwargs):
        if self.get_object().user != request.user:
            raise Http404("Order not found")

        if self.get_object().paid:
            messages.error(request, 'This order is already paid for!')
            return HttpResponseRedirect('shop:order_detail')

        if not self.get_object().products:
            messages.error(request, 'This order contains no products!')
            return HttpResponseRedirect('shop:order_detail')

        return self.render_to_response(self.get_context_data())

    def form_valid(self, form):
        ### mark order as finalized and redirect user to payment
        form.instance.finalized=True

        ### set payment_method based on submit button used
        if 'credit_card' in form.data:
            form.instance.payment_method=='credit_card'
        elif 'blockchain' in form.data:
            form.instance.payment_method=='blockchain'
        elif 'bank_transfer' in form.data:
            form.instance.payment_method=='bank_transfer'
        else:
            ### unknown submit button
            messages.error(request, 'Unknown submit button :(')
            return reverse('shop:checkout', kwargs={'orderid': self.get_object.id})

        return super(CheckoutView, self).form_valid(form)

    def get_success_url(self):
        if self.get_object.payment_method == 'credit_card':
            return reverse('shop:epay_form', kwargs={'orderid': self.get_object.id})
        elif self.get_object.payment_method == 'blockchain':
            return reverse('shop:coinify_pay', kwargs={'orderid': self.get_object.id})
        elif self.get_object.payment_method == 'bank_transfer':
            return reverse('shop:bank_transfer', kwargs={'orderid': self.get_object.id})
        else:
            ### unknown payment method
            messages.error(request, 'Unknown payment method :(')
            return reverse('shop:checkout', kwargs={'orderid': self.get_object.id})


class CoinifyRedirectView(TemplateView):
    template_name = 'coinify_redirect.html'
    
    def get(self, request, *args, **kwargs):
        ### validate a few things
        self.order = Order.objects.get(pk=kwargs.get('order_id'))
        if self.order.user != request.user:
            raise Http404("Order not found")

        if not self.order.finalized:
            messages.error(request, 'This order is still open!')
            return HttpResponseRedirect('shop:order_detail')

        if self.order.paid:
            messages.error(request, 'This order is already paid for!')
            return HttpResponseRedirect('shop:order_detail')

        if not self.get_object().products:
            messages.error(request, 'This order contains no products!')
            return HttpResponseRedirect('shop:order_detail')

        return self.render_to_response(self.get_context_data())

    def get_context_data(self, **kwargs):
        order = Order.objects.get(pk=kwargs.get('order_id'))
        context = super(CoinifyRedirectView, self).get_context_data(**kwargs)
        context['order'] = order
        
        ### Initiate coinify API and create invoice
        coinifyapi = CoinifyAPI(settings.COINIFY_API_KEY, settings.COINIFY_API_SECRET)
        response = coinifyapi.invoice_create(
            amount,
            currency,
            plugin_name='BornHack 2016 webshop',
            plugin_version='1.0',
            description='BornHack 2016 order id #%s' % order.id,
            callback_url=reverse('shop:coinfy_callback', kwargs={'orderid': order.id}),
            return_url=reverse('shop:order_paid', kwargs={'orderid': order.id}),
        )

        if not response['success']:
            api_error = response['error']
            print "API error: %s (%s)" % (api_error['message'], api_error['code'] )

        invoice = response['data']
        ### change this to pass only needed data when we get that far
        context['invoice'] = invoice
        return context


# class EpayView(TemplateView):
#     template_name = 'tickets/epay_form.html'
#
#     def get_context_data(self, **kwargs):
#         ticket = Ticket.objects.get(pk=kwargs.get('ticket_id'))
#         accept_url = ticket.get_absolute_url()
#         amount = ticket.ticket_type.price * 100
#         order_id = str(ticket.pk)
#         description = str(ticket.user.pk)
#
#         hashstring = (
#             '{merchant_number}{description}11{amount}DKK'
#             '{order_id}{accept_url}{md5_secret}'
#         ).format(
#             merchant_number=settings.EPAY_MERCHANT_NUMBER,
#             description=description,
#             amount=str(amount),
#             order_id=str(order_id),
#             accept_url=accept_url,
#             md5_secret=settings.EPAY_MD5_SECRET,
#         )
#         epay_hash = hashlib.md5(hashstring).hexdigest()
#
#         context = super(EpayView, self).get_context_data(**kwargs)
#         context['merchant_number'] = settings.EPAY_MERCHANT_NUMBER
#         context['description'] = description
#         context['order_id'] = order_id
#         context['accept_url'] = accept_url
#         context['amount'] = amount
#         context['epay_hash'] = epay_hash
#         return context
#
#
# class EpayCallbackView(View):
#
#     def get(self, request, **kwargs):
#
#         callback = EpayCallback.objects.create(
#             payload=request.GET
#         )
#
#         if 'orderid' in request.GET:
#             ticket = Ticket.objects.get(pk=request.GET.get('order_id'))
#             query = dict(
#                 map(
#                     lambda x: tuple(x.split('=')),
#                     request.META['QUERY_STRING'].split('&')
#                 )
#             )
#
#             hashstring = (
#                 '{merchant_number}{description}11{amount}DKK'
#                 '{order_id}{accept_url}{md5_secret}'
#             ).format(
#                 merchant_number=query.get('merchantnumber'),
#                 description=query.get('description'),
#                 amount=query.get('amount'),
#                 order_id=query.get('orderid'),
#                 accept_url=query.get('accepturl'),
#                 md5_secret=settings.EPAY_MD5_SECRET,
#             )
#             epay_hash = hashlib.md5(hashstring).hexdigest()
#
#             if not epay_hash == request.GET['hash']:
#                 return HttpResponse(status=400)
#
#             EpayPayment.objects.create(
#                 ticket=ticket,
#                 callback=callback,
#                 txnid=request.GET['txnid'],
#             )
#         else:
#             return HttpResponse(status=400)
#
#         return HttpResponse('OK')