initial commit 2

2 files changed, 59 insertions, 0 deletions

diff --git a/addons/payment_sips/controllers/__init__.py b/addons/payment_sips/controllers/__init__.py
new file mode 100644
index 00000000..65a8c120
--- /dev/null
+++ b/addons/payment_sips/controllers/__init__.py
@@ -0,0 +1,3 @@
+# -*- coding: utf-8 -*-
+
+from . import main
diff --git a/addons/payment_sips/controllers/main.py b/addons/payment_sips/controllers/main.py
new file mode 100644
index 00000000..cf83c626
--- /dev/null
+++ b/addons/payment_sips/controllers/main.py
@@ -0,0 +1,56 @@
+# -*- coding: utf-8 -*-
+
+# Copyright 2015 Eezee-It
+
+import json
+import logging
+import pprint
+import werkzeug
+
+from odoo import http
+from odoo.http import request
+
+_logger = logging.getLogger(__name__)
+
+
+class SipsController(http.Controller):
+    _notify_url = '/payment/sips/ipn/'
+    _return_url = '/payment/sips/dpn/'
+
+    def sips_validate_data(self, **post):
+        sips = request.env['payment.acquirer'].search([('provider', '=', 'sips')], limit=1)
+        security = sips.sudo()._sips_generate_shasign(post)
+        if security == post['Seal']:
+            _logger.debug('Sips: validated data')
+            return request.env['payment.transaction'].sudo().form_feedback(post, 'sips')
+        _logger.warning('Sips: data are corrupted')
+        return False
+
+    @http.route('/payment/sips/ipn/', type='http', auth='public', methods=['POST'], csrf=False)
+    def sips_ipn(self, **post):
+        """ Sips IPN. """
+        _logger.info('Beginning Sips IPN form_feedback with post data %s', pprint.pformat(post))  # debug
+        if not post:
+            # SIPS sometimes sends empty notifications, the reason why is
+            # unclear but they tend to pollute logs and do not provide any
+            # meaningful information; log as a warning instead of a traceback
+            _logger.warning('Sips: received empty notification; skip.')
+        else:
+            self.sips_validate_data(**post)
+        return ''
+
+    @http.route('/payment/sips/dpn', type='http', auth="public", methods=['POST'], csrf=False, save_session=False)
+    def sips_dpn(self, **post):
+        """ Sips DPN
+        The session cookie created by Odoo has not the attribute SameSite. Most of browsers will force this attribute
+        with the value 'Lax'. After the payment, Sips will perform a POST request on this route. For all these reasons,
+        the cookie won't be added to the request. As a result, if we want to save the session, the server will create
+        a new session cookie. Therefore, the previous session and all related information will be lost, so it will lead
+        to undesirable behaviors. This is the reason why `save_session=False` is needed.
+        """
+        try:
+            _logger.info('Beginning Sips DPN form_feedback with post data %s', pprint.pformat(post))  # debug
+            self.sips_validate_data(**post)
+        except:
+            pass
+        return werkzeug.utils.redirect('/payment/process')