3e83d8d7d5
Includes: - Odoo 19 framework (odoo/) - 27 custom EnCoach addons (new_project/custom_addons/) - encoach_core, encoach_api, encoach_lms_api, encoach_adaptive_api - encoach_exam, encoach_taxonomy, encoach_adaptive, encoach_assignment - encoach_ai, encoach_ai_grading, encoach_ai_generation, encoach_ai_media - encoach_courseware, encoach_communication, encoach_subscription - encoach_notification, encoach_approval, encoach_branding - encoach_classroom, encoach_registration, encoach_stats - encoach_faq, encoach_ticket, encoach_training, encoach_resources - encoach_adaptive_ai, encoach_sis - 21 OpenEduCat Enterprise modules (new_project/enterprise-19/) - 14 OpenEduCat Community modules (new_project/openeducat_erp-19.0/) - Configuration: odoo.conf, requirements.txt, scripts - 200+ REST API endpoints with JWT authentication - SRS and test documentation Made-with: Cursor
50 lines
2.1 KiB
Python
50 lines
2.1 KiB
Python
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
import hashlib
|
|
import json
|
|
import logging
|
|
|
|
from odoo.http import Controller, request, Response, route
|
|
from odoo.tools import consteq
|
|
|
|
_logger = logging.getLogger(__name__)
|
|
|
|
|
|
class QFPayNotificationController(Controller):
|
|
@route('/qfpay/notify', type='http', auth='public', methods=['POST'], csrf=False)
|
|
def qfpay_notify(self, **kwargs):
|
|
"""
|
|
Endpoint to receive QFPay asynchronous payment/refund notifications.
|
|
Verifies signature and returns 'SUCCESS' if valid, else 400 error.
|
|
"""
|
|
raw_body = request.httprequest.get_data()
|
|
data = json.loads(raw_body.decode('utf-8'))
|
|
|
|
_logger.info("Received QFPay notification: %s", data)
|
|
|
|
# Retrieve the payment method to verify the signature
|
|
# Be careful, at this point we have not yet verified the signature
|
|
trade_no = data.get('orig_out_trade_no', data.get('out_trade_no'))
|
|
try:
|
|
[payment_uuid, session_id, pm_id] = trade_no.split('--')
|
|
except ValueError:
|
|
_logger.warning("QFpay invalid out_trade_no format")
|
|
return
|
|
qfpay_pm_sudo = request.env['pos.payment.method'].sudo().browse(int(pm_id))
|
|
if not qfpay_pm_sudo.exists() or not qfpay_pm_sudo.qfpay_notification_key:
|
|
_logger.warning("QFPay payment method does not have a notification key set")
|
|
return
|
|
|
|
sign_str = raw_body + qfpay_pm_sudo.qfpay_notification_key.encode()
|
|
computed_sign = hashlib.md5(sign_str).hexdigest().upper()
|
|
|
|
if not consteq(computed_sign, request.httprequest.headers.get('X-QF-SIGN')):
|
|
_logger.warning("QFPay notification signature mismatch")
|
|
return
|
|
|
|
# We have verified the signature we can trust the data
|
|
pos_session_sudo = request.env['pos.session'].sudo().browse(int(session_id))
|
|
qfpay_pm_sudo.qfpay_latest_response = json.dumps(data)
|
|
qfpay_pm_sudo._qfpay_handle_webhook(pos_session_sudo.config_id, data, payment_uuid)
|
|
|
|
return Response('SUCCESS', status=200)
|