Horacio Tellez
ddda5d4a26
Before this commit the public user did not have access to tokens or the possibility of saving payment methods. When receiving a link to pay the customer (even if not logged in) should be able to use tokens saved by the parter of the document and also save new payment methods. This is intuitively correct: as the possesor of the link, the customer have rights to pay with tokens linked to the partner. After this commit tokens linked to the partner of the document will be visible to the public user and also the possibily to save payment methods. Task - 2799296 closes odoo/odoo#104472 Related: odoo/enterprise#34792 Signed-off-by: Antoine Vandevenne (anv) <anv@odoo.com>
143 lines
6.9 KiB
Python
143 lines
6.9 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
from odoo import http, _
|
|
from odoo.exceptions import ValidationError
|
|
from odoo.http import request
|
|
from odoo.tools.json import scriptsafe as json_safe
|
|
|
|
from odoo.addons.payment import utils as payment_utils
|
|
from odoo.addons.payment.controllers import portal as payment_portal
|
|
|
|
|
|
class PaymentPortal(payment_portal.PaymentPortal):
|
|
@http.route('/donation/pay', type='http', methods=['GET', 'POST'], auth='public', website=True, sitemap=False)
|
|
def donation_pay(self, **kwargs):
|
|
""" Behaves like PaymentPortal.payment_pay but for donation
|
|
|
|
:param dict kwargs: As the parameters of in payment_pay, with the additional:
|
|
- str donation_options: The options settled in the donation snippet
|
|
- str donation_descriptions: The descriptions for all prefilled amounts
|
|
:return: The rendered donation form
|
|
:rtype: str
|
|
:raise: werkzeug.exceptions.NotFound if the access token is invalid
|
|
"""
|
|
kwargs['is_donation'] = True
|
|
kwargs['currency_id'] = int(kwargs.get('currency_id', request.env.company.currency_id.id))
|
|
kwargs['amount'] = float(kwargs.get('amount', 25))
|
|
kwargs['donation_options'] = kwargs.get('donation_options', json_safe.dumps(dict(customAmount="freeAmount")))
|
|
|
|
if request.env.user._is_public():
|
|
kwargs['partner_id'] = request.env.user.partner_id.id
|
|
kwargs['access_token'] = payment_utils.generate_access_token(kwargs['partner_id'], kwargs['amount'], kwargs['currency_id'])
|
|
|
|
return self.payment_pay(**kwargs)
|
|
|
|
@http.route('/donation/get_provider_fees', type='json', auth='public', website=True, sitemap=False)
|
|
def get_provider_fees(self, provider_ids=None, amount=None, currency_id=None, country_id=None):
|
|
providers_sudo = request.env['payment.provider'].sudo().browse(provider_ids)
|
|
currency = request.env['res.currency'].browse(currency_id)
|
|
country = request.env['res.country'].browse(country_id)
|
|
|
|
# Compute the fees taken by providers supporting the feature
|
|
fees_by_provider = {
|
|
pro_sudo.id: pro_sudo._compute_fees(amount, currency, country)
|
|
for pro_sudo in providers_sudo.filtered('fees_active')
|
|
}
|
|
return fees_by_provider
|
|
|
|
@http.route('/donation/transaction/<minimum_amount>', type='json', auth='public', website=True, sitemap=False)
|
|
def donation_transaction(self, amount, currency_id, partner_id, access_token, minimum_amount=0, **kwargs):
|
|
if float(amount) < float(minimum_amount):
|
|
raise ValidationError(_('Donation amount must be at least %.2f.', float(minimum_amount)))
|
|
use_public_partner = request.env.user._is_public() or not partner_id
|
|
if use_public_partner:
|
|
details = kwargs['partner_details']
|
|
if not details.get('name'):
|
|
raise ValidationError(_('Name is required.'))
|
|
if not details.get('email'):
|
|
raise ValidationError(_('Email is required.'))
|
|
if not details.get('country_id'):
|
|
raise ValidationError(_('Country is required.'))
|
|
partner_id = request.website.user_id.partner_id.id
|
|
del kwargs['partner_details']
|
|
else:
|
|
partner_id = request.env.user.partner_id.id
|
|
|
|
# Don't allow passing arbitrary create values and avoid tokenization for
|
|
# the public user.
|
|
if use_public_partner:
|
|
kwargs['custom_create_values'] = {'tokenize': False}
|
|
else:
|
|
kwargs.pop('custom_create_values', None)
|
|
|
|
tx_sudo = self._create_transaction(
|
|
amount=amount, currency_id=currency_id, partner_id=partner_id, **kwargs
|
|
)
|
|
tx_sudo.is_donation = True
|
|
if use_public_partner:
|
|
tx_sudo.update({
|
|
'partner_name': details['name'],
|
|
'partner_email': details['email'],
|
|
'partner_country_id': int(details['country_id']),
|
|
})
|
|
elif not tx_sudo.partner_country_id:
|
|
tx_sudo.partner_country_id = int(kwargs['partner_details']['country_id'])
|
|
# the user can change the donation amount on the payment page,
|
|
# therefor we need to recompute the access_token
|
|
access_token = payment_utils.generate_access_token(
|
|
tx_sudo.partner_id.id, tx_sudo.amount, tx_sudo.currency_id.id
|
|
)
|
|
self._update_landing_route(tx_sudo, access_token)
|
|
|
|
# Send a notification to warn that a donation has been made
|
|
recipient_email = kwargs['donation_recipient_email']
|
|
comment = kwargs['donation_comment']
|
|
tx_sudo._send_donation_email(True, comment, recipient_email)
|
|
|
|
return tx_sudo._get_processing_values()
|
|
|
|
def _get_custom_rendering_context_values(self, donation_options=None, donation_descriptions=None, is_donation=False, **kwargs):
|
|
rendering_context = super()._get_custom_rendering_context_values(**kwargs)
|
|
if is_donation:
|
|
user_sudo = request.env.user
|
|
logged_in = not user_sudo._is_public()
|
|
# If the user is logged in, take their partner rather than the partner set in the params.
|
|
# This is something that we want, since security rules are based on the partner, and created
|
|
# tokens should not be assigned to the public user. This should have no impact on the
|
|
# transaction itself besides making reconciliation possibly more difficult (e.g. The
|
|
# transaction and invoice partners are different).
|
|
partner_sudo = user_sudo.partner_id
|
|
partner_details = {}
|
|
countries = request.env['res.country']
|
|
if logged_in:
|
|
partner_details = {
|
|
'name': partner_sudo.name,
|
|
'email': partner_sudo.email,
|
|
'country_id': partner_sudo.country_id.id,
|
|
}
|
|
|
|
countries = request.env['res.country'].sudo().search([])
|
|
descriptions = request.httprequest.form.getlist('donation_descriptions')
|
|
|
|
donation_options = json_safe.loads(donation_options) if donation_options else {}
|
|
donation_amounts = json_safe.loads(donation_options.get('donationAmounts', '[]'))
|
|
|
|
rendering_context.update({
|
|
'is_donation': True,
|
|
'partner': partner_sudo,
|
|
'transaction_route': '/donation/transaction/%s' % donation_options.get('minimumAmount', 0),
|
|
'partner_details': partner_details,
|
|
'error': {},
|
|
'countries': countries,
|
|
'donation_options': donation_options,
|
|
'donation_amounts': donation_amounts,
|
|
'donation_descriptions': descriptions,
|
|
})
|
|
return rendering_context
|
|
|
|
def _get_payment_page_template_xmlid(self, **kwargs):
|
|
if kwargs.get('is_donation'):
|
|
return 'website_payment.donation_pay'
|
|
return super()._get_payment_page_template_xmlid(**kwargs)
|