Antoine Vandevenne (anv)
471a1f39f5
This commit also renames the module `payment_odoo_by_adyen` to
`payment_odoo` as well as the referring strings ("Odoo Payments" instead
of "Odoo Payments by Adyen", ...).
A dedicated [MOV] commit is not used because neither the [MOV] commit
nor the adapted [REF] would be valid on its own.
See the merge commit for more details.
task-2390665
82 lines
3.2 KiB
Python
82 lines
3.2 KiB
Python
# Part of Odoo. See LICENSE file for full copyright and licensing details.
|
|
|
|
import json
|
|
import logging
|
|
import pprint
|
|
|
|
from odoo import http
|
|
from odoo.http import request
|
|
|
|
from odoo.addons.payment import utils as payment_utils
|
|
from odoo.addons.payment_odoo.const import CURRENCY_DECIMALS
|
|
|
|
_logger = logging.getLogger(__name__)
|
|
|
|
|
|
class OdooController(http.Controller):
|
|
_notification_url = '/payment/odoo/notification'
|
|
|
|
@http.route(_notification_url, type='json', auth='public')
|
|
def odoo_notification(self):
|
|
""" Process the data sent by Adyen to the webhook based on the event code.
|
|
|
|
See https://docs.adyen.com/development-resources/webhooks/understand-notifications for the
|
|
exhaustive list of event codes.
|
|
|
|
:return: None
|
|
"""
|
|
# Payload data represent a single notification's data. Because two notifications of a same
|
|
# batch can be related to different sub-merchants, the proxy splits the batches and send
|
|
# individual notifications one by one to this endpoint.
|
|
notification_data = json.loads(request.httprequest.data)
|
|
|
|
# Check the source and integrity of the notification
|
|
received_signature = notification_data.get('additionalData', {}).get(
|
|
'metadata.merchant_signature'
|
|
)
|
|
tx_sudo = request.env['payment.transaction'].sudo()._get_tx_from_feedback_data(
|
|
'odoo', notification_data
|
|
)
|
|
if not self._verify_notification_signature(received_signature, tx_sudo):
|
|
return
|
|
|
|
_logger.info("notification received:\n%s", pprint.pformat(notification_data))
|
|
if notification_data['success'] != 'true':
|
|
return # Don't handle failed events
|
|
|
|
# Reshape the notification data for parsing
|
|
event_code = notification_data['eventCode']
|
|
if event_code == 'AUTHORISATION':
|
|
notification_data['resultCode'] = 'Authorised'
|
|
elif event_code == 'CANCELLATION':
|
|
notification_data['resultCode'] = 'Cancelled'
|
|
else:
|
|
return # Don't handle unsupported event codes
|
|
|
|
# Handle the notification data as a regular feedback
|
|
request.env['payment.transaction'].sudo()._handle_feedback_data('odoo', notification_data)
|
|
|
|
def _verify_notification_signature(self, received_signature, tx):
|
|
""" Check that the signature computed from the transaction values matches the received one.
|
|
|
|
:param str received_signature: The signature sent with the notification
|
|
:param recordset tx: The transaction of the notification, as a `payment.transaction` record
|
|
:return: Whether the signatures match
|
|
:rtype: str
|
|
"""
|
|
|
|
if not received_signature:
|
|
_logger.warning("ignored notification with missing signature")
|
|
return False
|
|
|
|
converted_amount = payment_utils.to_minor_currency_units(
|
|
tx.amount, tx.currency_id, CURRENCY_DECIMALS.get(tx.currency_id.name)
|
|
)
|
|
if not payment_utils.check_access_token(
|
|
received_signature, converted_amount, tx.currency_id.name, tx.reference
|
|
):
|
|
_logger.warning("ignored notification with invalid signature")
|
|
return False
|
|
|
|
return True
|