hawese-payment/src/Payment.php

<?php
// Copyright 2019 Hackware SpA <human@hackware.cl>
// This file is part of "Hackware Web Services Payment" and licensed under
// the terms of the GNU Affero General Public License version 3, or (at your
// option) a later version. You should have received a copy of this license
// along with the software. If not, see <https://www.gnu.org/licenses/>.

namespace Hawese\Payment;

use Hawese\Core\TableModel;
use Hawese\Core\User;
use Hawese\Payment\Support\Http as HttpSupport;
use Hawese\Payment\Exceptions\UnexpectedResponseException;
use Buzz\Client\FileGetContents as HttpClient;
use Nyholm\Psr7\Factory\Psr17Factory; // Request, Response & Stream factory
use Psr\Http\Message\{ResponseInterface, StreamInterface};
use Illuminate\Database\Query\Builder;
use UnexpectedValueException;

class Payment extends TableModel
{
    public const STATUS_PENDING = 'pending';
    public const STATUS_COMPLETED = 'completed';
    public const STATUS_ABORTED = 'aborted';

    public static $table = 'payments';
    public static $attributes = [
        'uuid' => ['required', 'uuid'],
        'user_uid' => ['required', 'string', 'min:3', 'max:100'],
        'gateway' => ['required', 'string', 'min:3', 'max:100'],
        'currency' => ['required', 'string', 'size:3'], // MoneyPHP format
        'amount' => ['required', 'integer'], // MoneyPHP format
        'description' => ['nullable', 'string', 'max:255'],
        'detail' => ['nullable', 'string', 'max:65535'],
        'status' => ['required', 'in:pending,completed,aborted'],
        'created_at' => ['nullable', 'date'],
        'updated_at' => ['nullable', 'date'],
    ];

    public static $primary_key = 'uuid';
    protected static $incrementing = false;

    /**
     * Switches payment status.
     *
     * To pending, completed or aborted depending on $compareWith value.
     *
     * @param bool $validComplete can be used for other validations
     * that confirm complete state is valid, if false will not update
     * to complete, but will update to aborted or pending.
     */
    public function validateAndUpdateStatus(
        $compareWith,
        array $completeWith,
        array $pendingWith = null,
        bool $validComplete = null
    ): void {
        if (in_array($compareWith, $completeWith)) {
            $this->status = Payment::STATUS_COMPLETED;
        } elseif ($pendingWith && in_array($compareWith, $pendingWith)) {
            $this->status = Payment::STATUS_PENDING;
        } else {
            $this->status = Payment::STATUS_ABORTED;
        }

        if ($this->status === static::STATUS_COMPLETED) {
            if ($validComplete === false) {
                return;
            }
            $this->update(['status']);
            $this->notify();
        } else {
            $this->update(['status']);
        }
    }

    /**
     * Internal instant payment notification (IPN)
     *
     * Maybe you're wondering why implement a request and response from
     * the ground up, it's because we process the configuration params
     * only, we don't want gateway implementations fiddling with it.
     */
    public function notify(): void
    {
        $config = config('payment.notify_to');

        $response = self::notifySendRequest(
            $config['method'],
            $config['uri'],
            $this->notifyParams($config['params']),
            $config['headers']
        );

        if ($response->getStatusCode() != 200) {
            throw new UnexpectedResponseException($response);
        }
    }

    public function notifySendRequest(
        string $method,
        string $uri,
        array $params,
        array $headers
    ): ResponseInterface {
        $psr17Factory = new Psr17Factory();

        if ($method == 'GET') {
            $uri .= '?' . HttpSupport::buildUriQuery($params);
            $params = [];
        } elseif ($method == 'POST') {
            $params = $psr17Factory->createStream(
                HttpSupport::buildFormQuery($params)
            );
        } else {
            throw new UnexpectedValueException(
                'Request method ' . $method . ' is unsupported.',
                2002
            );
        }

        $request = $psr17Factory
            ->createRequest($method, $uri)
            ->withBody($params);

        foreach ($headers as $key => $value) {
            $request = $request->withHeader($key, $value);
        }

        return (new HttpClient($psr17Factory))->sendRequest($request);
    }

    /**
     * Fills payment notification params with proper data
     */
    public function notifyParams(array &$params): array
    {
        foreach ($params as $key => $value) {
            if (is_array($value)) {
                $params[$key] = json_encode( // 1 level of depth!
                    $this->notifyParams($value, $this)
                );
            } else {
                $params[$key] = preg_replace_callback(
                    '/payment\.(.*)/',
                    function ($matches) {
                        return $this->{$matches[1]};
                    },
                    $value
                );
            }
        }

        return $params;
    }

    public function isOwner(User $user): bool
    {
        return $user->uid === $this->user_uid;
    }
}