src/Controller/V1/OrderPaymentController.php line 236

Open in your IDE?
  1. <?php
  2. declare(strict_types=1);
  4. namespace App\Controller\V1;
  6. use App\Entity\Local\GiftCard;
  7. use App\Entity\Local\Response\PaymentStartResponse;
  8. use App\Entity\Local\Response\PaymentStatusResponse;
  9. use App\Entity\Local\SessionBase;
  10. use App\Entity\Local\PaymentRedirect;
  11. use App\Entity\Vista\LoyaltyMember;
  12. use App\Entity\Vista\Order;
  13. use App\Entity\Vista\Session;
  14. use App\Exceptions\PaymentException;
  15. use App\Repository\BookingRepository as BookingHelper;
  16. use App\Helper\MPay24Helper;
  17. use App\Helper\PaymentHelper;
  18. use App\Manager\SessionDetailsManager;
  19. use App\Helper\UserHelper;
  20. use App\Repository\MailingRepositoryInterface as MailingRepository;
  21. use App\Repository\MPay24OrderPaymentTransactionRepository;
  22. use App\Repository\OrderRepositoryInterface;
  23. use App\Repository\RestrictionsRepository;
  24. use App\Repository\SessionRepositoryInterface;
  25. use Doctrine\Common\Persistence\ManagerRegistry;
  26. use Doctrine\ORM\EntityManager;
  27. use FOS\RestBundle\Controller\Annotations as Rest;
  28. use FOS\RestBundle\Controller\Annotations\Get;
  29. use FOS\RestBundle\Controller\Annotations\Post;
  30. use FOS\RestBundle\Controller\Annotations\Route;
  31. use FOS\RestBundle\Controller\Annotations\View;
  32. use Nelmio\ApiDocBundle\Annotation\Model;
  33. use Nelmio\ApiDocBundle\Annotation\Security as NelmioSecurity;
  34. use Sensio\Bundle\FrameworkExtraBundle\Configuration\ParamConverter;
  35. use Swagger\Annotations as SWG;
  36. use Symfony\Component\HttpFoundation\RedirectResponse;
  37. use Symfony\Component\HttpFoundation\Request;
  38. use Symfony\Component\HttpFoundation\Response;
  39. use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
  40. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  41. use App\Security\Security;
  42. use Psr\Log\LoggerInterface;
  43. use App\Entity\Vista\PayableInterface;
  44. use App\Repository\GiftCardsRepository;
  45. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  47. /**
  48.  * @Route("/orders/{orderId}/payment", requirements={"orderId"=".+"})
  49.  * @SWG\Tag(name="Order_v1")
  50.  */
  51. class OrderPaymentController extends AbstractController
  52. {
  53.     /** @var MPay24Helper */
  54.     protected $mPay24Helper;
  56.     /** @var PaymentHelper */
  57.     protected $paymentHelper;
  59.     /** @var EntityManager */
  60.     protected $em;
  62.     /** @var OrderRepositoryInterface */
  63.     protected $orderRepository;
  65.     /** @var RestrictionsRepository */
  66.     protected $restrictionsRepository;
  68.     /** @var BookingHelper */
  69.     protected $bookingHelper;
  71.     /** @var SessionDetailsManager */
  72.     protected $sessionDetailsHelper;
  74.     /** @var UserHelper */
  75.     protected $userHelper;
  77.     /** @var MPay24OrderPaymentTransactionRepository */
  78.     protected $mPay24OrderPaymentTransactionRepository;
  80.     /** @var SessionRepositoryInterface */
  81.     private $sessionRepository;
  83.     /** @var GiftCardsRepository */
  84.     private $giftCardsRepository;
  86.     /** @var MailingRepository */
  87.     private $mailer;
  89.     /** @var LoggerInterface */
  90.     protected $logger;
  92.     public function __construct(
  93.         MPay24Helper $mPay24Helper,
  94.         PaymentHelper $paymentHelper,
  95.         OrderRepositoryInterface $orderRepository,
  96.         RestrictionsRepository $restrictionsRepository,
  97.         ManagerRegistry $managerRegistry,
  98.         BookingHelper $bookingHelper,
  99.         SessionDetailsManager $sessionDetailsHelper,
  100.         UserHelper $userHelper,
  101.         MPay24OrderPaymentTransactionRepository $mPay24OrderPaymentTransactionRepository,
  102.         SessionRepositoryInterface $sessionRepository,
  103.         MailingRepository $mailer,
  104.         GiftCardsRepository $giftCardsRepository,
  105.         LoggerInterface $logger
  106.     ) {
  107.         $this->mPay24Helper = $mPay24Helper;
  108.         $this->paymentHelper = $paymentHelper;
  109.         $this->orderRepository = $orderRepository;
  110.         $this->restrictionsRepository = $restrictionsRepository;
  111.         $this->em = $managerRegistry->getManager();
  112.         $this->bookingHelper = $bookingHelper;
  113.         $this->sessionDetailsHelper = $sessionDetailsHelper;
  114.         $this->userHelper = $userHelper;
  115.         $this->mPay24OrderPaymentTransactionRepository = $mPay24OrderPaymentTransactionRepository;
  116.         $this->sessionRepository = $sessionRepository;
  117.         $this->mailer = $mailer;
  118.         $this->giftCardsRepository=$giftCardsRepository;
  119.         $this->logger = $logger;
  120.     }
  122.     /**
  123.      * @param string $orderId
  124.      * @return Order
  125.      * @throws \Doctrine\ORM\ORMException
  126.      * @throws \Doctrine\ORM\OptimisticLockException
  127.      */
  128.     protected function renewOrder(string $orderId): Order
  129.     {
  130.         $order = $this->orderRepository->findOneBy([
  131.             'userSessionId' => $orderId,
  132.             'state' => Order::STATE_PAYMENT_STARTED,
  133.         ]);
  134.         if (null === $order) {
  135.             return $this->orderRepository->findBySessionId($orderId, Order::STATE_NEW);
  136.         }
  137.         $order->setState(Order::STATE_NEW);
  138.         $this->orderRepository->save($order);
  140.         if ($transaction = $this->mPay24OrderPaymentTransactionRepository->find($order->getUserSessionId())) {
  141.             $transaction->setPaymentHasBeenStarted(false);
  142.             $this->mPay24OrderPaymentTransactionRepository->saveTransaction($transaction);
  143.         }
  145.         return $order;
  146.     }
  148.     /**
  149.      * @Post("/start")
  150.      * @Rest\QueryParam(name="email", allowBlank=true)
  151.      * @View()
  152.      *
  153.      * @SWG\Response(
  154.      *     response=200,
  155.      *     description="The payment has started",
  156.      *     @Model(type=\App\Entity\Local\Response\PaymentStartResponse::class))
  157.      *
  158.      * @param             $orderId
  159.      * @param Security    $security
  160.      * @param string|null $email
  161.      *
  162.      * @return PaymentStartResponse
  163.      * @throws \Doctrine\ORM\ORMException
  164.      * @throws \Doctrine\ORM\OptimisticLockException
  165.      * @throws \Throwable
  166.      */
  167.     public function startPaymentAction($orderId, Security $security, string $email = null)
  168.     {
  169.         $time_start = microtime(true);
  170.         /** @var Order $order */
  171.         $order = $this->renewOrder($orderId);        
  172.         $user = $security->getUser();
  174.         if( $order->getSession()){
  175.             $session = $this->sessionDetailsHelper->loadSession($order->getCinemaId(), $order->getSession()->getId());
  176.             if ($user) {
  177.                 $this->checkTransactionHistory($order, $session, $user);
  178.             }
  179.         } else {
  180.             // concessions direct purchase
  181.         }
  183.         $restrictions = $this->restrictionsRepository->findOrCreate();
  185.         if( $order->getPriceInCents() < 1 ) {
  186.             $this->logger->info('Order value is zero, omitting payment');
  187.             $hash = $this->paymentHelper->startOrderPayment($order, $user ?? (string) $email);
  188.             $order->setState(Order::STATE_PAYMENT_FINISHED);
  189.             $succ=$this->paymentFinishZeroValue($order);
  190.             $return = (new PaymentStartResponse())
  191.             ->setPaymentPageUrl($succ)
  192.             ->setOrderId(null)
  193.             ->setRestrictions($restrictions);        
  194.             $execution_time = microtime(true) - $time_start; error_log(sprintf("%s %s(%s) orderId $orderId execution_time $execution_time ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__));
  195.             return $return;
  196.         } else {
  197.             if(getenv('RAIFFEISEN_ADDRESS')) { // Raiffeisen
  198.                 $paymentPageUrl = (getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('SCHEME_AND_HTTP_HOST')) .
  199.                     sprintf("/api/v1/orders/ord-%s/payment/raiffeisen-redirect/%s/%s/%s", $orderId, $this->paymentHelper->startOrderPayment($order, $user ?? (string) $email), $order->getOrderTotalValueInCents(), $order->getCinemaId());
  200.             } else if(getenv('CPAY_ADDRESS')) { // cPay
  201.                 $paymentPageUrl = (getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('SCHEME_AND_HTTP_HOST')) .
  202.                     sprintf("/api/v1/orders/%s/payment/cpay-redirect/%s/%s/%s", $orderId, $this->paymentHelper->startOrderPayment($order, $user ?? (string) $email), intval($order->getOrderTotalValueInCents()), $order->getCinemaId());
  203.             } else if(getenv('KOM_BANK_ADDRESS')) {
  204.                 $paymentPageUrl = (getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('SCHEME_AND_HTTP_HOST')) .
  205.                 sprintf("/api/v1/orders/%s/payment/kom-bank-redirect/%s/%s/%s", $orderId, $this->paymentHelper->startOrderPayment($order, $user ?? (string) $email), $order->getOrderTotalValueInCents(), $order->getCinemaId());
  206.             } else { // mpay24
  207.                 $paymentPageUrl = $this->mPay24Helper->startOrderPayment($order, $user ?? (string) $email);
  208.             }
  209.             $response = (new PaymentStartResponse())
  210.                 ->setPaymentPageUrl($paymentPageUrl)
  211.                 ->setOrderId(null)
  212.                 ->setRestrictions($restrictions);
  213.             $order->setState(Order::STATE_PAYMENT_STARTED);
  214.             $this->em->flush();
  215.             $execution_time = microtime(true) - $time_start; error_log(sprintf("%s %s(%s) orderId $orderId execution_time $execution_time ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__));
  216.             return $response;
  217.         }
  218.     }
  220.     /**
  221.      * @Get("/finish/{hash}", name="payment_finish")
  222.      *
  223.      * @SWG\Response(
  224.      *     response=200,
  225.      *     description="The payment is finished",
  226.      *     @Model(type=\App\Entity\Local\MPay24OrderPaymentTransaction::class))
  227.      *
  228.      * @param $orderId
  229.      * @param $hash
  230.      * @param Request $request
  231.      * @return Response
  232.      * @throws \Doctrine\ORM\ORMException
  233.      * @throws \Doctrine\ORM\OptimisticLockException
  234.      * @throws \GuzzleHttp\Exception\GuzzleException
  235.      */
  236.     public function finishPaymentAction($orderId, $hash, Request $request)
  237.     {
  238.         try {
  239.             $order = $this->orderRepository->findBySessionId($orderId, Order::STATE_PAYMENT_STARTED);
  240.         } catch (\Exception $ex) {
  241.             $this->orderRepository->findBySessionId($orderId, Order::STATE_PAYMENT_FINISHED);
  242.             $response = new Response(PaymentHelper::PAYMENT_RESPONSE_OK);
  243.         return $response;
  244.         }
  246.         $result = $this->mPay24Helper->finishPayment($order, $hash, $request->query->all());
  247.         if ($result->getOrderToBeUpdated()) {
  248.             $order->setState(Order::STATE_PAYMENT_FINISHED);
  249.             $this->em->flush();
  250.         }
  251.         return new Response($result->getResponse());
  252.     }
  254.     /**
  255.      * @Get("/status")
  256.      * @View()
  257.      *
  258.      * @SWG\Response(
  259.      *     response=200,
  260.      *     description="Status of the payment",
  261.      *     @Model(type=\App\Entity\Local\Response\PaymentStatusResponse::class))
  262.      *
  263.      * @param $orderId
  264.      * @return PaymentStatusResponse
  265.      * @throws \ReflectionException
  266.      * @throws \Symfony\Component\Serializer\Exception\ExceptionInterface
  267.      */
  268.     public function getPaymentStatusAction($orderId)
  269.     {
  270.         [$status] = $this->mPay24Helper->requestStatus($orderId);
  271.         return (new PaymentStatusResponse())->setState($status);
  272.     }
  274.     /**
  275.      * @Get("/status-final")
  276.      * @View()
  277.      *
  278.      * @SWG\Response(
  279.      *     response=200,
  280.      *     description="Final status of the payment",
  281.      *     @Model(type=\App\Entity\Local\Response\PaymentStatusResponse::class))
  282.      *
  283.      * @param $orderId
  284.      * @return PaymentStatusResponse
  285.      */
  286.     public function getPaymentStatusFinalAction($orderId) {
  287.         $time_start = microtime(true);
  288.         if(getenv('KOM_BANK_ADDRESS') || getenv('RAIFFEISEN_ADDRESS') || getenv('CPAY_ADDRESS')) {
  289.             [$status, $mPay24State, $statusExtended] = $this->paymentHelper->getStatus($orderId);
  290.         } else {
  291.             [$status, $mPay24State, $statusExtended] = $this->mPay24Helper->getStatus($orderId);
  292.         }
  293.         $return = (new PaymentStatusResponse())
  294.             ->setStatus($status)
  295.             ->setMPay24State($mPay24State)
  296.             ->setStatusExtended($statusExtended);
  297.         $execution_time = microtime(true) - $time_start; error_log(sprintf("%s %s(%s) orderId $orderId execution_time $execution_time ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__));
  298.         return $return;
  299.     }
  301.     /**
  302.      * Redirect endpoint for Raiffeisen
  303.      *
  304.      * @Get("/raiffeisen-redirect/{hash}/{amountCents}/{cinemaId}", name="raiffeisen_redirect")
  305.      *
  306.      * @SWG\Response(
  307.      *     response=200,
  308.      *     description="Stub empty result",
  309.      *     @SWG\Schema(type="string"))
  310.      *
  311.      * @param $orderId
  312.      * @param $hash
  313.      * @param $amountCents
  314.      * @param $cinemaId
  315.      * @return Response
  316.      */
  317.     public function handleRaiffeisenRedirect($orderId, $hash, $amountCents, $cinemaId) {
  318.         $paymentPageUrl = getenv('RAIFFEISEN_ADDRESS') ? getenv('RAIFFEISEN_ADDRESS') : 'https://ecg.test.upc.ua/rbko/enter'; // 'https://ecg.test.upc.ua/go/enter' https://ecg.test.upc.ua/rbko/enter
  319.         $certPath   = getenv('RAIFFEISEN_CERT_PATH')   ? getenv('RAIFFEISEN_CERT_PATH') : 'config/certificates/';
  320.         $certPass   = getenv('RAIFFEISEN_CERT_PASS')   ? getenv('RAIFFEISEN_CERT_PASS') : 'cineplexx';
  321.         $OrderID = rand();
  322.         $SD = $orderId;
  323.         $ids = $this->paymentHelper->getMerchant($cinemaId);
  324.         //error_log(sprintf("%s %s(%s) ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__) . " SD $SD cinemaId $cinemaId " . var_export($ids, true));
  325.         $merchantId = $ids && array_key_exists('id', $ids) ? $ids['id'] : '1755375';            //Merchant Id defined by bank to user
  326.         $terminalId = $ids && array_key_exists('pass', $ids)  ? $ids['pass'] : 'E7883395'; //Store key value, defined by bank.
  328.         $env = getenv('APP_ENV');
  329.         if ($env == 'dev') {
  330.             $env = 'stage';
  331.         }
  332.         $country = getenv('APP_COUNTRY');;
  334.         if (!$cert_store = file_get_contents(__DIR__ . "/../../../{$certPath}Raiffeisen_{$country}_$env.p12")) {
  335.             echo "Error: Unable to read the cert file\n";
  336.             exit;
  337.         }
  338.         $cert_info = [];
  339.         if (openssl_pkcs12_read($cert_store, $cert_info, $certPass)) {
  340.             //error_log(sprintf("%s %s(%s) ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__) . $cert_info['pkey']);
  341.         } else {
  342.             error_log(sprintf("%s %s(%s) ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__) . "Error: Unable to read the cert store.\n");
  343.         }
  344.         $response = null;
  345.         if($cert_info && array_key_exists('pkey', $cert_info)) {
  346.             $privKey = $cert_info['pkey'];
  347.             //error_log("privKey $privKey");
  348.             $pkeyId = openssl_get_privatekey($privKey);
  350.             $purchaseTime = date("ymdHis") ;
  351.             $currencyId = $this->getRaiffeisenCurrency();
  352.             $data = "$merchantId;$terminalId;$purchaseTime;$OrderID;$currencyId;$amountCents;$SD;";
  353.             $signature = null;
  354.             openssl_sign($data , $signature, $pkeyId);
  355.             openssl_free_key($pkeyId);
  356.             $b64sign = base64_encode($signature);
  357.             //error_log(sprintf("%s %s(%s) ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__) . "data $data b64sign $b64sign");
  358.             $version = 1;
  359.             $locale = ($country == 'bih' || $country == 'bil') ? 'rs' : 'sq';
  362.             $paymentRedirect = (new PaymentRedirect())
  363.                 ->setRedirectUrl($paymentPageUrl)
  364.                 ->setFormTitle('Raiffeisen Bank')
  365.                 ->setPaymentData([
  366.                     'Version'      => $version,
  367.                     'MerchantID'   => $merchantId,
  368.                     'TerminalID'   => $terminalId,
  369.                     'TotalAmount'  => $amountCents,
  370.                     'Currency'     => $currencyId,
  371.                     'locale'       => $locale,
  372.                     'PurchaseTime' => $purchaseTime,
  373.                     'OrderID'      => $OrderID,
  374.                     'SD'           => $SD,
  375.                     'Signature'    => $b64sign
  376.                 ]);
  377.             
  378.             $response = $this->render('web/redirect.html.twig', ['paymentRedirect' => $paymentRedirect] );
  379.             //error_log(sprintf("%s %s(%s) payment_finish orderId $orderId", date('Y-m-d H:i:s'), __METHOD__, __LINE__));
  380.         } else {
  381.             $response = new Response();
  382.         }
  383.         $response->headers->set('Content-Type', 'text/html; charset=UTF-8'); // Content-Type: text/html; charset=UTF-8
  384.         return $response;
  385.     }
  386.     
  387.     /**
  388.      * Redirect endpoint for KomBank
  389.      *
  390.      * @Get("/kom-bank-redirect/{hash}/{amount}/{cinemId}", name="kom_bank_redirect", defaults={"email"=""})
  391.      *
  392.      * @SWG\Response(
  393.      *     response=200,
  394.      *     description="Stub empty result",
  395.      *     @SWG\Schema(type="string"))
  396.      *
  397.      * @param $orderId
  398.      * @param $hash
  399.      * @param $amount
  400.      * @param $cinemId
  401.      * @return Response
  402.      */
  403.     public function handleKomBankRedirect(string $orderId, $hash, $amount, $cinemId) {
  405.         $response = $this->getKombankRedirectForm($orderId,  sprintf('/api/v1/orders/%s/payment/handle-redirect-post/%s', $orderId, $hash), sprintf('%.2f', $amount / 100), $cinemId);
  406.         // $response = $this->getKombankRedirectForm($orderId,  sprintf('%s/payment-return/%s/handle-redirect-post/%s', getenv('WEBSITE_SCHEME_AND_HTTP_HOST'), $orderId, $hash), sprintf('%.2f', $amount / 100), $cinemId);
  407.         //error_log(sprintf("%s %s(%s) payment_finish orderId $orderId", date('Y-m-d H:i:s'), __METHOD__, __LINE__));
  408.         return $response;
  409.     }
  410.     
  411.     /**
  412.      * Redirect endpoint for Cpay
  413.      *
  414.      * @Get("/cpay-redirect/{hash}/{amount}/{cinemId}", name="cpay_redirect")
  415.      *
  416.      * @SWG\Response(
  417.      *     response=200,
  418.      *     description="Stub empty result",
  419.      *     @SWG\Schema(type="string"))
  420.      *
  421.      * @param $orderId
  422.      * @param $hash
  423.      * @param $amount
  424.      * @param $cinemId
  425.      * @return Response
  426.      */
  427.     public function handleCpayRedirectAction(string $orderId, $hash, $amount, $cinemId) {
  428.         $time_start = microtime(true);
  429.         $response = $this->getCpayRedirectForm($orderId,  sprintf('/api/v1/orders/%s/payment/handle-redirect-post/%s', $orderId, $hash), $amount, $cinemId);
  430.         //error_log(sprintf("%s %s(%s) payment_finish orderId $orderId", date('Y-m-d H:i:s'), __METHOD__, __LINE__));
  431.         $execution_time = microtime(true) - $time_start; error_log(sprintf("%s %s(%s) orderId $orderId execution_time $execution_time ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__));
  432.         return $response;
  433.     }
  434.     
  435.     /**
  436.      * Redirect endpoint for KomBank
  437.      *
  438.      * @Route("/kom-bank-booking/{hash}/{amount}/{cinemId}", methods={"GET"}, name="kom_bank_booking")
  439.      *
  440.      * @SWG\Response(
  441.      *     response=200,
  442.      *     description="Stub empty result",
  443.      *     @SWG\Schema(type="string"))
  444.      *
  445.      * @param $orderId
  446.      * @param $hash
  447.      * @param $amount
  448.      * @param $cinemId
  449.      * @return Response
  450.      */
  451.     public function getKombankBookingRedirect(string $orderId, $hash, $amount, $cinemId) {
  453.         $response = $this->getKombankRedirectForm($orderId,  sprintf('/api/v1/users/bookings/%s/payment-finish-kombank/%s', $orderId, $hash), sprintf('%.2f', $amount / 100), $cinemId);
  454.         //error_log(sprintf("%s %s(%s) payment_finish orderId $orderId", date('Y-m-d H:i:s'), __METHOD__, __LINE__));
  455.         return $response;
  456.     }
  458.     /**
  459.      * Redirect endpoint for Cpay
  460.      *
  461.      * @Route("/cpay-booking/{hash}/{amount}/{cinemId}", methods={"GET"}, name="cpay_bank_booking")
  462.      *
  463.      * @SWG\Response(
  464.      *     response=200,
  465.      *     description="Stub empty result",
  466.      *     @SWG\Schema(type="string"))
  467.      *
  468.      * @param $orderId
  469.      * @param $hash
  470.      * @param $amount
  471.      * @param $cinemId
  472.      * @return Response
  473.      */
  474.     public function getCpayBookingRedirect(string $orderId, $hash, $amount, $cinemId) {
  475.         $time_start = microtime(true);
  476.         $response = $this->getCpayRedirectForm($orderId,  sprintf('/api/v1/users/bookings/%s/payment-finish-cpay/%s', $orderId, $hash), $amount, $cinemId);
  477.         //error_log(sprintf("%s %s(%s) payment_finish orderId $orderId", date('Y-m-d H:i:s'), __METHOD__, __LINE__));
  478.         $execution_time = microtime(true) - $time_start; error_log(sprintf("%s %s(%s) orderId $orderId execution_time $execution_time ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__));
  479.         return $response;
  480.     }
  482.     public function getRaiffeisenCurrency() {
  483.         switch(getenv('APP_COUNTRY')){
  484.             case 'alb': return '008';
  485.             case 'bih': return '977';
  486.             case 'bil': return '977';
  487.             default: return '978';
  488.         }        
  489.     }
  491.     /**
  492.      * Redirect endpoint for Raiffeisen
  493.      *
  494.      * @Post("/raiffeisen-response", name="raiffeisen_response")
  495.      *
  496.      * @SWG\Response(
  497.      *     response=200,
  498.      *     description="Stub empty result",
  499.      *     @SWG\Schema(type="string"))
  500.      *
  501.      * @param $orderId
  502.      * @param Request $request
  503.      * @return Response
  504.      */
  505.     public function handleRaiffeisenResponse($orderId, Request $request) { // bkn- ord- TranCode
  506.         $time_start = microtime(true);
  507.         //$queryParams = json_decode($request->getContent(), true);; // json_decode($request->getContent(), true);
  508.         $queryParams = $_POST;
  509.         //$request->request->all();
  510.         $result = $orderId;
  511.         if ($result == 'notify') {
  512.             $merchantId = $queryParams['MerchantID'];
  513.             $terminalId = $queryParams['TerminalID'];
  514.             $orderIdFake = $queryParams['OrderID'];
  515.             $currencyId = $this->getRaiffeisenCurrency();
  516.             $totalAmount = $queryParams['TotalAmount'];
  517.             $xid = $queryParams['XID'];
  518.             $purchaseTime = $queryParams['PurchaseTime'];
  519.             $responsetext = <<<TEXT
  520. MerchantID="$merchantId"
  521. TerminalID="$terminalId"
  522. OrderID="$orderIdFake"
  523. Currency="$currencyId"
  524. TotalAmount="$totalAmount"
  525. XID="$xid"
  526. PurchaseTime="$purchaseTime"
  527. Response.action=approve
  528. TEXT;
  529.             $response = new Response($responsetext);
  530.             $response->headers->set('Content-Type', 'text/plain; charset=UTF-8');
  531.             return $response;
  532.         }
  533.         $orderIdComposed = $request->get('SD');
  534.         //error_log(sprintf("%s %s(%s) ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__) . " $orderIdComposed queryParams " . var_export($queryParams, true));
  535.         // http://93.123.103.157:8124/api/v1/orders/success/payment/raiffeisen-response success  https://app.cineplexx-ks.eu http://93.123.103.157:8124 https://ial-stage.cineplexx-ks.eu
  536.         // http://93.123.103.157:8124/api/v1/orders/error/payment/raiffeisen-response error
  537.         // http://93.123.103.157:8124/api/v1/orders/notify/payment/raiffeisen-response notify
  539.         if (!preg_match('/^(ord-|bkn-)(.+$)/', $orderIdComposed, $matches) || count($matches) < 3) {
  540.             $return = new RedirectResponse(sprintf(
  541.                 '%s/purchase/payment/%s',
  542.                 getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  543.                 $orderIdComposed
  544.             ));
  545.             return $return;
  546.         }
  547.         $paymentType = $matches[1];
  548.         $orderId = $matches[2];
  549.         
  550.         if ($paymentType == 'bkn-') {
  551.             $this->logger->info('handleRaiffeisenResponse: paymentType = bkn');
  552.             $return = $this->paymentFinishRaiffeisen($orderId, $queryParams, $result);
  553.             return $return;
  554.         }
  556.         try {
  557.             $order = $this->orderRepository->findBySessionId($orderId, Order::STATE_PAYMENT_STARTED);
  558.         } catch (\Exception $ex) {
  559.             $this->orderRepository->findBySessionId($orderId, Order::STATE_PAYMENT_FINISHED);
  560.             //error_log(sprintf("%s %s(%s) ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__) . ' ex ' . var_export($ex, true));
  561.             $return = new RedirectResponse(sprintf(
  562.                 '%s/purchase/payment/%s/%s',
  563.                 getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  564.                 $result,
  565.                 $orderId
  566.             ));
  567.             return $return;
  568.         }
  569.         
  570.         $this->logger->info('handleRaiffeisenResponse: result = ['.$result.']');
  572.         if ('success' === $result) {
  573.             $queryParams['STATUS'] = 'BILLED';
  574.         } else {
  575.             $queryParams['STATUS'] = 'FAILED';
  576.         }
  577.         
  578.         $transaction = $this->mPay24OrderPaymentTransactionRepository->find($order->getPaymentId());
  579.         
  580.         $payment = $this->paymentHelper->finishPayment($order, $transaction->getHash(), $queryParams);
  581.         if ($payment->getOrderToBeUpdated()) {
  582.             $order->setState(Order::STATE_PAYMENT_FINISHED);
  583.             $this->em->flush();
  584.         }
  585.         $return = new RedirectResponse(sprintf(
  586.             '%s/purchase/payment/%s/%s',
  587.             getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  588.             $result,
  589.             $orderId
  590.         ));
  591.         return $return;
  592.     }
  594.     // CIN311
  595.     /*
  596.     * @param Order $order
  597.     * @param Request $request
  598.     * @return string
  599.     */
  600.     private function paymentFinishZeroValue($order) 
  601.     {
  602.         /** @var Order $order */
  603.         $transaction = $this->paymentHelper->getTransaction($order->getPaymentId());
  604.         $queryParams=[];
  605.         $queryParams['STATUS'] = 'BILLED';
  607.         if ($transaction) {
  608.             $hash = $transaction->getHash();
  609.             $this->logger->info("finishing zero value payment");
  610.             $response = $this->paymentHelper->finishPayment($order, $hash, $queryParams);
  611.             
  612.             return $response->getResponse()==PaymentHelper::PAYMENT_RESPONSE_OK ? 'success':'error';
  613.         }
  614.         return 'error';
  615. }
  616.     //////
  618.     private function paymentFinishRaiffeisen($orderId, $queryParams, $result) {
  619.         $time_start = microtime(true);
  620.         $transaction = $this->paymentHelper->getTransaction($orderId);
  621.         $memberId = $transaction->getMemberId();
  622.         $member = (new LoyaltyMember())->setMemberId($memberId);
  623.         $user = $this->userHelper->validate($member);
  625.         $booking = $this->bookingHelper->findBooking((int) $transaction->getVistaBookingNumber(), $user);
  626.         if (null === $booking) {
  627.             throw new \InvalidArgumentException(sprintf(
  628.                 'Invalid transaction, booking with number %s doesn\'t exist',
  629.                 $transaction->getVistaBookingNumber()
  630.             ));
  631.         }
  632.         if ($booking->isPaid() && 'success' === $result) {
  633.             $return = new RedirectResponse(sprintf(
  634.                 '%s/purchase/payment/%s/%s',
  635.                 getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  636.                 $result,
  637.                 $orderId
  638.             ));
  639.             return $return;
  640.         }
  641.         if ('success' === $result) {
  642.             $queryParams['STATUS'] = 'BILLED';
  643.         } else {
  644.             $queryParams['STATUS'] = 'FAILED';
  645.         }
  647.         if (!$booking->isPaid() && 'success' === $result) {
  648.             $hash = $transaction->getHash();
  649.             $this->paymentHelper->finishPayment($booking, $hash, $queryParams);
  650.             $return = new RedirectResponse(sprintf(
  651.                 '%s/purchase/payment/%s/%s',
  652.                 getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  653.                 $result,
  654.                 $orderId
  655.             ));
  656.             return $return;
  657.         }
  659.         $return = new RedirectResponse(sprintf(
  660.             '%s/purchase/payment/%s/%s',
  661.             getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  662.             $result,
  663.             $orderId
  664.         ));
  665.         return $return;
  666.     }
  668.     /**
  669.      * Redirect endpoint for KomBank
  670.      *
  671.      * @Post("/handle-redirect-post/{hash}/{result}", name="payment_handle_post_redirect")
  672.      *
  673.      * @SWG\Response(
  674.      *     response=200,
  675.      *     description="Stub empty result",
  676.      *     @SWG\Schema(type="string"))
  677.      *
  678.      * @param $orderId
  679.      * @param $result
  680.      * @return Response
  681.      */
  682.     public function handlePaymentPostRedirectAction($orderId, $hash, $result) {
  683.         $time_start = microtime(true);
  684.         $queryParams = $_POST;
  686.         //error_log(sprintf("%s %s(%s) orderId $orderId result $result hash $hash ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__));
  687.         $state = Order::STATE_PAYMENT_STARTED;
  688.         $order = null;
  689.         try {
  690.             $order = $this->orderRepository->findBySessionId($orderId, $state);
  691.         } catch (\Exception $ex) {
  692.             if (!getenv('CPAY_ADDRESS')) {
  693.                 $this->orderRepository->findBySessionId($orderId, $state);
  694.                 $return = new Response(PaymentHelper::PAYMENT_RESPONSE_OK);
  695.                 $execution_time = microtime(true) - $time_start; error_log(sprintf("%s %s(%s) orderId $orderId execution_time $execution_time ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__));
  696.                 return $return;
  697.             }
  698.         }
  699.         
  700.         $redirectUrl = '%s/purchase/payment/success/%s';
  701.         if ('success' === $result) {
  702.             $queryParams['STATUS'] = 'BILLED';
  703.         } else {
  704.             $redirectUrl = '%s/purchase/payment/error/%s';
  705.             $queryParams['STATUS'] = 'FAILED';
  706.         }
  707.         if ($order) {
  708.             $payment = $this->paymentHelper->finishPayment($order, $hash, $queryParams);
  709.             if ($payment->getOrderToBeUpdated()) {
  710.                 $order->setState(Order::STATE_PAYMENT_FINISHED);
  711.                 $this->em->flush();
  712.             }
  713.         }
  714.         
  715.         $redirectURL = sprintf(
  716.             $redirectUrl,
  717.             getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  718.             $orderId
  719.         );
  720.         $response = $this->render('web/payment-redirect.html.twig', ['redirectUrl' => $redirectURL] );
  721.         $response->headers->set('Content-Type', 'text/html; charset=UTF-8');
  722.         return $response;
  723.     }
  725.     /**
  726.      * Redirect endpoint for MPay24
  727.      *
  728.      * @Get("/handle-redirect/{result}", name="payment_handle_redirect")
  729.      *
  730.      * @SWG\Response(
  731.      *     response=200,
  732.      *     description="Stub empty result",
  733.      *     @SWG\Schema(type="string"))
  734.      *
  735.      * @param $orderId
  736.      * @param $result
  737.      * @return Response
  738.      */
  739.     public function handlePaymentRedirectAction($orderId, $result) {
  740.         if ('success' === $result) {
  741.             return new RedirectResponse(sprintf( // missing /api/v1/orders/$orderId
  742.                 '%s/purchase/payment-success/%s',
  743.                 getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  744.                 $orderId
  745.             ));
  746.         } else {
  747.             return new RedirectResponse(sprintf(
  748.                 '%s/purchase/payment-failure/%s',
  749.                 getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('WEBSITE_SCHEME_AND_HTTP_HOST'),
  750.                 $orderId
  751.             ));
  752.         }
  753.     }
  755.     /**
  756.      * @Post("/reserveTickets")
  757.      * @NelmioSecurity(name="Bearer")
  758.      * @ParamConverter("order", options={"mapping": {"orderId": "userSessionId"}})
  759.      * @View()
  760.      *
  761.      * @SWG\Response(
  762.      *     response=200,
  763.      *     description="The payment has started",
  764.      *     @Model(type=\App\Entity\Vista\Booking::class))
  765.      *
  766.      * @param $orderId
  767.      * @param Security $security
  768.      * @return mixed
  769.      * @throws \Doctrine\ORM\ORMException
  770.      * @throws \Doctrine\ORM\OptimisticLockException
  771.      * @throws \GuzzleHttp\Exception\GuzzleException
  772.      * @throws \Throwable
  773.      */
  774.     public function reserveTicketsAction($orderId, Security $security) {
  775.         $user = $security->getUser();
  777.         $order = $this->renewOrder($orderId);
  778.         $session = $this->sessionDetailsHelper->loadSession($order->getCinemaId(), $order->getSession()->getId());
  779.         $this->checkBookingHistory($order, $session, $user);
  780.         $user = $this->userHelper->validate($user);
  781.         
  782.         $result = $this->paymentHelper->reserveTickets($user, $order);
  783.         
  784.         if ($result) {
  785.             $order->setState(Order::STATE_RESERVED);
  786.         }
  787.         $this->em->flush();
  789.         return $result;
  790.     }
  792.     /**
  793.      * @Post("/with-bonus-card")
  794.      * @NelmioSecurity(name="Bearer")
  795.      * @View()
  796.      *
  797.      * @SWG\Response(
  798.      *     response=200,
  799.      *     description="The payment is finished",
  800.      *     @Model(type=\App\Entity\Local\MPay24OrderPaymentTransaction::class))
  801.      *
  802.      * @param $orderId
  803.      * @param Security $security
  804.      * @return mixed
  805.      * @throws \Doctrine\ORM\ORMException
  806.      * @throws \Doctrine\ORM\OptimisticLockException
  807.      * @throws \GuzzleHttp\Exception\GuzzleException
  808.      * @throws \Throwable
  809.      */
  810.     public function vistaPaymentAction($orderId, Security $security) {
  811.         $order = $this->orderRepository->findBySessionId($orderId);
  813.         /** @var LoyaltyMember $loyaltyMember */
  814.         if (!($loyaltyMember = $security->getUser())) {
  815.             throw new AccessDeniedException('Only authorized users can make payments with bonus card');
  816.         }
  817.         if( $order->getSession()){
  818.             $session = $this->sessionDetailsHelper->loadSession($order->getCinemaId(), $order->getSession()->getId());
  819.             $this->checkTransactionHistory($order, $session, $loyaltyMember);
  820.         } else {
  821.             $this->logger->info("processing payment for concessions direct purchase");
  822.         }
  824.         $booking = $this->paymentHelper->makeVistaPayment($loyaltyMember, "", $order, []);
  826.         $order->setState(Order::STATE_PAYMENT_FINISHED);
  827.         $this->em->flush();
  829.         return $booking;
  830.     }
  832.     /**
  833.      * @Post("/with-gift-card")
  834.      * @NelmioSecurity(name="Bearer")
  835.      * @ParamConverter("giftcards", converter="fos_rest.request_body", class="array")
  836.      * @Rest\QueryParam(name="email", allowBlank=true)
  837.      * @View()
  838.      *
  839.      * @SWG\Response(
  840.      *     response=200,
  841.      *     description="The payment is finished",
  842.      *     @Model(type=\App\Entity\Local\MPay24OrderPaymentTransaction::class))
  843.      *
  844.      * @param $orderId
  845.      * @param array $giftcards
  846.      * @param string $email
  847.      * @param Security $security
  848.      * @return mixed
  849.      * @throws \Doctrine\ORM\ORMException
  850.      * @throws \Doctrine\ORM\OptimisticLockException
  851.      * @throws \GuzzleHttp\Exception\GuzzleException
  852.      * @throws \Throwable
  853.      */
  854.     public function payWithGiftCardAction($orderId, $giftcards, $email, Security $security) 
  855.     {
  856.         $this->logger->debug('paying with ' .count($giftcards). ' giftcard(s) for '.$email);
  857.         $order = $this->orderRepository->findBySessionId($orderId);
  858.         $usedgiftcards=[];
  859.         foreach($giftcards as $gcitem){
  860.             $gc=(new GiftCard)
  861.                 ->setNumber($gcitem['Number'])
  862.                 ->setValueInCents($this->giftCardsRepository->getGiftCardValue($gcitem['Number']));
  863.             $usedgiftcards[]=$gc;
  864.         }        
  866.         $loyaltyMember = $security->getUser();
  867.         
  868.         usort($usedgiftcards, function($a, $b){
  869.             return $a->getValueInCents() - $b->getValueInCents();
  870.         });
  871.         $this->logger->info('found '.count($usedgiftcards). ' giftcards and sorted them');        
  873.         if( $order->getSession() and $loyaltyMember){
  874.             $session = $this->sessionDetailsHelper->loadSession($order->getCinemaId(), $order->getSession()->getId());
  875.             $this->checkTransactionHistory($order, $session, $loyaltyMember);
  876.         }
  878.         $booking = $this->paymentHelper->makeVistaPayment($loyaltyMember, $email, $order, $usedgiftcards);
  880.         $order->setState(Order::STATE_PAYMENT_FINISHED);
  881.         $this->em->flush();
  883.         return $booking;
  884.     }
  886.     /**
  887.      * @Post("/apply-gift-card")
  888.      * @NelmioSecurity(name="Bearer")
  889.      * @ParamConverter("giftcards", converter="fos_rest.request_body", class="array")
  890.      * @View()
  891.      *
  892.      * @SWG\Response(
  893.      *     response=200,
  894.      *     description="gift card applied",
  895.      *     @Model(type=\App\Entity\Local\MPay24OrderPaymentTransaction::class))
  896.      *
  897.      * @param $orderId
  898.      * @param array $giftcards
  899.      * @param Security $security
  900.      * @return mixed
  901.      * @throws \Doctrine\ORM\ORMException
  902.      * @throws \Doctrine\ORM\OptimisticLockException
  903.      * @throws \GuzzleHttp\Exception\GuzzleException
  904.      * @throws \Throwable
  905.      */
  906.     public function applyGiftCardAction($orderId, $giftcards, Security $security) 
  907.     {
  908.         try {
  909.             $order = $this->renewOrder($orderId);        
  910.         } catch (\Throwable $ex) {
  911.             // must be a reservation :|
  912.             return;
  913.         }
  915.         if (count($giftcards) < 1) {
  916.             // remove all giftcards to let the user remove giftcards from the order
  917.             $this->paymentHelper->removeAllGiftCardsFromOrder($order);
  918.             $this->em->flush();                      
  919.         } else {
  920.             $this->logger->debug('applying ' . count($giftcards) . ' giftcard(s) to ' . $orderId);
  921.             $usedgiftcards = [];
  922.             foreach($giftcards as $gcitem){
  923.                 $gc=(new GiftCard)
  924.                     ->setNumber($gcitem['Number'])
  925.                     ->setValueInCents($this->giftCardsRepository->getGiftCardValue($gcitem['Number']));
  926.                 $usedgiftcards[]=$gc;
  927.             }        
  929.             usort($usedgiftcards, function($a, $b){
  930.                 return $a->getValueInCents() - $b->getValueInCents();
  931.             });
  932.             $this->logger->info('found '.count($usedgiftcards). ' giftcards and sorted them');        
  934.             $result = $this->paymentHelper->applyGiftCardsToOrder($order, $usedgiftcards);
  936.             if ($result) {
  937.                 $order->setOrderTotalValueInCents($result->getOrderValueRemaining());
  938.                 $this->em->flush();       
  939.             }
  940.         }
  942.         return $order;
  943.     }
  945.     /**
  946.      * @Get("/tickets")
  947.      * @View()
  948.      *
  949.      * @SWG\Response(
  950.      *     response=200,
  951.      *     description="Tickets of the payment",
  952.      *     @Model(type=\App\Entity\Vista\Booking::class))
  953.      *
  954.      * @param $orderId
  955.      * @return mixed
  956.      */
  957.     public function getTicketsAction($orderId) {
  958.         $transaction = $this->paymentHelper->getTransaction($orderId);
  959.         if (!$transaction->getVistaBookingId() || !$transaction->getCinemaId()) {
  960.             throw new \InvalidArgumentException(sprintf(
  961.                 'Unpaid order, payment was not processed by MPay24, order id: %s',
  962.                 $orderId
  963.             ));
  964.         }
  966.         // TODO: check if vista booking exists
  967.         
  968.         return $this->bookingHelper->getById($transaction->getVistaBookingId(), $transaction->getCinemaId());
  969.     }
  971.     /**
  972.      * @Route("/tickets/pdf", methods={"GET"})
  973.      * @Rest\View()
  974.      *
  975.      * @SWG\Response(
  976.      *     response="200",
  977.      *     description="Success")
  978.      *
  979.      * @param Security $security
  980.      * @param string $orderId
  981.      * @return Response
  982.      */
  983.     public function pdfAction(Security $security, string $orderId) {
  984.         $transaction = $this->paymentHelper->getTransaction($orderId);
  985.         if (!$transaction->getVistaBookingId() || !$transaction->getCinemaId()) {
  986.             throw new \InvalidArgumentException(sprintf(
  987.                 'Unpaid order, payment was not processed by MPay24, order id: %s',
  988.                 $orderId
  989.             ));
  990.         }
  991.         $booking = $this->bookingHelper->getById($transaction->getVistaBookingId(), $transaction->getCinemaId());
  992.         if (null === $booking) {
  993.             throw new NotFoundHttpException();
  994.         }
  995.         /** @var LoyaltyMember $user */
  996.         $user = $security->getUser();
  997.         $param = [];
  998.         $param['cinemaId'] = $booking->getCinemaId();
  999.         if ($booking->getTickets()) {
  1000.             $param['sessionId'] = $booking->getTickets()[0]->getSessionId();
  1001.         }
  1002.         $session = $this->sessionRepository->findOneBy($param);
  1003.         
  1004.         $pdf = $this->mailer->downloadTicketPdf($booking, $session, $user, $transaction->getEmail());
  1006.         $response = new Response($pdf->getBody()->getContents());
  1007.         $response->headers->set('Content-type', 'application/pdf');
  1008.         return $response;
  1009.     }
  1011.     /**
  1012.      * Check order restrictions
  1013.      *
  1014.      * @param Order         $order
  1015.      * @param Session       $session
  1016.      * @param LoyaltyMember $user
  1017.      *
  1018.      * @throws \Throwable
  1019.      */
  1020.     protected function checkTransactionHistory(Order $order, Session $session, ?LoyaltyMember $user) {
  1021.         $isBonus = false;
  1022.         if (SessionBase::STATUS_RED === $session->getStatus()) {
  1023.             throw PaymentException::create(
  1024.                 'You can only buy tickets at the desk for this session, hurry up!',
  1025.                 PaymentException::CODE_PAYMENT_SESSION_RED
  1026.             );
  1027.         }
  1029.         foreach ($order->getTickets() as $ticket) {
  1030.             if ($ticket->isLoyaltyTicket()) {
  1031.                 $isBonus = true;
  1032.             }
  1033.         }
  1035.         $total = $order->getTicketsCount();
  1036.         $bonusTicketsTotal = $order->getBonusTicketsCount();
  1037.         if( ! is_null($user)){
  1038.             $restrictions = $this->sessionDetailsHelper->calculateRestrictions(
  1039.                 $user,
  1040.                 (int) $session->getCinemaId(),
  1041.                 $session->getShowtime()
  1042.             );
  1044.             if (!$isBonus && ($total > $restrictions->getMaxTickets())) {
  1045.                 throw new \InvalidArgumentException('Max tickets per order limit reached');
  1046.             }
  1048.             if ($isBonus && ($bonusTicketsTotal > $restrictions->getMaxBonusCardTickets())) {
  1049.                 throw new \InvalidArgumentException('Max bonus card tickets per day limit reached');
  1050.             }
  1051.         }
  1052.     }
  1054.     /**
  1055.      * Check user bookings
  1056.      *
  1057.      * @param Order         $order
  1058.      * @param Session       $session
  1059.      * @param LoyaltyMember $user
  1060.      *
  1061.      * @throws PaymentException
  1062.      * @throws \Throwable
  1063.      */
  1064.     protected function checkBookingHistory(Order $order, Session $session, LoyaltyMember $user) {
  1065.         $total = $order->getTicketsCount();
  1066.         $bonusTicketsTotal = $order->getBonusTicketsCount();
  1067.         $restrictions = $this->sessionDetailsHelper->calculateRestrictions(
  1068.             $user,
  1069.             (int) $session->getCinemaId(),
  1070.             $session->getShowtime()
  1071.         );
  1073.         if (SessionBase::STATUS_YELLOW === $session->getStatus()) {
  1074.             throw PaymentException::create(
  1075.                 'You can only buy tickets for this session, reservation not possible!',
  1076.                 PaymentException::CODE_PAYMENT_SESSION_YELLOW
  1077.             );
  1078.         }
  1079.         if (SessionBase::STATUS_RED === $session->getStatus()) {
  1080.             throw PaymentException::create(
  1081.                 'You cannot reserve tickets for this session. Please, buy tickets at the desk.',
  1082.                 PaymentException::CODE_PAYMENT_SESSION_RED
  1083.             );
  1084.         }
  1086.         $isBonus = false;
  1087.         foreach ($order->getTickets() as $ticket) {
  1088.             $ticket->isLoyaltyTicket() and $isBonus = true;
  1089.         }
  1091.         if (!$isBonus && ($total > $restrictions->getMaxReservedTickets())) {
  1092.             throw new \InvalidArgumentException('Max reserved tickets per day limit reached');
  1093.         }
  1095.         if ($isBonus && ($bonusTicketsTotal > $restrictions->getMaxReservedBonusTickets())) {
  1096.             throw new \InvalidArgumentException('Max reserved bonus card tickets per day limit reached');
  1097.         }
  1098.     }
  1099.     
  1100.     private function getKombankRedirectForm($orderId, string $responseUrl, string $amount, $cinemaId): Response {
  1101.         $paymentPageUrl = getenv('KOM_BANK_ADDRESS') ? getenv('KOM_BANK_ADDRESS') : "https://entegrasyon.asseco-see.com.tr/fim/est3Dgate";
  1103.         $okUrl   = (getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('SCHEME_AND_HTTP_HOST')) . "$responseUrl/success";  // "/api/v1/orders/$orderId/payment/handle-redirect-post/success"
  1104.         $failUrl = (getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('SCHEME_AND_HTTP_HOST')) . "$responseUrl/error";      //URL which client be redirected if authentication is not successful
  1105.         $callbackUrl = getenv('KOM_BANK_CALLBACKURL');      //URL which callback to client
  1106.         $rnd = microtime();                //A random number, such as date/time
  1107.         $currencyVal = "941";            //Currency code, 949 for TL, ISO_4217 standard RSD     941     2     Serbian dinar
  1108.         $storetype = "3D_PAY_HOSTING";    //3D authentication model
  1109.         $lang = "sr";                    //Language parameter, "tr" for Turkish (default), "en" for English 
  1110.         $instalment = "";                //Instalment count, if there's no instalment should left blank
  1111.         $transactionType = "Auth";        //transaction type
  1112.         $refreshtime = 10;
  1113.         $hashAlgorithm = 'ver3';
  1115.         $ids = $this->paymentHelper->getMerchant($cinemaId);
  1116.         //error_log(sprintf("%s %s(%s) ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__) . " orderId $orderId cinemaId $cinemaId " . var_export($ids, true));
  1117.         $clientId = $ids && array_key_exists('id', $ids) ? $ids['id'] : '250300000';            //Merchant Id defined by bank to user
  1118.         $storekey = $ids && array_key_exists('pass', $ids)  ? $ids['pass'] : 'SKEY1234'; //Store key value, defined by bank.
  1120.         $params = [
  1121.             'amount'      => $amount,
  1122.             'callbackUrl' => $callbackUrl,
  1123.             'clientid'    => $clientId,
  1124.             'currency'    => $currencyVal,
  1125.             'failUrl'     => $failUrl,
  1126.             'hashAlgorithm' => $hashAlgorithm,
  1127.             'Instalment'  => $instalment,
  1128.             'lang'        => $lang,
  1129.             'oid'         => $orderId,
  1130.             'okUrl'       => $okUrl,
  1131.             'refreshtime' => $refreshtime,
  1132.             'rnd'         => $rnd,
  1133.             'storetype'   => $storetype,
  1134.             'TranType'    => $transactionType
  1135.         ];
  1136.         
  1137.         $hash = $this->generateKomBankHash($params, $storekey);
  1139.         $paymentRedirect = (new PaymentRedirect())
  1140.             ->setRedirectUrl($paymentPageUrl)
  1141.             ->setFormTitle('Komercijalna Bank')
  1142.             ->setPaymentData(
  1143.                 array_merge($params, ['hash' => $hash])
  1144.             );
  1145.         
  1146.         $response = $this->render('web/redirect.html.twig', ['paymentRedirect' => $paymentRedirect] );
  1147.         //error_log(sprintf("%s %s(%s) payment_finish orderId $orderId", date('Y-m-d H:i:s'), __METHOD__, __LINE__));
  1148.         $response->headers->set('Content-Type', 'text/html; charset=UTF-8'); // Content-Type: text/html; charset=UTF-8
  1149.         return $response;
  1150.     }
  1152.     private function generateKomBankHash(array $params, string $storekey): string
  1153.     {
  1154.         $hashval = "";
  1155.         foreach ($params as $param) {
  1156.             $escapedParamValue = str_replace("|", "\\|", str_replace("\\", "\\\\", $param));
  1158.             if ($param != "hash" && $param != "encoding") {
  1159.                 $hashval = $hashval . $escapedParamValue . "|";
  1160.             }
  1161.         }
  1163.         $escapedStoreKey = str_replace("|", "\\|", str_replace("\\", "\\\\", $storekey));
  1164.         $hashval = $hashval . $escapedStoreKey;
  1166.         $calculatedHashValue = hash('sha512', $hashval);
  1167.         return base64_encode (pack('H*',$calculatedHashValue));
  1168.     }
  1169.     
  1170.     private function getCpayRedirectForm($orderId, string $responseUrl, string $amount, $cinemaId): Response {
  1171.         // inspired by https://github.com/c0nevski/CaSys-php-implementation
  1172.         // https://www.cpay.com.mk/client/Page/default.aspx?xml_id=/mk-MK/.loginToPay/
  1173.         $paymentPageUrl = getenv('CPAY_ADDRESS') ? getenv('CPAY_ADDRESS') : 'https://www.cpay.com.mk/client/Page/default.aspx?xml_id=/mk-MK/.loginToPay/.simple/';
  1175.         $okUrl   = (getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('SCHEME_AND_HTTP_HOST')) . "$responseUrl/success";  // "/api/v1/orders/$orderId/payment/handle-redirect-post/success"
  1176.         $failUrl = (getenv('DEV_SIRMA') ? 'http://' . getenv('DEV_SIRMA') : getenv('SCHEME_AND_HTTP_HOST')) . "$responseUrl/error";      //URL which client be redirected if authentication is not successful
  1178.         $ids = $this->paymentHelper->getMerchant($cinemaId);
  1179.         //error_log(sprintf("%s %s(%s) ", date('Y-m-d H:i:s'),  __METHOD__, __LINE__) . " SD $SD cinemaId $cinemaId " . var_export($ids, true));
  1180.         $merchantId = $ids && array_key_exists('id', $ids) ? $ids['id'] : '1755375';            //Merchant Id defined by bank to user getenv('CPAY_MERCHANT_ID')
  1181.         $md5password = $ids && array_key_exists('pass', $ids)  ? $ids['pass'] : 'E7883395'; //Store key value, defined by bank. getenv('CPAY_PASS')
  1183.         $paymentValues = [
  1184.             'PaymentOKURL'   => $okUrl, // strana kade formata kje prenasocuva koga plakjanjeto e uspeshno
  1185.             'PaymentFailURL' => $failUrl, // strana kade formata kje prenasocuva koga plakjanjeto e neuspeshno
  1186.             'AmountToPay'    => $amount, // $mult; // cenata sto treba da se plati pomnozena so 100
  1187.             'AmountCurrency' => 'MKD', // valuta vo koja se vrsi plakjanjeto
  1188.             'PayToMerchant'  => $merchantId,  // "Tuka obicno imate dadeno 10 cifren broj - ova e fiksno od caSys"; // ova ne treba da se menuva, ova e dadeno od CaSys
  1189.             'MerchantName'   => 'Cineplexx Macedonia', // ova ne treba da se menuva, ova e dadeno od CaSys
  1190.             'Details1'       => 'CINEPLEXX', // Moze da se napise sto bilo - go pisuva vo casys formata za plakanje kako detali 1
  1191.             'Details2'       => $orderId, // unikatni redni broevi
  1192.             'OriginalAmount' => sprintf('%.2f', floatval($amount) / 100)
  1193.         ];
  1195.         $fieldNames = '';
  1196.         $fieldLens = '';
  1197.         $fieldValues = '';
  1198.         $postForm = '';
  1200.         foreach($paymentValues as $key => $value) {
  1201.             $fieldNames  .= "$key,";
  1202.             $fieldLens   .= sprintf("%03d", mb_strlen($value, 'UTF-8'));
  1203.             $fieldValues .= "$value";
  1204.             $postForm    .= "<input id='$key' name='$key' value='$value' type='hidden' />\n";
  1205.         }
  1206.         $fieldValues .= $md5password;
  1208.         $CheckSumHeader = sprintf("%02d", count($paymentValues)) . "$fieldNames$fieldLens";
  1209.         $CheckSum = md5("$CheckSumHeader$fieldValues");  //ova generira md5 od checkshumheader
  1211.         $paymentValues['CheckSumHeader'] = $CheckSumHeader;
  1212.         $paymentValues['CheckSum']       = $CheckSum;
  1214.         $paymentRedirect = (new PaymentRedirect())
  1215.             ->setRedirectUrl($paymentPageUrl)
  1216.             ->setFormTitle('CPay Bank')
  1217.             ->setPaymentData($paymentValues);
  1218.         
  1219.         $response = $this->render('web/redirect.html.twig', ['paymentRedirect' => $paymentRedirect] );
  1220.         //error_log(sprintf("%s %s(%s) payment_finish orderId $orderId", date('Y-m-d H:i:s'), __METHOD__, __LINE__));
  1221.         $response->headers->set('Content-Type', 'text/html; charset=UTF-8'); // Content-Type: text/html; charset=UTF-8
  1222.         return $response;
  1223.     }
  1224. }