de.hybris.platform.acceleratorservices.web.payment.controllers.SilentOrderPostMockController.java Source code

Introduction

Here is the source code for de.hybris.platform.acceleratorservices.web.payment.controllers.SilentOrderPostMockController.java

Source

/*
 * [y] hybris Platform
 *
 * Copyright (c) 2000-2014 hybris AG
 * All rights reserved.
 *
 * This software is the confidential and proprietary information of hybris
 * ("Confidential Information"). You shall not disclose such Confidential
 * Information and shall use it only in accordance with the terms of the
 * license agreement you entered into with hybris.
 *
 *  
 */
package de.hybris.platform.acceleratorservices.web.payment.controllers;

import de.hybris.platform.acceleratorservices.payment.utils.AcceleratorDigestUtils;
import de.hybris.platform.acceleratorservices.web.payment.forms.SopPaymentDetailsForm;
import de.hybris.platform.acceleratorservices.web.payment.validation.SopPaymentDetailsValidator;

import java.util.ArrayList;
import java.util.Enumeration;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.UUID;

import javax.annotation.Resource;
import javax.servlet.http.HttpServletRequest;
import javax.validation.Valid;

import org.apache.commons.lang.StringUtils;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.validation.BindingResult;
import org.springframework.validation.FieldError;
import org.springframework.validation.ObjectError;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;

@Controller
@RequestMapping("/sop-mock")
public class SilentOrderPostMockController {
    protected static final String SOP_REDIRECT_POST_PAGE = "sopMock/redirectPost";

    private static final String SHARED_SECRET = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB"
            + "gQCdz1fPUnZj0focVszsOmGj3MwBXtF18LZH" + "kTK4CV88hQq2vUWKMYe2UVLIEvVWghLOCy/t"
            + "tsGD5NS0k8dllHJvRu2ElQNJZGb4tG/7hxux" + "NxH9YaZqv5z0hSiUbTgQfFDuO7NqzmwMiW3z"
            + "q7y6UiiSBkNfV2WCmnKg9vJk/Jp+1wIDAQAB";

    @Resource(name = "sopPaymentDetailsValidator")
    private SopPaymentDetailsValidator sopPaymentDetailsValidator;

    @Resource(name = "acceleratorDigestUtils")
    private AcceleratorDigestUtils digestUtils;

    public SopPaymentDetailsValidator getSopPaymentDetailsValidator() {
        return sopPaymentDetailsValidator;
    }

    @RequestMapping(value = "/process", method = RequestMethod.POST)
    public String doValidateAndPost(@Valid final SopPaymentDetailsForm form, final BindingResult bindingResult,
            final HttpServletRequest request, final Model model) {
        final Map<String, String> params = cloneRequestParameters(request);

        // Remove values that we must not post back to the caller
        params.remove("card_cvNumber");

        getSopPaymentDetailsValidator().validate(form, bindingResult);

        if (bindingResult.hasErrors()) {
            // Validation errors
            params.put("decision", "REJECT");
            params.put("reasonCode", "102");
            params.put("decision_publicSignature", getMockedPublicDigest("REJECT" + "102"));

            // Remove card number on validation error
            params.remove("card_accountNumber");

            final List<String> missingFields = new ArrayList<String>();
            final List<String> invalidFields = new ArrayList<String>();

            for (final ObjectError objectError : bindingResult.getAllErrors()) {
                if (objectError instanceof FieldError) {
                    final FieldError fieldError = (FieldError) objectError;

                    if (fieldError.getRejectedValue() == null || "".equals(fieldError.getRejectedValue())) {
                        missingFields.add(fieldError.getField());
                    } else {
                        invalidFields.add(fieldError.getField());
                    }
                }
            }

            for (int i = 0; i < missingFields.size(); i++) {
                params.put("MissingField" + i, missingFields.get(i));
            }
            for (int i = 0; i < invalidFields.size(); i++) {
                params.put("InvalidField" + i, invalidFields.get(i));
            }
        } else {
            // No validation errors create subscription ID

            final String subscriptionId = UUID.randomUUID().toString();
            params.put("ccAuthReply_cvCode", "M");
            params.put("paySubscriptionCreateReply_subscriptionID", subscriptionId);
            params.put("paySubscriptionCreateReply_subscriptionIDPublicSignature",
                    getMockedPublicDigest(subscriptionId));

            processTransactionDecision(request, null, params, false);

            //Mask the card number in the response
            final String endPortion = form.getCard_accountNumber().trim()
                    .substring(form.getCard_accountNumber().length() - 4);
            final String maskedCardNumber = "************" + endPortion;

            params.put("card_accountNumber", maskedCardNumber);
        }

        model.addAttribute("postParams", params);
        model.addAttribute("postUrl", params.get("orderPage_receiptResponseURL"));

        return SOP_REDIRECT_POST_PAGE;
    }

    protected Map<String, String> cloneRequestParameters(final HttpServletRequest request) {
        final Enumeration<String> paramNames = request.getParameterNames();
        final Map<String, String> params = new HashMap<String, String>();
        while (paramNames.hasMoreElements()) {
            final String paramName = paramNames.nextElement();
            params.put(paramName, request.getParameter(paramName));
        }
        return params;
    }

    protected void processTransactionDecision(final HttpServletRequest request, final String reasonCode,
            final Map<String, String> params, final boolean error) {
        if (params == null || request == null) {
            return;
        }

        final String decision = error ? "ERROR" : "ACCEPT";

        final String modReasonCode;
        if (StringUtils.isBlank(reasonCode)) {
            if ("ACCEPT".equalsIgnoreCase(decision)) {
                modReasonCode = "100";
            } else {
                // General error
                modReasonCode = "150";
            }
        } else {
            modReasonCode = reasonCode;
        }

        // Default decision to ACCEPT 100
        params.put("decision", decision);
        params.put("reasonCode", modReasonCode);
        params.put("decision_publicSignature", getMockedPublicDigest(decision + modReasonCode));
    }

    protected String getMockedPublicDigest(final String customValues) {
        String result;
        try {
            result = digestUtils.getPublicDigest(customValues, SHARED_SECRET);
        } catch (final Exception e) {
            result = "BzW+Xn0ZgZHeQRcFB6ri";
        }

        return result;
    }
}