module DiscourseDonations class ChargesController < ::ApplicationController skip_before_action :verify_authenticity_token, only: [:create] before_action :ensure_logged_in, only: [:cancel_subscription] before_action :set_user, only: [:index, :create] before_action :set_email, only: [:index, :create, :cancel_subscription] def index result = {} if current_user stripe = DiscourseDonations::Stripe.new(secret_key, stripe_options) list_result = stripe.list(current_user, email: current_user.email) result = list_result if list_result.present? end render json: success_json.merge(result) end def create Rails.logger.info user_params.inspect output = { 'messages' => [], 'rewards' => [] } if create_account if !@email.present? || !user_params[:username].present? output['messages'] << I18n.t('login.missing_user_field') end if user_params[:password] && user_params[:password].length > User.max_password_length output['messages'] << I18n.t('login.password_too_long') end if user_params[:username] && ::User.reserved_username?(user_params[:username]) output['messages'] << I18n.t('login.reserved_username') end end if output['messages'].present? render(json: output.merge(success: false)) && (return) end Rails.logger.debug "Creating a Stripe payment" stripe = DiscourseDonations::Stripe.new(secret_key, stripe_options) result = {} begin Rails.logger.debug "Creating a Stripe charge for #{user_params[:amount]}" opts = { cause: user_params[:cause], email: @email, token: user_params[:stripeToken], amount: user_params[:amount] } if user_params[:type] === 'once' result[:charge] = stripe.charge(@user, opts) else opts[:type] = user_params[:type] subscription = stripe.subscribe(@user, opts) if subscription && subscription['id'] invoices = stripe.invoices_for_subscription(@user, email: opts[:email], subscription_id: subscription['id'] ) end result[:subscription] = {} result[:subscription][:subscription] = subscription if subscription result[:subscription][:invoices] = invoices if invoices end rescue ::Stripe::CardError => e err = e.json_body[:error] output['messages'] << "There was an error (#{err[:type]})." output['messages'] << "Error code: #{err[:code]}" if err[:code] output['messages'] << "Decline code: #{err[:decline_code]}" if err[:decline_code] output['messages'] << "Message: #{err[:message]}" if err[:message] render(json: output) && (return) end if (result[:charge] && result[:charge]['paid'] == true) || (result[:subscription] && result[:subscription][:subscription] && result[:subscription][:subscription]['status'] === 'active') output['messages'] << I18n.t('donations.payment.success') if (result[:charge] && result[:charge]['receipt_number']) || (result[:subscription] && result[:subscription][:invoices].first['receipt_number']) output['messages'] << " #{I18n.t('donations.payment.receipt_sent', email: @email)}" end output['charge'] = result[:charge] if result[:charge] output['subscription'] = result[:subscription] if result[:subscription] output['rewards'] << { type: :group, name: group_name } if group_name output['rewards'] << { type: :badge, name: badge_name } if badge_name if create_account && @email.present? args = user_params.to_h.slice(:email, :username, :password, :name).merge(rewards: output['rewards']) Jobs.enqueue(:donation_user, args) end end render json: output end def cancel_subscription params.require(:subscription_id) stripe = DiscourseDonations::Stripe.new(secret_key, stripe_options) result = stripe.cancel_subscription(params[:subscription_id]) if result[:success] render json: success_json.merge(subscription: result[:subscription]) else render json: failed_json.merge(message: result[:message]) end end private def create_account user_params[:create_account] == 'true' && SiteSetting.discourse_donations_enable_create_accounts end def reward?(payment) payment.present? && payment.successful? end def group_name SiteSetting.discourse_donations_reward_group_name end def badge_name SiteSetting.discourse_donations_reward_badge_name end def secret_key SiteSetting.discourse_donations_secret_key end def stripe_options { description: SiteSetting.discourse_donations_description, currency: SiteSetting.discourse_donations_currency } end def user_params params.permit(:user_id, :name, :username, :email, :password, :stripeToken, :cause, :type, :amount, :create_account) end def set_user user = current_user if user_params[:user_id].present? if record = User.find_by(user_params[:user_id]) user = record end end @user = user end def set_email email = nil if user_params[:email].present? email = user_params[:email] elsif @user email = @user.try(:email) end @email = email end end end