cosmetics_shop/apps/api/views.py

# coding=utf-8

import json
import xmltodict

from django.db import transaction
from django.http import HttpResponse
from apps.customer import customer_log
from rest_framework.views import APIView

from utils.wx.WXBizMsgCrypt import WXBizMsgCrypt
from utils.exceptions import CustomError
from utils import response_ok, response_error
from utils.wechatpay import WechatPayNotify

from apps.log.models import BizLog
from apps.WechatTp.models import WechatTp
from apps.WechatApplet.models import WechatApplet
from apps.tenant.models import Tenant
from apps.pay.models import Pay
from apps.tenant.biz import TenantBiz
from utils.xgj.xgj import XGJ
from utils.permission import IsCustomerUser


class CallbackAuthorize(APIView):
    '''验证票据（component_verify_ticket）在第三方平台创建审核通过后，微信服务器会向其 ”授权事件接收URL”
    每隔 10 分钟以 POST 的方式推送 component_verify_ticket 接收 POST 请求后，只需直接返回字符串 success。
    为了加强安全性，postdata 中的 xml 将使用服务申请时的加解密 key 来进行加密'''

    def post(self, request):
        sMsgSignature = request.GET.get('msg_signature')
        sTimeStamp = request.GET.get('timestamp')
        sNonce = request.GET.get('nonce')
        sPostData = request.body.decode('utf-8')

        try:
            component = WechatTp.getDefault()
            if component:
                appid = component.getAppid()
                msg_crypt = WXBizMsgCrypt(component.getToken(), component.getEncodeKey(), appid)
                ret, decryp_xml = msg_crypt.DecryptMsg(sPostData, sMsgSignature, sTimeStamp, sNonce)
                data = json.loads(json.dumps(xmltodict.parse(decryp_xml)))['xml']
                if data['AppId'] == appid:
                    if data['InfoType'] == 'component_verify_ticket':
                        component.refreshVerifyTicket(data['ComponentVerifyTicket'])
                    elif data['InfoType'] == 'unauthorized':
                        authorizer_appid = data['AuthorizerAppid']
                        authorizer = WechatApplet.getByAppidAndComponentAppid(authorizer_appid, appid)
                        if authorizer:
                            authorizer.revoke()
        except:
            pass

        return HttpResponse('success')


class RedirectAuthorize(APIView):
    '''小程序绑定授权回调'''

    def get(self, request, pk):
        try:
            with transaction.atomic():
                tenant = Tenant.objects.select_for_update().filter(id=pk).first()
                app = TenantBiz.bindWechatApplet(tenant, request.GET.get('auth_code'))
                BizLog.objects.addnew(None, None, BizLog.INSERT, u'租户绑定小程序, id=%d' % app.id)
        except Exception as e:
            return response_error(str(e))
        return response_ok()


class CallbackEvent(APIView):
    '''消息与事件接收'''

    def post(self, request, appid):
        appid = appid
        sMsgSignature = request.GET.get('msg_signature')
        sTimeStamp = request.GET.get('timestamp')
        sNonce = request.GET.get('nonce')
        sPostData = request.body.decode('utf-8')

        try:
            tp = WechatTp.getDefault()
            msg_crypt = WXBizMsgCrypt(tp.getToken(), tp.getEncodeKey(), tp.getAppid())
            ret, decryp_xml = msg_crypt.DecryptMsg(sPostData, sMsgSignature, sTimeStamp, sNonce)
            data = json.loads(json.dumps(xmltodict.parse(decryp_xml)))['xml']
            if data['MsgType'] == 'event':
                app = WechatApplet.getByAppid(appid)
                if data['Event'] == 'weapp_audit_success':  # 代码审核通过
                    app.weapp_audit_success()
                elif data['Event'] == 'weapp_audit_fail':  # 代码审核不通过
                    app.weapp_audit_fail(data['Reason'])
                elif data['Event'] == 'weapp_audit_delay':  # 代码审核延后
                    app.weapp_audit_delay(data['Reason'])
        except:
            pass
        return HttpResponse('success')

class WechatNotifyView(APIView):

    def dispatch(self, request, *args, **kwargs):
        appid = kwargs['appid']
        applet = WechatApplet.getByAppid(appid)
        param = request.body.decode('utf-8')
        notify = WechatPayNotify(param, applet.tenant_key)

        try:
            data = notify.handle()
            if not data:
                raise CustomError(u'错误的请求！')

            result_code = data['result_code']
            if result_code != 'SUCCESS':
                raise CustomError(u'错误的请求！')

            no = data['out_trade_no']
            amount = int(data['total_fee']) * 100

            with transaction.atomic():
                pay = Pay.getByNo(no)
                pay.payConfirm(amount)
                customer_log(pay.customer, BizLog.INSERT, u'支付成功，no=%s' % no, param)
        except:
            return HttpResponse(WechatPayNotify.response_fail())
        return HttpResponse(WechatPayNotify.response_ok())


class GetCompany(APIView):
    permission_classes = [IsCustomerUser, ]

    def get(self, request):
        appid = request.GET.get('appid')
        try:
            res = XGJ.get_company(appid)
        except Exception as e:
            return response_error(str(e))
        return response_ok(res)


class GetMemberCard(APIView):
    permission_classes = [IsCustomerUser, ]

    def post(self, request):
        appid = request.POST.get('appid')
        company_id = request.POST.get('company_id')
        tel = request.POST.get('tel')
        number = request.POST.get('number')
        try:
            res = XGJ.get_member_card(appid, company_id, tel, number)
        except Exception as e:
            return response_error(str(e))
        return response_ok(res)


class GetMemberInfo(APIView):
    permission_classes = [IsCustomerUser, ]

    def get(self, request):
        appid = request.GET.get('appid')
        customer = request.customer
        if not customer.member_id:
            raise CustomError(u'请先绑定会员卡')
        try:
            res = XGJ.get_member_info(appid, str(customer.member_id))
        except Exception as e:
            return response_error(str(e))
        return response_ok(res)


class GetMemberPoints(APIView):
    permission_classes = [IsCustomerUser, ]

    def get(self, request):
        appid = request.GET.get('appid')
        page = request.GET.get('page')
        pageSize = request.GET.get('pageSize')
        customer = request.customer
        if not customer.member_id:
            raise CustomError(u'请先绑定会员卡')
        try:
            res = XGJ.get_member_points(appid, str(customer.member_id), page, pageSize)
        except Exception as e:
            return response_error(str(e))
        return response_ok(res)


class GetMemberRecord(APIView):
    permission_classes = [IsCustomerUser, ]

    def get(self, request):
        appid = request.GET.get('appid')
        page = request.GET.get('page')
        pageSize = request.GET.get('pageSize')
        customer = request.customer
        if not customer.member_id:
            raise CustomError(u'请先绑定会员卡')
        try:
            res = XGJ.get_member_record(appid, str(customer.member_id), page, pageSize)
        except Exception as e:
            return response_error(str(e))
        return response_ok(res)


class GetMemberBalance(APIView):
    permission_classes = [IsCustomerUser, ]

    def get(self, request):
        appid = request.GET.get('appid')
        customer = request.customer
        if not customer.member_id:
            raise CustomError(u'未绑定会员卡')
        try:
            res = XGJ.get_member_balance(appid, str(customer.member_id))
        except Exception as e:
            return response_error(str(e))
        return response_ok(res)