Add necessary API views

Author: Mohammed Hammoud

payments/api/views.py

@@ -0,0 +1,229 @@
+from django.shortcuts import get_object_or_404
+from django.core.exceptions import ObjectDoesNotExist
+from django.conf import settings
+from django.utils.encoding import smart_str
+
+from rest_framework import status, generics
+from rest_framework.views import APIView
+from rest_framework.response import Response
+from rest_framework.permissions import IsAuthenticated
+
+from .. import settings as app_settings
+
+from .serializers import (
+    CurrentSubscriptionSerializer,
+    CurrentCustomerSerializer,
+    SubscriptionSerializer,
+    CardSerializer,
+    CancelSerializer,
+    ChargeSerializer,
+    InvoiceSerializer,
+    EventSerializer,
+    WebhookSerializer,
+    EventProcessingExceptionSerializer
+)
+
+from ..models import (
+    Event,
+    Customer,
+    CurrentSubscription,
+    EventProcessingException
+)
+
+import stripe
+
+stripe.api_key = app_settings.get_api_key()
+
+
+class StripeView(APIView):
+    """ Generic API StripeView """
+    permission_classes = (IsAuthenticated, )
+
+    def get_current_subscription(self):
+        try:
+            return self.request.user.customer.current_subscription
+        except CurrentSubscription.DoesNotExist:
+            return None
+
+    def get_customer(self):
+        try:
+            return self.request.user.customer
+        except ObjectDoesNotExist:
+            return Customer.create(self.request.user)
+
+
+class CurrentCustomerDetailView(StripeView, generics.RetrieveAPIView):
+    """ See the current customer/user payment details """
+
+    serializer_class = CurrentCustomerSerializer
+
+    def get_object(self):
+        return self.get_customer()
+
+
+class SubscriptionView(StripeView):
+    """ See, change/set the current customer/user subscription plan """
+    serializer_class = SubscriptionSerializer
+
+    def get(self, request, *args, **kwargs):
+        current_subscription = self.get_current_subscription()
+        serializer = CurrentSubscriptionSerializer(current_subscription)
+        return Response(serializer.data, status=status.HTTP_200_OK)
+
+    def post(self, request, *args, **kwargs):
+        try:
+            serializer = self.serializer_class(data=request.data)
+
+            if serializer.is_valid():
+                validated_data = serializer.validated_data
+                stripe_plan = validated_data.get('stripe_plan', None)
+                customer = self.get_customer()
+                subscription = customer.subscribe(stripe_plan)
+
+                return Response(subscription, status=status.HTTP_201_CREATED)
+            else:
+                return Response(serializer.errors)
+        except stripe.StripeError as e:
+            from django.utils.encoding import smart_str
+
+            error_data = {u'error': smart_str(e) or u'Unknown error'}
+            return Response(error_data, status=status.HTTP_400_BAD_REQUEST)
+
+
+class ChangeCardView(StripeView):
+    """ Add or update customer card details """
+    serializer_class = CardSerializer
+
+    def post(self, request, *args, **kwargs):
+        try:
+            serializer = self.serializer_class(data=request.data)
+
+            if serializer.is_valid():
+                validated_data = serializer.validated_data
+
+                customer = self.get_customer()
+                card_token_response = customer.create_card_token(validated_data)
+                token = card_token_response[0].get('id', None)
+                customer.update_card(token)
+                send_invoice = customer.card_fingerprint == ""
+
+                if send_invoice:
+                    customer.send_invoice()
+                    customer.retry_unpaid_invoices()
+
+                return Response(validated_data, status=status.HTTP_201_CREATED)
+            else:
+                return Response(serializer.errors)
+
+        except stripe.CardError as e:
+            error_data = {u'error': smart_str(e) or u'Unknown error'}
+            return Response(error_data, status=status.HTTP_400_BAD_REQUEST)
+
+
+class CancelView(StripeView):
+    """ Cancel customer subscription """
+    serializer_class = CancelSerializer
+
+    def post(self, request, *args, **kwargs):
+        try:
+            serializer = self.serializer_class(data=request.data)
+            if serializer.is_valid():
+                customer = self.get_customer()
+                customer.cancel()
+                return Response({'success': True}, status=status.HTTP_202_ACCEPTED)
+            else:
+                return Response(serializer.errors)
+        except stripe.StripeError as e:
+            error_data = {u'error': smart_str(e) or u'Unknown error'}
+            return Response(error_data, status=status.HTTP_400_BAD_REQUEST)
+
+
+class PlanListView(StripeView):
+    """ List all current plans """
+
+    def get(self, request, *args, **kwargs):
+        return Response(settings.PAYMENTS_PLANS, status=status.HTTP_200_OK)
+
+
+class ChargeListView(StripeView, generics.ListAPIView):
+    """ List customer charges """
+    serializer_class = ChargeSerializer
+
+    def get_queryset(self):
+        customer = self.get_customer()
+        charges = customer.charges.all()
+        return charges
+
+
+class InvoiceListView(StripeView, generics.ListAPIView):
+    """ List customer invoices """
+    serializer_class = InvoiceSerializer
+
+    def get_queryset(self):
+        customer = self.get_customer()
+        invoices = customer.invoices.all()
+        return invoices
+
+
+class EventListView(StripeView, generics.ListAPIView):
+    """ List customer events """
+    serializer_class = EventSerializer
+
+    def get_queryset(self):
+        customer = self.get_customer()
+        events = customer.event_set.all()
+        return events
+
+
+class WebhookView(StripeView):
+    serializer_class = WebhookSerializer
+
+    def validate_webhook(self, webhook_data):
+        webhook_id = webhook_data.get('id', None)
+        webhook_type = webhook_data.get('type', None)
+        webhook_livemode = webhook_data.get('livemode', None)
+        is_valid = False
+
+        if webhook_id and webhook_type and webhook_livemode:
+            is_valid = True
+        return is_valid, webhook_id, webhook_type, webhook_livemode
+
+    def post(self, request, *args, **kwargs):
+        try:
+            serializer = self.serializer_class(data=request.data)
+
+            if serializer.is_valid():
+                validated_data = serializer.validated_data
+                webhook_data = validated_data.get('data', None)
+
+                is_webhook_valid, webhook_id, webhook_type, webhook_livemode = self.validate_webhook(webhook_data)
+
+                if is_webhook_valid:
+                    if Event.objects.filter(stripe_id=webhook_id).exists():
+                        obj = EventProcessingException.objects.create(
+                            data=validated_data,
+                            message="Duplicate event record",
+                            traceback=""
+                        )
+
+                        event_processing_exception_serializer = EventProcessingExceptionSerializer(obj)
+                        return Response(event_processing_exception_serializer.data, status=status.HTTP_200_OK)
+                    else:
+                        event = Event.objects.create(
+                            stripe_id=webhook_id,
+                            kind=webhook_type,
+                            livemode=webhook_livemode,
+                            webhook_message=validated_data
+                        )
+                        event.validate()
+                        event.process()
+                        event_serializer = EventSerializer(event)
+                        return Response(event_serializer.data, status=status.HTTP_200_OK)
+                else:
+                    error_data = {u'error': u'Webhook must contain id, type and livemode.'}
+                    return Response(error_data, status=status.HTTP_400_BAD_REQUEST)
+            else:
+                return Response(serializer.errors)
+        except stripe.StripeError as e:
+            error_data = {u'error': smart_str(e) or u'Unknown error'}
+            return Response(error_data, status=status.HTTP_400_BAD_REQUEST)