1 files changed, 83 insertions, 0 deletions
diff --git a/addons/payment_paypal/controllers/main.py b/addons/payment_paypal/controllers/main.py
new file mode 100644
index 00000000000..a2bf54ea36b
--- /dev/null
+++ b/addons/payment_paypal/controllers/main.py
@@ -0,0 +1,83 @@
+# -*- coding: utf-8 -*-
+
+try:
+    import simplejson as json
+except ImportError:
+    import json
+import logging
+import pprint
+import urllib
+import urllib2
+
+from openerp.addons.web import http
+from openerp.addons.web.http import request
+
+_logger = logging.getLogger(__name__)
+
+
+class PaypalController(http.Controller):
+    _notify_url = '/payment/paypal/ipn/'
+    _return_url = '/payment/paypal/dpn/'
+    _cancel_url = '/payment/paypal/cancel/'
+
+    def _get_return_url(self, **post):
+        """ Extract the return URL from the data coming from paypal. """
+        return_url = post.pop('return_url', '')
+        if not return_url:
+            custom = json.loads(post.pop('custom', '{}'))
+            return_url = custom.get('return_url', '/')
+        return return_url
+
+    def paypal_validate_data(self, **post):
+        """ Paypal IPN: three steps validation to ensure data correctness
+
+         - step 1: return an empty HTTP 200 response -> will be done at the end
+           by returning ''
+         - step 2: POST the complete, unaltered message back to Paypal (preceded
+           by cmd=_notify-validate), with same encoding
+         - step 3: paypal send either VERIFIED or INVALID (single word)
+
+        Once data is validated, process it. """
+        res = False
+        new_post = dict(post, cmd='_notify-validate')
+        urequest = urllib2.Request("https://www.sandbox.paypal.com/cgi-bin/webscr", urllib.urlencode(new_post))
+        uopen = urllib2.urlopen(urequest)
+        resp = uopen.read()
+        if resp == 'VERIFIED':
+            _logger.info('Paypal: validated data')
+            cr, uid, context = request.cr, request.uid, request.context
+            res = request.registry['payment.transaction'].form_feedback(cr, uid, post, 'paypal', context=context)
+        elif resp == 'INVALID':
+            _logger.warning('Paypal: answered INVALID on data verification')
+        else:
+            _logger.warning('Paypal: unrecognized paypal answer, received %s instead of VERIFIED or INVALID' % resp.text)
+        return res
+
+    @http.route([
+        '/payment/paypal/ipn/',
+    ], type='http', auth='public', methods=['POST'], website=True)
+    def paypal_ipn(self, **post):
+        """ Paypal IPN. """
+        _logger.info('Beginning Paypal IPN form_feedback with post data %s', pprint.pformat(post))  # debug
+        self.paypal_validate_data(**post)
+        return ''
+
+    @http.route([
+        '/payment/paypal/dpn',
+    ], type='http', auth="public", methods=['POST'], website=True)
+    def paypal_dpn(self, **post):
+        """ Paypal DPN """
+        _logger.info('Beginning Paypal DPN form_feedback with post data %s', pprint.pformat(post))  # debug
+        return_url = self._get_return_url(**post)
+        self.paypal_validate_data(**post)
+        return request.redirect(return_url)
+
+    @http.route([
+        '/payment/paypal/cancel',
+    ], type='http', auth="public", website=True)
+    def paypal_cancel(self, **post):
+        """ When the user cancels its Paypal payment: GET on this route """
+        cr, uid, context = request.cr, request.uid, request.context
+        _logger.info('Beginning Paypal cancel with post data %s', pprint.pformat(post))  # debug
+        return_url = self._get_return_url(**post)
+        return request.redirect(return_url)