package orders import ( "encoding/json" "io" "log" "net/http" "os" "github.com/stripe/stripe-go/v82" "github.com/stripe/stripe-go/v82/checkout/session" "github.com/stripe/stripe-go/v82/webhook" ) const retainer = 5000 // 50zł var siteUrl = "https://piekarnikgosi.pl" var webhookSecret = "" func init() { if os.Getenv("DEV_ENV") == "TRUE" { siteUrl = "http://localhost:8000" } log.Println("the url is: ", siteUrl) stripe.Key = os.Getenv("STRIPE_SECRET_KEY") webhookSecret = os.Getenv("WEBHOOK_SECRET") } func startCheckout(w http.ResponseWriter, r *http.Request, o order) { log.Println("ORDER_PENDING", o) url := r.URL.RequestURI() log.Println(url) s, err := session.New(&stripe.CheckoutSessionParams{ Mode: stripe.String("payment"), ClientReferenceID: stripe.String(o.id), Locale: stripe.String("pl"), LineItems: []*stripe.CheckoutSessionLineItemParams{{ Quantity: stripe.Int64(1), PriceData: &stripe.CheckoutSessionLineItemPriceDataParams{ Currency: stripe.String("pln"), UnitAmount: stripe.Int64(retainer), ProductData: &stripe.CheckoutSessionLineItemPriceDataProductDataParams{ Name: stripe.String("Zaliczka na zamówienie " + o.id), }, }, }}, SuccessURL: stripe.String(siteUrl + "/dziekujemy?order=" + o.id), CancelURL: stripe.String(siteUrl), }) if err != nil { log.Println("ORDER_STRIPE_ERROR", o.id, err) writeErrors(w, r, http.StatusInternalServerError, "Nie udało się przejść do płatności. Spróbuj ponownie lub zadzwoń: 690 214 515.") return } if r.Header.Get("HX-Request") == "true" { w.Header().Set("HX-Redirect", s.URL) w.WriteHeader(http.StatusOK) return } http.Redirect(w, r, s.URL, http.StatusSeeOther) } func WebhookHandler(w http.ResponseWriter, r *http.Request) { body, err := io.ReadAll(http.MaxBytesReader(w, r.Body, 65536)) if err != nil { http.Error(w, "bad body", http.StatusBadRequest) return } event, err := webhook.ConstructEventWithOptions(body, r.Header.Get("Stripe-Signature"), webhookSecret, webhook.ConstructEventOptions{IgnoreAPIVersionMismatch: true}) if err != nil { http.Error(w, "bad signature", http.StatusBadRequest) return } if event.Type != "checkout.session.completed" && event.Type != "checkout.session.async_payment_succeeded" { w.WriteHeader(http.StatusOK) return } var s stripe.CheckoutSession if err := json.Unmarshal(event.Data.Raw, &s); err != nil { http.Error(w, "bad event", http.StatusBadRequest) return } switch { case s.PaymentStatus != stripe.CheckoutSessionPaymentStatusPaid: log.Println("ORDER_NOT_YET_PAID", s.ClientReferenceID, s.ID, s.PaymentStatus) case s.AmountTotal != retainer || s.Currency != stripe.CurrencyPLN: log.Println("ORDER_PAYMENT_MISMATCH", s.ClientReferenceID, s.ID, s.AmountTotal, s.Currency) default: log.Println("ORDER_PAID", s.ClientReferenceID, s.ID) } w.WriteHeader(http.StatusOK) }