1077 lines
37 KiB
Python
1077 lines
37 KiB
Python
import hashlib
|
|
import hmac
|
|
import json
|
|
import logging
|
|
import re
|
|
import time
|
|
from datetime import datetime, timedelta, timezone
|
|
from typing import Any, Dict, List, Optional, Tuple
|
|
from urllib.parse import urlencode
|
|
|
|
from aiogram import Bot, F, Router, types
|
|
from aiohttp import web
|
|
from pydantic import AliasChoices, Field, field_validator
|
|
from pydantic_settings import SettingsConfigDict
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
from sqlalchemy.orm import sessionmaker
|
|
|
|
from bot.middlewares.i18n import JsonI18n
|
|
from bot.services.referral_service import ReferralService
|
|
from bot.services.subscription_service import SubscriptionService
|
|
from bot.utils.request_security import ip_in_allowlist, request_client_ip
|
|
from config.settings import Settings
|
|
from config.tariffs_config import (
|
|
default_currency_key_for_settings,
|
|
default_payment_currency_code_for_settings,
|
|
)
|
|
from db.dal import payment_dal
|
|
|
|
from .base import (
|
|
PaymentProviderSpec,
|
|
ProviderEnvConfig,
|
|
ProviderManifestField,
|
|
ServiceFactoryContext,
|
|
WebAppPaymentContext,
|
|
normalize_payment_currency_code,
|
|
parse_supported_currency_codes,
|
|
provider_env_file,
|
|
provider_runtime_enabled,
|
|
)
|
|
from .shared import (
|
|
HttpClientMixin,
|
|
PaymentSuccessRequest,
|
|
build_payment_record_payload,
|
|
create_webapp_payment_record,
|
|
decimal_amounts_equal,
|
|
describe_payment,
|
|
finalize_successful_payment,
|
|
finalize_webapp_link_payment,
|
|
first_value,
|
|
format_decimal_amount,
|
|
lookup_payment_by_order_or_provider_id,
|
|
make_translator,
|
|
notify_callback_parse_error,
|
|
notify_payment_record_failure,
|
|
notify_service_unavailable,
|
|
notify_user_payment_failed,
|
|
parse_payment_callback,
|
|
payment_failed,
|
|
payment_unavailable,
|
|
payment_units_for_activation,
|
|
quote_hwid_callback_parts,
|
|
render_link_or_fail,
|
|
)
|
|
|
|
router = Router(name="user_subscription_payments_paykilla_router")
|
|
_LOG = "paykilla"
|
|
|
|
PAYKILLA_DEFAULT_PAYMENT_CURRENCIES = "USDTTRC,BTC,ETH"
|
|
PAYKILLA_DEFAULT_SUPPORTED_CURRENCIES = (
|
|
"RUB,USD,EUR,AED,GBP,BTC,ETH,TRX,TON,USDTTRC,USDTETH,USDTBSC,"
|
|
"USDCETH,USDCBSC,DAIETH,DAIBSC,BNBBSC,ETHBSC,LINKETH,LINKBSC,"
|
|
"USDTTON,AAVEETH,MANAETH,SHIBETH"
|
|
)
|
|
_FIAT_CURRENCIES = {"RUB", "USD", "EUR", "AED", "GBP"}
|
|
_SUCCESS_EVENTS = {"INVOICE_PAID", "PAYMENT_COMPLETED", "PAYMENT_OVERPAID"}
|
|
_FAILED_EVENTS = {
|
|
"PAYMENT_FAILED",
|
|
"PAYMENT_UNDERPAID",
|
|
"INVOICE_EXPIRED",
|
|
"INVOICE_CANCELLED",
|
|
"PAYMENT_CANCELLED",
|
|
"COMPLIANCE_FAILED",
|
|
}
|
|
|
|
|
|
class PaykillaConfig(ProviderEnvConfig):
|
|
"""PayKilla V2 env vars."""
|
|
|
|
model_config = SettingsConfigDict(
|
|
env_file=provider_env_file(),
|
|
env_file_encoding="utf-8",
|
|
env_prefix="PAYKILLA_",
|
|
extra="ignore",
|
|
populate_by_name=True,
|
|
)
|
|
|
|
ENABLED: bool = Field(default=False)
|
|
API_KEY: Optional[str] = Field(
|
|
default=None,
|
|
validation_alias=AliasChoices("PAYKILLA_API_KEY", "PAYKILLA_V2_API_KEY"),
|
|
)
|
|
SECRET_KEY: Optional[str] = Field(
|
|
default=None,
|
|
validation_alias=AliasChoices("PAYKILLA_SECRET_KEY", "PAYKILLA_V2_SECRET_KEY"),
|
|
)
|
|
BASE_URL: str = Field(
|
|
default="https://account-api.paykilla.com",
|
|
validation_alias=AliasChoices("PAYKILLA_BASE_URL", "PAYKILLA_V2_BASE_URL"),
|
|
)
|
|
WIDGET_URL: str = Field(default="https://gopay.paykilla.com")
|
|
CURRENCY: str = Field(default="RUB")
|
|
INVOICE_TYPE: Optional[str] = None
|
|
PAYMENT_CURRENCIES: str = Field(default=PAYKILLA_DEFAULT_PAYMENT_CURRENCIES)
|
|
SUPPORTED_CURRENCIES: str = Field(default=PAYKILLA_DEFAULT_SUPPORTED_CURRENCIES)
|
|
RETURN_URL: Optional[str] = None
|
|
SUCCESS_URL: Optional[str] = None
|
|
CANCEL_URL: Optional[str] = None
|
|
LIFETIME_SECONDS: int = Field(default=3600)
|
|
RECV_WINDOW_MS: int = Field(default=5000)
|
|
USER_PAYS_SERVICE_FEE: bool = Field(default=True)
|
|
USER_PAYS_NETWORK_FEE: bool = Field(default=True)
|
|
VERIFY_WEBHOOK_SIGNATURE: bool = Field(default=True)
|
|
WEBHOOK_URL: Optional[str] = None
|
|
TRUSTED_IPS: str = Field(default="")
|
|
|
|
@field_validator("LIFETIME_SECONDS", mode="before")
|
|
@classmethod
|
|
def _clamp_lifetime(cls, v):
|
|
if isinstance(v, str):
|
|
v = v.strip()
|
|
try:
|
|
value = int(v)
|
|
except (TypeError, ValueError):
|
|
return 3600
|
|
return min(2_592_000, max(300, value))
|
|
|
|
@field_validator("RECV_WINDOW_MS", mode="before")
|
|
@classmethod
|
|
def _clamp_recv_window(cls, v):
|
|
if isinstance(v, str):
|
|
v = v.strip()
|
|
try:
|
|
value = int(v)
|
|
except (TypeError, ValueError):
|
|
return 5000
|
|
return min(60_000, max(1000, value))
|
|
|
|
@field_validator(
|
|
"API_KEY",
|
|
"SECRET_KEY",
|
|
"INVOICE_TYPE",
|
|
"RETURN_URL",
|
|
"SUCCESS_URL",
|
|
"CANCEL_URL",
|
|
"WEBHOOK_URL",
|
|
mode="before",
|
|
)
|
|
@classmethod
|
|
def _strip_optional(cls, v):
|
|
if isinstance(v, str) and not v.strip():
|
|
return None
|
|
return v
|
|
|
|
@field_validator("INVOICE_TYPE", mode="before")
|
|
@classmethod
|
|
def _normalize_invoice_type(cls, v):
|
|
if isinstance(v, str):
|
|
value = v.strip().upper()
|
|
return value or None
|
|
return v
|
|
|
|
@property
|
|
def webhook_path(self) -> str:
|
|
return "/webhook/paykilla"
|
|
|
|
def full_webhook_url(self, base: Optional[str]) -> Optional[str]:
|
|
if self.WEBHOOK_URL:
|
|
return self.WEBHOOK_URL.rstrip("/")
|
|
if not base:
|
|
return None
|
|
return f"{base.rstrip('/')}{self.webhook_path}"
|
|
|
|
@property
|
|
def trusted_ips_list(self) -> List[str]:
|
|
return [item.strip() for item in (self.TRUSTED_IPS or "").split(",") if item.strip()]
|
|
|
|
|
|
class PaykillaPresentation(ProviderEnvConfig):
|
|
"""Admin-tunable button text/icon overrides for PayKilla."""
|
|
|
|
model_config = SettingsConfigDict(
|
|
env_file=provider_env_file(),
|
|
env_file_encoding="utf-8",
|
|
env_prefix="PAYMENT_PAYKILLA_",
|
|
extra="ignore",
|
|
)
|
|
|
|
WEBAPP_LABEL_RU: Optional[str] = None
|
|
WEBAPP_LABEL_EN: Optional[str] = None
|
|
WEBAPP_ICON: Optional[str] = None
|
|
TELEGRAM_LABEL_RU: Optional[str] = None
|
|
TELEGRAM_LABEL_EN: Optional[str] = None
|
|
TELEGRAM_EMOJI: Optional[str] = None
|
|
|
|
|
|
def _clean_paykilla_text(value: Any, *, fallback: str, max_length: int = 255) -> str:
|
|
text = str(value or "")
|
|
text = re.sub(r"[-\u2010-\u2015]", " ", text)
|
|
text = re.sub(r"[^\w\s.,]", "", text, flags=re.UNICODE)
|
|
text = re.sub(r"\s+", " ", text).strip()
|
|
if not text:
|
|
text = fallback
|
|
return text[:max_length].strip() or fallback[:max_length]
|
|
|
|
|
|
def _payment_currencies(config: PaykillaConfig) -> List[str]:
|
|
currencies = list(parse_supported_currency_codes(config.PAYMENT_CURRENCIES))
|
|
return currencies or ["USDTTRC"]
|
|
|
|
|
|
def _invoice_type_for(config: PaykillaConfig, currency: str) -> str:
|
|
explicit = (config.INVOICE_TYPE or "").strip().upper()
|
|
if explicit in {"FIAT_BASED", "FIXED_AMOUNT", "OPEN_AMOUNT"}:
|
|
return explicit
|
|
return "FIAT_BASED" if currency in _FIAT_CURRENCIES else "FIXED_AMOUNT"
|
|
|
|
|
|
def _sign_query(timestamp_ms: int, recv_window_ms: int, secret_key: str) -> Tuple[str, str]:
|
|
query = urlencode(
|
|
[
|
|
("timestamp", str(timestamp_ms)),
|
|
("recvWindow", str(recv_window_ms)),
|
|
]
|
|
)
|
|
signature = hmac.new(secret_key.encode("utf-8"), query.encode("utf-8"), hashlib.sha256)
|
|
return query, signature.hexdigest()
|
|
|
|
|
|
def _webhook_signature(
|
|
*,
|
|
timestamp: str,
|
|
method: str,
|
|
url: str,
|
|
raw_body: bytes,
|
|
secret_key: str,
|
|
) -> str:
|
|
message = f"{timestamp}{method.upper()}{url}".encode("utf-8") + raw_body
|
|
return hmac.new(secret_key.encode("utf-8"), message, hashlib.sha256).hexdigest()
|
|
|
|
|
|
def _signature_preview(signature: str) -> str:
|
|
signature = str(signature or "")
|
|
if len(signature) <= 12:
|
|
return signature
|
|
return f"{signature[:6]}...{signature[-6:]}"
|
|
|
|
|
|
def _response_invoice_data(response_data: Dict[str, Any]) -> Dict[str, Any]:
|
|
data = response_data.get("data") if isinstance(response_data, dict) else None
|
|
if isinstance(data, dict) and data.get("id"):
|
|
return data
|
|
return response_data if isinstance(response_data, dict) else {}
|
|
|
|
|
|
class PaykillaService(HttpClientMixin):
|
|
def __init__(
|
|
self,
|
|
*,
|
|
bot: Bot,
|
|
settings: Settings,
|
|
config: PaykillaConfig,
|
|
i18n: JsonI18n,
|
|
async_session_factory: sessionmaker,
|
|
subscription_service: SubscriptionService,
|
|
referral_service: ReferralService,
|
|
default_return_url: str,
|
|
):
|
|
self.bot = bot
|
|
self.settings = settings
|
|
self.config = config
|
|
self.i18n = i18n
|
|
self.async_session_factory = async_session_factory
|
|
self.subscription_service = subscription_service
|
|
self.referral_service = referral_service
|
|
self._default_return_url = default_return_url
|
|
|
|
self._init_http_client(total_timeout=20)
|
|
if not self.configured:
|
|
logging.warning(
|
|
"PaykillaService initialized but not fully configured. Payments disabled."
|
|
)
|
|
|
|
@property
|
|
def configured(self) -> bool:
|
|
return bool(provider_runtime_enabled(self.config) and self.api_key and self.secret_key)
|
|
|
|
@property
|
|
def base_url(self) -> str:
|
|
return (self.config.BASE_URL or "https://account-api.paykilla.com").rstrip("/")
|
|
|
|
@property
|
|
def widget_url(self) -> str:
|
|
return (self.config.WIDGET_URL or "https://gopay.paykilla.com").rstrip("/")
|
|
|
|
@property
|
|
def api_key(self) -> str:
|
|
return (self.config.API_KEY or "").strip()
|
|
|
|
@property
|
|
def secret_key(self) -> str:
|
|
return (self.config.SECRET_KEY or "").strip()
|
|
|
|
@property
|
|
def currency(self) -> str:
|
|
return (self.config.CURRENCY or "RUB").upper()
|
|
|
|
@property
|
|
def return_url(self) -> str:
|
|
return self.config.RETURN_URL or f"https://t.me/{self._default_return_url}"
|
|
|
|
@property
|
|
def success_url(self) -> str:
|
|
return self.config.SUCCESS_URL or self.return_url
|
|
|
|
@property
|
|
def cancel_url(self) -> Optional[str]:
|
|
return self.config.CANCEL_URL
|
|
|
|
@property
|
|
def verify_webhook_signature(self) -> bool:
|
|
return self.config.VERIFY_WEBHOOK_SIGNATURE
|
|
|
|
def _signed_invoice_url(self) -> str:
|
|
timestamp_ms = int(time.time() * 1000)
|
|
recv_window_ms = int(self.config.RECV_WINDOW_MS)
|
|
query, signature = _sign_query(timestamp_ms, recv_window_ms, self.secret_key)
|
|
return f"{self.base_url}/api/v2/invoice?{query}&signature={signature}"
|
|
|
|
def _invoice_body(
|
|
self,
|
|
*,
|
|
payment_db_id: int,
|
|
amount: float,
|
|
currency: Optional[str],
|
|
description: str,
|
|
) -> Dict[str, Any]:
|
|
currency_code = normalize_payment_currency_code(currency or self.currency)
|
|
purpose = _clean_paykilla_text(
|
|
description,
|
|
fallback=f"Payment {payment_db_id}",
|
|
max_length=255,
|
|
)
|
|
body: Dict[str, Any] = {
|
|
"type": _invoice_type_for(self.config, currency_code),
|
|
"purpose": purpose,
|
|
"currency": currency_code,
|
|
"totalPrice": str(format_decimal_amount(amount)),
|
|
"paymentCurrencies": _payment_currencies(self.config),
|
|
"clientOrderId": str(payment_db_id),
|
|
"userPaysServiceFee": bool(self.config.USER_PAYS_SERVICE_FEE),
|
|
"userPaysNetworkFee": bool(self.config.USER_PAYS_NETWORK_FEE),
|
|
}
|
|
if description:
|
|
body["description"] = _clean_paykilla_text(
|
|
description,
|
|
fallback=purpose,
|
|
max_length=255,
|
|
)
|
|
if self.config.LIFETIME_SECONDS:
|
|
expires_at = datetime.now(timezone.utc) + timedelta(
|
|
seconds=int(self.config.LIFETIME_SECONDS)
|
|
)
|
|
body["expiredAt"] = expires_at.isoformat().replace("+00:00", "Z")
|
|
|
|
urls: List[Dict[str, Any]] = []
|
|
if self.success_url:
|
|
urls.append({"type": "SUCCESS", "url": self.success_url, "autoRedirect": True})
|
|
if self.return_url:
|
|
urls.append({"type": "RETURN", "url": self.return_url})
|
|
if self.cancel_url:
|
|
urls.append({"type": "CANCEL", "url": self.cancel_url})
|
|
if urls:
|
|
body["urls"] = urls
|
|
return body
|
|
|
|
async def create_payment_link(
|
|
self,
|
|
*,
|
|
payment_db_id: int,
|
|
amount: float,
|
|
currency: Optional[str],
|
|
description: str,
|
|
url_callback: Optional[str] = None,
|
|
) -> Tuple[bool, Dict[str, Any]]:
|
|
if not self.configured:
|
|
logging.error("PaykillaService is not configured. Cannot create payment link.")
|
|
return False, {"message": "service_not_configured"}
|
|
|
|
currency_code = normalize_payment_currency_code(currency or self.currency)
|
|
supported = parse_supported_currency_codes(self.config.SUPPORTED_CURRENCIES)
|
|
if supported and currency_code not in supported:
|
|
return False, {
|
|
"message": "unsupported_currency",
|
|
"currency": currency_code,
|
|
"supported_currencies": list(supported),
|
|
}
|
|
|
|
body = self._invoice_body(
|
|
payment_db_id=payment_db_id,
|
|
amount=amount,
|
|
currency=currency_code,
|
|
description=description,
|
|
)
|
|
headers = {
|
|
"X-API-KEY": self.api_key,
|
|
"Content-Type": "application/json",
|
|
}
|
|
session = await self._get_session()
|
|
try:
|
|
async with session.post(
|
|
self._signed_invoice_url(),
|
|
json=body,
|
|
headers=headers,
|
|
) as response:
|
|
response_text = await response.text()
|
|
try:
|
|
response_data = json.loads(response_text) if response_text else {}
|
|
except json.JSONDecodeError:
|
|
logging.error("Paykilla create_payment_link: invalid JSON: %s", response_text)
|
|
return False, {
|
|
"status": response.status,
|
|
"message": "invalid_json",
|
|
"raw": response_text,
|
|
}
|
|
invoice = _response_invoice_data(response_data)
|
|
invoice_id = first_value(invoice, "id")
|
|
if response.status not in {200, 201} or not invoice_id:
|
|
logging.error(
|
|
"Paykilla create_payment_link: API error (status=%s, body=%s)",
|
|
response.status,
|
|
response_data,
|
|
)
|
|
return False, {"status": response.status, "message": response_data}
|
|
invoice["payment_url"] = f"{self.widget_url}/{invoice_id}"
|
|
return True, invoice
|
|
except Exception as exc:
|
|
logging.exception("Paykilla create_payment_link: request failed.")
|
|
return False, {"message": str(exc)}
|
|
|
|
def _webhook_url_for_request(self, request: web.Request) -> Optional[str]:
|
|
configured = self.config.full_webhook_url(getattr(self.settings, "WEBHOOK_BASE_URL", None))
|
|
if configured:
|
|
return configured
|
|
try:
|
|
return f"{request.scheme}://{request.host}{request.path_qs}"
|
|
except Exception:
|
|
return None
|
|
|
|
def _verify_webhook_signature(self, request: web.Request, raw_body: bytes) -> bool:
|
|
timestamp = str(request.headers.get("X-API-TIMESTAMP") or "").strip()
|
|
signature = str(request.headers.get("X-API-SIGN") or "").strip().lower()
|
|
recv_window_raw = str(request.headers.get("X-API-RECV-WINDOW") or "5000").strip()
|
|
api_key = str(request.headers.get("X-API-KEY") or "").strip()
|
|
if not timestamp or not signature:
|
|
return False
|
|
if api_key and not hmac.compare_digest(api_key, self.api_key):
|
|
logging.warning("Paykilla webhook: X-API-KEY does not match configured API key.")
|
|
return False
|
|
try:
|
|
timestamp_ms = int(timestamp)
|
|
recv_window_ms = int(recv_window_raw)
|
|
except ValueError:
|
|
return False
|
|
now_ms = int(time.time() * 1000)
|
|
if abs(now_ms - timestamp_ms) > max(recv_window_ms, 1000):
|
|
logging.warning(
|
|
"Paykilla webhook: timestamp outside recv window "
|
|
"(timestamp=%s now=%s recvWindow=%s).",
|
|
timestamp_ms,
|
|
now_ms,
|
|
recv_window_ms,
|
|
)
|
|
return False
|
|
webhook_url = self._webhook_url_for_request(request)
|
|
if not webhook_url:
|
|
logging.warning("Paykilla webhook: cannot resolve webhook URL for signature.")
|
|
return False
|
|
expected = _webhook_signature(
|
|
timestamp=timestamp,
|
|
method=request.method or "POST",
|
|
url=webhook_url,
|
|
raw_body=raw_body,
|
|
secret_key=self.secret_key,
|
|
)
|
|
if hmac.compare_digest(expected, signature):
|
|
return True
|
|
logging.warning(
|
|
"Paykilla webhook: invalid signature (received=%s expected=%s url=%s).",
|
|
_signature_preview(signature),
|
|
_signature_preview(expected),
|
|
webhook_url,
|
|
)
|
|
return False
|
|
|
|
async def webhook_route(self, request: web.Request) -> web.Response:
|
|
if not self.configured:
|
|
return web.Response(status=503, text="paykilla_disabled")
|
|
|
|
client_ip = request_client_ip(request, trusted_proxies=self.settings.trusted_proxies)
|
|
trusted = self.config.trusted_ips_list
|
|
if trusted and not ip_in_allowlist(client_ip, trusted):
|
|
logging.warning(
|
|
"Paykilla webhook denied from unauthorized IP source "
|
|
"(client_ip=%s remote=%s x_forwarded_for=%s trusted_ips=%s trusted_proxies=%s).",
|
|
client_ip,
|
|
request.remote,
|
|
request.headers.get("X-Forwarded-For"),
|
|
trusted,
|
|
self.settings.trusted_proxies,
|
|
)
|
|
return web.Response(status=403, text="forbidden")
|
|
|
|
raw_body = await request.read()
|
|
if self.verify_webhook_signature and not self._verify_webhook_signature(
|
|
request,
|
|
raw_body,
|
|
):
|
|
return web.Response(status=403, text="invalid_signature")
|
|
|
|
try:
|
|
payload = json.loads(raw_body.decode("utf-8"))
|
|
except Exception:
|
|
logging.exception("Paykilla webhook: failed to parse JSON.")
|
|
return web.Response(status=400, text="bad_request")
|
|
|
|
if not isinstance(payload, dict):
|
|
return web.Response(status=400, text="bad_request")
|
|
|
|
event_type = str(payload.get("eventType") or "").strip().upper()
|
|
data = payload.get("data")
|
|
if not event_type or not isinstance(data, dict):
|
|
logging.error("Paykilla webhook: missing event envelope fields: %s", payload)
|
|
return web.Response(status=400, text="missing_fields")
|
|
|
|
if event_type not in _SUCCESS_EVENTS and event_type not in _FAILED_EVENTS:
|
|
logging.info("Paykilla webhook: intermediate event '%s' ignored.", event_type)
|
|
return web.Response(text="status_ignored")
|
|
|
|
data_type = str(data.get("type") or "").strip().upper()
|
|
if data_type and data_type != "INVOICE":
|
|
logging.info(
|
|
"Paykilla webhook: non-invoice event '%s' ignored (type=%s).",
|
|
event_type,
|
|
data_type,
|
|
)
|
|
return web.Response(text="status_ignored")
|
|
|
|
invoice_id = str(data.get("id") or "").strip()
|
|
client_order_id = data.get("clientOrderId")
|
|
amount_raw = data.get("amount") or data.get("expectedAmount")
|
|
currency = data.get("currency") or self.currency
|
|
|
|
if not (invoice_id or client_order_id):
|
|
logging.error("Paykilla webhook: missing invoice ids: %s", payload)
|
|
return web.Response(status=400, text="missing_fields")
|
|
|
|
async with self.async_session_factory() as session:
|
|
payment = await lookup_payment_by_order_or_provider_id(
|
|
session,
|
|
order_id_raw=client_order_id,
|
|
provider_payment_id=invoice_id or None,
|
|
)
|
|
if not payment:
|
|
logging.error(
|
|
"Paykilla webhook: payment not found (clientOrderId=%s, invoice_id=%s)",
|
|
client_order_id,
|
|
invoice_id,
|
|
)
|
|
return web.Response(status=404, text="payment_not_found")
|
|
|
|
if payment.status == "succeeded" and event_type in _SUCCESS_EVENTS:
|
|
return web.Response(text="ok")
|
|
|
|
resolved_id = invoice_id or str(payment.payment_id)
|
|
|
|
if event_type in _SUCCESS_EVENTS:
|
|
if amount_raw is not None:
|
|
try:
|
|
if not decimal_amounts_equal(amount_raw, payment.amount):
|
|
logging.warning(
|
|
"Paykilla webhook: amount mismatch for payment %s "
|
|
"(expected %s, got %s)",
|
|
payment.payment_id,
|
|
format_decimal_amount(payment.amount),
|
|
format_decimal_amount(amount_raw),
|
|
)
|
|
except Exception as exc:
|
|
logging.warning(
|
|
"Paykilla webhook: failed to compare amounts for %s: %s",
|
|
payment.payment_id,
|
|
exc,
|
|
)
|
|
|
|
try:
|
|
await payment_dal.update_provider_payment_and_status(
|
|
session,
|
|
payment.payment_id,
|
|
resolved_id,
|
|
"succeeded",
|
|
)
|
|
await session.commit()
|
|
except Exception:
|
|
await session.rollback()
|
|
logging.exception(
|
|
"Paykilla webhook: failed to mark payment %s as succeeded.",
|
|
resolved_id,
|
|
)
|
|
return web.Response(status=500, text="processing_error")
|
|
|
|
sale_mode = payment.sale_mode or (
|
|
"traffic" if self.settings.traffic_sale_mode else "subscription"
|
|
)
|
|
payment_units = payment_units_for_activation(payment, sale_mode)
|
|
|
|
outcome = await finalize_successful_payment(
|
|
PaymentSuccessRequest(
|
|
bot=self.bot,
|
|
settings=self.settings,
|
|
i18n=self.i18n,
|
|
session=session,
|
|
subscription_service=self.subscription_service,
|
|
referral_service=self.referral_service,
|
|
payment=payment,
|
|
user_id=payment.user_id,
|
|
amount=float(payment.amount),
|
|
currency=str(currency),
|
|
sale_mode=sale_mode,
|
|
months=payment_units,
|
|
traffic_amount=float(payment_units),
|
|
provider_subscription="paykilla",
|
|
provider_notification="paykilla",
|
|
db_user=payment.user,
|
|
log_prefix="Paykilla webhook",
|
|
)
|
|
)
|
|
if outcome is None:
|
|
return web.Response(status=500, text="processing_error")
|
|
return web.Response(text="ok")
|
|
|
|
if event_type in _FAILED_EVENTS:
|
|
try:
|
|
await payment_dal.update_provider_payment_and_status(
|
|
session,
|
|
payment.payment_id,
|
|
resolved_id,
|
|
"failed",
|
|
)
|
|
await session.commit()
|
|
except Exception:
|
|
await session.rollback()
|
|
logging.exception(
|
|
"Paykilla webhook: failed to mark payment %s as failed.",
|
|
resolved_id,
|
|
)
|
|
return web.Response(status=500, text="processing_error")
|
|
await notify_user_payment_failed(
|
|
bot=self.bot,
|
|
settings=self.settings,
|
|
i18n=self.i18n,
|
|
session=session,
|
|
payment=payment,
|
|
)
|
|
return web.Response(text="ok")
|
|
|
|
|
|
@router.callback_query(F.data.startswith("pay_paykilla:"))
|
|
async def pay_paykilla_callback_handler(
|
|
callback: types.CallbackQuery,
|
|
settings: Settings,
|
|
i18n_data: dict,
|
|
paykilla_service: PaykillaService,
|
|
session: AsyncSession,
|
|
):
|
|
current_lang = i18n_data.get("current_language", settings.DEFAULT_LANGUAGE)
|
|
i18n: Optional[JsonI18n] = i18n_data.get("i18n_instance")
|
|
translator = make_translator(i18n, current_lang)
|
|
|
|
if not i18n or not callback.message:
|
|
await notify_callback_parse_error(callback, translator)
|
|
return
|
|
|
|
if not SPEC.is_available_to_user(
|
|
settings,
|
|
user_id=callback.from_user.id,
|
|
require_configured=False,
|
|
):
|
|
await notify_service_unavailable(callback, translator)
|
|
return
|
|
|
|
if not paykilla_service or not paykilla_service.configured:
|
|
logging.error("Paykilla service is not configured or unavailable.")
|
|
await notify_service_unavailable(callback, translator)
|
|
return
|
|
|
|
parts = parse_payment_callback(callback.data or "")
|
|
if not parts:
|
|
logging.error("Invalid pay_paykilla data in callback: %s", callback.data)
|
|
await notify_callback_parse_error(callback, translator)
|
|
return
|
|
parts, hwid_quote = await quote_hwid_callback_parts(
|
|
session=session,
|
|
user_id=callback.from_user.id,
|
|
parts=parts,
|
|
subscription_service=paykilla_service.subscription_service,
|
|
currency=default_currency_key_for_settings(settings),
|
|
)
|
|
if not parts:
|
|
await notify_callback_parse_error(callback, translator)
|
|
return
|
|
|
|
currency_code = default_payment_currency_code_for_settings(settings)
|
|
payment_description = describe_payment(translator, parts)
|
|
record_payload = build_payment_record_payload(
|
|
user_id=callback.from_user.id,
|
|
amount=parts.price,
|
|
currency=currency_code,
|
|
status="pending_paykilla",
|
|
description=payment_description,
|
|
months=parts.months,
|
|
provider="paykilla",
|
|
sale_mode=parts.sale_mode,
|
|
hwid_quote=hwid_quote,
|
|
)
|
|
|
|
try:
|
|
payment_record = await payment_dal.create_payment_record(session, record_payload)
|
|
await session.commit()
|
|
except Exception:
|
|
await session.rollback()
|
|
logging.exception(
|
|
"Paykilla: failed to create payment record for user %s.", callback.from_user.id
|
|
)
|
|
await notify_payment_record_failure(callback, translator)
|
|
return
|
|
|
|
success, response_data = await paykilla_service.create_payment_link(
|
|
payment_db_id=payment_record.payment_id,
|
|
amount=parts.price,
|
|
currency=currency_code,
|
|
description=payment_description,
|
|
url_callback=paykilla_service.config.full_webhook_url(settings.WEBHOOK_BASE_URL),
|
|
)
|
|
await render_link_or_fail(
|
|
callback,
|
|
translator=translator,
|
|
current_lang=current_lang,
|
|
i18n=i18n,
|
|
parts=parts,
|
|
session=session,
|
|
payment=payment_record,
|
|
api_success=success,
|
|
payment_url=first_value(response_data, "payment_url"),
|
|
provider_payment_id=first_value(response_data, "id"),
|
|
log_prefix=_LOG,
|
|
)
|
|
|
|
|
|
async def create_webapp_payment(ctx: WebAppPaymentContext) -> web.Response:
|
|
settings: Settings = ctx.request.app["settings"]
|
|
service: PaykillaService = ctx.request.app["paykilla_service"]
|
|
if not service or not service.configured:
|
|
return payment_unavailable()
|
|
|
|
currency = ctx.currency or default_payment_currency_code_for_settings(settings)
|
|
try:
|
|
payment = await create_webapp_payment_record(
|
|
ctx,
|
|
amount=ctx.price,
|
|
currency=currency,
|
|
status="pending_paykilla",
|
|
provider="paykilla",
|
|
)
|
|
success, response_data = await service.create_payment_link(
|
|
payment_db_id=payment.payment_id,
|
|
amount=ctx.price,
|
|
currency=currency,
|
|
description=ctx.description,
|
|
url_callback=service.config.full_webhook_url(settings.WEBHOOK_BASE_URL),
|
|
)
|
|
except Exception:
|
|
await ctx.session.rollback()
|
|
logging.exception("Paykilla WebApp payment failed")
|
|
return payment_failed()
|
|
|
|
return await finalize_webapp_link_payment(
|
|
session=ctx.session,
|
|
payment=payment,
|
|
api_success=success,
|
|
payment_url=first_value(response_data, "payment_url") if success else None,
|
|
provider_payment_id=first_value(response_data, "id"),
|
|
log_prefix="Paykilla",
|
|
)
|
|
|
|
|
|
async def paykilla_webhook_route(request: web.Request) -> web.Response:
|
|
service: PaykillaService = request.app["paykilla_service"]
|
|
return await service.webhook_route(request)
|
|
|
|
|
|
def create_service(ctx: ServiceFactoryContext) -> PaykillaService:
|
|
bundle = ctx.config_for("paykilla_service")
|
|
config = (
|
|
bundle.config if bundle and isinstance(bundle.config, PaykillaConfig) else PaykillaConfig()
|
|
)
|
|
return PaykillaService(
|
|
bot=ctx.bot,
|
|
settings=ctx.settings,
|
|
config=config,
|
|
i18n=ctx.i18n,
|
|
async_session_factory=ctx.async_session_factory,
|
|
subscription_service=ctx.subscription_service,
|
|
referral_service=ctx.referral_service,
|
|
default_return_url=ctx.bot_username_for_default_return,
|
|
)
|
|
|
|
|
|
_PRESENTATION_MANIFEST = tuple(
|
|
ProviderManifestField(
|
|
key=key,
|
|
type=type_,
|
|
label=label,
|
|
description=description,
|
|
placeholder=placeholder,
|
|
subsection="PayKilla",
|
|
target="presentation",
|
|
attr=attr,
|
|
)
|
|
for key, type_, label, description, placeholder, attr in (
|
|
(
|
|
"PAYMENT_PAYKILLA_WEBAPP_LABEL_RU",
|
|
"string",
|
|
"WebApp button text (RU)",
|
|
"Custom Russian text shown in the Web App payment method button.",
|
|
"",
|
|
"WEBAPP_LABEL_RU",
|
|
),
|
|
(
|
|
"PAYMENT_PAYKILLA_WEBAPP_LABEL_EN",
|
|
"string",
|
|
"WebApp button text (EN)",
|
|
"Custom English text shown in the Web App payment method button.",
|
|
"",
|
|
"WEBAPP_LABEL_EN",
|
|
),
|
|
(
|
|
"PAYMENT_PAYKILLA_WEBAPP_ICON",
|
|
"icon",
|
|
"WebApp button icon",
|
|
"Lucide icon name rendered inside the Web App payment method button.",
|
|
"Bitcoin",
|
|
"WEBAPP_ICON",
|
|
),
|
|
(
|
|
"PAYMENT_PAYKILLA_TELEGRAM_LABEL_RU",
|
|
"string",
|
|
"Telegram button text (RU)",
|
|
"Custom Russian text shown in Telegram bot payment buttons.",
|
|
"",
|
|
"TELEGRAM_LABEL_RU",
|
|
),
|
|
(
|
|
"PAYMENT_PAYKILLA_TELEGRAM_LABEL_EN",
|
|
"string",
|
|
"Telegram button text (EN)",
|
|
"Custom English text shown in Telegram bot payment buttons.",
|
|
"",
|
|
"TELEGRAM_LABEL_EN",
|
|
),
|
|
(
|
|
"PAYMENT_PAYKILLA_TELEGRAM_EMOJI",
|
|
"string",
|
|
"Telegram button emoji",
|
|
"Emoji prepended to the Telegram bot payment button when customized.",
|
|
"",
|
|
"TELEGRAM_EMOJI",
|
|
),
|
|
)
|
|
)
|
|
|
|
|
|
_CONFIG_MANIFEST = (
|
|
ProviderManifestField(
|
|
"PAYKILLA_ENABLED", "bool", "Enabled", subsection="PayKilla", attr="ENABLED"
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_API_KEY",
|
|
"string",
|
|
"API key",
|
|
description="PayKilla public HMAC key with INVOICE permission.",
|
|
subsection="PayKilla",
|
|
secret=True,
|
|
attr="API_KEY",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_SECRET_KEY",
|
|
"string",
|
|
"Secret key",
|
|
description="PayKilla HMAC secret key. Never expose it client-side.",
|
|
subsection="PayKilla",
|
|
secret=True,
|
|
attr="SECRET_KEY",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_BASE_URL",
|
|
"url",
|
|
"Base URL",
|
|
placeholder="https://account-api.paykilla.com",
|
|
subsection="PayKilla",
|
|
attr="BASE_URL",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_WIDGET_URL",
|
|
"url",
|
|
"Widget URL",
|
|
placeholder="https://gopay.paykilla.com",
|
|
subsection="PayKilla",
|
|
attr="WIDGET_URL",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_CURRENCY",
|
|
"string",
|
|
"Invoice currency",
|
|
description=(
|
|
"Fiat or crypto invoice currency. FIAT_BASED is selected for RUB/USD/EUR/AED/GBP."
|
|
),
|
|
placeholder="RUB",
|
|
subsection="PayKilla",
|
|
attr="CURRENCY",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_SUPPORTED_CURRENCIES",
|
|
"string",
|
|
"Supported invoice currencies",
|
|
description="Comma-separated invoice currencies allowed for PayKilla in this shop.",
|
|
placeholder=PAYKILLA_DEFAULT_SUPPORTED_CURRENCIES,
|
|
subsection="PayKilla",
|
|
attr="SUPPORTED_CURRENCIES",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_PAYMENT_CURRENCIES",
|
|
"string",
|
|
"Accepted crypto tickers",
|
|
description=(
|
|
"Comma-separated PayKilla tickers sent as paymentCurrencies, e.g. USDTTRC,BTC,ETH."
|
|
),
|
|
placeholder=PAYKILLA_DEFAULT_PAYMENT_CURRENCIES,
|
|
subsection="PayKilla",
|
|
attr="PAYMENT_CURRENCIES",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_INVOICE_TYPE",
|
|
"string",
|
|
"Invoice type",
|
|
description="Optional override: FIAT_BASED, FIXED_AMOUNT, or OPEN_AMOUNT.",
|
|
subsection="PayKilla",
|
|
attr="INVOICE_TYPE",
|
|
choices=(
|
|
("", "Auto"),
|
|
("FIAT_BASED", "FIAT_BASED"),
|
|
("FIXED_AMOUNT", "FIXED_AMOUNT"),
|
|
("OPEN_AMOUNT", "OPEN_AMOUNT"),
|
|
),
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_RETURN_URL", "url", "Return URL", subsection="PayKilla", attr="RETURN_URL"
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_SUCCESS_URL", "url", "Success URL", subsection="PayKilla", attr="SUCCESS_URL"
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_CANCEL_URL", "url", "Cancel URL", subsection="PayKilla", attr="CANCEL_URL"
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_LIFETIME_SECONDS",
|
|
"int",
|
|
"Invoice lifetime (seconds)",
|
|
description="Used to send expiredAt to PayKilla.",
|
|
subsection="PayKilla",
|
|
min=300,
|
|
max=2_592_000,
|
|
attr="LIFETIME_SECONDS",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_RECV_WINDOW_MS",
|
|
"int",
|
|
"Request recvWindow (ms)",
|
|
description="Validity window for signed PayKilla API requests.",
|
|
subsection="PayKilla",
|
|
min=1000,
|
|
max=60_000,
|
|
attr="RECV_WINDOW_MS",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_USER_PAYS_SERVICE_FEE",
|
|
"bool",
|
|
"User pays service fee",
|
|
subsection="PayKilla",
|
|
attr="USER_PAYS_SERVICE_FEE",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_USER_PAYS_NETWORK_FEE",
|
|
"bool",
|
|
"User pays network fee",
|
|
subsection="PayKilla",
|
|
attr="USER_PAYS_NETWORK_FEE",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_VERIFY_WEBHOOK_SIGNATURE",
|
|
"bool",
|
|
"Verify webhook signature",
|
|
subsection="PayKilla",
|
|
attr="VERIFY_WEBHOOK_SIGNATURE",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_WEBHOOK_URL",
|
|
"url",
|
|
"Exact webhook URL",
|
|
description=(
|
|
"Optional override for signature verification. Leave empty to use "
|
|
"WEBHOOK_BASE_URL + /webhook/paykilla."
|
|
),
|
|
subsection="PayKilla",
|
|
attr="WEBHOOK_URL",
|
|
),
|
|
ProviderManifestField(
|
|
"PAYKILLA_TRUSTED_IPS",
|
|
"string",
|
|
"Trusted IPs",
|
|
description="Optional comma-separated IP addresses accepted for PayKilla webhooks.",
|
|
subsection="PayKilla",
|
|
attr="TRUSTED_IPS",
|
|
),
|
|
)
|
|
|
|
|
|
SPEC = PaymentProviderSpec(
|
|
id="paykilla",
|
|
provider_key="paykilla",
|
|
label="PayKilla",
|
|
webapp_label="PayKilla",
|
|
webapp_labels={"ru": "PayKilla", "en": "PayKilla"},
|
|
webapp_icon="Bitcoin",
|
|
telegram_labels={"ru": "PayKilla", "en": "PayKilla"},
|
|
telegram_emoji="",
|
|
pending_status="pending_paykilla",
|
|
enabled=lambda config: bool(getattr(config, "ENABLED", False)),
|
|
service_key="paykilla_service",
|
|
callback_prefix="pay_paykilla",
|
|
router=router,
|
|
create_service=create_service,
|
|
webhook_path=lambda source: "/webhook/paykilla",
|
|
webhook_route=paykilla_webhook_route,
|
|
create_webapp_payment=create_webapp_payment,
|
|
emoji="",
|
|
config_class=PaykillaConfig,
|
|
presentation_class=PaykillaPresentation,
|
|
manifest_fields=_CONFIG_MANIFEST + _PRESENTATION_MANIFEST,
|
|
supported_currencies_resolver=lambda config: getattr(
|
|
config, "SUPPORTED_CURRENCIES", PAYKILLA_DEFAULT_SUPPORTED_CURRENCIES
|
|
),
|
|
currency_support_note=(
|
|
"PayKilla invoice currency and paymentCurrencies availability can depend on "
|
|
"merchant account settings."
|
|
),
|
|
currency_support_url="https://paykilla.gitbook.io/paykilla-docs/api-integration/supported-currencies",
|
|
)
|