Course = require '../courses/Course' Handler = require '../commons/Handler' hipchat = require '../hipchat' Prepaid = require './Prepaid' StripeUtils = require '../lib/stripe_utils' utils = require '../../app/core/utils' # TODO: Should this happen on a save() call instead of a prepaid/-/create post? # TODO: Probably a better way to create a unique 8 charactor string property using db voodoo PrepaidHandler = class PrepaidHandler extends Handler modelClass: Prepaid jsonSchema: require '../../app/schemas/models/prepaid.schema' allowedMethods: ['GET','POST'] baseAmount: 999 logError: (user, msg) -> console.warn "Prepaid Error: [#{user.get('slug')} (#{user._id})] '#{msg}'" hasAccess: (req) -> req.method is 'GET' || req.user?.isAdmin() getByRelationship: (req, res, args...) -> relationship = args[1] return @getPrepaidAPI(req, res, args[2]) if relationship is 'code' return @createPrepaidAPI(req, res) if relationship is 'create' return @purchasePrepaidAPI(req, res) if relationship is 'purchase' super arguments... getPrepaidAPI: (req, res, code) -> return @sendForbiddenError(res) unless req.user? return @sendNotFoundError(res, "You must specify a code") unless code Prepaid.findOne({ code: code.toString() }).exec (err, prepaid) => if err console.warn "Get Prepaid Code Error [#{req.user.get('slug')} (#{req.user.id})]: #{JSON.stringify(err)}" return @sendDatabaseError(res, err) return @sendNotFoundError(res, "Code not found") unless prepaid @sendSuccess(res, prepaid.toObject()) createPrepaidAPI: (req, res) -> return @sendForbiddenError(res) unless @hasAccess(req) return @sendForbiddenError(res) unless req.body.type in ['course', 'subscription','terminal_subscription'] return @sendForbiddenError(res) unless req.body.maxRedeemers > 0 properties = {} type = req.body.type maxRedeemers = req.body.maxRedeemers if req.body.type is 'course' return @sendDatabaseError(res, "TODO: need to add courseIDs") else if req.body.type is 'subscription' properties.couponID = 'free' else if req.body.type is 'terminal_subscription' properties.months = req.body.months @createPrepaid req.user, req.body.type, req.body.maxRedeemers, properties, (err, prepaid) => return @sendDatabaseError(res, err) if err @sendSuccess(res, prepaid.toObject()) createPrepaid: (user, type, maxRedeemers, properties, done) -> Prepaid.generateNewCode (code) => return done('Database error.') unless code options = creator: user._id type: type code: code maxRedeemers: maxRedeemers properties: properties redeemers: [] prepaid = new Prepaid options prepaid.save (err) => return done(err) if err done(err, prepaid) purchasePrepaidAPI: (req, res) -> return @sendUnauthorizedError(res) if not req.user? or req.user?.isAnonymous() return @sendForbiddenError(res) unless req.body.type in ['course', 'terminal_subscription'] if req.body.type is 'terminal_subscription' description = req.body.description maxRedeemers = parseInt(req.body.maxRedeemers) months = parseInt(req.body.months) timestamp = req.body.stripe?.timestamp token = req.body.stripe?.token return @sendBadInputError(res) unless isNaN(maxRedeemers) is false and maxRedeemers > 0 return @sendBadInputError(res) unless isNaN(months) is false and months > 0 return @sendError(res, 403, "Users or Months must be greater than 3") if maxRedeemers < 3 and months < 3 @purchasePrepaidTerminalSubscription req.user, description, maxRedeemers, months, timestamp, token, (err, prepaid) => return @sendDatabaseError(res, err) if err @sendSuccess(res, prepaid.toObject()) else if req.body.type is 'course' courseID = req.body.courseID maxRedeemers = parseInt(req.body.maxRedeemers) timestamp = req.body.stripe?.timestamp token = req.body.stripe?.token return @sendBadInputError(res) unless isNaN(maxRedeemers) is false and maxRedeemers > 0 query = if courseID? then {_id: courseID} else {} Course.find query, (err, courses) => if err @logError(user, "Find courses error: #{JSON.stringify(err)}") return done(err) @purchasePrepaidCourse req.user, courses, maxRedeemers, timestamp, token, (err, prepaid) => # TODO: this badinput detection is fragile, in course instance handler as well return @sendBadInputError(res, err) if err is 'Missing required Stripe token' return @sendDatabaseError(res, err) if err @sendSuccess(res, prepaid.toObject()) else @sendForbiddenError(res) purchasePrepaidCourse: (user, courses, maxRedeemers, timestamp, token, done) -> type = 'course' courseIDs = (c.get('_id') for c in courses) coursePrices = (c.get('pricePerSeat') for c in courses) amount = utils.getCourseBundlePrice(coursePrices, maxRedeemers) if amount > 0 and not (token or user.isAdmin()) @logError(user, "Purchase prepaid courses missing required Stripe token #{amount}") return done('Missing required Stripe token') if amount is 0 or user.isAdmin() @createPrepaid(user, type, maxRedeemers, courseIDs: courseIDs, done) else StripeUtils.getCustomer user, token, (err, customer) => if err @logError(user, "Stripe getCustomer error: #{JSON.stringify(err)}") return done(err) metadata = type: type userID: user.id timestamp: parseInt(timestamp) description: if courses.length is 1 then courses[0].get('name') else 'All Courses' maxRedeemers: maxRedeemers productID: "prepaid #{type}" courseIDs: courseIDs StripeUtils.createCharge user, amount, metadata, (err, charge) => if err @logError(user, "createCharge error: #{JSON.stringify(err)}") return done(err) StripeUtils.createPayment user, charge, (err, payment) => if err @logError(user, "createPayment error: #{JSON.stringify(err)}") return done(err) msg = "Prepaid code purchased: #{type} seats=#{maxRedeemers} courseIDs=#{courseIDs} #{user.get('email')}" hipchat.sendHipChatMessage msg, ['tower'] @createPrepaid(user, type, maxRedeemers, courseIDs: courseIDs, done) purchasePrepaidTerminalSubscription: (user, description, maxRedeemers, months, timestamp, token, done) -> type = 'terminal_subscription' StripeUtils.getCustomer user, token, (err, customer) => if err @logError(user, "getCustomer error: #{JSON.stringify(err)}") return done(err) metadata = type: type userID: user.id timestamp: parseInt(timestamp) description: description maxRedeemers: maxRedeemers months: months productID: "prepaid #{type}" amount = utils.getPrepaidCodeAmount(@baseAmount, maxRedeemers, months) StripeUtils.createCharge user, amount, metadata, (err, charge) => if err @logError(user, "createCharge error: #{JSON.stringify(err)}") return done(err) StripeUtils.createPayment user, charge, (err, payment) => if err @logError(user, "createPayment error: #{JSON.stringify(err)}") return done(err) Prepaid.generateNewCode (code) => return done('Database error.') unless code prepaid = new Prepaid creator: user._id type: type code: code maxRedeemers: maxRedeemers redeemers: [] properties: months: months prepaid.save (err) => return done(err) if err msg = "Prepaid code purchased: #{type} users=#{maxRedeemers} months=#{months} #{user.get('email')}" hipchat.sendHipChatMessage msg, ['tower'] return done(null, prepaid) module.exports = new PrepaidHandler()