src/UI/Merchant/Controller/PaymentController.php line 27

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\UI\Merchant\Controller;
  7. use App\UI\Merchant\Datatable\PaymentDatatable;
  8. use App\UI\Shared\Controller\AbstractController;
  9. use Sg\DatatablesBundle\Response\DatatableResponse;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\Response;
  12. use Symfony\Component\Routing\Annotation\Route;
  14. use Symfony\Component\HttpFoundation\StreamedResponse;
  15. use Doctrine\Persistence\ManagerRegistry;
  16. use App\Domain\Payment\Model\Payment;
  17. use Symfony\Component\Security\Core\Security;
  19. use Symfony\Component\HttpFoundation\JsonResponse;
  21. use Doctrine\DBAL\Connection;
  22. use Symfony\Component\HttpFoundation\ResponseHeaderBag;
  24. class PaymentController extends AbstractController
  25. {
  26.     #[Route(path: '/', name: 'merchant_payments')]
  27.     public function index(
  28.         Request $request,
  29.         PaymentDatatable $datatable,
  30.         DatatableResponse $datatableResponse,
  31.         \Doctrine\Persistence\ManagerRegistry $doctrine,
  32.         Security $security
  34.     ): Response {
  35.         $isAjax = $request->isXmlHttpRequest();
  37.         $datatable->buildDatatable();
  39.         if ($isAjax) {
  40.             try {
  41.                 $data = $request->query->all();
  42.                 $tzName = $request->query->get('tz') ?? \date_default_timezone_get() ?? 'UTC';
  44.                 // --- Validate/normalize user tz
  45.                 try {
  46.                     $userTz = new \DateTimeZone($tzName);
  47.                 } catch (\Throwable) {
  48.                     $tzName = 'UTC';
  49.                     $userTz = new \DateTimeZone('UTC');
  50.                 }
  53.                 // --- Detect DB session timezone  ---
  54.                 $conn = $doctrine->getConnection();
  55.                 $dbTzName = 'UTC';
  56.                 try {
  57.                     $platform = $conn->getDatabasePlatform()->getName();
  59.                     if ($platform === 'mysql') {
  60.                         $sessionTz = $conn->fetchOne('SELECT @@time_zone');
  61.                         if ($sessionTz === 'SYSTEM') {
  62.                             $systemTz = $conn->fetchOne('SELECT @@system_time_zone');
  63.                             $dbTzName = $systemTz ?: 'UTC';
  64.                         } else {
  65.                             $dbTzName = $sessionTz ?: 'UTC';
  66.                         }
  67.                     } elseif ($platform === 'postgresql') {
  68.                         $dbTzName = $conn->fetchOne('SHOW TIME ZONE') ?: 'UTC';
  69.                     }
  70.                 } catch (\Throwable) {
  71.                     // keep default UTC
  72.                 }
  74.                 try {
  75.                     $dbTz = new \DateTimeZone($dbTzName);
  76.                 } catch (\Throwable) {
  77.                     $dbTzName = 'UTC';
  78.                     $dbTz = new \DateTimeZone('UTC');
  79.                 }
  81.                 // --- Strip createdAt LIKE filter from DataTables payload
  82.                 $createdAtRange = null;
  83.                 $paymentTypeFilter = null;
  84.                 if (isset($data['columns'])) {
  85.                     foreach ($data['columns'] as &$column) {
  86.                         if (($column['data'] ?? null) === 'createdAt' && !empty($column['search']['value'])) {
  87.                             $createdAtRange = explode('|', $column['search']['value']);
  88.                             $column['search']['value'] = '';
  89.                             $column['searchable'] = 'false';
  90.                         }
  91.                         if (($column['data'] ?? null) === 'paymentType' && !empty($column['search']['value'])) {
  92.                             $paymentTypeFilter = $column['search']['value'];
  93.                             if ($paymentTypeFilter === 'sepa') {
  94.                                 $column['search']['value'] = '';
  95.                                 $column['searchable'] = 'false';
  96.                             }
  97.                         }
  98.                     }
  99.                     unset($column);
  100.                 }
  102.                 // Overwrite cleaned query
  103.                 $request->query->replace($data);
  105.                 // --- Build query
  106.                 $datatableResponse->setDatatable($datatable);
  107.                 $qb = $datatableResponse->getDatatableQueryBuilder()->getQb();
  108.                 $alias = $qb->getRootAliases()[0];
  110.                 if ($paymentTypeFilter === 'sepa') {
  111.                     $qb->andWhere("($alias.paymentType = 'sepa' OR $alias.paymentType IS NULL OR $alias.paymentType = '')");
  112.                 }
  114.                 // Always show latest records at the top
  115.                 $qb->addOrderBy("$alias.createdAt", "DESC");
  117.                 // Merchant constraint (site already joined by your datatable)
  118.                 $qb->andWhere('site.merchant = :merchant')
  119.                     ->setParameter('merchant', $security->getUser());
  121.                 // Timezone-aware createdAt filter
  122.                 if ($createdAtRange && count($createdAtRange) === 2) {
  123.                     $startStr = \trim($createdAtRange[0]) . ' 00:00:00';
  124.                     $endStr = \trim($createdAtRange[1]) . ' 23:59:59';
  126.                     // Interpret as *user-local calendar days*
  127.                     $startLocal = \DateTimeImmutable::createFromFormat('Y-m-d H:i:s', $startStr, $userTz);
  128.                     $endLocal = \DateTimeImmutable::createFromFormat('Y-m-d H:i:s', $endStr, $userTz);
  130.                     if (!$startLocal || !$endLocal) {
  131.                         throw new \RuntimeException('Invalid createdAt date range.');
  132.                     }
  134.                     // Convert to *DB session timezone*
  135.                     $startDb = $startLocal->setTimezone($dbTz);
  136.                     $endDb = $endLocal->setTimezone($dbTz);
  138.                     $qb->andWhere("$alias.createdAt BETWEEN :start AND :end")
  139.                         ->setParameter('start', $startDb, 'datetime_immutable')
  140.                         ->setParameter('end', $endDb, 'datetime_immutable');
  141.                 }
  143.                 return $datatableResponse->getResponse();
  144.             } catch (\Throwable $e) {
  145.                 return new JsonResponse([
  146.                     'error' => true,
  147.                     'message' => $e->getMessage(),
  148.                     'trace' => $e->getTraceAsString(),
  149.                 ]);
  150.             }
  151.         }
  153.         return $this->render('merchant/payment/index.html.twig', [
  154.             'datatable' => $datatable,
  155.         ]);
  156.     }
  158.     #[Route(path: '/export-all', name: 'merchant_payments_export_all')]
  159.     public function exportAll(
  160.         Request $request,
  161.         ManagerRegistry $doctrine,
  162.         Security $security
  163.     ): StreamedResponse {
  164.         $merchant = $security->getUser();
  165.         if (!$merchant) {
  166.             throw $this->createAccessDeniedException('No merchant associated with this user.');
  167.         }
  169.         $startYmd = $request->query->get('start'); // e.g. "2025-08-01"
  170.         $endYmd = $request->query->get('end');   // e.g. "2025-08-09"
  171.         $tzName = $request->query->get('tz') ?? \date_default_timezone_get() ?? 'UTC';
  173.         // --- Validate user tz
  174.         try {
  175.             $userTz = new \DateTimeZone($tzName);
  176.         } catch (\Throwable) {
  177.             $tzName = 'UTC';
  178.             $userTz = new \DateTimeZone('UTC');
  179.         }
  181.         // --- Detect DB session timezone
  182.         $conn = $doctrine->getConnection();
  183.         $dbTzName = 'UTC';
  184.         try {
  185.             $platform = $conn->getDatabasePlatform()->getName();
  186.             if ($platform === 'mysql') {
  187.                 $sessionTz = $conn->fetchOne('SELECT @@time_zone');
  188.                 if ($sessionTz === 'SYSTEM') {
  189.                     $systemTz = $conn->fetchOne('SELECT @@system_time_zone');
  190.                     $dbTzName = $systemTz ?: 'UTC';
  191.                 } else {
  192.                     $dbTzName = $sessionTz ?: 'UTC';
  193.                 }
  194.             } elseif ($platform === 'postgresql') {
  195.                 $dbTzName = $conn->fetchOne('SHOW TIME ZONE') ?: 'UTC';
  196.             }
  197.         } catch (\Throwable) {
  198.             // keep default UTC
  199.         }
  200.         try {
  201.             $dbTz = new \DateTimeZone($dbTzName);
  202.         } catch (\Throwable) {
  203.             $dbTzName = 'UTC';
  204.             $dbTz = new \DateTimeZone('UTC');
  205.         }
  207.         // Build query
  208.         $repo = $doctrine->getRepository(Payment::class);
  209.         $qb = $repo->createQueryBuilder('p')
  210.             ->leftJoin('p.site', 'site')
  211.             ->leftJoin('p.userPaymentInfo', 'upi')
  212.             ->addSelect('site', 'upi')
  213.             ->andWhere('site.merchant = :merchant')
  214.             ->setParameter('merchant', $merchant)
  215.             ->orderBy('p.createdAt', 'DESC');
  217.         // --- Apply timezone-aware date filter if provided
  218.         if ($startYmd && $endYmd) {
  219.             $startLocal = \DateTimeImmutable::createFromFormat('Y-m-d H:i:s', \trim($startYmd) . ' 00:00:00', $userTz);
  220.             $endLocal = \DateTimeImmutable::createFromFormat('Y-m-d H:i:s', \trim($endYmd) . ' 23:59:59', $userTz);
  222.             if (!$startLocal || !$endLocal) {
  223.                 throw new \RuntimeException('Invalid start/end date.');
  224.             }
  226.             // Convert bounds to DB session timezone
  227.             $startDb = $startLocal->setTimezone($dbTz);
  228.             $endDb = $endLocal->setTimezone($dbTz);
  230.             $qb->andWhere('p.createdAt BETWEEN :start AND :end')
  231.                 ->setParameter('start', $startDb, 'datetime_immutable')
  232.                 ->setParameter('end', $endDb, 'datetime_immutable');
  233.         }
  235.         $payments = $qb->getQuery()->getResult();
  237.         // --- Stream CSV; render "Created At" in the USER'S timezone
  238.         $response = new StreamedResponse(function () use ($payments, $userTz) {
  239.             $handle = fopen('php://output', 'w+');
  241.             // Header
  242.             fputcsv($handle, ['ID', 'External ID', 'Site', 'Payment Gateway', 'Payment Type', 'IP Address', 'Name', 'PISP Status', 'Bank Status', 'Amount', 'Currency', 'Created At']);
  244.             /** @var \App\Domain\Payment\Model\Payment $payment */
  245.             foreach ($payments as $payment) {
  246.                 $createdAt = $payment->getCreatedAt();
  247.                 $createdAtStr = $createdAt
  248.                     ? (new \DateTimeImmutable('@' . $createdAt->getTimestamp()))
  249.                         ->setTimezone($userTz)
  250.                         ->format('Y-m-d H:i:s')
  251.                     : '';
  252.                 //ADDING BELOW CODE, BECAUSE PAYMENT PROVIDER, PISP STATUS AND BANK STATUS ARE NOT SET IN FOR OLD PAYMENT ENTITY
  253.                 $paymentProvider = '';
  254.                 try {
  255.                     $tmp = $payment->getSite()?->getPaymentGatewayConfig()?->getFactoryName();
  256.                     if (is_string($tmp) && $tmp !== '') {
  257.                         $paymentProvider = ($tmp === 'fin_xp') ? 'FinXP' : $tmp;
  258.                     }
  259.                 } catch (\Throwable $e) {
  260.                     // ignore errors for old data
  261.                 }
  263.                 $paymentType = ($payment->getPaymentType() === 'direct_debit') ? 'Direct Debit' : 'SEPA';
  265.                 $pispStatus = '';
  266.                 try {
  267.                     $tmp = $payment->getPispStatus();
  268.                     if (is_string($tmp) && $tmp !== '') {
  269.                         $pispStatus = $tmp;
  270.                     }
  271.                 } catch (\Throwable $e) {
  272.                 }
  274.                 $bankStatus = '';
  275.                 try {
  276.                     $tmp = $payment->getBankStatus();
  277.                     if (is_string($tmp) && $tmp !== '') {
  278.                         $bankStatus = $tmp;
  279.                     }
  280.                 } catch (\Throwable $e) {
  281.                 }
  283.                 $upi = $payment->getUserPaymentInfo();
  284.                 $ip = $upi ? $upi->getIpAddress() : null;
  285.                 $name = $upi ? $upi->getName() : null;
  287.                 fputcsv($handle, [
  288.                     $payment->getId(),
  289.                     $payment->getExternalId(),
  290.                     $payment->getSite()?->getName(),
  291.                     // $payment->getStatus()?->getValue(),
  292.                     $paymentProvider,
  293.                     $paymentType,
  294.                     $ip,
  295.                     $name,
  296.                     $pispStatus,
  297.                     $bankStatus,
  298.                     $payment->getAmount() / 100,
  299.                     $payment->getCurrency(),
  300.                     $createdAtStr,
  301.                 ]);
  302.             }
  304.             fclose($handle);
  305.         });
  307.         $filename = 'merchant_payments_' . \date('Ymd_His') . '.csv';
  308.         $response->headers->set('Content-Type', 'text/csv');
  309.         $response->headers->set('Content-Disposition', 'attachment; filename="' . $filename . '"');
  311.         return $response;
  312.     }
  315.     #[Route(path: '/payment-logs', name: 'merchant_payment_logs')]
  316.     public function paymentLogs(Request $request, ManagerRegistry $doctrine): StreamedResponse
  317.     {
  318.         $paymentId = $request->query->get('payment_id');
  319.         if (!$paymentId) {
  320.             throw new \InvalidArgumentException("payment_id is required");
  321.         }
  323.         $conn = $doctrine->getConnection();
  325.         $query = <<<SQL
  326.         SELECT id, payment_id, status_code, timestamp, logs, created_at, updated_at
  327.         FROM payment_logs
  328.         WHERE payment_id = :paymentId
  329.         ORDER BY timestamp DESC
  330.     SQL;
  332.         $stmt = $conn->prepare($query);
  333.         $result = $stmt->executeQuery(['paymentId' => $paymentId]);
  334.         $rows = $result->fetchAllAssociative();
  336.         // Helper to decode possibly-double-encoded JSON into an array.
  337.         $decodeMaybe = static function ($value, int $maxPasses = 3): array {
  338.             if (is_array($value)) {
  339.                 return $value;
  340.             }
  341.             if (!is_string($value) || $value === '') {
  342.                 return [];
  343.             }
  345.             $s = $value;
  347.             for ($i = 0; $i < $maxPasses; $i++) {
  348.                 $decoded = json_decode($s, true);
  349.                 if (json_last_error() === JSON_ERROR_NONE) {
  350.                     if (is_array($decoded)) {
  351.                         return $decoded;               // got the object/array
  352.                     }
  353.                     if (is_string($decoded)) {
  354.                         $s = $decoded;                 // it was a JSON string containing JSON — try again
  355.                         continue;
  356.                     }
  357.                     // scalar/null → fall through to cleanup
  358.                 }
  360.                 // Cleanup pass: trim, strip wrapping quotes, unescape backslashes
  361.                 $s = trim($s);
  362.                 $len = strlen($s);
  363.                 if ($len >= 2) {
  364.                     $first = $s[0];
  365.                     $last = $s[$len - 1];
  366.                     if (($first === '"' && $last === '"') || ($first === "'" && $last === "'")) {
  367.                         $s = substr($s, 1, -1);
  368.                     }
  369.                 }
  370.                 $s = stripslashes($s);
  371.             }
  373.             return [];
  374.         };
  376.         $responseData = [];
  377.         foreach ($rows as $log) {
  378.             $logsArray = $decodeMaybe($log['logs'] ?? '');
  380.             // Normalize details: if it's a JSON string, decode it once.
  381.             $details = $logsArray['details'] ?? '';
  382.             if (is_string($details) && $details !== '') {
  383.                 $maybe = json_decode($details, true);
  384.                 if (json_last_error() === JSON_ERROR_NONE && is_array($maybe)) {
  385.                     $details = $maybe;
  386.                 }
  387.             }
  389.             $responseData[] = [
  390.                 'title' => $logsArray['title'] ?? '',
  391.                 'details' => $details,
  392.                 'timestamp' => $log['timestamp'],
  393.                 'status_code' => $log['status_code'],
  394.             ];
  395.         }
  397.         return new StreamedResponse(function () use ($responseData) {
  398.             echo json_encode($responseData, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
  399.         }, 200, [
  400.             'Content-Type' => 'application/json',
  401.         ]);
  402.     }
  403. }