ai_admin/WebAdmin/paypal_webhook.py

import requests
from django.conf import settings
from django.http import JsonResponse
from django.views.decorators.csrf import csrf_exempt
from datetime import datetime
from .models import Order
import json
import logging

logger = logging.getLogger(__name__)

def get_paypal_access_token():
    """获取 PayPal 访问令牌"""
    print("正在获取 PayPal 访问令牌...")
    url = f"https://api.{settings.PAYPAL_MODE}.paypal.com/v1/oauth2/token"
    auth = (
        settings.PAYPAL_CLIENT_ID_SANDBOX if settings.PAYPAL_MODE == 'sandbox' else settings.PAYPAL_CLIENT_ID_PRODUCTION,
        settings.PAYPAL_SECRET_KEY_SANDBOX if settings.PAYPAL_MODE == 'sandbox' else settings.PAYPAL_SECRET_KEY_PRODUCTION
    )

    headers = {
        "Accept": "application/json",
        "Accept-Language": "en_US"
    }
    data = {
        "grant_type": "client_credentials"
    }

    response = requests.post(url, headers=headers, data=data, auth=auth)

    if response.status_code == 200:
        access_token = response.json().get('access_token')
        print(f"获取的访问令牌: {access_token}")
        return access_token
    else:
        print(f"获取 PayPal 访问令牌失败: {response.text}")
        return None

def verify_paypal_webhook(headers, body):
    """使用 PayPal API 验证 Webhook 签名"""
    print("验证 PayPal Webhook 签名...")
    verify_url = f"https://api.{settings.PAYPAL_MODE}.paypal.com/v1/notifications/verify-webhook-signature"
    auth_token = get_paypal_access_token()
    if not auth_token:
        print("无法获取 PayPal 访问令牌，无法验证 Webhook 签名")
        return False

    verify_headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }

    verify_payload = {
        "auth_algo": headers.get('Paypal-Auth-Algo'),
        "cert_url": headers.get('Paypal-Cert-Url'),
        "transmission_id": headers.get('Paypal-Transmission-Id'),
        "transmission_sig": headers.get('Paypal-Transmission-Sig'),
        "transmission_time": headers.get('Paypal-Transmission-Time'),
        "webhook_id": settings.PAYPAL_WEBHOOK_ID,
        "webhook_event": json.loads(body)
    }

    response = requests.post(verify_url, headers=verify_headers, json=verify_payload)
    if response.status_code == 200 and response.json().get('verification_status') == 'SUCCESS':
        print("Webhook 签名验证成功")
        return True
    else:
        print(f"Webhook 签名验证失败: {response.text}")
        return False

@csrf_exempt
def paypal_webhook(request):
    """PayPal Webhook 处理函数，用于接收和处理 PayPal 异步通知"""
    try:
        print("接收到 PayPal Webhook 请求...")
        headers = request.headers
        payload = json.loads(request.body)

        # 验证 Webhook 签名
        if not verify_paypal_webhook(headers, request.body):
            return JsonResponse({"code": 400, "message": "Webhook 签名验证失败", "data": {}})

        event_type = payload.get('event_type')

        # 打印接收到的 Webhook payload 以供调试
        print(f"接收到 PayPal Webhook 事件: {event_type}")
        print(f"Webhook payload: {json.dumps(payload, indent=2)}")

        # 处理不同类型的事件
        if event_type == 'PAYMENT.SALE.COMPLETED':
            sale_id = payload['resource'].get('id')
            parent_payment = payload['resource'].get('parent_payment')  # 使用parent_payment作为订单ID
            if parent_payment:
                try:
                    order = Order.objects.get(order_id=parent_payment)

                    # 检查订单状态，防止重复更新
                    if order.status == 'completed':
                        print(f"订单 {parent_payment} 已经完成，不重复更新")
                        return JsonResponse({"code": 200, "message": "订单已处理", "data": {}})

                    # 再次向 PayPal 查询订单状态，确保支付确实完成
                    access_token = get_paypal_access_token()
                    if not access_token:
                        print("无法获取 PayPal 访问令牌，无法验证订单状态")
                        return JsonResponse({"code": 500, "message": "无法获取支付访问令牌", "data": {}})

                    payment_details_url = f"https://api.{settings.PAYPAL_MODE}.paypal.com/v1/payments/payment/{parent_payment}"
                    headers = {
                        "Content-Type": "application/json",
                        "Authorization": f"Bearer {access_token}"
                    }
                    payment_details_response = requests.get(payment_details_url, headers=headers)

                    if payment_details_response.status_code == 200:
                        payment_details = payment_details_response.json()
                        if payment_details['state'] == 'approved':
                            order.status = 'completed'
                            order.updated_at = datetime.now()
                            order.save()

                            # 更新用户积分
                            user = order.user
                            user.points += order.plan.credits_per_month
                            user.save()

                            print(f"订单 {parent_payment} 状态更新为 'completed' 并已更新用户积分")
                        else:
                            print(f"支付未完成，状态: {payment_details['state']}")
                    else:
                        print(f"查询支付状态失败: {payment_details_response.text}")
                        return JsonResponse({"code": 500, "message": "查询支付状态失败", "data": {}})

                except Order.DoesNotExist:
                    print(f"未找到订单 {parent_payment}")
                    return JsonResponse({"code": 400, "message": "订单不存在", "data": {}})
            else:
                print("Webhook payload 中缺少 parent_payment")
                return JsonResponse({"code": 400, "message": "Webhook payload 中缺少 parent_payment", "data": {}})

        elif event_type == 'PAYMENT.SALE.DENIED':
            sale_id = payload['resource'].get('id')
            parent_payment = payload['resource'].get('parent_payment')
            if parent_payment:
                try:
                    order = Order.objects.get(order_id=parent_payment)
                    order.status = 'failed'
                    order.updated_at = datetime.now()
                    order.save()
                    print(f"订单 {parent_payment} 状态更新为 'failed'")
                except Order.DoesNotExist:
                    print(f"未找到订单 {parent_payment}")
                    return JsonResponse({"code": 400, "message": "订单不存在", "data": {}})
            else:
                print("Webhook payload 中缺少 parent_payment")
                return JsonResponse({"code": 400, "message": "Webhook payload 中缺少 parent_payment", "data": {}})

        return JsonResponse({"code": 200, "message": "Webhook 处理成功", "data": {}})

    except json.JSONDecodeError:
        print("请求体不是有效的JSON")
        return JsonResponse({"code": 400, "message": "请求体不是有效的JSON", "data": {}})
    except Exception as e:
        print(f"处理 PayPal Webhook 时发生错误: {e}")
        return JsonResponse({"code": 500, "message": f"处理 PayPal Webhook 时发生错误: {str(e)}", "data": {}})