Solo_bot/handlers/payments/heleket/webhook.py

import base64
import hashlib
import json

from aiohttp import web

from config import HELEKET_API_KEY
from database import (
    add_payment,
    async_session_maker,
    get_payment_by_payment_id,
    update_balance,
    update_payment_status,
)
from handlers.payments.utils import send_payment_success_notification
from logger import logger


def verify_heleket_signature(data: dict) -> bool:
    """Проверяет подпись webhook от Heleket.

    Args:
        data: Данные от webhook

    Returns:
        True если подпись валидна, иначе False
    """
    try:
        received_signature = data.get("sign")
        if not received_signature:
            logger.error("Heleket webhook: отсутствует подпись")
            return False

        data_without_sign = data.copy()
        del data_without_sign["sign"]

        json_data = json.dumps(data_without_sign, ensure_ascii=False, separators=(",", ":"))
        json_data = json_data.replace("/", "\\/")
        base64_data = base64.b64encode(json_data.encode("utf-8")).decode("utf-8")
        sign_string = base64_data + HELEKET_API_KEY
        calculated_signature = hashlib.md5(sign_string.encode("utf-8")).hexdigest()
        is_valid = calculated_signature.lower() == received_signature.lower()

        if not is_valid:
            logger.error(
                f"Heleket webhook: неверная подпись. Ожидалось: {calculated_signature}, получено: {received_signature}"
            )
            logger.error(f"Heleket webhook: строка для подписи: {sign_string}")
        else:
            logger.info("Heleket webhook: подпись успешно проверена")
        return is_valid
    except Exception as e:
        logger.error(f"Ошибка проверки подписи Heleket webhook: {e}")
        return False


async def process_heleket_webhook(data: dict) -> bool:
    """Обрабатывает webhook от Heleket.

    Args:
        data: Данные от webhook

    Returns:
        True если обработка успешна, иначе False
    """
    try:
        logger.info(f"Processing Heleket webhook: {data}")

        webhook_type = data.get("type")
        order_id = data.get("order_id")
        status = data.get("status")
        payment_amount = data.get("payment_amount")
        merchant_amount = data.get("merchant_amount")
        payer_currency = data.get("payer_currency")
        additional_data = data.get("additional_data")

        logger.info(f"Heleket webhook - Type: {webhook_type}, Order: {order_id}, Status: {status}")
        if webhook_type != "payment":
            logger.warning(f"Heleket webhook: неизвестный тип {webhook_type}")
            return False
        if status in ["paid", "paid_over"]:
            logger.info(f"Heleket: успешный платёж {order_id} на сумму {payment_amount} {payer_currency}")
            tg_id = None
            rub_amount = None
            if additional_data:
                try:
                    for part in additional_data.split(","):
                        if part.startswith("tg_id:"):
                            tg_id = int(part.split(":")[1])
                        elif part.startswith("rub_amount:"):
                            rub_amount = float(part.split(":")[1])
                except Exception as e:
                    logger.error(f"Ошибка парсинга additional_data: {e}")
            if not tg_id and "_" in order_id:
                try:
                    tg_id = int(order_id.split("_")[1])
                except Exception as e:
                    logger.error(f"Ошибка извлечения tg_id из order_id: {e}")
            if not tg_id:
                logger.error(f"Не удалось извлечь tg_id из Heleket webhook: {data}")
                return False
            balance_amount = rub_amount if rub_amount else float(merchant_amount)
            async with async_session_maker() as session:
                payment = await get_payment_by_payment_id(session, order_id)
                if payment:
                    if payment.get("status") == "success":
                        logger.info(f"Heleket: платёж {order_id} уже обработан")
                        return True
                    ok = await update_payment_status(
                        session=session, internal_id=int(payment["id"]), new_status="success"
                    )
                    if not ok:
                        logger.error(f"Heleket: не удалось обновить статус платежа {order_id}")
                        return False
                else:
                    await add_payment(
                        session=session,
                        tg_id=tg_id,
                        amount=balance_amount,
                        payment_system="HELEKET",
                        status="success",
                        currency="USD",
                        payment_id=order_id,
                        metadata=None,
                    )

                await update_balance(session, tg_id, balance_amount)
                await send_payment_success_notification(tg_id, balance_amount, session)
            logger.info(
                f"Heleket: платёж {order_id} для пользователя {tg_id} "
                f"успешно обработан, баланс пополнен на {balance_amount} RUB"
            )
            return True
        elif status in ["fail", "wrong_amount", "cancel", "system_fail"]:
            logger.warning(f"Heleket: неудачный платёж {order_id}, статус: {status}")

            async with async_session_maker() as session:
                payment = await get_payment_by_payment_id(session, order_id)
                if payment:
                    await update_payment_status(
                        session=session,
                        internal_id=int(payment["id"]),
                        new_status="failed",
                    )
                    await session.commit()
            return True
        else:
            logger.info(f"Heleket: промежуточный статус {status} для платежа {order_id}")
            return True
    except Exception as e:
        logger.error(f"Ошибка обработки Heleket webhook: {e}")
        return False


async def heleket_webhook(request: web.Request):
    """Обработчик webhook от Heleket для aiohttp."""
    try:
        data = await request.json()
        logger.info(f"Heleket webhook received from {request.remote}")

        if not verify_heleket_signature(data):
            logger.error("Heleket webhook: неверная подпись")
            return web.Response(status=400, text="Invalid signature")

        success = await process_heleket_webhook(data)
        if success:
            return web.Response(status=200, text="OK")
        else:
            return web.Response(status=400, text="Processing failed")
    except Exception as e:
        logger.error(f"Ошибка обработки Heleket webhook: {e}")
        return web.Response(status=500, text="Internal server error")