magento-plugin/lib/bitpay/bp_lib.php

<?php

/**
 * The MIT License (MIT)
 * 
 * Copyright (c) 2011-2014 BitPay LLC
 * 
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 * 
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 * 
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */

require_once 'bp_config_default.php';
require_once 'bp_options.php';

/**
 * @param string $url
 * @param string $apiKey
 * @param string $post
 *
 * @return array
 */
function bpCurl($url, $apiKey, $post = null)
{
    global $bpOptions, $bpconfig;	

    $curl   = curl_init($url);
    $length = 0;

    if (null !== $post)
    {	
        curl_setopt($curl, CURLOPT_POST, 1);
        curl_setopt($curl, CURLOPT_POSTFIELDS, $post);
        $length = strlen($post);
    }

    $uname  = base64_encode($apiKey);
    $header = array(
        'Content-Type: application/json',
        'Content-Length: ' . $length,
        'Authorization: Basic ' . $uname,
        'X-BitPay-Plugin-Info: magento5',
    );

    curl_setopt($curl, CURLOPT_PORT, $bpconfig['port']);
    curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
    curl_setopt($curl, CURLOPT_TIMEOUT, 10);
    curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC ) ;
    curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, $bpconfig['ssl_verifypeer']); // verify certificate
    curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, $bpconfig['ssl_verifyhost']); // check existence of CN and verify that it matches hostname
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($curl, CURLOPT_FORBID_REUSE, 1);
    curl_setopt($curl, CURLOPT_FRESH_CONNECT, 1);

    $responseString = curl_exec($curl);

    if($responseString == false)
    {
        $response = array('error' => curl_error($curl));
    }
    else
    {
        $response = json_decode($responseString, true);
        if (!$response)
        {
            $response = array('error' => 'invalid json: '.$responseString);
        }
    }

    curl_close($curl);

    return $response;
}

/**
 * $orderId: Used to display an orderID to the buyer. In the account summary view, this value is used to 
 * identify a ledger entry if present.
 *
 * $price: by default, $price is expressed in the currency you set in bp_options.php.  The currency can be 
 * changed in $options.
 *
 * $posData: this field is included in status updates or requests to get an invoice.  It is intended to be used by
 * the merchant to uniquely identify an order associated with an invoice in their system.  Aside from that, Bit-Pay does
 * not use the data in this field.  The data in this field can be anything that is meaningful to the merchant.
 *
 * $options keys can include any of: 
 * ('itemDesc', 'itemCode', 'notificationEmail', 'notificationURL', 'redirectURL', 'apiKey'
 *		'currency', 'physical', 'fullNotifications', 'transactionSpeed', 'buyerName', 
 *		'buyerAddress1', 'buyerAddress2', 'buyerCity', 'buyerState', 'buyerZip', 'buyerEmail', 'buyerPhone')
 * If a given option is not provided here, the value of that option will default to what is found in bp_options.php
 * (see api documentation for information on these options).
 *
 * @param string $orderId
 * @param string $price
 * @param string $posData
 * @param array  $options
 *
 * @return array
 */
function bpCreateInvoice($orderId, $price, $posData, $options = array())
{
    global $bpOptions, $bpconfig;	

    $options = array_merge($bpOptions, $options);	// $options override any options found in bp_options.php
    $pos     = array('posData' => $posData);

    if ($bpOptions['verifyPos'])
    {
        $pos['hash'] = crypt(serialize($posData), $options['apiKey']);
    }

    $options['posData'] = json_encode($pos);
    $options['orderID'] = $orderId;
    $options['price']   = $price;

    $post        = array();
    $postOptions = array('orderID', 'itemDesc', 'itemCode', 'notificationEmail', 'notificationURL', 'redirectURL', 
        'posData', 'price', 'currency', 'physical', 'fullNotifications', 'transactionSpeed', 'buyerName', 
        'buyerAddress1', 'buyerAddress2', 'buyerCity', 'buyerState', 'buyerZip', 'buyerEmail', 'buyerPhone');

    foreach($postOptions as $o)
    {
        if (array_key_exists($o, $options))
        {
            $post[$o] = $options[$o];
        }
    }

    $post     = json_encode($post);
    $response = bpCurl('https://'.$bpconfig['hostAndPort'].'/api/invoice/', $options['apiKey'], $post);

    return $response;
}

/**
 * Call from your notification handler to convert $_POST data to an object containing invoice data
 *
 * @param boolean|string $apiKey
 *
 * @return string|array
 */
function bpVerifyNotification($apiKey = false)
{
    global $bpOptions, $bpconfig;

    if (!$apiKey)
    {
        $apiKey = $bpOptions['apiKey'];		
    }

    $post = file_get_contents("php://input");

    if (!$post)
    {
        return 'No post data';
    }

    $json = json_decode($post, true);

    if (is_string($json))
    {
        return $json; // error
    }

    if (!array_key_exists('posData', $json)) 
    {
        return 'no posData';
    }

    $posData = json_decode($json['posData'], true);

    if($bpOptions['verifyPos'] and $posData['hash'] != crypt(serialize($posData['posData']), $apiKey)) 
    {
        return 'authentication failed (bad hash)';
    }

    $json['posData'] = $posData['posData'];

    return $json;
}

/**
 * $options can include ('apiKey')
 *
 * @param string         $invoiceId
 * @param boolean|string $apiKey
 *
 * @return string|array
 */
function bpGetInvoice($invoiceId, $apiKey=false)
{
    global $bpOptions, $bpconfig;

    if (!$apiKey)
    {
        $apiKey = $bpOptions['apiKey'];		
    }

    $response = bpCurl('https://'.$bpconfig['hostAndPort'].'/api/invoice/'.$invoiceId, $apiKey);

    if (is_string($response))
    {
        return $response; // error
    }

    $response['posData'] = json_decode($response['posData'], true);
    $response['posData'] = $response['posData']['posData'];

    return $response;	
}