PaygatePk

gem "paygate_pk", "~> 1.1"

# config/initializers/paygate_pk.rb
PaygatePk.configure do |c|
  c.default_currency = "PKR"

  # PayFast (hosted checkout / redirection)
  c.pay_fast.environment   = Rails.env.production? ? :production : :sandbox
  c.pay_fast.merchant_id   = Rails.application.credentials.dig(:pay_fast, :merchant_id)
  c.pay_fast.secured_key   = Rails.application.credentials.dig(:pay_fast, :secured_key)
  c.pay_fast.merchant_name = "Acme Store"
  c.pay_fast.store_id      = Rails.application.credentials.dig(:pay_fast, :store_id)  # optional

  # Easypaisa (REST: Mobile Account / OTC / Inquiry)
  c.easy_paisa.environment = Rails.env.production? ? :production : :sandbox
  c.easy_paisa.username    = Rails.application.credentials.dig(:easy_paisa, :username)
  c.easy_paisa.password    = Rails.application.credentials.dig(:easy_paisa, :password)
  c.easy_paisa.store_id    = Rails.application.credentials.dig(:easy_paisa, :store_id)
  c.easy_paisa.account_num = Rails.application.credentials.dig(:easy_paisa, :account_num)  # required for Inquiry
end

class Subscription::PaymentsController < ApplicationController
  def create
    @redirect = PaygatePk::PayFast::Redirect.build(
      basket_id:    "sp-#{payment.id}",
      amount:       1500,                                # rupees
      description:  "Pro plan — monthly",
      customer:     {
        mobile: current_user.mobile,                     # real 03xx mobile (mandatory)
        email:  current_user.email,
        name:   current_user.name                        # optional
      },
      success_url:  success_subscription_payments_url,
      failure_url:  failed_subscription_payments_url,
      checkout_url: webhooks_pay_fast_url,               # optional backend IPN ping
      recurring:    false
    )
  end
end

class Subscription::PaymentsController < ApplicationController
  def success
    event = PaygatePk::PayFast::Callback.verify!(request.parameters)
    if event.approved?
      payment = SubscriptionPayment.find_by(basket_id: event.basket_id)
      payment&.mark_completed!(transaction_id: event.transaction_id, amount: event.amount)
      redirect_to dashboard_path, notice: "Payment received."
    else
      redirect_to dashboard_path, alert: "Payment failed: #{event.message}"
    end
  rescue PaygatePk::SignatureError
    head :bad_request
  end
end

PaygatePk::PayFast::Redirect.build(
  basket_id:    "B-1001",
  amount:       1500,
  description:  "Order #1001",
  customer:     { mobile: "03001234567", email: "buyer@x.com", name: "Talha" },
  success_url:  "https://app/success",
  failure_url:  "https://app/failure",

  # — optional —
  currency:               "PKR",            # defaults to config.default_currency
  order_date:             Date.today,       # Date / Time / String, coerced to YYYY-MM-DD
  checkout_url:           "https://app/ipn",
  store_id:               "102-ABC",        # overrides config.pay_fast.store_id
  recurring:              false,
  tran_type:              "ECOMM_PURCHASE", # overrides config.pay_fast.tran_type
  processing_type:        "HYBRID_TOKEN",
  instrument_token:       "tok-from-saved-card",
  transaction_instrument: 3,                # 1=bank, 2=UnionPay, 3=card, 4=wallet

  items: [
    { sku: "SKU-1", name: "Widget", price: 100, qty: 2 },
    { sku: "SKU-2", name: "Gizmo",  price: 50,  qty: 1 }
  ],

  shipping: {
    name: "Talha", address_1: "House 9", address_2: "St 4",
    state: "Punjab", city: "Lahore", postal_code: "54000", method: "Courier"
  },
  billing:  { name: "Talha", city: "Lahore", address_1: "House 9" },

  country:              "PK",
  customer_ip:          request.remote_ip,
  merchant_customer_id: current_user.id.to_s,
  merchant_user_agent:  request.user_agent,

  extra_fields:         { "CUSTOM_X" => "value" }  # forward-compatible passthrough
)

result = PaygatePk::EasyPaisa::MobileAccount.charge(
  order_id:          "lawzo-#{payment.id}",
  amount:            1500,
  mobile_account_no: "03001234567",
  email:             "client@example.com",
  optional:          { "1" => "tenant-42" }  # optional1..5 passthrough
)

if result.success?
  payment.update!(external_transaction_id: result.transaction_id, status: :pending)
  # customer now sees the OTP prompt on their Easypaisa app
else
  flash[:alert] = "Easypaisa: #{result.response_message} (code #{result.response_code})"
end

voucher = PaygatePk::EasyPaisa::OTC.create(
  order_id:     "lawzo-#{payment.id}",
  amount:       1500,
  msisdn:       "03001234567",
  email:        "client@example.com",
  token_expiry: 7.days.from_now    # Date / Time / DateTime / pre-formatted String
)
voucher.payment_token   # => "40933012" — print or show this
voucher.expires_at      # => Time

status = PaygatePk::EasyPaisa::Inquiry.fetch(
  order_id:    "lawzo-#{payment.id}",
  account_num: PaygatePk.config.easy_paisa.account_num    # falls back to config
)

case status.transaction_status
when "PAID"     then payment.mark_completed!(amount: status.transaction_amount)
when "FAILED", "EXPIRED", "BLOCKED", "REVERSED" then payment.mark_failed!(reason: status.transaction_status)
when "PENDING"  then # customer hasn't visited a shop yet -- check again later
end

redirect = PaygatePk::PayFast::Redirect.build(...)
# Render redirect.fields as <input type="hidden"> in your own template.