def makePayment():
req = request.get_json()
if req is None:
return json.dumps({"status": "fail",
"reason": "Must include JSON."})
# TODO authentication to make sure this user
# has permission to do this
if not 'username' in req or not 'password' in req:
return json.dumps({"status": "fail",
"reason": "Must include username and password."})
if not 'amount' in req:
return json.dumps({"status": "fail",
"reason": "Must include payment amount."})
# make sure we can validate to the db
try:
u = User.login(req['username'], req['password'])
except:
return json.dumps({"status": "fail",
"reason": "Unable to log user in."})
# attempt the payment
res = achCharge(float(req['amount']), u.routingNo, u.acctNo)
if res['CmdStatus'] != 'Approved':
return json.dumps({"status": "fail",
"reason": "Unable to charge account."})
u.acctBalance += float(req['amount'])
u.save()
return json.dumps({"status":"success"})
def addAccount():
req = request.get_json()
if req is None:
return json.dumps({"status": "fail",
"reason": "Must include JSON."})
# TODO authentication to make sure this user
# has permission to do this
if not 'username' in req or not 'password' in req:
return json.dumps({"status": "fail",
"reason": "Must include username and password."})
if not 'routingNo' in req or not 'acctNo' in req:
return json.dumps({"status": "fail",
"reason": "Must include routing and account number."})
# make sure we can validate to the db
try:
u = User.login(req['username'], req['password'])
except:
return json.dumps({"status": "fail",
"reason": "Unable to log user in."})
# validate the account with a $1 charge
res = achCharge(1, req['routingNo'], req['acctNo'])
if res['CmdStatus'] != 'Approved':
return json.dumps({"status": "fail",
"reason": "Account invalid."})
"""
{u'Authorize': u'5.00', u'Purchase': u'5.00', u'AcctNo': u'XXXXXXXXXXXXXX67', u'ResponseOrigin': u'Processor', u'CmdStatus': u'Approved', u'AuthCode': u'272-172', u'TranCode': u'Authorize', u'UserTraceData': u'', u'TextResponse': u'Approved', u'InvoiceNo': u'111020141280', u'CardType': u'ACH', u'DSIXReturnCode': u'000000', u'MerchantID': u'6013521114', u'OperatorID': u'TEST'}
"""
# save the db updates now that we know they're valid
u.routingNo = req['routingNo']
u.acctNo = req['acctNo']
u.save()
return json.dumps({"status":"success"})
