trendplays/app/Http/Controllers/BillingController.php

<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Stripe\Stripe;
use Stripe\Customer;
use Stripe\PaymentIntent;
use Stripe\PaymentMethod;
use Illuminate\Support\Facades\Log;
use Illuminate\Support\Facades\Auth;
use App\Models\Transaction;

class BillingController extends Controller
{
	protected $stripe;
	protected $user;


	public function __construct() {
		$this->stripe = new \Stripe\StripeClient(config('services.stripe.secret'));
		Stripe::setApiKey(config('services.stripe.secret'));
		$this->user = Auth::user();
	}

	protected function attempt(Request $request) {
		$user = Auth::user();
		$amount = $request->packs[ 'credits10' ]*1099 +
			$request->packs[ 'credits50' ]*5499 + $request->packs[ 'credits100' ]*10999
			+ $request->packs[ 'credits1000' ]*101000;

		$transaction = new Transaction;
		$transaction->credits = $request->packs['credits10']*1000 +
			$request->packs['credits50']*5000 +
			$request->packs['credits100']*10000 +
			$request->packs['credits1000']*100000;
		$transaction->credits_extra =
			$request->packs['credits50']*500 +
			$request->packs['credits100']*1000 +
			$request->packs['credits1000']*15000;

		$transaction->user_id = $user->id;
		$transaction->charge = $amount;
		$transaction->status = 'processing';
		$transaction->completed = false;
		$transaction->save();
		return $transaction;
	}

	//Expects an array 'packs' representing the amount of each multiple of credits.
	//Should validate that all amounts are positive integers in a reasonable range
	public function stripeSecret(Request $request) {
		$user = Auth::user();
		$transaction = $this->attempt($request);

		$intent = PaymentIntent::create([
			'amount' => $amount,
			'currency' => 'usd',
			'customer' => $user->customer_id,
			'description' => "You have received $total_credits credits.",
			'receipt_email' => Auth::user()->email,
			'metadata' => ['transaction_id' => $transaction->id]
		]);
		$transaction->intent_id = $intent->id;

		//Save the card as a default if none is set and it was selected
		if ($user->payment_method == null && $request->card) {
			$this->changeDefaultCard($request->card);
		}

		$transaction->save();
		return $intent->client_secret;
	}

	public function getCards() {
		return PaymentMethod::all([
			'customer' => Auth::user()->customer_id,
			'type' => 'card'
		]);
	}

	//Adds correct credit amount to the charged user, precise to two decimal places 
	public function chargeEvent(Request $request) {
		$event = \Stripe\Event::constructFrom($request->all());
		$charge = $event->data->object;
		$transaction = Transaction::where('intent_id', $charge->payment_intent)->first();
		$user = $transaction->user;

		if ($event->type == 'charge.succeeded') {
			$user->credits = $user->credits + $transaction->credits + $transaction->credits_extra;
			$transaction->status = 'completed';
			$transaction->completed = true;
			$user->save();
			$transaction->save();

		} else {
			$transaction->status = $charge->status;
			$transaction->save();
		}
	}

	public function changeDefaultCard(String $card) {
		$user = Auth::user();
		$user->payment_method = $card;
		$user->save();
		$cards = $this->getCards();

		return PaymentMethod::all([
			'customer' => Auth::user()->customer_id,
			'type' => 'card'
		]);
	}

	public function deleteCard(Request $request) {
		$this->stripe->paymentMethods->detach($request->card);

		$user = Auth::user();
		if ($request->card == $user->payment_method) {
			$user->payment_method = null;
			$user->save();
		}
		return ($this->getCards());
	}

	//Receives a request with a packs. It is an array of each type of credit
	//amount to be bought
	public function payeer(Request $request) {
		$transaction = $this->attempt($request);
		$shopid = config('services.payeer.id');
		$secret = config('services.payeer.secret');
		$param_key = config('services.payeer.param_key');
		$total = $transaction->credits + $transaction->credits_extra;

		$arHash = [$shopid, $transaction->id, $transaction->charge, 'USD', "You
			will receive $total credits."];

		$params = ['reference' => ['transaction_id' => $transaction->id]];
		$key = md5($param_key.$transaction->id);
		$encodedParams = urlencode(base64_encode(openssl_encrypt(
			json_encode($params), 'AES-256-CBC', $key, OPENSSL_RAW_DATA
		)));
		$arHash[] = $encodedParams;
		$arHash[] = $secret;

		$signature = strtoupper(hash('sha256', implode(':', $arHash)));
		return [ 'signature' => $signature, 'params' => $encodedParams, 'shop'
			=> $shopid, 'transaction' => $transaction->id ];
	}
}