package service import ( "context" "fmt" "log/slog" "math" "time" dbent "github.com/Wei-Shaw/sub2api/ent" "github.com/Wei-Shaw/sub2api/ent/paymentorder" "github.com/Wei-Shaw/sub2api/internal/payment" infraerrors "github.com/Wei-Shaw/sub2api/internal/pkg/errors" ) // --- Payment Notification & Fulfillment --- func (s *PaymentService) HandlePaymentNotification(ctx context.Context, n *payment.PaymentNotification, pk string) error { if n.Status != "success" { return nil } oid, err := parseOrderID(n.OrderID) if err != nil { return fmt.Errorf("invalid order ID: %s", n.OrderID) } return s.confirmPayment(ctx, oid, n.TradeNo, n.Amount, pk) } func (s *PaymentService) confirmPayment(ctx context.Context, oid int64, tradeNo string, paid float64, pk string) error { o, err := s.entClient.PaymentOrder.Get(ctx, oid) if err != nil { slog.Error("order not found", "orderID", oid) return nil } if math.Abs(paid-o.PayAmount) > amountToleranceCNY { s.writeAuditLog(ctx, o.ID, "PAYMENT_AMOUNT_MISMATCH", pk, map[string]any{"expected": o.PayAmount, "paid": paid, "tradeNo": tradeNo}) return fmt.Errorf("amount mismatch: expected %.2f, got %.2f", o.PayAmount, paid) } return s.toPaid(ctx, o, tradeNo, paid, pk) } func (s *PaymentService) toPaid(ctx context.Context, o *dbent.PaymentOrder, tradeNo string, paid float64, pk string) error { previousStatus := o.Status now := time.Now() grace := now.Add(-paymentGraceMinutes * time.Minute) c, err := s.entClient.PaymentOrder.Update().Where( paymentorder.IDEQ(o.ID), paymentorder.Or( paymentorder.StatusEQ(OrderStatusPending), paymentorder.StatusEQ(OrderStatusCancelled), paymentorder.And( paymentorder.StatusEQ(OrderStatusExpired), paymentorder.UpdatedAtGTE(grace), ), ), ).SetStatus(OrderStatusPaid).SetPayAmount(paid).SetPaymentTradeNo(tradeNo).SetPaidAt(now).ClearFailedAt().ClearFailedReason().Save(ctx) if err != nil { return fmt.Errorf("update to PAID: %w", err) } if c == 0 { return s.alreadyProcessed(ctx, o) } if previousStatus == OrderStatusCancelled || previousStatus == OrderStatusExpired { slog.Info("order recovered from webhook payment success", "orderID", o.ID, "previousStatus", previousStatus, "tradeNo", tradeNo, "provider", pk, ) s.writeAuditLog(ctx, o.ID, "ORDER_RECOVERED", pk, map[string]any{ "previous_status": previousStatus, "tradeNo": tradeNo, "paidAmount": paid, "reason": "webhook payment success received after order " + previousStatus, }) } s.writeAuditLog(ctx, o.ID, "ORDER_PAID", pk, map[string]any{"tradeNo": tradeNo, "paidAmount": paid}) return s.executeFulfillment(ctx, o.ID) } func (s *PaymentService) alreadyProcessed(ctx context.Context, o *dbent.PaymentOrder) error { cur, err := s.entClient.PaymentOrder.Get(ctx, o.ID) if err != nil { return nil } switch cur.Status { case OrderStatusCompleted, OrderStatusRefunded: return nil case OrderStatusFailed: return s.executeFulfillment(ctx, o.ID) case OrderStatusPaid, OrderStatusRecharging: return fmt.Errorf("order %d is being processed", o.ID) case OrderStatusExpired: slog.Warn("webhook payment success for expired order beyond grace period", "orderID", o.ID, "status", cur.Status, "updatedAt", cur.UpdatedAt, ) s.writeAuditLog(ctx, o.ID, "PAYMENT_AFTER_EXPIRY", "system", map[string]any{ "status": cur.Status, "updatedAt": cur.UpdatedAt, "reason": "payment arrived after expiry grace period", }) return nil default: return nil } } func (s *PaymentService) executeFulfillment(ctx context.Context, oid int64) error { o, err := s.entClient.PaymentOrder.Get(ctx, oid) if err != nil { return fmt.Errorf("get order: %w", err) } if o.OrderType == "subscription" { return s.ExecuteSubscriptionFulfillment(ctx, oid) } return s.ExecuteBalanceFulfillment(ctx, oid) } func (s *PaymentService) ExecuteBalanceFulfillment(ctx context.Context, oid int64) error { o, err := s.entClient.PaymentOrder.Get(ctx, oid) if err != nil { return infraerrors.NotFound("NOT_FOUND", "order not found") } if o.Status == OrderStatusCompleted { return nil } if psIsRefundStatus(o.Status) { return infraerrors.BadRequest("INVALID_STATUS", "refund-related order cannot fulfill") } if o.Status != OrderStatusPaid && o.Status != OrderStatusFailed { return infraerrors.BadRequest("INVALID_STATUS", "order cannot fulfill in status "+o.Status) } c, err := s.entClient.PaymentOrder.Update().Where(paymentorder.IDEQ(oid), paymentorder.StatusIn(OrderStatusPaid, OrderStatusFailed)).SetStatus(OrderStatusRecharging).Save(ctx) if err != nil { return fmt.Errorf("lock: %w", err) } if c == 0 { return nil } if err := s.doBalance(ctx, o); err != nil { s.markFailed(ctx, oid, err) return err } return nil } // redeemAction represents the idempotency decision for balance fulfillment. type redeemAction int const ( // redeemActionCreate: code does not exist — create it, then redeem. redeemActionCreate redeemAction = iota // redeemActionRedeem: code exists but is unused — skip creation, redeem only. redeemActionRedeem // redeemActionSkipCompleted: code exists and is already used — skip to mark completed. redeemActionSkipCompleted ) // resolveRedeemAction decides the idempotency action based on an existing redeem code lookup. // existing is the result of GetByCode; lookupErr is the error from that call. func resolveRedeemAction(existing *RedeemCode, lookupErr error) redeemAction { if existing == nil || lookupErr != nil { return redeemActionCreate } if existing.IsUsed() { return redeemActionSkipCompleted } return redeemActionRedeem } func (s *PaymentService) doBalance(ctx context.Context, o *dbent.PaymentOrder) error { // Idempotency: check if redeem code already exists (from a previous partial run) existing, lookupErr := s.redeemService.GetByCode(ctx, o.RechargeCode) action := resolveRedeemAction(existing, lookupErr) switch action { case redeemActionSkipCompleted: // Code already created and redeemed — just mark completed return s.markCompleted(ctx, o, "RECHARGE_SUCCESS") case redeemActionCreate: rc := &RedeemCode{Code: o.RechargeCode, Type: RedeemTypeBalance, Value: o.Amount, Status: StatusUnused} if err := s.redeemService.CreateCode(ctx, rc); err != nil { return fmt.Errorf("create redeem code: %w", err) } case redeemActionRedeem: // Code exists but unused — skip creation, proceed to redeem } if _, err := s.redeemService.Redeem(ctx, o.UserID, o.RechargeCode); err != nil { return fmt.Errorf("redeem balance: %w", err) } return s.markCompleted(ctx, o, "RECHARGE_SUCCESS") } func (s *PaymentService) markCompleted(ctx context.Context, o *dbent.PaymentOrder, auditAction string) error { now := time.Now() _, err := s.entClient.PaymentOrder.Update().Where(paymentorder.IDEQ(o.ID), paymentorder.StatusEQ(OrderStatusRecharging)).SetStatus(OrderStatusCompleted).SetCompletedAt(now).Save(ctx) if err != nil { return fmt.Errorf("mark completed: %w", err) } s.writeAuditLog(ctx, o.ID, auditAction, "system", map[string]any{"rechargeCode": o.RechargeCode, "amount": o.Amount}) return nil } func (s *PaymentService) ExecuteSubscriptionFulfillment(ctx context.Context, oid int64) error { o, err := s.entClient.PaymentOrder.Get(ctx, oid) if err != nil { return infraerrors.NotFound("NOT_FOUND", "order not found") } if o.Status == OrderStatusCompleted { return nil } if psIsRefundStatus(o.Status) { return infraerrors.BadRequest("INVALID_STATUS", "refund-related order cannot fulfill") } if o.Status != OrderStatusPaid && o.Status != OrderStatusFailed { return infraerrors.BadRequest("INVALID_STATUS", "order cannot fulfill in status "+o.Status) } if o.SubscriptionGroupID == nil || o.SubscriptionDays == nil { return infraerrors.BadRequest("INVALID_STATUS", "missing subscription info") } c, err := s.entClient.PaymentOrder.Update().Where(paymentorder.IDEQ(oid), paymentorder.StatusIn(OrderStatusPaid, OrderStatusFailed)).SetStatus(OrderStatusRecharging).Save(ctx) if err != nil { return fmt.Errorf("lock: %w", err) } if c == 0 { return nil } if err := s.doSub(ctx, o); err != nil { s.markFailed(ctx, oid, err) return err } return nil } func (s *PaymentService) doSub(ctx context.Context, o *dbent.PaymentOrder) error { gid := *o.SubscriptionGroupID days := *o.SubscriptionDays g, err := s.groupRepo.GetByID(ctx, gid) if err != nil || g.Status != "active" { return fmt.Errorf("group %d no longer exists or inactive", gid) } _, _, err = s.subscriptionSvc.AssignOrExtendSubscription(ctx, &AssignSubscriptionInput{UserID: o.UserID, GroupID: gid, ValidityDays: days, AssignedBy: 0, Notes: fmt.Sprintf("payment order %d", o.ID)}) if err != nil { return fmt.Errorf("assign subscription: %w", err) } now := time.Now() _, err = s.entClient.PaymentOrder.Update().Where(paymentorder.IDEQ(o.ID), paymentorder.StatusEQ(OrderStatusRecharging)).SetStatus(OrderStatusCompleted).SetCompletedAt(now).Save(ctx) if err != nil { return fmt.Errorf("mark completed: %w", err) } s.writeAuditLog(ctx, o.ID, "SUBSCRIPTION_SUCCESS", "system", map[string]any{"groupId": gid, "days": days, "amount": o.Amount}) return nil } func (s *PaymentService) markFailed(ctx context.Context, oid int64, cause error) { now := time.Now() r := psErrMsg(cause) _, e := s.entClient.PaymentOrder.UpdateOneID(oid).SetStatus(OrderStatusFailed).SetFailedAt(now).SetFailedReason(r).Save(ctx) if e != nil { slog.Error("mark FAILED", "orderID", oid, "error", e) } s.writeAuditLog(ctx, oid, "FULFILLMENT_FAILED", "system", map[string]any{"reason": r}) } func (s *PaymentService) RetryFulfillment(ctx context.Context, oid int64) error { o, err := s.entClient.PaymentOrder.Get(ctx, oid) if err != nil { return infraerrors.NotFound("NOT_FOUND", "order not found") } if o.PaidAt == nil { return infraerrors.BadRequest("INVALID_STATUS", "order is not paid") } if psIsRefundStatus(o.Status) { return infraerrors.BadRequest("INVALID_STATUS", "refund-related order cannot retry") } if o.Status == OrderStatusRecharging { return infraerrors.Conflict("CONFLICT", "order is being processed") } if o.Status == OrderStatusCompleted { return infraerrors.BadRequest("INVALID_STATUS", "order already completed") } if o.Status != OrderStatusFailed && o.Status != OrderStatusPaid { return infraerrors.BadRequest("INVALID_STATUS", "only paid and failed orders can retry") } _, err = s.entClient.PaymentOrder.Update().Where(paymentorder.IDEQ(oid), paymentorder.StatusIn(OrderStatusFailed, OrderStatusPaid)).SetStatus(OrderStatusPaid).ClearFailedAt().ClearFailedReason().Save(ctx) if err != nil { return fmt.Errorf("reset for retry: %w", err) } s.writeAuditLog(ctx, oid, "RECHARGE_RETRY", "admin", map[string]any{"detail": "admin manual retry"}) return s.executeFulfillment(ctx, oid) }