Spaces:
Runtime error
Runtime error
File size: 4,509 Bytes
c68b343 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 | import json
import razorpay
from django.http import JsonResponse
from django.views.decorators.csrf import csrf_exempt
from django.conf import settings
from django.db import transaction
from django.core.mail import send_mail
from rest_framework.decorators import api_view, permission_classes
from rest_framework.permissions import IsAuthenticated
from apps.orders.models import (
Cart, Order, OrderItem,
PaymentOrder, Payment, Transaction
)
from apps.products.models import Product
client = razorpay.Client(auth=(settings.RAZORPAY_KEY_ID, settings.RAZORPAY_KEY_SECRET))
# ====================================================
# CREATE ORDER + CREATE RAZORPAY ORDER
# LOGIN REQUIRED
# ====================================================
@csrf_exempt
@api_view(["POST"])
@permission_classes([IsAuthenticated])
@transaction.atomic
def create_product_order(request):
data = json.loads(request.body or "{}")
customer = data.get("customer")
if not customer:
return JsonResponse({"error": "Customer data missing"}, status=400)
# 🔐 LOCK CART
cart = Cart.objects.select_for_update().filter(
user=request.user,
is_active=True
).first()
if not cart or not cart.items.exists():
return JsonResponse({"error": "Cart is empty"}, status=400)
subtotal = 0
total_weight = 0
validated_items = []
# 🔒 LOCK PRODUCTS (ANTI-OVERSELL)
for item in cart.items.select_related("product"):
product = Product.objects.select_for_update().get(id=item.product.id)
if product.stock < item.quantity:
return JsonResponse(
{"error": f"{product.name} is out of stock"},
status=400
)
subtotal += product.price * item.quantity
total_weight += product.weight * item.quantity
validated_items.append((item, product))
shipping_cost = 50
gst = round((subtotal + shipping_cost) * 0.18, 2)
total_amount = subtotal + shipping_cost + gst
# =========================
# MASTER PAYMENT ORDER
# =========================
payment_order = PaymentOrder.objects.create(
user=request.user,
order_type="PRODUCT",
amount=total_amount,
status="PENDING"
)
# =========================
# RAZORPAY ORDER
# =========================
razorpay_order = client.order.create({
"amount": int(round(total_amount * 100)),
"currency": "INR",
"payment_capture": 1
})
payment_order.razorpay_order_id = razorpay_order["id"]
payment_order.save()
# =========================
# PRODUCT ORDER
# =========================
order = Order.objects.create(
payment_order=payment_order,
full_name=customer["fullName"],
email=customer["email"],
phone=customer["phone"],
address=customer["address"],
city=customer["city"],
pincode=customer["pincode"],
gst_number=customer.get("gstNumber"),
subtotal=subtotal,
shipping_cost=shipping_cost,
total_weight=total_weight,
total_amount=total_amount
)
payment_order.linked_object_id = order.id
payment_order.linked_app = "orders"
payment_order.save()
# =========================
# ORDER ITEMS SNAPSHOT
# =========================
for item, product in validated_items:
OrderItem.objects.create(
order=order,
product=product,
product_name=product.name,
price=product.price,
quantity=item.quantity,
weight_kg=product.weight
)
return JsonResponse({
"order_id": order.id,
"razorpay_order_id": razorpay_order["id"],
"amount": int(total_amount * 100),
"currency": "INR",
"key": settings.RAZORPAY_KEY_ID
})
@api_view(["GET"])
@permission_classes([IsAuthenticated])
def my_orders(request):
orders = Order.objects.filter(
payment_order__user=request.user
).order_by("-created_at")
data = []
for o in orders:
data.append({
"id": o.id,
"total": o.total_amount,
"status": o.status,
"created_at": o.created_at,
"items": [
{
"name": i.product_name,
"qty": i.quantity,
"price": i.price
} for i in o.items.all()
]
})
return JsonResponse({"orders": data}) |