create payment url

backend/.env.example

@@ -4,4 +4,9 @@ DB_USER='pbl6_jw8s_user'
 DB_PASSWORD=''
 DB_NAME='pbl6_jw8s'
 JWT_KEY= ''
-DB_SSL_ENABLED=true # default is true to connect with remote database
+DB_SSL_ENABLED=true # default is true to connect with remote database
+#Payment
+VNP_TMNCODE = ''
+VNP_HASHSECRET = ''
+VNP_URL = ''
+VNP_RETURNURL = ''

backend/package-lock.json

@@ -20,6 +20,7 @@
         "bcrypt": "^5.1.1",
         "class-transformer": "^0.5.1",
         "class-validator": "^0.14.1",
+        "dateformat": "^5.0.3",
         "dotenv": "^16.4.5",
         "mysql2": "^3.11.3",
         "nest-access-control": "^3.1.0",
@@ -36,8 +37,10 @@
         "@nestjs/cli": "^10.0.0",
         "@nestjs/schematics": "^10.0.0",
         "@nestjs/testing": "^10.0.0",
+        "@types/dateformat": "^5.0.2",
         "@types/express": "^4.17.17",
         "@types/jest": "^29.5.2",
+        "@types/multer": "^1.4.12",
         "@types/node": "^20.3.1",
         "@types/supertest": "^6.0.0",
         "@typescript-eslint/eslint-plugin": "^8.0.0",
@@ -2144,6 +2147,13 @@
       "integrity": "sha512-he+DHOWReW0nghN24E1WUqM0efK4kI9oTqDm6XmK8ZPe2djZ90BSNdGnIyCLzCPw7/pogPlGbzI2wHGGmi4O/Q==",
       "dev": true
     },
+    "node_modules/@types/dateformat": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/@types/dateformat/-/dateformat-5.0.2.tgz",
+      "integrity": "sha512-M95hNBMa/hnwErH+a+VOD/sYgTmo15OTYTM2Hr52/e0OdOuY+Crag+kd3/ioZrhg0WGbl9Sm3hR7UU+MH6rfOw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/estree": {
       "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.5.tgz",
@@ -2250,6 +2260,16 @@
       "integrity": "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w==",
       "dev": true
     },
+    "node_modules/@types/multer": {
+      "version": "1.4.12",
+      "resolved": "https://registry.npmjs.org/@types/multer/-/multer-1.4.12.tgz",
+      "integrity": "sha512-pQ2hoqvXiJt2FP9WQVLPRO+AmiIm/ZYkavPlIQnx282u4ZrVdztx0pkh3jjpQt0Kz+YI0YhSG264y08UJKoUQg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/express": "*"
+      }
+    },
     "node_modules/@types/node": {
       "version": "20.16.5",
       "resolved": "https://registry.npmjs.org/@types/node/-/node-20.16.5.tgz",
@@ -3933,6 +3953,15 @@
         "node": ">= 8"
       }
     },
+    "node_modules/dateformat": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/dateformat/-/dateformat-5.0.3.tgz",
+      "integrity": "sha512-Kvr6HmPXUMerlLcLF+Pwq3K7apHpYmGDVqrxcDasBg86UcKeTSNWbEzU8bwdXnxnR44FtMhJAxI4Bov6Y/KUfA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.20"
+      }
+    },
     "node_modules/dayjs": {
       "version": "1.11.13",
       "resolved": "https://registry.npmjs.org/dayjs/-/dayjs-1.11.13.tgz",

backend/package.json

@@ -36,6 +36,7 @@
     "bcrypt": "^5.1.1",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
+    "dateformat": "^5.0.3",
     "dotenv": "^16.4.5",
     "mysql2": "^3.11.3",
     "nest-access-control": "^3.1.0",
@@ -52,8 +53,10 @@
     "@nestjs/cli": "^10.0.0",
     "@nestjs/schematics": "^10.0.0",
     "@nestjs/testing": "^10.0.0",
+    "@types/dateformat": "^5.0.2",
     "@types/express": "^4.17.17",
     "@types/jest": "^29.5.2",
+    "@types/multer": "^1.4.12",
     "@types/node": "^20.3.1",
     "@types/supertest": "^6.0.0",
     "@typescript-eslint/eslint-plugin": "^8.0.0",

backend/src/config/config.ts

@@ -8,5 +8,10 @@ export const configuration = () => {
     'db.name': process.env.DB_NAME,
     'db.slow_limit': Number(process.env.DB_SLOW_LIMIT) || 500, // ms
     'db.ssl_enabled': process.env.DB_SSL_ENABLED,
+    // payment config
+    'vnp_TmnCode': process.env.VNP_TMNCODE,
+    'vnp_HashSecret': process.env.VNP_HASHSECRET,
+    'vnp_Url': process.env.VNP_URL,
+    'vnp_ReturnUrl': process.env.VNP_RETURNURL,
   };
 };

backend/src/payment/dto/create-payment.dto.ts

@@ -0,0 +1 @@
+export class CreatePaymentDto {}

backend/src/payment/dto/update-payment.dto.ts

@@ -0,0 +1,4 @@
+import { PartialType } from '@nestjs/mapped-types';
+import { CreatePaymentDto } from './create-payment.dto';
+
+export class UpdatePaymentDto extends PartialType(CreatePaymentDto) {}

backend/src/payment/entities/payment.entity.ts

@@ -0,0 +1 @@
+export class Payment {}

backend/src/payment/payment.controller.spec.ts

@@ -0,0 +1,20 @@
+import { Test, TestingModule } from '@nestjs/testing';
+import { PaymentController } from './payment.controller';
+import { PaymentService } from './payment.service';
+
+describe('PaymentController', () => {
+  let controller: PaymentController;
+
+  beforeEach(async () => {
+    const module: TestingModule = await Test.createTestingModule({
+      controllers: [PaymentController],
+      providers: [PaymentService],
+    }).compile();
+
+    controller = module.get<PaymentController>(PaymentController);
+  });
+
+  it('should be defined', () => {
+    expect(controller).toBeDefined();
+  });
+});

backend/src/payment/payment.controller.ts

@@ -0,0 +1,29 @@
+// payment.controller.ts
+import { Controller, Post, Body, Req, Res } from '@nestjs/common';
+import { PaymentService } from './payment.service.js';
+import { Request, Response } from 'express';
+import { Public } from '../modules/authentication/authentication.decorator.js';
+
+@Controller('payment')
+export class PaymentController {
+  constructor(private readonly paymentService: PaymentService) {}
+
+  @Public()
+  @Post('create_payment_url')
+  async createPaymentUrl(@Req() req: Request, @Body() body: any) {
+    console.log("hello")
+    const ipAddr =
+      req.headers['x-forwarded-for'] ||
+      req.socket.remoteAddress ||
+      req.socket?.remoteAddress;
+    console.log(ipAddr);
+    return await this.paymentService.createPaymentUrl(
+      body.amount,
+      body.bankCode,
+      body.orderDescription,
+      body.orderType,
+      body.language,
+      ipAddr as string,
+    );
+  }
+}

backend/src/payment/payment.module.ts

@@ -0,0 +1,9 @@
+import { Module } from '@nestjs/common';
+import { PaymentService } from './payment.service.js';
+import { PaymentController } from './payment.controller.js';
+
+@Module({
+  controllers: [PaymentController],
+  providers: [PaymentService],
+})
+export class PaymentModule {}

backend/src/payment/payment.service.spec.ts

@@ -0,0 +1,18 @@
+import { Test, TestingModule } from '@nestjs/testing';
+import { PaymentService } from './payment.service';
+
+describe('PaymentService', () => {
+  let service: PaymentService;
+
+  beforeEach(async () => {
+    const module: TestingModule = await Test.createTestingModule({
+      providers: [PaymentService],
+    }).compile();
+
+    service = module.get<PaymentService>(PaymentService);
+  });
+
+  it('should be defined', () => {
+    expect(service).toBeDefined();
+  });
+});

backend/src/payment/payment.service.ts

@@ -0,0 +1,85 @@
+// payment.service.ts
+import { Injectable } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import * as querystring from 'qs';
+import * as crypto from 'crypto';
+
+@Injectable()
+export class PaymentService {
+  constructor(private readonly configService: ConfigService) {}
+
+  async createPaymentUrl(amount: number, bankCode: string, orderDescription: string, orderType: string, language: string, ipAddr: string) {
+    console.log("hi")
+    const tmnCode = this.configService.get<string>('vnp_TmnCode');
+    const secretKey = this.configService.get<string>('vnp_HashSecret');
+    const vnpUrl = this.configService.get<string>('vnp_Url');
+    const returnUrl = this.configService.get<string>('vnp_ReturnUrl');
+    console.log("1")
+    const date = new Date();
+    const createDate = this.formatDate(date, 'yyyymmddHHmmss');
+    const orderId = "5638"
+    const locale = language || 'vn';
+    const currCode = 'VND';
+    console.log("2")
+    const vnp_Params: Record<string, string> = {
+      vnp_Version: '2.1.0',
+      vnp_Command: 'pay',
+      vnp_TmnCode: tmnCode,
+      vnp_Locale: locale,
+      vnp_CurrCode: currCode,
+      vnp_TxnRef: orderId,
+      vnp_OrderInfo: orderDescription,
+      vnp_OrderType: orderType,
+      vnp_Amount: (amount * 100).toString(),
+      vnp_ReturnUrl: returnUrl,
+      vnp_IpAddr: ipAddr,
+      vnp_CreateDate: createDate,
+    };
+    console.log("3")
+    if (bankCode) {
+      vnp_Params['vnp_BankCode'] = bankCode;
+    }
+
+    // Sort the parameters
+    // const sortedParams = Object.keys(vnp_Params)
+    //   .sort()
+    //   .reduce((acc, key) => {
+    //     acc[key] = vnp_Params[key];
+    //     return acc;
+    //   }, {} as Record<string, string>);
+    const sortedParams = this.sortObject(vnp_Params);
+      console.log("4")
+    // Sign the data
+    const signData = querystring.stringify(sortedParams, { encode: false });
+    const hmac = crypto.createHmac('sha512', secretKey);
+    const signed = hmac.update(Buffer.from(signData, 'utf-8')).digest('hex');
+    sortedParams['vnp_SecureHash'] = signed;
+    console.log("5")
+    // Create the URL
+    const res = `${vnpUrl}?${querystring.stringify(sortedParams, { encode: false })}`;
+    console.log("6");
+    return res;
+  }
+  // Format date helper function
+  formatDate(date: Date, format: string): string {
+    const yyyymmdd = date.toISOString().slice(0, 10).replace(/-/g, ''); // YYYYMMDD
+    const hhmmss = date.toTimeString().slice(0, 8).replace(/:/g, ''); // HHMMSS
+    return format === 'yyyymmddHHmmss' ? yyyymmdd + hhmmss : hhmmss;
+  }
+
+  sortObject(obj) {
+    let sorted = {};
+    let str = [];
+    let key;
+    for (key in obj){
+      if (obj.hasOwnProperty(key)) {
+      str.push(encodeURIComponent(key));
+      }
+    }
+    str.sort();
+      for (key = 0; key < str.length; key++) {
+          sorted[str[key]] = encodeURIComponent(obj[str[key]]).replace(/%20/g, "+");
+      }
+      return sorted;
+  }
+}