Ilia Denisov
1bf612a087
CI / changes (pull_request) Successful in 2s
CI / unit (pull_request) Successful in 11s
CI / integration (pull_request) Successful in 22s
CI / ui (pull_request) Has been skipped
CI / conformance (pull_request) Successful in 10s
CI / gate (pull_request) Successful in 0s
CI / deploy (pull_request) Successful in 1m53s
Closes the admin / reports / catalog work. Each fund row on the /_gm finance panel gains a Refund action (payments.RefundOrderFull): a full-order refund the operator records after refunding on the rail — a refund ledger row + a floor-0 chip revoke (never negative, D27), idempotent (a second refund reports already-refunded). A ledger CSV export (/_gm/ledger.csv, payments.LedgerExport) streams the whole append-only ledger for tax + reconciliation. Tests: refund an order in full (chips revoked, a refund row), an idempotent second refund, the CSV export shape; CSRF-guarded.
72 lines
2.3 KiB
Go
72 lines
2.3 KiB
Go
package server
|
|
|
|
import (
|
|
"encoding/csv"
|
|
"fmt"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/google/uuid"
|
|
)
|
|
|
|
// consoleRefund refunds a paid order in full at the operator's request. The operator performs the
|
|
// actual money refund on the rail (Robokassa cabinet / VK support / Telegram refundStarPayment);
|
|
// this records it — a refund ledger row and a floor-0 chip revoke (never negative, D27). Idempotent.
|
|
func (s *Server) consoleRefund(c *gin.Context) {
|
|
id, ok := s.consoleUUID(c, "/_gm/users")
|
|
if !ok {
|
|
return
|
|
}
|
|
back := "/_gm/users/" + id.String()
|
|
if s.payments == nil {
|
|
s.renderConsoleMessage(c, "Unavailable", "payments are not enabled", back)
|
|
return
|
|
}
|
|
orderID, err := uuid.Parse(strings.TrimSpace(c.PostForm("order_id")))
|
|
if err != nil {
|
|
s.renderConsoleMessage(c, "Refund failed", "no order to refund", back)
|
|
return
|
|
}
|
|
out, err := s.payments.RefundOrderFull(c.Request.Context(), orderID)
|
|
if err != nil {
|
|
s.renderConsoleMessage(c, "Refund failed", err.Error(), back)
|
|
return
|
|
}
|
|
if out.AlreadyRefunded {
|
|
s.renderConsoleMessage(c, "Already refunded", "this order was already refunded", back)
|
|
return
|
|
}
|
|
s.publishBannerChange(id)
|
|
msg := fmt.Sprintf("revoked %d chips", out.Revoked)
|
|
if out.Loss > 0 {
|
|
msg += fmt.Sprintf("; %d chips were already spent (recorded as a loss + abuse flag)", out.Loss)
|
|
}
|
|
s.renderConsoleMessage(c, "Refunded", msg, back)
|
|
}
|
|
|
|
// consoleLedgerExport streams the entire append-only ledger as a CSV attachment for tax reporting
|
|
// and rail reconciliation. The snapshot column carries the raw purchase/refund JSON.
|
|
func (s *Server) consoleLedgerExport(c *gin.Context) {
|
|
rows, err := s.payments.LedgerExport(c.Request.Context())
|
|
if err != nil {
|
|
s.consoleError(c, err)
|
|
return
|
|
}
|
|
c.Header("Content-Type", "text/csv; charset=utf-8")
|
|
c.Header("Content-Disposition", `attachment; filename="ledger.csv"`)
|
|
w := csv.NewWriter(c.Writer)
|
|
_ = w.Write([]string{
|
|
"created_at", "account_id", "kind", "source", "origin", "chips_delta",
|
|
"product_id", "order_id", "provider", "provider_payment_id", "snapshot",
|
|
})
|
|
for _, r := range rows {
|
|
_ = w.Write([]string{
|
|
r.CreatedAt.UTC().Format(time.RFC3339), r.AccountID, r.Kind, r.Source, r.Origin,
|
|
strconv.Itoa(r.ChipsDelta), r.ProductID, r.OrderID, r.Provider, r.ProviderPaymentID, r.Snapshot,
|
|
})
|
|
}
|
|
w.Flush()
|
|
}
|