SP/web2py/gluon/contrib/stripe.py

from __future__ import print_function
import urllib
import json
from hashlib import sha1

class Stripe:
    """
    Use in WEB2PY (guaranteed PCI compliant)

def pay():
    from gluon.contrib.stripe import StripeForm
    form = StripeForm(
        pk=STRIPE_PUBLISHABLE_KEY,
        sk=STRIPE_SECRET_KEY,
        amount=150, # $1.5 (amount is in cents)
        description="Nothing").process()
    if form.accepted:
        payment_id = form.response['id']
        redirect(URL('thank_you'))
    elif form.errors:
        redirect(URL('pay_error'))
    return dict(form=form)

Low level API:

    key='<api key>'
    d = Stripe(key).charge(
               amount=100, # 1 dollar!!!!
               currency='usd',
               card_number='4242424242424242',
               card_exp_month='5',
               card_exp_year='2012',
               card_cvc_check='123',
               description='test charge')
    print d
    print Stripe(key).check(d['id'])
    print Stripe(key).refund(d['id'])

    Sample output (python dict):
    {u'fee': 0, u'description': u'test charge', u'created': 1321242072, u'refunded': False, u'livemode': False, u'object': u'charge', u'currency': u'usd', u'amount': 100, u'paid': True, u'id': u'ch_sdjasgfga83asf', u'card': {u'exp_month': 5, u'country': u'US', u'object': u'card', u'last4': u'4242', u'exp_year': 2012, u'type': u'Visa'}}
    if paid is True than transaction was processed

    """

    URL_CHARGE = 'https://%s:@api.stripe.com/v1/charges'
    URL_CHECK = 'https://%s:@api.stripe.com/v1/charges/%s'
    URL_REFUND = 'https://%s:@api.stripe.com/v1/charges/%s/refund'

    def __init__(self, key):
        self.key = key

    def charge(self,
               amount, # in cents
               currency='usd',
               card_number='4242424242424242',
               card_exp_month='5',
               card_exp_year='2012',
               card_cvc_check='123',
               token=None,
               description='test charge',
               more=None):
        if token:
            d = {'amount': amount,
                 'currency': currency,
                 'card': token,
                 'description': description}
        else:
            d = {'amount': amount,
                 'currency': currency,
                 'card[number]': card_number,
                 'card[exp_month]': card_exp_month,
                 'card[exp_year]': card_exp_year,
                 'card[cvc_check]': card_cvc_check,
                 'description': description}
        if more:
            d.update(mode)
        params = urllib.urlencode(d)
        u = urllib.urlopen(self.URL_CHARGE % self.key, params)
        return json.loads(u.read())

    def check(self, charge_id):
        u = urllib.urlopen(self.URL_CHECK % (self.key, charge_id))
        return json.loads(u.read())

    def refund(self, charge_id):
        params = urllib.urlencode({})
        u = urllib.urlopen(self.URL_REFUND % (self.key, charge_id),
                           params)
        return json.loads(u.read())

class StripeForm(object):
    def __init__(self,
                 pk, sk,
                 amount, # in cents
                 description,
                 currency = 'usd',
                 currency_symbol = '$',
                 security_notice = True,
                 disclosure_notice = True,
                 template = None):
        from gluon import current, redirect, URL
        if not (current.request.is_local or current.request.is_https):
            redirect(URL(args=current.request.args,scheme='https'))
        self.pk = pk
        self.sk = sk
        self.amount = amount
        self.description = description
        self.currency = currency
        self.currency_symbol = currency_symbol
        self.security_notice = security_notice
        self.disclosure_notice = disclosure_notice
        self.template = template or TEMPLATE
        self.accepted = None
        self.errors = None
        self.signature = sha1(repr((self.amount,self.description))).hexdigest()

    def process(self):
        from gluon import current
        request = current.request
        if request.post_vars:
            if self.signature == request.post_vars.signature:
                self.response = Stripe(self.sk).charge(
                    token=request.post_vars.stripeToken,
                    amount=self.amount,
                    description=self.description,
                    currency=self.currency)
                if self.response.get('paid',False):
                    self.accepted = True
                    return self
            self.errors = True
        return self

    def xml(self):
        from gluon.template import render
        if self.accepted:
            return "Your payment was processed successfully"
        elif self.errors:
            return "There was an processing error"
        else:
            context = dict(amount=self.amount,
                           signature=self.signature, pk=self.pk,
                           currency_symbol=self.currency_symbol,
                           security_notice=self.security_notice,
                           disclosure_notice=self.disclosure_notice)
            return render(content=self.template, context=context)


TEMPLATE = """
<script type="text/javascript" src="https://js.stripe.com/v2/"></script>
<script>
jQuery(function(){
    // This identifies your website in the createToken call below
    Stripe.setPublishableKey('{{=pk}}');

    var stripeResponseHandler = function(status, response) {
      var jQueryform = jQuery('#payment-form');

      if (response.error) {
        // Show the errors on the form
        jQuery('.payment-errors').text(response.error.message).show();
        jQueryform.find('button').prop('disabled', false);
      } else {
        // token contains id, last4, and card type
        var token = response.id;
        // Insert the token into the form so it gets submitted to the server
        var tokenInput = jQuery('<input type="hidden" name="stripeToken" />');
        jQueryform.append(tokenInput.val(token));
        // and re-submit
        jQueryform.get(0).submit();
      }
    };

    jQuery(function(jQuery) {
      jQuery('#payment-form').submit(function(e) {

        var jQueryform = jQuery(this);

        // Disable the submit button to prevent repeated clicks
        jQueryform.find('button').prop('disabled', true);

        Stripe.createToken(jQueryform, stripeResponseHandler);

        // Prevent the form from submitting with the default action
        return false;
      });
    });
});
</script>

<h3>Payment Amount: {{=currency_symbol}} {{="%.2f" % (0.01*amount)}}</h3>
<form action="" method="POST" id="payment-form" class="form-horizontal">

  <div class="form-row form-group">
    <label class="col-sm-2 control-label">Card Number</label>
    <div class="controls col-sm-10">
      <input type="text" size="20" data-stripe="number"
             placeholder="4242424242424242" class="form-control"/>
    </div>
  </div>

  <div class="form-row form-group">
    <label class="col-sm-2 control-label">CVC</label>
    <div class="controls col-sm-10">
      <input type="text" size="4" style="width:80px" data-stripe="cvc"
             placeholder="XXX" class="form-control"/>
      <a href="http://en.wikipedia.org/wiki/Card_Verification_Code" target="_blank">What is this?</a>
    </div>
  </div>

  <div class="form-row form-group">
    <label class="col-sm-2 control-label">Expiration</label>
    <div class="controls col-sm-10">
      <input type="text" size="2" style="width:40px; display:inline-block" 
             data-stripe="exp-month" placeholder="MM" class="form-control"/>
      /
      <input type="text" size="4" style="width:80px; display:inline-block" 
             data-stripe="exp-year" placeholder="YYYY" class="form-control"/>
    </div>
  </div>

  <div class="form-row form-group">
    <div class="controls col-sm-offset-2 col-sm-10">
      <button type="submit" class="btn btn-primary">Submit Payment</button>
      <div class="payment-errors error hidden"></div>
    </div>
  </div>
  <input type="hidden" name="signature" value="{{=signature}}" />
</form>

{{if security_notice or disclosure_notice:}}
<div class="well">
  {{if security_notice:}}
  <h3>Security Notice</h3>
  <p>For your security we process all payments using a service called <a href="http://stripe.com">Stripe</a>. Thanks to <a href="http://stripe.com">Stripe</a> your credit card information is communicated directly between your Web Browser and the payment processor, <a href="http://stripe.com">Stripe</a>, without going through our server. Since we never see your card information nobody can steal it through us. Stripe is <a href="https://stripe.com/us/help/faq#security-and-pci">PCI compliant</a> and so are we.</p>
  {{pass}}
  {{if disclosure_notice:}}
  <h3>Disclosure Notice</h3>

  <p>We do store other information about your purchase including your name, a description of the purchase, the time when it was processed, and the amount paid. This information is necessary to provide our services and for accounting purposes. We do not disclose this information to third parties unless required to operate our services or accounting purposes.</p>
  {{pass}}
</div>
{{pass}}
"""

if __name__ == '__main__':
    key = raw_input('user>')
    d = Stripe(key).charge(100)
    print('charged', d['paid'])
    s = Stripe(key).check(d[u'id'])
    print('paid', s['paid'], s['amount'], s['currency'])
    s = Stripe(key).refund(d[u'id'])
    print('refunded', s['refunded'])