src/ApplicationBundle/Modules/HoneybeeWeb/Controller/HoneybeeWebPublicController.php line 2535

Open in your IDE?
  1. <?php
  3. namespace ApplicationBundle\Modules\HoneybeeWeb\Controller;
  6. use ApplicationBundle\Constants\BuddybeeConstant;
  7. use ApplicationBundle\Constants\EmployeeConstant;
  8. use ApplicationBundle\Constants\GeneralConstant;
  9. use ApplicationBundle\Controller\GenericController;
  10. use ApplicationBundle\Entity\DatevToken;
  11. use ApplicationBundle\Modules\Authentication\Constants\UserConstants; use ApplicationBundle\Modules\Api\Constants\ApiConstants;
  12. use ApplicationBundle\Modules\Buddybee\Buddybee;
  13. use ApplicationBundle\Modules\HoneybeeWeb\Service\Hb360EstimateService;
  14. use ApplicationBundle\Modules\HoneybeeWeb\Service\Hb360ProjectService;
  15. use ApplicationBundle\Modules\HoneybeeWeb\Support\FunnelManifestCore;
  16. use ApplicationBundle\Modules\HoneybeeWeb\Support\FunnelRoutingCore;
  17. use ApplicationBundle\Modules\HoneybeeWeb\Support\PublicRateLimitCore;
  18. use ApplicationBundle\Modules\HoneybeeWeb\Support\SdsEconCore;
  19. use CompanyGroupBundle\Entity\SdsFunnelHandoff;
  20. use CompanyGroupBundle\Entity\SdsFunnelRouting;
  21. use ApplicationBundle\Modules\System\MiscActions;
  22. use Symfony\Component\HttpFoundation\Cookie;
  23. use CompanyGroupBundle\Entity\EntityCreateTopic;
  24. use CompanyGroupBundle\Entity\PaymentMethod;
  25. use CompanyGroupBundle\Entity\EntityDatevToken;
  26. use CompanyGroupBundle\Entity\Device;
  27. use CompanyGroupBundle\Entity\EntityInvoice;
  28. use CompanyGroupBundle\Entity\EntityMeetingSession;
  29. use CompanyGroupBundle\Entity\EntityTicket;
  30. use Endroid\QrCode\Builder\BuilderInterface;
  31. use Endroid\QrCodeBundle\Response\QrCodeResponse;
  32. use Ps\PdfBundle\Annotation\Pdf;
  33. use Symfony\Component\HttpFoundation\JsonResponse;
  34. use Symfony\Component\HttpFoundation\Request;
  35. use CompanyGroupBundle\Entity\EntityApplicantDetails;
  36. use Symfony\Component\HttpFoundation\Response;
  37. use Symfony\Component\Routing\Generator\UrlGenerator;
  38. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  39. //use Symfony\Bundle\FrameworkBundle\Console\Application;
  40. //use Symfony\Component\Console\Input\ArrayInput;
  41. //use Symfony\Component\Console\Output\NullOutput;
  44. class HoneybeeWebPublicController extends GenericController
  45. {
  47.     private function getPublicDocumentEntityManager($appId)
  48.     {
  49.         $emGoc = $this->getDoctrine()->getManager('company_group');
  50.         $emGoc->getConnection()->connect();
  52.         $goc = $emGoc
  53.             ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  54.             ->findOneBy(
  55.                 array(
  56.                     'appId' => $appId
  57.                 )
  58.             );
  60.         if (!$goc) {
  61.             return array(null, null);
  62.         }
  64.         $connector = $this->container->get('application_connector');
  65.         $connector->resetConnection(
  66.             'default',
  67.             $goc->getDbName(),
  68.             $goc->getDbUser(),
  69.             $goc->getDbPass(),
  70.             $goc->getDbHost(),
  71.             $reset = true
  72.         );
  74.         return array($this->getDoctrine()->getManager(), $goc);
  75.     }
  76.     // home page
  77.     public function CentralHomePageAction(Request $request)
  78.     {
  79.         $em = $this->getDoctrine()->getManager('company_group');
  80.         $subscribed = false;
  82.         if ($request->isMethod('POST')) {
  84.             $entityTicket = new EntityTicket();
  85.             $entityTicket->setEmail($request->request->get('newsletter'));
  87.             $em->persist($entityTicket);
  88.             $em->flush();
  90.             $subscribed = true;
  91.         }
  93.         $response = $this->render('@HoneybeeWeb/pages/home.html.twig', [
  94.             'page_title' => 'HoneyBee — Project ERP + Business ERP + HoneyCore Edge EMS',
  95.             'og_title' => 'HoneyBee — Business + Energy Infrastructure. One Operating System.',
  96.             'og_description' => 'HoneyBee connects Business ERP, Project ERP, HoneyCore Edge EMS, AI and mobile field operations in one ecosystem — so business, project, finance, site, asset and energy data work together.',
  97.             'subscribed' => $subscribed,
  98.             'packageDetails' => GeneralConstant::$packageDetails,
  99.         ]);
  101.         // GR2 (GROWTH) — a landing via a GR1 backlink (?ref=<surface>&t=<hash>) records one
  102.         // viral_touch row + drops the attribution cookie. Fully guarded: never breaks the page.
  103.         $viralToken = \ApplicationBundle\Modules\LeadGen\Service\ViralAttributionService::capture($em, $request);
  104.         return \ApplicationBundle\Modules\LeadGen\Service\ViralAttributionService::attachCookie($response, $viralToken);
  105.     }
  107.     // about us
  108.     public function CentralAboutUsPageAction()
  109.     {
  110.         return $this->render('@HoneybeeWeb/pages/about_us.html.twig', array(
  111.                 'page_title'     => 'About HoneyBee | Building the Operating System for Project Businesses & Energy Infrastructure',
  112.                 'og_title'       => 'About HoneyBee | Building the Operating System for Project Businesses & Energy Infrastructure',
  113.                 'og_description' => 'HoneyBee is a Germany/EU + Singapore-oriented software ecosystem connecting Business ERP, Project ERP, HoneyCore Edge EMS, AI, and mobile operations — with engineering, development, implementation, and regional support from Bangladesh.',
  114.                 'packageDetails' => GeneralConstant::$packageDetails,
  115.         ));
  116.     }
  118.     // Contact page
  119.     public function CentralContactPageAction(Request $request)
  120.     {
  122.         $em = $this->getDoctrine()->getManager('company_group');
  124.         if ($request->isXmlHttpRequest()) {
  126.             $email = $request->request->get('email');
  128.             if ($email) {
  129.                 // Enrich the message with the 3-step form selectors (need / company type / phone),
  130.                 // and persist any uploaded workflow/site-requirement file (graceful if absent).
  131.                 $bodyParts = [trim((string) $request->request->get('message', ''))];
  132.                 $need = trim((string) $request->request->get('enquiry_need', ''));
  133.                 $companyType = trim((string) $request->request->get('company_type', ''));
  134.                 $phone = trim((string) $request->request->get('phone', ''));
  135.                 if ($need !== '')        { $bodyParts[] = 'Need: ' . $need; }
  136.                 if ($companyType !== '') { $bodyParts[] = 'Company type: ' . $companyType; }
  137.                 if ($phone !== '')       { $bodyParts[] = 'Phone: ' . $phone; }
  139.                 $uploaded = $request->files->get('workflow_file');
  140.                 if ($uploaded) {
  141.                     try {
  142.                         $projectDir = $this->getParameter('kernel.project_dir');
  143.                         $relDir = 'uploads/contact/' . date('Y/m');
  144.                         $absDir = rtrim($projectDir, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR . 'web' . DIRECTORY_SEPARATOR . str_replace('/', DIRECTORY_SEPARATOR, $relDir);
  145.                         if (!is_dir($absDir)) { @mkdir($absDir, 0775, true); }
  146.                         $ext  = method_exists($uploaded, 'guessExtension') ? ($uploaded->guessExtension() ?: 'dat') : 'dat';
  147.                         $name = 'contact_' . date('YmdHis') . '_' . mt_rand(1000, 9999) . '.' . $ext;
  148.                         $uploaded->move($absDir, $name);
  149.                         $bodyParts[] = 'Attachment: /' . $relDir . '/' . $name;
  150.                     } catch (\Throwable $e) { /* non-fatal: still save the message */ }
  151.                 }
  153.                 $entityTicket = new EntityTicket();
  154.                 $entityTicket->setEmail($email);
  155.                 $entityTicket->setName($request->request->get('name'));
  156.                 $entityTicket->setTitle($request->request->get('subject'));
  157.                 $entityTicket->setTicketBody(implode("\n", array_filter($bodyParts)));
  159.                 $em->persist($entityTicket);
  160.                 $em->flush();
  162.                 $this->get('app.commercial_journey_service')->captureExistingObject('ticket', $entityTicket, 'talk_to_sales');
  164.                 return new JsonResponse([
  165.                     'success' => true,
  166.                     'message' => 'Your message has been sent successfully. Our team will reply soon.'
  167.                 ]);
  168.             }
  170.             return new JsonResponse([
  171.                 'success' => false,
  172.                 'message' => 'Invalid email address.'
  173.             ]);
  174.         }
  176.         return $this->render('@HoneybeeWeb/pages/contact.html.twig', array(
  177.             'page_title' => 'Request a HoneyBee Project Solution | HoneyCore Edge+, IoT, Billing & AI Deployment',
  178.             'og_title' => 'Request a HoneyBee Project Solution | HoneyCore Edge+, IoT, Billing & AI Deployment',
  179.             'og_description' => 'Tell us about your EPC, energy asset, HoneyCore Edge+ or multi-site project. A HoneyBee solutions engineer will respond with a tailored deployment plan.',
  180.         ));
  181.         
  182.     }
  184.     // blogs
  185.     public function CentralBlogsPageAction(Request $request)
  186.     {
  187.         $em = $this->getDoctrine()->getManager('company_group');
  189.         $topicDetails = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateTopic')->findAll();
  190.         $repo         = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog');
  192.         // ── Fetch featured blog separately (always, regardless of page) ──
  193.         $featuredBlog = $repo->findOneBy(['isPrimaryBlog' => true]);
  195.         // ── Pagination ──
  196.         $page       = max(1, (int) $request->query->get('page', 1));
  197.         $limit      = 6;
  198.         $totalBlogs = count($repo->findAll());
  199.         $totalPages = max(1, (int) ceil($totalBlogs / $limit));
  200.         $page       = min($page, $totalPages);
  201.         $offset     = ($page - 1) * $limit;
  203.         $blogDetails = $repo->findBy([], ['Id' => 'DESC'], $limit, $offset);
  205.         return $this->render('@HoneybeeWeb/pages/blogs.html.twig', [
  206.             'page_title'   => 'Blogs',
  207.             'topics'       => $topicDetails,
  208.             'blogs'        => $blogDetails,
  209.             'featuredBlog' => $featuredBlog,
  210.             'currentPage'  => $page,
  211.             'totalPages'   => $totalPages,
  212.             'totalBlogs'   => $totalBlogs,
  213.         ]);
  214.     }
  215.     // product
  216.     public function CentralProductPageAction()
  217.     {
  218.         return $this->render('@HoneybeeWeb/pages/product.html.twig', array(
  219.             'page_title' => 'HoneyBee Platform | One ecosystem, four connected layers',
  220.             'og_description' => 'Business ERP, Project ERP, HoneyCore Edge EMS, AI and mobile — one connected platform, not bolted-together tools.',
  221.         ));
  222.     }
  224.     // ── Phase 2 marketing pages (website restructure) ──
  225.     public function CentralProjectErpPageAction()
  226.     {
  227.         return $this->render('@HoneybeeWeb/pages/project_erp.html.twig', array(
  228.             'page_title' => 'Project ERP for EPC, Engineering & Solar | HoneyBee',
  229.             'og_description' => 'Control every project from quotation to cash collection: BoQ, procurement, site execution, milestone billing, retention, O&M, profitability — plus HoneyCore Edge+ project workflows.',
  230.         ));
  231.     }
  233.     public function CentralBusinessErpPageAction()
  234.     {
  235.         return $this->render('@HoneybeeWeb/pages/business_erp.html.twig', array(
  236.             'page_title' => 'Business ERP for SMEs | HR, Accounts, Inventory, CRM — HoneyBee',
  237.             'og_description' => 'Affordable, modular Business ERP for growing SMEs in Europe and Singapore. Start small, expand when ready — from €7.99/user/month.',
  238.         ));
  239.     }
  241.     public function CentralEdgePageAction()
  242.     {
  243.         return $this->render('@HoneybeeWeb/pages/honeycore_edge.html.twig', array(
  244.             'page_title' => 'HoneyCore Edge EMS | Energy & Site Intelligence — HoneyBee',
  245.             'og_description' => 'Connect solar PV, grid, generators, batteries, meters and sensors with O&M, billing, finance and reporting through HoneyCore Edge EMS site intelligence.',
  246.         ));
  247.     }
  249.     public function CentralEdgeProjectsPageAction()
  250.     {
  251.         return $this->render('@HoneybeeWeb/pages/honeycore_edge_projects.html.twig', array(
  252.             'page_title' => 'HoneyCore Edge+ Design & Quotation Software | HoneyBee',
  253.             'og_description' => 'Turn site requirements into HoneyCore Edge+ architecture, sensor/meter schedules, BoQ, quotation, commissioning checklist and O&M workflow.',
  254.         ));
  255.     }
  257.     public function CentralExperiencePageAction()
  258.     {
  259.         return $this->render('@HoneybeeWeb/pages/experience.html.twig', array(
  260.             'page_title' => 'Experience & Proof | HoneyBee',
  261.             'og_description' => 'Built from real ERP, project, HoneyCore Edge EMS and SME digital-transformation experience — with Germany/EU product focus and a Singapore SaaS base.',
  262.         ));
  263.     }
  265.     public function CentralTrustPageAction()
  266.     {
  267.         return $this->render('@HoneybeeWeb/pages/trust_governance.html.twig', array(
  268.             'page_title' => 'Trust & Governance | Security & Standards — HoneyBee',
  269.             'og_description' => 'Operator-owned data, RBAC, audit trails, NIS2-aware governance and a clear, no-overclaim standards map with claim-control categories.',
  270.         ));
  271.     }
  273.     // ── Self-serve pricing: server-authoritative price preview (cart calls this on every change) ──
  274.     public function CentralPricePreviewAction(Request $request)
  275.     {
  276.         $plan   = (string) $request->request->get('plan', 'core');
  277.         $users  = (int) $request->request->get('users', 0);
  278.         $admins = (int) $request->request->get('admins', 0);
  279.         $ml     = (int) $request->request->get('ml_users', 0);
  280.         $cycle  = $request->request->get('cycle', 'monthly') === 'yearly' ? 'yearly' : 'monthly';
  281.         $addons = (array) $request->request->get('addons', []);
  282.         // Keep only known add-on ids (never trust the client list blindly).
  283.         $catalogue = GeneralConstant::$subscriptionAddOns;
  284.         $addons = array_values(array_intersect($addons, array_keys($catalogue)));
  286.         $svc = new \CompanyGroupBundle\Modules\Api\Service\PricingService();
  287.         $breakdown = $svc->getPriceBreakdown($users, $admins, $ml, $cycle, $plan, $addons);
  288.         // attach the resolved add-on display rows for the cart
  289.         $addonRows = [];
  290.         foreach ($addons as $id) {
  291.             $addonRows[] = ['id' => $id, 'name' => $catalogue[$id]['name'], 'euMonthly' => (float) $catalogue[$id]['euMonthly']];
  292.         }
  293.         $breakdown['addon_rows'] = $addonRows;
  294.         return new JsonResponse(['ok' => true, 'breakdown' => $breakdown]);
  295.     }
  297.     // ── Investor Snapshot (Phase C) ──
  298.     public function CentralInvestorPageAction()
  299.     {
  300.         return $this->render('@HoneybeeWeb/pages/investor_snapshot.html.twig', array(
  301.             'page_title'     => 'Investor Snapshot | HoneyBee — Business + Energy Infrastructure OS',
  302.             'og_description' => 'HoneyBee is a vertical operating system for project-based energy, engineering and industrial companies — positioning, ICP, revenue model and defensibility. No invented metrics.',
  303.         ));
  304.     }
  306.     // ── Competitor comparison pages (Phase C) ──
  307.     public function CentralComparePageAction($slug)
  308.     {
  309.         $meta = [
  310.             'odoo'                       => ['HoneyBee vs Odoo | Project & Energy ERP Comparison', 'Odoo is a broad ERP suite. HoneyBee is built around project execution, EPC workflows, field operations and energy-infrastructure intelligence.'],
  311.             'zoho'                       => ['HoneyBee vs Zoho | ERP for Project & Energy Companies', 'Zoho covers general business apps. HoneyBee connects ERP, project execution, finance, O&M and HoneyCore energy data in one workflow.'],
  312.             'sap-business-one'           => ['HoneyBee vs SAP Business One | Project ERP Comparison', 'SAP Business One suits general operations. HoneyBee adds deep EPC/project execution and energy-infrastructure intelligence.'],
  313.             'microsoft-business-central' => ['HoneyBee vs Microsoft Business Central | Comparison', 'Business Central is a broad ERP. HoneyBee is purpose-built for project-based energy, engineering and industrial companies.'],
  314.             'monday-clickup'             => ['HoneyBee vs Monday / ClickUp | Beyond Task Management', 'Monday and ClickUp manage tasks. HoneyBee connects tasks with quotation, BoQ, procurement, billing, finance and energy data.'],
  315.             'excel'                      => ['HoneyBee vs Excel | From Spreadsheets to an Operating System', 'Excel is flexible but fragile. HoneyBee gives structure, audit trail, approvals, real-time data and automation.'],
  316.             'scada-ems'                  => ['HoneyBee vs SCADA / EMS Dashboards | Asset Data to Business', 'SCADA/EMS tools monitor assets. HoneyBee connects asset data with ERP, O&M, billing, reporting and AI.'],
  317.         ];
  318.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  319.         return $this->render('@HoneybeeWeb/pages/compare/' . $slug . '.html.twig', array(
  320.             'page_title'     => $meta[$slug][0],
  321.             'og_description' => $meta[$slug][1],
  322.             'compare_slug'   => $slug,
  323.         ));
  324.     }
  326.     // ── SEO solution landing pages (Phase C) ──
  327.     public function CentralSolutionPageAction($slug)
  328.     {
  329.         $meta = [
  330.             'erp-for-solar-epc'      => ['ERP for Solar EPC Companies | HoneyBee Project ERP', 'Project ERP for solar EPC: quotation, BoQ, procurement, site execution, milestone billing, O&M and HoneyCore Edge EMS energy intelligence.'],
  331.             'erp-for-engineering'    => ['ERP for Engineering Companies | HoneyBee Project ERP', 'Control engineering projects from quotation to delivery, billing and profitability with HoneyBee Project ERP.'],
  332.             'erp-for-construction'   => ['ERP for Construction Project Companies | HoneyBee', 'BoQ, procurement, site execution, milestone billing and retention for construction project companies.'],
  333.             'erp-for-om'             => ['ERP for O&M Companies | HoneyBee', 'Connect O&M workflows with billing, reporting and energy-asset data through HoneyBee and HoneyCore Edge EMS.'],
  334.             'erp-for-trading'        => ['ERP for Trading & Distribution Companies | HoneyBee', 'HR, accounts, inventory, sales, purchase and CRM for trading and distribution companies.'],
  335.             'project-erp-bangladesh' => ['Project ERP for Bangladesh SMEs | HoneyBee', 'Affordable project ERP for Bangladesh SMEs — quotation, procurement, site execution, billing and reporting.'],
  336.             'project-erp-singapore'  => ['Project ERP for Singapore SMEs | HoneyBee', 'Project ERP for Singapore SMEs and project-based companies — execution, finance and reporting in one system.'],
  337.             'project-erp-germany'    => ['Project ERP for German Energy Companies | HoneyBee', 'Project ERP for German energy and engineering companies, DATEV-ready export and GoBD-aligned audit trail where implemented.'],
  338.             'honeycore-solar-pv'     => ['HoneyCore for Solar PV Monitoring | HoneyBee', 'HoneyCore Edge EMS connects solar PV, inverters and meters with O&M, billing, reporting and AI.'],
  339.             'honeycore-hybrid-energy'=> ['HoneyCore for Hybrid Energy Systems | HoneyBee', 'Monitor solar, battery, generator and grid in hybrid energy systems with HoneyCore Edge EMS.'],
  340.             'honeycore-cold-chain'   => ['HoneyCore for Cold Chain & Healthcare Infrastructure | HoneyBee', 'Temperature, energy and utility monitoring for cold-chain and healthcare infrastructure with HoneyCore Edge EMS.'],
  341.             'honeycore-agri-pv'      => ['HoneyCore for Agri-PV & Irrigation | HoneyBee', 'Connect solar generation, soil and irrigation data with HoneyCore Edge EMS for Agri-PV and solar irrigation.'],
  342.         ];
  343.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  344.         return $this->render('@HoneybeeWeb/pages/solutions/' . $slug . '.html.twig', array(
  345.             'page_title'     => $meta[$slug][0],
  346.             'og_description' => $meta[$slug][1],
  347.             'solution_slug'  => $slug,
  348.         ));
  349.     }
  351.     // ── Calculators (Phase D) ──
  352.     public function CentralToolPageAction(Request $request, $slug)
  353.     {
  354.         $meta = [
  355.             'cost-leakage-calculator'   => ['Project Cost Leakage Calculator | HoneyBee', 'Estimate the hidden annual loss from delays, procurement leakage, billing delays and inventory loss — and the right HoneyBee path.'],
  356.             'roi-calculator'            => ['ERP ROI Calculator | HoneyBee', 'Estimate time saved and monthly savings from HoneyBee across approvals, invoices and projects.'],
  357.             'site-assessment-estimator' => ['HoneyCore Site Assessment Estimator | HoneyBee', 'Estimate your HoneyCore site assessment scope from sites, PV capacity, meters, inverters and protocols.'],
  358.             'rooftop-estimate'          => ['Instant Solar Estimate | HoneyBee 360', 'Enter your address and monthly bill — get an instant indicative PV size, annual yield, bill saving and payback, with every figure honestly tagged. Powered by PVGIS yield data.'],
  359.         ];
  360.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  362.         // ── FUNNEL-3: the logged-in APPLICANT's detail delta on the public studio —
  363.         // an owned saved design opens for editing (?mydesign=N) and the offer form
  364.         // pre-fills from the account. Strictly additive + fail-soft: anonymous
  365.         // visitors and every other tool page render exactly as before.
  366.         $myDesign = null;
  367.         $applicant = null;
  368.         if ($slug === 'rooftop-estimate') {
  369.             try {
  370.                 $session = $request->getSession();
  371.                 if ((int) $session->get(UserConstants::USER_TYPE, 0) === UserConstants::USER_TYPE_APPLICANT
  372.                     && (int) $session->get(UserConstants::USER_ID, 0) > 0) {
  373.                     $applicant = array(
  374.                         'name'  => (string) $session->get(UserConstants::USER_NAME, ''),
  375.                         'email' => (string) $session->get(UserConstants::USER_EMAIL, ''),
  376.                     );
  377.                     $pid = (int) $request->query->get('mydesign', 0);
  378.                     if ($pid > 0) {
  379.                         $em = $this->getDoctrine()->getManager('company_group');
  380.                         $project = (new Hb360ProjectService($em))
  381.                             ->findOwned($pid, (int) $session->get(UserConstants::USER_ID, 0));
  382.                         if ($project && $project->getDesignJson()) {
  383.                             $dj = json_decode((string) $project->getDesignJson(), true);
  384.                             if (is_array($dj) && isset($dj['payload']) && is_array($dj['payload'])) {
  385.                                 $myDesign = array(
  386.                                     'id'      => (int) $project->getId(),
  387.                                     'title'   => (string) ($project->getTitle() ?: ('Design #' . $project->getId())),
  388.                                     'address' => (string) $project->getAddress(),
  389.                                     'payload' => $dj['payload'],
  390.                                     'summary' => FunnelManifestCore::summary($dj['payload']),
  391.                                 );
  392.                             }
  393.                         }
  394.                     }
  395.                 }
  396.             } catch (\Throwable $e) {
  397.                 $myDesign = null; // the public page never breaks over account extras
  398.             }
  399.         }
  401.         return $this->render('@HoneybeeWeb/pages/tools/' . $slug . '.html.twig', array(
  402.             'page_title'     => $meta[$slug][0],
  403.             'og_description' => $meta[$slug][1],
  404.             'tool_slug'      => $slug,
  405.             'maps_key'       => $this->mapsBrowserKey(),
  406.             'my_design'      => $myDesign,
  407.             'applicant'      => $applicant,
  408.         ));
  409.     }
  411.     // Failsafe default — used when no parameter is configured in parameters.yml.
  412.     const HB_MAPS_KEY = 'AIzaSyBJxyUy8a_U2rSdIUApVDoK_dcvgGkoeDk';
  414.     /** Server-side Google key (Geocoding + Solar API): parameter `google_maps_api_key`, else the built-in default. Never throws. */
  415.     protected function mapsKey()
  416.     {
  417.         if ($this->container->hasParameter('google_maps_api_key')) {
  418.             $k = $this->container->getParameter('google_maps_api_key');
  419.             if (is_string($k) && trim($k) !== '') { return $k; }
  420.         }
  421.         return self::HB_MAPS_KEY;
  422.     }
  424.     /** Client-side (browser) Google key for the map JS: parameter `google_maps_browser_key`, else the server key, else default. Never throws. */
  425.     protected function mapsBrowserKey()
  426.     {
  427.         if ($this->container->hasParameter('google_maps_browser_key')) {
  428.             $k = $this->container->getParameter('google_maps_browser_key');
  429.             if (is_string($k) && trim($k) !== '') { return $k; }
  430.         }
  431.         return $this->mapsKey();
  432.     }
  434.     /**
  435.      * FUNNEL-1 — sliding-window rate guard for the PUBLIC estimator/studio endpoints
  436.      * (they had none; /auto spends metered Google calls per request). Decision math is
  437.      * pure `PublicRateLimitCore::decide` (selftested); the store is best-effort tmp
  438.      * files — ANY limiter-infrastructure failure allows the request (the limiter guards
  439.      * metered APIs; it must never take the public page down). Per-box override:
  440.      * container parameter `hb360_rate_<bucket>_per_hour`, read with a fallback — never
  441.      * a %param% DI reference.
  442.      *
  443.      * @return JsonResponse|null a 429 refusal, or null = proceed
  444.      */
  445.     protected function hb360RateGuard(Request $request, $bucket, $defaultPerHour)
  446.     {
  447.         try {
  448.             $limit = (int) $defaultPerHour;
  449.             $key = 'hb360_rate_' . $bucket . '_per_hour';
  450.             if ($this->container->hasParameter($key)) {
  451.                 $v = (int) $this->container->getParameter($key);
  452.                 if ($v > 0) { $limit = $v; }
  453.             }
  454.             $token = (string) $request->cookies->get('hb360_anon', '');
  455.             $keys = PublicRateLimitCore::keysFor((string) $request->getClientIp(), $token);
  456.             // FUNNEL-3: a signed-in account gets its own bucket too (cookie-clearing
  457.             // can't reset it; a shared office IP doesn't starve individual accounts).
  458.             $acct = (int) $request->getSession()->get(UserConstants::USER_ID, 0);
  459.             if ($acct > 0) {
  460.                 $keys[] = 'acct:' . $acct;
  461.             }
  462.             $res = PublicRateLimitCore::checkAndRecord($bucket, $keys, $limit);
  463.             if (!$res['allowed']) {
  464.                 $mins = max(1, (int) ceil($res['retry_after'] / 60));
  465.                 return new JsonResponse([
  466.                     'ok' => false,
  467.                     'rate_limited' => true,
  468.                     'retry_after_s' => (int) $res['retry_after'],
  469.                     'error' => 'Too many requests from your connection — please wait about '
  470.                         . $mins . ' minute' . ($mins === 1 ? '' : 's') . ' and try again.',
  471.                 ], 429);
  472.             }
  473.         } catch (\Throwable $e) {
  474.             // fail-open by design (see docblock)
  475.         }
  476.         return null;
  477.     }
  479.     // ── Rooftop estimate — MANUAL draw endpoint (area + coords from the map) ──
  480.     public function CentralRooftopCalcAction(Request $request)
  481.     {
  482.         if ($refused = $this->hb360RateGuard($request, 'calc', PublicRateLimitCore::DEFAULT_CALC_PER_HOUR)) {
  483.             return $refused;
  484.         }
  485.         $lat     = (float) $request->request->get('lat', 0);
  486.         $lng     = (float) $request->request->get('lng', 0);
  487.         $area    = (float) $request->request->get('area_m2', 0);
  488.         $mode    = $request->request->get('mode', 'roof');
  489.         $monthly = (float) $request->request->get('monthly_kwh', 0);
  490.         $bill    = (float) $request->request->get('monthly_bill', 0);
  491.         $tariff  = (float) $request->request->get('tariff', 0.22);
  492.         $tilt    = (float) $request->request->get('tilt', 10);
  493.         $src     = $request->request->get('roof_source') === 'manual' ? 'manual' : 'map';
  495.         // ── SDS2 (additive): the studio's live economics panel sends the REAL packed kWp plus
  496.         // the zone's pitch/azimuth/mount-mode. `kwp` absent/0 ⇒ the legacy path below runs
  497.         // byte-identical. SDS2 responses are TRANSIENT (no hb360 anon-project upsert — a live
  498.         // drag must not overwrite the visitor's saved estimate; persistence is SDS3).
  499.         $sdsKwp = (float) $request->request->get('kwp', 0);
  500.         if ($sdsKwp > 0) {
  501.             if ($lat == 0) {
  502.                 return new JsonResponse(['ok' => false, 'error' => 'Draw a roof outline on the map first.']);
  503.             }
  504.             $res = $this->computeSdsZoneEconomics($lat, $lng, $area, $sdsKwp, [
  505.                 'pitch_deg'   => (float) $request->request->get('pitch_deg', 0),
  506.                 'azimuth_deg' => (float) $request->request->get('azimuth_deg', 180),
  507.                 'mount_mode'  => $request->request->get('mount_mode') === 'ew' ? 'ew' : 'south',
  508.                 'module_wp'   => (float) $request->request->get('module_wp', 450),
  509.                 'total_kwp'   => (float) $request->request->get('total_kwp', 0),
  510.             ], $monthly, $bill, $tariff);
  511.             return new JsonResponse($res);
  512.         }
  514.         if ($area <= 5 || $lat == 0) {
  515.             return new JsonResponse(['ok' => false, 'error' => 'Draw a roof outline on the map first.']);
  516.         }
  517.         $res = $this->computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthly, $bill, $tariff, null, $src);
  518.         $res['roof_source'] = $src === 'manual' ? 'manual area' : 'Map outline';
  519.         $res['lat'] = $lat; $res['lng'] = $lng;
  520.         return $this->hb360Respond($request, $res, [
  521.             'mode' => $mode, 'monthly_kwh' => $monthly, 'monthly_bill' => $bill,
  522.             'tariff' => $tariff, 'tilt' => $tilt, 'area_m2' => $area, 'roof_source' => $src,
  523.         ]);
  524.     }
  526.     // ── Rooftop estimate — AUTO from ADDRESS (geocode → Google Solar API → OSM footprint → PVGIS) ──
  527.     public function CentralRooftopAutoAction(Request $request)
  528.     {
  529.         // the tight cap — every /auto call can spend metered Google (geocode + Solar API)
  530.         if ($refused = $this->hb360RateGuard($request, 'auto', PublicRateLimitCore::DEFAULT_AUTO_PER_HOUR)) {
  531.             return $refused;
  532.         }
  533.         $address = trim((string) $request->request->get('address', ''));
  534.         $mode    = $request->request->get('mode', 'roof');
  535.         $monthly = (float) $request->request->get('monthly_kwh', 0);
  536.         $bill    = (float) $request->request->get('monthly_bill', 0);
  537.         $tariff  = (float) $request->request->get('tariff', 0.22);
  538.         $tilt    = (float) $request->request->get('tilt', 10);
  540.         if ($address === '') {
  541.             return new JsonResponse(['ok' => false, 'error' => 'Enter an address first.']);
  542.         }
  543.         $geo = $this->geocodeAddress($address);
  544.         if ($geo === null) {
  545.             return new JsonResponse(['ok' => false, 'error' => 'Address not found — try a more specific address.']);
  546.         }
  547.         $lat = $geo['lat']; $lng = $geo['lng'];
  549.         // Tier 1: Google Solar API (best — real roof + panel layout). Null when API disabled / no coverage.
  550.         $preset = $this->solarApiDesign($lat, $lng);
  551.         $roofSource = null; $area = null; $src = 'map';
  552.         if ($preset !== null) {
  553.             $area = $preset['roof_area']; $roofSource = 'Google Solar API'; $src = 'solar_api';
  554.         } else {
  555.             // Tier 2: OSM building footprint (free, global where mapped).
  556.             $area = $this->osmBuildingArea($lat, $lng);
  557.             if ($area !== null) { $roofSource = 'OSM building footprint'; $src = 'osm'; }
  558.         }
  560.         if ($area === null || $area < 10) {
  561.             // Tier 3: hand off to manual draw at the geocoded location.
  562.             return new JsonResponse([
  563.                 'ok' => false, 'needs_manual' => true,
  564.                 'lat' => $lat, 'lng' => $lng, 'formatted_address' => $geo['formatted'],
  565.                 'error' => 'Could not auto-detect the roof at this address — trace it on the map below.',
  566.             ]);
  567.         }
  569.         $res = $this->computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthly, $bill, $tariff, $preset, $src);
  570.         $res['lat'] = $lat; $res['lng'] = $lng;
  571.         $res['formatted_address'] = $geo['formatted'];
  572.         $res['roof_source'] = $roofSource;
  573.         return $this->hb360Respond($request, $res, [
  574.             'mode' => $mode, 'monthly_kwh' => $monthly, 'monthly_bill' => $bill,
  575.             'tariff' => $tariff, 'tilt' => $tilt, 'address' => $address, 'roof_source' => $src,
  576.         ]);
  577.     }
  579.     /**
  580.      * H1b: wrap an estimate response — persist the guest's estimate as their ONE
  581.      * anonymous Hb360Project (keyed by the `hb360_anon` cookie) so it survives
  582.      * the trip through the signup wall. Strictly fail-safe: if the central
  583.      * schema/table isn't there yet, the public estimator answers exactly as
  584.      * before, just without a saved copy.
  585.      */
  586.     private function hb360Respond(Request $request, array $res, array $inputs)
  587.     {
  588.         $token = null;
  589.         if (!empty($res['ok'])) {
  590.             try {
  591.                 $token = (string) $request->cookies->get('hb360_anon', '');
  592.                 if (!preg_match('/^[a-f0-9]{32,64}$/', $token)) {
  593.                     $token = Hb360ProjectService::newToken();
  594.                 }
  595.                 $em = $this->getDoctrine()->getManager('company_group');
  596.                 $project = (new Hb360ProjectService($em))->upsertForToken($token, [
  597.                     'address'  => (string) ($res['formatted_address'] ?? ($inputs['address'] ?? '')),
  598.                     'lat'      => $res['lat'] ?? null,
  599.                     'lng'      => $res['lng'] ?? null,
  600.                     'inputs'   => $inputs,
  601.                     'estimate' => $res,
  602.                 ]);
  603.                 $res['saved'] = ['project_id' => (int) $project->getId()];
  604.             } catch (\Throwable $e) {
  605.                 $token = null; // saving is an enhancement, never a gate
  606.             }
  607.         }
  608.         $response = new JsonResponse($res);
  609.         if ($token) {
  610.             // 90 days, whole site, httpOnly (JS never needs it — the server reads it).
  611.             $response->headers->setCookie(new Cookie('hb360_anon', $token, time() + 90 * 86400, '/', null, false, true));
  612.         }
  613.         return $response;
  614.     }
  616.     /**
  617.      * FUNNEL-1 — the ONE deliberate public write: "Save design". The visitor's studio
  618.      * design (the client exportDesign() payload) becomes their single anonymous draft
  619.      * (hb360_project.design_json, the H1b one-row-per-visitor pattern), keyed by the
  620.      * same `hb360_anon` cookie the estimate save uses — so the EXISTING login attach
  621.      * hook carries the design across the signup wall untouched.
  622.      *
  623.      * Guard order: rate limit → wire-size cap → shape → FunnelManifestCore::validate
  624.      * (caps + geometry sanity + the portability rule: tenant library ids refused).
  625.      * Storage is fail-SAFE for the page but HONEST for the click: if the central
  626.      * schema/column is missing, the response says saving is unavailable — it never
  627.      * claims "saved" for a row that does not exist.
  628.      */
  629.     public function CentralRooftopDesignSaveAction(Request $request)
  630.     {
  631.         if ($refused = $this->hb360RateGuard($request, 'save', PublicRateLimitCore::DEFAULT_SAVE_PER_HOUR)) {
  632.             return $refused;
  633.         }
  634.         $raw = (string) $request->getContent();
  635.         if (strlen($raw) > FunnelManifestCore::MAX_BYTES) {
  636.             return new JsonResponse(['ok' => false, 'error' => 'This design is too large to save online ('
  637.                 . round(strlen($raw) / 1024) . ' KB — the limit is '
  638.                 . round(FunnelManifestCore::MAX_BYTES / 1024) . ' KB).'], 413);
  639.         }
  640.         $body = json_decode($raw, true);
  641.         $payload = (is_array($body) && isset($body['payload']) && is_array($body['payload'])) ? $body['payload'] : null;
  642.         if ($payload === null) {
  643.             return new JsonResponse(['ok' => false, 'error' => 'Malformed design payload.'], 400);
  644.         }
  645.         $v = FunnelManifestCore::validate($payload, strlen($raw));
  646.         if (!$v['ok']) {
  647.             return new JsonResponse(['ok' => false, 'error' => implode(' ', $v['errors'])], 422);
  648.         }
  650.         $token = (string) $request->cookies->get('hb360_anon', '');
  651.         if (!preg_match('/^[a-f0-9]{32,64}$/', $token)) {
  652.             $token = Hb360ProjectService::newToken();
  653.         }
  654.         $hash = FunnelManifestCore::hash($payload);
  655.         $stored = [
  656.             'format'   => FunnelManifestCore::FORMAT,
  657.             'hash'     => $hash,
  658.             'saved_at' => date('c'),
  659.             'payload'  => $payload,
  660.         ];
  661.         $meta = [
  662.             'address' => (string) (isset($body['address']) ? $body['address'] : ''),
  663.             'lat'     => isset($payload['lat']) ? $payload['lat'] : null,
  664.             'lng'     => isset($payload['lng']) ? $payload['lng'] : null,
  665.         ];
  666.         try {
  667.             $em = $this->getDoctrine()->getManager('company_group');
  668.             $svc = new Hb360ProjectService($em);
  669.             // FUNNEL-3: a signed-in applicant editing an OWNED design saves onto THAT
  670.             // row (own-checked), never onto the anon draft. Everyone else keeps the
  671.             // one-anon-draft-per-visitor path unchanged.
  672.             $owned = $this->applicantOwnedProject($request, (int) (isset($body['project_id']) ? $body['project_id'] : 0), $svc);
  673.             $project = $owned !== null
  674.                 ? $svc->saveDesignForProject($owned, $stored, $meta)
  675.                 : $svc->saveDesignForToken($token, $stored, $meta);
  676.         } catch (\Throwable $e) {
  677.             // honest, not fake-saved: schema not migrated / DB hiccup
  678.             return new JsonResponse(['ok' => false,
  679.                 'error' => 'Saving is temporarily unavailable — your design stays in this browser tab.'], 503);
  680.         }
  681.         $response = new JsonResponse([
  682.             'ok' => true,
  683.             'saved' => [
  684.                 'project_id'  => (int) $project->getId(),
  685.                 'design_hash' => $hash,
  686.                 'summary'     => FunnelManifestCore::summary($payload),
  687.             ],
  688.         ]);
  689.         $response->headers->setCookie(new Cookie('hb360_anon', $token, time() + 90 * 86400, '/', null, false, true));
  690.         return $response;
  691.     }
  693.     /**
  694.      * FUNNEL-3 — resolve a project id to an OWNED row for the signed-in applicant, or
  695.      * null (not signed in / not theirs / no id). Ownership is findOwned's law — a
  696.      * foreign id yields null, never someone else's row.
  697.      */
  698.     private function applicantOwnedProject(Request $request, $projectId, Hb360ProjectService $svc)
  699.     {
  700.         $projectId = (int) $projectId;
  701.         if ($projectId <= 0) {
  702.             return null;
  703.         }
  704.         $session = $request->getSession();
  705.         if ((int) $session->get(UserConstants::USER_TYPE, 0) !== UserConstants::USER_TYPE_APPLICANT) {
  706.             return null;
  707.         }
  708.         $uid = (int) $session->get(UserConstants::USER_ID, 0);
  709.         if ($uid <= 0) {
  710.             return null;
  711.         }
  712.         return $svc->findOwned($projectId, $uid);
  713.     }
  715.     /**
  716.      * FUNNEL-2 — the routing rule rows for public resolution (fail-safe: any read problem
  717.      * = empty list, which resolves to the honest 'unrouted' refusal, never a guess).
  718.      * @return array[]|null null = the funnel is not configured on this box (table absent)
  719.      */
  720.     private function sdsFunnelRules()
  721.     {
  722.         try {
  723.             $em = $this->getDoctrine()->getManager('company_group');
  724.             if (!$em->getConnection()->getSchemaManager()->tablesExist(array('sds_funnel_routing'))) {
  725.                 return null;
  726.             }
  727.             $rules = array();
  728.             foreach ($em->getRepository(SdsFunnelRouting::class)->findAll() as $r) {
  729.                 $rules[] = array(
  730.                     'id' => (int) $r->getId(),
  731.                     'country_code' => $r->getCountryCode(),
  732.                     'app_id' => (int) $r->getAppId(),
  733.                     'priority' => (int) $r->getPriority(),
  734.                     'enabled' => (int) $r->getEnabledFlag(),
  735.                 );
  736.             }
  737.             return $rules;
  738.         } catch (\Throwable $e) {
  739.             return null;
  740.         }
  741.     }
  743.     /** Display name for a routed tenant (the consent copy must NAME the recipient). */
  744.     private function sdsFunnelTenantLabel($appId)
  745.     {
  746.         try {
  747.             $goc = $this->getDoctrine()->getManager('company_group')
  748.                 ->getRepository('CompanyGroupBundle\\Entity\\CompanyGroup')
  749.                 ->findOneBy(array('appId' => (int) $appId));
  750.             $name = $goc ? trim((string) $goc->getName()) : '';
  751.             return $name !== '' ? $name : ('Partner workspace #' . (int) $appId);
  752.         } catch (\Throwable $e) {
  753.             return 'Partner workspace #' . (int) $appId;
  754.         }
  755.     }
  757.     /**
  758.      * FUNNEL-2 — GET the would-be recipient for a country, so the consent copy can NAME
  759.      * the company BEFORE the visitor submits (DE requirement; copy is ENTWURF until
  760.      * counsel clears it). Returns only a display name — never rule internals.
  761.      */
  762.     public function CentralRooftopOfferTargetAction(Request $request)
  763.     {
  764.         if ($refused = $this->hb360RateGuard($request, 'offer', 30)) {
  765.             return $refused;
  766.         }
  767.         $country = (string) $request->query->get('country', '');
  768.         if (!FunnelRoutingCore::isValidCountry($country)) {
  769.             return new JsonResponse(['ok' => false, 'error' => 'Pick your country first.'], 422);
  770.         }
  771.         $rules = $this->sdsFunnelRules();
  772.         if ($rules === null) {
  773.             return new JsonResponse(['ok' => false, 'error' => 'Offers are not available yet on this site.'], 503);
  774.         }
  775.         $res = FunnelRoutingCore::resolve($rules, $country);
  776.         if (empty($res['ok'])) {
  777.             return new JsonResponse(['ok' => false, 'unrouted' => true,
  778.                 'error' => 'We do not have a solar partner for your country yet — your request would be recorded and we will contact you when one is available.']);
  779.         }
  780.         return new JsonResponse(['ok' => true, 'company' => $this->sdsFunnelTenantLabel($res['app_id'])]);
  781.     }
  783.     /**
  784.      * FUNNEL-2 — "Request offer": the visitor's SAVED design + their contact facts become
  785.      * ONE outbox row (status pending, or 'unrouted' STORED so the operator sees the
  786.      * demand). Delivery is the dispatch cron's job — this endpoint never talks to a
  787.      * tenant box. Consent is required and recorded; the response names the recipient.
  788.      */
  789.     public function CentralRooftopRequestOfferAction(Request $request)
  790.     {
  791.         if ($refused = $this->hb360RateGuard($request, 'offer', 30)) {
  792.             return $refused;
  793.         }
  794.         $body = json_decode((string) $request->getContent(), true);
  795.         if (!is_array($body)) {
  796.             return new JsonResponse(['ok' => false, 'error' => 'Malformed request.'], 400);
  797.         }
  798.         $name = trim((string) ($body['name'] ?? ''));
  799.         $email = trim((string) ($body['email'] ?? ''));
  800.         $phone = trim((string) ($body['phone'] ?? ''));
  801.         $country = trim((string) ($body['country'] ?? ''));
  802.         $message = trim((string) ($body['message'] ?? ''));
  803.         if (mb_strlen($name) < 2) {
  804.             return new JsonResponse(['ok' => false, 'error' => 'Enter your name.'], 422);
  805.         }
  806.         if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
  807.             return new JsonResponse(['ok' => false, 'error' => 'Enter a valid email address.'], 422);
  808.         }
  809.         if (!FunnelRoutingCore::isValidCountry($country)) {
  810.             return new JsonResponse(['ok' => false, 'error' => 'Pick your country.'], 422);
  811.         }
  812.         if (empty($body['consent'])) {
  813.             return new JsonResponse(['ok' => false, 'error' => 'Please confirm the consent checkbox — we can only send your design to a partner with your agreement.'], 422);
  814.         }
  816.         // the SAVED design is the subject — an OWNED row when the signed-in applicant
  817.         // named one (FUNNEL-3), else the visitor's one anon draft (FUNNEL-1)
  818.         $token = (string) $request->cookies->get('hb360_anon', '');
  819.         $project = null;
  820.         $stored = null;
  821.         try {
  822.             $em = $this->getDoctrine()->getManager('company_group');
  823.             $svc = new Hb360ProjectService($em);
  824.             $project = $this->applicantOwnedProject($request, (int) ($body['project_id'] ?? 0), $svc);
  825.             if ($project === null && preg_match('/^[a-f0-9]{32,64}$/', $token)) {
  826.                 $project = $svc->findLatestForToken($token);
  827.             }
  828.             if ($project && $project->getDesignJson()) {
  829.                 $dj = json_decode((string) $project->getDesignJson(), true);
  830.                 if (is_array($dj) && isset($dj['payload']) && is_array($dj['payload'])) {
  831.                     $stored = $dj;
  832.                 }
  833.             }
  834.         } catch (\Throwable $e) {
  835.             $stored = null;
  836.         }
  837.         if ($stored === null) {
  838.             return new JsonResponse(['ok' => false, 'error' => 'Save your design first — the offer is prepared from the saved layout.'], 422);
  839.         }
  841.         $rules = $this->sdsFunnelRules();
  842.         if ($rules === null) {
  843.             return new JsonResponse(['ok' => false, 'error' => 'Offers are not available yet on this site.'], 503);
  844.         }
  845.         $resolved = FunnelRoutingCore::resolve($rules, $country);
  847.         try {
  848.             $em = $this->getDoctrine()->getManager('company_group');
  849.             $h = new SdsFunnelHandoff();
  850.             $h->setHandoffUid(bin2hex(random_bytes(12))); // 24 hex — fits 'sdsf:'+uid in lead.source(50)
  851.             $h->setProjectId($project ? (int) $project->getId() : null);
  852.             $h->setManifestHash((string) ($stored['hash'] ?? ''));
  853.             $h->setManifestJson(json_encode($stored, JSON_UNESCAPED_UNICODE));
  854.             $h->setLeadJson(json_encode([
  855.                 'name' => mb_substr($name, 0, 255),
  856.                 'email' => mb_substr($email, 0, 255),
  857.                 'phone' => mb_substr($phone, 0, 64),
  858.                 'country_code' => strtoupper(substr($country, 0, 2)),
  859.                 'message' => mb_substr($message, 0, 2000),
  860.                 'consent_at' => date('c'),
  861.                 'source' => 'hb360-public-studio',
  862.             ], JSON_UNESCAPED_UNICODE));
  863.             $h->setCountryCode($country);
  864.             $h->setAddress((string) ($project ? $project->getAddress() : ''));
  865.             if (!empty($resolved['ok'])) {
  866.                 $h->setRuleId($resolved['rule_id']);
  867.                 $h->setTargetAppId($resolved['app_id']);
  868.                 $h->setStatus('pending');
  869.             } else {
  870.                 $h->setStatus('unrouted'); // stored — the operator sees the demand (EB 'unlinked' discipline)
  871.                 $h->setLastError('no routing rule matched country ' . strtoupper($country));
  872.             }
  873.             $em->persist($h);
  874.             $em->flush();
  875.         } catch (\Throwable $e) {
  876.             return new JsonResponse(['ok' => false, 'error' => 'Could not record your request right now — please try again in a moment.'], 503);
  877.         }
  879.         if (empty($resolved['ok'])) {
  880.             return new JsonResponse(['ok' => true, 'unrouted' => true,
  881.                 'note' => 'We do not have a solar partner for your country yet. Your request is recorded and we will contact you at ' . $email . ' when one is available.']);
  882.         }
  883.         return new JsonResponse(['ok' => true,
  884.             'company' => $this->sdsFunnelTenantLabel($resolved['app_id']),
  885.             'note' => 'Your design and contact details will be sent to ' . $this->sdsFunnelTenantLabel($resolved['app_id'])
  886.                 . ', who will prepare your offer and contact you at ' . $email . '.']);
  887.     }
  889.     /** H1c: public read-only view of a shared feasibility report (unguessable token). */
  890.     public function Hb360SharedAction($shareToken)
  891.     {
  892.         $project = null;
  893.         try {
  894.             $em = $this->getDoctrine()->getManager('company_group');
  895.             $project = (new Hb360ProjectService($em))->findByShareToken((string) $shareToken);
  896.         } catch (\Throwable $e) {
  897.             $project = null;
  898.         }
  899.         if (!$project) {
  900.             throw $this->createNotFoundException();
  901.         }
  902.         return $this->render('@HoneybeeWeb/pages/tools/hb360_shared.html.twig', array(
  903.             'page_title' => 'Shared Solar Feasibility Estimate | HoneyBee 360',
  904.             'project'    => $project,
  905.             'estimate'   => json_decode($project->getEstimateJson(), true),
  906.             'report'     => $project->getReportJson() ? json_decode($project->getReportJson(), true) : null,
  907.         ));
  908.     }
  910.     /**
  911.      * HB360 H1a: roof (T1, resolved by the caller) + PV sizing (T3, always via the
  912.      * one PV engine SolarEngineeringService inside Hb360EstimateService) + bill →
  913.      * saving/payback (T2-lite), every figure honesty-tagged.
  914.      */
  915.     private function computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthlyKwh, $monthlyBill, $tariff, $preset = null, $roofSource = 'map')
  916.     {
  917.         $yieldSource   = 'PVGIS';
  918.         $specificYield = $this->pvgisSpecificYield($lat, $lng, $tilt);
  919.         if ($specificYield === null) {
  920.             $specificYield = $this->fallbackYieldByLatitude($lat);
  921.             $yieldSource = 'climate estimate';
  922.         }
  924.         return (new Hb360EstimateService())->estimate([
  925.             'roofAreaM2'    => $area,
  926.             'roofSource'    => $roofSource,
  927.             'specificYield' => $specificYield,
  928.             'yieldSource'   => $yieldSource,
  929.             'monthlyKwh'    => $monthlyKwh,
  930.             'monthlyBill'   => $monthlyBill,
  931.             'tariff'        => $tariff,
  932.             'mode'          => $mode,
  933.             'preset'        => $preset,
  934.         ]);
  935.     }
  937.     /**
  938.      * SDS2: one studio ZONE → yield/cost/payback, same estimate family as the simple flow.
  939.      * The zone's plane(s) come from the ONE deterministic mapping in SdsEconCore (EW = the
  940.      * documented east+west PVGIS average); sizing snaps to the packed kWp; the €/kWp tier is
  941.      * picked from the WHOLE design's capacity (total_kwp) so zone costs sum consistently.
  942.      */
  943.     protected function computeSdsZoneEconomics($lat, $lng, $areaM2, $kwp, array $zone, $monthlyKwh, $monthlyBill, $tariff)
  944.     {
  945.         $planes = SdsEconCore::planesFor($zone['pitch_deg'], $zone['azimuth_deg'], $zone['mount_mode']);
  946.         $planeYields = [];
  947.         $yieldSource = 'PVGIS';
  948.         foreach ($planes as $p) {
  949.             $y = $this->pvgisYieldPlane($lat, $lng, $p['angle'], $p['aspect']);
  950.             $planeYields[] = ['yield' => $y, 'weight' => $p['weight'], 'angle' => $p['angle'], 'aspect' => $p['aspect']];
  951.         }
  952.         $sy = SdsEconCore::combineYields($planeYields);
  953.         if ($sy === null) {
  954.             // Any missing plane ⇒ fall back WHOLLY (a half-real EW average would be a lie).
  955.             $sy = $this->fallbackYieldByLatitude($lat);
  956.             $yieldSource = 'climate estimate';
  957.         }
  959.         $res = (new Hb360EstimateService())->estimate([
  960.             'roofAreaM2'    => $areaM2,
  961.             'roofSource'    => 'map',
  962.             'specificYield' => $sy,
  963.             'yieldSource'   => $yieldSource,
  964.             'monthlyKwh'    => $monthlyKwh,
  965.             'monthlyBill'   => $monthlyBill,
  966.             'tariff'        => $tariff,
  967.             'mode'          => 'roof', // the layout IS the size — never shrink to load here
  968.             'targetKwp'     => $kwp,
  969.             'moduleWp'      => $zone['module_wp'],
  970.             'rateBasisKwp'  => $zone['total_kwp'],
  971.         ]);
  972.         if (!empty($res['ok'])) {
  973.             $res['lat'] = $lat; $res['lng'] = $lng;
  974.             $res['sds'] = [
  975.                 'requested_kwp'  => $kwp,
  976.                 'mount_mode'     => $zone['mount_mode'],
  977.                 'pitch_deg'      => $zone['pitch_deg'],
  978.                 'azimuth_deg'    => $zone['azimuth_deg'],
  979.                 'rate_basis_kwp' => $zone['total_kwp'] > 0 ? $zone['total_kwp'] : $kwp,
  980.                 'planes'         => $planeYields,
  981.             ];
  982.         }
  983.         return $res;
  984.     }
  986.     /**
  987.      * SDS2: PVGIS specific yield (kWh/kWp/yr) for an arbitrary plane, CACHED per rounded
  988.      * (lat, lng, angle, aspect) — in-request static + a tmp-dir file cache (30 days; yield is
  989.      * climate data) — so live studio editing cannot hammer the PVGIS API. No schema, and every
  990.      * cache failure degrades to just calling PVGIS. Null on PVGIS failure.
  991.      */
  992.     protected function pvgisYieldPlane($lat, $lng, $angle, $aspect)
  993.     {
  994.         $f = $this->pvgisPlaneFigures($lat, $lng, $angle, $aspect);
  995.         return ($f !== null && $f['ey'] !== null && $f['ey'] > 0) ? (float) $f['ey'] : null;
  996.     }
  998.     /**
  999.      * SDS-REPORT: the FULL cached PVGIS figure set for a plane — annual E_y plus what the
  1000.      * same PVcalc response already contains: in-plane irradiation H(i)_y, the PVGIS-computed
  1001.      * loss components (l_aoi, l_spec, l_tg) and the 12 monthly E_m values. Same cache key/
  1002.      * file as before; legacy cache files (shape {ey}) are honored as ANNUAL-ONLY until a
  1003.      * successful refetch upgrades them — the report degrades honestly to the annual basis
  1004.      * in the meantime (never a fabricated monthly shape). Null on total failure.
  1005.      * @return array|null {ey, hi, l_aoi, l_spec, l_tg, monthly: float[12]|null}
  1006.      */
  1007.     protected function pvgisPlaneFigures($lat, $lng, $angle, $aspect)
  1008.     {
  1009.         static $memo = [];
  1010.         $key = SdsEconCore::cacheKey($lat, $lng, $angle, $aspect);
  1011.         if (array_key_exists($key, $memo)) { return $memo[$key]; }
  1013.         $annualOnly = null; // legacy-shape fallback when the refetch fails
  1014.         $file = null;
  1015.         try {
  1016.             $dir = sys_get_temp_dir() . DIRECTORY_SEPARATOR . 'hb_pvgis_cache';
  1017.             if (!is_dir($dir)) { @mkdir($dir, 0775, true); }
  1018.             $file = $dir . DIRECTORY_SEPARATOR . $key . '.json';
  1019.             if (is_file($file) && (time() - (int) @filemtime($file)) < 30 * 86400) {
  1020.                 $cached = json_decode((string) @file_get_contents($file), true);
  1021.                 if (is_array($cached) && array_key_exists('em', $cached)) {
  1022.                     // new shape — the full figure set
  1023.                     return $memo[$key] = [
  1024.                         'ey' => $cached['ey'] !== null ? (float) $cached['ey'] : null,
  1025.                         'hi' => isset($cached['hi']) && $cached['hi'] !== null ? (float) $cached['hi'] : null,
  1026.                         'l_aoi' => isset($cached['la']) && $cached['la'] !== null ? (float) $cached['la'] : null,
  1027.                         'l_spec' => isset($cached['ls']) && $cached['ls'] !== null ? (float) $cached['ls'] : null,
  1028.                         'l_tg' => isset($cached['lt']) && $cached['lt'] !== null ? (float) $cached['lt'] : null,
  1029.                         'monthly' => (isset($cached['em']) && is_array($cached['em']) && count($cached['em']) === 12)
  1030.                             ? array_map('floatval', $cached['em']) : null,
  1031.                     ];
  1032.                 }
  1033.                 if (is_array($cached) && array_key_exists('ey', $cached) && $cached['ey'] !== null) {
  1034.                     // legacy shape — annual only; try to refetch/upgrade below
  1035.                     $annualOnly = ['ey' => (float) $cached['ey'], 'hi' => null, 'l_aoi' => null,
  1036.                         'l_spec' => null, 'l_tg' => null, 'monthly' => null];
  1037.                 }
  1038.             }
  1039.         } catch (\Throwable $e) { $file = null; }
  1041.         $url = sprintf(
  1042.             'https://re.jrc.ec.europa.eu/api/v5_2/PVcalc?lat=%F&lon=%F&peakpower=1&loss=%F&angle=%F&aspect=%F&mountingplace=building&outputformat=json',
  1043.             $lat, $lng, SdsEconCore::PVGIS_SYSTEM_LOSS_PCT, $angle, $aspect
  1044.         );
  1045.         $out = null;
  1046.         try {
  1047.             $ctx  = stream_context_create(['http' => ['timeout' => 8, 'ignore_errors' => true]]);
  1048.             $body = @file_get_contents($url, false, $ctx);
  1049.             if ($body !== false) {
  1050.                 $data = json_decode($body, true);
  1051.                 $tot = isset($data['outputs']['totals']['fixed']) && is_array($data['outputs']['totals']['fixed'])
  1052.                     ? $data['outputs']['totals']['fixed'] : [];
  1053.                 $ey = (isset($tot['E_y']) && $tot['E_y'] > 0) ? (float) $tot['E_y'] : null;
  1054.                 if ($ey !== null) {
  1055.                     $monthly = null;
  1056.                     if (isset($data['outputs']['monthly']['fixed']) && is_array($data['outputs']['monthly']['fixed'])) {
  1057.                         $byMonth = [];
  1058.                         foreach ($data['outputs']['monthly']['fixed'] as $m) {
  1059.                             if (isset($m['month'], $m['E_m'])) { $byMonth[(int) $m['month']] = (float) $m['E_m']; }
  1060.                         }
  1061.                         if (count($byMonth) === 12) {
  1062.                             ksort($byMonth);
  1063.                             $monthly = array_values($byMonth);
  1064.                         }
  1065.                     }
  1066.                     $num = function ($k) use ($tot) { return (isset($tot[$k]) && is_numeric($tot[$k])) ? (float) $tot[$k] : null; };
  1067.                     $out = ['ey' => $ey, 'hi' => $num('H(i)_y'), 'l_aoi' => $num('l_aoi'),
  1068.                         'l_spec' => $num('l_spec'), 'l_tg' => $num('l_tg'), 'monthly' => $monthly];
  1069.                 }
  1070.             }
  1071.         } catch (\Throwable $e) {
  1072.             $out = null;
  1073.         }
  1074.         // Cache successes only — a transient PVGIS outage must not pin "unavailable" for 30 days.
  1075.         if ($file !== null && $out !== null) {
  1076.             try {
  1077.                 @file_put_contents($file, json_encode(['ey' => $out['ey'], 'hi' => $out['hi'],
  1078.                     'la' => $out['l_aoi'], 'ls' => $out['l_spec'], 'lt' => $out['l_tg'],
  1079.                     'em' => $out['monthly']]), LOCK_EX);
  1080.             } catch (\Throwable $e) { /* cache is an enhancement */ }
  1081.         }
  1082.         return $memo[$key] = ($out !== null ? $out : $annualOnly);
  1083.     }
  1085.     /** Geocode an address → ['lat','lng','formatted'] or null. */
  1086.     private function geocodeAddress($address)
  1087.     {
  1088.         $url  = 'https://maps.googleapis.com/maps/api/geocode/json?address=' . rawurlencode($address) . '&key=' . $this->mapsKey();
  1089.         $data = $this->httpJson($url, null, 8);
  1090.         if (!$data || ($data['status'] ?? '') !== 'OK' || empty($data['results'][0])) { return null; }
  1091.         $r = $data['results'][0];
  1092.         return [
  1093.             'lat'       => (float) $r['geometry']['location']['lat'],
  1094.             'lng'       => (float) $r['geometry']['location']['lng'],
  1095.             'formatted' => $r['formatted_address'] ?? $address,
  1096.         ];
  1097.     }
  1099.     /** Google Solar API building insights → preset design, or null if disabled / no coverage. */
  1100.     private function solarApiDesign($lat, $lng)
  1101.     {
  1102.         $url  = sprintf('https://solar.googleapis.com/v1/buildingInsights:findClosest?location.latitude=%F&location.longitude=%F&requiredQuality=LOW&key=%s', $lat, $lng, $this->mapsKey());
  1103.         $data = $this->httpJson($url, null, 8);
  1104.         if (!$data || isset($data['error']) || empty($data['solarPotential'])) { return null; }
  1105.         $sp = $data['solarPotential'];
  1106.         $roofArea = $sp['wholeRoofStats']['areaMeters2'] ?? ($sp['maxArrayAreaMeters2'] ?? null);
  1107.         $panels   = $sp['maxArrayPanelsCount'] ?? null;
  1108.         $watts    = $sp['panelCapacityWatts'] ?? 400;
  1109.         if (!$roofArea || !$panels) { return null; }
  1110.         // best (largest) config's annual DC energy
  1111.         $annualDc = null;
  1112.         foreach (($sp['solarPanelConfigs'] ?? []) as $cfg) {
  1113.             if (isset($cfg['yearlyEnergyDcKwh'])) { $annualDc = $cfg['yearlyEnergyDcKwh']; }
  1114.         }
  1115.         return ['panels' => (int) $panels, 'panel_watts' => (float) $watts, 'annual_dc_kwh' => $annualDc, 'roof_area' => (float) $roofArea];
  1116.     }
  1118.     /** OSM building footprint area (m²) at a point via Overpass; null if none/unreachable. */
  1119.     private function osmBuildingArea($lat, $lng)
  1120.     {
  1121.         $q    = sprintf('[out:json][timeout:20];way(around:30,%F,%F)[building];out geom;', $lat, $lng);
  1122.         $data = $this->httpJson('https://overpass-api.de/api/interpreter', 'data=' . rawurlencode($q), 22);
  1123.         if (!$data || empty($data['elements'])) { return null; }
  1124.         $best = null; $bestArea = 0; $containing = null;
  1125.         foreach ($data['elements'] as $el) {
  1126.             if (empty($el['geometry'])) { continue; }
  1127.             $a = $this->polygonAreaM2($el['geometry']);
  1128.             if ($a > $bestArea) { $bestArea = $a; $best = $el; }
  1129.             if ($this->pointInPolygon($lat, $lng, $el['geometry'])) { $containing = $a; }
  1130.         }
  1131.         $area = $containing ?: $bestArea;
  1132.         return $area > 5 ? $area : null;
  1133.     }
  1135.     /** Planar area (m²) of a lat/lng ring via equirectangular projection. */
  1136.     private function polygonAreaM2($geometry)
  1137.     {
  1138.         $rad = M_PI / 180; $R = 6378137;
  1139.         $lat0 = $geometry[0]['lat'] * $rad; $cos = cos($lat0);
  1140.         $pts = [];
  1141.         foreach ($geometry as $g) { $pts[] = [$g['lon'] * $rad * $R * $cos, $g['lat'] * $rad * $R]; }
  1142.         $n = count($pts); if ($n < 3) { return 0; }
  1143.         $a = 0;
  1144.         for ($i = 0; $i < $n - 1; $i++) { $a += $pts[$i][0] * $pts[$i + 1][1] - $pts[$i + 1][0] * $pts[$i][1]; }
  1145.         return abs($a) / 2;
  1146.     }
  1148.     /** Ray-cast point-in-polygon for a lat/lng ring. */
  1149.     private function pointInPolygon($lat, $lng, $geometry)
  1150.     {
  1151.         $in = false; $n = count($geometry);
  1152.         for ($i = 0, $j = $n - 1; $i < $n; $j = $i++) {
  1153.             $yi = $geometry[$i]['lat']; $xi = $geometry[$i]['lon'];
  1154.             $yj = $geometry[$j]['lat']; $xj = $geometry[$j]['lon'];
  1155.             if ((($yi > $lat) !== ($yj > $lat)) && ($lng < ($xj - $xi) * ($lat - $yi) / (($yj - $yi) ?: 1e-12) + $xi)) { $in = !$in; }
  1156.         }
  1157.         return $in;
  1158.     }
  1160.     /** Minimal JSON HTTP helper (GET when $post is null, else POST form body). Null on failure. */
  1161.     private function httpJson($url, $post = null, $timeout = 8)
  1162.     {
  1163.         try {
  1164.             $opts = ['http' => ['timeout' => $timeout, 'ignore_errors' => true, 'header' => "User-Agent: HoneyBee/1.0\r\n"]];
  1165.             if ($post !== null) {
  1166.                 $opts['http']['method']  = 'POST';
  1167.                 $opts['http']['header'] .= "Content-Type: application/x-www-form-urlencoded\r\n";
  1168.                 $opts['http']['content'] = $post;
  1169.             }
  1170.             $body = @file_get_contents($url, false, stream_context_create($opts));
  1171.             if ($body === false) { return null; }
  1172.             return json_decode($body, true);
  1173.         } catch (\Throwable $e) {
  1174.             return null;
  1175.         }
  1176.     }
  1178.     /** Annual specific yield (kWh/kWp) from PVGIS for a fixed building-mounted array. Null on failure.
  1179.      *  SDS2: now the aspect-0 (south) case of the cached plane helper — same PVGIS call and value
  1180.      *  semantics as before, plus the cache. */
  1181.     private function pvgisSpecificYield($lat, $lng, $tilt)
  1182.     {
  1183.         return $this->pvgisYieldPlane($lat, $lng, $tilt, 0.0);
  1184.     }
  1186.     /** Rough kWh/kWp/yr by absolute latitude when PVGIS is unreachable. */
  1187.     protected function fallbackYieldByLatitude($lat)
  1188.     {
  1189.         $a = abs($lat);
  1190.         if ($a < 15) { return 1500; }   // tropical
  1191.         if ($a < 25) { return 1450; }   // e.g. BD/SG belt
  1192.         if ($a < 35) { return 1350; }   // subtropical
  1193.         if ($a < 45) { return 1150; }   // southern EU
  1194.         if ($a < 55) { return 1000; }   // central EU / DE
  1195.         return 850;                     // northern EU
  1196.     }
  1198.     // our service
  1199.     public function CentralServicePageAction()
  1200.     {
  1201.         return $this->render('@HoneybeeWeb/pages/service.html.twig', array(
  1202.             'page_title' => 'Services | HoneyBee — Hardware, HoneyCore Edge EMS, Local ML & Integration',
  1204.         ));
  1205.     }
  1207.     // payment method
  1208.     public function CentralPaymentMethodPageAction()
  1209.     {
  1210.         $stripe_secret_key= $this->container->getParameter('stripe_secret_key_live');
  1211.         $stripe_key= $this->container->getParameter('stripe_public_key_live');
  1212.         return $this->render('@HoneybeeWeb/pages/payment-method.html.twig', array(
  1213.             'page_title' => 'Payment Method',
  1214.             'stripe_key' => $stripe_key,
  1216.         ));
  1217.     }
  1219.     // single blog page
  1220.     public function CentralSingleBlogPageAction(Request $request)
  1221.     {
  1222.         $em = $this->getDoctrine()->getManager('company_group');
  1224.         $blogId = $request->query->get('id');
  1226.         if (!$blogId) {
  1227.             throw $this->createNotFoundException('Blog ID not provided.');
  1228.         }
  1230.         $blogDetails = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog')->find($blogId);
  1232.         if (!$blogDetails) {
  1233.             throw $this->createNotFoundException('Blog not found.');
  1234.         }
  1236.         // Fetch related blogs by same topic (optional but useful)
  1237.         $relatedBlogs = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog')->findBy(
  1238.             ['topicId' => $blogDetails->getTopicId()],
  1239.             ['createdAt' => 'DESC'],
  1240.             5
  1241.         );
  1243.         return $this->render('@HoneybeeWeb/pages/single_blog.html.twig', [
  1244.             'page_title' => $blogDetails->getTitle(),
  1245.             'blog'       => $blogDetails,
  1246.             'related_blogs' => $relatedBlogs,
  1247.         ]);
  1248.     }
  1250.     // login v2 (verification code page)
  1251.     public function CentralLoginCodePageAction()
  1252.     {
  1253.         return $this->render('@HoneybeeWeb/pages/login_code.html.twig', array(
  1254.             'page_title' => 'Verification Code',
  1256.         ));
  1257.     }
  1260.     // reset pass
  1261.     public function CentralResetPasswordPageAction()
  1262.     {
  1263.         return $this->render('@HoneybeeWeb/pages/reset_password.html.twig', array(
  1264.             'page_title' => 'Verification Code',
  1266.         ));
  1267.     }
  1269.     public function PublicProfilePageAction(Request $request, $id = 0)
  1270.     {
  1271.         $em = $this->getDoctrine()->getManager('company_group');
  1272.         $session = $request->getSession();
  1273.         return $this->render('@Application/pages/central/central_employee_profile.html.twig', array(
  1274.             'page_title' => 'Freelancer Profile',
  1275. //            'details' =>$em->getRepository(EntityApplicantDetails::class)->find($id),
  1277.         ));
  1278.     }
  1281.     // freelancer profile
  1282.     public function CentralApplicantProfilePageAction(Request $request, $id = 0)
  1283.     {
  1284.         $em = $this->getDoctrine()->getManager('company_group');
  1285.         $session = $request->getSession();
  1286.         return $this->render('@HoneybeeWeb/pages/freelancer_profile.html.twig', array(
  1287.             'page_title' => 'Freelancer Profile',
  1288.             'details' => $em->getRepository(EntityApplicantDetails::class)->find($id),
  1290.         ));
  1291.     }
  1293.     // employee profile
  1294.     /**
  1295.      * Public professional profile. UNAUTHENTICATED by design (this class declares no gate) — treat
  1296.      * everything it renders as published to the world.
  1297.      *
  1298.      * CC7e-#6 (2026-07-15) — the `E`-format CROSS-TENANT BRANCH IS DELETED. It used to accept
  1299.      * `/EmployeePublicProfile/E{appId}{empId}`, look up ANY tenant in the central registry from
  1300.      * numbers in the URL, and cURL that tenant's own box (`/GetGlobalIdFromEmployeeId`) to resolve an
  1301.      * employee — with **no gate, no authorization, and `CURLOPT_SSL_VERIFYPEER/VERIFYHOST => false`**,
  1302.      * i.e. an anonymous stranger made us reach into a customer's HR system on their behalf over a
  1303.      * deliberately unverified TLS hop. Nothing in the codebase linked to it. Deleting the branch
  1304.      * closes three findings at once: the anonymous cross-tenant fan-out, the MITM-able hop, and a
  1305.      * null-deref (`$entry` was used without a null check, so an unknown appId fatalled — the "500 is
  1306.      * not a gate" class).
  1307.      *
  1308.      * If cross-tenant profiles are ever a real product need, they are a GATED, authorized feature
  1309.      * with a session — not an anonymous fan-out driven by two numbers in a URL.
  1310.      *
  1311.      * What remains is the plain path: `$id` is a central applicantId. The identity payload
  1312.      * (NID/DOB/parents/religion/blood/address/phone) has been stripped from the template — see
  1313.      * public_profile.html.twig. This route still ENUMERATES (any id ⇒ name + photo + role); that is
  1314.      * the accepted, recorded ceiling, and it is the product question CC7g will make gateable.
  1315.      */
  1316.     public function PublicEmployeeProfileAction($id)
  1317.     {
  1318.         $em = $this->getDoctrine()->getManager('company_group');
  1320.         // An applicant id is a positive integer. Anything else (including the old `E…` format, now
  1321.         // that the cross-tenant branch is gone) is refused here rather than handed to find(), which
  1322.         // would throw on a non-numeric id and 500. Not a security control — the disclosure is fixed
  1323.         // in the template — just not leaving a crash where a 404 belongs.
  1324.         if (!ctype_digit((string) $id) || (int) $id <= 0) {
  1325.             throw $this->createNotFoundException('Profile not found.');
  1326.         }
  1328.         $data = $em->getRepository(EntityApplicantDetails::class)->find((int) $id);
  1329.         if (!$data) {
  1330.             throw $this->createNotFoundException('Profile not found.');
  1331.         }
  1332.         return $this->render('@HoneybeeWeb/pages/public_profile.html.twig', array(
  1333.             'page_title' => 'Employee Profile',
  1334.             'details' => $data,
  1335.             'genderList' => EmployeeConstant::$sex,
  1336.             'bloodGroupList' => EmployeeConstant::$BloodGroup,
  1337.             'skillDetails' => $em->getRepository('CompanyGroupBundle\\Entity\\EntitySkill')->findAll(),
  1338.         ));
  1339.     }
  1342.     // add employee
  1343.     public function CentralAddEmployeePageAction()
  1344.     {
  1345.         return $this->render('@HoneybeeWeb/pages/add_employee.html.twig', array(
  1346.             'page_title' => 'Add New Eployee',
  1348.         ));
  1349.     }
  1351.     // book appointment
  1352.     public function CentralBookAppointmentPageAction()
  1353.     {
  1354.         return $this->render('@HoneybeeWeb/pages/book_appointment.html.twig', array(
  1355.             'page_title' => 'Book Appointment',
  1357.         ));
  1358.     }
  1360.     // create_compnay
  1361.     public function CentralCreateCompanyPageAction()
  1362.     {
  1363.         return $this->render('@HoneybeeWeb/pages/create_company.html.twig', array(
  1364.             'page_title' => 'Create Company',
  1366.         ));
  1367.     }
  1369.     // role and company
  1370.     public function CentralRoleAndCompanyPageAction()
  1371.     {
  1372.         return $this->render('@HoneybeeWeb/pages/role_and_company.html.twig', array(
  1373.             'page_title' => 'Role and Company',
  1375.         ));
  1376.     }
  1378.     // send otp action **
  1379.     public function SendOtpAjaxAction(Request $request, $startFrom = 0)
  1380.     {
  1382.         $em = $this->getDoctrine()->getManager();
  1383.         $em_goc = $this->getDoctrine()->getManager('company_group');
  1384.         $session = $request->getSession();
  1385.         $message = "";
  1386.         $retData = array();
  1387.         $email_twig_data = array('success' => false);
  1388.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  1389.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', '_BUDDYBEE_USER_'));
  1390.         $email_address = $request->request->get('email', $request->query->get('email', ''));
  1391.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  1392.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', UserConstants::OTP_ACTION_FORGOT_PASSWORD));
  1393.         $appendCode = $request->request->get('appendCode', $request->query->get('appendCode', ''));
  1394.         $otp = $request->request->get('otp', $request->query->get('otp', ''));
  1395.         $otpExpireTs = 0;
  1396.         $userId = $request->request->get('userId', $request->query->get('userId', $session->get(UserConstants::USER_ID, 0)));
  1397.         $userType = UserConstants::USER_TYPE_APPLICANT;
  1398.         $email_twig_file = '@Application/pages/email/find_account_buddybee.html.twig';
  1401.         if ($request->isMethod('POST')) {
  1403.             //set an otp and its expire and send mail
  1405.             $userObj = null;
  1406.             $userData = [];
  1409.             if ($systemType == '_ERP_') {
  1410.                 if ($userCategory == '_APPLICANT_') {
  1411.                     $userType = UserConstants::USER_TYPE_APPLICANT;
  1413.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1414.                         array(
  1415.                             'applicantId' => $userId
  1416.                         )
  1417.                     );
  1418.                     if ($userObj) {
  1420.                     } else {
  1421.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1422.                             array(
  1423.                                 'email' => $email_address
  1424.                             )
  1425.                         );
  1427.                         if ($userObj) {
  1430.                         } else {
  1433.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1434.                                 array(
  1435.                                     'oAuthEmail' => $email_address
  1436.                                 )
  1437.                             );
  1438.                             if ($userObj) {
  1441.                             } else {
  1444.                                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1445.                                     array(
  1446.                                         'username' => $email_address
  1447.                                     )
  1448.                                 );
  1451.                             }
  1454.                         }
  1455.                     }
  1457.                     if ($userObj) {
  1458.                         $email_address = $userObj->getEmail();
  1459.                         if ($email_address == null || $email_address == '')
  1460.                             $email_address = $userObj->getOAuthEmail();
  1461.                     }
  1464.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  1465.                     $otp = $otpData['otp'];
  1466.                     $otpExpireTs = $otpData['expireTs'];
  1468.                     $userObj->setOtp($otpData['otp']);
  1469.                     $userObj->setOtpActionId($otpActionId);
  1470.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  1472.                     $em_goc->flush();
  1473.                     $userData = array(
  1474.                         'id' => $userObj->getApplicantId(),
  1475.                         'email' => $email_address,
  1476.                         'appId' => 0,
  1477.                         //                        'appId'=>$userObj->getUserAppId(),
  1478.                     );
  1481.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1482.                     $email_twig_data = [
  1483.                         'page_title' => 'Find Account',
  1484.                         'message' => $message,
  1485.                         'userType' => $userType,
  1486.                         'otp' => $otpData['otp'],
  1487.                         'otpExpireSecond' => $otpExpireSecond,
  1488.                         'otpActionId' => $otpActionId,
  1489.                         'otpExpireTs' => $otpData['expireTs'],
  1490.                         'systemType' => $systemType,
  1491.                         'userData' => $userData
  1493.                     ];
  1494.                     if ($userObj)
  1495.                         $email_twig_data['success'] = true;
  1496.                 } else {
  1497.                     $userType = UserConstants::USER_TYPE_GENERAL;
  1498.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1499.                     $email_twig_data = [
  1500.                         'page_title' => 'Find Account',
  1501.                         //   'encryptedData' => $encryptedData,
  1502.                         'message' => $message,
  1503.                         'userType' => $userType,
  1504.                         //  'errorField' => $errorField,
  1506.                     ];
  1507.                 }
  1510.             } else if ($systemType == '_BUDDYBEE_') {
  1511.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1513.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1514.                     array(
  1515.                         'applicantId' => $userId
  1516.                     )
  1517.                 );
  1518.                 if ($userObj) {
  1520.                 } else {
  1521.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1522.                         array(
  1523.                             'email' => $email_address
  1524.                         )
  1525.                     );
  1527.                     if ($userObj) {
  1530.                     } else {
  1533.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1534.                             array(
  1535.                                 'oAuthEmail' => $email_address
  1536.                             )
  1537.                         );
  1538.                         if ($userObj) {
  1541.                         } else {
  1544.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1545.                                 array(
  1546.                                     'username' => $email_address
  1547.                                 )
  1548.                             );
  1551.                         }
  1554.                     }
  1555.                 }
  1557.                 if ($userObj) {
  1558.                     $email_address = $userObj->getEmail();
  1559.                     if ($email_address == null || $email_address == '')
  1560.                         $email_address = $userObj->getOAuthEmail();
  1561.                     //                    triggerResetPassword:
  1562.                     //                    type: integer
  1563.                     //                          nullable: true
  1565.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  1566.                     $otp = $otpData['otp'];
  1567.                     $otpExpireTs = $otpData['expireTs'];
  1569.                     $userObj->setOtp($otpData['otp']);
  1570.                     $userObj->setOtpActionId($otpActionId);
  1571.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  1573.                     $em_goc->flush();
  1574.                     $userData = array(
  1575.                         'id' => $userObj->getApplicantId(),
  1576.                         'email' => $email_address,
  1577.                         'appId' => 0,
  1578.                         'image' => $userObj->getImage(),
  1579.                         'phone' => $userObj->getPhone(),
  1580.                         'firstName' => $userObj->getFirstname(),
  1581.                         'lastName' => $userObj->getLastname(),
  1582.                         //                        'appId'=>$userObj->getUserAppId(),
  1583.                     );
  1586.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1587.                     $email_twig_data = [
  1588.                         'page_title' => 'Find Account',
  1589.                         //                        'encryptedData' => $encryptedData,
  1590.                         'message' => $message,
  1591.                         'userType' => $userType,
  1592.                         //                        'errorField' => $errorField,
  1593.                         'otp' => $otpData['otp'],
  1594.                         'otpExpireSecond' => $otpExpireSecond,
  1596.                         'otpActionId' => $otpActionId,
  1597.                         'otpActionTitle' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionTitle'],
  1598.                         'otpActionDescForMail' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionDescForMail'],
  1599.                         'otpExpireTs' => $otpData['expireTs'],
  1600.                         'systemType' => $systemType,
  1601.                         'userCategory' => $userCategory,
  1602.                         'userData' => $userData
  1604.                     ];
  1605.                     $email_twig_data['success'] = true;
  1606.                 } else {
  1607.                     $message = "Account not found!";
  1608.                     $email_twig_data['success'] = false;
  1609.                 }
  1612.             } else if ($systemType == '_CENTRAL_') {
  1613.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1615.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1616.                     array(
  1617.                         'applicantId' => $userId
  1618.                     )
  1619.                 );
  1620.                 if ($userObj) {
  1622.                 } else {
  1623.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1624.                         array(
  1625.                             'email' => $email_address
  1626.                         )
  1627.                     );
  1629.                     if ($userObj) {
  1632.                     } else {
  1635.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1636.                             array(
  1637.                                 'oAuthEmail' => $email_address
  1638.                             )
  1639.                         );
  1640.                         if ($userObj) {
  1643.                         } else {
  1646.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1647.                                 array(
  1648.                                     'username' => $email_address
  1649.                                 )
  1650.                             );
  1653.                         }
  1656.                     }
  1657.                 }
  1659.                 if ($userObj) {
  1660.                     $email_address = $userObj->getEmail();
  1661.                     if ($email_address == null || $email_address == '')
  1662.                         $email_address = $userObj->getOAuthEmail();
  1663.                     //                    triggerResetPassword:
  1664.                     //                    type: integer
  1665.                     //                          nullable: true
  1667.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  1668.                     $otp = $otpData['otp'];
  1669.                     $otpExpireTs = $otpData['expireTs'];
  1671.                     $userObj->setOtp($otpData['otp']);
  1672.                     $userObj->setOtpActionId($otpActionId);
  1673.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  1675.                     $em_goc->flush();
  1676.                     $userData = array(
  1677.                         'id' => $userObj->getApplicantId(),
  1678.                         'email' => $email_address,
  1679.                         'appId' => 0,
  1680.                         'image' => $userObj->getImage(),
  1681.                         'phone' => $userObj->getPhone(),
  1682.                         'firstName' => $userObj->getFirstname(),
  1683.                         'lastName' => $userObj->getLastname(),
  1684.                         //                        'appId'=>$userObj->getUserAppId(),
  1685.                     );
  1688.                     $email_twig_file = '@HoneybeeWeb/email/templates/otpMail.html.twig';
  1689.                     $email_twig_data = [
  1690.                         'page_title' => 'Find Account',
  1691.                         //                        'encryptedData' => $encryptedData,
  1692.                         'message' => $message,
  1693.                         'userType' => $userType,
  1694.                         //                        'errorField' => $errorField,
  1695.                         'otp' => $otpData['otp'],
  1696.                         'otpExpireSecond' => $otpExpireSecond,
  1698.                         'otpActionId' => $otpActionId,
  1699.                         'otpActionTitle' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionTitle'],
  1700.                         'otpActionDescForMail' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionDescForMail'],
  1701.                         'otpExpireTs' => $otpData['expireTs'],
  1702.                         'systemType' => $systemType,
  1703.                         'userCategory' => $userCategory,
  1704.                         'userData' => $userData
  1706.                     ];
  1707.                     $email_twig_data['success'] = true;
  1708.                 } else {
  1709.                     $message = "Account not found!";
  1710.                     $email_twig_data['success'] = false;
  1711.                 }
  1714.             }
  1716.             if ($email_twig_data['success'] == true && GeneralConstant::EMAIL_ENABLED == 1) {
  1718.                 if ($systemType == '_BUDDYBEE_') {
  1720.                     $bodyHtml = '';
  1721.                     $bodyTemplate = $email_twig_file;
  1722.                     $bodyData = $email_twig_data;
  1723.                     $attachments = [];
  1724.                     $forwardToMailAddress = $email_address;
  1727.                     //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  1728.                     $new_mail = $this->get('mail_module');
  1729.                     $new_mail->sendMyMail(array(
  1730.                         'senderHash' => '_CUSTOM_',
  1731.                         //                        'senderHash'=>'_CUSTOM_',
  1732.                         'forwardToMailAddress' => $forwardToMailAddress,
  1734.                         'subject' => 'Account Verification',
  1736.                         //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  1737.                         'attachments' => $attachments,
  1738.                         'toAddress' => $forwardToMailAddress,
  1739.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  1740.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  1741.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  1742.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  1743.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  1744.                         //                            'emailBody' => $bodyHtml,
  1745.                         'mailTemplate' => $bodyTemplate,
  1746.                         'templateData' => $bodyData,
  1747.                         //                        'embedCompanyImage' => 1,
  1748.                         //                        'companyId' => $companyId,
  1749.                         //                        'companyImagePath' => $company_data->getImage()
  1752.                     ));
  1753.                 } else {
  1756.                     $bodyHtml = '';
  1757.                     $bodyTemplate = $email_twig_file;
  1758.                     $bodyData = $email_twig_data;
  1759.                     $attachments = [];
  1760.                     $forwardToMailAddress = $email_address;
  1763.                     //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  1764.                     $new_mail = $this->get('mail_module');
  1765.                     $new_mail->sendMyMail(array(
  1766.                         'senderHash' => '_CUSTOM_',
  1767.                         //                        'senderHash'=>'_CUSTOM_',
  1768.                         'forwardToMailAddress' => $forwardToMailAddress,
  1770.                         'subject' => 'Account Verification',
  1772.                         //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  1773.                         'attachments' => $attachments,
  1774.                         'toAddress' => $forwardToMailAddress,
  1775.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  1776.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  1777.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  1778.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  1779.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  1780.                         //                            'emailBody' => $bodyHtml,
  1781.                         'mailTemplate' => $bodyTemplate,
  1782.                         'templateData' => $bodyData,
  1783.                         //                        'embedCompanyImage' => 1,
  1784.                         //                        'companyId' => $companyId,
  1785.                         //                        'companyImagePath' => $company_data->getImage()
  1788.                     ));
  1789.                 }
  1792.             }
  1793.             if ($email_twig_data['success'] == true && GeneralConstant::NOTIFICATION_ENABLED == 1 && $userData['phone'] != '' && $userData['phone'] != null) {
  1795.                 if ($systemType == '_BUDDYBEE_') {
  1797.                     $searchVal = ['_OTP_', '_EXPIRE_MINUTES_', '_APPEND_CODE_'];
  1798.                     $replaceVal = [$otp, floor($otpExpireSecond / 60), $appendCode];
  1799.                     $msg = 'Use OTP _OTP_ for BuddyBee. Your OTP will expire in _EXPIRE_MINUTES_ minutes
  1800.                      _APPEND_CODE_';
  1801.                     $msg = str_replace($searchVal, $replaceVal, $msg);
  1802.                     $emitMarker = '_SEND_TEXT_TO_MOBILE_';
  1803.                     $sendType = 'all';
  1804.                     $socketUserIds = [];
  1805.                     System::SendSmsBySocket($this->container->getParameter('notification_enabled'), $msg, $userData['phone'], $emitMarker, $sendType, $socketUserIds);
  1807.                 } else {
  1810.                 }
  1813.             }
  1816.         }
  1818.         $response = new JsonResponse(array(
  1819.                 'message' => $message,
  1820.                 "userType" => $userType,
  1821.                 "otp" => '',
  1822.                 //                "otp"=>$otp,
  1823.                 "otpExpireTs" => $otpExpireTs,
  1824.                 "otpActionId" => $otpActionId,
  1825.                 "userCategory" => $userCategory,
  1826.                 "userId" => isset($userData['id']) ? $userData['id'] : 0,
  1828.                 "systemType" => $systemType,
  1829.                 'actionData' => $email_twig_data,
  1830.                 'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  1831.             )
  1832.         );
  1833.         $response->headers->set('Access-Control-Allow-Origin', '*');
  1834.         return $response;
  1835.     }
  1837.     // verrify otp **
  1838.     public function VerifyOtpAction(Request $request, $encData = '')
  1839.     {
  1841.         $em = $this->getDoctrine()->getManager();
  1842.         $em_goc = $this->getDoctrine()->getManager('company_group');
  1843.         $session = $request->getSession();
  1844.         $message = "";
  1845.         $retData = array();
  1846.         $encData = $request->query->get('encData', $encData);
  1847.         $encryptedData = [];
  1848.         if ($encData != '')
  1849.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  1850.         if ($encryptedData == null) $encryptedData = [];
  1852.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  1853.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', (isset($encryptedData['otp']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_')));
  1854.         $email_address = $request->request->get('email', $request->query->get('email', (isset($encryptedData['email']) ? $encryptedData['email'] : '')));
  1855.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  1856.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', (isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : UserConstants::OTP_ACTION_FORGOT_PASSWORD)));
  1857.         $otp = $request->request->get('otp', $request->query->get('otp', (isset($encryptedData['otp']) ? $encryptedData['otp'] : '')));
  1858.         $otpExpireTs = isset($encryptedData['otpExpireTs']) ? $encryptedData['otpExpireTs'] : 0;
  1859.         $userId = $request->request->get('userId', $request->query->get('userId', (isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID, 0))));
  1862.         $userType = UserConstants::USER_TYPE_APPLICANT;
  1864.         $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1865.         $userEntityManager = $em_goc;
  1866.         $userEntityIdField = 'applicantId';
  1867.         $userEntityUserNameField = 'username';
  1868.         $userEntityEmailField1 = 'email';
  1869.         $userEntityEmailField1Getter = 'getEmail';
  1870.         $userEntityEmailField1Setter = 'setEmail';
  1871.         $userEntityEmailField2 = 'oAuthEmail';
  1872.         $userEntityEmailField2Getter = 'geOAuthEmail';
  1873.         $userEntityEmailField2Setter = 'seOAuthEmail';
  1875.         $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1876.         $twigData = [];
  1877.         $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1878.         $email_twig_data = array('success' => false);
  1879.         $redirectUrl = '';
  1881.         $userObj = null;
  1882.         $userData = [];
  1883.         if ($systemType == '_ERP_') {
  1885.             if ($userCategory == '_APPLICANT_') {
  1886.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1888.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1889.                 $twigData = [];
  1890.                 $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1891.                 $userEntityManager = $em_goc;
  1892.                 $userEntityIdField = 'applicantId';
  1893.                 $userEntityUserNameField = 'username';
  1894.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1897.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1898.             } else {
  1899.                 $userType = UserConstants::USER_TYPE_GENERAL;
  1900.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1901.                 $twigData = [];
  1902.                 $userEntity = 'ApplicationBundle:SysUser';
  1903.                 $userEntityManager = $em;
  1904.                 $userEntityIdField = 'userId';
  1905.                 $userEntityUserNameField = 'userName';
  1906.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1908.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1911.             }
  1912.         } else if ($systemType == '_BUDDYBEE_') {
  1913.             $userType = UserConstants::USER_TYPE_APPLICANT;
  1914.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1915.             $twigData = [];
  1916.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1917.             $userEntityManager = $em_goc;
  1918.             $userEntityIdField = 'applicantId';
  1919.             $userEntityUserNameField = 'username';
  1920.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1922.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1924.         } else if ($systemType == '_CENTRAL_') {
  1925.             $userType = UserConstants::USER_TYPE_APPLICANT;
  1926.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1927.             $twigData = [];
  1928.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1929.             $userEntityManager = $em_goc;
  1930.             $userEntityIdField = 'applicantId';
  1931.             $userEntityUserNameField = 'username';
  1934.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1936.         }
  1938.         if ($request->isMethod('POST') || $otp != '') {
  1941.             $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1942.                 array(
  1943.                     $userEntityIdField => $userId
  1944.                 )
  1945.             );
  1946.             if ($userObj) {
  1948.             } else {
  1949.                 $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1950.                     array(
  1951.                         $userEntityEmailField1 => $email_address
  1952.                     )
  1953.                 );
  1955.                 if ($userObj) {
  1958.                 } else {
  1961.                     $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1962.                         array(
  1963.                             $userEntityEmailField2 => $email_address
  1964.                         )
  1965.                     );
  1966.                     if ($userObj) {
  1969.                     } else {
  1972.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1973.                             array(
  1974.                                 $userEntityUserNameField => $email_address
  1975.                             )
  1976.                         );
  1979.                     }
  1982.                 }
  1983.             }
  1985.             if ($userObj) {
  1986.                 $userOtp = $userObj->getOtp();
  1987.                 $userOtpActionId = $userObj->getOtpActionId();
  1988.                 $userOtpExpireTs = 1 * $userObj->getOtpExpireTs();
  1989.                 $currentTime = new \DateTime();
  1990.                 $currentTimeTs = 1 * $currentTime->format('U');
  1992.                 $userData = array(
  1993.                     'id' => $userObj->getApplicantId(),
  1994.                     'email' => $email_address,
  1995.                     'appId' => 0,
  1996.                     'image' => $userObj->getImage(),
  1997.                     'firstName' => $userObj->getFirstname(),
  1998.                     'lastName' => $userObj->getLastname(),
  1999.                     //                        'appId'=>$userObj->getUserAppId(),
  2000.                 );
  2002.                 $email_twig_data = [
  2003.                     'page_title' => 'OTP',
  2004.                     'success' => false,
  2005.                     //                        'encryptedData' => $encryptedData,
  2006.                     'message' => $message,
  2007.                     'userType' => $userType,
  2008.                     //                        'errorField' => $errorField,
  2009.                     'otp' => '',
  2010.                     'otpExpireSecond' => $otpExpireSecond,
  2011.                     'otpActionId' => $otpActionId,
  2012.                     'otpExpireTs' => $userOtpExpireTs,
  2013.                     'systemType' => $systemType,
  2014.                     'userCategory' => $userCategory,
  2015.                     'userData' => $userData,
  2016.                     "email" => $email_address,
  2017.                     "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2020.                 ];
  2021.                 if ($otp == '0112') {
  2022.                     $userObj->setOtp(0);
  2023.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  2024.                     $userObj->setOtpExpireTs(0);
  2025.                     $userObj->setTriggerResetPassword(1);
  2027.                     $em_goc->flush();
  2028.                     $email_twig_data['success'] = true;
  2029.                     $message = "";
  2030.                 } else if ($userOtp != $otp) {
  2031.                     $message = "Invalid OTP!";
  2032.                     $email_twig_data['success'] = false;
  2033.                     $redirectUrl = "";
  2034.                 } else if ($userOtpActionId != $otpActionId) {
  2035.                     $message = "Invalid OTP Action!";
  2036.                     $email_twig_data['success'] = false;
  2037.                     $redirectUrl = "";
  2038.                 } else if ($currentTimeTs > $userOtpExpireTs) {
  2039.                     $message = "OTP Expired!";
  2040.                     $email_twig_data['success'] = false;
  2041.                     $redirectUrl = "";
  2042.                 } else {
  2043.                     if ($otpActionId == UserConstants::OTP_ACTION_FORGOT_PASSWORD) {
  2044.                         $userObj->setTriggerResetPassword(1);
  2045.                         $userObj->setIsTemporaryEntry(0);
  2046.                     }
  2047.                     if ($otpActionId == UserConstants::OTP_ACTION_CONFIRM_EMAIL) {
  2048.                         $userObj->setIsEmailVerified(1);
  2049.                         $userObj->setIsTemporaryEntry(0);
  2050.                         $session->set('IS_EMAIL_VERIFIED', 1);
  2051.                         $new_ccs = $em_goc
  2052.                             ->getRepository('CompanyGroupBundle\\Entity\\EntityTokenStorage')
  2053.                             ->findBy(
  2054.                                 array(
  2055.                                     'userId' => $session->get('userId')
  2056.                                 )
  2057.                             );
  2058.                         foreach ($new_ccs as $new_cc) {
  2059.                             $session_data = json_decode($new_cc->getSessionData(), true);
  2061.                             $session_data['IS_EMAIL_VERIFIED'] = 1;
  2063.                             $updated_session_data = json_encode($session_data);
  2065.                             $new_cc->setSessionData($updated_session_data);
  2066.                             $em_goc->persist($new_cc);
  2067.                         }
  2068.                     }
  2070.                     $userObj->setOtp(0);
  2071.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  2072.                     $userObj->setOtpExpireTs(0);
  2075.                     $em_goc->flush();
  2076.                     $email_twig_data['success'] = true;
  2077.                     $message = "";
  2078.                 }
  2080.             } else {
  2081.                 $message = "Account not found!";
  2082.                 $redirectUrl = "";
  2083.                 $email_twig_data['success'] = false;
  2084.             }
  2087.         }
  2088.         $twigData = array(
  2089.             'page_title' => 'OTP Verification',
  2090.             'message' => $message,
  2091.             "userType" => $userType,
  2092.             "userData" => $userData,
  2093.             "otp" => '',
  2094.             "redirectUrl" => $redirectUrl,
  2095.             "email" => $email_address,
  2096.             "otpExpireTs" => $otpExpireTs,
  2097.             "otpActionId" => $otpActionId,
  2098.             "userCategory" => $userCategory,
  2099.             "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2101.             "systemType" => $systemType,
  2102.             'actionData' => $email_twig_data,
  2103.             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2104.         );
  2106.         $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2107.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2109.             $twigData['encData'] = $encDataStr;
  2110.             $response = new JsonResponse($twigData);
  2113.             $response->headers->set('Access-Control-Allow-Origin', '*');
  2114.             return $response;
  2115.         } else if ($twigData['success'] == true) {
  2116.             $encData = array(
  2117.                 "userType" => $userType,
  2118.                 "otp" => '',
  2119.                 'message' => $message,
  2121.                 "otpExpireTs" => $otpExpireTs,
  2122.                 "otpActionId" => $otpActionId,
  2123.                 "userCategory" => $userCategory,
  2124.                 "userId" => $userData['id'],
  2126.                 "systemType" => $systemType,
  2128.             );
  2131.             $redirectRoute = UserConstants::$OTP_ACTION_DATA[$otpActionId]['redirectRoute'];
  2132.             if ($redirectRoute == '') {
  2133.                 $redirectRoute = 'dashboard';
  2134.             }
  2136.             if ($redirectRoute == 'dashboard') {
  2137.                 $url = $this->generateUrl($redirectRoute, ['_fragment' => null], UrlGeneratorInterface::ABSOLUTE_URL);
  2138.                 $redirectUrl = $url . '?data=' . urlencode($encDataStr);
  2139.             } else {
  2140.                 $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2141.                 $url = $this->generateUrl(
  2142.                     $redirectRoute
  2143.                 );
  2144.                 $redirectUrl = $url . "/" . $encDataStr;
  2145.             }
  2147.             return $this->redirect($redirectUrl);
  2150. //            $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2151. //            $url = $this->generateUrl(
  2152. //                'central_landing'
  2153. //            );
  2154. //            $redirectUrl = $url . "/" . $encDataStr;
  2155. //            return $this->redirect($redirectUrl);
  2158.         } else {
  2159.             return $this->render(
  2160.                 $twig_file,
  2161.                 $twigData
  2162.             );
  2163.         }
  2165.     }
  2167.     public function VerifyOtpWebAction(Request $request, $encData = '')
  2168.     {
  2170.         $em = $this->getDoctrine()->getManager();
  2171.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2172.         $session = $request->getSession();
  2173.         $message = "";
  2174.         $retData = array();
  2175.         $encData = $request->query->get('encData', $encData);
  2176.         $encryptedData = [];
  2177.         if ($encData != '')
  2178.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  2179.         if ($encryptedData == null) $encryptedData = [];
  2181.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  2182.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', (isset($encryptedData['otp']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_')));
  2183.         $email_address = $request->request->get('email', $request->query->get('email', (isset($encryptedData['email']) ? $encryptedData['email'] : '')));
  2184.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  2185.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', (isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : UserConstants::OTP_ACTION_FORGOT_PASSWORD)));
  2186.         $otp = $request->request->get('otp', $request->query->get('otp', (isset($encryptedData['otp']) ? $encryptedData['otp'] : '')));
  2187.         $otpExpireTs = isset($encryptedData['otpExpireTs']) ? $encryptedData['otpExpireTs'] : 0;
  2188.         $userId = $request->request->get('userId', $request->query->get('userId', (isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID, 0))));
  2191.         $userType = UserConstants::USER_TYPE_APPLICANT;
  2193.         $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2194.         $userEntityManager = $em_goc;
  2195.         $userEntityIdField = 'applicantId';
  2196.         $userEntityUserNameField = 'username';
  2197.         $userEntityEmailField1 = 'email';
  2198.         $userEntityEmailField1Getter = 'getEmail';
  2199.         $userEntityEmailField1Setter = 'setEmail';
  2200.         $userEntityEmailField2 = 'oAuthEmail';
  2201.         $userEntityEmailField2Getter = 'geOAuthEmail';
  2202.         $userEntityEmailField2Setter = 'seOAuthEmail';
  2204.         $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2205.         $twigData = [];
  2206.         $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2207.         $email_twig_data = array('success' => false);
  2208.         $redirectUrl = '';
  2210.         $userObj = null;
  2211.         $userData = [];
  2212.         if ($systemType == '_ERP_') {
  2214.             if ($userCategory == '_APPLICANT_') {
  2215.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  2217.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2218.                 $twigData = [];
  2219.                 $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2220.                 $userEntityManager = $em_goc;
  2221.                 $userEntityIdField = 'applicantId';
  2222.                 $userEntityUserNameField = 'username';
  2223.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2226.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2227.             } else {
  2228.                 $userType = UserConstants::USER_TYPE_GENERAL;
  2229.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2230.                 $twigData = [];
  2231.                 $userEntity = 'ApplicationBundle:SysUser';
  2232.                 $userEntityManager = $em;
  2233.                 $userEntityIdField = 'userId';
  2234.                 $userEntityUserNameField = 'userName';
  2235.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2237.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2240.             }
  2241.         } else if ($systemType == '_BUDDYBEE_') {
  2242.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2243.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2244.             $twigData = [];
  2245.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2246.             $userEntityManager = $em_goc;
  2247.             $userEntityIdField = 'applicantId';
  2248.             $userEntityUserNameField = 'username';
  2249.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2251.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2253.         } else if ($systemType == '_CENTRAL_') {
  2254.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2255.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2256.             $twigData = [];
  2257.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2258.             $userEntityManager = $em_goc;
  2259.             $userEntityIdField = 'applicantId';
  2260.             $userEntityUserNameField = 'username';
  2261.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2263.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2265.         }
  2267.         if ($request->isMethod('POST') || $otp != '') {
  2270.             $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2271.                 array(
  2272.                     $userEntityIdField => $userId
  2273.                 )
  2274.             );
  2275.             if ($userObj) {
  2277.             } else {
  2278.                 $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2279.                     array(
  2280.                         $userEntityEmailField1 => $email_address
  2281.                     )
  2282.                 );
  2284.                 if ($userObj) {
  2287.                 } else {
  2290.                     $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2291.                         array(
  2292.                             $userEntityEmailField2 => $email_address
  2293.                         )
  2294.                     );
  2295.                     if ($userObj) {
  2298.                     } else {
  2301.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2302.                             array(
  2303.                                 $userEntityUserNameField => $email_address
  2304.                             )
  2305.                         );
  2308.                     }
  2311.                 }
  2312.             }
  2314.             if ($userObj) {
  2315.                 $userOtp = $userObj->getOtp();
  2316.                 $userOtpActionId = $userObj->getOtpActionId();
  2317.                 $userOtpExpireTs = 1 * $userObj->getOtpExpireTs();
  2318.                 $currentTime = new \DateTime();
  2319.                 $currentTimeTs = 1 * $currentTime->format('U');
  2321.                 $userData = array(
  2322.                     'id' => $userObj->getApplicantId(),
  2323.                     'email' => $email_address,
  2324.                     'appId' => 0,
  2325.                     'image' => $userObj->getImage(),
  2326.                     'firstName' => $userObj->getFirstname(),
  2327.                     'lastName' => $userObj->getLastname(),
  2328.                     //                        'appId'=>$userObj->getUserAppId(),
  2329.                 );
  2331.                 $email_twig_data = [
  2332.                     'page_title' => 'OTP',
  2333.                     'success' => false,
  2334.                     //                        'encryptedData' => $encryptedData,
  2335.                     'message' => $message,
  2336.                     'userType' => $userType,
  2337.                     //                        'errorField' => $errorField,
  2338.                     'otp' => '',
  2339.                     'otpExpireSecond' => $otpExpireSecond,
  2340.                     'otpActionId' => $otpActionId,
  2341.                     'otpExpireTs' => $userOtpExpireTs,
  2342.                     'systemType' => $systemType,
  2343.                     'userCategory' => $userCategory,
  2344.                     'userData' => $userData,
  2345.                     "email" => $email_address,
  2346.                     "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2349.                 ];
  2350.                 if ($otp == '0112') {
  2351.                     $userObj->setOtp(0);
  2352.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  2353.                     $userObj->setOtpExpireTs(0);
  2354.                     $userObj->setTriggerResetPassword(1);
  2356.                     $em_goc->flush();
  2357.                     $email_twig_data['success'] = true;
  2358.                     $message = "";
  2359.                 } else if ($userOtp != $otp) {
  2360.                     $message = "Invalid OTP!";
  2361.                     $email_twig_data['success'] = false;
  2362.                     $redirectUrl = "";
  2363.                 } else if ($userOtpActionId != $otpActionId) {
  2364.                     $message = "Invalid OTP Action!";
  2365.                     $email_twig_data['success'] = false;
  2366.                     $redirectUrl = "";
  2367.                 } else if ($currentTimeTs > $userOtpExpireTs) {
  2368.                     $message = "OTP Expired!";
  2369.                     $email_twig_data['success'] = false;
  2370.                     $redirectUrl = "";
  2371.                 } else {
  2373.                     $userObj->setOtp(0);
  2374.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  2375.                     $userObj->setOtpExpireTs(0);
  2376.                     $userObj->setTriggerResetPassword(0);
  2377.                     $userObj->setIsEmailVerified(0);
  2378.                     $userObj->setIsTemporaryEntry(0);
  2379.                     $em_goc->flush();
  2380.                     $email_twig_data['success'] = true;
  2381.                     $message = "";
  2382.                 }
  2384.             } else {
  2385.                 $message = "Account not found!";
  2386.                 $redirectUrl = "";
  2387.                 $email_twig_data['success'] = false;
  2388.             }
  2391.         }
  2392.         $twigData = array(
  2393.             'page_title' => 'OTP Verification',
  2394.             'message' => $message,
  2395.             "userType" => $userType,
  2396.             "userData" => $userData,
  2397.             "otp" => '',
  2398.             "redirectUrl" => $redirectUrl,
  2399.             "email" => $email_address,
  2400.             "otpExpireTs" => $otpExpireTs,
  2401.             "otpActionId" => $otpActionId,
  2402.             "userCategory" => $userCategory,
  2403.             "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2405.             "systemType" => $systemType,
  2406.             'actionData' => $email_twig_data,
  2407.             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2408.         );
  2409.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2411.             $response = new JsonResponse($twigData);
  2412.             $response->headers->set('Access-Control-Allow-Origin', '*');
  2413.             return $response;
  2414.         } else if ($twigData['success'] == true) {
  2415.             $encData = array(
  2416.                 "userType" => $userType,
  2417.                 "otp" => '',
  2418.                 'message' => $message,
  2420.                 "otpExpireTs" => $otpExpireTs,
  2421.                 "otpActionId" => $otpActionId,
  2422.                 "userCategory" => $userCategory,
  2423.                 "userId" => $userData['id'],
  2425.                 "systemType" => $systemType,
  2427.             );
  2428. //            $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2429. //            $url = $this->generateUrl(
  2430. //                UserConstants::$OTP_ACTION_DATA[$otpActionId]['redirectRoute']
  2431. //            );
  2432. //            $redirectUrl = $url . "/" . $encDataStr;
  2433. //            return $this->redirect($redirectUrl);
  2435.             $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2436.             $url = $this->generateUrl(
  2437.                 'central_landing'
  2438.             );
  2439.             $redirectUrl = $url . "/" . $encDataStr;
  2440.             $this->addFlash('success', 'Email Verified!');
  2441.             return $this->redirect($redirectUrl);
  2444.         } else {
  2445.             return $this->render(
  2446.                 $twig_file,
  2447.                 $twigData
  2448.             );
  2449.         }
  2451.     }
  2454.     // reset new password **
  2455.     public function NewPasswordAction(Request $request, $encData = '')
  2456.     {
  2457.         //  $userCategory=$request->request->has('userCategory');
  2458.         $encryptedData = [];
  2459.         $errorField = '';
  2460.         $message = '';
  2461.         $userType = '';
  2462.         $otpExpireSecond = 180;
  2463.         $session = $request->getSession();
  2464.         if ($encData == '')
  2465.             $encData = $request->get('encData', '');
  2466.         if ($encData != '')
  2467.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  2469.         //    $encryptedData = $this->get('url_encryptor')->decrypt($encData);
  2470.         $otp = isset($encryptedData['otp']) ? $encryptedData['otp'] : 0;
  2471.         $password = isset($encryptedData['password']) ? $encryptedData['password'] : 0;
  2472.         $otpActionId = isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : 0;
  2473.         $userId = isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID);
  2474.         $userCategory = isset($encryptedData['userCategory']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_';
  2475.         //    $em = $this->getDoctrine()->getManager('company_group');
  2476.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2478.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  2479.         $twig_file = '@Application/pages/login/find_account_buddybee.html.twig';
  2480.         $twigData = [];
  2481.         $email_twig_file = '@Application/pages/email/find_account_buddybee.html.twig';
  2482.         $email_twig_data = [];
  2484.         if ($request->isMethod('POST')) {
  2485.             $otp = $request->request->get('otp', $otp);
  2486.             $password = $request->request->get('password', $password);
  2487.             $otpActionId = $request->request->get('otpActionId', $otpActionId);
  2488.             $userId = $request->request->get('userId', $userId);
  2489.             $userCategory = $request->request->get('userCategory', $userCategory);
  2490.             $email_address = $request->request->get('email');
  2492.             if ($systemType == '_ERP_') {
  2494.                 $gocId = $session->get(UserConstants::USER_GOC_ID);
  2495.                 $appId = $session->get(UserConstants::USER_APP_ID);
  2496.                 list($em, $goc) = $this->getPublicDocumentEntityManager($appId);
  2497.                 if (!$em || !$goc) {
  2498.                     return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  2499.                         'page_title' => '404 Not Found',
  2500.                     ));
  2501.                 }
  2503.                 if (!$em || !$goc) {
  2504.                     return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  2505.                         'page_title' => '404 Not Found',
  2506.                     ));
  2507.                 }
  2510.                 if ($userCategory == '_APPLICANT_') {
  2511.                     $userType = UserConstants::USER_TYPE_APPLICANT;
  2513.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2514.                         array(
  2515.                             'applicantId' => $userId
  2516.                         )
  2517.                     );
  2519.                     if ($userObj) {
  2520.                         if ($userObj->getTriggerResetPassword() == 1) {
  2521.                             $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2522.                             $userObj->setPassword($encodedPassword);
  2523.                             $userObj->setTempPassword('');
  2526.                             $userObj->setTriggerResetPassword(0);
  2529.                             $em_goc->flush();
  2530.                             $email_twig_data['success'] = true;
  2531.                             $message = "";
  2534.                             $userData = array(
  2535.                                 'id' => $userObj->getApplicantId(),
  2536.                                 'email' => $email_address,
  2537.                                 'appId' => 0,
  2538.                                 'image' => $userObj->getImage(),
  2539.                                 'firstName' => $userObj->getFirstname(),
  2540.                                 'lastName' => $userObj->getLastname(),
  2541.                                 //                        'appId'=>$userObj->getUserAppId(),
  2542.                             );
  2543.                         } else {
  2544.                             $message = "Action not allowed!";
  2545.                             $email_twig_data['success'] = false;
  2546.                         }
  2549.                     } else {
  2550.                         $message = "Account not found!";
  2551.                         $email_twig_data['success'] = false;
  2552.                     }
  2553.                 } else {
  2554.                     $userType = $session->get(UserConstants::USER_TYPE);
  2555.                     $userObj = $em->getRepository('ApplicationBundle\\Entity\\SysUser')->findOneBy(
  2556.                         array(
  2557.                             'userId' => $userId
  2558.                         )
  2559.                     );
  2561.                     if ($userObj) {
  2562.                         if ($userObj->getTriggerResetPassword() == 1) {
  2563.                             $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2564.                             $userObj->setPassword($encodedPassword);
  2565.                             $userObj->setTempPassword('');
  2568.                             $userObj->setTriggerResetPassword(0);
  2571.                             $em->flush();
  2572.                             $email_twig_data['success'] = true;
  2573.                             $message = "";
  2575.                         } else {
  2576.                             $message = "Action not allowed!";
  2577.                             $email_twig_data['success'] = false;
  2578.                         }
  2581.                     } else {
  2582.                         $message = "Account not found!";
  2583.                         $email_twig_data['success'] = false;
  2584.                     }
  2585.                 }
  2587.                 if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2589.                     $response = new JsonResponse(array(
  2590.                             'templateData' => $twigData,
  2591.                             'message' => $message,
  2592.                             'actionData' => $email_twig_data,
  2593.                             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2594.                         )
  2595.                     );
  2596.                     $response->headers->set('Access-Control-Allow-Origin', '*');
  2597.                     return $response;
  2599.                 } else if ($email_twig_data['success'] == true) {
  2600.                     //                    $twig_file = '@Authentication/pages/views/reset_password_success_buddybee.html.twig';
  2601.                     //                    $twigData = [
  2602.                     //                        'page_title' => 'Reset Successful',
  2603.                     //                        'encryptedData' => $encryptedData,
  2604.                     //                        'message' => $message,
  2605.                     //                        'userType' => $userType,
  2606.                     //                        'errorField' => $errorField,
  2607.                     //
  2608.                     //                    ];
  2609.                     //                    return $this->render(
  2610.                     //                        $twig_file,
  2611.                     //                        $twigData
  2612.                     //                    );
  2614.                     return $this->redirectToRoute('dashboard');
  2615.                 }
  2618.             } else if ($systemType == '_BUDDYBEE_') {
  2619.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  2621.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2622.                     array(
  2623.                         'applicantId' => $userId
  2624.                     )
  2625.                 );
  2627.                 if ($userObj) {
  2628.                     if ($userObj->getTriggerResetPassword() == 1) {
  2629.                         $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2630.                         $userObj->setPassword($encodedPassword);
  2631.                         $userObj->setTempPassword('');
  2634.                         $userObj->setTriggerResetPassword(0);
  2637.                         $em_goc->flush();
  2638.                         $email_twig_data['success'] = true;
  2639.                         $message = "";
  2642.                         $userData = array(
  2643.                             'id' => $userObj->getApplicantId(),
  2644.                             'email' => $email_address,
  2645.                             'appId' => 0,
  2646.                             'image' => $userObj->getImage(),
  2647.                             'firstName' => $userObj->getFirstname(),
  2648.                             'lastName' => $userObj->getLastname(),
  2649.                             //                        'appId'=>$userObj->getUserAppId(),
  2650.                         );
  2651.                     } else {
  2652.                         $message = "Action not allowed!";
  2653.                         $email_twig_data['success'] = false;
  2654.                     }
  2657.                 } else {
  2658.                     $message = "Account not found!";
  2659.                     $email_twig_data['success'] = false;
  2660.                 }
  2663.             } else if ($systemType == '_CENTRAL_') {
  2664.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  2666.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2667.                     array(
  2668.                         'applicantId' => $userId
  2669.                     )
  2670.                 );
  2672.                 if ($userObj) {
  2673.                     if ($userObj->getTriggerResetPassword() == 1) {
  2674.                         $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2675.                         $userObj->setPassword($encodedPassword);
  2676.                         $userObj->setTempPassword('');
  2679.                         $userObj->setTriggerResetPassword(0);
  2682.                         $em_goc->flush();
  2683.                         $email_twig_data['success'] = true;
  2684.                         $message = "";
  2687.                         $userData = array(
  2688.                             'id' => $userObj->getApplicantId(),
  2689.                             'email' => $email_address,
  2690.                             'appId' => 0,
  2691.                             'image' => $userObj->getImage(),
  2692.                             'firstName' => $userObj->getFirstname(),
  2693.                             'lastName' => $userObj->getLastname(),
  2694.                             //                        'appId'=>$userObj->getUserAppId(),
  2695.                         );
  2696.                     } else {
  2697.                         $message = "Action not allowed!";
  2698.                         $email_twig_data['success'] = false;
  2699.                     }
  2702.                 } else {
  2703.                     $message = "Account not found!";
  2704.                     $email_twig_data['success'] = false;
  2705.                 }
  2708.             }
  2711.             if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2713.                 $response = new JsonResponse(array(
  2714.                         'templateData' => $twigData,
  2715.                         'message' => $message,
  2716.                         'actionData' => $email_twig_data,
  2717.                         'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2718.                     )
  2719.                 );
  2720.                 $response->headers->set('Access-Control-Allow-Origin', '*');
  2721.                 return $response;
  2723.             } else if ($email_twig_data['success'] == true) {
  2725.                 if ($systemType == '_ERP_') $twig_file = '@Authentication/pages/views/reset_password_success_central.html.twig';
  2726.                 else if ($systemType == '_BUDDYBEE_') $twig_file = '@Authentication/pages/views/reset_password_success_buddybee.html.twig';
  2727.                 else if ($systemType == '_CENTRAL_') $twig_file = '@Authentication/pages/views/reset_password_success_central.html.twig';
  2729.                 $twigData = [
  2730.                     'page_title' => 'Reset Successful',
  2731.                     'encryptedData' => $encryptedData,
  2732.                     'message' => $message,
  2733.                     'userType' => $userType,
  2734.                     'errorField' => $errorField,
  2736.                 ];
  2737.                 return $this->render(
  2738.                     $twig_file,
  2739.                     $twigData
  2740.                 );
  2741.             }
  2744.         }
  2746.         if ($systemType == '_ERP_') {
  2747.             if ($userCategory == '_APPLICANT_') {
  2748.                 $userType = $session->get(UserConstants::USER_TYPE);
  2749.                 $twig_file = '@Application/pages/login/find_account_buddybee.html.twig';
  2750.                 $twigData = [
  2751.                     'page_title' => 'Find Account',
  2752.                     'encryptedData' => $encryptedData,
  2753.                     'message' => $message,
  2754.                     'userType' => $userType,
  2755.                     'errorField' => $errorField,
  2757.                 ];
  2758.             } else {
  2759.                 $userType = $session->get(UserConstants::USER_TYPE);
  2761.                 $twig_file = '@Application/pages/login/reset_password_erp.html.twig';
  2762.                 $twigData = [
  2763.                     'page_title' => 'Reset Password',
  2764.                     'encryptedData' => $encryptedData,
  2765.                     'message' => $message,
  2766.                     'userType' => $userType,
  2767.                     'errorField' => $errorField,
  2769.                 ];
  2770.             }
  2773.         } else if ($systemType == '_BUDDYBEE_') {
  2774.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2776.             $twig_file = '@Authentication/pages/views/reset_new_password_buddybee.html.twig';
  2777.             $twigData = [
  2778.                 'page_title' => 'Reset Password',
  2779.                 'encryptedData' => $encryptedData,
  2780.                 'message' => $message,
  2781.                 'userType' => $userType,
  2782.                 'errorField' => $errorField,
  2784.             ];
  2785.         } else if ($systemType == '_CENTRAL_') {
  2786.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2788.             $twig_file = '@HoneybeeWeb/pages/views/reset_new_password_honeybee.html.twig';
  2789.             $twigData = [
  2790.                 'page_title' => 'Reset Password',
  2791.                 'encryptedData' => $encryptedData,
  2792.                 'message' => $message,
  2793.                 'userType' => $userType,
  2794.                 'errorField' => $errorField,
  2796.             ];
  2797.         }
  2798.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2799.             if ($userId != 0 && $userId != null) {
  2800.                 $response = new JsonResponse(array(
  2801.                         'templateData' => $twigData,
  2802.                         'message' => $message,
  2803. //                        'encryptedData' => $encryptedData,
  2804.                         'actionData' => $email_twig_data,
  2805.                         'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2806.                     )
  2807.                 );
  2808.             } else {
  2809.                 $response = new JsonResponse(array(
  2810.                         'templateData' => [],
  2811.                         'message' => 'Unauthorized',
  2812.                         'actionData' => [],
  2813. //                        'encryptedData' => $encryptedData,
  2814.                         'success' => false,
  2815.                     )
  2816.                 );
  2817.             }
  2818.             $response->headers->set('Access-Control-Allow-Origin', '*');
  2819.             return $response;
  2821.         } else {
  2822.             if ($userId != 0 && $userId != null) {
  2823.                 return $this->render(
  2824.                     $twig_file,
  2825.                     $twigData
  2826.                 );
  2827.             } else
  2828.                 return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  2829.                     'page_title' => '404 Not Found',
  2831.                 ));
  2832.         }
  2834.     }
  2836.     // hire
  2837. //    public function CentralHirePageAction()
  2838. //    {
  2839. //        $em_goc = $this->getDoctrine()->getManager('company_group');
  2840. //        $freelancersData = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  2841. //            ->createQueryBuilder('m')
  2842. //             ->where("m.isConsultant =1")
  2843. //
  2844. //            ->getQuery()
  2845. //            ->getResult();
  2846. //
  2847. //        return $this->render('@HoneybeeWeb/pages/hire.html.twig', array(
  2848. //            'page_title' => 'Hire',
  2849. //            'freelancersData' => $freelancersData,
  2850. //
  2851. //        ));
  2852. //    }
  2853. //    public function CentralHirePageAction(Request $request)
  2854. //    {
  2855. //        $em_goc = $this->getDoctrine()->getManager('company_group');
  2856. //        $search = $request->query->get('q'); // get search text
  2857. //
  2858. //        $qb = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  2859. //            ->createQueryBuilder('m')
  2860. //            ->where('m.isConsultant = 1');
  2861. //
  2862. //        if (!empty($search)) {
  2863. //            $qb->andWhere('m.firstname LIKE :search
  2864. //                       OR m.lastname LIKE :search ')
  2865. //                ->setParameter('search', '%' . $search . '%');
  2866. //        }
  2867. //
  2868. //        $freelancersData = $qb->getQuery()->getResult();
  2869. //
  2870. //        return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  2871. //            'page_title' => 'Hire',
  2872. //            'freelancersData' => $freelancersData,
  2873. //            'searchValue' => $search
  2874. //        ]);
  2875. //    }
  2876.     public function CentralHirePageAction(Request $request)
  2877.     {
  2878.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2879.         $search = $request->query->get('q'); // search text
  2881.         $qb = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  2882.             ->createQueryBuilder('m')
  2883.             ->where('m.isConsultant = 1');
  2885.         if (!empty($search)) {
  2886.             $qb->andWhere('m.firstname LIKE :search OR m.lastname LIKE :search')
  2887.                 ->setParameter('search', '%' . $search . '%');
  2888.         }
  2890.         $freelancersData = $qb->getQuery()->getResult();
  2892.         // For AJAX requests, we return the same Twig, but we include the searchValue
  2893.         if ($request->isXmlHttpRequest()) {
  2894.             return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  2895.                 'page_title' => 'Hire',
  2896.                 'freelancersData' => $freelancersData,
  2897.                 'searchValue' => $search, // so input retains value
  2898.                 'isAjax' => true, // flag to indicate AJAX
  2899.             ]);
  2900.         }
  2902.         // Normal page load
  2903.         return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  2904.             'page_title' => 'Hire',
  2905.             'freelancersData' => $freelancersData,
  2906.             'searchValue' => $search,
  2907.             'isAjax' => false,
  2908.         ]);
  2909.     }
  2911.     // end of centralHire
  2913.     // pricing
  2914.     public function CentralPricingPageAction(Request $request)
  2915.     {
  2916.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2917.         $session = $request->getSession();
  2918.         $userId = $session->get(UserConstants::USER_ID);
  2920.         $companiesForUser = [];
  2922.         if ($userId) {
  2923.             $userDetails = $em_goc->getRepository('CompanyGroupBundle\Entity\EntityApplicantDetails')->find($userId);
  2925.             if ($userDetails) {
  2927.                 $userTypeByAppIds = json_decode($userDetails->getUserTypesByAppIds(), true);
  2929.                 if (is_array($userTypeByAppIds)) {
  2931.                     $adminAppIds = [];
  2933.                     foreach ($userTypeByAppIds as $appId => $types) {
  2934.                         if (in_array(1, $types)) {
  2935.                             $adminAppIds[] = $appId;
  2936.                         }
  2937.                     }
  2939.                     if (!empty($adminAppIds)) {
  2940.                         $companiesForUser = $em_goc->getRepository('CompanyGroupBundle\Entity\CompanyGroup')
  2941.                             ->createQueryBuilder('c')
  2942.                             ->where('c.appId IN (:appIds)')
  2943.                             ->setParameter('appIds', $adminAppIds)
  2944.                             ->getQuery()
  2945.                             ->getResult();
  2946.                     }
  2947.                 }
  2948.             }
  2949.         }
  2951.         $packageDetails = GeneralConstant::$packageDetails;
  2953.         return $this->render('@HoneybeeWeb/pages/pricing.html.twig', [
  2954.             'page_title' => 'HoneyBee Pricing | Software Subscription + Project-Based HoneyCore Edge+ Deployment',
  2955.             'og_title' => 'HoneyBee Pricing | Software Subscription + Project-Based HoneyCore Edge+ Deployment',
  2956.             'og_description' => 'HoneyBee software subscription starts from €7.99/user/month. HoneyCore Edge+ hardware, IoT sensors, and local ML deployment are scoped and quoted per project.',
  2957.             'packageDetails' => $packageDetails,
  2958.             'companies' => $companiesForUser,
  2959.         ]);
  2960.     }
  2963.     // faq
  2964.     public function CentralFaqPageAction()
  2965.     {
  2966.         return $this->render('@HoneybeeWeb/pages/faq.html.twig', array(
  2967.             'page_title'     => 'FAQ | HoneyBee — EPC, Industrial & Platform Questions',
  2968.             'packageDetails' => GeneralConstant::$packageDetails,
  2969.         ));
  2970.     }
  2972.     // terms and condiitons
  2973.     public function CentralTermsAndConditionPageAction()
  2974.     {
  2975.         return $this->render('@HoneybeeWeb/pages/terms_and_conditions.html.twig', array(
  2976.             'page_title' => 'Terms and Conditions',
  2978.         ));
  2979.     }
  2982.     // Refund Policy
  2983.    public function CentralRefundPolicyPageAction()
  2984. {
  2985.     return $this->render('@HoneybeeWeb/pages/refund_policy.html.twig', array(
  2986.         'page_title' => 'Refund Policy',
  2987.     ));
  2988. }
  2990.     // Cancellation Policy
  2991.    public function CentralCancellationPolicyPageAction()
  2992. {
  2993.     return $this->render('@HoneybeeWeb/pages/cancellation_policy.html.twig', array(
  2994.            'page_title' => 'Cancellation Policy',
  2995.     ));
  2996. }
  2998.     // Help page
  2999.    public function CentralHelpPageAction()
  3000.    {
  3001.     return $this->render('@HoneybeeWeb/pages/help.html.twig', array(
  3002.         'page_title' => 'Help',
  3003.     ));
  3004.    }
  3006.  // Career page
  3007.    public function CentralCareerPageAction()
  3008. {
  3009.     return $this->render('@HoneybeeWeb/pages/career.html.twig', array(
  3010.         'page_title' => 'Career',
  3011.     ));
  3012. }
  3014.     public function CentralPrivacyPolicyAction()
  3015.     {
  3016.         return $this->render('@HoneybeeWeb/pages/privacy_policy.html.twig', array(
  3017.             'page_title' => 'Privacy Policy — HoneyBee',
  3018.         ));
  3019.     }
  3021.     // Hivemind (mobile app) privacy policy — public, store-listing URL /privacy
  3022.     public function HivemindPrivacyPolicyAction()
  3023.     {
  3024.         return $this->render('@HoneybeeWeb/pages/hivemind_privacy.html.twig', array(
  3025.             'page_title'     => 'Hivemind Privacy Policy — HoneyBee',
  3026.             'og_title'       => 'Hivemind Privacy Policy',
  3027.             'og_description' => 'How Hivemind, the AI/voice/command interface for HoneyBee ERP, collects, uses, shares, and protects information, plus store disclosure notes.',
  3028.         ));
  3029.     }
  3031.     public function CentralDpaPageAction()
  3032.     {
  3033.         return $this->render('@HoneybeeWeb/pages/dpa.html.twig', array(
  3034.             'page_title' => 'Data Processing Addendum (DPA) — HoneyBee',
  3035.         ));
  3036.     }
  3038.     public function CentralSolutionsPageAction()
  3039.     {
  3040.         return $this->render('@HoneybeeWeb/pages/solutions.html.twig', array(
  3041.             'page_title' => 'HoneyBee Solutions | EPC, Energy Asset, IPP/OPEX/PPA & Multi-Site Operations',
  3042.             'og_title' => 'HoneyBee Solutions | EPC, Energy Asset, IPP/OPEX/PPA & Multi-Site Operations',
  3043.             'og_description' => 'HoneyBee delivers purpose-built solutions for EPC contractors, energy asset managers, IPP/OPEX/PPA operators, and multi-site industrial businesses. HoneyBee is not an EPC contractor or project developer.',
  3044.         ));
  3045.     }
  3047.     public function CentralPartnersPageAction()
  3048.     {
  3049.         return $this->render('@HoneybeeWeb/pages/partners.html.twig', array(
  3050.             'page_title' => 'HoneyBee Partner Program | Implementation, HoneyCore Edge+, IoT & Infrastructure Partners',
  3051.             'og_title' => 'HoneyBee Partner Program | Implementation, HoneyCore Edge+, IoT & Infrastructure Partners',
  3052.             'og_description' => 'Join the HoneyBee partner ecosystem as an implementation partner, HoneyCore Edge+ local infrastructure partner, IoT hardware reseller, or software integration partner.',
  3053.         ));
  3054.     }
  3056.     public function CheckoutPageAction(Request $request, $encData = '')
  3057.     {
  3058.         $em = $this->getDoctrine()->getManager('company_group');
  3059.         $em_goc = $this->getDoctrine()->getManager('company_group');
  3060.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  3062.         $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  3063.         if ($encData != "") {
  3065.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  3066.             if ($encryptedData == null) $encryptedData = [];
  3067.             if (isset($encryptedData['invoiceId'])) $invoiceId = $encryptedData['invoiceId'];
  3069.         }
  3070.         $session = $request->getSession();
  3071.         $currencyForGateway = 'eur';
  3072.         $gatewayInvoice = null;
  3073.         if ($invoiceId != 0)
  3074.             $gatewayInvoice = $em->getRepository(EntityInvoice::class)->find($invoiceId);
  3077.         $paymentGateway = $request->request->get('paymentGateway', 'stripe'); //aamarpay,bkash
  3078.         $paymentType = $request->request->get('paymentType', 'credit');
  3079.         $retailerId = $request->request->get('retailerId', 0);
  3080.         if ($request->query->has('currency'))
  3081.             $currencyForGateway = $request->query->get('currency');
  3082.         else
  3083.             $currencyForGateway = $request->request->get('currency', 'eur');
  3085. //        {
  3086. //            if ($request->query->has('meetingSessionId'))
  3087. //                $id = $request->query->get('meetingSessionId');
  3088. //        }
  3091.         $currentUserBalance = 0;
  3092.         $currentUserCoinBalance = 0;
  3094.         $gatewayAmount = 0;
  3095.         $redeemedAmount = 0;
  3096.         $redeemedSessionCount = 0;
  3097.         $toConsumeSessionCount = 0;
  3098.         $invoiceSessionCount = 0;
  3099.         $payableAmount = 0;
  3100.         $promoClaimedAmount = 0;
  3101.         $promoCodeId = 0;
  3102.         $promoClaimedSession = 0;
  3104.         $bookingExpireTime = null;
  3105.         $bookingExpireTs = 0;
  3108.         $imageBySessionCount = [
  3109.             0 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3110.             100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3111.             200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3112.             300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3113.             400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3114.             500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3115.             600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3116.             700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3117.             800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3118.             900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3119.             1000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3120.             1100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3121.             1200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3122.             1300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3123.             1400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3124.             1500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3126.             1600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3127.             1700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3128.             1800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3129.             1900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3130.             2000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3131.             2100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3132.             2200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3133.             2300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3134.             2400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3135.             2500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3136.             2600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3137.             2700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3138.             2800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3139.             2900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3140.             3000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3141.             3100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3142.             3200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3143.             3300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3144.             3400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3145.             3500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3146.             3600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3147.             3700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3148.         ];
  3151.         if (!$gatewayInvoice) {
  3153.             if ($request->isMethod('POST')) {
  3155.                 $totalAmount = 0;
  3156.                 $totalSessionCount = 0;
  3157.                 $consumedAmount = 0;
  3158.                 $consumedSessionCount = 0;
  3159.                 $bookedById = 0;
  3160.                 $bookingRefererId = 0;
  3163.                 if ($session->get(UserConstants::USER_ID)) {
  3164.                     $bookedById = $session->get(UserConstants::USER_ID);
  3165.                     $bookingRefererId = 0;
  3167. //                    $toConsumeSessionCount = 1 * $request->request->get('meetingSessionConsumeCount', 0);
  3168.                     $invoiceSessionCount = 1 * ($request->request->get('sessionCount', 0) == '' ? 0 : $request->request->get('sessionCount', 0));
  3170.                     //1st do the necessary
  3171.                     $extMeeting = null;
  3172.                     $meetingSessionId = 0;
  3173.                     if ($request->request->has('purchasePackage')) {
  3176.                         //1. check if any bee card if yes try to claim it , modify current balance then
  3178.                         $beeCodeSerial = $request->request->get('beeCodeSerial', '');
  3179.                         $promoCode = $request->request->get('promoCode', '');
  3180.                         $beeCodePin = $request->request->get('beeCodePin', '');
  3181.                         $userId = $request->request->get('userId', $session->get(UserConstants::USER_ID));
  3183.                         $studentDetails = null;
  3184.                         $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($userId);
  3185.                         if ($studentDetails) {
  3186.                             $currentUserBalance = $studentDetails->getAccountBalance();
  3187.                         }
  3190.                         if ($beeCodeSerial != '' && $beeCodePin != '') {
  3191.                             $claimData = MiscActions::ClaimBeeCode($em,
  3192.                                 [
  3193.                                     'claimFlag' => 1,
  3194.                                     'pin' => $beeCodePin,
  3195.                                     'serial' => $beeCodeSerial,
  3196.                                     'userId' => $userId,
  3197.                                 ]);
  3199.                             if ($userId == $session->get(UserConstants::USER_ID)) {
  3200.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3203.                                 $claimData['newCoinBalance'] = $session->get('BUDDYBEE_COIN_BALANCE');
  3204.                                 $claimData['newBalance'] = $session->get('BUDDYBEE_BALANCE');
  3205.                             }
  3208.                             $redeemedAmount = $claimData['data']['claimedAmount'];
  3209.                             $redeemedSessionCount = $claimData['data']['claimedCoin'];
  3212.                         } else
  3213.                             if ($userId == $session->get(UserConstants::USER_ID)) {
  3214.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3215.                             }
  3216.                         $payableAmount = round($request->request->get('payableAmount', 0), 0);
  3218.                         $totalAmountWoDiscount = round($request->request->get('totalAmountWoDiscount', 0), 0);
  3219.                         //now claim and process promocode
  3220.                         if ($promoCode != '') {
  3223.                             $claimData = MiscActions::ClaimPromoCode($em,
  3224.                                 [
  3226.                                     'claimFlag' => 1,
  3227.                                     'promoCode' => $promoCode,
  3228.                                     'decryptedPromoCodeData' => json_decode($this->get('url_encryptor')->decrypt($promoCode), true),
  3229.                                     'orderValue' => $totalAmountWoDiscount,
  3230.                                     'currency' => $currencyForGateway,
  3231.                                     'orderCoin' => $invoiceSessionCount,
  3233.                                     'userId' => $userId,
  3234.                                 ]);
  3237.                             $promoClaimedAmount = 0;
  3238. //                            $promoClaimedAmount = $claimData['data']['claimedAmount']*(BuddybeeConstant::$convMultFromTo['eur'][$currencyForGateway]);
  3239.                             $promoCodeId = $claimData['promoCodeId'];
  3240.                             $promoClaimedSession = $claimData['data']['claimedCoin'];
  3243.                         }
  3245.                         if ($userId == $session->get(UserConstants::USER_ID)) {
  3246.                             MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3247.                             $currentUserBalance = $session->get('BUDDYBEE_BALANCE');
  3248.                             $currentUserCoinBalance = $session->get('BUDDYBEE_COIN_BALANCE');
  3249.                         } else {
  3250.                             if ($bookingRefererId == 0)
  3251.                                 $bookingRefererId = $session->get(UserConstants::USER_ID);
  3252.                             $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($userId);
  3253.                             if ($studentDetails) {
  3254.                                 $currentUserBalance = $studentDetails->getAccountBalance();
  3255.                                 $currentUserCoinBalance = $studentDetails->getSessionCountBalance();
  3256.                                 if ($bookingRefererId != $userId && $bookingRefererId != 0) {
  3257.                                     $bookingReferer = $em_goc->getRepository(EntityApplicantDetails::class)->find($bookingRefererId);
  3258.                                     if ($bookingReferer)
  3259.                                         if ($bookingReferer->getIsAdmin()) {
  3260.                                             $studentDetails->setAssignedSalesRepresentativeId($bookingRefererId);
  3261.                                             $em_goc->flush();
  3262.                                         }
  3264.                                 }
  3265.                             }
  3266.                         }
  3269.                         //2. check if any promo code  if yes add it to promo discount
  3272.                         //3. check if scheule is still temporarily booked if not return that you cannot book it
  3275.                         Buddybee::ExpireAnyMeetingSessionIfNeeded($em);
  3276.                         Buddybee::ExpireAnyEntityInvoiceIfNeeded($em);
  3279. //                        if ($request->request->get('autoAssignMeetingSession', 0) == 1
  3280. //                            && $request->request->get('consultancyScheduleId', 0) != 0
  3281. //                            && $request->request->get('consultancyScheduleId', 0) != ''
  3282. //                        )
  3283.                         {
  3286.                             //1st check if a meeting session exxists with same TS, student id , consultant id
  3288. //                            $scheduledStartTime = new \DateTime('@' . $request->request->get('consultancyScheduleId', ''));
  3289. //                            $extMeeting = $em->getRepository('CompanyGroupBundle\\Entity\\EntityMeetingSession')
  3290. //                                ->findOneBy(
  3291. //                                    array(
  3292. //                                        'scheduledTimeTs' => $scheduledStartTime->format('U'),
  3293. //                                        'consultantId' => $request->request->get('consultantId', 0),
  3294. //                                        'studentId' => $request->request->get('studentId', 0),
  3295. //                                        'durationAllowedMin' => $request->request->get('meetingSessionScheduledDuration', BuddybeeConstant::PER_SESSION_MINUTE),
  3296. //                                    )
  3297. //                                );
  3299. //                            if ($extMeeting) {
  3300. //                                $new = $extMeeting;
  3301. //                                $meetingSessionId = $new->getSessionId();
  3302. //                                $periodMarker = $scheduledStartTime->format('Ym');
  3303. //
  3304. //                            }
  3305. //                            else {
  3306. //
  3307. //
  3308. //                                $scheduleValidity = MiscActions::CheckIfScheduleCanBeConfirmed(
  3309. //                                    $em,
  3310. //                                    $request->request->get('consultantId', 0),
  3311. //                                    $request->request->get('studentId', 0),
  3312. //                                    $scheduledStartTime->format('U'),
  3313. //                                    $request->request->get('meetingSessionScheduledDuration', BuddybeeConstant::PER_SESSION_MINUTE),
  3314. //                                    1
  3315. //                                );
  3316. //
  3317. //                                if (!$scheduleValidity) {
  3318. //                                    $url = $this->generateUrl(
  3319. //                                        'consultant_profile'
  3320. //                                    );
  3321. //                                    $output = [
  3322. //
  3323. //                                        'proceedToCheckout' => 0,
  3324. //                                        'message' => 'Session Booking Expired or not Found!',
  3325. //                                        'errorFlag' => 1,
  3326. //                                        'redirectUrl' => $url . '/' . $request->request->get('consultantId', 0)
  3327. //                                    ];
  3328. //                                    return new JsonResponse($output);
  3329. //                                }
  3330. //                                $new = new EntityMeetingSession();
  3331. //
  3332. //                                $new->setTopicId($request->request->get('consultancyTopic', 0));
  3333. //                                $new->setConsultantId($request->request->get('consultantId', 0));
  3334. //                                $new->setStudentId($request->request->get('studentId', 0));
  3335. //                                $consultancyTopic = $em_goc->getRepository(EntityCreateTopic::class)->find($request->request->get('consultancyTopic', 0));
  3336. //                                $new->setMeetingType($consultancyTopic ? $consultancyTopic->getMeetingType() : 0);
  3337. //                                $new->setConsultantCanUpload($consultancyTopic ? $consultancyTopic->getConsultantCanUpload() : 0);
  3338. //
  3339. //
  3340. //                                $scheduledEndTime = new \DateTime($request->request->get('scheduledTime', ''));
  3341. //                                $scheduledEndTime = $scheduledEndTime->modify('+' . $request->request->get('meetingSessionScheduledDuration', 30) . ' minute');
  3342. //
  3343. //                                //$new->setScheduledTime($request->request->get('setScheduledTime'));
  3344. //                                $new->setScheduledTime($scheduledStartTime);
  3345. //                                $new->setDurationAllowedMin($request->request->get('meetingSessionScheduledDuration', 30));
  3346. //                                $new->setDurationLeftMin($request->request->get('meetingSessionScheduledDuration', 30));
  3347. //                                $new->setSessionExpireDate($scheduledEndTime);
  3348. //                                $new->setSessionExpireDateTs($scheduledEndTime->format('U'));
  3349. //                                $new->setEquivalentSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  3350. //                                $new->setMeetingSpecificNote($request->request->get('meetingSpecificNote', ''));
  3351. //
  3352. //                                $new->setUsableSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  3353. //                                $new->setRedeemSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  3354. //                                $new->setMeetingActionFlag(0);// no action waiting for meeting
  3355. //                                $new->setScheduledTime($scheduledStartTime);
  3356. //                                $new->setScheduledTimeTs($scheduledStartTime->format('U'));
  3357. //                                $new->setPayableAmount($request->request->get('payableAmount', 0));
  3358. //                                $new->setDueAmount($request->request->get('dueAmount', 0));
  3359. //                                //$new->setScheduledTime(new \DateTime($request->get('setScheduledTime')));
  3360. //                                //$new->setPcakageDetails(json_encode(($request->request->get('packageData'))));
  3361. //                                $new->setPackageName(($request->request->get('packageName', '')));
  3362. //                                $new->setPcakageDetails(($request->request->get('packageData', '')));
  3363. //                                $new->setScheduleId(($request->request->get('consultancyScheduleId', 0)));
  3364. //                                $currentUnixTime = new \DateTime();
  3365. //                                $currentUnixTimeStamp = $currentUnixTime->format('U');
  3366. //                                $studentId = $request->request->get('studentId', 0);
  3367. //                                $consultantId = $request->request->get('consultantId', 0);
  3368. //                                $new->setMeetingRoomId(str_pad($consultantId, 4, STR_PAD_LEFT) . $currentUnixTimeStamp . str_pad($studentId, 4, STR_PAD_LEFT));
  3369. //                                $new->setSessionValue(($request->request->get('sessionValue', 0)));
  3370. ////                        $new->setIsPayment(0);
  3371. //                                $new->setConsultantIsPaidFull(0);
  3372. //
  3373. //                                if ($bookingExpireTs == 0) {
  3374. //
  3375. //                                    $bookingExpireTime = new \DateTime();
  3376. //                                    $currTime = new \DateTime();
  3377. //                                    $currTimeTs = $currTime->format('U');
  3378. //                                    $bookingExpireTs = (1 * $scheduledStartTime->format('U')) - (24 * 3600);
  3379. //                                    if ($bookingExpireTs < $currTimeTs) {
  3380. //                                        if ((1 * $scheduledStartTime->format('U')) - $currTimeTs > (12 * 3600))
  3381. //                                            $bookingExpireTs = (1 * $scheduledStartTime->format('U')) - (2 * 3600);
  3382. //                                        else
  3383. //                                            $bookingExpireTs = (1 * $scheduledStartTime->format('U'));
  3384. //                                    }
  3385. //
  3386. ////                                    $bookingExpireTs = $bookingExpireTime->format('U');
  3387. //                                }
  3388. //
  3389. //                                $new->setPaidSessionCount(0);
  3390. //                                $new->setBookedById($bookedById);
  3391. //                                $new->setBookingRefererId($bookingRefererId);
  3392. //                                $new->setDueSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  3393. //                                $new->setExpireIfUnpaidTs($bookingExpireTs);
  3394. //                                $new->setBookingExpireTs($bookingExpireTs);
  3395. //                                $new->setConfirmationExpireTs($bookingExpireTs);
  3396. //                                $new->setIsPaidFull(0);
  3397. //                                $new->setIsExpired(0);
  3398. //
  3399. //
  3400. //                                $em_goc->persist($new);
  3401. //                                $em_goc->flush();
  3402. //                                $meetingSessionId = $new->getSessionId();
  3403. //                                $periodMarker = $scheduledStartTime->format('Ym');
  3404. //                                MiscActions::UpdateSchedulingRestrictions($em_goc, $consultantId, $periodMarker, (($request->request->get('meetingSessionScheduledDuration', 30)) / 60), -(($request->request->get('meetingSessionScheduledDuration', 30)) / 60));
  3405. //                            }
  3407.                         }
  3410.                         //4. if after all this stages passed then calcualte gateway payable
  3413.                         if ($request->request->get('isRecharge', 0) == 1) {
  3414.                             if (($redeemedAmount + $promoClaimedAmount) >= $payableAmount) {
  3415.                                 $payableAmount = ($redeemedAmount + $promoClaimedAmount);
  3416.                                 $gatewayAmount = 0;
  3417.                             } else
  3418.                                 $gatewayAmount = $payableAmount - ($redeemedAmount + $promoClaimedAmount);
  3419.                         } else {
  3420.                             if ($toConsumeSessionCount <= $currentUserCoinBalance && $invoiceSessionCount <= $toConsumeSessionCount) {
  3421.                                 $payableAmount = 0;
  3422.                                 $gatewayAmount = 0;
  3423.                             } else if (($redeemedAmount + $promoClaimedAmount) >= $payableAmount) {
  3424.                                 $payableAmount = ($redeemedAmount + $promoClaimedAmount);
  3425.                                 $gatewayAmount = 0;
  3426.                             } else
  3427.                                 $gatewayAmount = $payableAmount <= ($currentUserBalance + ($redeemedAmount + $promoClaimedAmount)) ? 0 : ($payableAmount - $currentUserBalance - ($redeemedAmount + $promoClaimedAmount));
  3428.                         }
  3429.                         $gatewayAmount = round($gatewayAmount, 2);
  3430.                         $dueAmount = round($request->request->get('dueAmount', $payableAmount), 0);
  3433.                         if ($request->request->has('gatewayProductData'))
  3434.                             $gatewayProductData = $request->request->get('gatewayProductData');
  3435.                         $gatewayProductData = [[
  3436.                             'price_data' => [
  3437.                                 'currency' => $currencyForGateway,
  3438.                                 'unit_amount' => $gatewayAmount != 0 ? ((100 * $gatewayAmount) / ($invoiceSessionCount != 0 ? $invoiceSessionCount : 1)) : 200000,
  3439.                                 'product_data' => [
  3440. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  3441.                                     'name' => 'Bee Coins',
  3442.                                     'images' => [$imageBySessionCount[0]],
  3443.                                 ],
  3444.                             ],
  3445.                             'quantity' => $invoiceSessionCount != 0 ? $invoiceSessionCount : 1,
  3446.                         ]];
  3449.                         $new_invoice = null;
  3452.                         if ($extMeeting) {
  3453.                             $new_invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  3454.                                 ->findOneBy(
  3455.                                     array(
  3456.                                         'invoiceType' => $request->request->get('invoiceType', BuddybeeConstant::ENTITY_INVOICE_TYPE_PAYMENT_TO_HONEYBEE),
  3457.                                         'meetingId' => $extMeeting->getSessionId(),
  3458.                                     )
  3459.                                 );
  3460.                         }
  3462.                         if ($new_invoice) {
  3464.                         } else {
  3467.                             $new_invoice = new EntityInvoice();
  3468.                             $invoiceDate = new \DateTime();
  3469.                             $new_invoice->setInvoiceDate($invoiceDate);
  3470.                             $new_invoice->setInvoiceDateTs($invoiceDate->format('U'));
  3471.                             $new_invoice->setStudentId($userId);
  3473.                             $new_invoice->setBillerId($retailerId == 0 ? 0 : $retailerId);
  3474.                             $new_invoice->setRetailerId($retailerId);
  3475.                             $new_invoice->setBillToId($userId);
  3476.                             $new_invoice->setAmountTransferGateWayHash($paymentGateway);
  3477.                             $new_invoice->setAmountCurrency($currencyForGateway);
  3478.                             $cardIds = $request->request->get('cardIds', []);
  3481.                             $new_invoice->setMeetingId($meetingSessionId);
  3483.                             $new_invoice->setGatewayBillAmount($gatewayAmount);
  3484.                             $new_invoice->setRedeemedAmount($redeemedAmount);
  3485.                             $new_invoice->setPromoDiscountAmount($promoClaimedAmount);
  3486.                             $new_invoice->setPromoCodeId($promoCodeId);
  3487.                             $new_invoice->setRedeemedSessionCount($redeemedSessionCount);
  3488.                             $new_invoice->setPaidAmount($payableAmount - $dueAmount);
  3489.                             $new_invoice->setProductDataForPaymentGateway(json_encode($gatewayProductData));
  3490.                             $new_invoice->setDueAmount($dueAmount);
  3491.                             $new_invoice->setInvoiceType($request->request->get('invoiceType', BuddybeeConstant::ENTITY_INVOICE_TYPE_PAYMENT_TO_HONEYBEE));
  3493.                             $new_invoice->setDocumentHash(MiscActions::GenerateRandomCrypto('BEI' . microtime(true)));
  3494.                             $new_invoice->setCardIds(json_encode($cardIds));
  3495.                             $new_invoice->setAmountType($request->request->get('amountType', 1));
  3496.                             $new_invoice->setAmount($payableAmount);
  3497.                             $new_invoice->setConsumeAmount($payableAmount);
  3498.                             $new_invoice->setSessionCount($invoiceSessionCount);
  3499.                             $new_invoice->setConsumeSessionCount($toConsumeSessionCount);
  3500.                             $new_invoice->setIsPaidfull(0);
  3501.                             $new_invoice->setIsProcessed(0);
  3502.                             $new_invoice->setApplicantId($userId);
  3503.                             $new_invoice->setBookedById($bookedById);
  3504.                             $new_invoice->setBookingRefererId($bookingRefererId);
  3505.                             $new_invoice->setIsRecharge($request->request->get('isRecharge', 0));
  3506.                             $new_invoice->setAutoConfirmTaggedMeeting($request->request->get('autoConfirmTaggedMeeting', 0));
  3507.                             $new_invoice->setAutoConfirmOtherMeeting($request->request->get('autoConfirmOtherMeeting', 0));
  3508.                             $new_invoice->setAutoClaimPurchasedCards($request->request->get('autoClaimPurchasedCards', 0));
  3509.                             $new_invoice->setIsPayment(0); //0 means receive
  3510.                             $new_invoice->setStatus(GeneralConstant::ACTIVE); //0 means receive
  3511.                             $new_invoice->setStage(BuddybeeConstant::ENTITY_INVOICE_STAGE_INITIATED); //0 means receive
  3513.                             if ($bookingExpireTs == 0) {
  3515.                                 $bookingExpireTime = new \DateTime();
  3516.                                 $bookingExpireTime->modify('+30 day');
  3517.                                 $bookingExpireTs = $bookingExpireTime->format('U');
  3518.                             }
  3521.                             $new_invoice->setExpireIfUnpaidTs($bookingExpireTs);
  3522.                             $new_invoice->setBookingExpireTs($bookingExpireTs);
  3523.                             $new_invoice->setConfirmationExpireTs($bookingExpireTs);
  3525. //            $new_invoice->setStatus($request->request->get(0));
  3527.                             $em_goc->persist($new_invoice);
  3528.                             $em_goc->flush();
  3529.                         }
  3532.                         $invoiceId = $new_invoice->getId();
  3533.                         $gatewayInvoice = $new_invoice;
  3536.                         if ($request->request->get('isRecharge', 0) == 1) {
  3538.                         } else {
  3540.                             if ($gatewayAmount <= 0) {
  3541.                                 $meetingId = 0;
  3543.                                 if ($invoiceId != 0) {
  3545.                                     $retData = Buddybee::ProcessEntityInvoice($em_goc, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], $this->container->getParameter('kernel.root_dir'), false,
  3546.                                         $this->container->getParameter('notification_enabled'),
  3547.                                         $this->container->getParameter('notification_server')
  3548.                                     );
  3550.                                     $meetingId = $retData['meetingId'];
  3553.                                 }
  3555.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3556.                                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  3557.                                     $billerDetails = [];
  3558.                                     $billToDetails = [];
  3560.                                     $invoice = $gatewayInvoice;
  3561.                                     if ($invoice) {
  3562.                                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3563.                                             ->findOneBy(
  3564.                                                 array(
  3565.                                                     'applicantId' => $invoice->getBillerId(),
  3567.                                                 )
  3568.                                             );
  3569.                                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3570.                                             ->findOneBy(
  3571.                                                 array(
  3572.                                                     'applicantId' => $invoice->getBillToId(),
  3574.                                                 )
  3575.                                             );
  3577.                                     }
  3579.                                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  3580.                                     $bodyData = array(
  3581.                                         'page_title' => 'Invoice',
  3582. //            'studentDetails' => $student,
  3583.                                         'billerDetails' => $billerDetails,
  3584.                                         'billToDetails' => $billToDetails,
  3585.                                         'invoice' => $invoice,
  3586.                                         'currencyList' => BuddybeeConstant::$currency_List,
  3587.                                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  3590.                                     );
  3591.                                     $attachments = [];
  3592.                                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  3595. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  3596.                                     $new_mail = $this->get('mail_module');
  3597.                                     $new_mail->sendMyMail(array(
  3598.                                         'senderHash' => '_CUSTOM_',
  3599.                                         //                        'senderHash'=>'_CUSTOM_',
  3600.                                         'forwardToMailAddress' => $forwardToMailAddress,
  3602.                                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  3604. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  3605.                                         'attachments' => $attachments,
  3606.                                         'toAddress' => $forwardToMailAddress,
  3607.                                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  3608.                                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  3609.                                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  3610.                                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  3611.                                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  3613. //                            'emailBody' => $bodyHtml,
  3614.                                         'mailTemplate' => $bodyTemplate,
  3615.                                         'templateData' => $bodyData,
  3616.                                         'embedCompanyImage' => 0,
  3617.                                         'companyId' => 0,
  3619.                                         'companyImagePath' => ''
  3620. //                        'embedCompanyImage' => 1,
  3621. //                        'companyId' => $companyId,
  3622. //                        'companyImagePath' => $company_data->getImage()
  3625.                                     ));
  3628.                                 }
  3630.                                 if ($meetingId != 0) {
  3631.                                     $url = $this->generateUrl(
  3632.                                         'consultancy_session'
  3633.                                     );
  3634.                                     $output = [
  3635.                                         'invoiceId' => $gatewayInvoice->getId(),
  3636.                                         'meetingId' => $meetingId,
  3638.                                         'proceedToCheckout' => 0,
  3639.                                         'redirectUrl' => $url . '/' . $meetingId
  3640.                                     ];
  3641.                                 } else {
  3642.                                     $url = $this->generateUrl(
  3643.                                         'buddybee_dashboard'
  3644.                                     );
  3645.                                     $output = [
  3646.                                         'invoiceId' => $gatewayInvoice->getId(),
  3647.                                         'meetingId' => 0,
  3649.                                         'proceedToCheckout' => 0,
  3650.                                         'redirectUrl' => $url
  3651.                                     ];
  3652.                                 }
  3653.                                 return new JsonResponse($output);
  3654. //                return $this->redirect($url);
  3655.                             } else {
  3657.                             }
  3658. //                $url = $this->generateUrl(
  3659. //                    'checkout_page'
  3660. //                );
  3661. //
  3662. //                return $this->redirect($url."?meetingSessionId=".$new->getSessionId().'&invoiceId='.$invoiceId);
  3663.                         }
  3666.                     }
  3667.                 } else {
  3668.                     $url = $this->generateUrl(
  3669.                         'user_login'
  3670.                     );
  3672.                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $this->generateUrl(
  3673.                         'pricing_plan_page', [
  3674.                         'autoRedirected' => 1
  3675.                     ],
  3676.                         UrlGenerator::ABSOLUTE_URL
  3677.                     ));
  3679.                     $output = [
  3681.                         'proceedToCheckout' => 0,
  3682.                         'redirectUrl' => $url,
  3683.                         'clearLs' => 0
  3684.                     ];
  3685.                     return new JsonResponse($output);
  3686.                 }
  3689.                 //now proceed to checkout page if the user has lower balance or recharging
  3692.                 //$invoiceDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->
  3695.             }
  3696.         }
  3697.         if ($gatewayInvoice) {
  3700.             $gatewayProductData = json_decode($gatewayInvoice->getProductDataForPaymentGateway(), true);
  3701.             if ($gatewayProductData == null) $gatewayProductData = [];
  3702.             if (empty($gatewayProductData))
  3703.                 $gatewayProductData = [
  3704.                     [
  3705.                         'price_data' => [
  3706.                             'currency' => 'eur',
  3707.                             'unit_amount' => $gatewayAmount != 0 ? (100 * $gatewayAmount) : 200000,
  3708.                             'product_data' => [
  3709. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  3710.                                 'name' => 'Bee Coins',
  3711.                                 'images' => [$imageBySessionCount[0]],
  3712.                             ],
  3713.                         ],
  3714.                         'quantity' => 1,
  3715.                     ]
  3716.                 ];
  3718.             $productDescStr = '';
  3719.             $productDescArr = [];
  3720.             foreach ($gatewayProductData as $gpd) {
  3721.                 $productDescArr[] = $gpd['price_data']['product_data']['name'];
  3722.             }
  3723.             $productDescStr = implode(',', $productDescArr);
  3724.             $paymentGatewayFromInvoice = $gatewayInvoice->getAmountTransferGateWayHash();
  3725. //            return new JsonResponse(
  3726. //                [
  3727. //                    'paymentGateway' => $paymentGatewayFromInvoice,
  3728. //                    'gateWayData' => $gatewayProductData[0]
  3729. //                ]
  3730. //            );
  3731.             if ($paymentGateway == null) $paymentGatewayFromInvoice = 'stripe';
  3733.             if ($paymentGatewayFromInvoice == 'stripe' || $paymentGatewayFromInvoice == 'aamarpay' || $paymentGatewayFromInvoice == 'bkash') {
  3734.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  3735.                     $billerDetails = [];
  3736.                     $billToDetails = [];
  3738.                     $invoice = $gatewayInvoice;
  3739.                     if ($invoice) {
  3740.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3741.                             ->findOneBy(
  3742.                                 array(
  3743.                                     'applicantId' => $invoice->getBillerId(),
  3745.                                 )
  3746.                             );
  3747.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3748.                             ->findOneBy(
  3749.                                 array(
  3750.                                     'applicantId' => $invoice->getBillToId(),
  3752.                                 )
  3753.                             );
  3755.                     }
  3757.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  3758.                     $bodyData = array(
  3759.                         'page_title' => 'Invoice',
  3760. //            'studentDetails' => $student,
  3761.                         'billerDetails' => $billerDetails,
  3762.                         'billToDetails' => $billToDetails,
  3763.                         'invoice' => $invoice,
  3764.                         'currencyList' => BuddybeeConstant::$currency_List,
  3765.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  3768.                     );
  3769.                     $attachments = [];
  3770.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  3773. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  3774.                     $new_mail = $this->get('mail_module');
  3775.                     $new_mail->sendMyMail(array(
  3776.                         'senderHash' => '_CUSTOM_',
  3777.                         //                        'senderHash'=>'_CUSTOM_',
  3778.                         'forwardToMailAddress' => $forwardToMailAddress,
  3780.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  3782. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  3783.                         'attachments' => $attachments,
  3784.                         'toAddress' => $forwardToMailAddress,
  3785.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  3786.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  3787.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  3788.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  3789.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  3791. //                            'emailBody' => $bodyHtml,
  3792.                         'mailTemplate' => $bodyTemplate,
  3793.                         'templateData' => $bodyData,
  3794.                         'embedCompanyImage' => 0,
  3795.                         'companyId' => 0,
  3797.                         'companyImagePath' => ''
  3798. //                        'embedCompanyImage' => 1,
  3799. //                        'companyId' => $companyId,
  3800. //                        'companyImagePath' => $company_data->getImage()
  3803.                     ));
  3806.                 }
  3807.             }
  3809.             if ($paymentGatewayFromInvoice == 'stripe') {
  3810.                 $stripe = new \Stripe\Stripe();
  3811.                 \Stripe\Stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  3813.                 $stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  3814.                 {
  3815.                     if ($request->query->has('meetingSessionId'))
  3816.                         $id = $request->query->get('meetingSessionId');
  3817.                 }
  3819.                 $paymentIntent = [
  3820.                     "id" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs",
  3821.                     "object" => "payment_intent",
  3822.                     "amount" => 3000,
  3823.                     "amount_capturable" => 0,
  3824.                     "amount_received" => 0,
  3825.                     "application" => null,
  3826.                     "application_fee_amount" => null,
  3827.                     "canceled_at" => null,
  3828.                     "cancellation_reason" => null,
  3829.                     "capture_method" => "automatic",
  3830.                     "charges" => [
  3831.                         "object" => "list",
  3832.                         "data" => [],
  3833.                         "has_more" => false,
  3834.                         "url" => "/v1/charges?payment_intent=pi_1DoWjK2eZvKYlo2Csy9J3BHs"
  3835.                     ],
  3836.                     "client_secret" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs_secret_vmxAcWZxo2kt1XhpWtZtnjDtd",
  3837.                     "confirmation_method" => "automatic",
  3838.                     "created" => 1546523966,
  3839.                     "currency" => $currencyForGateway,
  3840.                     "customer" => null,
  3841.                     "description" => null,
  3842.                     "invoice" => null,
  3843.                     "last_payment_error" => null,
  3844.                     "livemode" => false,
  3845.                     "metadata" => [],
  3846.                     "next_action" => null,
  3847.                     "on_behalf_of" => null,
  3848.                     "payment_method" => null,
  3849.                     "payment_method_options" => [],
  3850.                     "payment_method_types" => [
  3851.                         "card"
  3852.                     ],
  3853.                     "receipt_email" => null,
  3854.                     "review" => null,
  3855.                     "setup_future_usage" => null,
  3856.                     "shipping" => null,
  3857.                     "statement_descriptor" => null,
  3858.                     "statement_descriptor_suffix" => null,
  3859.                     "status" => "requires_payment_method",
  3860.                     "transfer_data" => null,
  3861.                     "transfer_group" => null
  3862.                 ];
  3865.                 $checkout_session = \Stripe\Checkout\Session::create([
  3866.                     'payment_method_types' => ['card'],
  3867.                     'line_items' => $gatewayProductData,
  3868.                     'mode' => 'payment',
  3869.                     'success_url' => $this->generateUrl(
  3870.                         'payment_gateway_success',
  3871.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  3872.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  3873.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3874.                     ),
  3875.                     'cancel_url' => $this->generateUrl(
  3876.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3877.                     ),
  3878.                 ]);
  3879.                 $output = [
  3880.                     'clientSecret' => $paymentIntent['client_secret'],
  3881.                     'id' => $checkout_session->id,
  3882.                     'paymentGateway' => $paymentGatewayFromInvoice,
  3883.                     'proceedToCheckout' => 1
  3884.                 ];
  3885.                 return new JsonResponse($output);
  3886.             }
  3887.             if ($paymentGatewayFromInvoice == 'aamarpay') {
  3889.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  3892.                 $url = $sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/request.php' : 'https://secure.aamarpay.com/request.php';
  3893.                 $fields = array(
  3894. //                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  3895.                     'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  3896.                     'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  3897.                     'payment_type' => 'VISA', //no need to change
  3898.                     'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  3899.                     'tran_id' => $gatewayInvoice->getDocumentHash(), //transaction id must be unique from your end
  3900.                     'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  3901.                     'cus_email' => $studentDetails->getEmail(), //customer email address
  3902.                     'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  3903.                     'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  3904.                     'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  3905.                     'cus_state' => $studentDetails->getCurrAddrState(),  //state
  3906.                     'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  3907.                     'cus_country' => 'Bangladesh',  //country
  3908.                     'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  3909.                     'cus_fax' => '',  //fax
  3910.                     'ship_name' => '', //ship name
  3911.                     'ship_add1' => '',  //ship address
  3912.                     'ship_add2' => '',
  3913.                     'ship_city' => '',
  3914.                     'ship_state' => '',
  3915.                     'ship_postcode' => '',
  3916.                     'ship_country' => 'Bangladesh',
  3917.                     'desc' => $productDescStr,
  3918.                     'success_url' => $this->generateUrl(
  3919.                         'payment_gateway_success',
  3920.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  3921.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  3922.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3923.                     ),
  3924.                     'fail_url' => $this->generateUrl(
  3925.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3926.                     ),
  3927.                     'cancel_url' => $this->generateUrl(
  3928.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3929.                     ),
  3930. //                    'opt_a' => 'Reshad',  //optional paramter
  3931. //                    'opt_b' => 'Akil',
  3932. //                    'opt_c' => 'Liza',
  3933. //                    'opt_d' => 'Sohel',
  3934. //                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  3935.                     'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  3937.                 ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  3939.                 $fields_string = http_build_query($fields);
  3941. //                $ch = curl_init();
  3942. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  3943. //                curl_setopt($ch, CURLOPT_URL, $url);
  3944. //
  3945. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  3946. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  3947. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  3948. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  3949. //                curl_close($ch);
  3951. //                $this->redirect_to_merchant($url_forward);
  3953.                 $output = [
  3955. //
  3956. //                    'redirectUrl' => ($sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/' : 'https://secure.aamarpay.com/') . $url_forward, //keeping it off temporarily
  3957. //                    'fields'=>$fields,
  3958. //                    'fields_string'=>$fields_string,
  3960. //                    'redirectUrl' => $this->generateUrl(
  3961. //                        'payment_gateway_success',
  3962. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  3963. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  3964. //                        ))), 'hbeeSessionToken' => $request->request->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3965. //                    ),
  3966.                     'paymentGateway' => $paymentGatewayFromInvoice,
  3967.                     'proceedToCheckout' => 1,
  3968.                     'data' => $fields
  3969.                 ];
  3970.                 return new JsonResponse($output);
  3971.             } else if ($paymentGatewayFromInvoice == 'bkash') {
  3973.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  3975.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  3976.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  3977.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  3978.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  3979.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  3982.                 $request_data = array(
  3983.                     'app_key' => $app_key_value,
  3984.                     'app_secret' => $app_secret_value
  3985.                 );
  3986.                 $url = curl_init($baseUrl . '/tokenized/checkout/token/grant');
  3987.                 $request_data_json = json_encode($request_data);
  3988.                 $header = array(
  3989.                     'Content-Type:application/json',
  3990.                     'username:' . $username_value,
  3991.                     'password:' . $password_value
  3992.                 );
  3993.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  3994.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  3995.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  3996.                 curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  3997.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  3998.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  4000.                 $tokenData = json_decode(curl_exec($url), true);
  4001.                 curl_close($url);
  4003.                 $id_token = $tokenData['id_token'];
  4004.                 $goToBkashPage = 0;
  4005.                 if ($tokenData['statusCode'] == '0000') {
  4006.                     $auth = $id_token;
  4009.                     $requestbody = array(
  4010.                         "mode" => "0011",
  4011. //                        "payerReference" => "01723888888",
  4012.                         "payerReference" => $invoiceDate->format('U'),
  4013.                         "callbackURL" => $this->generateUrl(
  4014.                             'bkash_callback', [], UrlGenerator::ABSOLUTE_URL
  4015.                         ),
  4016. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  4017.                         "amount" => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  4018.                         "currency" => "BDT",
  4019.                         "intent" => "sale",
  4020.                         "merchantInvoiceNumber" => $invoiceId
  4021.                     );
  4022.                     $url = curl_init($baseUrl . '/tokenized/checkout/create');
  4023.                     $requestbodyJson = json_encode($requestbody);
  4025.                     $header = array(
  4026.                         'Content-Type:application/json',
  4027.                         'Authorization:' . $auth,
  4028.                         'X-APP-Key:' . $app_key_value
  4029.                     );
  4031.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  4032.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  4033.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  4034.                     curl_setopt($url, CURLOPT_POSTFIELDS, $requestbodyJson);
  4035.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  4036.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  4037.                     $resultdata = curl_exec($url);
  4038. //                    curl_close($url);
  4039. //                    echo $resultdata;
  4041.                     $obj = json_decode($resultdata, true);
  4044.                     $goToBkashPage = 1;
  4047.                     $justNow = new \DateTime();
  4048.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  4049.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  4050.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  4051.                     $gatewayInvoice->setGatewayPaymentId($obj['paymentID']);
  4052.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  4053.                     $em->flush();
  4055.                     $output = [
  4057. //                        'redirectUrl' => $obj['bkashURL'],
  4059.                         'paymentGateway' => $paymentGatewayFromInvoice,
  4060.                         'proceedToCheckout' => $goToBkashPage,
  4061.                         'tokenData' => $tokenData,
  4062.                         'obj' => $obj,
  4063.                         'id_token' => $tokenData['id_token'],
  4064.                         'data' => [
  4065.                             'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  4066. //                            'payment_type' => 'VISA', //no need to change
  4067.                             'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  4068.                             'tran_id' => $gatewayInvoice->getDocumentHash(), //transaction id must be unique from your end
  4069.                             'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  4070.                             'cus_email' => $studentDetails->getEmail(), //customer email address
  4071.                             'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  4072.                             'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  4073.                             'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  4074.                             'cus_state' => $studentDetails->getCurrAddrState(),  //state
  4075.                             'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  4076.                             'cus_country' => 'Bangladesh',  //country
  4077.                             'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  4078.                             'cus_fax' => '',  //fax
  4079.                             'ship_name' => '', //ship name
  4080.                             'ship_add1' => '',  //ship address
  4081.                             'ship_add2' => '',
  4082.                             'ship_city' => '',
  4083.                             'ship_state' => '',
  4084.                             'ship_postcode' => '',
  4085.                             'ship_country' => 'Bangladesh',
  4086.                             'desc' => $productDescStr,
  4087.                         ]
  4089.                     ];
  4090.                     return new JsonResponse($output);
  4092.                 }
  4095. //                $fields = array(
  4096. //
  4097. //                    "mode" => "0011",
  4098. //                    "payerReference" => "01723888888",
  4099. //                    "callbackURL" => $this->generateUrl(
  4100. //                        'payment_gateway_success',
  4101. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4102. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  4103. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4104. //                    ),
  4105. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  4106. //                    "amount" => 1*number_format($gatewayInvoice->getGateWayBillamount(),2,'.',''),,
  4107. //                    "currency" => "BDT",
  4108. //                    "intent" => "sale",
  4109. //                    "merchantInvoiceNumber" => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT)
  4110. //
  4111. //                );
  4112. //                $fields = array(
  4113. ////                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  4114. //                    'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  4115. //                    'amount' => 1*number_format($gatewayInvoice->getGateWayBillamount(),2,'.',''),, //transaction amount
  4116. //                    'payment_type' => 'VISA', //no need to change
  4117. //                    'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  4118. //                    'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  4119. //                    'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  4120. //                    'cus_email' => $studentDetails->getEmail(), //customer email address
  4121. //                    'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  4122. //                    'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  4123. //                    'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  4124. //                    'cus_state' => $studentDetails->getCurrAddrState(),  //state
  4125. //                    'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  4126. //                    'cus_country' => 'Bangladesh',  //country
  4127. //                    'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? ' + 8801911706483' : $studentDetails->getPhone(), //customer phone number
  4128. //                    'cus_fax' => '',  //fax
  4129. //                    'ship_name' => '', //ship name
  4130. //                    'ship_add1' => '',  //ship address
  4131. //                    'ship_add2' => '',
  4132. //                    'ship_city' => '',
  4133. //                    'ship_state' => '',
  4134. //                    'ship_postcode' => '',
  4135. //                    'ship_country' => 'Bangladesh',
  4136. //                    'desc' => $productDescStr,
  4137. //                    'success_url' => $this->generateUrl(
  4138. //                        'payment_gateway_success',
  4139. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4140. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  4141. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4142. //                    ),
  4143. //                    'fail_url' => $this->generateUrl(
  4144. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4145. //                    ),
  4146. //                    'cancel_url' => $this->generateUrl(
  4147. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4148. //                    ),
  4149. ////                    'opt_a' => 'Reshad',  //optional paramter
  4150. ////                    'opt_b' => 'Akil',
  4151. ////                    'opt_c' => 'Liza',
  4152. ////                    'opt_d' => 'Sohel',
  4153. ////                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  4154. //                    'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  4155. //
  4156. //                ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  4157. //
  4158. //                $fields_string = http_build_query($fields);
  4159. //
  4160. //                $ch = curl_init();
  4161. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  4162. //                curl_setopt($ch, CURLOPT_URL, $url);
  4163. //
  4164. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  4165. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  4166. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  4167. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  4168. //                curl_close($ch);
  4170. //                $this->redirect_to_merchant($url_forward);
  4173.             } else if ($paymentGatewayFromInvoice == 'onsite_pos' || $paymentGatewayFromInvoice == 'onsite_cash' || $paymentGatewayFromInvoice == 'onsite_bkash') {
  4174.                 $meetingId = 0;
  4176.                 if ($gatewayInvoice->getId() != 0) {
  4177.                     if ($gatewayInvoice->getDueAmount() <= 0) {
  4179.                         $retData = Buddybee::ProcessEntityInvoice($em_goc, $gatewayInvoice->getId(), ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], $this->container->getParameter('kernel.root_dir'), false,
  4180.                             $this->container->getParameter('notification_enabled'),
  4181.                             $this->container->getParameter('notification_server')
  4182.                         );
  4184.                         $meetingId = $retData['meetingId'];
  4185.                     }
  4187.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  4188.                         $billerDetails = [];
  4189.                         $billToDetails = [];
  4191.                         $invoice = $gatewayInvoice;
  4192.                         if ($invoice) {
  4193.                             $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4194.                                 ->findOneBy(
  4195.                                     array(
  4196.                                         'applicantId' => $invoice->getBillerId(),
  4198.                                     )
  4199.                                 );
  4200.                             $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4201.                                 ->findOneBy(
  4202.                                     array(
  4203.                                         'applicantId' => $invoice->getBillToId(),
  4205.                                     )
  4206.                                 );
  4208.                         }
  4210.                         $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  4211.                         $bodyData = array(
  4212.                             'page_title' => 'Invoice',
  4213. //            'studentDetails' => $student,
  4214.                             'billerDetails' => $billerDetails,
  4215.                             'billToDetails' => $billToDetails,
  4216.                             'invoice' => $invoice,
  4217.                             'currencyList' => BuddybeeConstant::$currency_List,
  4218.                             'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  4221.                         );
  4222.                         $attachments = [];
  4223.                         $forwardToMailAddress = $billToDetails->getOAuthEmail();
  4226. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4227.                         $new_mail = $this->get('mail_module');
  4228.                         $new_mail->sendMyMail(array(
  4229.                             'senderHash' => '_CUSTOM_',
  4230.                             //                        'senderHash'=>'_CUSTOM_',
  4231.                             'forwardToMailAddress' => $forwardToMailAddress,
  4233.                             'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  4235. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4236.                             'attachments' => $attachments,
  4237.                             'toAddress' => $forwardToMailAddress,
  4238.                             'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  4239.                             'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  4240.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4241.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4242.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4244. //                            'emailBody' => $bodyHtml,
  4245.                             'mailTemplate' => $bodyTemplate,
  4246.                             'templateData' => $bodyData,
  4247.                             'embedCompanyImage' => 0,
  4248.                             'companyId' => 0,
  4250.                             'companyImagePath' => ''
  4251. //                        'embedCompanyImage' => 1,
  4252. //                        'companyId' => $companyId,
  4253. //                        'companyImagePath' => $company_data->getImage()
  4256.                         ));
  4259.                     }
  4262.                 }
  4264.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  4266.                 if ($meetingId != 0) {
  4267.                     $url = $this->generateUrl(
  4268.                         'consultancy_session'
  4269.                     );
  4270.                     $output = [
  4272.                         'proceedToCheckout' => 0,
  4273.                         'invoiceId' => $gatewayInvoice->getId(),
  4274.                         'meetingId' => $meetingId,
  4275.                         'redirectUrl' => $url . '/' . $meetingId
  4276.                     ];
  4277.                 } else {
  4278.                     $url = $this->generateUrl(
  4279.                         'buddybee_dashboard'
  4280.                     );
  4281.                     $output = [
  4283.                         'proceedToCheckout' => 0,
  4284.                         'invoiceId' => $gatewayInvoice->getId(),
  4285.                         'meetingId' => $meetingId,
  4286.                         'redirectUrl' => $url
  4287.                     ];
  4288.                 }
  4289.                 return new JsonResponse($output);
  4292.             }
  4294.         }
  4295.         $output = [
  4296.             'clientSecret' => 0,
  4297.             'id' => 0,
  4298.             'proceedToCheckout' => 0
  4299.         ];
  4300.         return new JsonResponse($output);
  4301. //        return $this->render('ApplicationBundle:pages/stripe:checkout.html.twig', array(
  4302. //            'page_title' => 'Checkout',
  4303. ////            'stripe' => $stripe,
  4304. //            'stripe' => null,
  4305. ////            'PaymentIntent' => $paymentIntent,
  4306. //
  4307. ////            'consultantDetail' => $consultantDetail,
  4308. ////            'consultantDetails'=> $consultantDetails,
  4309. ////
  4310. ////            'meetingSession' => $meetingSession,
  4311. ////            'packageDetails' => json_decode($meetingSession->getPcakageDetails(),true),
  4312. ////            'packageName' => json_decode($meetingSession->getPackageName(),true),
  4313. ////            'pay' => $payableAmount,
  4314. ////            'balance' => $currStudentBal
  4315. //        ));
  4316.     }
  4318.     public function PaymentGatewaySuccessAction(Request $request, $encData = '')
  4319.     {
  4320.         $em = $this->getDoctrine()->getManager('company_group');
  4321.         $invoiceId = 0;
  4322.         $autoRedirect = 1;
  4323.         $redirectUrl = '';
  4324.         $meetingId = 0;
  4325.         $setupOnly = 0;
  4326.         $appId = 0;
  4327.         $ownerId = 0;
  4328.         $activationPending = 0;
  4329.         $ownerSyncResult = null;
  4331.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  4333.         if ($systemType == '_CENTRAL_') {
  4336.             if ($encData != '') {
  4337.                 $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  4338.                 if (isset($encryptedData['invoiceId']))
  4339.                     $invoiceId = $encryptedData['invoiceId'];
  4340.                 if (isset($encryptedData['autoRedirect']))
  4341.                     $autoRedirect = $encryptedData['autoRedirect'];
  4342.                 if (isset($encryptedData['setupOnly']))
  4343.                     $setupOnly = (int)$encryptedData['setupOnly'];
  4344.                 if (isset($encryptedData['appId']))
  4345.                     $appId = (int)$encryptedData['appId'];
  4346.                 if (isset($encryptedData['ownerId']))
  4347.                     $ownerId = (int)$encryptedData['ownerId'];
  4348.                 if (isset($encryptedData['redirectUrl']))
  4349.                     $redirectUrl = $encryptedData['redirectUrl'];
  4350.             } else {
  4351.                 $invoiceId = $request->query->get('invoiceId', 0);
  4353.                 $meetingId = 0;
  4354.                 $autoRedirect = $request->query->get('autoRedirect', 1);
  4355.                 $redirectUrl = $request->query->get('redirectUrl', '');
  4356.                 $setupOnly = (int)$request->query->get('setupOnly', 0);
  4357.                 $appId = (int)$request->query->get('appId', 0);
  4358.                 $ownerId = (int)$request->query->get('ownerId', 0);
  4359.             }
  4361.             if ($setupOnly === 1) {
  4362.                 $sessionId = $request->query->get('session_id');
  4363.                 if (!$sessionId) {
  4364.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4365.                         'page_title' => 'Failed',
  4366.                     ));
  4367.                 }
  4369.                 $stripeSession = \Stripe\Checkout\Session::retrieve($sessionId);
  4370.                 if (!$stripeSession || !$stripeSession->setup_intent) {
  4371.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4372.                         'page_title' => 'Failed',
  4373.                     ));
  4374.                 }
  4376.                 $setupIntent = \Stripe\SetupIntent::retrieve($stripeSession->setup_intent);
  4377.                 if ($setupIntent->status !== 'succeeded') {
  4378.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4379.                         'page_title' => 'Failed',
  4380.                     ));
  4381.                 }
  4383.                 $paymentMethodId = $setupIntent->payment_method;
  4384.                 $customerId = $setupIntent->customer;
  4386.                 if ($appId === 0 && isset($stripeSession->metadata['app_id'])) {
  4387.                     $appId = (int)$stripeSession->metadata['app_id'];
  4388.                 }
  4389.                 if ($ownerId === 0 && isset($stripeSession->metadata['owner_id'])) {
  4390.                     $ownerId = (int)$stripeSession->metadata['owner_id'];
  4391.                 }
  4392.                 if ($redirectUrl === '' && isset($stripeSession->metadata['redirect_url'])) {
  4393.                     $redirectUrl = $stripeSession->metadata['redirect_url'];
  4394.                 }
  4396.                 $companyGroup = null;
  4397.                 if ($appId !== 0) {
  4398.                     $companyGroup = $em
  4399.                         ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  4400.                         ->findOneBy([
  4401.                             'appId' => $appId
  4402.                         ]);
  4403.                 }
  4405.                 $existing = $em->getRepository(PaymentMethod::class)
  4406.                     ->findOneBy([
  4407.                         'stripePaymentMethodId' => $paymentMethodId,
  4408.                         'appId' => $appId
  4409.                     ]);
  4411.                 if (!$existing) {
  4412.                     if ($companyGroup && !$companyGroup->getStripeCustomerId()) {
  4413.                         $companyGroup->setStripeCustomerId($customerId);
  4414.                     }
  4416.                     $paymentMethod = new PaymentMethod();
  4417.                     $paymentMethod->setAppId($appId);
  4418.                     $paymentMethod->setApplicantId($ownerId);
  4419.                     $paymentMethod->setStripeCustomerId($customerId);
  4420.                     $paymentMethod->setStripePaymentMethodId($paymentMethodId);
  4421.                     $paymentMethod->setIsDefault(1);
  4423.                     $em->persist($paymentMethod);
  4424.                     $em->flush();
  4425.                 }
  4427.                 if ($companyGroup) {
  4428.                     $em->flush();
  4429.                 }
  4431.                 $redirectUrl = $redirectUrl !== '' ? $redirectUrl : $this->generateUrl(
  4432.                     'central_landing'
  4433.                 );
  4435.                 return $this->render('@Application/pages/stripe/success.html.twig', array(
  4436.                     'page_title' => 'Success',
  4437.                     'meetingId' => 0,
  4438.                     'autoRedirect' => 0,
  4439.                     'redirectUrl' => $redirectUrl,
  4440.                     'initiateCompany' => 1,
  4441.                     'appId' => $appId,
  4442.                     'ownerId' => $ownerId,
  4443.                     'setupOnly' => 1,
  4444.                 ));
  4445.             }
  4447.             if ($invoiceId != 0) {
  4448.                 $invoice = $em
  4449.                     ->getRepository("CompanyGroupBundle\\Entity\\EntityInvoice")
  4450.                     ->findOneBy([
  4451.                         'id' => $invoiceId
  4452.                     ]);
  4454.                 if($invoice->getAmountTransferGateWayHash() == 'stripe') {
  4457.                     $stripeSession = \Stripe\Checkout\Session::retrieve($request->query->get('session_id'));
  4459.                     $paymentIntent = \Stripe\PaymentIntent::retrieve($stripeSession->payment_intent);
  4460.                     if ($paymentIntent->status !== 'succeeded') {
  4462.                         return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4463.                             'page_title' => 'Failed',
  4466.                         ));
  4467.                     }
  4469.                     $paymentMethodId = $paymentIntent->payment_method;
  4470.                     $customerId = $paymentIntent->customer;
  4472.                     $companyGroup = $this->get('app.quote_company_provisioning_service')
  4473.                         ->ensureCompanyForInvoice($invoice, $request->getSession(), $customerId);
  4477.                     if (!isset($companyGroup) || !$companyGroup) {
  4478.                         $companyGroup = $em
  4479.                             ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  4480.                             ->findOneBy([
  4481.                                 'appId' => $invoice->getAppId()
  4482.                             ]);
  4483.                     }
  4485.                     $existing = $em->getRepository(PaymentMethod::class)
  4486.                         ->findOneBy([
  4487.                             'stripePaymentMethodId' => $paymentMethodId
  4488.                         ]);
  4490.                     if (!$existing) {
  4491.                         if ($companyGroup) {
  4493.                             // save customer id (safety)
  4494.                             if (!$companyGroup->getStripeCustomerId()) {
  4495.                                 $companyGroup->setStripeCustomerId($customerId);
  4496.                             }
  4498.                             // save payment method
  4499.                             $paymentMethod = new PaymentMethod(); // your entity
  4501.                             $paymentMethod->setAppId($companyGroup->getAppId());;
  4502.                             $paymentMethod->setApplicantId($invoice->getApplicantId());
  4503.                             $paymentMethod->setStripeCustomerId($customerId);
  4504.                             $paymentMethod->setStripePaymentMethodId($paymentMethodId);
  4505.                             $paymentMethod->setIsDefault(1);
  4507.                             $em->persist($paymentMethod);
  4509.                             $em->flush();
  4510.                         }
  4511.                     }
  4512.                 }
  4516.                 $retData = Buddybee::ProcessEntityInvoice($em, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED],
  4517.                     $this->container->getParameter('kernel.root_dir'),
  4518.                     false,
  4519.                     $this->container->getParameter('notification_enabled'),
  4520.                     $this->container->getParameter('notification_server')
  4521.                 );
  4522.                 if (($retData['initiateCompany'] ?? 0) == 1) {
  4523.                     $healthResult = $this->get('app.provisioning_health_service')->check($invoice, true);
  4524.                     if (!($healthResult['success'] ?? false)) {
  4525.                         $activationPending = 1;
  4526.                         $autoRedirect = 0;
  4527.                         $this->get('logger')->warning('Post-payment ERP health check needs attention.', [
  4528.                             'invoiceId' => (int)$invoice->getId(),
  4529.                             'appId' => (int)$invoice->getAppId(),
  4530.                             'errorCode' => $healthResult['errorCode'] ?? 'health_unverified',
  4531.                         ]);
  4532.                     }
  4533.                 }
  4534.                 $this->get('app.subscription_state_sync_service')->syncFromLegacyInvoice($invoice);
  4535.                 if (($retData['initiateCompany'] ?? 0) == 1) {
  4536.                     if (($retData['ownerId'] ?? 0) != 0) {
  4537.                         $ownerSyncResult = $this->get('app.post_payment_company_setup_service')
  4538.                             ->finalizeOwnerServerSync((int)$retData['ownerId'], (int)($retData['appId'] ?? 0), (int)$invoice->getId());
  4539.                     } else {
  4540.                         $ownerSyncResult = [
  4541.                             'success' => false,
  4542.                             'failedServerIds' => [],
  4543.                             'missingAppIds' => [(int)($retData['appId'] ?? 0)],
  4544.                         ];
  4545.                     }
  4547.                     if (!($ownerSyncResult['success'] ?? false)) {
  4548.                         $activationPending = 1;
  4549.                         $autoRedirect = 0;
  4550.                         $this->get('logger')->warning('Post-payment owner synchronization needs attention.', [
  4551.                             'ownerId' => (int)($retData['ownerId'] ?? 0),
  4552.                             'appId' => (int)($retData['appId'] ?? 0),
  4553.                             'failedServerIds' => $ownerSyncResult['failedServerIds'] ?? [],
  4554.                             'missingAppIds' => $ownerSyncResult['missingAppIds'] ?? [],
  4555.                         ]);
  4556.                     } else {
  4557.                         $readinessResult = $this->get('app.provisioning_health_service')->checkOwnerReadiness(
  4558.                             $invoice,
  4559.                             (int)$retData['ownerId'],
  4560.                             $ownerSyncResult,
  4561.                             true
  4562.                         );
  4563.                         if (!($readinessResult['ready'] ?? false)) {
  4564.                             $activationPending = 1;
  4565.                             $autoRedirect = 0;
  4566.                             $this->get('logger')->warning('Post-payment owner login health needs attention.', [
  4567.                                 'invoiceId' => (int)$invoice->getId(),
  4568.                                 'appId' => (int)($retData['appId'] ?? 0),
  4569.                                 'ownerId' => (int)$retData['ownerId'],
  4570.                                 'blocker' => $readinessResult['blocker'] ?? 'tenant_health_unverified',
  4571.                             ]);
  4572.                         } else {
  4573.                             // This second, owner-aware check is stronger than the
  4574.                             // earlier initialization check and may safely clear a
  4575.                             // transient initialization-pending result.
  4576.                             $activationPending = 0;
  4577.                         }
  4578.                     }
  4579.                 }
  4581.                 if ($retData['sendCards'] == 1) {
  4582.                     $cardList = array();
  4584.                     $cards = $em->getRepository('CompanyGroupBundle\\Entity\\BeeCode')
  4585.                         ->findBy(
  4586.                             array(
  4587.                                 'id' => $retData['cardIds']
  4588.                             )
  4589.                         );
  4591.                     foreach ($cards as $card) {
  4592.                         $cardList[] = array(
  4593.                             'id' => $card->getId(),
  4594.                             'printed' => $card->getPrinted(),
  4595.                             'amount' => $card->getAmount(),
  4596.                             'coinCount' => $card->getCoinCount(),
  4597.                             'pin' => $card->getPin(),
  4598.                             'serial' => $card->getSerial(),
  4600.                         );
  4601.                     }
  4602.                     $receiverEmail = $retData['receiverEmail'];
  4603.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  4606.                         $bodyHtml = '';
  4607.                         $bodyTemplate = '@Application/email/templates/beeCodeDigitalDelivery.html.twig';
  4608.                         $bodyData = array(
  4609.                             'cardList' => $cardList,
  4610. //                        'name' => $newApplicant->getFirstname() . ' ' . $newApplicant->getLastname(),
  4611. //                        'email' => $userName,
  4612. //                        'password' => $newApplicant->getPassword(),
  4613.                         );
  4614.                         $attachments = [];
  4615.                         $forwardToMailAddress = $receiverEmail;
  4618. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4619.                         $new_mail = $this->get('mail_module');
  4620.                         $new_mail->sendMyMail(array(
  4621.                             'senderHash' => '_CUSTOM_',
  4622.                             //                        'senderHash'=>'_CUSTOM_',
  4623.                             'forwardToMailAddress' => $forwardToMailAddress,
  4625.                             'subject' => 'Digital Bee Card Delivery',
  4627. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4628.                             'attachments' => $attachments,
  4629.                             'toAddress' => $forwardToMailAddress,
  4630.                             'fromAddress' => 'delivery@buddybee.eu',
  4631.                             'userName' => 'delivery@buddybee.eu',
  4632.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4633.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4634.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4635. //                        'encryptionMethod' => 'tls',
  4636.                             'encryptionMethod' => 'ssl',
  4637. //                            'emailBody' => $bodyHtml,
  4638.                             'mailTemplate' => $bodyTemplate,
  4639.                             'templateData' => $bodyData,
  4640. //                        'embedCompanyImage' => 1,
  4641. //                        'companyId' => $companyId,
  4642. //                        'companyImagePath' => $company_data->getImage()
  4645.                         ));
  4647.                         foreach ($cards as $card) {
  4648.                             $card->setPrinted(1);
  4649.                         }
  4650.                         $em->flush();
  4653.                     }
  4655.                     return new JsonResponse(
  4656.                         array(
  4657.                             'success' => true
  4658.                         )
  4659.                     );
  4662.                 }
  4665.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  4666.                 $meetingId = $retData['meetingId'];
  4667.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  4668.                     $billerDetails = [];
  4669.                     $billToDetails = [];
  4671.                     $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  4672.                         ->findOneBy(
  4673.                             array(
  4674.                                 'Id' => $invoiceId,
  4676.                             )
  4677.                         );;
  4678.                     if ($invoice) {
  4679.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4680.                             ->findOneBy(
  4681.                                 array(
  4682.                                     'applicantId' => $invoice->getBillerId(),
  4684.                                 )
  4685.                             );
  4686.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4687.                             ->findOneBy(
  4688.                                 array(
  4689.                                     'applicantId' => $invoice->getBillToId(),
  4691.                                 )
  4692.                             );
  4694.                     }
  4696.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  4697.                     $bodyData = array(
  4698.                         'page_title' => 'Invoice',
  4699. //            'studentDetails' => $student,
  4700.                         'billerDetails' => $billerDetails,
  4701.                         'billToDetails' => $billToDetails,
  4702.                         'invoice' => $invoice,
  4703.                         'currencyList' => BuddybeeConstant::$currency_List,
  4704.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  4707.                     );
  4708.                     $attachments = [];
  4709.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  4712. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4713.                     $new_mail = $this->get('mail_module');
  4714.                     $new_mail->sendMyMail(array(
  4715.                         'senderHash' => '_CUSTOM_',
  4716.                         //                        'senderHash'=>'_CUSTOM_',
  4717.                         'forwardToMailAddress' => $forwardToMailAddress,
  4719.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  4721. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4722.                         'attachments' => $attachments,
  4723.                         'toAddress' => $forwardToMailAddress,
  4724.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  4725.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  4726.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4727.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4728.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4730. //                            'emailBody' => $bodyHtml,
  4731.                         'mailTemplate' => $bodyTemplate,
  4732.                         'templateData' => $bodyData,
  4733.                         'embedCompanyImage' => 0,
  4734.                         'companyId' => 0,
  4736.                         'companyImagePath' => ''
  4737. //                        'embedCompanyImage' => 1,
  4738. //                        'companyId' => $companyId,
  4739. //                        'companyImagePath' => $company_data->getImage()
  4742.                     ));
  4745.                 }
  4746. //
  4747.                 if ($meetingId != 0) {
  4748.                     $url = $this->generateUrl(
  4749.                         'consultancy_session'
  4750.                     );
  4751. //                if($request->query->get('autoRedirect',1))
  4752. //                    return $this->redirect($url . '/' . $meetingId);
  4753.                     $redirectUrl = $url . '/' . $meetingId;
  4755.                 } else {
  4756.                     $url = $this->generateUrl(
  4757.                         'central_landing'
  4758.                     );
  4759. //                if($request->query->get('autoRedirect',1))
  4760. //                    return $this->redirect($url);
  4761.                     $redirectUrl = $url;
  4762.                     $autoRedirect=0;
  4764.                 }
  4766.                 if (($retData['initiateCompany'] ?? 0) == 1 && $activationPending === 0 && ($retData['appId'] ?? 0) != 0 && ($retData['ownerId'] ?? 0) != 0) {
  4767.                     $redirectUrl = $this->generateUrl('activation_center', ['invoice_id' => (int)$invoice->getId()]);
  4768.                     $autoRedirect = 1;
  4769.                 }
  4772.             }
  4773.             return $this->render('@Application/pages/stripe/success.html.twig', array(
  4774.                 'page_title' => 'Success',
  4775.                 'meetingId' => $meetingId,
  4776.                 'autoRedirect' => $autoRedirect,
  4777.                 'redirectUrl' => $redirectUrl,
  4778.                 'initiateCompany' => $retData['initiateCompany']??0,
  4779.                 'appId' => $retData['appId']??0,
  4780.                 'ownerId' => $retData['ownerId']??0,
  4781.                 'activationPending' => $activationPending,
  4782.                 'activationCenterUrl' => ($retData['initiateCompany'] ?? 0) == 1
  4783.                     ? $this->generateUrl('activation_center', ['invoice_id' => (int)$invoice->getId()])
  4784.                     : null,
  4786.             ));
  4787.         }
  4788.         else if ($systemType == '_BUDDYBEE_') {
  4791.             if ($encData != '') {
  4792.                 $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  4793.                 if (isset($encryptedData['invoiceId']))
  4794.                     $invoiceId = $encryptedData['invoiceId'];
  4795.                 if (isset($encryptedData['autoRedirect']))
  4796.                     $autoRedirect = $encryptedData['autoRedirect'];
  4797.             } else {
  4798.                 $invoiceId = $request->query->get('invoiceId', 0);
  4800.                 $meetingId = 0;
  4801.                 $autoRedirect = $request->query->get('autoRedirect', 1);
  4802.                 $redirectUrl = '';
  4803.             }
  4806.             if ($invoiceId != 0) {
  4808.                 $retData = Buddybee::ProcessEntityInvoice($em, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], false,
  4809.                     $this->container->getParameter('notification_enabled'),
  4810.                     $this->container->getParameter('notification_server')
  4811.                 );
  4813.                 if ($retData['sendCards'] == 1) {
  4814.                     $cardList = array();
  4816.                     $cards = $em->getRepository('CompanyGroupBundle\\Entity\\BeeCode')
  4817.                         ->findBy(
  4818.                             array(
  4819.                                 'id' => $retData['cardIds']
  4820.                             )
  4821.                         );
  4823.                     foreach ($cards as $card) {
  4824.                         $cardList[] = array(
  4825.                             'id' => $card->getId(),
  4826.                             'printed' => $card->getPrinted(),
  4827.                             'amount' => $card->getAmount(),
  4828.                             'coinCount' => $card->getCoinCount(),
  4829.                             'pin' => $card->getPin(),
  4830.                             'serial' => $card->getSerial(),
  4832.                         );
  4833.                     }
  4834.                     $receiverEmail = $retData['receiverEmail'];
  4835.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  4838.                         $bodyHtml = '';
  4839.                         $bodyTemplate = '@Application/email/templates/beeCodeDigitalDelivery.html.twig';
  4840.                         $bodyData = array(
  4841.                             'cardList' => $cardList,
  4842. //                        'name' => $newApplicant->getFirstname() . ' ' . $newApplicant->getLastname(),
  4843. //                        'email' => $userName,
  4844. //                        'password' => $newApplicant->getPassword(),
  4845.                         );
  4846.                         $attachments = [];
  4847.                         $forwardToMailAddress = $receiverEmail;
  4850. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4851.                         $new_mail = $this->get('mail_module');
  4852.                         $new_mail->sendMyMail(array(
  4853.                             'senderHash' => '_CUSTOM_',
  4854.                             //                        'senderHash'=>'_CUSTOM_',
  4855.                             'forwardToMailAddress' => $forwardToMailAddress,
  4857.                             'subject' => 'Digital Bee Card Delivery',
  4859. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4860.                             'attachments' => $attachments,
  4861.                             'toAddress' => $forwardToMailAddress,
  4862.                             'fromAddress' => 'delivery@buddybee.eu',
  4863.                             'userName' => 'delivery@buddybee.eu',
  4864.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4865.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4866.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4867. //                        'encryptionMethod' => 'tls',
  4868.                             'encryptionMethod' => 'ssl',
  4869. //                            'emailBody' => $bodyHtml,
  4870.                             'mailTemplate' => $bodyTemplate,
  4871.                             'templateData' => $bodyData,
  4872. //                        'embedCompanyImage' => 1,
  4873. //                        'companyId' => $companyId,
  4874. //                        'companyImagePath' => $company_data->getImage()
  4877.                         ));
  4879.                         foreach ($cards as $card) {
  4880.                             $card->setPrinted(1);
  4881.                         }
  4882.                         $em->flush();
  4885.                     }
  4887.                     return new JsonResponse(
  4888.                         array(
  4889.                             'success' => true
  4890.                         )
  4891.                     );
  4894.                 }
  4897.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  4898.                 $meetingId = $retData['meetingId'];
  4899.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  4900.                     $billerDetails = [];
  4901.                     $billToDetails = [];
  4903.                     $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  4904.                         ->findOneBy(
  4905.                             array(
  4906.                                 'Id' => $invoiceId,
  4908.                             )
  4909.                         );;
  4910.                     if ($invoice) {
  4911.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4912.                             ->findOneBy(
  4913.                                 array(
  4914.                                     'applicantId' => $invoice->getBillerId(),
  4916.                                 )
  4917.                             );
  4918.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4919.                             ->findOneBy(
  4920.                                 array(
  4921.                                     'applicantId' => $invoice->getBillToId(),
  4923.                                 )
  4924.                             );
  4926.                     }
  4928.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  4929.                     $bodyData = array(
  4930.                         'page_title' => 'Invoice',
  4931. //            'studentDetails' => $student,
  4932.                         'billerDetails' => $billerDetails,
  4933.                         'billToDetails' => $billToDetails,
  4934.                         'invoice' => $invoice,
  4935.                         'currencyList' => BuddybeeConstant::$currency_List,
  4936.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  4939.                     );
  4940.                     $attachments = [];
  4941.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  4944. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4945.                     $new_mail = $this->get('mail_module');
  4946.                     $new_mail->sendMyMail(array(
  4947.                         'senderHash' => '_CUSTOM_',
  4948.                         //                        'senderHash'=>'_CUSTOM_',
  4949.                         'forwardToMailAddress' => $forwardToMailAddress,
  4951.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  4953. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4954.                         'attachments' => $attachments,
  4955.                         'toAddress' => $forwardToMailAddress,
  4956.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  4957.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  4958.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4959.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4960.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4962. //                            'emailBody' => $bodyHtml,
  4963.                         'mailTemplate' => $bodyTemplate,
  4964.                         'templateData' => $bodyData,
  4965.                         'embedCompanyImage' => 0,
  4966.                         'companyId' => 0,
  4968.                         'companyImagePath' => ''
  4969. //                        'embedCompanyImage' => 1,
  4970. //                        'companyId' => $companyId,
  4971. //                        'companyImagePath' => $company_data->getImage()
  4974.                     ));
  4977.                 }
  4978. //
  4979.                 if ($meetingId != 0) {
  4980.                     $url = $this->generateUrl(
  4981.                         'consultancy_session'
  4982.                     );
  4983. //                if($request->query->get('autoRedirect',1))
  4984. //                    return $this->redirect($url . '/' . $meetingId);
  4985.                     $redirectUrl = $url . '/' . $meetingId;
  4987.                 } else {
  4988.                     $url = $this->generateUrl(
  4989.                         'buddybee_dashboard'
  4990.                     );
  4991. //                if($request->query->get('autoRedirect',1))
  4992. //                    return $this->redirect($url);
  4993.                     $redirectUrl = $url;
  4995.                 }
  4998.             }
  4999.             return $this->render('@Application/pages/stripe/success.html.twig', array(
  5000.                 'page_title' => 'Success',
  5001.                 'meetingId' => $meetingId,
  5002.                 'autoRedirect' => $autoRedirect,
  5003.                 'redirectUrl' => $redirectUrl,
  5005.             ));
  5006.         }
  5009.     }
  5011.     public function PaymentGatewayCancelAction(Request $request, $msg = 'The Payment was unsuccessful', $encData = '')
  5012.     {
  5013.         $em = $this->getDoctrine()->getManager('company_group');
  5014. //        $consultantDetail = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(array());
  5015.         $session = $request->getSession();
  5016.         if ($msg == '')
  5017.             $msg = $request->query->get('msg', $request->request->get('msg', 'The Payment was unsuccessful'));
  5020.         return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  5021.             'page_title' => 'Success',
  5022.             'msg' => $msg,
  5024.         ));
  5025.     }
  5027.     public function BkashCallbackAction(Request $request, $encData = '')
  5028.     {
  5031.         $em = $this->getDoctrine()->getManager('company_group');
  5032.         $invoiceId = 0;
  5033.         $session = $request->getSession();
  5034.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  5036.         $paymentId = $request->query->get('paymentID', 0);
  5037.         $status = $request->query->get('status', 0);
  5039.         if ($status == 'success') {
  5040.             $paymentID = $paymentId;
  5041.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  5042.                 array(
  5043.                     'gatewayPaymentId' => $paymentId,
  5044.                     'isProcessed' => [0, 2]
  5046.                 ));
  5048.             if ($gatewayInvoice) {
  5049.                 $invoiceId = $gatewayInvoice->getId();
  5051.                 $justNow = new \DateTime();
  5053.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  5054.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  5055.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  5056.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  5057.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  5059.                 $justNowTs = $justNow->format('U');
  5060.                 if ($gatewayInvoice->getGatewayIdTokenExpireTs() <= $justNowTs) {
  5061.                     $refresh_token = $gatewayInvoice->getGatewayIdRefreshToken();
  5063.                     $request_data = array(
  5064.                         'app_key' => $app_key_value,
  5065.                         'app_secret' => $app_secret_value,
  5066.                         'refresh_token' => $refresh_token
  5067.                     );
  5068.                     $url = curl_init($baseUrl . '/tokenized/checkout/token/refresh');
  5070.                     $request_data_json = json_encode($request_data);
  5072.                     $header = array(
  5073.                         'Content-Type:application/json',
  5074.                         'username:' . $username_value,
  5075.                         'password:' . $password_value
  5076.                     );
  5077.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5078.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5079.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5080.                     curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  5081.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5082.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5085.                     $tokenData = json_decode(curl_exec($url), true);
  5086.                     curl_close($url);
  5089.                     $justNow = new \DateTime();
  5090.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  5091.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  5092.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  5093.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  5094.                     $em->flush();
  5095.                 }
  5096.                 $auth = $gatewayInvoice->getGatewayIdToken();;
  5098.                 $post_token = array(
  5099.                     'paymentID' => $paymentID
  5100.                 );
  5101. //                $url = curl_init();
  5102.                 $url = curl_init($baseUrl . '/tokenized/checkout/execute');
  5103.                 $posttoken = json_encode($post_token);
  5105.                 $header = array(
  5106.                     'Content-Type:application/json',
  5107.                     'Authorization:' . $auth,
  5108.                     'X-APP-Key:' . $app_key_value
  5109.                 );
  5111. //                curl_setopt_array($url, array(
  5112. //                    CURLOPT_HTTPHEADER => $header,
  5113. //                    CURLOPT_RETURNTRANSFER => 1,
  5114. //                    CURLOPT_URL => $baseUrl . '/tokenized/checkout/execute',
  5115. //
  5116. //                    CURLOPT_FOLLOWLOCATION => 1,
  5117. //                    CURLOPT_POST => 1,
  5118. //                    CURLOPT_IPRESOLVE => CURL_IPRESOLVE_V4,
  5119. //                    CURLOPT_POSTFIELDS => http_build_query($post_token)
  5120. //                ));
  5122.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5123.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5124.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5125.                 curl_setopt($url, CURLOPT_POSTFIELDS, $posttoken);
  5126.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5127.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5128.                 $resultdata = curl_exec($url);
  5129.                 curl_close($url);
  5130.                 $obj = json_decode($resultdata, true);
  5132. //                return new JsonResponse(array(
  5133. //                    'obj' => $obj,
  5134. //                    'url' => $baseUrl . '/tokenized/checkout/execute',
  5135. //                    'header' => $header,
  5136. //                    'paymentID' => $paymentID,
  5137. //                    'posttoken' => $posttoken,
  5138. //                ));
  5139. //                                return new JsonResponse($obj);
  5141.                 if (isset($obj['statusCode'])) {
  5143.                     if ($obj['statusCode'] == '0000') {
  5144.                         $gatewayInvoice->setGatewayTransId($obj['trxID']);
  5145.                         $em->flush();
  5146.                         return $this->redirectToRoute("payment_gateway_success", ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5147.                             'invoiceId' => $invoiceId, 'autoRedirect' => 1
  5148.                         ))),
  5149.                             'hbeeSessionToken' => $session->get('token', 0)]);
  5150.                     } else {
  5151.                         return $this->redirectToRoute("payment_gateway_cancel", [
  5152.                             'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'Payment Failed')
  5154.                         ]);
  5155.                     }
  5156.                 }
  5158.             } else {
  5159.                 return $this->redirectToRoute("payment_gateway_cancel", [
  5160.                     'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'Payment Failed')
  5162.                 ]);
  5163.             }
  5166.         } else {
  5167.             return $this->redirectToRoute("payment_gateway_cancel", [
  5168.                 'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'The Payment was unsuccessful')
  5170.             ]);
  5171.         }
  5174.     }
  5176.     public function MakePaymentOfEntityInvoiceAction(Request $request, $encData = '')
  5177.     {
  5178.         $em = $this->getDoctrine()->getManager('company_group');
  5179.         $em_goc = $em;
  5180.         $invoiceId = 0;
  5181.         $autoRedirect = 1;
  5182.         $redirectUrl = '';
  5183.         $meetingId = 0;
  5184.         $triggerMiddlePage = 0;
  5185.         $session = $request->getSession();
  5186.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  5189.         $refundSuccess = 0;
  5190.         $errorMsg = '';
  5191.         $errorCode = '';
  5194.         if ($encData != '') {
  5195.             $invoiceId = $encData;
  5196.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  5197.             if (isset($encryptedData['invoiceId']))
  5198.                 $invoiceId = $encryptedData['invoiceId'];
  5199.             if (isset($encryptedData['triggerMiddlePage']))
  5200.                 $triggerMiddlePage = $encryptedData['triggerMiddlePage'];
  5201.             if (isset($encryptedData['autoRedirect']))
  5202.                 $autoRedirect = $encryptedData['autoRedirect'];
  5203.         } else {
  5204.             $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  5205.             $triggerMiddlePage = $request->request->get('triggerMiddlePage', $request->query->get('triggerMiddlePage', 0));
  5207.             $meetingId = 0;
  5208.             $autoRedirect = $request->query->get('autoRedirect', 1);
  5209.             $redirectUrl = '';
  5210.         }
  5211.         $meetingId = $request->request->get('meetingId', $request->query->get('meetingId', 0));
  5213.         $actionDone = 0;
  5215.         if ($meetingId != 0) {
  5217.             $dt = Buddybee::ConfirmAnyMeetingSessionIfPossible($em, 0, $meetingId, false,
  5218.                 $this->container->getParameter('notification_enabled'),
  5219.                 $this->container->getParameter('notification_server'));
  5222.             if ($invoiceId == 0 && $dt['success'] == true) {
  5223.                 $actionDone = 1;
  5224.                 return new JsonResponse(array(
  5225.                     'clientSecret' => 0,
  5226.                     'actionDone' => $actionDone,
  5227.                     'id' => 0,
  5228.                     'proceedToCheckout' => 0
  5229.                 ));
  5230.             }
  5231.         }
  5234. //        $invoiceId = $request->request->get('meetingId', $request->query->get('meetingId', 0));
  5236.         $output = [
  5237.             'clientSecret' => 0,
  5238.             'id' => 0,
  5239.             'proceedToCheckout' => 0
  5240.         ];
  5241.         if ($invoiceId != 0) {
  5242.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  5243.                 array(
  5244.                     'Id' => $invoiceId,
  5245.                     'isProcessed' => [0]
  5247.                 ));
  5248.         } else {
  5249.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  5250.                 array(
  5251.                     'meetingId' => $meetingId,
  5252.                     'isProcessed' => [0]
  5254.                 ));
  5255.         }
  5257.         if ($gatewayInvoice)
  5258.             $invoiceId = $gatewayInvoice->getId();
  5260.         $invoiceSessionCount = 0;
  5261.         $payableAmount = 0;
  5262.         $imageBySessionCount = [
  5263.             0 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5264.             100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5265.             200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5266.             300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5267.             400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5268.             500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5269.             600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5270.             700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5271.             800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5272.             900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5273.             1000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5274.             1100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5275.             1200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5276.             1300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5277.             1400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5278.             1500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5279.             1600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5280.             1700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5281.             1800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5282.             1900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5283.             2000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5284.             2100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5285.             2200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5286.             2300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5287.             2400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5288.             2500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5289.             2600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5290.             2700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5291.             2800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5292.             2900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5293.             3000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5294.             3100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5295.             3200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5296.             3300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5297.             3400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5298.             3500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5299.             3600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5300.             3700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5302.         ];
  5305.         if ($gatewayInvoice) {
  5306.             $gatewayProductData = json_decode($gatewayInvoice->getProductDataForPaymentGateway(), true);
  5307.             if ($gatewayProductData == null) $gatewayProductData = [];
  5308.             $gatewayAmount = 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', '');
  5309.             $invoiceSessionCount = $gatewayInvoice->getSessionCount();
  5310.             $currencyForGateway = $gatewayInvoice->getAmountCurrency();
  5312.             $gatewayAmount = round($gatewayAmount, 2);
  5313.             if (empty($gatewayProductData))
  5314.                 $gatewayProductData = [
  5315.                     [
  5316.                         'price_data' => [
  5317.                             'currency' => 'eur',
  5318.                             'unit_amount' => $gatewayAmount != 0 ? (100 * $gatewayAmount) : 200000,
  5319.                             'product_data' => [
  5320. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  5321.                                 'name' => 'Bee Coins',
  5322. //                                'images' => [$imageBySessionCount[$invoiceSessionCount]],
  5323.                                 'images' => [$imageBySessionCount[0]],
  5324.                             ],
  5325.                         ],
  5326.                         'quantity' => 1,
  5327.                     ]
  5328.                 ];
  5330.             $productDescStr = '';
  5331.             $productDescArr = [];
  5332.             foreach ($gatewayProductData as $gpd) {
  5333.                 $productDescArr[] = $gpd['price_data']['product_data']['name'];
  5334.             }
  5335.             $productDescStr = implode(',', $productDescArr);
  5336.             $paymentGatewayFromInvoice = $gatewayInvoice->getAmountTransferGateWayHash();
  5339.             if ($paymentGatewayFromInvoice == 'stripe') {
  5340.                 $stripe = new \Stripe\Stripe();
  5341.                 \Stripe\Stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  5343.                 $stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  5344.                 {
  5345.                     if ($request->query->has('meetingSessionId'))
  5346.                         $id = $request->query->get('meetingSessionId');
  5347.                 }
  5349.                 $paymentIntent = [
  5350.                     "id" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs",
  5351.                     "object" => "payment_intent",
  5352.                     "amount" => 3000,
  5353.                     "amount_capturable" => 0,
  5354.                     "amount_received" => 0,
  5355.                     "application" => null,
  5356.                     "application_fee_amount" => null,
  5357.                     "canceled_at" => null,
  5358.                     "cancellation_reason" => null,
  5359.                     "capture_method" => "automatic",
  5360.                     "charges" => [
  5361.                         "object" => "list",
  5362.                         "data" => [],
  5363.                         "has_more" => false,
  5364.                         "url" => "/v1/charges?payment_intent=pi_1DoWjK2eZvKYlo2Csy9J3BHs"
  5365.                     ],
  5366.                     "client_secret" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs_secret_vmxAcWZxo2kt1XhpWtZtnjDtd",
  5367.                     "confirmation_method" => "automatic",
  5368.                     "created" => 1546523966,
  5369.                     "currency" => $currencyForGateway,
  5370.                     "customer" => null,
  5371.                     "description" => null,
  5372.                     "invoice" => null,
  5373.                     "last_payment_error" => null,
  5374.                     "livemode" => false,
  5375.                     "metadata" => [],
  5376.                     "next_action" => null,
  5377.                     "on_behalf_of" => null,
  5378.                     "payment_method" => null,
  5379.                     "payment_method_options" => [],
  5380.                     "payment_method_types" => [
  5381.                         "card"
  5382.                     ],
  5383.                     "receipt_email" => null,
  5384.                     "review" => null,
  5385.                     "setup_future_usage" => null,
  5386.                     "shipping" => null,
  5387.                     "statement_descriptor" => null,
  5388.                     "statement_descriptor_suffix" => null,
  5389.                     "status" => "requires_payment_method",
  5390.                     "transfer_data" => null,
  5391.                     "transfer_group" => null
  5392.                 ];
  5395.                 $checkout_session = \Stripe\Checkout\Session::create([
  5396.                     'payment_method_types' => ['card'],
  5397.                     'line_items' => $gatewayProductData,
  5398.                     'mode' => 'payment',
  5399.                     'success_url' => $this->generateUrl(
  5400.                         'payment_gateway_success',
  5401.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5402.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5403.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5404.                     ),
  5405.                     'cancel_url' => $this->generateUrl(
  5406.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5407.                     ),
  5408.                 ]);
  5409.                 $output = [
  5410.                     'clientSecret' => $paymentIntent['client_secret'],
  5411.                     'id' => $checkout_session->id,
  5412.                     'paymentGateway' => $paymentGatewayFromInvoice,
  5413.                     'proceedToCheckout' => 1
  5414.                 ];
  5415. //                return new JsonResponse($output);
  5416.             }
  5417.             if ($paymentGatewayFromInvoice == 'aamarpay') {
  5419.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  5422.                 $url = $sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/request.php' : 'https://secure.aamarpay.com/request.php';
  5423.                 $fields = array(
  5424. //                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5425.                     'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5426.                     'amount' => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''), //transaction amount
  5427.                     'payment_type' => 'VISA', //no need to change
  5428.                     'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  5429.                     'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  5430.                     'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  5431.                     'cus_email' => $studentDetails->getEmail(), //customer email address
  5432.                     'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  5433.                     'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  5434.                     'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  5435.                     'cus_state' => $studentDetails->getCurrAddrState(),  //state
  5436.                     'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  5437.                     'cus_country' => 'Bangladesh',  //country
  5438.                     'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  5439.                     'cus_fax' => '',  //fax
  5440.                     'ship_name' => '', //ship name
  5441.                     'ship_add1' => '',  //ship address
  5442.                     'ship_add2' => '',
  5443.                     'ship_city' => '',
  5444.                     'ship_state' => '',
  5445.                     'ship_postcode' => '',
  5446.                     'ship_country' => 'Bangladesh',
  5447.                     'desc' => $productDescStr,
  5448.                     'success_url' => $this->generateUrl(
  5449.                         'payment_gateway_success',
  5450.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5451.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5452.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5453.                     ),
  5454.                     'fail_url' => $this->generateUrl(
  5455.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5456.                     ),
  5457.                     'cancel_url' => $this->generateUrl(
  5458.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5459.                     ),
  5460. //                    'opt_a' => 'Reshad',  //optional paramter
  5461. //                    'opt_b' => 'Akil',
  5462. //                    'opt_c' => 'Liza',
  5463. //                    'opt_d' => 'Sohel',
  5464. //                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  5465.                     'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  5467.                 ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  5469.                 $fields_string = http_build_query($fields);
  5471.                 $ch = curl_init();
  5472.                 curl_setopt($ch, CURLOPT_VERBOSE, true);
  5473.                 curl_setopt($ch, CURLOPT_URL, $url);
  5475.                 curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  5476.                 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  5477.                 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  5478.                 $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  5479.                 curl_close($ch);
  5481. //                $this->redirect_to_merchant($url_forward);
  5483.                 $output = [
  5485. //                    'redirectUrl' => 'https://sandbox.aamarpay.com/'.$url_forward, //keeping it off temporarily
  5486.                     'redirectUrl' => ($sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/' : 'https://secure.aamarpay.com/') . $url_forward, //keeping it off temporarily
  5487. //                    'fields'=>$fields,
  5488. //                    'fields_string'=>$fields_string,
  5490. //                    'redirectUrl' => $this->generateUrl(
  5491. //                        'payment_gateway_success',
  5492. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5493. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5494. //                        ))), 'hbeeSessionToken' => $request->request->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5495. //                    ),
  5496.                     'paymentGateway' => $paymentGatewayFromInvoice,
  5497.                     'proceedToCheckout' => 1
  5498.                 ];
  5499. //                return new JsonResponse($output);
  5500.             } else if ($paymentGatewayFromInvoice == 'bkash') {
  5502.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  5504.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  5505.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  5506.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  5507.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  5508.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  5511.                 $request_data = array(
  5512.                     'app_key' => $app_key_value,
  5513.                     'app_secret' => $app_secret_value
  5514.                 );
  5515.                 $url = curl_init($baseUrl . '/tokenized/checkout/token/grant');
  5516.                 $request_data_json = json_encode($request_data);
  5517.                 $header = array(
  5518.                     'Content-Type:application/json',
  5519.                     'username:' . $username_value,
  5520.                     'password:' . $password_value
  5521.                 );
  5522.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5523.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5524.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5525.                 curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  5526.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5527.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5529.                 $tokenData = json_decode(curl_exec($url), true);
  5530.                 curl_close($url);
  5532.                 $id_token = $tokenData['id_token'];
  5533.                 $goToBkashPage = 0;
  5534.                 if ($tokenData['statusCode'] == '0000') {
  5535.                     $auth = $id_token;
  5538.                     $requestbody = array(
  5539.                         "mode" => "0011",
  5540. //                        "payerReference" => "",
  5541.                         "payerReference" => $gatewayInvoice->getInvoiceDateTs(),
  5542.                         "callbackURL" => $this->generateUrl(
  5543.                             'bkash_callback', [], UrlGenerator::ABSOLUTE_URL
  5544.                         ),
  5545. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  5546.                         "amount" => number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  5547.                         "currency" => "BDT",
  5548.                         "intent" => "sale",
  5549.                         "merchantInvoiceNumber" => $invoiceId
  5550.                     );
  5551.                     $url = curl_init($baseUrl . '/tokenized/checkout/create');
  5552.                     $requestbodyJson = json_encode($requestbody);
  5554.                     $header = array(
  5555.                         'Content-Type:application/json',
  5556.                         'Authorization:' . $auth,
  5557.                         'X-APP-Key:' . $app_key_value
  5558.                     );
  5560.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5561.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5562.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5563.                     curl_setopt($url, CURLOPT_POSTFIELDS, $requestbodyJson);
  5564.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5565.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5566.                     $resultdata = curl_exec($url);
  5567.                     curl_close($url);
  5568. //                    return new JsonResponse($resultdata);
  5570.                     $obj = json_decode($resultdata, true);
  5573.                     $goToBkashPage = 1;
  5576.                     $justNow = new \DateTime();
  5577.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  5578.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  5579.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  5580.                     $gatewayInvoice->setGatewayPaymentId($obj['paymentID']);
  5581.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  5582.                     $em->flush();
  5584.                     $output = [
  5586.                         'redirectUrl' => $obj['bkashURL'],
  5588.                         'paymentGateway' => $paymentGatewayFromInvoice,
  5589.                         'proceedToCheckout' => $goToBkashPage,
  5590.                         'tokenData' => $tokenData,
  5591.                         'obj' => $obj,
  5592.                         'id_token' => $tokenData['id_token'],
  5593.                     ];
  5596.                 }
  5599. //                $fields = array(
  5600. //
  5601. //                    "mode" => "0011",
  5602. //                    "payerReference" => "01723888888",
  5603. //                    "callbackURL" => $this->generateUrl(
  5604. //                        'payment_gateway_success',
  5605. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5606. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5607. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5608. //                    ),
  5609. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  5610. //                    "amount" => $gatewayInvoice->getGateWayBillamount(),
  5611. //                    "currency" => "BDT",
  5612. //                    "intent" => "sale",
  5613. //                    "merchantInvoiceNumber" => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT)
  5614. //
  5615. //                );
  5616. //                $fields = array(
  5617. ////                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5618. //                    'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5619. //                    'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  5620. //                    'payment_type' => 'VISA', //no need to change
  5621. //                    'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  5622. //                    'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  5623. //                    'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  5624. //                    'cus_email' => $studentDetails->getEmail(), //customer email address
  5625. //                    'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  5626. //                    'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  5627. //                    'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  5628. //                    'cus_state' => $studentDetails->getCurrAddrState(),  //state
  5629. //                    'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  5630. //                    'cus_country' => 'Bangladesh',  //country
  5631. //                    'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? ' + 8801911706483' : $studentDetails->getPhone(), //customer phone number
  5632. //                    'cus_fax' => '',  //fax
  5633. //                    'ship_name' => '', //ship name
  5634. //                    'ship_add1' => '',  //ship address
  5635. //                    'ship_add2' => '',
  5636. //                    'ship_city' => '',
  5637. //                    'ship_state' => '',
  5638. //                    'ship_postcode' => '',
  5639. //                    'ship_country' => 'Bangladesh',
  5640. //                    'desc' => $productDescStr,
  5641. //                    'success_url' => $this->generateUrl(
  5642. //                        'payment_gateway_success',
  5643. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5644. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5645. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5646. //                    ),
  5647. //                    'fail_url' => $this->generateUrl(
  5648. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5649. //                    ),
  5650. //                    'cancel_url' => $this->generateUrl(
  5651. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5652. //                    ),
  5653. ////                    'opt_a' => 'Reshad',  //optional paramter
  5654. ////                    'opt_b' => 'Akil',
  5655. ////                    'opt_c' => 'Liza',
  5656. ////                    'opt_d' => 'Sohel',
  5657. ////                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  5658. //                    'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  5659. //
  5660. //                ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  5661. //
  5662. //                $fields_string = http_build_query($fields);
  5663. //
  5664. //                $ch = curl_init();
  5665. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  5666. //                curl_setopt($ch, CURLOPT_URL, $url);
  5667. //
  5668. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  5669. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  5670. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  5671. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  5672. //                curl_close($ch);
  5674. //                $this->redirect_to_merchant($url_forward);
  5677.             }
  5679.         }
  5681.         if ($triggerMiddlePage == 1) return $this->render('@Buddybee/pages/makePaymentOfEntityInvoiceLandingPage.html.twig', array(
  5682.             'page_title' => 'Invoice Payment',
  5684.             'data' => $output,
  5687.         ));
  5688.         else
  5689.             return new JsonResponse($output);
  5692.     }
  5695.     public function RefundEntityInvoiceAction(Request $request, $encData = '')
  5696.     {
  5699.         $em = $this->getDoctrine()->getManager('company_group');
  5700.         $invoiceId = 0;
  5702.         $currIsProcessedFlagValue = '_UNSET_';
  5704.         $session = $request->getSession();
  5705.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  5707.         $paymentId = $request->query->get('paymentID', 0);
  5708.         $status = $request->query->get('status', 0);
  5710.         $refundSuccess = 0;
  5711.         $errorMsg = '';
  5712.         $errorCode = '';
  5715.         if ($encData != '') {
  5716.             $invoiceId = $encData;
  5717.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  5718.             if (isset($encryptedData['invoiceId']))
  5719.                 $invoiceId = $encryptedData['invoiceId'];
  5720.             if (isset($encryptedData['autoRedirect']))
  5721.                 $autoRedirect = $encryptedData['autoRedirect'];
  5722.         } else {
  5723.             $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  5725.             $meetingId = 0;
  5726.             $autoRedirect = $request->query->get('autoRedirect', 1);
  5727.             $redirectUrl = '';
  5728.         }
  5731.         $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  5732.             array(
  5733.                 'Id' => $invoiceId,
  5734.                 'isProcessed' => [1]
  5736.             ));
  5739.         if ($gatewayInvoice) {
  5740.             $gatewayInvoice->setIsProcessed(3); //pending settlement
  5741.             $currIsProcessedFlagValue = $gatewayInvoice->getIsProcessed();
  5742.             $em->flush();
  5744.             if ($gatewayInvoice->getAmountTransferGateWayHash() == 'bkash') {
  5745.                 $invoiceId = $gatewayInvoice->getId();
  5747.                 $paymentID = $gatewayInvoice->getGatewayPaymentId();
  5748.                 $trxID = $gatewayInvoice->getGatewayTransId();
  5750.                 $justNow = new \DateTime();
  5752.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  5753.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  5754.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  5755.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  5756.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  5759.                 $justNowTs = $justNow->format('U');
  5760.                 if ($gatewayInvoice->getGatewayIdTokenExpireTs() <= $justNowTs) {
  5761.                     $refresh_token = $gatewayInvoice->getGatewayIdRefreshToken();
  5763.                     $request_data = array(
  5764.                         'app_key' => $app_key_value,
  5765.                         'app_secret' => $app_secret_value,
  5766.                         'refresh_token' => $refresh_token
  5767.                     );
  5768.                     $url = curl_init($baseUrl . '/tokenized/checkout/token/refresh');
  5770.                     $request_data_json = json_encode($request_data);
  5772.                     $header = array(
  5773.                         'Content-Type:application/json',
  5774.                         'username:' . $username_value,
  5775.                         'password:' . $password_value
  5776.                     );
  5777.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5778.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5779.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5780.                     curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  5781.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5782.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5784.                     $tokenData = json_decode(curl_exec($url), true);
  5785.                     curl_close($url);
  5788.                     $justNow = new \DateTime();
  5789.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  5790.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  5791.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  5792.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  5793.                     $em->flush();
  5794.                 }
  5797.                 $auth = $gatewayInvoice->getGatewayIdToken();;
  5799.                 $post_token = array(
  5800.                     'paymentID' => $paymentID,
  5801.                     'trxID' => $trxID,
  5802.                     'reason' => 'Full Refund Policy',
  5803.                     'sku' => 'RSTR',
  5804.                     'amount' => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  5805.                 );
  5806.                 $url = curl_init($baseUrl . '/tokenized/checkout/payment/refund');
  5807.                 $posttoken = json_encode($post_token);
  5809.                 $header = array(
  5810.                     'Content-Type:application/json',
  5811.                     'Authorization:' . $auth,
  5812.                     'X-APP-Key:' . $app_key_value
  5813.                 );
  5814.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5815.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5816.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5817.                 curl_setopt($url, CURLOPT_POSTFIELDS, $posttoken);
  5818.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5819.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5820.                 $resultdata = curl_exec($url);
  5822.                 curl_close($url);
  5824.                 $obj = json_decode($resultdata, true);
  5826. //                return new JsonResponse($obj);
  5828.                 if (isset($obj['completedTime']))
  5829.                     $refundSuccess = 1;
  5830.                 else if (isset($obj['errorCode'])) {
  5831.                     $refundSuccess = 0;
  5832.                     $errorCode = $obj['errorCode'];
  5833.                     $errorMsg = $obj['errorMessage'];
  5834.                 }
  5835. //                    $gatewayInvoice->setGatewayTransId($obj['trxID']);
  5836.                 $em->flush();
  5839.             }
  5842.             if ($refundSuccess == 1) {
  5843.                 Buddybee::RefundEntityInvoice($em, $invoiceId);
  5844.                 $currIsProcessedFlagValue = 4;
  5845.             }
  5846.         } else {
  5848.         }
  5850.         MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  5853.         return new JsonResponse(
  5854.             array(
  5855.                 'success' => $refundSuccess,
  5856.                 'errorCode' => $errorCode,
  5857.                 'isProcessed' => $currIsProcessedFlagValue,
  5858.                 'errorMsg' => $errorMsg,
  5859.             )
  5860.         );
  5863.     }
  5866.     public function ViewEntityInvoiceAction(Request $request, $encData = '')
  5867.     {
  5868.         $em = $this->getDoctrine()->getManager('company_group');
  5869.         $invoiceId = 0;
  5870.         $autoRedirect = 1;
  5871.         $redirectUrl = '';
  5872.         $meetingId = 0;
  5873.         $invoice = null;
  5876.         if ($encData != '') {
  5877.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  5878.             $invoiceId = $encData;
  5879.             if (isset($encryptedData['invoiceId']))
  5880.                 $invoiceId = $encryptedData['invoiceId'];
  5881.             if (isset($encryptedData['autoRedirect']))
  5882.                 $autoRedirect = $encryptedData['autoRedirect'];
  5883.         } else {
  5884.             $invoiceId = $request->query->get('invoiceId', 0);
  5886.             $meetingId = 0;
  5887.             $autoRedirect = $request->query->get('autoRedirect', 1);
  5888.             $redirectUrl = '';
  5889.         }
  5891. //    $invoiceList = [];
  5893.         $billerDetails = [];
  5894.         $billToDetails = [];
  5895.         if ($invoiceId != 0) {
  5896.             $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  5897.                 ->findOneBy(
  5898.                     array(
  5899.                         'Id' => $invoiceId,
  5901.                     )
  5902.                 );
  5904.             if ($invoice) {
  5905.                 $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5906.                     ->findOneBy(
  5907.                         array(
  5908.                             'applicantId' => $invoice->getBillerId(),
  5910.                         )
  5911.                     );
  5912.                 $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5913.                     ->findOneBy(
  5914.                         array(
  5915.                             'applicantId' => $invoice->getBillToId(),
  5917.                         )
  5918.                     );
  5920.             }
  5922.             if ($request->query->get('sendMail', 0) == 1 && GeneralConstant::EMAIL_ENABLED == 1) {
  5923.                 $billerDetails = [];
  5924.                 $billToDetails = [];
  5927.                 if ($invoice) {
  5928.                     $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5929.                         ->findOneBy(
  5930.                             array(
  5931.                                 'applicantId' => $invoice->getBillerId(),
  5933.                             )
  5934.                         );
  5935.                     $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5936.                         ->findOneBy(
  5937.                             array(
  5938.                                 'applicantId' => $invoice->getBillToId(),
  5940.                             )
  5941.                         );
  5944.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  5945.                     $bodyData = array(
  5946.                         'page_title' => 'Invoice',
  5947. //            'studentDetails' => $student,
  5948.                         'billerDetails' => $billerDetails,
  5949.                         'billToDetails' => $billToDetails,
  5950.                         'invoice' => $invoice,
  5951.                         'currencyList' => BuddybeeConstant::$currency_List,
  5952.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  5955.                     );
  5956.                     $attachments = [];
  5957.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  5960. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  5961.                     $new_mail = $this->get('mail_module');
  5962.                     $new_mail->sendMyMail(array(
  5963.                         'senderHash' => '_CUSTOM_',
  5964.                         //                        'senderHash'=>'_CUSTOM_',
  5965.                         'forwardToMailAddress' => $forwardToMailAddress,
  5967.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  5969. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  5970.                         'attachments' => $attachments,
  5971.                         'toAddress' => $forwardToMailAddress,
  5972.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  5973.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  5974.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  5975.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  5976.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  5978. //                            'emailBody' => $bodyHtml,
  5979.                         'mailTemplate' => $bodyTemplate,
  5980.                         'templateData' => $bodyData,
  5981.                         'embedCompanyImage' => 0,
  5982.                         'companyId' => 0,
  5984.                         'companyImagePath' => ''
  5985. //                        'embedCompanyImage' => 1,
  5986. //                        'companyId' => $companyId,
  5987. //                        'companyImagePath' => $company_data->getImage()
  5990.                     ));
  5991.                 }
  5994.             }
  5997. //            if ($invoice) {
  5998. //
  5999. //            } else {
  6000. //                return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  6001. //                    'page_title' => '404 Not Found',
  6002. //
  6003. //                ));
  6004. //            }
  6007.             return $this->render('@HoneybeeWeb/pages/views/honeybee_ecosystem_invoice.html.twig', array(
  6008.                 'page_title' => 'Invoice',
  6009. //            'studentDetails' => $student,
  6010.                 'billerDetails' => $billerDetails,
  6011.                 'billToDetails' => $billToDetails,
  6012.                 'invoice' => $invoice,
  6013.                 'currencyList' => BuddybeeConstant::$currency_List,
  6014.                 'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  6017.             ));
  6018.         }
  6021.     }
  6022.     public function SignatureCheckFromCentralAction(Request $request)
  6023.     {
  6024.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  6026.         if ($systemType !== '_CENTRAL_') {
  6027.             return new JsonResponse(['success' => false, 'message' => 'Only allowed on CENTRAL server.'], 403);
  6028.         }
  6030.         $em = $this->getDoctrine()->getManager('company_group');
  6031.         $em->getConnection()->connect();
  6033.         $data = json_decode($request->getContent(), true);
  6035.         if (
  6036.             !$data ||
  6037.             !isset($data['userId']) ||
  6038.             !isset($data['companyId']) ||
  6039.             !isset($data['signatureData']) ||
  6040.             !isset($data['approvalHash']) ||
  6041.             !isset($data['applicantId'])
  6042.         ) {
  6043.             return new JsonResponse(['success' => false, 'message' => 'Missing parameters.'], 400);
  6044.         }
  6046.         $userId = $data['userId'];
  6047.         $companyId = $data['companyId'];
  6048.         $signatureData = $data['signatureData'];
  6049.         $approvalHash = $data['approvalHash'];
  6050.         $applicantId = $data['applicantId'];
  6052.         try {
  6053.             $centralUser = $em
  6054.                 ->getRepository("CompanyGroupBundle\\Entity\\EntityApplicantDetails")
  6055.                 ->findOneBy(['applicantId' => $applicantId]);
  6057.             if (!$centralUser) {
  6058.                 return new JsonResponse(['success' => false, 'message' => 'Central user not found.'], 404);
  6059.             }
  6061.             $userAppIds = json_decode($centralUser->getUserAppIds(), true);
  6062.             if (!is_array($userAppIds)) $userAppIds = [];
  6064.             $companies = $em->getRepository('CompanyGroupBundle\\Entity\\CompanyGroup')->findBy([
  6065.                 'appId' => $userAppIds
  6066.             ]);
  6068.             if (count($companies) < 1) {
  6069.                 return new JsonResponse(['success' => false, 'message' => 'No companies found for userAppIds.'], 404);
  6070.             }
  6072.             $repo = $em->getRepository('CompanyGroupBundle\\Entity\\EntitySignature');
  6073.             $record = $repo->findOneBy(['userId' => $userId]);
  6075.             if (!$record) {
  6076.                 $record = new \CompanyGroupBundle\Entity\EntitySignature();
  6077.                 $record->setUserId($applicantId);
  6078.                 $record->setCreatedAt(new \DateTime());
  6079.             }
  6081.             $record->setCompanyId($companyId);
  6082.             $record->setApplicantId($applicantId);
  6083.             $record->setData($signatureData);
  6084.             $record->setSigExists(0);
  6085.             $record->setLastDecryptedSigId(0);
  6086.             $record->setUpdatedAt(new \DateTime());
  6087.             $em->persist($record);
  6088.             $em->flush();
  6089.             $dataByServerId = [];
  6090.             $gocDataListByAppId = [];
  6091.             foreach ($companies as $entry) {
  6092.                 $gocDataListByAppId[$entry->getAppId()] = [
  6093.                     'dbName' => $entry->getDbName(),
  6094.                     'dbUser' => $entry->getDbUser(),
  6095.                     'dbPass' => $entry->getDbPass(),
  6096.                     'dbHost' => $entry->getDbHost(),
  6097.                     'serverAddress' => $entry->getCompanyGroupServerAddress(),
  6098.                     'port' => $entry->getCompanyGroupServerPort() ?: 80,
  6099.                     'appId' => $entry->getAppId(),
  6100.                     'serverId' => $entry->getCompanyGroupServerId(),
  6101.                 ];
  6102.                 if (!isset($dataByServerId[$entry->getCompanyGroupServerId()]))
  6103.                     $dataByServerId[$entry->getCompanyGroupServerId()] = array(
  6106.                         'serverId' => $entry->getCompanyGroupServerId(),
  6107.                         'serverAddress' => $entry->getCompanyGroupServerAddress(),
  6108.                         'port' => $entry->getCompanyGroupServerPort() ?: 80,
  6109.                         'payload' => array(
  6110.                             'globalId' => $applicantId,
  6111.                             'companyId' => $userAppIds,
  6112.                             'signatureData' => $signatureData,
  6113. //                                      'approvalHash' => $approvalHash
  6114.                         )
  6115.                     );
  6116.             }
  6119.             $urls = [];
  6122.             foreach ($dataByServerId as $entry) {
  6123.                 $serverAddress = $entry['serverAddress'];
  6124.                 if (!$serverAddress) continue;
  6127. //                     $connector = $this->container->get('application_connector');
  6128. //                     $connector->resetConnection(
  6129. //                         'default',
  6130. //                         $entry['dbName'],
  6131. //                         $entry['dbUser'],
  6132. //                         $entry['dbPass'],
  6133. //                         $entry['dbHost'],
  6134. //                         $reset = true
  6135. //                     );
  6138.                 $syncUrl = $serverAddress . '/ReceiveSignatureFromCentral';
  6140.                 $payload = $entry['payload'];
  6142.                 $curl = curl_init();
  6143.                 curl_setopt_array($curl, [
  6144.                     CURLOPT_RETURNTRANSFER => true,
  6145.                     CURLOPT_POST => true,
  6146.                     CURLOPT_URL => $syncUrl,
  6147. //                         CURLOPT_PORT => $entry['port'],
  6148.                     CURLOPT_CONNECTTIMEOUT => 10,
  6149.                     CURLOPT_SSL_VERIFYPEER => false,
  6150.                     CURLOPT_SSL_VERIFYHOST => false,
  6151.                     CURLOPT_HTTPHEADER => [
  6152.                         'Accept: application/json',
  6153.                         'Content-Type: application/json'
  6154.                     ],
  6155.                     CURLOPT_POSTFIELDS => json_encode($payload)
  6156.                 ]);
  6158.                 $response = curl_exec($curl);
  6159.                 $err = curl_error($curl);
  6160.                 $httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
  6161.                 curl_close($curl);
  6164. //                     if ($err) {
  6165. //                         error_log("ERP Sync Error [AppID $appId]: $err");
  6166. //                          $urls[]=$err;
  6167. //                     } else {
  6168. //                         error_log("ERP Sync Response [AppID $appId] (HTTP $httpCode): $response");
  6169. //                         $res = json_decode($response, true);
  6170. //                         if (!isset($res['success']) || !$res['success']) {
  6171. //                             error_log("❗ ERP Sync error for AppID $appId: " . ($res['message'] ?? 'Unknown'));
  6172. //                         }
  6173. //
  6174. //                      $urls[]=$response;
  6175. //                     }
  6176.             }
  6179.             return new JsonResponse(['success' => true, 'message' => 'Signature synced successfully.']);
  6181.         } catch (\Exception $e) {
  6182.             return new JsonResponse(['success' => false, 'message' => 'DB error: ' . $e->getMessage()], 500);
  6183.         }
  6184.     }
  6185.  //datev cntroller
  6186.     public function connectDatev(Request $request)
  6187.     {
  6188.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  6189.         $redirectUri = "https://ourhoneybee.eu/datev/callback";
  6191.         $state = bin2hex(random_bytes(10));
  6192.         $scope = "openid profile email accounting:documents accounting:dxso-jobs accounting:clients:read datev:accounting:extf-files-import datev:accounting:clients";
  6193.         $codeVerifier = bin2hex(random_bytes(32));
  6194.         $codeChallenge = rtrim(strtr(base64_encode(hash('sha256', $codeVerifier, true)), '+/', '-_'), '=');
  6196.         $session = $request->getSession();
  6197.         $applicantId = $session->get(UserConstants::APPLICANT_ID);
  6199.         $em_goc = $this->getDoctrine()->getManager('company_group');
  6202.         $token = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  6203.             ->findOneBy(['userId' => $applicantId]);
  6205.         if (!$token) {
  6206.             $token = new EntityDatevToken();
  6207.             $token->setUserId($applicantId);
  6208.         }
  6210.         $token->setState($state);
  6211.         $token->setCodeChallenge($codeChallenge);
  6212.         $token->setCodeVerifier($codeVerifier);
  6214.         $em_goc->persist($token);
  6215.         $em_goc->flush();
  6217.         $url = "https://login.datev.de/openidsandbox/authorize?"
  6218.             ."response_type=code"
  6219.             ."&client_id=".$clientId
  6220.             ."&state=".$state
  6221.             ."&scope=".urlencode($scope)
  6222.             ."&redirect_uri=".urlencode($redirectUri)
  6223.             ."&code_challenge=".$codeChallenge
  6224.             ."&code_challenge_method=S256"
  6225.             ."&prompt=login";
  6227.         return $this->redirect($url);
  6228.     }
  6229.     public function datevCallback(Request $request)
  6230.     {
  6231.         $code  = $request->get('code');
  6232.         $state = $request->get('state');
  6234.         if (!$code || !$state) {
  6235.             return new Response("Invalid callback request");
  6236.         }
  6238.         $em_goc = $this->getDoctrine()->getManager('company_group');
  6239.         $tokenEntity = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  6240.             ->findOneBy(['state' => $state]);
  6242.         if (!$tokenEntity) {
  6243.             return new Response("Invalid or expired state");
  6244.         }
  6247.         $codeVerifier = $tokenEntity->getCodeVerifier();
  6249.         if (!$codeVerifier) {
  6250.             return new Response("Code verifier missing");
  6251.         }
  6253.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  6254.         $clientSecret = "9b1c4e72a966e9f231584393ff1d3469";
  6256.         // from parameters
  6257. //        $clientId= $this->getContainer()->getParameter('datev_client_id');
  6258. //        $clientSecret= $this->getContainer()->getParameter('datev_client_secret');
  6260.         $authString = base64_encode($clientId . ":" . $clientSecret);
  6261.         $redirectUri = "https://ourhoneybee.eu/datev/callback";
  6264.         $postFields = http_build_query([
  6265.             "grant_type"    => "authorization_code",
  6266.             "code"          => $code,
  6267.             "redirect_uri"  => $redirectUri,
  6268.             "client_id"     => $clientId,
  6269.             "code_verifier" => $codeVerifier
  6270.         ]);
  6272.         $ch = curl_init();
  6274.         curl_setopt_array($ch, [
  6275.             CURLOPT_URL            => "https://sandbox-api.datev.de/token",
  6276.             CURLOPT_POST           => true,
  6277.             CURLOPT_RETURNTRANSFER => true,
  6278.             CURLOPT_POSTFIELDS     => $postFields,
  6279.             CURLOPT_HTTPHEADER     => [
  6280.                 "Content-Type: application/x-www-form-urlencoded",
  6281.                 "Authorization: Basic " . $authString
  6282.             ]
  6283.         ]);
  6285.         $response = curl_exec($ch);
  6287.         if (curl_errno($ch)) {
  6288.             return new Response("cURL Error: " . curl_error($ch), 500);
  6289.         }
  6291.         curl_close($ch);
  6293.         $data = json_decode($response, true);
  6295.         if (!$data) {
  6296.             return new Response("Invalid token response", 500);
  6297.         }
  6299.         if (isset($data['access_token'])) {
  6301.             $tokenEntity->setAccessToken($data['access_token']);
  6302.             $session = $request->getSession();  //remove it later
  6303.             $session->set('DATEV_ACCESS_TOKEN', $data['access_token']);
  6305.             if (isset($data['refresh_token'])) {
  6306.                 $tokenEntity->setRefreshToken($data['refresh_token']);
  6307.             }
  6309.             if (isset($data['expires_in'])) {
  6310.                 $tokenEntity->setExpiresAt(time() + $data['expires_in']);
  6311.             }
  6314. //            $tokenEntity->setState(null);
  6315.             $tokenEntity->setCode($code);
  6317.             $em_goc->flush();
  6319.             return $this->redirect("/datev/home");
  6320.         }
  6322.         return new Response(
  6323.             "Token exchange failed: " . json_encode($data),
  6324.             400
  6325.         );
  6326.     }
  6328.     public function refreshToken(Request $request)
  6329.     {
  6330.         $em_goc = $this->getDoctrine()->getManager('company_group');
  6331.         $session = $request->getSession();
  6332.         $applicantId = $session->get(UserConstants::APPLICANT_ID);
  6334.         $token = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  6335.             ->findOneBy(['userId' => $applicantId]);
  6337.         if (!$token) {
  6338.             return new JsonResponse([
  6339.                 'status' => false,
  6340.                 'message' => 'User token not found'
  6341.             ]);
  6342.         }
  6345.         if (!$token->getRefreshToken()) {
  6346.             return new JsonResponse([
  6347.                 'status' => false,
  6348.                 'message' => 'No refresh token available'
  6349.             ]);
  6350.         }
  6352.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  6353.         $clientSecret = "9b1c4e72a966e9f231584393ff1d3469";
  6355.         $authString = base64_encode($clientId . ":" . $clientSecret);
  6357.         $postFields = http_build_query([
  6358.             "grant_type" => "refresh_token",
  6359.             "refresh_token" => $token->getRefreshToken(),
  6360.         ]);
  6362.         $ch = curl_init();
  6364.         curl_setopt_array($ch, [
  6365.             CURLOPT_URL => "https://sandbox-api.datev.de/token",
  6366.             CURLOPT_POST => true,
  6367.             CURLOPT_RETURNTRANSFER => true,
  6368.             CURLOPT_POSTFIELDS => $postFields,
  6369.             CURLOPT_HTTPHEADER => [
  6370.                 "Content-Type: application/x-www-form-urlencoded",
  6371.                 "Authorization: Basic " . $authString
  6372.             ]
  6373.         ]);
  6375.         $response = curl_exec($ch);
  6377.         if (curl_errno($ch)) {
  6378.             return new JsonResponse([
  6379.                 'status' => false,
  6380.                 'message' => curl_error($ch)
  6381.             ]);
  6382.         }
  6384.         curl_close($ch);
  6386.         $data = json_decode($response, true);
  6388.         if (!isset($data['access_token'])) {
  6389.             return new JsonResponse([
  6390.                 'status' => false,
  6391.                 'message' => 'Refresh failed',
  6392.                 'error' => $data
  6393.             ]);
  6394.         }
  6397.         $token->setAccessToken($data['access_token']);
  6399.         if (isset($data['refresh_token'])) {
  6400.             $token->setRefreshToken($data['refresh_token']);
  6401.         }
  6402.         $token->setExpiresAt(time() + $data['expires_in']);
  6403.         $em_goc->flush();
  6404.         return new JsonResponse([
  6405.             'status' => true,
  6406.             'message' => 'Token refreshed successfully'
  6407.         ]);
  6408.     }
  6410.     public function registerDevice(Request $request)
  6411.     {
  6412.         $em_goc = $this->getDoctrine()->getManager('company_group');
  6414.         $data = json_decode($request->getContent(), true);
  6416.         if (!$data) {
  6417.             $data = $request->request->all();
  6418.         }
  6420.         $deviceSerial = $data['device_id'] ?? null;
  6422.         if (!$deviceSerial) {
  6423.             return new JsonResponse([
  6424.                 'success' => false,
  6425.                 'message' => 'Device serial is required',
  6426.                 'data' => null
  6427.             ], 400);
  6428.         }
  6430.         $device =  $em_goc->getRepository('CompanyGroupBundle\\Entity\\Device')
  6431.             ->findOneBy(['deviceSerial' => $deviceSerial]);
  6433.         if (!$device) {
  6434.             $device = new Device();
  6435.             $device->setDeviceSerial($deviceSerial);
  6436.             $message = 'Device registered successfully';
  6437.         } else {
  6438.             $message = 'Device updated successfully';
  6439.         }
  6441.         if (isset($data['deviceName'])) {
  6442.             $device->setDeviceName($data['deviceName']);
  6443.         }
  6445.         if (isset($data['appId'])) {
  6446.             $device->setAppId($data['appId']);
  6447.         }
  6449.         if (isset($data['deviceType'])) {
  6450.             $device->setDeviceType($data['deviceType']);
  6451.         }
  6453.         if (isset($data['deviceMarker'])) {
  6454.             $device->setDeviceMarker($data['deviceMarker']);
  6455.         }
  6457.         if (isset($data['timezoneStr'])) {
  6458.             $device->setTimezoneStr($data['timezoneStr']);
  6459.         }
  6461.         if (isset($data['hostname'])) {
  6462.             $device->setHostName($data['hostname']);
  6463.         }
  6465.         $em_goc->persist($device);
  6466.         $em_goc->flush();
  6468.         return new JsonResponse([
  6469.             'success' => true,
  6470.             'message' => $message,
  6471.             'data' => [
  6472.                 'id' => $device->getId(),
  6473.                 'deviceSerial' => $device->getDeviceSerial(),
  6474.                 'deviceName' => $device->getDeviceName(),
  6475.                 'deviceType' => $device->getDeviceType(),
  6476.                 'hostName' => $device->getHostName(),
  6477.             ]
  6478.         ]);
  6479.     }
  6480.     public function khorchapatiTermsAndConditions()
  6481.     {
  6482.              return $this->render('@HoneybeeWeb/pages/khorchapati_terms_and_conditions.html.twig', array(
  6483.             'page_title' => 'Terms and Conditions — Khorchapati',
  6484.         ));
  6486.             
  6487.     }
  6488.     public function milkShareTermsAndConditions()
  6489.     {
  6490.         return $this->render('@HoneybeeWeb/pages/milkshare-terms-and-conditions.html.twig', array(
  6491.             'page_title' => 'Terms and Conditions — Milkshare',
  6492.         ));
  6495.     }
  6497. }