[ADD] connector_signifyd: Automate fraud detection on orders with the Signifyd API.

connector_signifyd/controllers/__init__.py

@@ -0,0 +1,2 @@
+from . import main
+from . import signifyd

connector_signifyd/controllers/main.py

@@ -0,0 +1,21 @@
+from odoo.http import request, route
+from odoo.addons.website_sale.controllers.main import WebsiteSale
+
+
+class WebsiteSale(WebsiteSale):
+
+    @route(['/shop/confirmation'], type='http', auth="public", website=True, sitemap=False)
+    def payment_confirmation(self, **post):
+        res = super(WebsiteSale, self).payment_confirmation()
+        order_session_id = request.session.session_token
+        checkout_token = request.session.session_token
+        browser_ip_address = request.httprequest.environ['REMOTE_ADDR']
+        sale_order_id = request.session.get('sale_last_order_id')
+        if sale_order_id:
+            order = request.env['sale.order'].sudo().browse(sale_order_id)
+            # Post completed order to Signifyd
+            signifyd = request.env.company.signifyd_connector_id
+            if signifyd:
+                order.sudo().post_signifyd_case(order_session_id, checkout_token, browser_ip_address)
+
+        return res

connector_signifyd/controllers/signifyd.py

@@ -0,0 +1,36 @@
+import json
+from odoo.http import Controller, request, route
+from odoo.http import Response
+
+
+class SignifydWebhooks(Controller):
+    @route(['/cases/creation'], type='json', auth='public', methods=['POST'], csrf=False)
+    def case_creation(self, *args, **post):
+        data = json.loads(request.httprequest.data)
+        vals = request.env['signifyd.connector'].process_post_values(data)
+        # Update case with info
+        case = request.env['signifyd.case'].sudo().search([('case_id', '=', vals['case_id'])])
+        if case:
+            case.sudo().update_case_info(vals)
+            # Request guarantee for case if eligible
+            try:
+                case.request_guarantee()
+                if case.guarantee_requested and not case.guarantee_eligible:
+                    # Only alert Signifyd to stop trying if we have at least tried once already
+                    return Response({'response': 'success'}, status=200, mimetype='application/json')
+            except:
+                # Signifyd API will try again up to 15 times if a non-2** code is returned
+                return Response({'response': 'failed'}, status=500, mimetype='application/json')
+
+    @route(['/cases/update'], type='json', auth='public', methods=['POST'], csrf=False)
+    def case_update(self, *args, **post):
+        data = json.loads(request.httprequest.data)
+        vals = request.env['signifyd.connector'].process_post_values(data)
+        case = request.env['signifyd.case'].sudo().search([('case_id', '=', vals['case_id'])])
+        if case:
+            case.update_case_info(vals)
+
+        outcome = vals.get('guarantee_disposition')
+        if case and outcome == 'DECLINED':
+            for user in request.env.company.signifyd_connector_id.notify_user_ids:
+                case.sudo().create_notification(user, outcome)