src/ApplicationBundle/Modules/HoneybeeWeb/Controller/HoneybeeWebPublicController.php line 72

Open in your IDE?
  1. <?php
  3. namespace ApplicationBundle\Modules\HoneybeeWeb\Controller;
  6. use ApplicationBundle\Constants\BuddybeeConstant;
  7. use ApplicationBundle\Constants\EmployeeConstant;
  8. use ApplicationBundle\Constants\GeneralConstant;
  9. use ApplicationBundle\Controller\GenericController;
  10. use ApplicationBundle\Entity\DatevToken;
  11. use ApplicationBundle\Modules\Authentication\Constants\UserConstants; use ApplicationBundle\Modules\Api\Constants\ApiConstants;
  12. use ApplicationBundle\Modules\Buddybee\Buddybee;
  13. use ApplicationBundle\Modules\HoneybeeWeb\Service\Hb360EstimateService;
  14. use ApplicationBundle\Modules\HoneybeeWeb\Service\Hb360ProjectService;
  15. use ApplicationBundle\Modules\HoneybeeWeb\Support\SdsEconCore;
  16. use ApplicationBundle\Modules\System\MiscActions;
  17. use Symfony\Component\HttpFoundation\Cookie;
  18. use CompanyGroupBundle\Entity\EntityCreateTopic;
  19. use CompanyGroupBundle\Entity\PaymentMethod;
  20. use CompanyGroupBundle\Entity\EntityDatevToken;
  21. use CompanyGroupBundle\Entity\Device;
  22. use CompanyGroupBundle\Entity\EntityInvoice;
  23. use CompanyGroupBundle\Entity\EntityMeetingSession;
  24. use CompanyGroupBundle\Entity\EntityTicket;
  25. use Endroid\QrCode\Builder\BuilderInterface;
  26. use Endroid\QrCodeBundle\Response\QrCodeResponse;
  27. use Ps\PdfBundle\Annotation\Pdf;
  28. use Symfony\Component\HttpFoundation\JsonResponse;
  29. use Symfony\Component\HttpFoundation\Request;
  30. use CompanyGroupBundle\Entity\EntityApplicantDetails;
  31. use Symfony\Component\HttpFoundation\Response;
  32. use Symfony\Component\Routing\Generator\UrlGenerator;
  33. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  34. //use Symfony\Bundle\FrameworkBundle\Console\Application;
  35. //use Symfony\Component\Console\Input\ArrayInput;
  36. //use Symfony\Component\Console\Output\NullOutput;
  39. class HoneybeeWebPublicController extends GenericController
  40. {
  42.     private function getPublicDocumentEntityManager($appId)
  43.     {
  44.         $emGoc = $this->getDoctrine()->getManager('company_group');
  45.         $emGoc->getConnection()->connect();
  47.         $goc = $emGoc
  48.             ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  49.             ->findOneBy(
  50.                 array(
  51.                     'appId' => $appId
  52.                 )
  53.             );
  55.         if (!$goc) {
  56.             return array(null, null);
  57.         }
  59.         $connector = $this->container->get('application_connector');
  60.         $connector->resetConnection(
  61.             'default',
  62.             $goc->getDbName(),
  63.             $goc->getDbUser(),
  64.             $goc->getDbPass(),
  65.             $goc->getDbHost(),
  66.             $reset = true
  67.         );
  69.         return array($this->getDoctrine()->getManager(), $goc);
  70.     }
  71.     // home page
  72.     public function CentralHomePageAction(Request $request)
  73.     {
  74.         $em = $this->getDoctrine()->getManager('company_group');
  75.         $subscribed = false;
  77.         if ($request->isMethod('POST')) {
  79.             $entityTicket = new EntityTicket();
  80.             $entityTicket->setEmail($request->request->get('newsletter'));
  82.             $em->persist($entityTicket);
  83.             $em->flush();
  85.             $subscribed = true;
  86.         }
  88.         $response = $this->render('@HoneybeeWeb/pages/home.html.twig', [
  89.             'page_title' => 'HoneyBee — Project ERP + Business ERP + HoneyCore Edge EMS',
  90.             'og_title' => 'HoneyBee — Business + Energy Infrastructure. One Operating System.',
  91.             'og_description' => 'HoneyBee connects Business ERP, Project ERP, HoneyCore Edge EMS, AI and mobile field operations in one ecosystem — so business, project, finance, site, asset and energy data work together.',
  92.             'subscribed' => $subscribed,
  93.             'packageDetails' => GeneralConstant::$packageDetails,
  94.         ]);
  96.         // GR2 (GROWTH) — a landing via a GR1 backlink (?ref=<surface>&t=<hash>) records one
  97.         // viral_touch row + drops the attribution cookie. Fully guarded: never breaks the page.
  98.         $viralToken = \ApplicationBundle\Modules\LeadGen\Service\ViralAttributionService::capture($em, $request);
  99.         return \ApplicationBundle\Modules\LeadGen\Service\ViralAttributionService::attachCookie($response, $viralToken);
  100.     }
  102.     // about us
  103.     public function CentralAboutUsPageAction()
  104.     {
  105.         return $this->render('@HoneybeeWeb/pages/about_us.html.twig', array(
  106.                 'page_title'     => 'About HoneyBee | Building the Operating System for Project Businesses & Energy Infrastructure',
  107.                 'og_title'       => 'About HoneyBee | Building the Operating System for Project Businesses & Energy Infrastructure',
  108.                 'og_description' => 'HoneyBee is a Germany/EU + Singapore-oriented software ecosystem connecting Business ERP, Project ERP, HoneyCore Edge EMS, AI, and mobile operations — with engineering, development, implementation, and regional support from Bangladesh.',
  109.                 'packageDetails' => GeneralConstant::$packageDetails,
  110.         ));
  111.     }
  113.     // Contact page
  114.     public function CentralContactPageAction(Request $request)
  115.     {
  117.         $em = $this->getDoctrine()->getManager('company_group');
  119.         if ($request->isXmlHttpRequest()) {
  121.             $email = $request->request->get('email');
  123.             if ($email) {
  124.                 // Enrich the message with the 3-step form selectors (need / company type / phone),
  125.                 // and persist any uploaded workflow/site-requirement file (graceful if absent).
  126.                 $bodyParts = [trim((string) $request->request->get('message', ''))];
  127.                 $need = trim((string) $request->request->get('enquiry_need', ''));
  128.                 $companyType = trim((string) $request->request->get('company_type', ''));
  129.                 $phone = trim((string) $request->request->get('phone', ''));
  130.                 if ($need !== '')        { $bodyParts[] = 'Need: ' . $need; }
  131.                 if ($companyType !== '') { $bodyParts[] = 'Company type: ' . $companyType; }
  132.                 if ($phone !== '')       { $bodyParts[] = 'Phone: ' . $phone; }
  134.                 $uploaded = $request->files->get('workflow_file');
  135.                 if ($uploaded) {
  136.                     try {
  137.                         $projectDir = $this->getParameter('kernel.project_dir');
  138.                         $relDir = 'uploads/contact/' . date('Y/m');
  139.                         $absDir = rtrim($projectDir, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR . 'web' . DIRECTORY_SEPARATOR . str_replace('/', DIRECTORY_SEPARATOR, $relDir);
  140.                         if (!is_dir($absDir)) { @mkdir($absDir, 0775, true); }
  141.                         $ext  = method_exists($uploaded, 'guessExtension') ? ($uploaded->guessExtension() ?: 'dat') : 'dat';
  142.                         $name = 'contact_' . date('YmdHis') . '_' . mt_rand(1000, 9999) . '.' . $ext;
  143.                         $uploaded->move($absDir, $name);
  144.                         $bodyParts[] = 'Attachment: /' . $relDir . '/' . $name;
  145.                     } catch (\Throwable $e) { /* non-fatal: still save the message */ }
  146.                 }
  148.                 $entityTicket = new EntityTicket();
  149.                 $entityTicket->setEmail($email);
  150.                 $entityTicket->setName($request->request->get('name'));
  151.                 $entityTicket->setTitle($request->request->get('subject'));
  152.                 $entityTicket->setTicketBody(implode("\n", array_filter($bodyParts)));
  154.                 $em->persist($entityTicket);
  155.                 $em->flush();
  157.                 $this->get('app.commercial_journey_service')->captureExistingObject('ticket', $entityTicket, 'talk_to_sales');
  159.                 return new JsonResponse([
  160.                     'success' => true,
  161.                     'message' => 'Your message has been sent successfully. Our team will reply soon.'
  162.                 ]);
  163.             }
  165.             return new JsonResponse([
  166.                 'success' => false,
  167.                 'message' => 'Invalid email address.'
  168.             ]);
  169.         }
  171.         return $this->render('@HoneybeeWeb/pages/contact.html.twig', array(
  172.             'page_title' => 'Request a HoneyBee Project Solution | HoneyCore Edge+, IoT, Billing & AI Deployment',
  173.             'og_title' => 'Request a HoneyBee Project Solution | HoneyCore Edge+, IoT, Billing & AI Deployment',
  174.             'og_description' => 'Tell us about your EPC, energy asset, HoneyCore Edge+ or multi-site project. A HoneyBee solutions engineer will respond with a tailored deployment plan.',
  175.         ));
  176.         
  177.     }
  179.     // blogs
  180.     public function CentralBlogsPageAction(Request $request)
  181.     {
  182.         $em = $this->getDoctrine()->getManager('company_group');
  184.         $topicDetails = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateTopic')->findAll();
  185.         $repo         = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog');
  187.         // ── Fetch featured blog separately (always, regardless of page) ──
  188.         $featuredBlog = $repo->findOneBy(['isPrimaryBlog' => true]);
  190.         // ── Pagination ──
  191.         $page       = max(1, (int) $request->query->get('page', 1));
  192.         $limit      = 6;
  193.         $totalBlogs = count($repo->findAll());
  194.         $totalPages = max(1, (int) ceil($totalBlogs / $limit));
  195.         $page       = min($page, $totalPages);
  196.         $offset     = ($page - 1) * $limit;
  198.         $blogDetails = $repo->findBy([], ['Id' => 'DESC'], $limit, $offset);
  200.         return $this->render('@HoneybeeWeb/pages/blogs.html.twig', [
  201.             'page_title'   => 'Blogs',
  202.             'topics'       => $topicDetails,
  203.             'blogs'        => $blogDetails,
  204.             'featuredBlog' => $featuredBlog,
  205.             'currentPage'  => $page,
  206.             'totalPages'   => $totalPages,
  207.             'totalBlogs'   => $totalBlogs,
  208.         ]);
  209.     }
  210.     // product
  211.     public function CentralProductPageAction()
  212.     {
  213.         return $this->render('@HoneybeeWeb/pages/product.html.twig', array(
  214.             'page_title' => 'HoneyBee Platform | One ecosystem, four connected layers',
  215.             'og_description' => 'Business ERP, Project ERP, HoneyCore Edge EMS, AI and mobile — one connected platform, not bolted-together tools.',
  216.         ));
  217.     }
  219.     // ── Phase 2 marketing pages (website restructure) ──
  220.     public function CentralProjectErpPageAction()
  221.     {
  222.         return $this->render('@HoneybeeWeb/pages/project_erp.html.twig', array(
  223.             'page_title' => 'Project ERP for EPC, Engineering & Solar | HoneyBee',
  224.             'og_description' => 'Control every project from quotation to cash collection: BoQ, procurement, site execution, milestone billing, retention, O&M, profitability — plus HoneyCore Edge+ project workflows.',
  225.         ));
  226.     }
  228.     public function CentralBusinessErpPageAction()
  229.     {
  230.         return $this->render('@HoneybeeWeb/pages/business_erp.html.twig', array(
  231.             'page_title' => 'Business ERP for SMEs | HR, Accounts, Inventory, CRM — HoneyBee',
  232.             'og_description' => 'Affordable, modular Business ERP for growing SMEs in Europe and Singapore. Start small, expand when ready — from €7.99/user/month.',
  233.         ));
  234.     }
  236.     public function CentralEdgePageAction()
  237.     {
  238.         return $this->render('@HoneybeeWeb/pages/honeycore_edge.html.twig', array(
  239.             'page_title' => 'HoneyCore Edge EMS | Energy & Site Intelligence — HoneyBee',
  240.             'og_description' => 'Connect solar PV, grid, generators, batteries, meters and sensors with O&M, billing, finance and reporting through HoneyCore Edge EMS site intelligence.',
  241.         ));
  242.     }
  244.     public function CentralEdgeProjectsPageAction()
  245.     {
  246.         return $this->render('@HoneybeeWeb/pages/honeycore_edge_projects.html.twig', array(
  247.             'page_title' => 'HoneyCore Edge+ Design & Quotation Software | HoneyBee',
  248.             'og_description' => 'Turn site requirements into HoneyCore Edge+ architecture, sensor/meter schedules, BoQ, quotation, commissioning checklist and O&M workflow.',
  249.         ));
  250.     }
  252.     public function CentralExperiencePageAction()
  253.     {
  254.         return $this->render('@HoneybeeWeb/pages/experience.html.twig', array(
  255.             'page_title' => 'Experience & Proof | HoneyBee',
  256.             'og_description' => 'Built from real ERP, project, HoneyCore Edge EMS and SME digital-transformation experience — with Germany/EU product focus and a Singapore SaaS base.',
  257.         ));
  258.     }
  260.     public function CentralTrustPageAction()
  261.     {
  262.         return $this->render('@HoneybeeWeb/pages/trust_governance.html.twig', array(
  263.             'page_title' => 'Trust & Governance | Security & Standards — HoneyBee',
  264.             'og_description' => 'Operator-owned data, RBAC, audit trails, NIS2-aware governance and a clear, no-overclaim standards map with claim-control categories.',
  265.         ));
  266.     }
  268.     // ── Self-serve pricing: server-authoritative price preview (cart calls this on every change) ──
  269.     public function CentralPricePreviewAction(Request $request)
  270.     {
  271.         $plan   = (string) $request->request->get('plan', 'core');
  272.         $users  = (int) $request->request->get('users', 0);
  273.         $admins = (int) $request->request->get('admins', 0);
  274.         $ml     = (int) $request->request->get('ml_users', 0);
  275.         $cycle  = $request->request->get('cycle', 'monthly') === 'yearly' ? 'yearly' : 'monthly';
  276.         $addons = (array) $request->request->get('addons', []);
  277.         // Keep only known add-on ids (never trust the client list blindly).
  278.         $catalogue = GeneralConstant::$subscriptionAddOns;
  279.         $addons = array_values(array_intersect($addons, array_keys($catalogue)));
  281.         $svc = new \CompanyGroupBundle\Modules\Api\Service\PricingService();
  282.         $breakdown = $svc->getPriceBreakdown($users, $admins, $ml, $cycle, $plan, $addons);
  283.         // attach the resolved add-on display rows for the cart
  284.         $addonRows = [];
  285.         foreach ($addons as $id) {
  286.             $addonRows[] = ['id' => $id, 'name' => $catalogue[$id]['name'], 'euMonthly' => (float) $catalogue[$id]['euMonthly']];
  287.         }
  288.         $breakdown['addon_rows'] = $addonRows;
  289.         return new JsonResponse(['ok' => true, 'breakdown' => $breakdown]);
  290.     }
  292.     // ── Investor Snapshot (Phase C) ──
  293.     public function CentralInvestorPageAction()
  294.     {
  295.         return $this->render('@HoneybeeWeb/pages/investor_snapshot.html.twig', array(
  296.             'page_title'     => 'Investor Snapshot | HoneyBee — Business + Energy Infrastructure OS',
  297.             'og_description' => 'HoneyBee is a vertical operating system for project-based energy, engineering and industrial companies — positioning, ICP, revenue model and defensibility. No invented metrics.',
  298.         ));
  299.     }
  301.     // ── Competitor comparison pages (Phase C) ──
  302.     public function CentralComparePageAction($slug)
  303.     {
  304.         $meta = [
  305.             'odoo'                       => ['HoneyBee vs Odoo | Project & Energy ERP Comparison', 'Odoo is a broad ERP suite. HoneyBee is built around project execution, EPC workflows, field operations and energy-infrastructure intelligence.'],
  306.             'zoho'                       => ['HoneyBee vs Zoho | ERP for Project & Energy Companies', 'Zoho covers general business apps. HoneyBee connects ERP, project execution, finance, O&M and HoneyCore energy data in one workflow.'],
  307.             'sap-business-one'           => ['HoneyBee vs SAP Business One | Project ERP Comparison', 'SAP Business One suits general operations. HoneyBee adds deep EPC/project execution and energy-infrastructure intelligence.'],
  308.             'microsoft-business-central' => ['HoneyBee vs Microsoft Business Central | Comparison', 'Business Central is a broad ERP. HoneyBee is purpose-built for project-based energy, engineering and industrial companies.'],
  309.             'monday-clickup'             => ['HoneyBee vs Monday / ClickUp | Beyond Task Management', 'Monday and ClickUp manage tasks. HoneyBee connects tasks with quotation, BoQ, procurement, billing, finance and energy data.'],
  310.             'excel'                      => ['HoneyBee vs Excel | From Spreadsheets to an Operating System', 'Excel is flexible but fragile. HoneyBee gives structure, audit trail, approvals, real-time data and automation.'],
  311.             'scada-ems'                  => ['HoneyBee vs SCADA / EMS Dashboards | Asset Data to Business', 'SCADA/EMS tools monitor assets. HoneyBee connects asset data with ERP, O&M, billing, reporting and AI.'],
  312.         ];
  313.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  314.         return $this->render('@HoneybeeWeb/pages/compare/' . $slug . '.html.twig', array(
  315.             'page_title'     => $meta[$slug][0],
  316.             'og_description' => $meta[$slug][1],
  317.             'compare_slug'   => $slug,
  318.         ));
  319.     }
  321.     // ── SEO solution landing pages (Phase C) ──
  322.     public function CentralSolutionPageAction($slug)
  323.     {
  324.         $meta = [
  325.             'erp-for-solar-epc'      => ['ERP for Solar EPC Companies | HoneyBee Project ERP', 'Project ERP for solar EPC: quotation, BoQ, procurement, site execution, milestone billing, O&M and HoneyCore Edge EMS energy intelligence.'],
  326.             'erp-for-engineering'    => ['ERP for Engineering Companies | HoneyBee Project ERP', 'Control engineering projects from quotation to delivery, billing and profitability with HoneyBee Project ERP.'],
  327.             'erp-for-construction'   => ['ERP for Construction Project Companies | HoneyBee', 'BoQ, procurement, site execution, milestone billing and retention for construction project companies.'],
  328.             'erp-for-om'             => ['ERP for O&M Companies | HoneyBee', 'Connect O&M workflows with billing, reporting and energy-asset data through HoneyBee and HoneyCore Edge EMS.'],
  329.             'erp-for-trading'        => ['ERP for Trading & Distribution Companies | HoneyBee', 'HR, accounts, inventory, sales, purchase and CRM for trading and distribution companies.'],
  330.             'project-erp-bangladesh' => ['Project ERP for Bangladesh SMEs | HoneyBee', 'Affordable project ERP for Bangladesh SMEs — quotation, procurement, site execution, billing and reporting.'],
  331.             'project-erp-singapore'  => ['Project ERP for Singapore SMEs | HoneyBee', 'Project ERP for Singapore SMEs and project-based companies — execution, finance and reporting in one system.'],
  332.             'project-erp-germany'    => ['Project ERP for German Energy Companies | HoneyBee', 'Project ERP for German energy and engineering companies, DATEV-ready export and GoBD-aligned audit trail where implemented.'],
  333.             'honeycore-solar-pv'     => ['HoneyCore for Solar PV Monitoring | HoneyBee', 'HoneyCore Edge EMS connects solar PV, inverters and meters with O&M, billing, reporting and AI.'],
  334.             'honeycore-hybrid-energy'=> ['HoneyCore for Hybrid Energy Systems | HoneyBee', 'Monitor solar, battery, generator and grid in hybrid energy systems with HoneyCore Edge EMS.'],
  335.             'honeycore-cold-chain'   => ['HoneyCore for Cold Chain & Healthcare Infrastructure | HoneyBee', 'Temperature, energy and utility monitoring for cold-chain and healthcare infrastructure with HoneyCore Edge EMS.'],
  336.             'honeycore-agri-pv'      => ['HoneyCore for Agri-PV & Irrigation | HoneyBee', 'Connect solar generation, soil and irrigation data with HoneyCore Edge EMS for Agri-PV and solar irrigation.'],
  337.         ];
  338.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  339.         return $this->render('@HoneybeeWeb/pages/solutions/' . $slug . '.html.twig', array(
  340.             'page_title'     => $meta[$slug][0],
  341.             'og_description' => $meta[$slug][1],
  342.             'solution_slug'  => $slug,
  343.         ));
  344.     }
  346.     // ── Calculators (Phase D) ──
  347.     public function CentralToolPageAction($slug)
  348.     {
  349.         $meta = [
  350.             'cost-leakage-calculator'   => ['Project Cost Leakage Calculator | HoneyBee', 'Estimate the hidden annual loss from delays, procurement leakage, billing delays and inventory loss — and the right HoneyBee path.'],
  351.             'roi-calculator'            => ['ERP ROI Calculator | HoneyBee', 'Estimate time saved and monthly savings from HoneyBee across approvals, invoices and projects.'],
  352.             'site-assessment-estimator' => ['HoneyCore Site Assessment Estimator | HoneyBee', 'Estimate your HoneyCore site assessment scope from sites, PV capacity, meters, inverters and protocols.'],
  353.             'rooftop-estimate'          => ['Instant Solar Estimate | HoneyBee 360', 'Enter your address and monthly bill — get an instant indicative PV size, annual yield, bill saving and payback, with every figure honestly tagged. Powered by PVGIS yield data.'],
  354.         ];
  355.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  356.         return $this->render('@HoneybeeWeb/pages/tools/' . $slug . '.html.twig', array(
  357.             'page_title'     => $meta[$slug][0],
  358.             'og_description' => $meta[$slug][1],
  359.             'tool_slug'      => $slug,
  360.             'maps_key'       => $this->mapsBrowserKey(),
  361.         ));
  362.     }
  364.     // Failsafe default — used when no parameter is configured in parameters.yml.
  365.     const HB_MAPS_KEY = 'AIzaSyBJxyUy8a_U2rSdIUApVDoK_dcvgGkoeDk';
  367.     /** Server-side Google key (Geocoding + Solar API): parameter `google_maps_api_key`, else the built-in default. Never throws. */
  368.     protected function mapsKey()
  369.     {
  370.         if ($this->container->hasParameter('google_maps_api_key')) {
  371.             $k = $this->container->getParameter('google_maps_api_key');
  372.             if (is_string($k) && trim($k) !== '') { return $k; }
  373.         }
  374.         return self::HB_MAPS_KEY;
  375.     }
  377.     /** Client-side (browser) Google key for the map JS: parameter `google_maps_browser_key`, else the server key, else default. Never throws. */
  378.     protected function mapsBrowserKey()
  379.     {
  380.         if ($this->container->hasParameter('google_maps_browser_key')) {
  381.             $k = $this->container->getParameter('google_maps_browser_key');
  382.             if (is_string($k) && trim($k) !== '') { return $k; }
  383.         }
  384.         return $this->mapsKey();
  385.     }
  387.     // ── Rooftop estimate — MANUAL draw endpoint (area + coords from the map) ──
  388.     public function CentralRooftopCalcAction(Request $request)
  389.     {
  390.         $lat     = (float) $request->request->get('lat', 0);
  391.         $lng     = (float) $request->request->get('lng', 0);
  392.         $area    = (float) $request->request->get('area_m2', 0);
  393.         $mode    = $request->request->get('mode', 'roof');
  394.         $monthly = (float) $request->request->get('monthly_kwh', 0);
  395.         $bill    = (float) $request->request->get('monthly_bill', 0);
  396.         $tariff  = (float) $request->request->get('tariff', 0.22);
  397.         $tilt    = (float) $request->request->get('tilt', 10);
  398.         $src     = $request->request->get('roof_source') === 'manual' ? 'manual' : 'map';
  400.         // ── SDS2 (additive): the studio's live economics panel sends the REAL packed kWp plus
  401.         // the zone's pitch/azimuth/mount-mode. `kwp` absent/0 ⇒ the legacy path below runs
  402.         // byte-identical. SDS2 responses are TRANSIENT (no hb360 anon-project upsert — a live
  403.         // drag must not overwrite the visitor's saved estimate; persistence is SDS3).
  404.         $sdsKwp = (float) $request->request->get('kwp', 0);
  405.         if ($sdsKwp > 0) {
  406.             if ($lat == 0) {
  407.                 return new JsonResponse(['ok' => false, 'error' => 'Draw a roof outline on the map first.']);
  408.             }
  409.             $res = $this->computeSdsZoneEconomics($lat, $lng, $area, $sdsKwp, [
  410.                 'pitch_deg'   => (float) $request->request->get('pitch_deg', 0),
  411.                 'azimuth_deg' => (float) $request->request->get('azimuth_deg', 180),
  412.                 'mount_mode'  => $request->request->get('mount_mode') === 'ew' ? 'ew' : 'south',
  413.                 'module_wp'   => (float) $request->request->get('module_wp', 450),
  414.                 'total_kwp'   => (float) $request->request->get('total_kwp', 0),
  415.             ], $monthly, $bill, $tariff);
  416.             return new JsonResponse($res);
  417.         }
  419.         if ($area <= 5 || $lat == 0) {
  420.             return new JsonResponse(['ok' => false, 'error' => 'Draw a roof outline on the map first.']);
  421.         }
  422.         $res = $this->computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthly, $bill, $tariff, null, $src);
  423.         $res['roof_source'] = $src === 'manual' ? 'manual area' : 'Map outline';
  424.         $res['lat'] = $lat; $res['lng'] = $lng;
  425.         return $this->hb360Respond($request, $res, [
  426.             'mode' => $mode, 'monthly_kwh' => $monthly, 'monthly_bill' => $bill,
  427.             'tariff' => $tariff, 'tilt' => $tilt, 'area_m2' => $area, 'roof_source' => $src,
  428.         ]);
  429.     }
  431.     // ── Rooftop estimate — AUTO from ADDRESS (geocode → Google Solar API → OSM footprint → PVGIS) ──
  432.     public function CentralRooftopAutoAction(Request $request)
  433.     {
  434.         $address = trim((string) $request->request->get('address', ''));
  435.         $mode    = $request->request->get('mode', 'roof');
  436.         $monthly = (float) $request->request->get('monthly_kwh', 0);
  437.         $bill    = (float) $request->request->get('monthly_bill', 0);
  438.         $tariff  = (float) $request->request->get('tariff', 0.22);
  439.         $tilt    = (float) $request->request->get('tilt', 10);
  441.         if ($address === '') {
  442.             return new JsonResponse(['ok' => false, 'error' => 'Enter an address first.']);
  443.         }
  444.         $geo = $this->geocodeAddress($address);
  445.         if ($geo === null) {
  446.             return new JsonResponse(['ok' => false, 'error' => 'Address not found — try a more specific address.']);
  447.         }
  448.         $lat = $geo['lat']; $lng = $geo['lng'];
  450.         // Tier 1: Google Solar API (best — real roof + panel layout). Null when API disabled / no coverage.
  451.         $preset = $this->solarApiDesign($lat, $lng);
  452.         $roofSource = null; $area = null; $src = 'map';
  453.         if ($preset !== null) {
  454.             $area = $preset['roof_area']; $roofSource = 'Google Solar API'; $src = 'solar_api';
  455.         } else {
  456.             // Tier 2: OSM building footprint (free, global where mapped).
  457.             $area = $this->osmBuildingArea($lat, $lng);
  458.             if ($area !== null) { $roofSource = 'OSM building footprint'; $src = 'osm'; }
  459.         }
  461.         if ($area === null || $area < 10) {
  462.             // Tier 3: hand off to manual draw at the geocoded location.
  463.             return new JsonResponse([
  464.                 'ok' => false, 'needs_manual' => true,
  465.                 'lat' => $lat, 'lng' => $lng, 'formatted_address' => $geo['formatted'],
  466.                 'error' => 'Could not auto-detect the roof at this address — trace it on the map below.',
  467.             ]);
  468.         }
  470.         $res = $this->computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthly, $bill, $tariff, $preset, $src);
  471.         $res['lat'] = $lat; $res['lng'] = $lng;
  472.         $res['formatted_address'] = $geo['formatted'];
  473.         $res['roof_source'] = $roofSource;
  474.         return $this->hb360Respond($request, $res, [
  475.             'mode' => $mode, 'monthly_kwh' => $monthly, 'monthly_bill' => $bill,
  476.             'tariff' => $tariff, 'tilt' => $tilt, 'address' => $address, 'roof_source' => $src,
  477.         ]);
  478.     }
  480.     /**
  481.      * H1b: wrap an estimate response — persist the guest's estimate as their ONE
  482.      * anonymous Hb360Project (keyed by the `hb360_anon` cookie) so it survives
  483.      * the trip through the signup wall. Strictly fail-safe: if the central
  484.      * schema/table isn't there yet, the public estimator answers exactly as
  485.      * before, just without a saved copy.
  486.      */
  487.     private function hb360Respond(Request $request, array $res, array $inputs)
  488.     {
  489.         $token = null;
  490.         if (!empty($res['ok'])) {
  491.             try {
  492.                 $token = (string) $request->cookies->get('hb360_anon', '');
  493.                 if (!preg_match('/^[a-f0-9]{32,64}$/', $token)) {
  494.                     $token = Hb360ProjectService::newToken();
  495.                 }
  496.                 $em = $this->getDoctrine()->getManager('company_group');
  497.                 $project = (new Hb360ProjectService($em))->upsertForToken($token, [
  498.                     'address'  => (string) ($res['formatted_address'] ?? ($inputs['address'] ?? '')),
  499.                     'lat'      => $res['lat'] ?? null,
  500.                     'lng'      => $res['lng'] ?? null,
  501.                     'inputs'   => $inputs,
  502.                     'estimate' => $res,
  503.                 ]);
  504.                 $res['saved'] = ['project_id' => (int) $project->getId()];
  505.             } catch (\Throwable $e) {
  506.                 $token = null; // saving is an enhancement, never a gate
  507.             }
  508.         }
  509.         $response = new JsonResponse($res);
  510.         if ($token) {
  511.             // 90 days, whole site, httpOnly (JS never needs it — the server reads it).
  512.             $response->headers->setCookie(new Cookie('hb360_anon', $token, time() + 90 * 86400, '/', null, false, true));
  513.         }
  514.         return $response;
  515.     }
  517.     /** H1c: public read-only view of a shared feasibility report (unguessable token). */
  518.     public function Hb360SharedAction($shareToken)
  519.     {
  520.         $project = null;
  521.         try {
  522.             $em = $this->getDoctrine()->getManager('company_group');
  523.             $project = (new Hb360ProjectService($em))->findByShareToken((string) $shareToken);
  524.         } catch (\Throwable $e) {
  525.             $project = null;
  526.         }
  527.         if (!$project) {
  528.             throw $this->createNotFoundException();
  529.         }
  530.         return $this->render('@HoneybeeWeb/pages/tools/hb360_shared.html.twig', array(
  531.             'page_title' => 'Shared Solar Feasibility Estimate | HoneyBee 360',
  532.             'project'    => $project,
  533.             'estimate'   => json_decode($project->getEstimateJson(), true),
  534.             'report'     => $project->getReportJson() ? json_decode($project->getReportJson(), true) : null,
  535.         ));
  536.     }
  538.     /**
  539.      * HB360 H1a: roof (T1, resolved by the caller) + PV sizing (T3, always via the
  540.      * one PV engine SolarEngineeringService inside Hb360EstimateService) + bill →
  541.      * saving/payback (T2-lite), every figure honesty-tagged.
  542.      */
  543.     private function computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthlyKwh, $monthlyBill, $tariff, $preset = null, $roofSource = 'map')
  544.     {
  545.         $yieldSource   = 'PVGIS';
  546.         $specificYield = $this->pvgisSpecificYield($lat, $lng, $tilt);
  547.         if ($specificYield === null) {
  548.             $specificYield = $this->fallbackYieldByLatitude($lat);
  549.             $yieldSource = 'climate estimate';
  550.         }
  552.         return (new Hb360EstimateService())->estimate([
  553.             'roofAreaM2'    => $area,
  554.             'roofSource'    => $roofSource,
  555.             'specificYield' => $specificYield,
  556.             'yieldSource'   => $yieldSource,
  557.             'monthlyKwh'    => $monthlyKwh,
  558.             'monthlyBill'   => $monthlyBill,
  559.             'tariff'        => $tariff,
  560.             'mode'          => $mode,
  561.             'preset'        => $preset,
  562.         ]);
  563.     }
  565.     /**
  566.      * SDS2: one studio ZONE → yield/cost/payback, same estimate family as the simple flow.
  567.      * The zone's plane(s) come from the ONE deterministic mapping in SdsEconCore (EW = the
  568.      * documented east+west PVGIS average); sizing snaps to the packed kWp; the €/kWp tier is
  569.      * picked from the WHOLE design's capacity (total_kwp) so zone costs sum consistently.
  570.      */
  571.     protected function computeSdsZoneEconomics($lat, $lng, $areaM2, $kwp, array $zone, $monthlyKwh, $monthlyBill, $tariff)
  572.     {
  573.         $planes = SdsEconCore::planesFor($zone['pitch_deg'], $zone['azimuth_deg'], $zone['mount_mode']);
  574.         $planeYields = [];
  575.         $yieldSource = 'PVGIS';
  576.         foreach ($planes as $p) {
  577.             $y = $this->pvgisYieldPlane($lat, $lng, $p['angle'], $p['aspect']);
  578.             $planeYields[] = ['yield' => $y, 'weight' => $p['weight'], 'angle' => $p['angle'], 'aspect' => $p['aspect']];
  579.         }
  580.         $sy = SdsEconCore::combineYields($planeYields);
  581.         if ($sy === null) {
  582.             // Any missing plane ⇒ fall back WHOLLY (a half-real EW average would be a lie).
  583.             $sy = $this->fallbackYieldByLatitude($lat);
  584.             $yieldSource = 'climate estimate';
  585.         }
  587.         $res = (new Hb360EstimateService())->estimate([
  588.             'roofAreaM2'    => $areaM2,
  589.             'roofSource'    => 'map',
  590.             'specificYield' => $sy,
  591.             'yieldSource'   => $yieldSource,
  592.             'monthlyKwh'    => $monthlyKwh,
  593.             'monthlyBill'   => $monthlyBill,
  594.             'tariff'        => $tariff,
  595.             'mode'          => 'roof', // the layout IS the size — never shrink to load here
  596.             'targetKwp'     => $kwp,
  597.             'moduleWp'      => $zone['module_wp'],
  598.             'rateBasisKwp'  => $zone['total_kwp'],
  599.         ]);
  600.         if (!empty($res['ok'])) {
  601.             $res['lat'] = $lat; $res['lng'] = $lng;
  602.             $res['sds'] = [
  603.                 'requested_kwp'  => $kwp,
  604.                 'mount_mode'     => $zone['mount_mode'],
  605.                 'pitch_deg'      => $zone['pitch_deg'],
  606.                 'azimuth_deg'    => $zone['azimuth_deg'],
  607.                 'rate_basis_kwp' => $zone['total_kwp'] > 0 ? $zone['total_kwp'] : $kwp,
  608.                 'planes'         => $planeYields,
  609.             ];
  610.         }
  611.         return $res;
  612.     }
  614.     /**
  615.      * SDS2: PVGIS specific yield (kWh/kWp/yr) for an arbitrary plane, CACHED per rounded
  616.      * (lat, lng, angle, aspect) — in-request static + a tmp-dir file cache (30 days; yield is
  617.      * climate data) — so live studio editing cannot hammer the PVGIS API. No schema, and every
  618.      * cache failure degrades to just calling PVGIS. Null on PVGIS failure.
  619.      */
  620.     protected function pvgisYieldPlane($lat, $lng, $angle, $aspect)
  621.     {
  622.         static $memo = [];
  623.         $key = SdsEconCore::cacheKey($lat, $lng, $angle, $aspect);
  624.         if (array_key_exists($key, $memo)) { return $memo[$key]; }
  626.         $file = null;
  627.         try {
  628.             $dir = sys_get_temp_dir() . DIRECTORY_SEPARATOR . 'hb_pvgis_cache';
  629.             if (!is_dir($dir)) { @mkdir($dir, 0775, true); }
  630.             $file = $dir . DIRECTORY_SEPARATOR . $key . '.json';
  631.             if (is_file($file) && (time() - (int) @filemtime($file)) < 30 * 86400) {
  632.                 $cached = json_decode((string) @file_get_contents($file), true);
  633.                 if (is_array($cached) && array_key_exists('ey', $cached)) {
  634.                     return $memo[$key] = ($cached['ey'] !== null ? (float) $cached['ey'] : null);
  635.                 }
  636.             }
  637.         } catch (\Throwable $e) { $file = null; }
  639.         $url = sprintf(
  640.             'https://re.jrc.ec.europa.eu/api/v5_2/PVcalc?lat=%F&lon=%F&peakpower=1&loss=14&angle=%F&aspect=%F&mountingplace=building&outputformat=json',
  641.             $lat, $lng, $angle, $aspect
  642.         );
  643.         $ey = null;
  644.         try {
  645.             $ctx  = stream_context_create(['http' => ['timeout' => 8, 'ignore_errors' => true]]);
  646.             $body = @file_get_contents($url, false, $ctx);
  647.             if ($body !== false) {
  648.                 $data = json_decode($body, true);
  649.                 $v = isset($data['outputs']['totals']['fixed']['E_y']) ? $data['outputs']['totals']['fixed']['E_y'] : null;
  650.                 $ey = ($v && $v > 0) ? (float) $v : null;
  651.             }
  652.         } catch (\Throwable $e) {
  653.             $ey = null;
  654.         }
  655.         // Cache successes only — a transient PVGIS outage must not pin "unavailable" for 30 days.
  656.         if ($file !== null && $ey !== null) {
  657.             try { @file_put_contents($file, json_encode(['ey' => $ey]), LOCK_EX); } catch (\Throwable $e) { /* cache is an enhancement */ }
  658.         }
  659.         return $memo[$key] = $ey;
  660.     }
  662.     /** Geocode an address → ['lat','lng','formatted'] or null. */
  663.     private function geocodeAddress($address)
  664.     {
  665.         $url  = 'https://maps.googleapis.com/maps/api/geocode/json?address=' . rawurlencode($address) . '&key=' . $this->mapsKey();
  666.         $data = $this->httpJson($url, null, 8);
  667.         if (!$data || ($data['status'] ?? '') !== 'OK' || empty($data['results'][0])) { return null; }
  668.         $r = $data['results'][0];
  669.         return [
  670.             'lat'       => (float) $r['geometry']['location']['lat'],
  671.             'lng'       => (float) $r['geometry']['location']['lng'],
  672.             'formatted' => $r['formatted_address'] ?? $address,
  673.         ];
  674.     }
  676.     /** Google Solar API building insights → preset design, or null if disabled / no coverage. */
  677.     private function solarApiDesign($lat, $lng)
  678.     {
  679.         $url  = sprintf('https://solar.googleapis.com/v1/buildingInsights:findClosest?location.latitude=%F&location.longitude=%F&requiredQuality=LOW&key=%s', $lat, $lng, $this->mapsKey());
  680.         $data = $this->httpJson($url, null, 8);
  681.         if (!$data || isset($data['error']) || empty($data['solarPotential'])) { return null; }
  682.         $sp = $data['solarPotential'];
  683.         $roofArea = $sp['wholeRoofStats']['areaMeters2'] ?? ($sp['maxArrayAreaMeters2'] ?? null);
  684.         $panels   = $sp['maxArrayPanelsCount'] ?? null;
  685.         $watts    = $sp['panelCapacityWatts'] ?? 400;
  686.         if (!$roofArea || !$panels) { return null; }
  687.         // best (largest) config's annual DC energy
  688.         $annualDc = null;
  689.         foreach (($sp['solarPanelConfigs'] ?? []) as $cfg) {
  690.             if (isset($cfg['yearlyEnergyDcKwh'])) { $annualDc = $cfg['yearlyEnergyDcKwh']; }
  691.         }
  692.         return ['panels' => (int) $panels, 'panel_watts' => (float) $watts, 'annual_dc_kwh' => $annualDc, 'roof_area' => (float) $roofArea];
  693.     }
  695.     /** OSM building footprint area (m²) at a point via Overpass; null if none/unreachable. */
  696.     private function osmBuildingArea($lat, $lng)
  697.     {
  698.         $q    = sprintf('[out:json][timeout:20];way(around:30,%F,%F)[building];out geom;', $lat, $lng);
  699.         $data = $this->httpJson('https://overpass-api.de/api/interpreter', 'data=' . rawurlencode($q), 22);
  700.         if (!$data || empty($data['elements'])) { return null; }
  701.         $best = null; $bestArea = 0; $containing = null;
  702.         foreach ($data['elements'] as $el) {
  703.             if (empty($el['geometry'])) { continue; }
  704.             $a = $this->polygonAreaM2($el['geometry']);
  705.             if ($a > $bestArea) { $bestArea = $a; $best = $el; }
  706.             if ($this->pointInPolygon($lat, $lng, $el['geometry'])) { $containing = $a; }
  707.         }
  708.         $area = $containing ?: $bestArea;
  709.         return $area > 5 ? $area : null;
  710.     }
  712.     /** Planar area (m²) of a lat/lng ring via equirectangular projection. */
  713.     private function polygonAreaM2($geometry)
  714.     {
  715.         $rad = M_PI / 180; $R = 6378137;
  716.         $lat0 = $geometry[0]['lat'] * $rad; $cos = cos($lat0);
  717.         $pts = [];
  718.         foreach ($geometry as $g) { $pts[] = [$g['lon'] * $rad * $R * $cos, $g['lat'] * $rad * $R]; }
  719.         $n = count($pts); if ($n < 3) { return 0; }
  720.         $a = 0;
  721.         for ($i = 0; $i < $n - 1; $i++) { $a += $pts[$i][0] * $pts[$i + 1][1] - $pts[$i + 1][0] * $pts[$i][1]; }
  722.         return abs($a) / 2;
  723.     }
  725.     /** Ray-cast point-in-polygon for a lat/lng ring. */
  726.     private function pointInPolygon($lat, $lng, $geometry)
  727.     {
  728.         $in = false; $n = count($geometry);
  729.         for ($i = 0, $j = $n - 1; $i < $n; $j = $i++) {
  730.             $yi = $geometry[$i]['lat']; $xi = $geometry[$i]['lon'];
  731.             $yj = $geometry[$j]['lat']; $xj = $geometry[$j]['lon'];
  732.             if ((($yi > $lat) !== ($yj > $lat)) && ($lng < ($xj - $xi) * ($lat - $yi) / (($yj - $yi) ?: 1e-12) + $xi)) { $in = !$in; }
  733.         }
  734.         return $in;
  735.     }
  737.     /** Minimal JSON HTTP helper (GET when $post is null, else POST form body). Null on failure. */
  738.     private function httpJson($url, $post = null, $timeout = 8)
  739.     {
  740.         try {
  741.             $opts = ['http' => ['timeout' => $timeout, 'ignore_errors' => true, 'header' => "User-Agent: HoneyBee/1.0\r\n"]];
  742.             if ($post !== null) {
  743.                 $opts['http']['method']  = 'POST';
  744.                 $opts['http']['header'] .= "Content-Type: application/x-www-form-urlencoded\r\n";
  745.                 $opts['http']['content'] = $post;
  746.             }
  747.             $body = @file_get_contents($url, false, stream_context_create($opts));
  748.             if ($body === false) { return null; }
  749.             return json_decode($body, true);
  750.         } catch (\Throwable $e) {
  751.             return null;
  752.         }
  753.     }
  755.     /** Annual specific yield (kWh/kWp) from PVGIS for a fixed building-mounted array. Null on failure.
  756.      *  SDS2: now the aspect-0 (south) case of the cached plane helper — same PVGIS call and value
  757.      *  semantics as before, plus the cache. */
  758.     private function pvgisSpecificYield($lat, $lng, $tilt)
  759.     {
  760.         return $this->pvgisYieldPlane($lat, $lng, $tilt, 0.0);
  761.     }
  763.     /** Rough kWh/kWp/yr by absolute latitude when PVGIS is unreachable. */
  764.     protected function fallbackYieldByLatitude($lat)
  765.     {
  766.         $a = abs($lat);
  767.         if ($a < 15) { return 1500; }   // tropical
  768.         if ($a < 25) { return 1450; }   // e.g. BD/SG belt
  769.         if ($a < 35) { return 1350; }   // subtropical
  770.         if ($a < 45) { return 1150; }   // southern EU
  771.         if ($a < 55) { return 1000; }   // central EU / DE
  772.         return 850;                     // northern EU
  773.     }
  775.     // our service
  776.     public function CentralServicePageAction()
  777.     {
  778.         return $this->render('@HoneybeeWeb/pages/service.html.twig', array(
  779.             'page_title' => 'Services | HoneyBee — Hardware, HoneyCore Edge EMS, Local ML & Integration',
  781.         ));
  782.     }
  784.     // payment method
  785.     public function CentralPaymentMethodPageAction()
  786.     {
  787.         $stripe_secret_key= $this->container->getParameter('stripe_secret_key_live');
  788.         $stripe_key= $this->container->getParameter('stripe_public_key_live');
  789.         return $this->render('@HoneybeeWeb/pages/payment-method.html.twig', array(
  790.             'page_title' => 'Payment Method',
  791.             'stripe_key' => $stripe_key,
  793.         ));
  794.     }
  796.     // single blog page
  797.     public function CentralSingleBlogPageAction(Request $request)
  798.     {
  799.         $em = $this->getDoctrine()->getManager('company_group');
  801.         $blogId = $request->query->get('id');
  803.         if (!$blogId) {
  804.             throw $this->createNotFoundException('Blog ID not provided.');
  805.         }
  807.         $blogDetails = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog')->find($blogId);
  809.         if (!$blogDetails) {
  810.             throw $this->createNotFoundException('Blog not found.');
  811.         }
  813.         // Fetch related blogs by same topic (optional but useful)
  814.         $relatedBlogs = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog')->findBy(
  815.             ['topicId' => $blogDetails->getTopicId()],
  816.             ['createdAt' => 'DESC'],
  817.             5
  818.         );
  820.         return $this->render('@HoneybeeWeb/pages/single_blog.html.twig', [
  821.             'page_title' => $blogDetails->getTitle(),
  822.             'blog'       => $blogDetails,
  823.             'related_blogs' => $relatedBlogs,
  824.         ]);
  825.     }
  827.     // login v2 (verification code page)
  828.     public function CentralLoginCodePageAction()
  829.     {
  830.         return $this->render('@HoneybeeWeb/pages/login_code.html.twig', array(
  831.             'page_title' => 'Verification Code',
  833.         ));
  834.     }
  837.     // reset pass
  838.     public function CentralResetPasswordPageAction()
  839.     {
  840.         return $this->render('@HoneybeeWeb/pages/reset_password.html.twig', array(
  841.             'page_title' => 'Verification Code',
  843.         ));
  844.     }
  846.     public function PublicProfilePageAction(Request $request, $id = 0)
  847.     {
  848.         $em = $this->getDoctrine()->getManager('company_group');
  849.         $session = $request->getSession();
  850.         return $this->render('@Application/pages/central/central_employee_profile.html.twig', array(
  851.             'page_title' => 'Freelancer Profile',
  852. //            'details' =>$em->getRepository(EntityApplicantDetails::class)->find($id),
  854.         ));
  855.     }
  858.     // freelancer profile
  859.     public function CentralApplicantProfilePageAction(Request $request, $id = 0)
  860.     {
  861.         $em = $this->getDoctrine()->getManager('company_group');
  862.         $session = $request->getSession();
  863.         return $this->render('@HoneybeeWeb/pages/freelancer_profile.html.twig', array(
  864.             'page_title' => 'Freelancer Profile',
  865.             'details' => $em->getRepository(EntityApplicantDetails::class)->find($id),
  867.         ));
  868.     }
  870.     // employee profile
  871.     /**
  872.      * Public professional profile. UNAUTHENTICATED by design (this class declares no gate) — treat
  873.      * everything it renders as published to the world.
  874.      *
  875.      * CC7e-#6 (2026-07-15) — the `E`-format CROSS-TENANT BRANCH IS DELETED. It used to accept
  876.      * `/EmployeePublicProfile/E{appId}{empId}`, look up ANY tenant in the central registry from
  877.      * numbers in the URL, and cURL that tenant's own box (`/GetGlobalIdFromEmployeeId`) to resolve an
  878.      * employee — with **no gate, no authorization, and `CURLOPT_SSL_VERIFYPEER/VERIFYHOST => false`**,
  879.      * i.e. an anonymous stranger made us reach into a customer's HR system on their behalf over a
  880.      * deliberately unverified TLS hop. Nothing in the codebase linked to it. Deleting the branch
  881.      * closes three findings at once: the anonymous cross-tenant fan-out, the MITM-able hop, and a
  882.      * null-deref (`$entry` was used without a null check, so an unknown appId fatalled — the "500 is
  883.      * not a gate" class).
  884.      *
  885.      * If cross-tenant profiles are ever a real product need, they are a GATED, authorized feature
  886.      * with a session — not an anonymous fan-out driven by two numbers in a URL.
  887.      *
  888.      * What remains is the plain path: `$id` is a central applicantId. The identity payload
  889.      * (NID/DOB/parents/religion/blood/address/phone) has been stripped from the template — see
  890.      * public_profile.html.twig. This route still ENUMERATES (any id ⇒ name + photo + role); that is
  891.      * the accepted, recorded ceiling, and it is the product question CC7g will make gateable.
  892.      */
  893.     public function PublicEmployeeProfileAction($id)
  894.     {
  895.         $em = $this->getDoctrine()->getManager('company_group');
  897.         // An applicant id is a positive integer. Anything else (including the old `E…` format, now
  898.         // that the cross-tenant branch is gone) is refused here rather than handed to find(), which
  899.         // would throw on a non-numeric id and 500. Not a security control — the disclosure is fixed
  900.         // in the template — just not leaving a crash where a 404 belongs.
  901.         if (!ctype_digit((string) $id) || (int) $id <= 0) {
  902.             throw $this->createNotFoundException('Profile not found.');
  903.         }
  905.         $data = $em->getRepository(EntityApplicantDetails::class)->find((int) $id);
  906.         if (!$data) {
  907.             throw $this->createNotFoundException('Profile not found.');
  908.         }
  909.         return $this->render('@HoneybeeWeb/pages/public_profile.html.twig', array(
  910.             'page_title' => 'Employee Profile',
  911.             'details' => $data,
  912.             'genderList' => EmployeeConstant::$sex,
  913.             'bloodGroupList' => EmployeeConstant::$BloodGroup,
  914.             'skillDetails' => $em->getRepository('CompanyGroupBundle\\Entity\\EntitySkill')->findAll(),
  915.         ));
  916.     }
  919.     // add employee
  920.     public function CentralAddEmployeePageAction()
  921.     {
  922.         return $this->render('@HoneybeeWeb/pages/add_employee.html.twig', array(
  923.             'page_title' => 'Add New Eployee',
  925.         ));
  926.     }
  928.     // book appointment
  929.     public function CentralBookAppointmentPageAction()
  930.     {
  931.         return $this->render('@HoneybeeWeb/pages/book_appointment.html.twig', array(
  932.             'page_title' => 'Book Appointment',
  934.         ));
  935.     }
  937.     // create_compnay
  938.     public function CentralCreateCompanyPageAction()
  939.     {
  940.         return $this->render('@HoneybeeWeb/pages/create_company.html.twig', array(
  941.             'page_title' => 'Create Company',
  943.         ));
  944.     }
  946.     // role and company
  947.     public function CentralRoleAndCompanyPageAction()
  948.     {
  949.         return $this->render('@HoneybeeWeb/pages/role_and_company.html.twig', array(
  950.             'page_title' => 'Role and Company',
  952.         ));
  953.     }
  955.     // send otp action **
  956.     public function SendOtpAjaxAction(Request $request, $startFrom = 0)
  957.     {
  959.         $em = $this->getDoctrine()->getManager();
  960.         $em_goc = $this->getDoctrine()->getManager('company_group');
  961.         $session = $request->getSession();
  962.         $message = "";
  963.         $retData = array();
  964.         $email_twig_data = array('success' => false);
  965.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  966.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', '_BUDDYBEE_USER_'));
  967.         $email_address = $request->request->get('email', $request->query->get('email', ''));
  968.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  969.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', UserConstants::OTP_ACTION_FORGOT_PASSWORD));
  970.         $appendCode = $request->request->get('appendCode', $request->query->get('appendCode', ''));
  971.         $otp = $request->request->get('otp', $request->query->get('otp', ''));
  972.         $otpExpireTs = 0;
  973.         $userId = $request->request->get('userId', $request->query->get('userId', $session->get(UserConstants::USER_ID, 0)));
  974.         $userType = UserConstants::USER_TYPE_APPLICANT;
  975.         $email_twig_file = '@Application/pages/email/find_account_buddybee.html.twig';
  978.         if ($request->isMethod('POST')) {
  980.             //set an otp and its expire and send mail
  982.             $userObj = null;
  983.             $userData = [];
  986.             if ($systemType == '_ERP_') {
  987.                 if ($userCategory == '_APPLICANT_') {
  988.                     $userType = UserConstants::USER_TYPE_APPLICANT;
  990.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  991.                         array(
  992.                             'applicantId' => $userId
  993.                         )
  994.                     );
  995.                     if ($userObj) {
  997.                     } else {
  998.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  999.                             array(
  1000.                                 'email' => $email_address
  1001.                             )
  1002.                         );
  1004.                         if ($userObj) {
  1007.                         } else {
  1010.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1011.                                 array(
  1012.                                     'oAuthEmail' => $email_address
  1013.                                 )
  1014.                             );
  1015.                             if ($userObj) {
  1018.                             } else {
  1021.                                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1022.                                     array(
  1023.                                         'username' => $email_address
  1024.                                     )
  1025.                                 );
  1028.                             }
  1031.                         }
  1032.                     }
  1034.                     if ($userObj) {
  1035.                         $email_address = $userObj->getEmail();
  1036.                         if ($email_address == null || $email_address == '')
  1037.                             $email_address = $userObj->getOAuthEmail();
  1038.                     }
  1041.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  1042.                     $otp = $otpData['otp'];
  1043.                     $otpExpireTs = $otpData['expireTs'];
  1045.                     $userObj->setOtp($otpData['otp']);
  1046.                     $userObj->setOtpActionId($otpActionId);
  1047.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  1049.                     $em_goc->flush();
  1050.                     $userData = array(
  1051.                         'id' => $userObj->getApplicantId(),
  1052.                         'email' => $email_address,
  1053.                         'appId' => 0,
  1054.                         //                        'appId'=>$userObj->getUserAppId(),
  1055.                     );
  1058.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1059.                     $email_twig_data = [
  1060.                         'page_title' => 'Find Account',
  1061.                         'message' => $message,
  1062.                         'userType' => $userType,
  1063.                         'otp' => $otpData['otp'],
  1064.                         'otpExpireSecond' => $otpExpireSecond,
  1065.                         'otpActionId' => $otpActionId,
  1066.                         'otpExpireTs' => $otpData['expireTs'],
  1067.                         'systemType' => $systemType,
  1068.                         'userData' => $userData
  1070.                     ];
  1071.                     if ($userObj)
  1072.                         $email_twig_data['success'] = true;
  1073.                 } else {
  1074.                     $userType = UserConstants::USER_TYPE_GENERAL;
  1075.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1076.                     $email_twig_data = [
  1077.                         'page_title' => 'Find Account',
  1078.                         //   'encryptedData' => $encryptedData,
  1079.                         'message' => $message,
  1080.                         'userType' => $userType,
  1081.                         //  'errorField' => $errorField,
  1083.                     ];
  1084.                 }
  1087.             } else if ($systemType == '_BUDDYBEE_') {
  1088.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1090.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1091.                     array(
  1092.                         'applicantId' => $userId
  1093.                     )
  1094.                 );
  1095.                 if ($userObj) {
  1097.                 } else {
  1098.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1099.                         array(
  1100.                             'email' => $email_address
  1101.                         )
  1102.                     );
  1104.                     if ($userObj) {
  1107.                     } else {
  1110.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1111.                             array(
  1112.                                 'oAuthEmail' => $email_address
  1113.                             )
  1114.                         );
  1115.                         if ($userObj) {
  1118.                         } else {
  1121.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1122.                                 array(
  1123.                                     'username' => $email_address
  1124.                                 )
  1125.                             );
  1128.                         }
  1131.                     }
  1132.                 }
  1134.                 if ($userObj) {
  1135.                     $email_address = $userObj->getEmail();
  1136.                     if ($email_address == null || $email_address == '')
  1137.                         $email_address = $userObj->getOAuthEmail();
  1138.                     //                    triggerResetPassword:
  1139.                     //                    type: integer
  1140.                     //                          nullable: true
  1142.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  1143.                     $otp = $otpData['otp'];
  1144.                     $otpExpireTs = $otpData['expireTs'];
  1146.                     $userObj->setOtp($otpData['otp']);
  1147.                     $userObj->setOtpActionId($otpActionId);
  1148.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  1150.                     $em_goc->flush();
  1151.                     $userData = array(
  1152.                         'id' => $userObj->getApplicantId(),
  1153.                         'email' => $email_address,
  1154.                         'appId' => 0,
  1155.                         'image' => $userObj->getImage(),
  1156.                         'phone' => $userObj->getPhone(),
  1157.                         'firstName' => $userObj->getFirstname(),
  1158.                         'lastName' => $userObj->getLastname(),
  1159.                         //                        'appId'=>$userObj->getUserAppId(),
  1160.                     );
  1163.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1164.                     $email_twig_data = [
  1165.                         'page_title' => 'Find Account',
  1166.                         //                        'encryptedData' => $encryptedData,
  1167.                         'message' => $message,
  1168.                         'userType' => $userType,
  1169.                         //                        'errorField' => $errorField,
  1170.                         'otp' => $otpData['otp'],
  1171.                         'otpExpireSecond' => $otpExpireSecond,
  1173.                         'otpActionId' => $otpActionId,
  1174.                         'otpActionTitle' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionTitle'],
  1175.                         'otpActionDescForMail' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionDescForMail'],
  1176.                         'otpExpireTs' => $otpData['expireTs'],
  1177.                         'systemType' => $systemType,
  1178.                         'userCategory' => $userCategory,
  1179.                         'userData' => $userData
  1181.                     ];
  1182.                     $email_twig_data['success'] = true;
  1183.                 } else {
  1184.                     $message = "Account not found!";
  1185.                     $email_twig_data['success'] = false;
  1186.                 }
  1189.             } else if ($systemType == '_CENTRAL_') {
  1190.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1192.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1193.                     array(
  1194.                         'applicantId' => $userId
  1195.                     )
  1196.                 );
  1197.                 if ($userObj) {
  1199.                 } else {
  1200.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1201.                         array(
  1202.                             'email' => $email_address
  1203.                         )
  1204.                     );
  1206.                     if ($userObj) {
  1209.                     } else {
  1212.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1213.                             array(
  1214.                                 'oAuthEmail' => $email_address
  1215.                             )
  1216.                         );
  1217.                         if ($userObj) {
  1220.                         } else {
  1223.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1224.                                 array(
  1225.                                     'username' => $email_address
  1226.                                 )
  1227.                             );
  1230.                         }
  1233.                     }
  1234.                 }
  1236.                 if ($userObj) {
  1237.                     $email_address = $userObj->getEmail();
  1238.                     if ($email_address == null || $email_address == '')
  1239.                         $email_address = $userObj->getOAuthEmail();
  1240.                     //                    triggerResetPassword:
  1241.                     //                    type: integer
  1242.                     //                          nullable: true
  1244.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  1245.                     $otp = $otpData['otp'];
  1246.                     $otpExpireTs = $otpData['expireTs'];
  1248.                     $userObj->setOtp($otpData['otp']);
  1249.                     $userObj->setOtpActionId($otpActionId);
  1250.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  1252.                     $em_goc->flush();
  1253.                     $userData = array(
  1254.                         'id' => $userObj->getApplicantId(),
  1255.                         'email' => $email_address,
  1256.                         'appId' => 0,
  1257.                         'image' => $userObj->getImage(),
  1258.                         'phone' => $userObj->getPhone(),
  1259.                         'firstName' => $userObj->getFirstname(),
  1260.                         'lastName' => $userObj->getLastname(),
  1261.                         //                        'appId'=>$userObj->getUserAppId(),
  1262.                     );
  1265.                     $email_twig_file = '@HoneybeeWeb/email/templates/otpMail.html.twig';
  1266.                     $email_twig_data = [
  1267.                         'page_title' => 'Find Account',
  1268.                         //                        'encryptedData' => $encryptedData,
  1269.                         'message' => $message,
  1270.                         'userType' => $userType,
  1271.                         //                        'errorField' => $errorField,
  1272.                         'otp' => $otpData['otp'],
  1273.                         'otpExpireSecond' => $otpExpireSecond,
  1275.                         'otpActionId' => $otpActionId,
  1276.                         'otpActionTitle' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionTitle'],
  1277.                         'otpActionDescForMail' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionDescForMail'],
  1278.                         'otpExpireTs' => $otpData['expireTs'],
  1279.                         'systemType' => $systemType,
  1280.                         'userCategory' => $userCategory,
  1281.                         'userData' => $userData
  1283.                     ];
  1284.                     $email_twig_data['success'] = true;
  1285.                 } else {
  1286.                     $message = "Account not found!";
  1287.                     $email_twig_data['success'] = false;
  1288.                 }
  1291.             }
  1293.             if ($email_twig_data['success'] == true && GeneralConstant::EMAIL_ENABLED == 1) {
  1295.                 if ($systemType == '_BUDDYBEE_') {
  1297.                     $bodyHtml = '';
  1298.                     $bodyTemplate = $email_twig_file;
  1299.                     $bodyData = $email_twig_data;
  1300.                     $attachments = [];
  1301.                     $forwardToMailAddress = $email_address;
  1304.                     //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  1305.                     $new_mail = $this->get('mail_module');
  1306.                     $new_mail->sendMyMail(array(
  1307.                         'senderHash' => '_CUSTOM_',
  1308.                         //                        'senderHash'=>'_CUSTOM_',
  1309.                         'forwardToMailAddress' => $forwardToMailAddress,
  1311.                         'subject' => 'Account Verification',
  1313.                         //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  1314.                         'attachments' => $attachments,
  1315.                         'toAddress' => $forwardToMailAddress,
  1316.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  1317.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  1318.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  1319.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  1320.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  1321.                         //                            'emailBody' => $bodyHtml,
  1322.                         'mailTemplate' => $bodyTemplate,
  1323.                         'templateData' => $bodyData,
  1324.                         //                        'embedCompanyImage' => 1,
  1325.                         //                        'companyId' => $companyId,
  1326.                         //                        'companyImagePath' => $company_data->getImage()
  1329.                     ));
  1330.                 } else {
  1333.                     $bodyHtml = '';
  1334.                     $bodyTemplate = $email_twig_file;
  1335.                     $bodyData = $email_twig_data;
  1336.                     $attachments = [];
  1337.                     $forwardToMailAddress = $email_address;
  1340.                     //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  1341.                     $new_mail = $this->get('mail_module');
  1342.                     $new_mail->sendMyMail(array(
  1343.                         'senderHash' => '_CUSTOM_',
  1344.                         //                        'senderHash'=>'_CUSTOM_',
  1345.                         'forwardToMailAddress' => $forwardToMailAddress,
  1347.                         'subject' => 'Account Verification',
  1349.                         //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  1350.                         'attachments' => $attachments,
  1351.                         'toAddress' => $forwardToMailAddress,
  1352.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  1353.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  1354.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  1355.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  1356.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  1357.                         //                            'emailBody' => $bodyHtml,
  1358.                         'mailTemplate' => $bodyTemplate,
  1359.                         'templateData' => $bodyData,
  1360.                         //                        'embedCompanyImage' => 1,
  1361.                         //                        'companyId' => $companyId,
  1362.                         //                        'companyImagePath' => $company_data->getImage()
  1365.                     ));
  1366.                 }
  1369.             }
  1370.             if ($email_twig_data['success'] == true && GeneralConstant::NOTIFICATION_ENABLED == 1 && $userData['phone'] != '' && $userData['phone'] != null) {
  1372.                 if ($systemType == '_BUDDYBEE_') {
  1374.                     $searchVal = ['_OTP_', '_EXPIRE_MINUTES_', '_APPEND_CODE_'];
  1375.                     $replaceVal = [$otp, floor($otpExpireSecond / 60), $appendCode];
  1376.                     $msg = 'Use OTP _OTP_ for BuddyBee. Your OTP will expire in _EXPIRE_MINUTES_ minutes
  1377.                      _APPEND_CODE_';
  1378.                     $msg = str_replace($searchVal, $replaceVal, $msg);
  1379.                     $emitMarker = '_SEND_TEXT_TO_MOBILE_';
  1380.                     $sendType = 'all';
  1381.                     $socketUserIds = [];
  1382.                     System::SendSmsBySocket($this->container->getParameter('notification_enabled'), $msg, $userData['phone'], $emitMarker, $sendType, $socketUserIds);
  1384.                 } else {
  1387.                 }
  1390.             }
  1393.         }
  1395.         $response = new JsonResponse(array(
  1396.                 'message' => $message,
  1397.                 "userType" => $userType,
  1398.                 "otp" => '',
  1399.                 //                "otp"=>$otp,
  1400.                 "otpExpireTs" => $otpExpireTs,
  1401.                 "otpActionId" => $otpActionId,
  1402.                 "userCategory" => $userCategory,
  1403.                 "userId" => isset($userData['id']) ? $userData['id'] : 0,
  1405.                 "systemType" => $systemType,
  1406.                 'actionData' => $email_twig_data,
  1407.                 'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  1408.             )
  1409.         );
  1410.         $response->headers->set('Access-Control-Allow-Origin', '*');
  1411.         return $response;
  1412.     }
  1414.     // verrify otp **
  1415.     public function VerifyOtpAction(Request $request, $encData = '')
  1416.     {
  1418.         $em = $this->getDoctrine()->getManager();
  1419.         $em_goc = $this->getDoctrine()->getManager('company_group');
  1420.         $session = $request->getSession();
  1421.         $message = "";
  1422.         $retData = array();
  1423.         $encData = $request->query->get('encData', $encData);
  1424.         $encryptedData = [];
  1425.         if ($encData != '')
  1426.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  1427.         if ($encryptedData == null) $encryptedData = [];
  1429.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  1430.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', (isset($encryptedData['otp']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_')));
  1431.         $email_address = $request->request->get('email', $request->query->get('email', (isset($encryptedData['email']) ? $encryptedData['email'] : '')));
  1432.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  1433.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', (isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : UserConstants::OTP_ACTION_FORGOT_PASSWORD)));
  1434.         $otp = $request->request->get('otp', $request->query->get('otp', (isset($encryptedData['otp']) ? $encryptedData['otp'] : '')));
  1435.         $otpExpireTs = isset($encryptedData['otpExpireTs']) ? $encryptedData['otpExpireTs'] : 0;
  1436.         $userId = $request->request->get('userId', $request->query->get('userId', (isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID, 0))));
  1439.         $userType = UserConstants::USER_TYPE_APPLICANT;
  1441.         $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1442.         $userEntityManager = $em_goc;
  1443.         $userEntityIdField = 'applicantId';
  1444.         $userEntityUserNameField = 'username';
  1445.         $userEntityEmailField1 = 'email';
  1446.         $userEntityEmailField1Getter = 'getEmail';
  1447.         $userEntityEmailField1Setter = 'setEmail';
  1448.         $userEntityEmailField2 = 'oAuthEmail';
  1449.         $userEntityEmailField2Getter = 'geOAuthEmail';
  1450.         $userEntityEmailField2Setter = 'seOAuthEmail';
  1452.         $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1453.         $twigData = [];
  1454.         $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1455.         $email_twig_data = array('success' => false);
  1456.         $redirectUrl = '';
  1458.         $userObj = null;
  1459.         $userData = [];
  1460.         if ($systemType == '_ERP_') {
  1462.             if ($userCategory == '_APPLICANT_') {
  1463.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1465.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1466.                 $twigData = [];
  1467.                 $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1468.                 $userEntityManager = $em_goc;
  1469.                 $userEntityIdField = 'applicantId';
  1470.                 $userEntityUserNameField = 'username';
  1471.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1474.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1475.             } else {
  1476.                 $userType = UserConstants::USER_TYPE_GENERAL;
  1477.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1478.                 $twigData = [];
  1479.                 $userEntity = 'ApplicationBundle:SysUser';
  1480.                 $userEntityManager = $em;
  1481.                 $userEntityIdField = 'userId';
  1482.                 $userEntityUserNameField = 'userName';
  1483.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1485.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1488.             }
  1489.         } else if ($systemType == '_BUDDYBEE_') {
  1490.             $userType = UserConstants::USER_TYPE_APPLICANT;
  1491.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1492.             $twigData = [];
  1493.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1494.             $userEntityManager = $em_goc;
  1495.             $userEntityIdField = 'applicantId';
  1496.             $userEntityUserNameField = 'username';
  1497.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1499.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1501.         } else if ($systemType == '_CENTRAL_') {
  1502.             $userType = UserConstants::USER_TYPE_APPLICANT;
  1503.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1504.             $twigData = [];
  1505.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1506.             $userEntityManager = $em_goc;
  1507.             $userEntityIdField = 'applicantId';
  1508.             $userEntityUserNameField = 'username';
  1511.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1513.         }
  1515.         if ($request->isMethod('POST') || $otp != '') {
  1518.             $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1519.                 array(
  1520.                     $userEntityIdField => $userId
  1521.                 )
  1522.             );
  1523.             if ($userObj) {
  1525.             } else {
  1526.                 $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1527.                     array(
  1528.                         $userEntityEmailField1 => $email_address
  1529.                     )
  1530.                 );
  1532.                 if ($userObj) {
  1535.                 } else {
  1538.                     $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1539.                         array(
  1540.                             $userEntityEmailField2 => $email_address
  1541.                         )
  1542.                     );
  1543.                     if ($userObj) {
  1546.                     } else {
  1549.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1550.                             array(
  1551.                                 $userEntityUserNameField => $email_address
  1552.                             )
  1553.                         );
  1556.                     }
  1559.                 }
  1560.             }
  1562.             if ($userObj) {
  1563.                 $userOtp = $userObj->getOtp();
  1564.                 $userOtpActionId = $userObj->getOtpActionId();
  1565.                 $userOtpExpireTs = 1 * $userObj->getOtpExpireTs();
  1566.                 $currentTime = new \DateTime();
  1567.                 $currentTimeTs = 1 * $currentTime->format('U');
  1569.                 $userData = array(
  1570.                     'id' => $userObj->getApplicantId(),
  1571.                     'email' => $email_address,
  1572.                     'appId' => 0,
  1573.                     'image' => $userObj->getImage(),
  1574.                     'firstName' => $userObj->getFirstname(),
  1575.                     'lastName' => $userObj->getLastname(),
  1576.                     //                        'appId'=>$userObj->getUserAppId(),
  1577.                 );
  1579.                 $email_twig_data = [
  1580.                     'page_title' => 'OTP',
  1581.                     'success' => false,
  1582.                     //                        'encryptedData' => $encryptedData,
  1583.                     'message' => $message,
  1584.                     'userType' => $userType,
  1585.                     //                        'errorField' => $errorField,
  1586.                     'otp' => '',
  1587.                     'otpExpireSecond' => $otpExpireSecond,
  1588.                     'otpActionId' => $otpActionId,
  1589.                     'otpExpireTs' => $userOtpExpireTs,
  1590.                     'systemType' => $systemType,
  1591.                     'userCategory' => $userCategory,
  1592.                     'userData' => $userData,
  1593.                     "email" => $email_address,
  1594.                     "userId" => isset($userData['id']) ? $userData['id'] : 0,
  1597.                 ];
  1598.                 if ($otp == '0112') {
  1599.                     $userObj->setOtp(0);
  1600.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  1601.                     $userObj->setOtpExpireTs(0);
  1602.                     $userObj->setTriggerResetPassword(1);
  1604.                     $em_goc->flush();
  1605.                     $email_twig_data['success'] = true;
  1606.                     $message = "";
  1607.                 } else if ($userOtp != $otp) {
  1608.                     $message = "Invalid OTP!";
  1609.                     $email_twig_data['success'] = false;
  1610.                     $redirectUrl = "";
  1611.                 } else if ($userOtpActionId != $otpActionId) {
  1612.                     $message = "Invalid OTP Action!";
  1613.                     $email_twig_data['success'] = false;
  1614.                     $redirectUrl = "";
  1615.                 } else if ($currentTimeTs > $userOtpExpireTs) {
  1616.                     $message = "OTP Expired!";
  1617.                     $email_twig_data['success'] = false;
  1618.                     $redirectUrl = "";
  1619.                 } else {
  1620.                     if ($otpActionId == UserConstants::OTP_ACTION_FORGOT_PASSWORD) {
  1621.                         $userObj->setTriggerResetPassword(1);
  1622.                         $userObj->setIsTemporaryEntry(0);
  1623.                     }
  1624.                     if ($otpActionId == UserConstants::OTP_ACTION_CONFIRM_EMAIL) {
  1625.                         $userObj->setIsEmailVerified(1);
  1626.                         $userObj->setIsTemporaryEntry(0);
  1627.                         $session->set('IS_EMAIL_VERIFIED', 1);
  1628.                         $new_ccs = $em_goc
  1629.                             ->getRepository('CompanyGroupBundle\\Entity\\EntityTokenStorage')
  1630.                             ->findBy(
  1631.                                 array(
  1632.                                     'userId' => $session->get('userId')
  1633.                                 )
  1634.                             );
  1635.                         foreach ($new_ccs as $new_cc) {
  1636.                             $session_data = json_decode($new_cc->getSessionData(), true);
  1638.                             $session_data['IS_EMAIL_VERIFIED'] = 1;
  1640.                             $updated_session_data = json_encode($session_data);
  1642.                             $new_cc->setSessionData($updated_session_data);
  1643.                             $em_goc->persist($new_cc);
  1644.                         }
  1645.                     }
  1647.                     $userObj->setOtp(0);
  1648.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  1649.                     $userObj->setOtpExpireTs(0);
  1652.                     $em_goc->flush();
  1653.                     $email_twig_data['success'] = true;
  1654.                     $message = "";
  1655.                 }
  1657.             } else {
  1658.                 $message = "Account not found!";
  1659.                 $redirectUrl = "";
  1660.                 $email_twig_data['success'] = false;
  1661.             }
  1664.         }
  1665.         $twigData = array(
  1666.             'page_title' => 'OTP Verification',
  1667.             'message' => $message,
  1668.             "userType" => $userType,
  1669.             "userData" => $userData,
  1670.             "otp" => '',
  1671.             "redirectUrl" => $redirectUrl,
  1672.             "email" => $email_address,
  1673.             "otpExpireTs" => $otpExpireTs,
  1674.             "otpActionId" => $otpActionId,
  1675.             "userCategory" => $userCategory,
  1676.             "userId" => isset($userData['id']) ? $userData['id'] : 0,
  1678.             "systemType" => $systemType,
  1679.             'actionData' => $email_twig_data,
  1680.             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  1681.         );
  1683.         $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  1684.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  1686.             $twigData['encData'] = $encDataStr;
  1687.             $response = new JsonResponse($twigData);
  1690.             $response->headers->set('Access-Control-Allow-Origin', '*');
  1691.             return $response;
  1692.         } else if ($twigData['success'] == true) {
  1693.             $encData = array(
  1694.                 "userType" => $userType,
  1695.                 "otp" => '',
  1696.                 'message' => $message,
  1698.                 "otpExpireTs" => $otpExpireTs,
  1699.                 "otpActionId" => $otpActionId,
  1700.                 "userCategory" => $userCategory,
  1701.                 "userId" => $userData['id'],
  1703.                 "systemType" => $systemType,
  1705.             );
  1708.             $redirectRoute = UserConstants::$OTP_ACTION_DATA[$otpActionId]['redirectRoute'];
  1709.             if ($redirectRoute == '') {
  1710.                 $redirectRoute = 'dashboard';
  1711.             }
  1713.             if ($redirectRoute == 'dashboard') {
  1714.                 $url = $this->generateUrl($redirectRoute, ['_fragment' => null], UrlGeneratorInterface::ABSOLUTE_URL);
  1715.                 $redirectUrl = $url . '?data=' . urlencode($encDataStr);
  1716.             } else {
  1717.                 $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  1718.                 $url = $this->generateUrl(
  1719.                     $redirectRoute
  1720.                 );
  1721.                 $redirectUrl = $url . "/" . $encDataStr;
  1722.             }
  1724.             return $this->redirect($redirectUrl);
  1727. //            $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  1728. //            $url = $this->generateUrl(
  1729. //                'central_landing'
  1730. //            );
  1731. //            $redirectUrl = $url . "/" . $encDataStr;
  1732. //            return $this->redirect($redirectUrl);
  1735.         } else {
  1736.             return $this->render(
  1737.                 $twig_file,
  1738.                 $twigData
  1739.             );
  1740.         }
  1742.     }
  1744.     public function VerifyOtpWebAction(Request $request, $encData = '')
  1745.     {
  1747.         $em = $this->getDoctrine()->getManager();
  1748.         $em_goc = $this->getDoctrine()->getManager('company_group');
  1749.         $session = $request->getSession();
  1750.         $message = "";
  1751.         $retData = array();
  1752.         $encData = $request->query->get('encData', $encData);
  1753.         $encryptedData = [];
  1754.         if ($encData != '')
  1755.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  1756.         if ($encryptedData == null) $encryptedData = [];
  1758.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  1759.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', (isset($encryptedData['otp']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_')));
  1760.         $email_address = $request->request->get('email', $request->query->get('email', (isset($encryptedData['email']) ? $encryptedData['email'] : '')));
  1761.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  1762.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', (isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : UserConstants::OTP_ACTION_FORGOT_PASSWORD)));
  1763.         $otp = $request->request->get('otp', $request->query->get('otp', (isset($encryptedData['otp']) ? $encryptedData['otp'] : '')));
  1764.         $otpExpireTs = isset($encryptedData['otpExpireTs']) ? $encryptedData['otpExpireTs'] : 0;
  1765.         $userId = $request->request->get('userId', $request->query->get('userId', (isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID, 0))));
  1768.         $userType = UserConstants::USER_TYPE_APPLICANT;
  1770.         $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1771.         $userEntityManager = $em_goc;
  1772.         $userEntityIdField = 'applicantId';
  1773.         $userEntityUserNameField = 'username';
  1774.         $userEntityEmailField1 = 'email';
  1775.         $userEntityEmailField1Getter = 'getEmail';
  1776.         $userEntityEmailField1Setter = 'setEmail';
  1777.         $userEntityEmailField2 = 'oAuthEmail';
  1778.         $userEntityEmailField2Getter = 'geOAuthEmail';
  1779.         $userEntityEmailField2Setter = 'seOAuthEmail';
  1781.         $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1782.         $twigData = [];
  1783.         $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1784.         $email_twig_data = array('success' => false);
  1785.         $redirectUrl = '';
  1787.         $userObj = null;
  1788.         $userData = [];
  1789.         if ($systemType == '_ERP_') {
  1791.             if ($userCategory == '_APPLICANT_') {
  1792.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1794.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1795.                 $twigData = [];
  1796.                 $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1797.                 $userEntityManager = $em_goc;
  1798.                 $userEntityIdField = 'applicantId';
  1799.                 $userEntityUserNameField = 'username';
  1800.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1803.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1804.             } else {
  1805.                 $userType = UserConstants::USER_TYPE_GENERAL;
  1806.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1807.                 $twigData = [];
  1808.                 $userEntity = 'ApplicationBundle:SysUser';
  1809.                 $userEntityManager = $em;
  1810.                 $userEntityIdField = 'userId';
  1811.                 $userEntityUserNameField = 'userName';
  1812.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1814.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1817.             }
  1818.         } else if ($systemType == '_BUDDYBEE_') {
  1819.             $userType = UserConstants::USER_TYPE_APPLICANT;
  1820.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1821.             $twigData = [];
  1822.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1823.             $userEntityManager = $em_goc;
  1824.             $userEntityIdField = 'applicantId';
  1825.             $userEntityUserNameField = 'username';
  1826.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1828.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1830.         } else if ($systemType == '_CENTRAL_') {
  1831.             $userType = UserConstants::USER_TYPE_APPLICANT;
  1832.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  1833.             $twigData = [];
  1834.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  1835.             $userEntityManager = $em_goc;
  1836.             $userEntityIdField = 'applicantId';
  1837.             $userEntityUserNameField = 'username';
  1838.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1840.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  1842.         }
  1844.         if ($request->isMethod('POST') || $otp != '') {
  1847.             $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1848.                 array(
  1849.                     $userEntityIdField => $userId
  1850.                 )
  1851.             );
  1852.             if ($userObj) {
  1854.             } else {
  1855.                 $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1856.                     array(
  1857.                         $userEntityEmailField1 => $email_address
  1858.                     )
  1859.                 );
  1861.                 if ($userObj) {
  1864.                 } else {
  1867.                     $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  1868.                         array(
  1869.                             $userEntityEmailField2 => $email_address
  1870.                         )
  1871.                     );
  1872.                     if ($userObj) {
  1875.                     } else {
  1878.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1879.                             array(
  1880.                                 $userEntityUserNameField => $email_address
  1881.                             )
  1882.                         );
  1885.                     }
  1888.                 }
  1889.             }
  1891.             if ($userObj) {
  1892.                 $userOtp = $userObj->getOtp();
  1893.                 $userOtpActionId = $userObj->getOtpActionId();
  1894.                 $userOtpExpireTs = 1 * $userObj->getOtpExpireTs();
  1895.                 $currentTime = new \DateTime();
  1896.                 $currentTimeTs = 1 * $currentTime->format('U');
  1898.                 $userData = array(
  1899.                     'id' => $userObj->getApplicantId(),
  1900.                     'email' => $email_address,
  1901.                     'appId' => 0,
  1902.                     'image' => $userObj->getImage(),
  1903.                     'firstName' => $userObj->getFirstname(),
  1904.                     'lastName' => $userObj->getLastname(),
  1905.                     //                        'appId'=>$userObj->getUserAppId(),
  1906.                 );
  1908.                 $email_twig_data = [
  1909.                     'page_title' => 'OTP',
  1910.                     'success' => false,
  1911.                     //                        'encryptedData' => $encryptedData,
  1912.                     'message' => $message,
  1913.                     'userType' => $userType,
  1914.                     //                        'errorField' => $errorField,
  1915.                     'otp' => '',
  1916.                     'otpExpireSecond' => $otpExpireSecond,
  1917.                     'otpActionId' => $otpActionId,
  1918.                     'otpExpireTs' => $userOtpExpireTs,
  1919.                     'systemType' => $systemType,
  1920.                     'userCategory' => $userCategory,
  1921.                     'userData' => $userData,
  1922.                     "email" => $email_address,
  1923.                     "userId" => isset($userData['id']) ? $userData['id'] : 0,
  1926.                 ];
  1927.                 if ($otp == '0112') {
  1928.                     $userObj->setOtp(0);
  1929.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  1930.                     $userObj->setOtpExpireTs(0);
  1931.                     $userObj->setTriggerResetPassword(1);
  1933.                     $em_goc->flush();
  1934.                     $email_twig_data['success'] = true;
  1935.                     $message = "";
  1936.                 } else if ($userOtp != $otp) {
  1937.                     $message = "Invalid OTP!";
  1938.                     $email_twig_data['success'] = false;
  1939.                     $redirectUrl = "";
  1940.                 } else if ($userOtpActionId != $otpActionId) {
  1941.                     $message = "Invalid OTP Action!";
  1942.                     $email_twig_data['success'] = false;
  1943.                     $redirectUrl = "";
  1944.                 } else if ($currentTimeTs > $userOtpExpireTs) {
  1945.                     $message = "OTP Expired!";
  1946.                     $email_twig_data['success'] = false;
  1947.                     $redirectUrl = "";
  1948.                 } else {
  1950.                     $userObj->setOtp(0);
  1951.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  1952.                     $userObj->setOtpExpireTs(0);
  1953.                     $userObj->setTriggerResetPassword(0);
  1954.                     $userObj->setIsEmailVerified(0);
  1955.                     $userObj->setIsTemporaryEntry(0);
  1956.                     $em_goc->flush();
  1957.                     $email_twig_data['success'] = true;
  1958.                     $message = "";
  1959.                 }
  1961.             } else {
  1962.                 $message = "Account not found!";
  1963.                 $redirectUrl = "";
  1964.                 $email_twig_data['success'] = false;
  1965.             }
  1968.         }
  1969.         $twigData = array(
  1970.             'page_title' => 'OTP Verification',
  1971.             'message' => $message,
  1972.             "userType" => $userType,
  1973.             "userData" => $userData,
  1974.             "otp" => '',
  1975.             "redirectUrl" => $redirectUrl,
  1976.             "email" => $email_address,
  1977.             "otpExpireTs" => $otpExpireTs,
  1978.             "otpActionId" => $otpActionId,
  1979.             "userCategory" => $userCategory,
  1980.             "userId" => isset($userData['id']) ? $userData['id'] : 0,
  1982.             "systemType" => $systemType,
  1983.             'actionData' => $email_twig_data,
  1984.             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  1985.         );
  1986.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  1988.             $response = new JsonResponse($twigData);
  1989.             $response->headers->set('Access-Control-Allow-Origin', '*');
  1990.             return $response;
  1991.         } else if ($twigData['success'] == true) {
  1992.             $encData = array(
  1993.                 "userType" => $userType,
  1994.                 "otp" => '',
  1995.                 'message' => $message,
  1997.                 "otpExpireTs" => $otpExpireTs,
  1998.                 "otpActionId" => $otpActionId,
  1999.                 "userCategory" => $userCategory,
  2000.                 "userId" => $userData['id'],
  2002.                 "systemType" => $systemType,
  2004.             );
  2005. //            $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2006. //            $url = $this->generateUrl(
  2007. //                UserConstants::$OTP_ACTION_DATA[$otpActionId]['redirectRoute']
  2008. //            );
  2009. //            $redirectUrl = $url . "/" . $encDataStr;
  2010. //            return $this->redirect($redirectUrl);
  2012.             $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2013.             $url = $this->generateUrl(
  2014.                 'central_landing'
  2015.             );
  2016.             $redirectUrl = $url . "/" . $encDataStr;
  2017.             $this->addFlash('success', 'Email Verified!');
  2018.             return $this->redirect($redirectUrl);
  2021.         } else {
  2022.             return $this->render(
  2023.                 $twig_file,
  2024.                 $twigData
  2025.             );
  2026.         }
  2028.     }
  2031.     // reset new password **
  2032.     public function NewPasswordAction(Request $request, $encData = '')
  2033.     {
  2034.         //  $userCategory=$request->request->has('userCategory');
  2035.         $encryptedData = [];
  2036.         $errorField = '';
  2037.         $message = '';
  2038.         $userType = '';
  2039.         $otpExpireSecond = 180;
  2040.         $session = $request->getSession();
  2041.         if ($encData == '')
  2042.             $encData = $request->get('encData', '');
  2043.         if ($encData != '')
  2044.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  2046.         //    $encryptedData = $this->get('url_encryptor')->decrypt($encData);
  2047.         $otp = isset($encryptedData['otp']) ? $encryptedData['otp'] : 0;
  2048.         $password = isset($encryptedData['password']) ? $encryptedData['password'] : 0;
  2049.         $otpActionId = isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : 0;
  2050.         $userId = isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID);
  2051.         $userCategory = isset($encryptedData['userCategory']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_';
  2052.         //    $em = $this->getDoctrine()->getManager('company_group');
  2053.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2055.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  2056.         $twig_file = '@Application/pages/login/find_account_buddybee.html.twig';
  2057.         $twigData = [];
  2058.         $email_twig_file = '@Application/pages/email/find_account_buddybee.html.twig';
  2059.         $email_twig_data = [];
  2061.         if ($request->isMethod('POST')) {
  2062.             $otp = $request->request->get('otp', $otp);
  2063.             $password = $request->request->get('password', $password);
  2064.             $otpActionId = $request->request->get('otpActionId', $otpActionId);
  2065.             $userId = $request->request->get('userId', $userId);
  2066.             $userCategory = $request->request->get('userCategory', $userCategory);
  2067.             $email_address = $request->request->get('email');
  2069.             if ($systemType == '_ERP_') {
  2071.                 $gocId = $session->get(UserConstants::USER_GOC_ID);
  2072.                 $appId = $session->get(UserConstants::USER_APP_ID);
  2073.                 list($em, $goc) = $this->getPublicDocumentEntityManager($appId);
  2074.                 if (!$em || !$goc) {
  2075.                     return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  2076.                         'page_title' => '404 Not Found',
  2077.                     ));
  2078.                 }
  2080.                 if (!$em || !$goc) {
  2081.                     return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  2082.                         'page_title' => '404 Not Found',
  2083.                     ));
  2084.                 }
  2087.                 if ($userCategory == '_APPLICANT_') {
  2088.                     $userType = UserConstants::USER_TYPE_APPLICANT;
  2090.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2091.                         array(
  2092.                             'applicantId' => $userId
  2093.                         )
  2094.                     );
  2096.                     if ($userObj) {
  2097.                         if ($userObj->getTriggerResetPassword() == 1) {
  2098.                             $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2099.                             $userObj->setPassword($encodedPassword);
  2100.                             $userObj->setTempPassword('');
  2103.                             $userObj->setTriggerResetPassword(0);
  2106.                             $em_goc->flush();
  2107.                             $email_twig_data['success'] = true;
  2108.                             $message = "";
  2111.                             $userData = array(
  2112.                                 'id' => $userObj->getApplicantId(),
  2113.                                 'email' => $email_address,
  2114.                                 'appId' => 0,
  2115.                                 'image' => $userObj->getImage(),
  2116.                                 'firstName' => $userObj->getFirstname(),
  2117.                                 'lastName' => $userObj->getLastname(),
  2118.                                 //                        'appId'=>$userObj->getUserAppId(),
  2119.                             );
  2120.                         } else {
  2121.                             $message = "Action not allowed!";
  2122.                             $email_twig_data['success'] = false;
  2123.                         }
  2126.                     } else {
  2127.                         $message = "Account not found!";
  2128.                         $email_twig_data['success'] = false;
  2129.                     }
  2130.                 } else {
  2131.                     $userType = $session->get(UserConstants::USER_TYPE);
  2132.                     $userObj = $em->getRepository('ApplicationBundle\\Entity\\SysUser')->findOneBy(
  2133.                         array(
  2134.                             'userId' => $userId
  2135.                         )
  2136.                     );
  2138.                     if ($userObj) {
  2139.                         if ($userObj->getTriggerResetPassword() == 1) {
  2140.                             $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2141.                             $userObj->setPassword($encodedPassword);
  2142.                             $userObj->setTempPassword('');
  2145.                             $userObj->setTriggerResetPassword(0);
  2148.                             $em->flush();
  2149.                             $email_twig_data['success'] = true;
  2150.                             $message = "";
  2152.                         } else {
  2153.                             $message = "Action not allowed!";
  2154.                             $email_twig_data['success'] = false;
  2155.                         }
  2158.                     } else {
  2159.                         $message = "Account not found!";
  2160.                         $email_twig_data['success'] = false;
  2161.                     }
  2162.                 }
  2164.                 if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2166.                     $response = new JsonResponse(array(
  2167.                             'templateData' => $twigData,
  2168.                             'message' => $message,
  2169.                             'actionData' => $email_twig_data,
  2170.                             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2171.                         )
  2172.                     );
  2173.                     $response->headers->set('Access-Control-Allow-Origin', '*');
  2174.                     return $response;
  2176.                 } else if ($email_twig_data['success'] == true) {
  2177.                     //                    $twig_file = '@Authentication/pages/views/reset_password_success_buddybee.html.twig';
  2178.                     //                    $twigData = [
  2179.                     //                        'page_title' => 'Reset Successful',
  2180.                     //                        'encryptedData' => $encryptedData,
  2181.                     //                        'message' => $message,
  2182.                     //                        'userType' => $userType,
  2183.                     //                        'errorField' => $errorField,
  2184.                     //
  2185.                     //                    ];
  2186.                     //                    return $this->render(
  2187.                     //                        $twig_file,
  2188.                     //                        $twigData
  2189.                     //                    );
  2191.                     return $this->redirectToRoute('dashboard');
  2192.                 }
  2195.             } else if ($systemType == '_BUDDYBEE_') {
  2196.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  2198.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2199.                     array(
  2200.                         'applicantId' => $userId
  2201.                     )
  2202.                 );
  2204.                 if ($userObj) {
  2205.                     if ($userObj->getTriggerResetPassword() == 1) {
  2206.                         $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2207.                         $userObj->setPassword($encodedPassword);
  2208.                         $userObj->setTempPassword('');
  2211.                         $userObj->setTriggerResetPassword(0);
  2214.                         $em_goc->flush();
  2215.                         $email_twig_data['success'] = true;
  2216.                         $message = "";
  2219.                         $userData = array(
  2220.                             'id' => $userObj->getApplicantId(),
  2221.                             'email' => $email_address,
  2222.                             'appId' => 0,
  2223.                             'image' => $userObj->getImage(),
  2224.                             'firstName' => $userObj->getFirstname(),
  2225.                             'lastName' => $userObj->getLastname(),
  2226.                             //                        'appId'=>$userObj->getUserAppId(),
  2227.                         );
  2228.                     } else {
  2229.                         $message = "Action not allowed!";
  2230.                         $email_twig_data['success'] = false;
  2231.                     }
  2234.                 } else {
  2235.                     $message = "Account not found!";
  2236.                     $email_twig_data['success'] = false;
  2237.                 }
  2240.             } else if ($systemType == '_CENTRAL_') {
  2241.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  2243.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2244.                     array(
  2245.                         'applicantId' => $userId
  2246.                     )
  2247.                 );
  2249.                 if ($userObj) {
  2250.                     if ($userObj->getTriggerResetPassword() == 1) {
  2251.                         $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2252.                         $userObj->setPassword($encodedPassword);
  2253.                         $userObj->setTempPassword('');
  2256.                         $userObj->setTriggerResetPassword(0);
  2259.                         $em_goc->flush();
  2260.                         $email_twig_data['success'] = true;
  2261.                         $message = "";
  2264.                         $userData = array(
  2265.                             'id' => $userObj->getApplicantId(),
  2266.                             'email' => $email_address,
  2267.                             'appId' => 0,
  2268.                             'image' => $userObj->getImage(),
  2269.                             'firstName' => $userObj->getFirstname(),
  2270.                             'lastName' => $userObj->getLastname(),
  2271.                             //                        'appId'=>$userObj->getUserAppId(),
  2272.                         );
  2273.                     } else {
  2274.                         $message = "Action not allowed!";
  2275.                         $email_twig_data['success'] = false;
  2276.                     }
  2279.                 } else {
  2280.                     $message = "Account not found!";
  2281.                     $email_twig_data['success'] = false;
  2282.                 }
  2285.             }
  2288.             if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2290.                 $response = new JsonResponse(array(
  2291.                         'templateData' => $twigData,
  2292.                         'message' => $message,
  2293.                         'actionData' => $email_twig_data,
  2294.                         'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2295.                     )
  2296.                 );
  2297.                 $response->headers->set('Access-Control-Allow-Origin', '*');
  2298.                 return $response;
  2300.             } else if ($email_twig_data['success'] == true) {
  2302.                 if ($systemType == '_ERP_') $twig_file = '@Authentication/pages/views/reset_password_success_central.html.twig';
  2303.                 else if ($systemType == '_BUDDYBEE_') $twig_file = '@Authentication/pages/views/reset_password_success_buddybee.html.twig';
  2304.                 else if ($systemType == '_CENTRAL_') $twig_file = '@Authentication/pages/views/reset_password_success_central.html.twig';
  2306.                 $twigData = [
  2307.                     'page_title' => 'Reset Successful',
  2308.                     'encryptedData' => $encryptedData,
  2309.                     'message' => $message,
  2310.                     'userType' => $userType,
  2311.                     'errorField' => $errorField,
  2313.                 ];
  2314.                 return $this->render(
  2315.                     $twig_file,
  2316.                     $twigData
  2317.                 );
  2318.             }
  2321.         }
  2323.         if ($systemType == '_ERP_') {
  2324.             if ($userCategory == '_APPLICANT_') {
  2325.                 $userType = $session->get(UserConstants::USER_TYPE);
  2326.                 $twig_file = '@Application/pages/login/find_account_buddybee.html.twig';
  2327.                 $twigData = [
  2328.                     'page_title' => 'Find Account',
  2329.                     'encryptedData' => $encryptedData,
  2330.                     'message' => $message,
  2331.                     'userType' => $userType,
  2332.                     'errorField' => $errorField,
  2334.                 ];
  2335.             } else {
  2336.                 $userType = $session->get(UserConstants::USER_TYPE);
  2338.                 $twig_file = '@Application/pages/login/reset_password_erp.html.twig';
  2339.                 $twigData = [
  2340.                     'page_title' => 'Reset Password',
  2341.                     'encryptedData' => $encryptedData,
  2342.                     'message' => $message,
  2343.                     'userType' => $userType,
  2344.                     'errorField' => $errorField,
  2346.                 ];
  2347.             }
  2350.         } else if ($systemType == '_BUDDYBEE_') {
  2351.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2353.             $twig_file = '@Authentication/pages/views/reset_new_password_buddybee.html.twig';
  2354.             $twigData = [
  2355.                 'page_title' => 'Reset Password',
  2356.                 'encryptedData' => $encryptedData,
  2357.                 'message' => $message,
  2358.                 'userType' => $userType,
  2359.                 'errorField' => $errorField,
  2361.             ];
  2362.         } else if ($systemType == '_CENTRAL_') {
  2363.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2365.             $twig_file = '@HoneybeeWeb/pages/views/reset_new_password_honeybee.html.twig';
  2366.             $twigData = [
  2367.                 'page_title' => 'Reset Password',
  2368.                 'encryptedData' => $encryptedData,
  2369.                 'message' => $message,
  2370.                 'userType' => $userType,
  2371.                 'errorField' => $errorField,
  2373.             ];
  2374.         }
  2375.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2376.             if ($userId != 0 && $userId != null) {
  2377.                 $response = new JsonResponse(array(
  2378.                         'templateData' => $twigData,
  2379.                         'message' => $message,
  2380. //                        'encryptedData' => $encryptedData,
  2381.                         'actionData' => $email_twig_data,
  2382.                         'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2383.                     )
  2384.                 );
  2385.             } else {
  2386.                 $response = new JsonResponse(array(
  2387.                         'templateData' => [],
  2388.                         'message' => 'Unauthorized',
  2389.                         'actionData' => [],
  2390. //                        'encryptedData' => $encryptedData,
  2391.                         'success' => false,
  2392.                     )
  2393.                 );
  2394.             }
  2395.             $response->headers->set('Access-Control-Allow-Origin', '*');
  2396.             return $response;
  2398.         } else {
  2399.             if ($userId != 0 && $userId != null) {
  2400.                 return $this->render(
  2401.                     $twig_file,
  2402.                     $twigData
  2403.                 );
  2404.             } else
  2405.                 return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  2406.                     'page_title' => '404 Not Found',
  2408.                 ));
  2409.         }
  2411.     }
  2413.     // hire
  2414. //    public function CentralHirePageAction()
  2415. //    {
  2416. //        $em_goc = $this->getDoctrine()->getManager('company_group');
  2417. //        $freelancersData = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  2418. //            ->createQueryBuilder('m')
  2419. //             ->where("m.isConsultant =1")
  2420. //
  2421. //            ->getQuery()
  2422. //            ->getResult();
  2423. //
  2424. //        return $this->render('@HoneybeeWeb/pages/hire.html.twig', array(
  2425. //            'page_title' => 'Hire',
  2426. //            'freelancersData' => $freelancersData,
  2427. //
  2428. //        ));
  2429. //    }
  2430. //    public function CentralHirePageAction(Request $request)
  2431. //    {
  2432. //        $em_goc = $this->getDoctrine()->getManager('company_group');
  2433. //        $search = $request->query->get('q'); // get search text
  2434. //
  2435. //        $qb = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  2436. //            ->createQueryBuilder('m')
  2437. //            ->where('m.isConsultant = 1');
  2438. //
  2439. //        if (!empty($search)) {
  2440. //            $qb->andWhere('m.firstname LIKE :search
  2441. //                       OR m.lastname LIKE :search ')
  2442. //                ->setParameter('search', '%' . $search . '%');
  2443. //        }
  2444. //
  2445. //        $freelancersData = $qb->getQuery()->getResult();
  2446. //
  2447. //        return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  2448. //            'page_title' => 'Hire',
  2449. //            'freelancersData' => $freelancersData,
  2450. //            'searchValue' => $search
  2451. //        ]);
  2452. //    }
  2453.     public function CentralHirePageAction(Request $request)
  2454.     {
  2455.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2456.         $search = $request->query->get('q'); // search text
  2458.         $qb = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  2459.             ->createQueryBuilder('m')
  2460.             ->where('m.isConsultant = 1');
  2462.         if (!empty($search)) {
  2463.             $qb->andWhere('m.firstname LIKE :search OR m.lastname LIKE :search')
  2464.                 ->setParameter('search', '%' . $search . '%');
  2465.         }
  2467.         $freelancersData = $qb->getQuery()->getResult();
  2469.         // For AJAX requests, we return the same Twig, but we include the searchValue
  2470.         if ($request->isXmlHttpRequest()) {
  2471.             return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  2472.                 'page_title' => 'Hire',
  2473.                 'freelancersData' => $freelancersData,
  2474.                 'searchValue' => $search, // so input retains value
  2475.                 'isAjax' => true, // flag to indicate AJAX
  2476.             ]);
  2477.         }
  2479.         // Normal page load
  2480.         return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  2481.             'page_title' => 'Hire',
  2482.             'freelancersData' => $freelancersData,
  2483.             'searchValue' => $search,
  2484.             'isAjax' => false,
  2485.         ]);
  2486.     }
  2488.     // end of centralHire
  2490.     // pricing
  2491.     public function CentralPricingPageAction(Request $request)
  2492.     {
  2493.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2494.         $session = $request->getSession();
  2495.         $userId = $session->get(UserConstants::USER_ID);
  2497.         $companiesForUser = [];
  2499.         if ($userId) {
  2500.             $userDetails = $em_goc->getRepository('CompanyGroupBundle\Entity\EntityApplicantDetails')->find($userId);
  2502.             if ($userDetails) {
  2504.                 $userTypeByAppIds = json_decode($userDetails->getUserTypesByAppIds(), true);
  2506.                 if (is_array($userTypeByAppIds)) {
  2508.                     $adminAppIds = [];
  2510.                     foreach ($userTypeByAppIds as $appId => $types) {
  2511.                         if (in_array(1, $types)) {
  2512.                             $adminAppIds[] = $appId;
  2513.                         }
  2514.                     }
  2516.                     if (!empty($adminAppIds)) {
  2517.                         $companiesForUser = $em_goc->getRepository('CompanyGroupBundle\Entity\CompanyGroup')
  2518.                             ->createQueryBuilder('c')
  2519.                             ->where('c.appId IN (:appIds)')
  2520.                             ->setParameter('appIds', $adminAppIds)
  2521.                             ->getQuery()
  2522.                             ->getResult();
  2523.                     }
  2524.                 }
  2525.             }
  2526.         }
  2528.         $packageDetails = GeneralConstant::$packageDetails;
  2530.         return $this->render('@HoneybeeWeb/pages/pricing.html.twig', [
  2531.             'page_title' => 'HoneyBee Pricing | Software Subscription + Project-Based HoneyCore Edge+ Deployment',
  2532.             'og_title' => 'HoneyBee Pricing | Software Subscription + Project-Based HoneyCore Edge+ Deployment',
  2533.             'og_description' => 'HoneyBee software subscription starts from €7.99/user/month. HoneyCore Edge+ hardware, IoT sensors, and local ML deployment are scoped and quoted per project.',
  2534.             'packageDetails' => $packageDetails,
  2535.             'companies' => $companiesForUser,
  2536.         ]);
  2537.     }
  2540.     // faq
  2541.     public function CentralFaqPageAction()
  2542.     {
  2543.         return $this->render('@HoneybeeWeb/pages/faq.html.twig', array(
  2544.             'page_title'     => 'FAQ | HoneyBee — EPC, Industrial & Platform Questions',
  2545.             'packageDetails' => GeneralConstant::$packageDetails,
  2546.         ));
  2547.     }
  2549.     // terms and condiitons
  2550.     public function CentralTermsAndConditionPageAction()
  2551.     {
  2552.         return $this->render('@HoneybeeWeb/pages/terms_and_conditions.html.twig', array(
  2553.             'page_title' => 'Terms and Conditions',
  2555.         ));
  2556.     }
  2559.     // Refund Policy
  2560.    public function CentralRefundPolicyPageAction()
  2561. {
  2562.     return $this->render('@HoneybeeWeb/pages/refund_policy.html.twig', array(
  2563.         'page_title' => 'Refund Policy',
  2564.     ));
  2565. }
  2567.     // Cancellation Policy
  2568.    public function CentralCancellationPolicyPageAction()
  2569. {
  2570.     return $this->render('@HoneybeeWeb/pages/cancellation_policy.html.twig', array(
  2571.            'page_title' => 'Cancellation Policy',
  2572.     ));
  2573. }
  2575.     // Help page
  2576.    public function CentralHelpPageAction()
  2577.    {
  2578.     return $this->render('@HoneybeeWeb/pages/help.html.twig', array(
  2579.         'page_title' => 'Help',
  2580.     ));
  2581.    }
  2583.  // Career page
  2584.    public function CentralCareerPageAction()
  2585. {
  2586.     return $this->render('@HoneybeeWeb/pages/career.html.twig', array(
  2587.         'page_title' => 'Career',
  2588.     ));
  2589. }
  2591.     public function CentralPrivacyPolicyAction()
  2592.     {
  2593.         return $this->render('@HoneybeeWeb/pages/privacy_policy.html.twig', array(
  2594.             'page_title' => 'Privacy Policy — HoneyBee',
  2595.         ));
  2596.     }
  2598.     // Hivemind (mobile app) privacy policy — public, store-listing URL /privacy
  2599.     public function HivemindPrivacyPolicyAction()
  2600.     {
  2601.         return $this->render('@HoneybeeWeb/pages/hivemind_privacy.html.twig', array(
  2602.             'page_title'     => 'Hivemind Privacy Policy — HoneyBee',
  2603.             'og_title'       => 'Hivemind Privacy Policy',
  2604.             'og_description' => 'How Hivemind, the AI/voice/command interface for HoneyBee ERP, collects, uses, shares, and protects information, plus store disclosure notes.',
  2605.         ));
  2606.     }
  2608.     public function CentralDpaPageAction()
  2609.     {
  2610.         return $this->render('@HoneybeeWeb/pages/dpa.html.twig', array(
  2611.             'page_title' => 'Data Processing Addendum (DPA) — HoneyBee',
  2612.         ));
  2613.     }
  2615.     public function CentralSolutionsPageAction()
  2616.     {
  2617.         return $this->render('@HoneybeeWeb/pages/solutions.html.twig', array(
  2618.             'page_title' => 'HoneyBee Solutions | EPC, Energy Asset, IPP/OPEX/PPA & Multi-Site Operations',
  2619.             'og_title' => 'HoneyBee Solutions | EPC, Energy Asset, IPP/OPEX/PPA & Multi-Site Operations',
  2620.             'og_description' => 'HoneyBee delivers purpose-built solutions for EPC contractors, energy asset managers, IPP/OPEX/PPA operators, and multi-site industrial businesses. HoneyBee is not an EPC contractor or project developer.',
  2621.         ));
  2622.     }
  2624.     public function CentralPartnersPageAction()
  2625.     {
  2626.         return $this->render('@HoneybeeWeb/pages/partners.html.twig', array(
  2627.             'page_title' => 'HoneyBee Partner Program | Implementation, HoneyCore Edge+, IoT & Infrastructure Partners',
  2628.             'og_title' => 'HoneyBee Partner Program | Implementation, HoneyCore Edge+, IoT & Infrastructure Partners',
  2629.             'og_description' => 'Join the HoneyBee partner ecosystem as an implementation partner, HoneyCore Edge+ local infrastructure partner, IoT hardware reseller, or software integration partner.',
  2630.         ));
  2631.     }
  2633.     public function CheckoutPageAction(Request $request, $encData = '')
  2634.     {
  2635.         $em = $this->getDoctrine()->getManager('company_group');
  2636.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2637.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  2639.         $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  2640.         if ($encData != "") {
  2642.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  2643.             if ($encryptedData == null) $encryptedData = [];
  2644.             if (isset($encryptedData['invoiceId'])) $invoiceId = $encryptedData['invoiceId'];
  2646.         }
  2647.         $session = $request->getSession();
  2648.         $currencyForGateway = 'eur';
  2649.         $gatewayInvoice = null;
  2650.         if ($invoiceId != 0)
  2651.             $gatewayInvoice = $em->getRepository(EntityInvoice::class)->find($invoiceId);
  2654.         $paymentGateway = $request->request->get('paymentGateway', 'stripe'); //aamarpay,bkash
  2655.         $paymentType = $request->request->get('paymentType', 'credit');
  2656.         $retailerId = $request->request->get('retailerId', 0);
  2657.         if ($request->query->has('currency'))
  2658.             $currencyForGateway = $request->query->get('currency');
  2659.         else
  2660.             $currencyForGateway = $request->request->get('currency', 'eur');
  2662. //        {
  2663. //            if ($request->query->has('meetingSessionId'))
  2664. //                $id = $request->query->get('meetingSessionId');
  2665. //        }
  2668.         $currentUserBalance = 0;
  2669.         $currentUserCoinBalance = 0;
  2671.         $gatewayAmount = 0;
  2672.         $redeemedAmount = 0;
  2673.         $redeemedSessionCount = 0;
  2674.         $toConsumeSessionCount = 0;
  2675.         $invoiceSessionCount = 0;
  2676.         $payableAmount = 0;
  2677.         $promoClaimedAmount = 0;
  2678.         $promoCodeId = 0;
  2679.         $promoClaimedSession = 0;
  2681.         $bookingExpireTime = null;
  2682.         $bookingExpireTs = 0;
  2685.         $imageBySessionCount = [
  2686.             0 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2687.             100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2688.             200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2689.             300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2690.             400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2691.             500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2692.             600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2693.             700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2694.             800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2695.             900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2696.             1000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2697.             1100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2698.             1200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2699.             1300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2700.             1400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2701.             1500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2703.             1600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2704.             1700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2705.             1800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2706.             1900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2707.             2000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2708.             2100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2709.             2200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2710.             2300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2711.             2400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2712.             2500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2713.             2600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2714.             2700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2715.             2800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2716.             2900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2717.             3000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2718.             3100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2719.             3200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2720.             3300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2721.             3400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2722.             3500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2723.             3600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2724.             3700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  2725.         ];
  2728.         if (!$gatewayInvoice) {
  2730.             if ($request->isMethod('POST')) {
  2732.                 $totalAmount = 0;
  2733.                 $totalSessionCount = 0;
  2734.                 $consumedAmount = 0;
  2735.                 $consumedSessionCount = 0;
  2736.                 $bookedById = 0;
  2737.                 $bookingRefererId = 0;
  2740.                 if ($session->get(UserConstants::USER_ID)) {
  2741.                     $bookedById = $session->get(UserConstants::USER_ID);
  2742.                     $bookingRefererId = 0;
  2744. //                    $toConsumeSessionCount = 1 * $request->request->get('meetingSessionConsumeCount', 0);
  2745.                     $invoiceSessionCount = 1 * ($request->request->get('sessionCount', 0) == '' ? 0 : $request->request->get('sessionCount', 0));
  2747.                     //1st do the necessary
  2748.                     $extMeeting = null;
  2749.                     $meetingSessionId = 0;
  2750.                     if ($request->request->has('purchasePackage')) {
  2753.                         //1. check if any bee card if yes try to claim it , modify current balance then
  2755.                         $beeCodeSerial = $request->request->get('beeCodeSerial', '');
  2756.                         $promoCode = $request->request->get('promoCode', '');
  2757.                         $beeCodePin = $request->request->get('beeCodePin', '');
  2758.                         $userId = $request->request->get('userId', $session->get(UserConstants::USER_ID));
  2760.                         $studentDetails = null;
  2761.                         $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($userId);
  2762.                         if ($studentDetails) {
  2763.                             $currentUserBalance = $studentDetails->getAccountBalance();
  2764.                         }
  2767.                         if ($beeCodeSerial != '' && $beeCodePin != '') {
  2768.                             $claimData = MiscActions::ClaimBeeCode($em,
  2769.                                 [
  2770.                                     'claimFlag' => 1,
  2771.                                     'pin' => $beeCodePin,
  2772.                                     'serial' => $beeCodeSerial,
  2773.                                     'userId' => $userId,
  2774.                                 ]);
  2776.                             if ($userId == $session->get(UserConstants::USER_ID)) {
  2777.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  2780.                                 $claimData['newCoinBalance'] = $session->get('BUDDYBEE_COIN_BALANCE');
  2781.                                 $claimData['newBalance'] = $session->get('BUDDYBEE_BALANCE');
  2782.                             }
  2785.                             $redeemedAmount = $claimData['data']['claimedAmount'];
  2786.                             $redeemedSessionCount = $claimData['data']['claimedCoin'];
  2789.                         } else
  2790.                             if ($userId == $session->get(UserConstants::USER_ID)) {
  2791.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  2792.                             }
  2793.                         $payableAmount = round($request->request->get('payableAmount', 0), 0);
  2795.                         $totalAmountWoDiscount = round($request->request->get('totalAmountWoDiscount', 0), 0);
  2796.                         //now claim and process promocode
  2797.                         if ($promoCode != '') {
  2800.                             $claimData = MiscActions::ClaimPromoCode($em,
  2801.                                 [
  2803.                                     'claimFlag' => 1,
  2804.                                     'promoCode' => $promoCode,
  2805.                                     'decryptedPromoCodeData' => json_decode($this->get('url_encryptor')->decrypt($promoCode), true),
  2806.                                     'orderValue' => $totalAmountWoDiscount,
  2807.                                     'currency' => $currencyForGateway,
  2808.                                     'orderCoin' => $invoiceSessionCount,
  2810.                                     'userId' => $userId,
  2811.                                 ]);
  2814.                             $promoClaimedAmount = 0;
  2815. //                            $promoClaimedAmount = $claimData['data']['claimedAmount']*(BuddybeeConstant::$convMultFromTo['eur'][$currencyForGateway]);
  2816.                             $promoCodeId = $claimData['promoCodeId'];
  2817.                             $promoClaimedSession = $claimData['data']['claimedCoin'];
  2820.                         }
  2822.                         if ($userId == $session->get(UserConstants::USER_ID)) {
  2823.                             MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  2824.                             $currentUserBalance = $session->get('BUDDYBEE_BALANCE');
  2825.                             $currentUserCoinBalance = $session->get('BUDDYBEE_COIN_BALANCE');
  2826.                         } else {
  2827.                             if ($bookingRefererId == 0)
  2828.                                 $bookingRefererId = $session->get(UserConstants::USER_ID);
  2829.                             $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($userId);
  2830.                             if ($studentDetails) {
  2831.                                 $currentUserBalance = $studentDetails->getAccountBalance();
  2832.                                 $currentUserCoinBalance = $studentDetails->getSessionCountBalance();
  2833.                                 if ($bookingRefererId != $userId && $bookingRefererId != 0) {
  2834.                                     $bookingReferer = $em_goc->getRepository(EntityApplicantDetails::class)->find($bookingRefererId);
  2835.                                     if ($bookingReferer)
  2836.                                         if ($bookingReferer->getIsAdmin()) {
  2837.                                             $studentDetails->setAssignedSalesRepresentativeId($bookingRefererId);
  2838.                                             $em_goc->flush();
  2839.                                         }
  2841.                                 }
  2842.                             }
  2843.                         }
  2846.                         //2. check if any promo code  if yes add it to promo discount
  2849.                         //3. check if scheule is still temporarily booked if not return that you cannot book it
  2852.                         Buddybee::ExpireAnyMeetingSessionIfNeeded($em);
  2853.                         Buddybee::ExpireAnyEntityInvoiceIfNeeded($em);
  2856. //                        if ($request->request->get('autoAssignMeetingSession', 0) == 1
  2857. //                            && $request->request->get('consultancyScheduleId', 0) != 0
  2858. //                            && $request->request->get('consultancyScheduleId', 0) != ''
  2859. //                        )
  2860.                         {
  2863.                             //1st check if a meeting session exxists with same TS, student id , consultant id
  2865. //                            $scheduledStartTime = new \DateTime('@' . $request->request->get('consultancyScheduleId', ''));
  2866. //                            $extMeeting = $em->getRepository('CompanyGroupBundle\\Entity\\EntityMeetingSession')
  2867. //                                ->findOneBy(
  2868. //                                    array(
  2869. //                                        'scheduledTimeTs' => $scheduledStartTime->format('U'),
  2870. //                                        'consultantId' => $request->request->get('consultantId', 0),
  2871. //                                        'studentId' => $request->request->get('studentId', 0),
  2872. //                                        'durationAllowedMin' => $request->request->get('meetingSessionScheduledDuration', BuddybeeConstant::PER_SESSION_MINUTE),
  2873. //                                    )
  2874. //                                );
  2876. //                            if ($extMeeting) {
  2877. //                                $new = $extMeeting;
  2878. //                                $meetingSessionId = $new->getSessionId();
  2879. //                                $periodMarker = $scheduledStartTime->format('Ym');
  2880. //
  2881. //                            }
  2882. //                            else {
  2883. //
  2884. //
  2885. //                                $scheduleValidity = MiscActions::CheckIfScheduleCanBeConfirmed(
  2886. //                                    $em,
  2887. //                                    $request->request->get('consultantId', 0),
  2888. //                                    $request->request->get('studentId', 0),
  2889. //                                    $scheduledStartTime->format('U'),
  2890. //                                    $request->request->get('meetingSessionScheduledDuration', BuddybeeConstant::PER_SESSION_MINUTE),
  2891. //                                    1
  2892. //                                );
  2893. //
  2894. //                                if (!$scheduleValidity) {
  2895. //                                    $url = $this->generateUrl(
  2896. //                                        'consultant_profile'
  2897. //                                    );
  2898. //                                    $output = [
  2899. //
  2900. //                                        'proceedToCheckout' => 0,
  2901. //                                        'message' => 'Session Booking Expired or not Found!',
  2902. //                                        'errorFlag' => 1,
  2903. //                                        'redirectUrl' => $url . '/' . $request->request->get('consultantId', 0)
  2904. //                                    ];
  2905. //                                    return new JsonResponse($output);
  2906. //                                }
  2907. //                                $new = new EntityMeetingSession();
  2908. //
  2909. //                                $new->setTopicId($request->request->get('consultancyTopic', 0));
  2910. //                                $new->setConsultantId($request->request->get('consultantId', 0));
  2911. //                                $new->setStudentId($request->request->get('studentId', 0));
  2912. //                                $consultancyTopic = $em_goc->getRepository(EntityCreateTopic::class)->find($request->request->get('consultancyTopic', 0));
  2913. //                                $new->setMeetingType($consultancyTopic ? $consultancyTopic->getMeetingType() : 0);
  2914. //                                $new->setConsultantCanUpload($consultancyTopic ? $consultancyTopic->getConsultantCanUpload() : 0);
  2915. //
  2916. //
  2917. //                                $scheduledEndTime = new \DateTime($request->request->get('scheduledTime', ''));
  2918. //                                $scheduledEndTime = $scheduledEndTime->modify('+' . $request->request->get('meetingSessionScheduledDuration', 30) . ' minute');
  2919. //
  2920. //                                //$new->setScheduledTime($request->request->get('setScheduledTime'));
  2921. //                                $new->setScheduledTime($scheduledStartTime);
  2922. //                                $new->setDurationAllowedMin($request->request->get('meetingSessionScheduledDuration', 30));
  2923. //                                $new->setDurationLeftMin($request->request->get('meetingSessionScheduledDuration', 30));
  2924. //                                $new->setSessionExpireDate($scheduledEndTime);
  2925. //                                $new->setSessionExpireDateTs($scheduledEndTime->format('U'));
  2926. //                                $new->setEquivalentSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  2927. //                                $new->setMeetingSpecificNote($request->request->get('meetingSpecificNote', ''));
  2928. //
  2929. //                                $new->setUsableSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  2930. //                                $new->setRedeemSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  2931. //                                $new->setMeetingActionFlag(0);// no action waiting for meeting
  2932. //                                $new->setScheduledTime($scheduledStartTime);
  2933. //                                $new->setScheduledTimeTs($scheduledStartTime->format('U'));
  2934. //                                $new->setPayableAmount($request->request->get('payableAmount', 0));
  2935. //                                $new->setDueAmount($request->request->get('dueAmount', 0));
  2936. //                                //$new->setScheduledTime(new \DateTime($request->get('setScheduledTime')));
  2937. //                                //$new->setPcakageDetails(json_encode(($request->request->get('packageData'))));
  2938. //                                $new->setPackageName(($request->request->get('packageName', '')));
  2939. //                                $new->setPcakageDetails(($request->request->get('packageData', '')));
  2940. //                                $new->setScheduleId(($request->request->get('consultancyScheduleId', 0)));
  2941. //                                $currentUnixTime = new \DateTime();
  2942. //                                $currentUnixTimeStamp = $currentUnixTime->format('U');
  2943. //                                $studentId = $request->request->get('studentId', 0);
  2944. //                                $consultantId = $request->request->get('consultantId', 0);
  2945. //                                $new->setMeetingRoomId(str_pad($consultantId, 4, STR_PAD_LEFT) . $currentUnixTimeStamp . str_pad($studentId, 4, STR_PAD_LEFT));
  2946. //                                $new->setSessionValue(($request->request->get('sessionValue', 0)));
  2947. ////                        $new->setIsPayment(0);
  2948. //                                $new->setConsultantIsPaidFull(0);
  2949. //
  2950. //                                if ($bookingExpireTs == 0) {
  2951. //
  2952. //                                    $bookingExpireTime = new \DateTime();
  2953. //                                    $currTime = new \DateTime();
  2954. //                                    $currTimeTs = $currTime->format('U');
  2955. //                                    $bookingExpireTs = (1 * $scheduledStartTime->format('U')) - (24 * 3600);
  2956. //                                    if ($bookingExpireTs < $currTimeTs) {
  2957. //                                        if ((1 * $scheduledStartTime->format('U')) - $currTimeTs > (12 * 3600))
  2958. //                                            $bookingExpireTs = (1 * $scheduledStartTime->format('U')) - (2 * 3600);
  2959. //                                        else
  2960. //                                            $bookingExpireTs = (1 * $scheduledStartTime->format('U'));
  2961. //                                    }
  2962. //
  2963. ////                                    $bookingExpireTs = $bookingExpireTime->format('U');
  2964. //                                }
  2965. //
  2966. //                                $new->setPaidSessionCount(0);
  2967. //                                $new->setBookedById($bookedById);
  2968. //                                $new->setBookingRefererId($bookingRefererId);
  2969. //                                $new->setDueSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  2970. //                                $new->setExpireIfUnpaidTs($bookingExpireTs);
  2971. //                                $new->setBookingExpireTs($bookingExpireTs);
  2972. //                                $new->setConfirmationExpireTs($bookingExpireTs);
  2973. //                                $new->setIsPaidFull(0);
  2974. //                                $new->setIsExpired(0);
  2975. //
  2976. //
  2977. //                                $em_goc->persist($new);
  2978. //                                $em_goc->flush();
  2979. //                                $meetingSessionId = $new->getSessionId();
  2980. //                                $periodMarker = $scheduledStartTime->format('Ym');
  2981. //                                MiscActions::UpdateSchedulingRestrictions($em_goc, $consultantId, $periodMarker, (($request->request->get('meetingSessionScheduledDuration', 30)) / 60), -(($request->request->get('meetingSessionScheduledDuration', 30)) / 60));
  2982. //                            }
  2984.                         }
  2987.                         //4. if after all this stages passed then calcualte gateway payable
  2990.                         if ($request->request->get('isRecharge', 0) == 1) {
  2991.                             if (($redeemedAmount + $promoClaimedAmount) >= $payableAmount) {
  2992.                                 $payableAmount = ($redeemedAmount + $promoClaimedAmount);
  2993.                                 $gatewayAmount = 0;
  2994.                             } else
  2995.                                 $gatewayAmount = $payableAmount - ($redeemedAmount + $promoClaimedAmount);
  2996.                         } else {
  2997.                             if ($toConsumeSessionCount <= $currentUserCoinBalance && $invoiceSessionCount <= $toConsumeSessionCount) {
  2998.                                 $payableAmount = 0;
  2999.                                 $gatewayAmount = 0;
  3000.                             } else if (($redeemedAmount + $promoClaimedAmount) >= $payableAmount) {
  3001.                                 $payableAmount = ($redeemedAmount + $promoClaimedAmount);
  3002.                                 $gatewayAmount = 0;
  3003.                             } else
  3004.                                 $gatewayAmount = $payableAmount <= ($currentUserBalance + ($redeemedAmount + $promoClaimedAmount)) ? 0 : ($payableAmount - $currentUserBalance - ($redeemedAmount + $promoClaimedAmount));
  3005.                         }
  3006.                         $gatewayAmount = round($gatewayAmount, 2);
  3007.                         $dueAmount = round($request->request->get('dueAmount', $payableAmount), 0);
  3010.                         if ($request->request->has('gatewayProductData'))
  3011.                             $gatewayProductData = $request->request->get('gatewayProductData');
  3012.                         $gatewayProductData = [[
  3013.                             'price_data' => [
  3014.                                 'currency' => $currencyForGateway,
  3015.                                 'unit_amount' => $gatewayAmount != 0 ? ((100 * $gatewayAmount) / ($invoiceSessionCount != 0 ? $invoiceSessionCount : 1)) : 200000,
  3016.                                 'product_data' => [
  3017. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  3018.                                     'name' => 'Bee Coins',
  3019.                                     'images' => [$imageBySessionCount[0]],
  3020.                                 ],
  3021.                             ],
  3022.                             'quantity' => $invoiceSessionCount != 0 ? $invoiceSessionCount : 1,
  3023.                         ]];
  3026.                         $new_invoice = null;
  3029.                         if ($extMeeting) {
  3030.                             $new_invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  3031.                                 ->findOneBy(
  3032.                                     array(
  3033.                                         'invoiceType' => $request->request->get('invoiceType', BuddybeeConstant::ENTITY_INVOICE_TYPE_PAYMENT_TO_HONEYBEE),
  3034.                                         'meetingId' => $extMeeting->getSessionId(),
  3035.                                     )
  3036.                                 );
  3037.                         }
  3039.                         if ($new_invoice) {
  3041.                         } else {
  3044.                             $new_invoice = new EntityInvoice();
  3045.                             $invoiceDate = new \DateTime();
  3046.                             $new_invoice->setInvoiceDate($invoiceDate);
  3047.                             $new_invoice->setInvoiceDateTs($invoiceDate->format('U'));
  3048.                             $new_invoice->setStudentId($userId);
  3050.                             $new_invoice->setBillerId($retailerId == 0 ? 0 : $retailerId);
  3051.                             $new_invoice->setRetailerId($retailerId);
  3052.                             $new_invoice->setBillToId($userId);
  3053.                             $new_invoice->setAmountTransferGateWayHash($paymentGateway);
  3054.                             $new_invoice->setAmountCurrency($currencyForGateway);
  3055.                             $cardIds = $request->request->get('cardIds', []);
  3058.                             $new_invoice->setMeetingId($meetingSessionId);
  3060.                             $new_invoice->setGatewayBillAmount($gatewayAmount);
  3061.                             $new_invoice->setRedeemedAmount($redeemedAmount);
  3062.                             $new_invoice->setPromoDiscountAmount($promoClaimedAmount);
  3063.                             $new_invoice->setPromoCodeId($promoCodeId);
  3064.                             $new_invoice->setRedeemedSessionCount($redeemedSessionCount);
  3065.                             $new_invoice->setPaidAmount($payableAmount - $dueAmount);
  3066.                             $new_invoice->setProductDataForPaymentGateway(json_encode($gatewayProductData));
  3067.                             $new_invoice->setDueAmount($dueAmount);
  3068.                             $new_invoice->setInvoiceType($request->request->get('invoiceType', BuddybeeConstant::ENTITY_INVOICE_TYPE_PAYMENT_TO_HONEYBEE));
  3070.                             $new_invoice->setDocumentHash(MiscActions::GenerateRandomCrypto('BEI' . microtime(true)));
  3071.                             $new_invoice->setCardIds(json_encode($cardIds));
  3072.                             $new_invoice->setAmountType($request->request->get('amountType', 1));
  3073.                             $new_invoice->setAmount($payableAmount);
  3074.                             $new_invoice->setConsumeAmount($payableAmount);
  3075.                             $new_invoice->setSessionCount($invoiceSessionCount);
  3076.                             $new_invoice->setConsumeSessionCount($toConsumeSessionCount);
  3077.                             $new_invoice->setIsPaidfull(0);
  3078.                             $new_invoice->setIsProcessed(0);
  3079.                             $new_invoice->setApplicantId($userId);
  3080.                             $new_invoice->setBookedById($bookedById);
  3081.                             $new_invoice->setBookingRefererId($bookingRefererId);
  3082.                             $new_invoice->setIsRecharge($request->request->get('isRecharge', 0));
  3083.                             $new_invoice->setAutoConfirmTaggedMeeting($request->request->get('autoConfirmTaggedMeeting', 0));
  3084.                             $new_invoice->setAutoConfirmOtherMeeting($request->request->get('autoConfirmOtherMeeting', 0));
  3085.                             $new_invoice->setAutoClaimPurchasedCards($request->request->get('autoClaimPurchasedCards', 0));
  3086.                             $new_invoice->setIsPayment(0); //0 means receive
  3087.                             $new_invoice->setStatus(GeneralConstant::ACTIVE); //0 means receive
  3088.                             $new_invoice->setStage(BuddybeeConstant::ENTITY_INVOICE_STAGE_INITIATED); //0 means receive
  3090.                             if ($bookingExpireTs == 0) {
  3092.                                 $bookingExpireTime = new \DateTime();
  3093.                                 $bookingExpireTime->modify('+30 day');
  3094.                                 $bookingExpireTs = $bookingExpireTime->format('U');
  3095.                             }
  3098.                             $new_invoice->setExpireIfUnpaidTs($bookingExpireTs);
  3099.                             $new_invoice->setBookingExpireTs($bookingExpireTs);
  3100.                             $new_invoice->setConfirmationExpireTs($bookingExpireTs);
  3102. //            $new_invoice->setStatus($request->request->get(0));
  3104.                             $em_goc->persist($new_invoice);
  3105.                             $em_goc->flush();
  3106.                         }
  3109.                         $invoiceId = $new_invoice->getId();
  3110.                         $gatewayInvoice = $new_invoice;
  3113.                         if ($request->request->get('isRecharge', 0) == 1) {
  3115.                         } else {
  3117.                             if ($gatewayAmount <= 0) {
  3118.                                 $meetingId = 0;
  3120.                                 if ($invoiceId != 0) {
  3122.                                     $retData = Buddybee::ProcessEntityInvoice($em_goc, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], $this->container->getParameter('kernel.root_dir'), false,
  3123.                                         $this->container->getParameter('notification_enabled'),
  3124.                                         $this->container->getParameter('notification_server')
  3125.                                     );
  3127.                                     $meetingId = $retData['meetingId'];
  3130.                                 }
  3132.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3133.                                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  3134.                                     $billerDetails = [];
  3135.                                     $billToDetails = [];
  3137.                                     $invoice = $gatewayInvoice;
  3138.                                     if ($invoice) {
  3139.                                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3140.                                             ->findOneBy(
  3141.                                                 array(
  3142.                                                     'applicantId' => $invoice->getBillerId(),
  3144.                                                 )
  3145.                                             );
  3146.                                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3147.                                             ->findOneBy(
  3148.                                                 array(
  3149.                                                     'applicantId' => $invoice->getBillToId(),
  3151.                                                 )
  3152.                                             );
  3154.                                     }
  3156.                                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  3157.                                     $bodyData = array(
  3158.                                         'page_title' => 'Invoice',
  3159. //            'studentDetails' => $student,
  3160.                                         'billerDetails' => $billerDetails,
  3161.                                         'billToDetails' => $billToDetails,
  3162.                                         'invoice' => $invoice,
  3163.                                         'currencyList' => BuddybeeConstant::$currency_List,
  3164.                                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  3167.                                     );
  3168.                                     $attachments = [];
  3169.                                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  3172. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  3173.                                     $new_mail = $this->get('mail_module');
  3174.                                     $new_mail->sendMyMail(array(
  3175.                                         'senderHash' => '_CUSTOM_',
  3176.                                         //                        'senderHash'=>'_CUSTOM_',
  3177.                                         'forwardToMailAddress' => $forwardToMailAddress,
  3179.                                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  3181. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  3182.                                         'attachments' => $attachments,
  3183.                                         'toAddress' => $forwardToMailAddress,
  3184.                                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  3185.                                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  3186.                                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  3187.                                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  3188.                                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  3190. //                            'emailBody' => $bodyHtml,
  3191.                                         'mailTemplate' => $bodyTemplate,
  3192.                                         'templateData' => $bodyData,
  3193.                                         'embedCompanyImage' => 0,
  3194.                                         'companyId' => 0,
  3196.                                         'companyImagePath' => ''
  3197. //                        'embedCompanyImage' => 1,
  3198. //                        'companyId' => $companyId,
  3199. //                        'companyImagePath' => $company_data->getImage()
  3202.                                     ));
  3205.                                 }
  3207.                                 if ($meetingId != 0) {
  3208.                                     $url = $this->generateUrl(
  3209.                                         'consultancy_session'
  3210.                                     );
  3211.                                     $output = [
  3212.                                         'invoiceId' => $gatewayInvoice->getId(),
  3213.                                         'meetingId' => $meetingId,
  3215.                                         'proceedToCheckout' => 0,
  3216.                                         'redirectUrl' => $url . '/' . $meetingId
  3217.                                     ];
  3218.                                 } else {
  3219.                                     $url = $this->generateUrl(
  3220.                                         'buddybee_dashboard'
  3221.                                     );
  3222.                                     $output = [
  3223.                                         'invoiceId' => $gatewayInvoice->getId(),
  3224.                                         'meetingId' => 0,
  3226.                                         'proceedToCheckout' => 0,
  3227.                                         'redirectUrl' => $url
  3228.                                     ];
  3229.                                 }
  3230.                                 return new JsonResponse($output);
  3231. //                return $this->redirect($url);
  3232.                             } else {
  3234.                             }
  3235. //                $url = $this->generateUrl(
  3236. //                    'checkout_page'
  3237. //                );
  3238. //
  3239. //                return $this->redirect($url."?meetingSessionId=".$new->getSessionId().'&invoiceId='.$invoiceId);
  3240.                         }
  3243.                     }
  3244.                 } else {
  3245.                     $url = $this->generateUrl(
  3246.                         'user_login'
  3247.                     );
  3249.                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $this->generateUrl(
  3250.                         'pricing_plan_page', [
  3251.                         'autoRedirected' => 1
  3252.                     ],
  3253.                         UrlGenerator::ABSOLUTE_URL
  3254.                     ));
  3256.                     $output = [
  3258.                         'proceedToCheckout' => 0,
  3259.                         'redirectUrl' => $url,
  3260.                         'clearLs' => 0
  3261.                     ];
  3262.                     return new JsonResponse($output);
  3263.                 }
  3266.                 //now proceed to checkout page if the user has lower balance or recharging
  3269.                 //$invoiceDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->
  3272.             }
  3273.         }
  3274.         if ($gatewayInvoice) {
  3277.             $gatewayProductData = json_decode($gatewayInvoice->getProductDataForPaymentGateway(), true);
  3278.             if ($gatewayProductData == null) $gatewayProductData = [];
  3279.             if (empty($gatewayProductData))
  3280.                 $gatewayProductData = [
  3281.                     [
  3282.                         'price_data' => [
  3283.                             'currency' => 'eur',
  3284.                             'unit_amount' => $gatewayAmount != 0 ? (100 * $gatewayAmount) : 200000,
  3285.                             'product_data' => [
  3286. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  3287.                                 'name' => 'Bee Coins',
  3288.                                 'images' => [$imageBySessionCount[0]],
  3289.                             ],
  3290.                         ],
  3291.                         'quantity' => 1,
  3292.                     ]
  3293.                 ];
  3295.             $productDescStr = '';
  3296.             $productDescArr = [];
  3297.             foreach ($gatewayProductData as $gpd) {
  3298.                 $productDescArr[] = $gpd['price_data']['product_data']['name'];
  3299.             }
  3300.             $productDescStr = implode(',', $productDescArr);
  3301.             $paymentGatewayFromInvoice = $gatewayInvoice->getAmountTransferGateWayHash();
  3302. //            return new JsonResponse(
  3303. //                [
  3304. //                    'paymentGateway' => $paymentGatewayFromInvoice,
  3305. //                    'gateWayData' => $gatewayProductData[0]
  3306. //                ]
  3307. //            );
  3308.             if ($paymentGateway == null) $paymentGatewayFromInvoice = 'stripe';
  3310.             if ($paymentGatewayFromInvoice == 'stripe' || $paymentGatewayFromInvoice == 'aamarpay' || $paymentGatewayFromInvoice == 'bkash') {
  3311.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  3312.                     $billerDetails = [];
  3313.                     $billToDetails = [];
  3315.                     $invoice = $gatewayInvoice;
  3316.                     if ($invoice) {
  3317.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3318.                             ->findOneBy(
  3319.                                 array(
  3320.                                     'applicantId' => $invoice->getBillerId(),
  3322.                                 )
  3323.                             );
  3324.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3325.                             ->findOneBy(
  3326.                                 array(
  3327.                                     'applicantId' => $invoice->getBillToId(),
  3329.                                 )
  3330.                             );
  3332.                     }
  3334.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  3335.                     $bodyData = array(
  3336.                         'page_title' => 'Invoice',
  3337. //            'studentDetails' => $student,
  3338.                         'billerDetails' => $billerDetails,
  3339.                         'billToDetails' => $billToDetails,
  3340.                         'invoice' => $invoice,
  3341.                         'currencyList' => BuddybeeConstant::$currency_List,
  3342.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  3345.                     );
  3346.                     $attachments = [];
  3347.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  3350. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  3351.                     $new_mail = $this->get('mail_module');
  3352.                     $new_mail->sendMyMail(array(
  3353.                         'senderHash' => '_CUSTOM_',
  3354.                         //                        'senderHash'=>'_CUSTOM_',
  3355.                         'forwardToMailAddress' => $forwardToMailAddress,
  3357.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  3359. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  3360.                         'attachments' => $attachments,
  3361.                         'toAddress' => $forwardToMailAddress,
  3362.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  3363.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  3364.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  3365.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  3366.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  3368. //                            'emailBody' => $bodyHtml,
  3369.                         'mailTemplate' => $bodyTemplate,
  3370.                         'templateData' => $bodyData,
  3371.                         'embedCompanyImage' => 0,
  3372.                         'companyId' => 0,
  3374.                         'companyImagePath' => ''
  3375. //                        'embedCompanyImage' => 1,
  3376. //                        'companyId' => $companyId,
  3377. //                        'companyImagePath' => $company_data->getImage()
  3380.                     ));
  3383.                 }
  3384.             }
  3386.             if ($paymentGatewayFromInvoice == 'stripe') {
  3387.                 $stripe = new \Stripe\Stripe();
  3388.                 \Stripe\Stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  3390.                 $stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  3391.                 {
  3392.                     if ($request->query->has('meetingSessionId'))
  3393.                         $id = $request->query->get('meetingSessionId');
  3394.                 }
  3396.                 $paymentIntent = [
  3397.                     "id" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs",
  3398.                     "object" => "payment_intent",
  3399.                     "amount" => 3000,
  3400.                     "amount_capturable" => 0,
  3401.                     "amount_received" => 0,
  3402.                     "application" => null,
  3403.                     "application_fee_amount" => null,
  3404.                     "canceled_at" => null,
  3405.                     "cancellation_reason" => null,
  3406.                     "capture_method" => "automatic",
  3407.                     "charges" => [
  3408.                         "object" => "list",
  3409.                         "data" => [],
  3410.                         "has_more" => false,
  3411.                         "url" => "/v1/charges?payment_intent=pi_1DoWjK2eZvKYlo2Csy9J3BHs"
  3412.                     ],
  3413.                     "client_secret" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs_secret_vmxAcWZxo2kt1XhpWtZtnjDtd",
  3414.                     "confirmation_method" => "automatic",
  3415.                     "created" => 1546523966,
  3416.                     "currency" => $currencyForGateway,
  3417.                     "customer" => null,
  3418.                     "description" => null,
  3419.                     "invoice" => null,
  3420.                     "last_payment_error" => null,
  3421.                     "livemode" => false,
  3422.                     "metadata" => [],
  3423.                     "next_action" => null,
  3424.                     "on_behalf_of" => null,
  3425.                     "payment_method" => null,
  3426.                     "payment_method_options" => [],
  3427.                     "payment_method_types" => [
  3428.                         "card"
  3429.                     ],
  3430.                     "receipt_email" => null,
  3431.                     "review" => null,
  3432.                     "setup_future_usage" => null,
  3433.                     "shipping" => null,
  3434.                     "statement_descriptor" => null,
  3435.                     "statement_descriptor_suffix" => null,
  3436.                     "status" => "requires_payment_method",
  3437.                     "transfer_data" => null,
  3438.                     "transfer_group" => null
  3439.                 ];
  3442.                 $checkout_session = \Stripe\Checkout\Session::create([
  3443.                     'payment_method_types' => ['card'],
  3444.                     'line_items' => $gatewayProductData,
  3445.                     'mode' => 'payment',
  3446.                     'success_url' => $this->generateUrl(
  3447.                         'payment_gateway_success',
  3448.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  3449.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  3450.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3451.                     ),
  3452.                     'cancel_url' => $this->generateUrl(
  3453.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3454.                     ),
  3455.                 ]);
  3456.                 $output = [
  3457.                     'clientSecret' => $paymentIntent['client_secret'],
  3458.                     'id' => $checkout_session->id,
  3459.                     'paymentGateway' => $paymentGatewayFromInvoice,
  3460.                     'proceedToCheckout' => 1
  3461.                 ];
  3462.                 return new JsonResponse($output);
  3463.             }
  3464.             if ($paymentGatewayFromInvoice == 'aamarpay') {
  3466.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  3469.                 $url = $sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/request.php' : 'https://secure.aamarpay.com/request.php';
  3470.                 $fields = array(
  3471. //                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  3472.                     'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  3473.                     'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  3474.                     'payment_type' => 'VISA', //no need to change
  3475.                     'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  3476.                     'tran_id' => $gatewayInvoice->getDocumentHash(), //transaction id must be unique from your end
  3477.                     'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  3478.                     'cus_email' => $studentDetails->getEmail(), //customer email address
  3479.                     'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  3480.                     'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  3481.                     'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  3482.                     'cus_state' => $studentDetails->getCurrAddrState(),  //state
  3483.                     'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  3484.                     'cus_country' => 'Bangladesh',  //country
  3485.                     'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  3486.                     'cus_fax' => '',  //fax
  3487.                     'ship_name' => '', //ship name
  3488.                     'ship_add1' => '',  //ship address
  3489.                     'ship_add2' => '',
  3490.                     'ship_city' => '',
  3491.                     'ship_state' => '',
  3492.                     'ship_postcode' => '',
  3493.                     'ship_country' => 'Bangladesh',
  3494.                     'desc' => $productDescStr,
  3495.                     'success_url' => $this->generateUrl(
  3496.                         'payment_gateway_success',
  3497.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  3498.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  3499.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3500.                     ),
  3501.                     'fail_url' => $this->generateUrl(
  3502.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3503.                     ),
  3504.                     'cancel_url' => $this->generateUrl(
  3505.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3506.                     ),
  3507. //                    'opt_a' => 'Reshad',  //optional paramter
  3508. //                    'opt_b' => 'Akil',
  3509. //                    'opt_c' => 'Liza',
  3510. //                    'opt_d' => 'Sohel',
  3511. //                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  3512.                     'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  3514.                 ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  3516.                 $fields_string = http_build_query($fields);
  3518. //                $ch = curl_init();
  3519. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  3520. //                curl_setopt($ch, CURLOPT_URL, $url);
  3521. //
  3522. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  3523. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  3524. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  3525. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  3526. //                curl_close($ch);
  3528. //                $this->redirect_to_merchant($url_forward);
  3530.                 $output = [
  3532. //
  3533. //                    'redirectUrl' => ($sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/' : 'https://secure.aamarpay.com/') . $url_forward, //keeping it off temporarily
  3534. //                    'fields'=>$fields,
  3535. //                    'fields_string'=>$fields_string,
  3537. //                    'redirectUrl' => $this->generateUrl(
  3538. //                        'payment_gateway_success',
  3539. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  3540. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  3541. //                        ))), 'hbeeSessionToken' => $request->request->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3542. //                    ),
  3543.                     'paymentGateway' => $paymentGatewayFromInvoice,
  3544.                     'proceedToCheckout' => 1,
  3545.                     'data' => $fields
  3546.                 ];
  3547.                 return new JsonResponse($output);
  3548.             } else if ($paymentGatewayFromInvoice == 'bkash') {
  3550.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  3552.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  3553.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  3554.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  3555.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  3556.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  3559.                 $request_data = array(
  3560.                     'app_key' => $app_key_value,
  3561.                     'app_secret' => $app_secret_value
  3562.                 );
  3563.                 $url = curl_init($baseUrl . '/tokenized/checkout/token/grant');
  3564.                 $request_data_json = json_encode($request_data);
  3565.                 $header = array(
  3566.                     'Content-Type:application/json',
  3567.                     'username:' . $username_value,
  3568.                     'password:' . $password_value
  3569.                 );
  3570.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  3571.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  3572.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  3573.                 curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  3574.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  3575.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  3577.                 $tokenData = json_decode(curl_exec($url), true);
  3578.                 curl_close($url);
  3580.                 $id_token = $tokenData['id_token'];
  3581.                 $goToBkashPage = 0;
  3582.                 if ($tokenData['statusCode'] == '0000') {
  3583.                     $auth = $id_token;
  3586.                     $requestbody = array(
  3587.                         "mode" => "0011",
  3588. //                        "payerReference" => "01723888888",
  3589.                         "payerReference" => $invoiceDate->format('U'),
  3590.                         "callbackURL" => $this->generateUrl(
  3591.                             'bkash_callback', [], UrlGenerator::ABSOLUTE_URL
  3592.                         ),
  3593. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  3594.                         "amount" => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  3595.                         "currency" => "BDT",
  3596.                         "intent" => "sale",
  3597.                         "merchantInvoiceNumber" => $invoiceId
  3598.                     );
  3599.                     $url = curl_init($baseUrl . '/tokenized/checkout/create');
  3600.                     $requestbodyJson = json_encode($requestbody);
  3602.                     $header = array(
  3603.                         'Content-Type:application/json',
  3604.                         'Authorization:' . $auth,
  3605.                         'X-APP-Key:' . $app_key_value
  3606.                     );
  3608.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  3609.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  3610.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  3611.                     curl_setopt($url, CURLOPT_POSTFIELDS, $requestbodyJson);
  3612.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  3613.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  3614.                     $resultdata = curl_exec($url);
  3615. //                    curl_close($url);
  3616. //                    echo $resultdata;
  3618.                     $obj = json_decode($resultdata, true);
  3621.                     $goToBkashPage = 1;
  3624.                     $justNow = new \DateTime();
  3625.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  3626.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  3627.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  3628.                     $gatewayInvoice->setGatewayPaymentId($obj['paymentID']);
  3629.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  3630.                     $em->flush();
  3632.                     $output = [
  3634. //                        'redirectUrl' => $obj['bkashURL'],
  3636.                         'paymentGateway' => $paymentGatewayFromInvoice,
  3637.                         'proceedToCheckout' => $goToBkashPage,
  3638.                         'tokenData' => $tokenData,
  3639.                         'obj' => $obj,
  3640.                         'id_token' => $tokenData['id_token'],
  3641.                         'data' => [
  3642.                             'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  3643. //                            'payment_type' => 'VISA', //no need to change
  3644.                             'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  3645.                             'tran_id' => $gatewayInvoice->getDocumentHash(), //transaction id must be unique from your end
  3646.                             'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  3647.                             'cus_email' => $studentDetails->getEmail(), //customer email address
  3648.                             'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  3649.                             'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  3650.                             'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  3651.                             'cus_state' => $studentDetails->getCurrAddrState(),  //state
  3652.                             'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  3653.                             'cus_country' => 'Bangladesh',  //country
  3654.                             'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  3655.                             'cus_fax' => '',  //fax
  3656.                             'ship_name' => '', //ship name
  3657.                             'ship_add1' => '',  //ship address
  3658.                             'ship_add2' => '',
  3659.                             'ship_city' => '',
  3660.                             'ship_state' => '',
  3661.                             'ship_postcode' => '',
  3662.                             'ship_country' => 'Bangladesh',
  3663.                             'desc' => $productDescStr,
  3664.                         ]
  3666.                     ];
  3667.                     return new JsonResponse($output);
  3669.                 }
  3672. //                $fields = array(
  3673. //
  3674. //                    "mode" => "0011",
  3675. //                    "payerReference" => "01723888888",
  3676. //                    "callbackURL" => $this->generateUrl(
  3677. //                        'payment_gateway_success',
  3678. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  3679. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  3680. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3681. //                    ),
  3682. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  3683. //                    "amount" => 1*number_format($gatewayInvoice->getGateWayBillamount(),2,'.',''),,
  3684. //                    "currency" => "BDT",
  3685. //                    "intent" => "sale",
  3686. //                    "merchantInvoiceNumber" => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT)
  3687. //
  3688. //                );
  3689. //                $fields = array(
  3690. ////                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  3691. //                    'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  3692. //                    'amount' => 1*number_format($gatewayInvoice->getGateWayBillamount(),2,'.',''),, //transaction amount
  3693. //                    'payment_type' => 'VISA', //no need to change
  3694. //                    'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  3695. //                    'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  3696. //                    'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  3697. //                    'cus_email' => $studentDetails->getEmail(), //customer email address
  3698. //                    'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  3699. //                    'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  3700. //                    'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  3701. //                    'cus_state' => $studentDetails->getCurrAddrState(),  //state
  3702. //                    'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  3703. //                    'cus_country' => 'Bangladesh',  //country
  3704. //                    'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? ' + 8801911706483' : $studentDetails->getPhone(), //customer phone number
  3705. //                    'cus_fax' => '',  //fax
  3706. //                    'ship_name' => '', //ship name
  3707. //                    'ship_add1' => '',  //ship address
  3708. //                    'ship_add2' => '',
  3709. //                    'ship_city' => '',
  3710. //                    'ship_state' => '',
  3711. //                    'ship_postcode' => '',
  3712. //                    'ship_country' => 'Bangladesh',
  3713. //                    'desc' => $productDescStr,
  3714. //                    'success_url' => $this->generateUrl(
  3715. //                        'payment_gateway_success',
  3716. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  3717. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  3718. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3719. //                    ),
  3720. //                    'fail_url' => $this->generateUrl(
  3721. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3722. //                    ),
  3723. //                    'cancel_url' => $this->generateUrl(
  3724. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  3725. //                    ),
  3726. ////                    'opt_a' => 'Reshad',  //optional paramter
  3727. ////                    'opt_b' => 'Akil',
  3728. ////                    'opt_c' => 'Liza',
  3729. ////                    'opt_d' => 'Sohel',
  3730. ////                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  3731. //                    'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  3732. //
  3733. //                ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  3734. //
  3735. //                $fields_string = http_build_query($fields);
  3736. //
  3737. //                $ch = curl_init();
  3738. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  3739. //                curl_setopt($ch, CURLOPT_URL, $url);
  3740. //
  3741. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  3742. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  3743. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  3744. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  3745. //                curl_close($ch);
  3747. //                $this->redirect_to_merchant($url_forward);
  3750.             } else if ($paymentGatewayFromInvoice == 'onsite_pos' || $paymentGatewayFromInvoice == 'onsite_cash' || $paymentGatewayFromInvoice == 'onsite_bkash') {
  3751.                 $meetingId = 0;
  3753.                 if ($gatewayInvoice->getId() != 0) {
  3754.                     if ($gatewayInvoice->getDueAmount() <= 0) {
  3756.                         $retData = Buddybee::ProcessEntityInvoice($em_goc, $gatewayInvoice->getId(), ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], $this->container->getParameter('kernel.root_dir'), false,
  3757.                             $this->container->getParameter('notification_enabled'),
  3758.                             $this->container->getParameter('notification_server')
  3759.                         );
  3761.                         $meetingId = $retData['meetingId'];
  3762.                     }
  3764.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  3765.                         $billerDetails = [];
  3766.                         $billToDetails = [];
  3768.                         $invoice = $gatewayInvoice;
  3769.                         if ($invoice) {
  3770.                             $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3771.                                 ->findOneBy(
  3772.                                     array(
  3773.                                         'applicantId' => $invoice->getBillerId(),
  3775.                                     )
  3776.                                 );
  3777.                             $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3778.                                 ->findOneBy(
  3779.                                     array(
  3780.                                         'applicantId' => $invoice->getBillToId(),
  3782.                                     )
  3783.                                 );
  3785.                         }
  3787.                         $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  3788.                         $bodyData = array(
  3789.                             'page_title' => 'Invoice',
  3790. //            'studentDetails' => $student,
  3791.                             'billerDetails' => $billerDetails,
  3792.                             'billToDetails' => $billToDetails,
  3793.                             'invoice' => $invoice,
  3794.                             'currencyList' => BuddybeeConstant::$currency_List,
  3795.                             'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  3798.                         );
  3799.                         $attachments = [];
  3800.                         $forwardToMailAddress = $billToDetails->getOAuthEmail();
  3803. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  3804.                         $new_mail = $this->get('mail_module');
  3805.                         $new_mail->sendMyMail(array(
  3806.                             'senderHash' => '_CUSTOM_',
  3807.                             //                        'senderHash'=>'_CUSTOM_',
  3808.                             'forwardToMailAddress' => $forwardToMailAddress,
  3810.                             'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  3812. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  3813.                             'attachments' => $attachments,
  3814.                             'toAddress' => $forwardToMailAddress,
  3815.                             'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  3816.                             'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  3817.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  3818.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  3819.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  3821. //                            'emailBody' => $bodyHtml,
  3822.                             'mailTemplate' => $bodyTemplate,
  3823.                             'templateData' => $bodyData,
  3824.                             'embedCompanyImage' => 0,
  3825.                             'companyId' => 0,
  3827.                             'companyImagePath' => ''
  3828. //                        'embedCompanyImage' => 1,
  3829. //                        'companyId' => $companyId,
  3830. //                        'companyImagePath' => $company_data->getImage()
  3833.                         ));
  3836.                     }
  3839.                 }
  3841.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3843.                 if ($meetingId != 0) {
  3844.                     $url = $this->generateUrl(
  3845.                         'consultancy_session'
  3846.                     );
  3847.                     $output = [
  3849.                         'proceedToCheckout' => 0,
  3850.                         'invoiceId' => $gatewayInvoice->getId(),
  3851.                         'meetingId' => $meetingId,
  3852.                         'redirectUrl' => $url . '/' . $meetingId
  3853.                     ];
  3854.                 } else {
  3855.                     $url = $this->generateUrl(
  3856.                         'buddybee_dashboard'
  3857.                     );
  3858.                     $output = [
  3860.                         'proceedToCheckout' => 0,
  3861.                         'invoiceId' => $gatewayInvoice->getId(),
  3862.                         'meetingId' => $meetingId,
  3863.                         'redirectUrl' => $url
  3864.                     ];
  3865.                 }
  3866.                 return new JsonResponse($output);
  3869.             }
  3871.         }
  3872.         $output = [
  3873.             'clientSecret' => 0,
  3874.             'id' => 0,
  3875.             'proceedToCheckout' => 0
  3876.         ];
  3877.         return new JsonResponse($output);
  3878. //        return $this->render('ApplicationBundle:pages/stripe:checkout.html.twig', array(
  3879. //            'page_title' => 'Checkout',
  3880. ////            'stripe' => $stripe,
  3881. //            'stripe' => null,
  3882. ////            'PaymentIntent' => $paymentIntent,
  3883. //
  3884. ////            'consultantDetail' => $consultantDetail,
  3885. ////            'consultantDetails'=> $consultantDetails,
  3886. ////
  3887. ////            'meetingSession' => $meetingSession,
  3888. ////            'packageDetails' => json_decode($meetingSession->getPcakageDetails(),true),
  3889. ////            'packageName' => json_decode($meetingSession->getPackageName(),true),
  3890. ////            'pay' => $payableAmount,
  3891. ////            'balance' => $currStudentBal
  3892. //        ));
  3893.     }
  3895.     public function PaymentGatewaySuccessAction(Request $request, $encData = '')
  3896.     {
  3897.         $em = $this->getDoctrine()->getManager('company_group');
  3898.         $invoiceId = 0;
  3899.         $autoRedirect = 1;
  3900.         $redirectUrl = '';
  3901.         $meetingId = 0;
  3902.         $setupOnly = 0;
  3903.         $appId = 0;
  3904.         $ownerId = 0;
  3905.         $activationPending = 0;
  3906.         $ownerSyncResult = null;
  3908.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  3910.         if ($systemType == '_CENTRAL_') {
  3913.             if ($encData != '') {
  3914.                 $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  3915.                 if (isset($encryptedData['invoiceId']))
  3916.                     $invoiceId = $encryptedData['invoiceId'];
  3917.                 if (isset($encryptedData['autoRedirect']))
  3918.                     $autoRedirect = $encryptedData['autoRedirect'];
  3919.                 if (isset($encryptedData['setupOnly']))
  3920.                     $setupOnly = (int)$encryptedData['setupOnly'];
  3921.                 if (isset($encryptedData['appId']))
  3922.                     $appId = (int)$encryptedData['appId'];
  3923.                 if (isset($encryptedData['ownerId']))
  3924.                     $ownerId = (int)$encryptedData['ownerId'];
  3925.                 if (isset($encryptedData['redirectUrl']))
  3926.                     $redirectUrl = $encryptedData['redirectUrl'];
  3927.             } else {
  3928.                 $invoiceId = $request->query->get('invoiceId', 0);
  3930.                 $meetingId = 0;
  3931.                 $autoRedirect = $request->query->get('autoRedirect', 1);
  3932.                 $redirectUrl = $request->query->get('redirectUrl', '');
  3933.                 $setupOnly = (int)$request->query->get('setupOnly', 0);
  3934.                 $appId = (int)$request->query->get('appId', 0);
  3935.                 $ownerId = (int)$request->query->get('ownerId', 0);
  3936.             }
  3938.             if ($setupOnly === 1) {
  3939.                 $sessionId = $request->query->get('session_id');
  3940.                 if (!$sessionId) {
  3941.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  3942.                         'page_title' => 'Failed',
  3943.                     ));
  3944.                 }
  3946.                 $stripeSession = \Stripe\Checkout\Session::retrieve($sessionId);
  3947.                 if (!$stripeSession || !$stripeSession->setup_intent) {
  3948.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  3949.                         'page_title' => 'Failed',
  3950.                     ));
  3951.                 }
  3953.                 $setupIntent = \Stripe\SetupIntent::retrieve($stripeSession->setup_intent);
  3954.                 if ($setupIntent->status !== 'succeeded') {
  3955.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  3956.                         'page_title' => 'Failed',
  3957.                     ));
  3958.                 }
  3960.                 $paymentMethodId = $setupIntent->payment_method;
  3961.                 $customerId = $setupIntent->customer;
  3963.                 if ($appId === 0 && isset($stripeSession->metadata['app_id'])) {
  3964.                     $appId = (int)$stripeSession->metadata['app_id'];
  3965.                 }
  3966.                 if ($ownerId === 0 && isset($stripeSession->metadata['owner_id'])) {
  3967.                     $ownerId = (int)$stripeSession->metadata['owner_id'];
  3968.                 }
  3969.                 if ($redirectUrl === '' && isset($stripeSession->metadata['redirect_url'])) {
  3970.                     $redirectUrl = $stripeSession->metadata['redirect_url'];
  3971.                 }
  3973.                 $companyGroup = null;
  3974.                 if ($appId !== 0) {
  3975.                     $companyGroup = $em
  3976.                         ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  3977.                         ->findOneBy([
  3978.                             'appId' => $appId
  3979.                         ]);
  3980.                 }
  3982.                 $existing = $em->getRepository(PaymentMethod::class)
  3983.                     ->findOneBy([
  3984.                         'stripePaymentMethodId' => $paymentMethodId,
  3985.                         'appId' => $appId
  3986.                     ]);
  3988.                 if (!$existing) {
  3989.                     if ($companyGroup && !$companyGroup->getStripeCustomerId()) {
  3990.                         $companyGroup->setStripeCustomerId($customerId);
  3991.                     }
  3993.                     $paymentMethod = new PaymentMethod();
  3994.                     $paymentMethod->setAppId($appId);
  3995.                     $paymentMethod->setApplicantId($ownerId);
  3996.                     $paymentMethod->setStripeCustomerId($customerId);
  3997.                     $paymentMethod->setStripePaymentMethodId($paymentMethodId);
  3998.                     $paymentMethod->setIsDefault(1);
  4000.                     $em->persist($paymentMethod);
  4001.                     $em->flush();
  4002.                 }
  4004.                 if ($companyGroup) {
  4005.                     $em->flush();
  4006.                 }
  4008.                 $redirectUrl = $redirectUrl !== '' ? $redirectUrl : $this->generateUrl(
  4009.                     'central_landing'
  4010.                 );
  4012.                 return $this->render('@Application/pages/stripe/success.html.twig', array(
  4013.                     'page_title' => 'Success',
  4014.                     'meetingId' => 0,
  4015.                     'autoRedirect' => 0,
  4016.                     'redirectUrl' => $redirectUrl,
  4017.                     'initiateCompany' => 1,
  4018.                     'appId' => $appId,
  4019.                     'ownerId' => $ownerId,
  4020.                     'setupOnly' => 1,
  4021.                 ));
  4022.             }
  4024.             if ($invoiceId != 0) {
  4025.                 $invoice = $em
  4026.                     ->getRepository("CompanyGroupBundle\\Entity\\EntityInvoice")
  4027.                     ->findOneBy([
  4028.                         'id' => $invoiceId
  4029.                     ]);
  4031.                 if($invoice->getAmountTransferGateWayHash() == 'stripe') {
  4034.                     $stripeSession = \Stripe\Checkout\Session::retrieve($request->query->get('session_id'));
  4036.                     $paymentIntent = \Stripe\PaymentIntent::retrieve($stripeSession->payment_intent);
  4037.                     if ($paymentIntent->status !== 'succeeded') {
  4039.                         return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4040.                             'page_title' => 'Failed',
  4043.                         ));
  4044.                     }
  4046.                     $paymentMethodId = $paymentIntent->payment_method;
  4047.                     $customerId = $paymentIntent->customer;
  4049.                     $companyGroup = $this->get('app.quote_company_provisioning_service')
  4050.                         ->ensureCompanyForInvoice($invoice, $request->getSession(), $customerId);
  4054.                     if (!isset($companyGroup) || !$companyGroup) {
  4055.                         $companyGroup = $em
  4056.                             ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  4057.                             ->findOneBy([
  4058.                                 'appId' => $invoice->getAppId()
  4059.                             ]);
  4060.                     }
  4062.                     $existing = $em->getRepository(PaymentMethod::class)
  4063.                         ->findOneBy([
  4064.                             'stripePaymentMethodId' => $paymentMethodId
  4065.                         ]);
  4067.                     if (!$existing) {
  4068.                         if ($companyGroup) {
  4070.                             // save customer id (safety)
  4071.                             if (!$companyGroup->getStripeCustomerId()) {
  4072.                                 $companyGroup->setStripeCustomerId($customerId);
  4073.                             }
  4075.                             // save payment method
  4076.                             $paymentMethod = new PaymentMethod(); // your entity
  4078.                             $paymentMethod->setAppId($companyGroup->getAppId());;
  4079.                             $paymentMethod->setApplicantId($invoice->getApplicantId());
  4080.                             $paymentMethod->setStripeCustomerId($customerId);
  4081.                             $paymentMethod->setStripePaymentMethodId($paymentMethodId);
  4082.                             $paymentMethod->setIsDefault(1);
  4084.                             $em->persist($paymentMethod);
  4086.                             $em->flush();
  4087.                         }
  4088.                     }
  4089.                 }
  4093.                 $retData = Buddybee::ProcessEntityInvoice($em, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED],
  4094.                     $this->container->getParameter('kernel.root_dir'),
  4095.                     false,
  4096.                     $this->container->getParameter('notification_enabled'),
  4097.                     $this->container->getParameter('notification_server')
  4098.                 );
  4099.                 if (($retData['initiateCompany'] ?? 0) == 1) {
  4100.                     $healthResult = $this->get('app.provisioning_health_service')->check($invoice, true);
  4101.                     if (!($healthResult['success'] ?? false)) {
  4102.                         $activationPending = 1;
  4103.                         $autoRedirect = 0;
  4104.                         $this->get('logger')->warning('Post-payment ERP health check needs attention.', [
  4105.                             'invoiceId' => (int)$invoice->getId(),
  4106.                             'appId' => (int)$invoice->getAppId(),
  4107.                             'errorCode' => $healthResult['errorCode'] ?? 'health_unverified',
  4108.                         ]);
  4109.                     }
  4110.                 }
  4111.                 $this->get('app.subscription_state_sync_service')->syncFromLegacyInvoice($invoice);
  4112.                 if (($retData['initiateCompany'] ?? 0) == 1) {
  4113.                     if (($retData['ownerId'] ?? 0) != 0) {
  4114.                         $ownerSyncResult = $this->get('app.post_payment_company_setup_service')
  4115.                             ->finalizeOwnerServerSync((int)$retData['ownerId'], (int)($retData['appId'] ?? 0), (int)$invoice->getId());
  4116.                     } else {
  4117.                         $ownerSyncResult = [
  4118.                             'success' => false,
  4119.                             'failedServerIds' => [],
  4120.                             'missingAppIds' => [(int)($retData['appId'] ?? 0)],
  4121.                         ];
  4122.                     }
  4124.                     if (!($ownerSyncResult['success'] ?? false)) {
  4125.                         $activationPending = 1;
  4126.                         $autoRedirect = 0;
  4127.                         $this->get('logger')->warning('Post-payment owner synchronization needs attention.', [
  4128.                             'ownerId' => (int)($retData['ownerId'] ?? 0),
  4129.                             'appId' => (int)($retData['appId'] ?? 0),
  4130.                             'failedServerIds' => $ownerSyncResult['failedServerIds'] ?? [],
  4131.                             'missingAppIds' => $ownerSyncResult['missingAppIds'] ?? [],
  4132.                         ]);
  4133.                     } else {
  4134.                         $readinessResult = $this->get('app.provisioning_health_service')->checkOwnerReadiness(
  4135.                             $invoice,
  4136.                             (int)$retData['ownerId'],
  4137.                             $ownerSyncResult,
  4138.                             true
  4139.                         );
  4140.                         if (!($readinessResult['ready'] ?? false)) {
  4141.                             $activationPending = 1;
  4142.                             $autoRedirect = 0;
  4143.                             $this->get('logger')->warning('Post-payment owner login health needs attention.', [
  4144.                                 'invoiceId' => (int)$invoice->getId(),
  4145.                                 'appId' => (int)($retData['appId'] ?? 0),
  4146.                                 'ownerId' => (int)$retData['ownerId'],
  4147.                                 'blocker' => $readinessResult['blocker'] ?? 'tenant_health_unverified',
  4148.                             ]);
  4149.                         } else {
  4150.                             // This second, owner-aware check is stronger than the
  4151.                             // earlier initialization check and may safely clear a
  4152.                             // transient initialization-pending result.
  4153.                             $activationPending = 0;
  4154.                         }
  4155.                     }
  4156.                 }
  4158.                 if ($retData['sendCards'] == 1) {
  4159.                     $cardList = array();
  4161.                     $cards = $em->getRepository('CompanyGroupBundle\\Entity\\BeeCode')
  4162.                         ->findBy(
  4163.                             array(
  4164.                                 'id' => $retData['cardIds']
  4165.                             )
  4166.                         );
  4168.                     foreach ($cards as $card) {
  4169.                         $cardList[] = array(
  4170.                             'id' => $card->getId(),
  4171.                             'printed' => $card->getPrinted(),
  4172.                             'amount' => $card->getAmount(),
  4173.                             'coinCount' => $card->getCoinCount(),
  4174.                             'pin' => $card->getPin(),
  4175.                             'serial' => $card->getSerial(),
  4177.                         );
  4178.                     }
  4179.                     $receiverEmail = $retData['receiverEmail'];
  4180.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  4183.                         $bodyHtml = '';
  4184.                         $bodyTemplate = '@Application/email/templates/beeCodeDigitalDelivery.html.twig';
  4185.                         $bodyData = array(
  4186.                             'cardList' => $cardList,
  4187. //                        'name' => $newApplicant->getFirstname() . ' ' . $newApplicant->getLastname(),
  4188. //                        'email' => $userName,
  4189. //                        'password' => $newApplicant->getPassword(),
  4190.                         );
  4191.                         $attachments = [];
  4192.                         $forwardToMailAddress = $receiverEmail;
  4195. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4196.                         $new_mail = $this->get('mail_module');
  4197.                         $new_mail->sendMyMail(array(
  4198.                             'senderHash' => '_CUSTOM_',
  4199.                             //                        'senderHash'=>'_CUSTOM_',
  4200.                             'forwardToMailAddress' => $forwardToMailAddress,
  4202.                             'subject' => 'Digital Bee Card Delivery',
  4204. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4205.                             'attachments' => $attachments,
  4206.                             'toAddress' => $forwardToMailAddress,
  4207.                             'fromAddress' => 'delivery@buddybee.eu',
  4208.                             'userName' => 'delivery@buddybee.eu',
  4209.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4210.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4211.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4212. //                        'encryptionMethod' => 'tls',
  4213.                             'encryptionMethod' => 'ssl',
  4214. //                            'emailBody' => $bodyHtml,
  4215.                             'mailTemplate' => $bodyTemplate,
  4216.                             'templateData' => $bodyData,
  4217. //                        'embedCompanyImage' => 1,
  4218. //                        'companyId' => $companyId,
  4219. //                        'companyImagePath' => $company_data->getImage()
  4222.                         ));
  4224.                         foreach ($cards as $card) {
  4225.                             $card->setPrinted(1);
  4226.                         }
  4227.                         $em->flush();
  4230.                     }
  4232.                     return new JsonResponse(
  4233.                         array(
  4234.                             'success' => true
  4235.                         )
  4236.                     );
  4239.                 }
  4242.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  4243.                 $meetingId = $retData['meetingId'];
  4244.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  4245.                     $billerDetails = [];
  4246.                     $billToDetails = [];
  4248.                     $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  4249.                         ->findOneBy(
  4250.                             array(
  4251.                                 'Id' => $invoiceId,
  4253.                             )
  4254.                         );;
  4255.                     if ($invoice) {
  4256.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4257.                             ->findOneBy(
  4258.                                 array(
  4259.                                     'applicantId' => $invoice->getBillerId(),
  4261.                                 )
  4262.                             );
  4263.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4264.                             ->findOneBy(
  4265.                                 array(
  4266.                                     'applicantId' => $invoice->getBillToId(),
  4268.                                 )
  4269.                             );
  4271.                     }
  4273.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  4274.                     $bodyData = array(
  4275.                         'page_title' => 'Invoice',
  4276. //            'studentDetails' => $student,
  4277.                         'billerDetails' => $billerDetails,
  4278.                         'billToDetails' => $billToDetails,
  4279.                         'invoice' => $invoice,
  4280.                         'currencyList' => BuddybeeConstant::$currency_List,
  4281.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  4284.                     );
  4285.                     $attachments = [];
  4286.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  4289. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4290.                     $new_mail = $this->get('mail_module');
  4291.                     $new_mail->sendMyMail(array(
  4292.                         'senderHash' => '_CUSTOM_',
  4293.                         //                        'senderHash'=>'_CUSTOM_',
  4294.                         'forwardToMailAddress' => $forwardToMailAddress,
  4296.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  4298. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4299.                         'attachments' => $attachments,
  4300.                         'toAddress' => $forwardToMailAddress,
  4301.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  4302.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  4303.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4304.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4305.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4307. //                            'emailBody' => $bodyHtml,
  4308.                         'mailTemplate' => $bodyTemplate,
  4309.                         'templateData' => $bodyData,
  4310.                         'embedCompanyImage' => 0,
  4311.                         'companyId' => 0,
  4313.                         'companyImagePath' => ''
  4314. //                        'embedCompanyImage' => 1,
  4315. //                        'companyId' => $companyId,
  4316. //                        'companyImagePath' => $company_data->getImage()
  4319.                     ));
  4322.                 }
  4323. //
  4324.                 if ($meetingId != 0) {
  4325.                     $url = $this->generateUrl(
  4326.                         'consultancy_session'
  4327.                     );
  4328. //                if($request->query->get('autoRedirect',1))
  4329. //                    return $this->redirect($url . '/' . $meetingId);
  4330.                     $redirectUrl = $url . '/' . $meetingId;
  4332.                 } else {
  4333.                     $url = $this->generateUrl(
  4334.                         'central_landing'
  4335.                     );
  4336. //                if($request->query->get('autoRedirect',1))
  4337. //                    return $this->redirect($url);
  4338.                     $redirectUrl = $url;
  4339.                     $autoRedirect=0;
  4341.                 }
  4343.                 if (($retData['initiateCompany'] ?? 0) == 1 && $activationPending === 0 && ($retData['appId'] ?? 0) != 0 && ($retData['ownerId'] ?? 0) != 0) {
  4344.                     $redirectUrl = $this->generateUrl('activation_center', ['invoice_id' => (int)$invoice->getId()]);
  4345.                     $autoRedirect = 1;
  4346.                 }
  4349.             }
  4350.             return $this->render('@Application/pages/stripe/success.html.twig', array(
  4351.                 'page_title' => 'Success',
  4352.                 'meetingId' => $meetingId,
  4353.                 'autoRedirect' => $autoRedirect,
  4354.                 'redirectUrl' => $redirectUrl,
  4355.                 'initiateCompany' => $retData['initiateCompany']??0,
  4356.                 'appId' => $retData['appId']??0,
  4357.                 'ownerId' => $retData['ownerId']??0,
  4358.                 'activationPending' => $activationPending,
  4359.                 'activationCenterUrl' => ($retData['initiateCompany'] ?? 0) == 1
  4360.                     ? $this->generateUrl('activation_center', ['invoice_id' => (int)$invoice->getId()])
  4361.                     : null,
  4363.             ));
  4364.         }
  4365.         else if ($systemType == '_BUDDYBEE_') {
  4368.             if ($encData != '') {
  4369.                 $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  4370.                 if (isset($encryptedData['invoiceId']))
  4371.                     $invoiceId = $encryptedData['invoiceId'];
  4372.                 if (isset($encryptedData['autoRedirect']))
  4373.                     $autoRedirect = $encryptedData['autoRedirect'];
  4374.             } else {
  4375.                 $invoiceId = $request->query->get('invoiceId', 0);
  4377.                 $meetingId = 0;
  4378.                 $autoRedirect = $request->query->get('autoRedirect', 1);
  4379.                 $redirectUrl = '';
  4380.             }
  4383.             if ($invoiceId != 0) {
  4385.                 $retData = Buddybee::ProcessEntityInvoice($em, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], false,
  4386.                     $this->container->getParameter('notification_enabled'),
  4387.                     $this->container->getParameter('notification_server')
  4388.                 );
  4390.                 if ($retData['sendCards'] == 1) {
  4391.                     $cardList = array();
  4393.                     $cards = $em->getRepository('CompanyGroupBundle\\Entity\\BeeCode')
  4394.                         ->findBy(
  4395.                             array(
  4396.                                 'id' => $retData['cardIds']
  4397.                             )
  4398.                         );
  4400.                     foreach ($cards as $card) {
  4401.                         $cardList[] = array(
  4402.                             'id' => $card->getId(),
  4403.                             'printed' => $card->getPrinted(),
  4404.                             'amount' => $card->getAmount(),
  4405.                             'coinCount' => $card->getCoinCount(),
  4406.                             'pin' => $card->getPin(),
  4407.                             'serial' => $card->getSerial(),
  4409.                         );
  4410.                     }
  4411.                     $receiverEmail = $retData['receiverEmail'];
  4412.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  4415.                         $bodyHtml = '';
  4416.                         $bodyTemplate = '@Application/email/templates/beeCodeDigitalDelivery.html.twig';
  4417.                         $bodyData = array(
  4418.                             'cardList' => $cardList,
  4419. //                        'name' => $newApplicant->getFirstname() . ' ' . $newApplicant->getLastname(),
  4420. //                        'email' => $userName,
  4421. //                        'password' => $newApplicant->getPassword(),
  4422.                         );
  4423.                         $attachments = [];
  4424.                         $forwardToMailAddress = $receiverEmail;
  4427. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4428.                         $new_mail = $this->get('mail_module');
  4429.                         $new_mail->sendMyMail(array(
  4430.                             'senderHash' => '_CUSTOM_',
  4431.                             //                        'senderHash'=>'_CUSTOM_',
  4432.                             'forwardToMailAddress' => $forwardToMailAddress,
  4434.                             'subject' => 'Digital Bee Card Delivery',
  4436. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4437.                             'attachments' => $attachments,
  4438.                             'toAddress' => $forwardToMailAddress,
  4439.                             'fromAddress' => 'delivery@buddybee.eu',
  4440.                             'userName' => 'delivery@buddybee.eu',
  4441.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4442.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4443.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4444. //                        'encryptionMethod' => 'tls',
  4445.                             'encryptionMethod' => 'ssl',
  4446. //                            'emailBody' => $bodyHtml,
  4447.                             'mailTemplate' => $bodyTemplate,
  4448.                             'templateData' => $bodyData,
  4449. //                        'embedCompanyImage' => 1,
  4450. //                        'companyId' => $companyId,
  4451. //                        'companyImagePath' => $company_data->getImage()
  4454.                         ));
  4456.                         foreach ($cards as $card) {
  4457.                             $card->setPrinted(1);
  4458.                         }
  4459.                         $em->flush();
  4462.                     }
  4464.                     return new JsonResponse(
  4465.                         array(
  4466.                             'success' => true
  4467.                         )
  4468.                     );
  4471.                 }
  4474.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  4475.                 $meetingId = $retData['meetingId'];
  4476.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  4477.                     $billerDetails = [];
  4478.                     $billToDetails = [];
  4480.                     $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  4481.                         ->findOneBy(
  4482.                             array(
  4483.                                 'Id' => $invoiceId,
  4485.                             )
  4486.                         );;
  4487.                     if ($invoice) {
  4488.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4489.                             ->findOneBy(
  4490.                                 array(
  4491.                                     'applicantId' => $invoice->getBillerId(),
  4493.                                 )
  4494.                             );
  4495.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4496.                             ->findOneBy(
  4497.                                 array(
  4498.                                     'applicantId' => $invoice->getBillToId(),
  4500.                                 )
  4501.                             );
  4503.                     }
  4505.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  4506.                     $bodyData = array(
  4507.                         'page_title' => 'Invoice',
  4508. //            'studentDetails' => $student,
  4509.                         'billerDetails' => $billerDetails,
  4510.                         'billToDetails' => $billToDetails,
  4511.                         'invoice' => $invoice,
  4512.                         'currencyList' => BuddybeeConstant::$currency_List,
  4513.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  4516.                     );
  4517.                     $attachments = [];
  4518.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  4521. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4522.                     $new_mail = $this->get('mail_module');
  4523.                     $new_mail->sendMyMail(array(
  4524.                         'senderHash' => '_CUSTOM_',
  4525.                         //                        'senderHash'=>'_CUSTOM_',
  4526.                         'forwardToMailAddress' => $forwardToMailAddress,
  4528.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  4530. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4531.                         'attachments' => $attachments,
  4532.                         'toAddress' => $forwardToMailAddress,
  4533.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  4534.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  4535.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4536.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4537.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4539. //                            'emailBody' => $bodyHtml,
  4540.                         'mailTemplate' => $bodyTemplate,
  4541.                         'templateData' => $bodyData,
  4542.                         'embedCompanyImage' => 0,
  4543.                         'companyId' => 0,
  4545.                         'companyImagePath' => ''
  4546. //                        'embedCompanyImage' => 1,
  4547. //                        'companyId' => $companyId,
  4548. //                        'companyImagePath' => $company_data->getImage()
  4551.                     ));
  4554.                 }
  4555. //
  4556.                 if ($meetingId != 0) {
  4557.                     $url = $this->generateUrl(
  4558.                         'consultancy_session'
  4559.                     );
  4560. //                if($request->query->get('autoRedirect',1))
  4561. //                    return $this->redirect($url . '/' . $meetingId);
  4562.                     $redirectUrl = $url . '/' . $meetingId;
  4564.                 } else {
  4565.                     $url = $this->generateUrl(
  4566.                         'buddybee_dashboard'
  4567.                     );
  4568. //                if($request->query->get('autoRedirect',1))
  4569. //                    return $this->redirect($url);
  4570.                     $redirectUrl = $url;
  4572.                 }
  4575.             }
  4576.             return $this->render('@Application/pages/stripe/success.html.twig', array(
  4577.                 'page_title' => 'Success',
  4578.                 'meetingId' => $meetingId,
  4579.                 'autoRedirect' => $autoRedirect,
  4580.                 'redirectUrl' => $redirectUrl,
  4582.             ));
  4583.         }
  4586.     }
  4588.     public function PaymentGatewayCancelAction(Request $request, $msg = 'The Payment was unsuccessful', $encData = '')
  4589.     {
  4590.         $em = $this->getDoctrine()->getManager('company_group');
  4591. //        $consultantDetail = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(array());
  4592.         $session = $request->getSession();
  4593.         if ($msg == '')
  4594.             $msg = $request->query->get('msg', $request->request->get('msg', 'The Payment was unsuccessful'));
  4597.         return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4598.             'page_title' => 'Success',
  4599.             'msg' => $msg,
  4601.         ));
  4602.     }
  4604.     public function BkashCallbackAction(Request $request, $encData = '')
  4605.     {
  4608.         $em = $this->getDoctrine()->getManager('company_group');
  4609.         $invoiceId = 0;
  4610.         $session = $request->getSession();
  4611.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  4613.         $paymentId = $request->query->get('paymentID', 0);
  4614.         $status = $request->query->get('status', 0);
  4616.         if ($status == 'success') {
  4617.             $paymentID = $paymentId;
  4618.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  4619.                 array(
  4620.                     'gatewayPaymentId' => $paymentId,
  4621.                     'isProcessed' => [0, 2]
  4623.                 ));
  4625.             if ($gatewayInvoice) {
  4626.                 $invoiceId = $gatewayInvoice->getId();
  4628.                 $justNow = new \DateTime();
  4630.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  4631.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  4632.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  4633.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  4634.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  4636.                 $justNowTs = $justNow->format('U');
  4637.                 if ($gatewayInvoice->getGatewayIdTokenExpireTs() <= $justNowTs) {
  4638.                     $refresh_token = $gatewayInvoice->getGatewayIdRefreshToken();
  4640.                     $request_data = array(
  4641.                         'app_key' => $app_key_value,
  4642.                         'app_secret' => $app_secret_value,
  4643.                         'refresh_token' => $refresh_token
  4644.                     );
  4645.                     $url = curl_init($baseUrl . '/tokenized/checkout/token/refresh');
  4647.                     $request_data_json = json_encode($request_data);
  4649.                     $header = array(
  4650.                         'Content-Type:application/json',
  4651.                         'username:' . $username_value,
  4652.                         'password:' . $password_value
  4653.                     );
  4654.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  4655.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  4656.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  4657.                     curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  4658.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  4659.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  4662.                     $tokenData = json_decode(curl_exec($url), true);
  4663.                     curl_close($url);
  4666.                     $justNow = new \DateTime();
  4667.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  4668.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  4669.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  4670.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  4671.                     $em->flush();
  4672.                 }
  4673.                 $auth = $gatewayInvoice->getGatewayIdToken();;
  4675.                 $post_token = array(
  4676.                     'paymentID' => $paymentID
  4677.                 );
  4678. //                $url = curl_init();
  4679.                 $url = curl_init($baseUrl . '/tokenized/checkout/execute');
  4680.                 $posttoken = json_encode($post_token);
  4682.                 $header = array(
  4683.                     'Content-Type:application/json',
  4684.                     'Authorization:' . $auth,
  4685.                     'X-APP-Key:' . $app_key_value
  4686.                 );
  4688. //                curl_setopt_array($url, array(
  4689. //                    CURLOPT_HTTPHEADER => $header,
  4690. //                    CURLOPT_RETURNTRANSFER => 1,
  4691. //                    CURLOPT_URL => $baseUrl . '/tokenized/checkout/execute',
  4692. //
  4693. //                    CURLOPT_FOLLOWLOCATION => 1,
  4694. //                    CURLOPT_POST => 1,
  4695. //                    CURLOPT_IPRESOLVE => CURL_IPRESOLVE_V4,
  4696. //                    CURLOPT_POSTFIELDS => http_build_query($post_token)
  4697. //                ));
  4699.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  4700.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  4701.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  4702.                 curl_setopt($url, CURLOPT_POSTFIELDS, $posttoken);
  4703.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  4704.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  4705.                 $resultdata = curl_exec($url);
  4706.                 curl_close($url);
  4707.                 $obj = json_decode($resultdata, true);
  4709. //                return new JsonResponse(array(
  4710. //                    'obj' => $obj,
  4711. //                    'url' => $baseUrl . '/tokenized/checkout/execute',
  4712. //                    'header' => $header,
  4713. //                    'paymentID' => $paymentID,
  4714. //                    'posttoken' => $posttoken,
  4715. //                ));
  4716. //                                return new JsonResponse($obj);
  4718.                 if (isset($obj['statusCode'])) {
  4720.                     if ($obj['statusCode'] == '0000') {
  4721.                         $gatewayInvoice->setGatewayTransId($obj['trxID']);
  4722.                         $em->flush();
  4723.                         return $this->redirectToRoute("payment_gateway_success", ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4724.                             'invoiceId' => $invoiceId, 'autoRedirect' => 1
  4725.                         ))),
  4726.                             'hbeeSessionToken' => $session->get('token', 0)]);
  4727.                     } else {
  4728.                         return $this->redirectToRoute("payment_gateway_cancel", [
  4729.                             'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'Payment Failed')
  4731.                         ]);
  4732.                     }
  4733.                 }
  4735.             } else {
  4736.                 return $this->redirectToRoute("payment_gateway_cancel", [
  4737.                     'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'Payment Failed')
  4739.                 ]);
  4740.             }
  4743.         } else {
  4744.             return $this->redirectToRoute("payment_gateway_cancel", [
  4745.                 'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'The Payment was unsuccessful')
  4747.             ]);
  4748.         }
  4751.     }
  4753.     public function MakePaymentOfEntityInvoiceAction(Request $request, $encData = '')
  4754.     {
  4755.         $em = $this->getDoctrine()->getManager('company_group');
  4756.         $em_goc = $em;
  4757.         $invoiceId = 0;
  4758.         $autoRedirect = 1;
  4759.         $redirectUrl = '';
  4760.         $meetingId = 0;
  4761.         $triggerMiddlePage = 0;
  4762.         $session = $request->getSession();
  4763.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  4766.         $refundSuccess = 0;
  4767.         $errorMsg = '';
  4768.         $errorCode = '';
  4771.         if ($encData != '') {
  4772.             $invoiceId = $encData;
  4773.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  4774.             if (isset($encryptedData['invoiceId']))
  4775.                 $invoiceId = $encryptedData['invoiceId'];
  4776.             if (isset($encryptedData['triggerMiddlePage']))
  4777.                 $triggerMiddlePage = $encryptedData['triggerMiddlePage'];
  4778.             if (isset($encryptedData['autoRedirect']))
  4779.                 $autoRedirect = $encryptedData['autoRedirect'];
  4780.         } else {
  4781.             $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  4782.             $triggerMiddlePage = $request->request->get('triggerMiddlePage', $request->query->get('triggerMiddlePage', 0));
  4784.             $meetingId = 0;
  4785.             $autoRedirect = $request->query->get('autoRedirect', 1);
  4786.             $redirectUrl = '';
  4787.         }
  4788.         $meetingId = $request->request->get('meetingId', $request->query->get('meetingId', 0));
  4790.         $actionDone = 0;
  4792.         if ($meetingId != 0) {
  4794.             $dt = Buddybee::ConfirmAnyMeetingSessionIfPossible($em, 0, $meetingId, false,
  4795.                 $this->container->getParameter('notification_enabled'),
  4796.                 $this->container->getParameter('notification_server'));
  4799.             if ($invoiceId == 0 && $dt['success'] == true) {
  4800.                 $actionDone = 1;
  4801.                 return new JsonResponse(array(
  4802.                     'clientSecret' => 0,
  4803.                     'actionDone' => $actionDone,
  4804.                     'id' => 0,
  4805.                     'proceedToCheckout' => 0
  4806.                 ));
  4807.             }
  4808.         }
  4811. //        $invoiceId = $request->request->get('meetingId', $request->query->get('meetingId', 0));
  4813.         $output = [
  4814.             'clientSecret' => 0,
  4815.             'id' => 0,
  4816.             'proceedToCheckout' => 0
  4817.         ];
  4818.         if ($invoiceId != 0) {
  4819.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  4820.                 array(
  4821.                     'Id' => $invoiceId,
  4822.                     'isProcessed' => [0]
  4824.                 ));
  4825.         } else {
  4826.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  4827.                 array(
  4828.                     'meetingId' => $meetingId,
  4829.                     'isProcessed' => [0]
  4831.                 ));
  4832.         }
  4834.         if ($gatewayInvoice)
  4835.             $invoiceId = $gatewayInvoice->getId();
  4837.         $invoiceSessionCount = 0;
  4838.         $payableAmount = 0;
  4839.         $imageBySessionCount = [
  4840.             0 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4841.             100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4842.             200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4843.             300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4844.             400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4845.             500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4846.             600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4847.             700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4848.             800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4849.             900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4850.             1000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4851.             1100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4852.             1200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4853.             1300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4854.             1400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4855.             1500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4856.             1600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4857.             1700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4858.             1800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4859.             1900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4860.             2000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4861.             2100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4862.             2200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4863.             2300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4864.             2400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4865.             2500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4866.             2600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4867.             2700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4868.             2800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4869.             2900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4870.             3000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4871.             3100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4872.             3200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4873.             3300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4874.             3400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4875.             3500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4876.             3600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4877.             3700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  4879.         ];
  4882.         if ($gatewayInvoice) {
  4883.             $gatewayProductData = json_decode($gatewayInvoice->getProductDataForPaymentGateway(), true);
  4884.             if ($gatewayProductData == null) $gatewayProductData = [];
  4885.             $gatewayAmount = 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', '');
  4886.             $invoiceSessionCount = $gatewayInvoice->getSessionCount();
  4887.             $currencyForGateway = $gatewayInvoice->getAmountCurrency();
  4889.             $gatewayAmount = round($gatewayAmount, 2);
  4890.             if (empty($gatewayProductData))
  4891.                 $gatewayProductData = [
  4892.                     [
  4893.                         'price_data' => [
  4894.                             'currency' => 'eur',
  4895.                             'unit_amount' => $gatewayAmount != 0 ? (100 * $gatewayAmount) : 200000,
  4896.                             'product_data' => [
  4897. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  4898.                                 'name' => 'Bee Coins',
  4899. //                                'images' => [$imageBySessionCount[$invoiceSessionCount]],
  4900.                                 'images' => [$imageBySessionCount[0]],
  4901.                             ],
  4902.                         ],
  4903.                         'quantity' => 1,
  4904.                     ]
  4905.                 ];
  4907.             $productDescStr = '';
  4908.             $productDescArr = [];
  4909.             foreach ($gatewayProductData as $gpd) {
  4910.                 $productDescArr[] = $gpd['price_data']['product_data']['name'];
  4911.             }
  4912.             $productDescStr = implode(',', $productDescArr);
  4913.             $paymentGatewayFromInvoice = $gatewayInvoice->getAmountTransferGateWayHash();
  4916.             if ($paymentGatewayFromInvoice == 'stripe') {
  4917.                 $stripe = new \Stripe\Stripe();
  4918.                 \Stripe\Stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  4920.                 $stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  4921.                 {
  4922.                     if ($request->query->has('meetingSessionId'))
  4923.                         $id = $request->query->get('meetingSessionId');
  4924.                 }
  4926.                 $paymentIntent = [
  4927.                     "id" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs",
  4928.                     "object" => "payment_intent",
  4929.                     "amount" => 3000,
  4930.                     "amount_capturable" => 0,
  4931.                     "amount_received" => 0,
  4932.                     "application" => null,
  4933.                     "application_fee_amount" => null,
  4934.                     "canceled_at" => null,
  4935.                     "cancellation_reason" => null,
  4936.                     "capture_method" => "automatic",
  4937.                     "charges" => [
  4938.                         "object" => "list",
  4939.                         "data" => [],
  4940.                         "has_more" => false,
  4941.                         "url" => "/v1/charges?payment_intent=pi_1DoWjK2eZvKYlo2Csy9J3BHs"
  4942.                     ],
  4943.                     "client_secret" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs_secret_vmxAcWZxo2kt1XhpWtZtnjDtd",
  4944.                     "confirmation_method" => "automatic",
  4945.                     "created" => 1546523966,
  4946.                     "currency" => $currencyForGateway,
  4947.                     "customer" => null,
  4948.                     "description" => null,
  4949.                     "invoice" => null,
  4950.                     "last_payment_error" => null,
  4951.                     "livemode" => false,
  4952.                     "metadata" => [],
  4953.                     "next_action" => null,
  4954.                     "on_behalf_of" => null,
  4955.                     "payment_method" => null,
  4956.                     "payment_method_options" => [],
  4957.                     "payment_method_types" => [
  4958.                         "card"
  4959.                     ],
  4960.                     "receipt_email" => null,
  4961.                     "review" => null,
  4962.                     "setup_future_usage" => null,
  4963.                     "shipping" => null,
  4964.                     "statement_descriptor" => null,
  4965.                     "statement_descriptor_suffix" => null,
  4966.                     "status" => "requires_payment_method",
  4967.                     "transfer_data" => null,
  4968.                     "transfer_group" => null
  4969.                 ];
  4972.                 $checkout_session = \Stripe\Checkout\Session::create([
  4973.                     'payment_method_types' => ['card'],
  4974.                     'line_items' => $gatewayProductData,
  4975.                     'mode' => 'payment',
  4976.                     'success_url' => $this->generateUrl(
  4977.                         'payment_gateway_success',
  4978.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4979.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  4980.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4981.                     ),
  4982.                     'cancel_url' => $this->generateUrl(
  4983.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4984.                     ),
  4985.                 ]);
  4986.                 $output = [
  4987.                     'clientSecret' => $paymentIntent['client_secret'],
  4988.                     'id' => $checkout_session->id,
  4989.                     'paymentGateway' => $paymentGatewayFromInvoice,
  4990.                     'proceedToCheckout' => 1
  4991.                 ];
  4992. //                return new JsonResponse($output);
  4993.             }
  4994.             if ($paymentGatewayFromInvoice == 'aamarpay') {
  4996.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  4999.                 $url = $sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/request.php' : 'https://secure.aamarpay.com/request.php';
  5000.                 $fields = array(
  5001. //                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5002.                     'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5003.                     'amount' => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''), //transaction amount
  5004.                     'payment_type' => 'VISA', //no need to change
  5005.                     'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  5006.                     'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  5007.                     'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  5008.                     'cus_email' => $studentDetails->getEmail(), //customer email address
  5009.                     'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  5010.                     'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  5011.                     'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  5012.                     'cus_state' => $studentDetails->getCurrAddrState(),  //state
  5013.                     'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  5014.                     'cus_country' => 'Bangladesh',  //country
  5015.                     'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  5016.                     'cus_fax' => '',  //fax
  5017.                     'ship_name' => '', //ship name
  5018.                     'ship_add1' => '',  //ship address
  5019.                     'ship_add2' => '',
  5020.                     'ship_city' => '',
  5021.                     'ship_state' => '',
  5022.                     'ship_postcode' => '',
  5023.                     'ship_country' => 'Bangladesh',
  5024.                     'desc' => $productDescStr,
  5025.                     'success_url' => $this->generateUrl(
  5026.                         'payment_gateway_success',
  5027.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5028.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5029.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5030.                     ),
  5031.                     'fail_url' => $this->generateUrl(
  5032.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5033.                     ),
  5034.                     'cancel_url' => $this->generateUrl(
  5035.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5036.                     ),
  5037. //                    'opt_a' => 'Reshad',  //optional paramter
  5038. //                    'opt_b' => 'Akil',
  5039. //                    'opt_c' => 'Liza',
  5040. //                    'opt_d' => 'Sohel',
  5041. //                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  5042.                     'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  5044.                 ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  5046.                 $fields_string = http_build_query($fields);
  5048.                 $ch = curl_init();
  5049.                 curl_setopt($ch, CURLOPT_VERBOSE, true);
  5050.                 curl_setopt($ch, CURLOPT_URL, $url);
  5052.                 curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  5053.                 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  5054.                 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  5055.                 $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  5056.                 curl_close($ch);
  5058. //                $this->redirect_to_merchant($url_forward);
  5060.                 $output = [
  5062. //                    'redirectUrl' => 'https://sandbox.aamarpay.com/'.$url_forward, //keeping it off temporarily
  5063.                     'redirectUrl' => ($sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/' : 'https://secure.aamarpay.com/') . $url_forward, //keeping it off temporarily
  5064. //                    'fields'=>$fields,
  5065. //                    'fields_string'=>$fields_string,
  5067. //                    'redirectUrl' => $this->generateUrl(
  5068. //                        'payment_gateway_success',
  5069. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5070. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5071. //                        ))), 'hbeeSessionToken' => $request->request->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5072. //                    ),
  5073.                     'paymentGateway' => $paymentGatewayFromInvoice,
  5074.                     'proceedToCheckout' => 1
  5075.                 ];
  5076. //                return new JsonResponse($output);
  5077.             } else if ($paymentGatewayFromInvoice == 'bkash') {
  5079.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  5081.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  5082.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  5083.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  5084.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  5085.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  5088.                 $request_data = array(
  5089.                     'app_key' => $app_key_value,
  5090.                     'app_secret' => $app_secret_value
  5091.                 );
  5092.                 $url = curl_init($baseUrl . '/tokenized/checkout/token/grant');
  5093.                 $request_data_json = json_encode($request_data);
  5094.                 $header = array(
  5095.                     'Content-Type:application/json',
  5096.                     'username:' . $username_value,
  5097.                     'password:' . $password_value
  5098.                 );
  5099.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5100.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5101.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5102.                 curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  5103.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5104.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5106.                 $tokenData = json_decode(curl_exec($url), true);
  5107.                 curl_close($url);
  5109.                 $id_token = $tokenData['id_token'];
  5110.                 $goToBkashPage = 0;
  5111.                 if ($tokenData['statusCode'] == '0000') {
  5112.                     $auth = $id_token;
  5115.                     $requestbody = array(
  5116.                         "mode" => "0011",
  5117. //                        "payerReference" => "",
  5118.                         "payerReference" => $gatewayInvoice->getInvoiceDateTs(),
  5119.                         "callbackURL" => $this->generateUrl(
  5120.                             'bkash_callback', [], UrlGenerator::ABSOLUTE_URL
  5121.                         ),
  5122. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  5123.                         "amount" => number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  5124.                         "currency" => "BDT",
  5125.                         "intent" => "sale",
  5126.                         "merchantInvoiceNumber" => $invoiceId
  5127.                     );
  5128.                     $url = curl_init($baseUrl . '/tokenized/checkout/create');
  5129.                     $requestbodyJson = json_encode($requestbody);
  5131.                     $header = array(
  5132.                         'Content-Type:application/json',
  5133.                         'Authorization:' . $auth,
  5134.                         'X-APP-Key:' . $app_key_value
  5135.                     );
  5137.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5138.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5139.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5140.                     curl_setopt($url, CURLOPT_POSTFIELDS, $requestbodyJson);
  5141.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5142.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5143.                     $resultdata = curl_exec($url);
  5144.                     curl_close($url);
  5145. //                    return new JsonResponse($resultdata);
  5147.                     $obj = json_decode($resultdata, true);
  5150.                     $goToBkashPage = 1;
  5153.                     $justNow = new \DateTime();
  5154.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  5155.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  5156.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  5157.                     $gatewayInvoice->setGatewayPaymentId($obj['paymentID']);
  5158.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  5159.                     $em->flush();
  5161.                     $output = [
  5163.                         'redirectUrl' => $obj['bkashURL'],
  5165.                         'paymentGateway' => $paymentGatewayFromInvoice,
  5166.                         'proceedToCheckout' => $goToBkashPage,
  5167.                         'tokenData' => $tokenData,
  5168.                         'obj' => $obj,
  5169.                         'id_token' => $tokenData['id_token'],
  5170.                     ];
  5173.                 }
  5176. //                $fields = array(
  5177. //
  5178. //                    "mode" => "0011",
  5179. //                    "payerReference" => "01723888888",
  5180. //                    "callbackURL" => $this->generateUrl(
  5181. //                        'payment_gateway_success',
  5182. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5183. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5184. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5185. //                    ),
  5186. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  5187. //                    "amount" => $gatewayInvoice->getGateWayBillamount(),
  5188. //                    "currency" => "BDT",
  5189. //                    "intent" => "sale",
  5190. //                    "merchantInvoiceNumber" => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT)
  5191. //
  5192. //                );
  5193. //                $fields = array(
  5194. ////                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5195. //                    'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5196. //                    'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  5197. //                    'payment_type' => 'VISA', //no need to change
  5198. //                    'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  5199. //                    'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  5200. //                    'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  5201. //                    'cus_email' => $studentDetails->getEmail(), //customer email address
  5202. //                    'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  5203. //                    'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  5204. //                    'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  5205. //                    'cus_state' => $studentDetails->getCurrAddrState(),  //state
  5206. //                    'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  5207. //                    'cus_country' => 'Bangladesh',  //country
  5208. //                    'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? ' + 8801911706483' : $studentDetails->getPhone(), //customer phone number
  5209. //                    'cus_fax' => '',  //fax
  5210. //                    'ship_name' => '', //ship name
  5211. //                    'ship_add1' => '',  //ship address
  5212. //                    'ship_add2' => '',
  5213. //                    'ship_city' => '',
  5214. //                    'ship_state' => '',
  5215. //                    'ship_postcode' => '',
  5216. //                    'ship_country' => 'Bangladesh',
  5217. //                    'desc' => $productDescStr,
  5218. //                    'success_url' => $this->generateUrl(
  5219. //                        'payment_gateway_success',
  5220. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5221. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5222. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5223. //                    ),
  5224. //                    'fail_url' => $this->generateUrl(
  5225. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5226. //                    ),
  5227. //                    'cancel_url' => $this->generateUrl(
  5228. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5229. //                    ),
  5230. ////                    'opt_a' => 'Reshad',  //optional paramter
  5231. ////                    'opt_b' => 'Akil',
  5232. ////                    'opt_c' => 'Liza',
  5233. ////                    'opt_d' => 'Sohel',
  5234. ////                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  5235. //                    'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  5236. //
  5237. //                ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  5238. //
  5239. //                $fields_string = http_build_query($fields);
  5240. //
  5241. //                $ch = curl_init();
  5242. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  5243. //                curl_setopt($ch, CURLOPT_URL, $url);
  5244. //
  5245. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  5246. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  5247. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  5248. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  5249. //                curl_close($ch);
  5251. //                $this->redirect_to_merchant($url_forward);
  5254.             }
  5256.         }
  5258.         if ($triggerMiddlePage == 1) return $this->render('@Buddybee/pages/makePaymentOfEntityInvoiceLandingPage.html.twig', array(
  5259.             'page_title' => 'Invoice Payment',
  5261.             'data' => $output,
  5264.         ));
  5265.         else
  5266.             return new JsonResponse($output);
  5269.     }
  5272.     public function RefundEntityInvoiceAction(Request $request, $encData = '')
  5273.     {
  5276.         $em = $this->getDoctrine()->getManager('company_group');
  5277.         $invoiceId = 0;
  5279.         $currIsProcessedFlagValue = '_UNSET_';
  5281.         $session = $request->getSession();
  5282.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  5284.         $paymentId = $request->query->get('paymentID', 0);
  5285.         $status = $request->query->get('status', 0);
  5287.         $refundSuccess = 0;
  5288.         $errorMsg = '';
  5289.         $errorCode = '';
  5292.         if ($encData != '') {
  5293.             $invoiceId = $encData;
  5294.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  5295.             if (isset($encryptedData['invoiceId']))
  5296.                 $invoiceId = $encryptedData['invoiceId'];
  5297.             if (isset($encryptedData['autoRedirect']))
  5298.                 $autoRedirect = $encryptedData['autoRedirect'];
  5299.         } else {
  5300.             $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  5302.             $meetingId = 0;
  5303.             $autoRedirect = $request->query->get('autoRedirect', 1);
  5304.             $redirectUrl = '';
  5305.         }
  5308.         $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  5309.             array(
  5310.                 'Id' => $invoiceId,
  5311.                 'isProcessed' => [1]
  5313.             ));
  5316.         if ($gatewayInvoice) {
  5317.             $gatewayInvoice->setIsProcessed(3); //pending settlement
  5318.             $currIsProcessedFlagValue = $gatewayInvoice->getIsProcessed();
  5319.             $em->flush();
  5321.             if ($gatewayInvoice->getAmountTransferGateWayHash() == 'bkash') {
  5322.                 $invoiceId = $gatewayInvoice->getId();
  5324.                 $paymentID = $gatewayInvoice->getGatewayPaymentId();
  5325.                 $trxID = $gatewayInvoice->getGatewayTransId();
  5327.                 $justNow = new \DateTime();
  5329.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  5330.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  5331.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  5332.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  5333.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  5336.                 $justNowTs = $justNow->format('U');
  5337.                 if ($gatewayInvoice->getGatewayIdTokenExpireTs() <= $justNowTs) {
  5338.                     $refresh_token = $gatewayInvoice->getGatewayIdRefreshToken();
  5340.                     $request_data = array(
  5341.                         'app_key' => $app_key_value,
  5342.                         'app_secret' => $app_secret_value,
  5343.                         'refresh_token' => $refresh_token
  5344.                     );
  5345.                     $url = curl_init($baseUrl . '/tokenized/checkout/token/refresh');
  5347.                     $request_data_json = json_encode($request_data);
  5349.                     $header = array(
  5350.                         'Content-Type:application/json',
  5351.                         'username:' . $username_value,
  5352.                         'password:' . $password_value
  5353.                     );
  5354.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5355.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5356.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5357.                     curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  5358.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5359.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5361.                     $tokenData = json_decode(curl_exec($url), true);
  5362.                     curl_close($url);
  5365.                     $justNow = new \DateTime();
  5366.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  5367.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  5368.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  5369.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  5370.                     $em->flush();
  5371.                 }
  5374.                 $auth = $gatewayInvoice->getGatewayIdToken();;
  5376.                 $post_token = array(
  5377.                     'paymentID' => $paymentID,
  5378.                     'trxID' => $trxID,
  5379.                     'reason' => 'Full Refund Policy',
  5380.                     'sku' => 'RSTR',
  5381.                     'amount' => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  5382.                 );
  5383.                 $url = curl_init($baseUrl . '/tokenized/checkout/payment/refund');
  5384.                 $posttoken = json_encode($post_token);
  5386.                 $header = array(
  5387.                     'Content-Type:application/json',
  5388.                     'Authorization:' . $auth,
  5389.                     'X-APP-Key:' . $app_key_value
  5390.                 );
  5391.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5392.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5393.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5394.                 curl_setopt($url, CURLOPT_POSTFIELDS, $posttoken);
  5395.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5396.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5397.                 $resultdata = curl_exec($url);
  5399.                 curl_close($url);
  5401.                 $obj = json_decode($resultdata, true);
  5403. //                return new JsonResponse($obj);
  5405.                 if (isset($obj['completedTime']))
  5406.                     $refundSuccess = 1;
  5407.                 else if (isset($obj['errorCode'])) {
  5408.                     $refundSuccess = 0;
  5409.                     $errorCode = $obj['errorCode'];
  5410.                     $errorMsg = $obj['errorMessage'];
  5411.                 }
  5412. //                    $gatewayInvoice->setGatewayTransId($obj['trxID']);
  5413.                 $em->flush();
  5416.             }
  5419.             if ($refundSuccess == 1) {
  5420.                 Buddybee::RefundEntityInvoice($em, $invoiceId);
  5421.                 $currIsProcessedFlagValue = 4;
  5422.             }
  5423.         } else {
  5425.         }
  5427.         MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  5430.         return new JsonResponse(
  5431.             array(
  5432.                 'success' => $refundSuccess,
  5433.                 'errorCode' => $errorCode,
  5434.                 'isProcessed' => $currIsProcessedFlagValue,
  5435.                 'errorMsg' => $errorMsg,
  5436.             )
  5437.         );
  5440.     }
  5443.     public function ViewEntityInvoiceAction(Request $request, $encData = '')
  5444.     {
  5445.         $em = $this->getDoctrine()->getManager('company_group');
  5446.         $invoiceId = 0;
  5447.         $autoRedirect = 1;
  5448.         $redirectUrl = '';
  5449.         $meetingId = 0;
  5450.         $invoice = null;
  5453.         if ($encData != '') {
  5454.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  5455.             $invoiceId = $encData;
  5456.             if (isset($encryptedData['invoiceId']))
  5457.                 $invoiceId = $encryptedData['invoiceId'];
  5458.             if (isset($encryptedData['autoRedirect']))
  5459.                 $autoRedirect = $encryptedData['autoRedirect'];
  5460.         } else {
  5461.             $invoiceId = $request->query->get('invoiceId', 0);
  5463.             $meetingId = 0;
  5464.             $autoRedirect = $request->query->get('autoRedirect', 1);
  5465.             $redirectUrl = '';
  5466.         }
  5468. //    $invoiceList = [];
  5470.         $billerDetails = [];
  5471.         $billToDetails = [];
  5472.         if ($invoiceId != 0) {
  5473.             $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  5474.                 ->findOneBy(
  5475.                     array(
  5476.                         'Id' => $invoiceId,
  5478.                     )
  5479.                 );
  5481.             if ($invoice) {
  5482.                 $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5483.                     ->findOneBy(
  5484.                         array(
  5485.                             'applicantId' => $invoice->getBillerId(),
  5487.                         )
  5488.                     );
  5489.                 $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5490.                     ->findOneBy(
  5491.                         array(
  5492.                             'applicantId' => $invoice->getBillToId(),
  5494.                         )
  5495.                     );
  5497.             }
  5499.             if ($request->query->get('sendMail', 0) == 1 && GeneralConstant::EMAIL_ENABLED == 1) {
  5500.                 $billerDetails = [];
  5501.                 $billToDetails = [];
  5504.                 if ($invoice) {
  5505.                     $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5506.                         ->findOneBy(
  5507.                             array(
  5508.                                 'applicantId' => $invoice->getBillerId(),
  5510.                             )
  5511.                         );
  5512.                     $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5513.                         ->findOneBy(
  5514.                             array(
  5515.                                 'applicantId' => $invoice->getBillToId(),
  5517.                             )
  5518.                         );
  5521.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  5522.                     $bodyData = array(
  5523.                         'page_title' => 'Invoice',
  5524. //            'studentDetails' => $student,
  5525.                         'billerDetails' => $billerDetails,
  5526.                         'billToDetails' => $billToDetails,
  5527.                         'invoice' => $invoice,
  5528.                         'currencyList' => BuddybeeConstant::$currency_List,
  5529.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  5532.                     );
  5533.                     $attachments = [];
  5534.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  5537. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  5538.                     $new_mail = $this->get('mail_module');
  5539.                     $new_mail->sendMyMail(array(
  5540.                         'senderHash' => '_CUSTOM_',
  5541.                         //                        'senderHash'=>'_CUSTOM_',
  5542.                         'forwardToMailAddress' => $forwardToMailAddress,
  5544.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  5546. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  5547.                         'attachments' => $attachments,
  5548.                         'toAddress' => $forwardToMailAddress,
  5549.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  5550.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  5551.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  5552.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  5553.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  5555. //                            'emailBody' => $bodyHtml,
  5556.                         'mailTemplate' => $bodyTemplate,
  5557.                         'templateData' => $bodyData,
  5558.                         'embedCompanyImage' => 0,
  5559.                         'companyId' => 0,
  5561.                         'companyImagePath' => ''
  5562. //                        'embedCompanyImage' => 1,
  5563. //                        'companyId' => $companyId,
  5564. //                        'companyImagePath' => $company_data->getImage()
  5567.                     ));
  5568.                 }
  5571.             }
  5574. //            if ($invoice) {
  5575. //
  5576. //            } else {
  5577. //                return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  5578. //                    'page_title' => '404 Not Found',
  5579. //
  5580. //                ));
  5581. //            }
  5584.             return $this->render('@HoneybeeWeb/pages/views/honeybee_ecosystem_invoice.html.twig', array(
  5585.                 'page_title' => 'Invoice',
  5586. //            'studentDetails' => $student,
  5587.                 'billerDetails' => $billerDetails,
  5588.                 'billToDetails' => $billToDetails,
  5589.                 'invoice' => $invoice,
  5590.                 'currencyList' => BuddybeeConstant::$currency_List,
  5591.                 'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  5594.             ));
  5595.         }
  5598.     }
  5599.     public function SignatureCheckFromCentralAction(Request $request)
  5600.     {
  5601.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  5603.         if ($systemType !== '_CENTRAL_') {
  5604.             return new JsonResponse(['success' => false, 'message' => 'Only allowed on CENTRAL server.'], 403);
  5605.         }
  5607.         $em = $this->getDoctrine()->getManager('company_group');
  5608.         $em->getConnection()->connect();
  5610.         $data = json_decode($request->getContent(), true);
  5612.         if (
  5613.             !$data ||
  5614.             !isset($data['userId']) ||
  5615.             !isset($data['companyId']) ||
  5616.             !isset($data['signatureData']) ||
  5617.             !isset($data['approvalHash']) ||
  5618.             !isset($data['applicantId'])
  5619.         ) {
  5620.             return new JsonResponse(['success' => false, 'message' => 'Missing parameters.'], 400);
  5621.         }
  5623.         $userId = $data['userId'];
  5624.         $companyId = $data['companyId'];
  5625.         $signatureData = $data['signatureData'];
  5626.         $approvalHash = $data['approvalHash'];
  5627.         $applicantId = $data['applicantId'];
  5629.         try {
  5630.             $centralUser = $em
  5631.                 ->getRepository("CompanyGroupBundle\\Entity\\EntityApplicantDetails")
  5632.                 ->findOneBy(['applicantId' => $applicantId]);
  5634.             if (!$centralUser) {
  5635.                 return new JsonResponse(['success' => false, 'message' => 'Central user not found.'], 404);
  5636.             }
  5638.             $userAppIds = json_decode($centralUser->getUserAppIds(), true);
  5639.             if (!is_array($userAppIds)) $userAppIds = [];
  5641.             $companies = $em->getRepository('CompanyGroupBundle\\Entity\\CompanyGroup')->findBy([
  5642.                 'appId' => $userAppIds
  5643.             ]);
  5645.             if (count($companies) < 1) {
  5646.                 return new JsonResponse(['success' => false, 'message' => 'No companies found for userAppIds.'], 404);
  5647.             }
  5649.             $repo = $em->getRepository('CompanyGroupBundle\\Entity\\EntitySignature');
  5650.             $record = $repo->findOneBy(['userId' => $userId]);
  5652.             if (!$record) {
  5653.                 $record = new \CompanyGroupBundle\Entity\EntitySignature();
  5654.                 $record->setUserId($applicantId);
  5655.                 $record->setCreatedAt(new \DateTime());
  5656.             }
  5658.             $record->setCompanyId($companyId);
  5659.             $record->setApplicantId($applicantId);
  5660.             $record->setData($signatureData);
  5661.             $record->setSigExists(0);
  5662.             $record->setLastDecryptedSigId(0);
  5663.             $record->setUpdatedAt(new \DateTime());
  5664.             $em->persist($record);
  5665.             $em->flush();
  5666.             $dataByServerId = [];
  5667.             $gocDataListByAppId = [];
  5668.             foreach ($companies as $entry) {
  5669.                 $gocDataListByAppId[$entry->getAppId()] = [
  5670.                     'dbName' => $entry->getDbName(),
  5671.                     'dbUser' => $entry->getDbUser(),
  5672.                     'dbPass' => $entry->getDbPass(),
  5673.                     'dbHost' => $entry->getDbHost(),
  5674.                     'serverAddress' => $entry->getCompanyGroupServerAddress(),
  5675.                     'port' => $entry->getCompanyGroupServerPort() ?: 80,
  5676.                     'appId' => $entry->getAppId(),
  5677.                     'serverId' => $entry->getCompanyGroupServerId(),
  5678.                 ];
  5679.                 if (!isset($dataByServerId[$entry->getCompanyGroupServerId()]))
  5680.                     $dataByServerId[$entry->getCompanyGroupServerId()] = array(
  5683.                         'serverId' => $entry->getCompanyGroupServerId(),
  5684.                         'serverAddress' => $entry->getCompanyGroupServerAddress(),
  5685.                         'port' => $entry->getCompanyGroupServerPort() ?: 80,
  5686.                         'payload' => array(
  5687.                             'globalId' => $applicantId,
  5688.                             'companyId' => $userAppIds,
  5689.                             'signatureData' => $signatureData,
  5690. //                                      'approvalHash' => $approvalHash
  5691.                         )
  5692.                     );
  5693.             }
  5696.             $urls = [];
  5699.             foreach ($dataByServerId as $entry) {
  5700.                 $serverAddress = $entry['serverAddress'];
  5701.                 if (!$serverAddress) continue;
  5704. //                     $connector = $this->container->get('application_connector');
  5705. //                     $connector->resetConnection(
  5706. //                         'default',
  5707. //                         $entry['dbName'],
  5708. //                         $entry['dbUser'],
  5709. //                         $entry['dbPass'],
  5710. //                         $entry['dbHost'],
  5711. //                         $reset = true
  5712. //                     );
  5715.                 $syncUrl = $serverAddress . '/ReceiveSignatureFromCentral';
  5717.                 $payload = $entry['payload'];
  5719.                 $curl = curl_init();
  5720.                 curl_setopt_array($curl, [
  5721.                     CURLOPT_RETURNTRANSFER => true,
  5722.                     CURLOPT_POST => true,
  5723.                     CURLOPT_URL => $syncUrl,
  5724. //                         CURLOPT_PORT => $entry['port'],
  5725.                     CURLOPT_CONNECTTIMEOUT => 10,
  5726.                     CURLOPT_SSL_VERIFYPEER => false,
  5727.                     CURLOPT_SSL_VERIFYHOST => false,
  5728.                     CURLOPT_HTTPHEADER => [
  5729.                         'Accept: application/json',
  5730.                         'Content-Type: application/json'
  5731.                     ],
  5732.                     CURLOPT_POSTFIELDS => json_encode($payload)
  5733.                 ]);
  5735.                 $response = curl_exec($curl);
  5736.                 $err = curl_error($curl);
  5737.                 $httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
  5738.                 curl_close($curl);
  5741. //                     if ($err) {
  5742. //                         error_log("ERP Sync Error [AppID $appId]: $err");
  5743. //                          $urls[]=$err;
  5744. //                     } else {
  5745. //                         error_log("ERP Sync Response [AppID $appId] (HTTP $httpCode): $response");
  5746. //                         $res = json_decode($response, true);
  5747. //                         if (!isset($res['success']) || !$res['success']) {
  5748. //                             error_log("❗ ERP Sync error for AppID $appId: " . ($res['message'] ?? 'Unknown'));
  5749. //                         }
  5750. //
  5751. //                      $urls[]=$response;
  5752. //                     }
  5753.             }
  5756.             return new JsonResponse(['success' => true, 'message' => 'Signature synced successfully.']);
  5758.         } catch (\Exception $e) {
  5759.             return new JsonResponse(['success' => false, 'message' => 'DB error: ' . $e->getMessage()], 500);
  5760.         }
  5761.     }
  5762.  //datev cntroller
  5763.     public function connectDatev(Request $request)
  5764.     {
  5765.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  5766.         $redirectUri = "https://ourhoneybee.eu/datev/callback";
  5768.         $state = bin2hex(random_bytes(10));
  5769.         $scope = "openid profile email accounting:documents accounting:dxso-jobs accounting:clients:read datev:accounting:extf-files-import datev:accounting:clients";
  5770.         $codeVerifier = bin2hex(random_bytes(32));
  5771.         $codeChallenge = rtrim(strtr(base64_encode(hash('sha256', $codeVerifier, true)), '+/', '-_'), '=');
  5773.         $session = $request->getSession();
  5774.         $applicantId = $session->get(UserConstants::APPLICANT_ID);
  5776.         $em_goc = $this->getDoctrine()->getManager('company_group');
  5779.         $token = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  5780.             ->findOneBy(['userId' => $applicantId]);
  5782.         if (!$token) {
  5783.             $token = new EntityDatevToken();
  5784.             $token->setUserId($applicantId);
  5785.         }
  5787.         $token->setState($state);
  5788.         $token->setCodeChallenge($codeChallenge);
  5789.         $token->setCodeVerifier($codeVerifier);
  5791.         $em_goc->persist($token);
  5792.         $em_goc->flush();
  5794.         $url = "https://login.datev.de/openidsandbox/authorize?"
  5795.             ."response_type=code"
  5796.             ."&client_id=".$clientId
  5797.             ."&state=".$state
  5798.             ."&scope=".urlencode($scope)
  5799.             ."&redirect_uri=".urlencode($redirectUri)
  5800.             ."&code_challenge=".$codeChallenge
  5801.             ."&code_challenge_method=S256"
  5802.             ."&prompt=login";
  5804.         return $this->redirect($url);
  5805.     }
  5806.     public function datevCallback(Request $request)
  5807.     {
  5808.         $code  = $request->get('code');
  5809.         $state = $request->get('state');
  5811.         if (!$code || !$state) {
  5812.             return new Response("Invalid callback request");
  5813.         }
  5815.         $em_goc = $this->getDoctrine()->getManager('company_group');
  5816.         $tokenEntity = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  5817.             ->findOneBy(['state' => $state]);
  5819.         if (!$tokenEntity) {
  5820.             return new Response("Invalid or expired state");
  5821.         }
  5824.         $codeVerifier = $tokenEntity->getCodeVerifier();
  5826.         if (!$codeVerifier) {
  5827.             return new Response("Code verifier missing");
  5828.         }
  5830.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  5831.         $clientSecret = "9b1c4e72a966e9f231584393ff1d3469";
  5833.         // from parameters
  5834. //        $clientId= $this->getContainer()->getParameter('datev_client_id');
  5835. //        $clientSecret= $this->getContainer()->getParameter('datev_client_secret');
  5837.         $authString = base64_encode($clientId . ":" . $clientSecret);
  5838.         $redirectUri = "https://ourhoneybee.eu/datev/callback";
  5841.         $postFields = http_build_query([
  5842.             "grant_type"    => "authorization_code",
  5843.             "code"          => $code,
  5844.             "redirect_uri"  => $redirectUri,
  5845.             "client_id"     => $clientId,
  5846.             "code_verifier" => $codeVerifier
  5847.         ]);
  5849.         $ch = curl_init();
  5851.         curl_setopt_array($ch, [
  5852.             CURLOPT_URL            => "https://sandbox-api.datev.de/token",
  5853.             CURLOPT_POST           => true,
  5854.             CURLOPT_RETURNTRANSFER => true,
  5855.             CURLOPT_POSTFIELDS     => $postFields,
  5856.             CURLOPT_HTTPHEADER     => [
  5857.                 "Content-Type: application/x-www-form-urlencoded",
  5858.                 "Authorization: Basic " . $authString
  5859.             ]
  5860.         ]);
  5862.         $response = curl_exec($ch);
  5864.         if (curl_errno($ch)) {
  5865.             return new Response("cURL Error: " . curl_error($ch), 500);
  5866.         }
  5868.         curl_close($ch);
  5870.         $data = json_decode($response, true);
  5872.         if (!$data) {
  5873.             return new Response("Invalid token response", 500);
  5874.         }
  5876.         if (isset($data['access_token'])) {
  5878.             $tokenEntity->setAccessToken($data['access_token']);
  5879.             $session = $request->getSession();  //remove it later
  5880.             $session->set('DATEV_ACCESS_TOKEN', $data['access_token']);
  5882.             if (isset($data['refresh_token'])) {
  5883.                 $tokenEntity->setRefreshToken($data['refresh_token']);
  5884.             }
  5886.             if (isset($data['expires_in'])) {
  5887.                 $tokenEntity->setExpiresAt(time() + $data['expires_in']);
  5888.             }
  5891. //            $tokenEntity->setState(null);
  5892.             $tokenEntity->setCode($code);
  5894.             $em_goc->flush();
  5896.             return $this->redirect("/datev/home");
  5897.         }
  5899.         return new Response(
  5900.             "Token exchange failed: " . json_encode($data),
  5901.             400
  5902.         );
  5903.     }
  5905.     public function refreshToken(Request $request)
  5906.     {
  5907.         $em_goc = $this->getDoctrine()->getManager('company_group');
  5908.         $session = $request->getSession();
  5909.         $applicantId = $session->get(UserConstants::APPLICANT_ID);
  5911.         $token = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  5912.             ->findOneBy(['userId' => $applicantId]);
  5914.         if (!$token) {
  5915.             return new JsonResponse([
  5916.                 'status' => false,
  5917.                 'message' => 'User token not found'
  5918.             ]);
  5919.         }
  5922.         if (!$token->getRefreshToken()) {
  5923.             return new JsonResponse([
  5924.                 'status' => false,
  5925.                 'message' => 'No refresh token available'
  5926.             ]);
  5927.         }
  5929.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  5930.         $clientSecret = "9b1c4e72a966e9f231584393ff1d3469";
  5932.         $authString = base64_encode($clientId . ":" . $clientSecret);
  5934.         $postFields = http_build_query([
  5935.             "grant_type" => "refresh_token",
  5936.             "refresh_token" => $token->getRefreshToken(),
  5937.         ]);
  5939.         $ch = curl_init();
  5941.         curl_setopt_array($ch, [
  5942.             CURLOPT_URL => "https://sandbox-api.datev.de/token",
  5943.             CURLOPT_POST => true,
  5944.             CURLOPT_RETURNTRANSFER => true,
  5945.             CURLOPT_POSTFIELDS => $postFields,
  5946.             CURLOPT_HTTPHEADER => [
  5947.                 "Content-Type: application/x-www-form-urlencoded",
  5948.                 "Authorization: Basic " . $authString
  5949.             ]
  5950.         ]);
  5952.         $response = curl_exec($ch);
  5954.         if (curl_errno($ch)) {
  5955.             return new JsonResponse([
  5956.                 'status' => false,
  5957.                 'message' => curl_error($ch)
  5958.             ]);
  5959.         }
  5961.         curl_close($ch);
  5963.         $data = json_decode($response, true);
  5965.         if (!isset($data['access_token'])) {
  5966.             return new JsonResponse([
  5967.                 'status' => false,
  5968.                 'message' => 'Refresh failed',
  5969.                 'error' => $data
  5970.             ]);
  5971.         }
  5974.         $token->setAccessToken($data['access_token']);
  5976.         if (isset($data['refresh_token'])) {
  5977.             $token->setRefreshToken($data['refresh_token']);
  5978.         }
  5979.         $token->setExpiresAt(time() + $data['expires_in']);
  5980.         $em_goc->flush();
  5981.         return new JsonResponse([
  5982.             'status' => true,
  5983.             'message' => 'Token refreshed successfully'
  5984.         ]);
  5985.     }
  5987.     public function registerDevice(Request $request)
  5988.     {
  5989.         $em_goc = $this->getDoctrine()->getManager('company_group');
  5991.         $data = json_decode($request->getContent(), true);
  5993.         if (!$data) {
  5994.             $data = $request->request->all();
  5995.         }
  5997.         $deviceSerial = $data['device_id'] ?? null;
  5999.         if (!$deviceSerial) {
  6000.             return new JsonResponse([
  6001.                 'success' => false,
  6002.                 'message' => 'Device serial is required',
  6003.                 'data' => null
  6004.             ], 400);
  6005.         }
  6007.         $device =  $em_goc->getRepository('CompanyGroupBundle\\Entity\\Device')
  6008.             ->findOneBy(['deviceSerial' => $deviceSerial]);
  6010.         if (!$device) {
  6011.             $device = new Device();
  6012.             $device->setDeviceSerial($deviceSerial);
  6013.             $message = 'Device registered successfully';
  6014.         } else {
  6015.             $message = 'Device updated successfully';
  6016.         }
  6018.         if (isset($data['deviceName'])) {
  6019.             $device->setDeviceName($data['deviceName']);
  6020.         }
  6022.         if (isset($data['appId'])) {
  6023.             $device->setAppId($data['appId']);
  6024.         }
  6026.         if (isset($data['deviceType'])) {
  6027.             $device->setDeviceType($data['deviceType']);
  6028.         }
  6030.         if (isset($data['deviceMarker'])) {
  6031.             $device->setDeviceMarker($data['deviceMarker']);
  6032.         }
  6034.         if (isset($data['timezoneStr'])) {
  6035.             $device->setTimezoneStr($data['timezoneStr']);
  6036.         }
  6038.         if (isset($data['hostname'])) {
  6039.             $device->setHostName($data['hostname']);
  6040.         }
  6042.         $em_goc->persist($device);
  6043.         $em_goc->flush();
  6045.         return new JsonResponse([
  6046.             'success' => true,
  6047.             'message' => $message,
  6048.             'data' => [
  6049.                 'id' => $device->getId(),
  6050.                 'deviceSerial' => $device->getDeviceSerial(),
  6051.                 'deviceName' => $device->getDeviceName(),
  6052.                 'deviceType' => $device->getDeviceType(),
  6053.                 'hostName' => $device->getHostName(),
  6054.             ]
  6055.         ]);
  6056.     }
  6057.     public function khorchapatiTermsAndConditions()
  6058.     {
  6059.              return $this->render('@HoneybeeWeb/pages/khorchapati_terms_and_conditions.html.twig', array(
  6060.             'page_title' => 'Terms and Conditions — Khorchapati',
  6061.         ));
  6063.             
  6064.     }
  6065.     public function milkShareTermsAndConditions()
  6066.     {
  6067.         return $this->render('@HoneybeeWeb/pages/milkshare-terms-and-conditions.html.twig', array(
  6068.             'page_title' => 'Terms and Conditions — Milkshare',
  6069.         ));
  6072.     }
  6074. }