src/ApplicationBundle/Modules/HoneybeeWeb/Controller/HoneybeeWebPublicController.php line 83

Open in your IDE?
  1. <?php
  3. namespace ApplicationBundle\Modules\HoneybeeWeb\Controller;
  6. use ApplicationBundle\Constants\BuddybeeConstant;
  7. use ApplicationBundle\Constants\EmployeeConstant;
  8. use ApplicationBundle\Constants\GeneralConstant;
  9. use ApplicationBundle\Controller\GenericController;
  10. use ApplicationBundle\Entity\DatevToken;
  11. use ApplicationBundle\Modules\Authentication\Constants\UserConstants; use ApplicationBundle\Modules\Api\Constants\ApiConstants;
  12. use ApplicationBundle\Modules\Buddybee\Buddybee;
  13. use ApplicationBundle\Modules\HoneybeeWeb\Service\Hb360EstimateService;
  14. use ApplicationBundle\Modules\HoneybeeWeb\Service\Hb360ProjectService;
  15. use ApplicationBundle\Modules\HoneybeeWeb\Support\FunnelManifestCore;
  16. use ApplicationBundle\Modules\HoneybeeWeb\Support\FunnelProviderCore;
  17. use ApplicationBundle\Modules\HoneybeeWeb\Support\FunnelRoutingCore;
  18. use ApplicationBundle\Modules\HoneybeeWeb\Support\PublicRateLimitCore;
  19. use ApplicationBundle\Modules\HoneybeeWeb\Support\PricingBook;
  20. use ApplicationBundle\Modules\HoneybeeWeb\Support\WebIntentCore;
  21. use ApplicationBundle\Modules\HoneybeeWeb\Support\SdsEconCore;
  22. use ApplicationBundle\Modules\HoneybeeWeb\Support\SdsMountingCore;
  23. use CompanyGroupBundle\Entity\SdsFunnelHandoff;
  24. use CompanyGroupBundle\Entity\SdsFunnelRouting;
  25. use ApplicationBundle\Modules\System\MiscActions;
  26. use Symfony\Component\HttpFoundation\Cookie;
  27. use CompanyGroupBundle\Entity\EntityCreateTopic;
  28. use CompanyGroupBundle\Entity\PaymentMethod;
  29. use CompanyGroupBundle\Entity\EntityDatevToken;
  30. use CompanyGroupBundle\Entity\Device;
  31. use CompanyGroupBundle\Entity\EntityInvoice;
  32. use CompanyGroupBundle\Entity\EntityMeetingSession;
  33. use CompanyGroupBundle\Entity\EntityTicket;
  34. use Endroid\QrCode\Builder\BuilderInterface;
  35. use Endroid\QrCodeBundle\Response\QrCodeResponse;
  36. use Ps\PdfBundle\Annotation\Pdf;
  37. use Symfony\Component\HttpFoundation\JsonResponse;
  38. use Symfony\Component\HttpFoundation\Request;
  39. use CompanyGroupBundle\Entity\EntityApplicantDetails;
  40. use Symfony\Component\HttpFoundation\Response;
  41. use Symfony\Component\Routing\Generator\UrlGenerator;
  42. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  43. //use Symfony\Bundle\FrameworkBundle\Console\Application;
  44. //use Symfony\Component\Console\Input\ArrayInput;
  45. //use Symfony\Component\Console\Output\NullOutput;
  48. class HoneybeeWebPublicController extends GenericController
  49. {
  51.     private function getPublicDocumentEntityManager($appId)
  52.     {
  53.         $emGoc = $this->getDoctrine()->getManager('company_group');
  54.         $emGoc->getConnection()->connect();
  56.         $goc = $emGoc
  57.             ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  58.             ->findOneBy(
  59.                 array(
  60.                     'appId' => $appId
  61.                 )
  62.             );
  64.         if (!$goc) {
  65.             return array(null, null);
  66.         }
  68.         $connector = $this->container->get('application_connector');
  69.         $connector->resetConnection(
  70.             'default',
  71.             $goc->getDbName(),
  72.             $goc->getDbUser(),
  73.             $goc->getDbPass(),
  74.             $goc->getDbHost(),
  75.             $reset = true
  76.         );
  78.         return array($this->getDoctrine()->getManager(), $goc);
  79.     }
  80.     // home page
  81.     public function CentralHomePageAction(Request $request)
  82.     {
  83.         $em = $this->getDoctrine()->getManager('company_group');
  84.         $subscribed = false;
  86.         if ($request->isMethod('POST')) {
  88.             $entityTicket = new EntityTicket();
  89.             $entityTicket->setEmail($request->request->get('newsletter'));
  91.             $em->persist($entityTicket);
  92.             $em->flush();
  94.             $subscribed = true;
  95.         }
  97.         // WEB-1b: the ecosystem framing (Conversion Spec §1/§36) + prices from THE ONE store.
  98.         $response = $this->render('@HoneybeeWeb/pages/home.html.twig', [
  99.             'page_title' => 'HoneyBee — Operate your business. Control your energy. Design your projects.',
  100.             'og_title' => 'HoneyBee — The Ecosystem for EPC, Energy and Industrial Teams',
  101.             'og_description' => 'HoneyBee connects business operations, AI automation, industrial energy control, and solar engineering in one affordable ecosystem — Business Suite, HiveMind & Agents, HoneyCore 4.0, HoneyWatt.',
  102.             'subscribed' => $subscribed,
  103.             'packageDetails' => GeneralConstant::$packageDetails,
  104.             'prices' => \ApplicationBundle\Modules\HoneybeeWeb\Support\PricingBook::publicBook(),
  105.         ]);
  107.         // GR2 (GROWTH) — a landing via a GR1 backlink (?ref=<surface>&t=<hash>) records one
  108.         // viral_touch row + drops the attribution cookie. Fully guarded: never breaks the page.
  109.         $viralToken = \ApplicationBundle\Modules\LeadGen\Service\ViralAttributionService::capture($em, $request);
  110.         return \ApplicationBundle\Modules\LeadGen\Service\ViralAttributionService::attachCookie($response, $viralToken);
  111.     }
  113.     // about us
  114.     public function CentralAboutUsPageAction()
  115.     {
  116.         return $this->render('@HoneybeeWeb/pages/about_us.html.twig', array(
  117.                 'page_title'     => 'About HoneyBee | Building the Operating System for Project Businesses & Energy Infrastructure',
  118.                 'og_title'       => 'About HoneyBee | Building the Operating System for Project Businesses & Energy Infrastructure',
  119.                 'og_description' => 'HoneyBee is a Germany/EU + Singapore-oriented software ecosystem connecting Business ERP, Project ERP, HoneyCore EMS, AI, and mobile operations — with engineering, development, implementation, and regional support from Bangladesh.',
  120.                 'packageDetails' => GeneralConstant::$packageDetails,
  121.                 'prices' => PricingBook::publicBook(), // Public About price source.
  122.         ));
  123.     }
  125.     // Contact page
  126.     public function CentralContactPageAction(Request $request)
  127.     {
  129.         $em = $this->getDoctrine()->getManager('company_group');
  131.         if ($request->isXmlHttpRequest()) {
  133.             $email = $request->request->get('email');
  135.             if ($email) {
  136.                 // Enrich the message with the 3-step form selectors (need / company type / phone),
  137.                 // and persist any uploaded workflow/site-requirement file (graceful if absent).
  138.                 $bodyParts = [trim((string) $request->request->get('message', ''))];
  139.                 $need = trim((string) $request->request->get('enquiry_need', ''));
  140.                 $companyType = trim((string) $request->request->get('company_type', ''));
  141.                 $phone = trim((string) $request->request->get('phone', ''));
  142.                 if ($need !== '')        { $bodyParts[] = 'Need: ' . $need; }
  143.                 if ($companyType !== '') { $bodyParts[] = 'Company type: ' . $companyType; }
  144.                 if ($phone !== '')       { $bodyParts[] = 'Phone: ' . $phone; }
  146.                 $uploaded = $request->files->get('workflow_file');
  147.                 if ($uploaded) {
  148.                     try {
  149.                         $projectDir = $this->getParameter('kernel.project_dir');
  150.                         $relDir = 'uploads/contact/' . date('Y/m');
  151.                         $absDir = rtrim($projectDir, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR . 'web' . DIRECTORY_SEPARATOR . str_replace('/', DIRECTORY_SEPARATOR, $relDir);
  152.                         if (!is_dir($absDir)) { @mkdir($absDir, 0775, true); }
  153.                         $ext  = method_exists($uploaded, 'guessExtension') ? ($uploaded->guessExtension() ?: 'dat') : 'dat';
  154.                         $name = 'contact_' . date('YmdHis') . '_' . mt_rand(1000, 9999) . '.' . $ext;
  155.                         $uploaded->move($absDir, $name);
  156.                         $bodyParts[] = 'Attachment: /' . $relDir . '/' . $name;
  157.                     } catch (\Throwable $e) { /* non-fatal: still save the message */ }
  158.                 }
  160.                 $entityTicket = new EntityTicket();
  161.                 $entityTicket->setEmail($email);
  162.                 $entityTicket->setName($request->request->get('name'));
  163.                 $entityTicket->setTitle($request->request->get('subject'));
  164.                 $entityTicket->setTicketBody(implode("\n", array_filter($bodyParts)));
  166.                 $em->persist($entityTicket);
  167.                 $em->flush();
  169.                 $this->get('app.commercial_journey_service')->captureExistingObject('ticket', $entityTicket, 'talk_to_sales');
  171.                 return new JsonResponse([
  172.                     'success' => true,
  173.                     'message' => 'Your message has been sent successfully. Our team will reply soon.'
  174.                 ]);
  175.             }
  177.             return new JsonResponse([
  178.                 'success' => false,
  179.                 'message' => 'Invalid email address.'
  180.             ]);
  181.         }
  183.         return $this->render('@HoneybeeWeb/pages/contact.html.twig', array(
  184.             'page_title' => 'Request a HoneyBee Project Solution | HoneyCore 4.0, IoT, Billing & AI Deployment',
  185.             'og_title' => 'Request a HoneyBee Project Solution | HoneyCore 4.0, IoT, Billing & AI Deployment',
  186.             'og_description' => 'Tell us about your EPC, energy asset, HoneyCore 4.0 or multi-site project. A HoneyBee solutions engineer will respond with a tailored deployment plan.',
  187.         ));
  188.         
  189.     }
  191.     // blogs
  192.     public function CentralBlogsPageAction(Request $request)
  193.     {
  194.         $em = $this->getDoctrine()->getManager('company_group');
  196.         $topicDetails = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateTopic')->findAll();
  197.         $repo         = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog');
  199.         // ── Fetch featured blog separately (always, regardless of page) ──
  200.         $featuredBlog = $repo->findOneBy(['isPrimaryBlog' => true]);
  202.         // ── Pagination ──
  203.         $page       = max(1, (int) $request->query->get('page', 1));
  204.         $limit      = 6;
  205.         $totalBlogs = count($repo->findAll());
  206.         $totalPages = max(1, (int) ceil($totalBlogs / $limit));
  207.         $page       = min($page, $totalPages);
  208.         $offset     = ($page - 1) * $limit;
  210.         $blogDetails = $repo->findBy([], ['Id' => 'DESC'], $limit, $offset);
  212.         return $this->render('@HoneybeeWeb/pages/blogs.html.twig', [
  213.             'page_title'   => 'Blogs',
  214.             'topics'       => $topicDetails,
  215.             'blogs'        => $blogDetails,
  216.             'featuredBlog' => $featuredBlog,
  217.             'currentPage'  => $page,
  218.             'totalPages'   => $totalPages,
  219.             'totalBlogs'   => $totalBlogs,
  220.         ]);
  221.     }
  222.     // product
  223.     public function CentralProductPageAction()
  224.     {
  225.         return $this->render('@HoneybeeWeb/pages/product.html.twig', array(
  226.             'page_title' => 'HoneyBee Platform | One ecosystem, four connected layers',
  227.             'og_description' => 'Business ERP, Project ERP, HoneyCore EMS, AI and mobile — one connected platform, not bolted-together tools.',
  228.         ));
  229.     }
  231.     /**
  232.      * HoneyBee ERP product page — route honeybee_erp, path /honeybee-erp.
  233.      *
  234.      * Single-claim page ("The ERP that refuses to guess"). Public and
  235.      * unauthenticated by design: this controller declares none of the five
  236.      * SessionListener interfaces, so the route stays open to guests.
  237.      */
  238.     public function CentralHoneybeeErpPageAction()
  239.     {
  240.         return $this->render('@HoneybeeWeb/pages/honeybee_erp.html.twig', array(
  241.             'page_title' => 'HoneyBee ERP | The ERP that refuses to guess',
  242.             'og_description' => 'AI drafts your work; the numbers stay provably exact. Money never moves without a person approving it, and you can point Claude or any MCP client at your live business.',
  243.         ));
  244.     }
  246.     /**
  247.      * The AI connector documentation page — route honeybee_ai_connector, /ai-connector.
  248.      *
  249.      * ★ This is the DOCUMENTATION URL submitted to Anthropic's Connectors Directory,
  250.      * which requires public setup and usage instructions and rejects a listing without
  251.      * them. Public and unauthenticated by design and by necessity: this controller
  252.      * declares none of the five SessionListener interfaces, so the route stays open to
  253.      * guests — a reviewer who is redirected to a login page sees no documentation.
  254.      *
  255.      * Every claim on the page is backed by code that runs today:
  256.      *   · 39 read tools, derived from risk  → McpProtocolCore::readManifest()
  257.      *   · 31 propose-only write tools       → McpWriteSurface::writeManifest()
  258.      *   · 5 structurally refused operations → McpWriteSurface::refusedToolMap()
  259.      *   · money always drafted + restated   → McpMoneyCore (MCP-7)
  260.      *   · OAuth 2.1 + PKCE + DCR            → Modules\Mcp\Controller\McpOauth*
  261.      * Do not add a claim here that you cannot point at in the source.
  262.      */
  263.     public function CentralAiConnectorPageAction()
  264.     {
  265.         return $this->render('@HoneybeeWeb/pages/ai_connector.html.twig', array(
  266.             'page_title' => 'HoneyBee AI Connector (MCP) | Setup, tools and limits',
  267.             'og_description' => 'Connect Claude or any MCP client to your HoneyBee ERP. Read-only by default, '
  268.                 . 'writes only as drafts a person approves, and money that can never move without an '
  269.                 . 'authenticated human confirming a draft they were shown.',
  270.         ));
  271.     }
  273.     // ── Phase 2 marketing pages (website restructure) ──
  274.     public function CentralProjectErpPageAction()
  275.     {
  276.         return $this->render('@HoneybeeWeb/pages/project_erp.html.twig', array(
  277.             'page_title' => 'Project ERP for EPC, Engineering & Solar | HoneyBee',
  278.             'og_description' => 'Control every project from quotation to cash collection: BoQ, procurement, site execution, milestone billing, retention, O&M, profitability — plus HoneyCore 4.0 project workflows.',
  279.         ));
  280.     }
  282.     public function CentralBusinessErpPageAction()
  283.     {
  284.         return $this->render('@HoneybeeWeb/pages/business_erp.html.twig', array(
  285.             'page_title' => 'Business ERP for SMEs | HR, Accounts, Inventory, CRM — HoneyBee',
  286.             'og_description' => 'Affordable, modular Business ERP for growing SMEs in Europe and Singapore. Start small, expand when ready — from €8 per user/month.',
  287.         ));
  288.     }
  290.     public function CentralEdgePageAction()
  291.     {
  292.         return $this->render('@HoneybeeWeb/pages/honeycore_edge.html.twig', array(
  293.             'page_title' => 'HoneyCore EMS | Energy & Site Intelligence — HoneyBee',
  294.             'og_description' => 'Connect solar PV, grid, generators, batteries, meters and sensors with O&M, billing, finance and reporting through HoneyCore EMS site intelligence.',
  295.         ));
  296.     }
  298.     public function CentralEdgeProjectsPageAction()
  299.     {
  300.         return $this->render('@HoneybeeWeb/pages/honeycore_edge_projects.html.twig', array(
  301.             'page_title' => 'HoneyCore 4.0 Design & Quotation Software | HoneyBee',
  302.             'og_description' => 'Turn site requirements into HoneyCore 4.0 architecture, sensor/meter schedules, BoQ, quotation, commissioning checklist and O&M workflow.',
  303.         ));
  304.     }
  306.     // ── WEB-2 (Conversion Spec §17-§25): the P1 product pages. Every page renders its
  307.     // prices from THE ONE central store; each carries exactly ONE primary CTA (§28). ──
  309.     private function webPage($template, $title, $desc)
  310.     {
  311.         return $this->render('@HoneybeeWeb/pages/' . $template, array(
  312.             'page_title' => $title,
  313.             'og_title' => $title,
  314.             'og_description' => $desc,
  315.             'prices' => PricingBook::publicBook(),
  316.         ));
  317.     }
  319.     /** Public website additions: a closed catalogue, with all existing actions retained. */
  320.     public function CentralWebsiteViewPageAction($page)
  321.     {
  322.         $pages = \ApplicationBundle\Modules\HoneybeeWeb\Support\WebsiteViewCore::pages();
  323.         if (!isset($pages[$page])) {
  324.             throw $this->createNotFoundException();
  325.         }
  326.         return $this->webPage('website/' . $pages[$page][0] . '.html.twig', $pages[$page][1],
  327.             'HoneyBee — business, engineering and operations for energy and building infrastructure.');
  328.     }
  330.     public function CentralWebsiteViewAppAction($app)
  331.     {
  332.         $apps = \ApplicationBundle\Modules\HoneybeeWeb\Support\WebsiteViewCore::apps();
  333.         if (!isset($apps[$app])) {
  334.             throw $this->createNotFoundException();
  335.         }
  336.         return $this->webPage('website/' . $apps[$app][0] . '.html.twig', $apps[$app][1], $apps[$app][1]);
  337.     }
  339.     public function CentralBusinessSuitePageAction()
  340.     {
  341.         return $this->webPage('business_suite.html.twig',
  342.             'HoneyBee Business Suite — Run your business from €8 per user/month',
  343.             'Accounting, HR, inventory, projects, CRM and procurement in one suite — with HiveMind AI on top and the Beezeness mobile app in the field.');
  344.     }
  346.     public function CentralHivemindPageAction()
  347.     {
  348.         return $this->webPage('hivemind.html.twig',
  349.             'HiveMind — Give your managers an AI operating partner | HoneyBee',
  350.             'HiveMind reads your live business data and works like an operating partner: project positions, management reporting, overdue actions, drafts and analysis on demand.');
  351.     }
  353.     public function CentralAgentsPageAction()
  354.     {
  355.         return $this->webPage('agents.html.twig',
  356.             'AI Agents — Build your digital workforce | HoneyBee',
  357.             'HoneyBee agents draft, chase and check across finance, sales, projects, HR, procurement, reporting, operations and customer service — humans approve the risk.');
  358.     }
  360.     public function CentralHoneycorePageAction()
  361.     {
  362.         return $this->webPage('honeycore.html.twig',
  363.             'HoneyCore 4.0 — Industrial intelligence at the edge | HoneyBee',
  364.             'One industrial controller for hybrid power, EMS and BMS — engineered hardware, transparent pricing, and authorized partner pricing for EPCs and system integrators.');
  365.     }
  367.     public function CentralHoneycoreHybridPageAction()
  368.     {
  369.         return $this->webPage('honeycore_hybrid.html.twig',
  370.             'Hybrid Control — PV, grid, generators and storage in one controller | HoneyCore 4.0',
  371.             'HoneyCore 4.0 coordinates PV+Grid, PV+DG, PV+BESS and full PV+DG+BESS+Grid sites — capacity-neutral pricing per site, not per kWp.');
  372.     }
  374.     public function CentralHoneycoreEmsPageAction()
  375.     {
  376.         return $this->webPage('honeycore_ems.html.twig',
  377.             'HoneyCore EMS — Turn site energy data into operational decisions | HoneyBee',
  378.             'Meters, sensors and assets feed one energy picture: consumption, generation, alarms and reports — tiered by energy endpoints, engineering quoted separately.');
  379.     }
  381.     public function CentralHoneycoreBmsPageAction()
  382.     {
  383.         return $this->webPage('honeycore_bms.html.twig',
  384.             'HoneyCore BMS — Building intelligence without enterprise software complexity | HoneyBee',
  385.             'HVAC, pumps, chillers, lighting, sensors, energy and alarms in one building view — priced by billable data points, not by vendor lock-in.');
  386.     }
  388.     public function CentralHoneywattPageAction()
  389.     {
  390.         return $this->webPage('honeywatt.html.twig',
  391.             'HoneyWatt — Learn free. Design free. Pay when the project gets serious.',
  392.             'Professional solar design in the browser: layout, stringing, protection, yield and a priced proposal. Free preliminary designs; detailed design per project.');
  393.     }
  395.     // ── WEB-4 (P2 trust): customers / implementation / security ──
  397.     public function CentralCustomersPageAction()
  398.     {
  399.         // §26 LAW: real, verified case studies ONLY — the page ships the structure and
  400.         // honest current proof; each named study lands when its customer authorizes it.
  401.         return $this->webPage('customers.html.twig',
  402.             'Customer Stories | HoneyBee',
  403.             'How companies run business operations, energy control and solar design on HoneyBee — documented case studies with verified outcomes, published with each customer\'s permission.');
  404.     }
  406.     public function CentralImplementationPageAction()
  407.     {
  408.         return $this->webPage('implementation.html.twig',
  409.             'Implementation — guided rollout, days not months | HoneyBee',
  410.             'How a HoneyBee rollout actually runs: a guided setup included with every subscription, first workflows live in days, modules added at your pace.');
  411.     }
  413.     public function CentralSecurityPageAction()
  414.     {
  415.         return $this->webPage('security.html.twig',
  416.             'Security & Data Protection | HoneyBee',
  417.             'One dedicated database per customer, role-based access control, human approval chains, audit trails and exportable data — the architecture facts, stated plainly.');
  418.     }
  420.     /**
  421.      * WEB-5 §33 — the first-party analytics beacon. WebAnalyticsCore is the whole
  422.      * contract; the endpoint answers 204 NO MATTER WHAT (a beacon explains nothing
  423.      * to probes, and sendBeacon ignores the response anyway).
  424.      */
  425.     public function CentralWaEventAction(Request $request)
  426.     {
  427.         if ($request->isMethod('POST')) {
  428.             $v = \ApplicationBundle\Modules\HoneybeeWeb\Support\WebAnalyticsCore::normalize($request->request->all());
  429.             if ($v['ok']) {
  430.                 try {
  431.                     $em = $this->getDoctrine()->getManager('company_group');
  432.                     $row = new \CompanyGroupBundle\Entity\EntityWebAnalytics();
  433.                     $row->setEvent($v['row']['event'])->setPage($v['row']['page'])->setMeta($v['row']['meta'])
  434.                         ->setUtmSource($v['row']['utmSource'])->setUtmMedium($v['row']['utmMedium'])
  435.                         ->setUtmCampaign($v['row']['utmCampaign'])->setRef($v['row']['ref'])->setSid($v['row']['sid']);
  436.                     $em->persist($row);
  437.                     $em->flush();
  438.                 } catch (\Throwable $e) { /* analytics must NEVER break or slow a page */ }
  439.             }
  440.         }
  442.         return new Response('', 204);
  443.     }
  445.     /**
  446.      * WEB-2 §29 — ONE endpoint for every buyer-intent form. WebIntentCore (pure) is the
  447.      * whole contract; this action only persists what it validated. POST only.
  448.      */
  449.     public function CentralIntentRequestAction(Request $request, $intent)
  450.     {
  451.         if (!$request->isMethod('POST')) {
  452.             return new JsonResponse(array('success' => false, 'message' => 'POST only.'), 405);
  453.         }
  454.         $v = WebIntentCore::validate($intent, $request->request->all());
  455.         if (!$v['ok']) {
  456.             return new JsonResponse(array('success' => false, 'message' => $v['error']));
  457.         }
  459.         $em = $this->getDoctrine()->getManager('company_group');
  460.         $entityTicket = new EntityTicket();
  461.         $entityTicket->setEmail($v['email']);
  462.         $entityTicket->setName($v['name']);
  463.         $entityTicket->setTitle($v['title']);
  464.         $entityTicket->setTicketBody($v['body']);
  465.         $em->persist($entityTicket);
  466.         $em->flush();
  468.         try {
  469.             $this->get('app.commercial_journey_service')->captureExistingObject('ticket', $entityTicket, 'talk_to_sales');
  470.         } catch (\Throwable $e) { /* journey capture must never break the form */ }
  472.         return new JsonResponse(array(
  473.             'success' => true,
  474.             'message' => 'Thank you — our team will get back to you shortly.',
  475.         ));
  476.     }
  478.     public function CentralExperiencePageAction()
  479.     {
  480.         return $this->render('@HoneybeeWeb/pages/experience.html.twig', array(
  481.             'page_title' => 'Experience & Proof | HoneyBee',
  482.             'og_description' => 'Built from real ERP, project, HoneyCore EMS and SME digital-transformation experience — with Germany/EU product focus and a Singapore SaaS base.',
  483.         ));
  484.     }
  486.     public function CentralTrustPageAction()
  487.     {
  488.         return $this->render('@HoneybeeWeb/pages/trust_governance.html.twig', array(
  489.             'page_title' => 'Trust & Governance | Security & Standards — HoneyBee',
  490.             'og_description' => 'Operator-owned data, RBAC, audit trails, NIS2-aware governance and a clear, no-overclaim standards map with claim-control categories.',
  491.         ));
  492.     }
  494.     // ── Self-serve pricing: server-authoritative price preview (cart calls this on every change) ──
  495.     public function CentralPricePreviewAction(Request $request)
  496.     {
  497.         $plan   = (string) $request->request->get('plan', 'core');
  498.         $users  = (int) $request->request->get('users', 0);
  499.         $admins = (int) $request->request->get('admins', 0);
  500.         $ml     = (int) $request->request->get('ml_users', 0);
  501.         $cycle  = $request->request->get('cycle', 'monthly') === 'yearly' ? 'yearly' : 'monthly';
  502.         $addons = (array) $request->request->get('addons', []);
  503.         // Keep only known add-on ids (never trust the client list blindly).
  504.         $catalogue = GeneralConstant::$subscriptionAddOns;
  505.         $addons = array_values(array_intersect($addons, array_keys($catalogue)));
  507.         $svc = new \CompanyGroupBundle\Modules\Api\Service\PricingService();
  508.         $breakdown = $svc->getPriceBreakdown($users, $admins, $ml, $cycle, $plan, $addons);
  509.         // attach the resolved add-on display rows for the cart
  510.         $addonRows = [];
  511.         foreach ($addons as $id) {
  512.             $addonRows[] = ['id' => $id, 'name' => $catalogue[$id]['name'], 'euMonthly' => (float) $catalogue[$id]['euMonthly']];
  513.         }
  514.         $breakdown['addon_rows'] = $addonRows;
  515.         return new JsonResponse(['ok' => true, 'breakdown' => $breakdown]);
  516.     }
  518.     // ── Investor Snapshot (Phase C) ──
  519.     public function CentralInvestorPageAction()
  520.     {
  521.         return $this->render('@HoneybeeWeb/pages/investor_snapshot.html.twig', array(
  522.             'page_title'     => 'Investor Snapshot | HoneyBee — Business + Energy Infrastructure OS',
  523.             'og_description' => 'HoneyBee is a vertical operating system for project-based energy, engineering and industrial companies — positioning, ICP, revenue model and defensibility. No invented metrics.',
  524.         ));
  525.     }
  527.     // ── Competitor comparison pages (Phase C) ──
  528.     public function CentralComparePageAction($slug)
  529.     {
  530.         $meta = [
  531.             'odoo'                       => ['HoneyBee vs Odoo | Project & Energy ERP Comparison', 'Odoo is a broad ERP suite. HoneyBee is built around project execution, EPC workflows, field operations and energy-infrastructure intelligence.'],
  532.             'zoho'                       => ['HoneyBee vs Zoho | ERP for Project & Energy Companies', 'Zoho covers general business apps. HoneyBee connects ERP, project execution, finance, O&M and HoneyCore energy data in one workflow.'],
  533.             'sap-business-one'           => ['HoneyBee vs SAP Business One | Project ERP Comparison', 'SAP Business One suits general operations. HoneyBee adds deep EPC/project execution and energy-infrastructure intelligence.'],
  534.             'microsoft-business-central' => ['HoneyBee vs Microsoft Business Central | Comparison', 'Business Central is a broad ERP. HoneyBee is purpose-built for project-based energy, engineering and industrial companies.'],
  535.             'monday-clickup'             => ['HoneyBee vs Monday / ClickUp | Beyond Task Management', 'Monday and ClickUp manage tasks. HoneyBee connects tasks with quotation, BoQ, procurement, billing, finance and energy data.'],
  536.             'excel'                      => ['HoneyBee vs Excel | From Spreadsheets to an Operating System', 'Excel is flexible but fragile. HoneyBee gives structure, audit trail, approvals, real-time data and automation.'],
  537.             'scada-ems'                  => ['HoneyBee vs SCADA / EMS Dashboards | Asset Data to Business', 'SCADA/EMS tools monitor assets. HoneyBee connects asset data with ERP, O&M, billing, reporting and AI.'],
  538.         ];
  539.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  540.         return $this->render('@HoneybeeWeb/pages/compare/' . $slug . '.html.twig', array(
  541.             'page_title'     => $meta[$slug][0],
  542.             'og_description' => $meta[$slug][1],
  543.             'compare_slug'   => $slug,
  544.         ));
  545.     }
  547.     // ── SEO solution landing pages (Phase C) ──
  548.     public function CentralSolutionPageAction($slug)
  549.     {
  550.         $meta = [
  551.             'erp-for-solar-epc'      => ['ERP for Solar EPC Companies | HoneyBee Project ERP', 'Project ERP for solar EPC: quotation, BoQ, procurement, site execution, milestone billing, O&M and HoneyCore EMS energy intelligence.'],
  552.             'erp-for-engineering'    => ['ERP for Engineering Companies | HoneyBee Project ERP', 'Control engineering projects from quotation to delivery, billing and profitability with HoneyBee Project ERP.'],
  553.             'erp-for-construction'   => ['ERP for Construction Project Companies | HoneyBee', 'BoQ, procurement, site execution, milestone billing and retention for construction project companies.'],
  554.             'erp-for-om'             => ['ERP for O&M Companies | HoneyBee', 'Connect O&M workflows with billing, reporting and energy-asset data through HoneyBee and HoneyCore EMS.'],
  555.             'erp-for-trading'        => ['ERP for Trading & Distribution Companies | HoneyBee', 'HR, accounts, inventory, sales, purchase and CRM for trading and distribution companies.'],
  556.             'project-erp-bangladesh' => ['Project ERP for Bangladesh SMEs | HoneyBee', 'Affordable project ERP for Bangladesh SMEs — quotation, procurement, site execution, billing and reporting.'],
  557.             'project-erp-singapore'  => ['Project ERP for Singapore SMEs | HoneyBee', 'Project ERP for Singapore SMEs and project-based companies — execution, finance and reporting in one system.'],
  558.             'project-erp-germany'    => ['Project ERP for German Energy Companies | HoneyBee', 'Project ERP for German energy and engineering companies, DATEV-ready export and GoBD-aligned audit trail where implemented.'],
  559.             'honeycore-solar-pv'     => ['HoneyCore for Solar PV Monitoring | HoneyBee', 'HoneyCore EMS connects solar PV, inverters and meters with O&M, billing, reporting and AI.'],
  560.             'honeycore-hybrid-energy'=> ['HoneyCore for Hybrid Energy Systems | HoneyBee', 'Monitor solar, battery, generator and grid in hybrid energy systems with HoneyCore EMS.'],
  561.             'honeycore-cold-chain'   => ['HoneyCore for Cold Chain & Healthcare Infrastructure | HoneyBee', 'Temperature, energy and utility monitoring for cold-chain and healthcare infrastructure with HoneyCore EMS.'],
  562.             'honeycore-agri-pv'      => ['HoneyCore for Agri-PV & Irrigation | HoneyBee', 'Connect solar generation, soil and irrigation data with HoneyCore EMS for Agri-PV and solar irrigation.'],
  563.             // WEB-3 (§4/§32): the BUYER pages — one buyer, one problem, one page.
  564.             'solar-epc'                    => ['Solutions for Solar EPC Companies | HoneyBee', 'Design in HoneyWatt, run the project in the Business Suite, ship HoneyCore in scope — one connected flow from first site visit to O&M.'],
  565.             'system-integrators'           => ['Solutions for System Integrators | HoneyBee', 'System integrators build HoneyCore 4.0 into industrial and building projects — with partner pricing, deal registration and a business suite that runs the company behind the projects.'],
  566.             'energy-asset-owners'          => ['Solutions for Energy Asset Owners — IPP / PPA / OPEX | HoneyBee', 'Own the asset, own the truth: HoneyCore EMS meters every kWh, the Business Suite bills it, and reports roll fleets up without spreadsheets.'],
  567.             'industrial-energy-management' => ['Industrial Energy Management for C&I Companies | HoneyBee', 'Factories and commercial sites run HoneyCore for energy and building control while the Business Suite runs the operation — one vendor, one data model.'],
  568.             'multi-site-operations'        => ['Solutions for Multi-Site Operations | HoneyBee', 'Many sites, one picture: centralized reporting over per-site control — Business Suite operations with HoneyCore intelligence at every location.'],
  569.         ];
  570.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  571.         return $this->render('@HoneybeeWeb/pages/solutions/' . $slug . '.html.twig', array(
  572.             'page_title'     => $meta[$slug][0],
  573.             'og_title'       => $meta[$slug][0],
  574.             'og_description' => $meta[$slug][1],
  575.             'solution_slug'  => $slug,
  576.             'prices'         => PricingBook::publicBook(),
  577.         ));
  578.     }
  580.     // ── Calculators (Phase D) ──
  581.     public function CentralToolPageAction(Request $request, $slug)
  582.     {
  583.         $meta = [
  584.             'cost-leakage-calculator'   => ['Project Cost Leakage Calculator | HoneyBee', 'Estimate the hidden annual loss from delays, procurement leakage, billing delays and inventory loss — and the right HoneyBee path.'],
  585.             'roi-calculator'            => ['ERP ROI Calculator | HoneyBee', 'Estimate time saved and monthly savings from HoneyBee across approvals, invoices and projects.'],
  586.             'site-assessment-estimator' => ['HoneyCore Site Assessment Estimator | HoneyBee', 'Estimate your HoneyCore site assessment scope from sites, PV capacity, meters, inverters and protocols.'],
  587.             'rooftop-estimate'          => ['Instant Solar Estimate | HoneyBee 360', 'Enter your address and monthly bill — get an instant indicative PV size, annual yield, bill saving and payback, with every figure honestly tagged. Powered by PVGIS yield data.'],
  588.         ];
  589.         if (!isset($meta[$slug])) { throw $this->createNotFoundException(); }
  591.         // ── FUNNEL-3: the logged-in APPLICANT's detail delta on the public studio —
  592.         // an owned saved design opens for editing (?mydesign=N) and the offer form
  593.         // pre-fills from the account. Strictly additive + fail-soft: anonymous
  594.         // visitors and every other tool page render exactly as before.
  595.         $myDesign = null;
  596.         $applicant = null;
  597.         if ($slug === 'rooftop-estimate') {
  598.             try {
  599.                 $session = $request->getSession();
  600.                 if ((int) $session->get(UserConstants::USER_TYPE, 0) === UserConstants::USER_TYPE_APPLICANT
  601.                     && (int) $session->get(UserConstants::USER_ID, 0) > 0) {
  602.                     $applicant = array(
  603.                         'name'  => (string) $session->get(UserConstants::USER_NAME, ''),
  604.                         'email' => (string) $session->get(UserConstants::USER_EMAIL, ''),
  605.                     );
  606.                     $pid = (int) $request->query->get('mydesign', 0);
  607.                     if ($pid > 0) {
  608.                         $em = $this->getDoctrine()->getManager('company_group');
  609.                         $project = (new Hb360ProjectService($em))
  610.                             ->findOwned($pid, (int) $session->get(UserConstants::USER_ID, 0));
  611.                         if ($project && $project->getDesignJson()) {
  612.                             $dj = json_decode((string) $project->getDesignJson(), true);
  613.                             if (is_array($dj) && isset($dj['payload']) && is_array($dj['payload'])) {
  614.                                 $myDesign = array(
  615.                                     'id'      => (int) $project->getId(),
  616.                                     'title'   => (string) ($project->getTitle() ?: ('Design #' . $project->getId())),
  617.                                     'address' => (string) $project->getAddress(),
  618.                                     'payload' => $dj['payload'],
  619.                                     'summary' => FunnelManifestCore::summary($dj['payload']),
  620.                                 );
  621.                             }
  622.                         }
  623.                     }
  624.                 }
  625.             } catch (\Throwable $e) {
  626.                 $myDesign = null; // the public page never breaks over account extras
  627.             }
  628.         }
  630.         return $this->render('@HoneybeeWeb/pages/tools/' . $slug . '.html.twig', array(
  631.             'page_title'     => $meta[$slug][0],
  632.             'og_description' => $meta[$slug][1],
  633.             'tool_slug'      => $slug,
  634.             'maps_key'       => $this->mapsBrowserKey(),
  635.             'my_design'      => $myDesign,
  636.             'applicant'      => $applicant,
  637.         ));
  638.     }
  640.     // Failsafe default — used when no parameter is configured in parameters.yml.
  641.     const HB_MAPS_KEY = 'AIzaSyBJxyUy8a_U2rSdIUApVDoK_dcvgGkoeDk';
  643.     /** Server-side Google key (Geocoding + Solar API): parameter `google_maps_api_key`, else the built-in default. Never throws. */
  644.     protected function mapsKey()
  645.     {
  646.         if ($this->container->hasParameter('google_maps_api_key')) {
  647.             $k = $this->container->getParameter('google_maps_api_key');
  648.             if (is_string($k) && trim($k) !== '') { return $k; }
  649.         }
  650.         return self::HB_MAPS_KEY;
  651.     }
  653.     /** Client-side (browser) Google key for the map JS: parameter `google_maps_browser_key`, else the server key, else default. Never throws. */
  654.     protected function mapsBrowserKey()
  655.     {
  656.         if ($this->container->hasParameter('google_maps_browser_key')) {
  657.             $k = $this->container->getParameter('google_maps_browser_key');
  658.             if (is_string($k) && trim($k) !== '') { return $k; }
  659.         }
  660.         return $this->mapsKey();
  661.     }
  663.     /**
  664.      * FUNNEL-1 — sliding-window rate guard for the PUBLIC estimator/studio endpoints
  665.      * (they had none; /auto spends metered Google calls per request). Decision math is
  666.      * pure `PublicRateLimitCore::decide` (selftested); the store is best-effort tmp
  667.      * files — ANY limiter-infrastructure failure allows the request (the limiter guards
  668.      * metered APIs; it must never take the public page down). Per-box override:
  669.      * container parameter `hb360_rate_<bucket>_per_hour`, read with a fallback — never
  670.      * a %param% DI reference.
  671.      *
  672.      * @return JsonResponse|null a 429 refusal, or null = proceed
  673.      */
  674.     protected function hb360RateGuard(Request $request, $bucket, $defaultPerHour)
  675.     {
  676.         try {
  677.             $limit = (int) $defaultPerHour;
  678.             $key = 'hb360_rate_' . $bucket . '_per_hour';
  679.             if ($this->container->hasParameter($key)) {
  680.                 $v = (int) $this->container->getParameter($key);
  681.                 if ($v > 0) { $limit = $v; }
  682.             }
  683.             $token = (string) $request->cookies->get('hb360_anon', '');
  684.             $keys = PublicRateLimitCore::keysFor((string) $request->getClientIp(), $token);
  685.             // FUNNEL-3: a signed-in account gets its own bucket too (cookie-clearing
  686.             // can't reset it; a shared office IP doesn't starve individual accounts).
  687.             $acct = (int) $request->getSession()->get(UserConstants::USER_ID, 0);
  688.             if ($acct > 0) {
  689.                 $keys[] = 'acct:' . $acct;
  690.             }
  691.             $res = PublicRateLimitCore::checkAndRecord($bucket, $keys, $limit);
  692.             if (!$res['allowed']) {
  693.                 $mins = max(1, (int) ceil($res['retry_after'] / 60));
  694.                 return new JsonResponse([
  695.                     'ok' => false,
  696.                     'rate_limited' => true,
  697.                     'retry_after_s' => (int) $res['retry_after'],
  698.                     'error' => 'Too many requests from your connection — please wait about '
  699.                         . $mins . ' minute' . ($mins === 1 ? '' : 's') . ' and try again.',
  700.                 ], 429);
  701.             }
  702.         } catch (\Throwable $e) {
  703.             // fail-open by design (see docblock)
  704.         }
  705.         return null;
  706.     }
  708.     // ── Rooftop estimate — MANUAL draw endpoint (area + coords from the map) ──
  709.     public function CentralRooftopCalcAction(Request $request)
  710.     {
  711.         if ($refused = $this->hb360RateGuard($request, 'calc', PublicRateLimitCore::DEFAULT_CALC_PER_HOUR)) {
  712.             return $refused;
  713.         }
  714.         $lat     = (float) $request->request->get('lat', 0);
  715.         $lng     = (float) $request->request->get('lng', 0);
  716.         $area    = (float) $request->request->get('area_m2', 0);
  717.         $mode    = $request->request->get('mode', 'roof');
  718.         $monthly = (float) $request->request->get('monthly_kwh', 0);
  719.         $bill    = (float) $request->request->get('monthly_bill', 0);
  720.         $tariff  = (float) $request->request->get('tariff', 0.22);
  721.         $tilt    = (float) $request->request->get('tilt', 10);
  722.         $src     = $request->request->get('roof_source') === 'manual' ? 'manual' : 'map';
  724.         // ── SDS2 (additive): the studio's live economics panel sends the REAL packed kWp plus
  725.         // the zone's pitch/azimuth/mount-mode. `kwp` absent/0 ⇒ the legacy path below runs
  726.         // byte-identical. SDS2 responses are TRANSIENT (no hb360 anon-project upsert — a live
  727.         // drag must not overwrite the visitor's saved estimate; persistence is SDS3).
  728.         $sdsKwp = (float) $request->request->get('kwp', 0);
  729.         if ($sdsKwp > 0) {
  730.             if ($lat == 0) {
  731.                 return new JsonResponse(['ok' => false, 'error' => 'Draw a roof outline on the map first.']);
  732.             }
  733.             $res = $this->computeSdsZoneEconomics($lat, $lng, $area, $sdsKwp, [
  734.                 'pitch_deg'   => (float) $request->request->get('pitch_deg', 0),
  735.                 'azimuth_deg' => (float) $request->request->get('azimuth_deg', 180),
  736.                 // AUDIT SU-06: 'tracker' passes through — it was folded into 'south', so trackers never got their tracking yield
  737.                 'mount_mode'  => in_array($request->request->get('mount_mode'), array('ew', 'tracker'), true) ? (string) $request->request->get('mount_mode') : 'south',
  738.                 'module_wp'   => (float) $request->request->get('module_wp', 450),
  739.                 'total_kwp'   => (float) $request->request->get('total_kwp', 0),
  740.             ], $monthly, $bill, $tariff);
  741.             return new JsonResponse($res);
  742.         }
  744.         if ($area <= 5 || $lat == 0) {
  745.             return new JsonResponse(['ok' => false, 'error' => 'Draw a roof outline on the map first.']);
  746.         }
  747.         $res = $this->computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthly, $bill, $tariff, null, $src);
  748.         $res['roof_source'] = $src === 'manual' ? 'manual area' : 'Map outline';
  749.         $res['lat'] = $lat; $res['lng'] = $lng;
  750.         return $this->hb360Respond($request, $res, [
  751.             'mode' => $mode, 'monthly_kwh' => $monthly, 'monthly_bill' => $bill,
  752.             'tariff' => $tariff, 'tilt' => $tilt, 'area_m2' => $area, 'roof_source' => $src,
  753.         ]);
  754.     }
  756.     // ── Rooftop estimate — AUTO from ADDRESS (geocode → Google Solar API → OSM footprint → PVGIS) ──
  757.     public function CentralRooftopAutoAction(Request $request)
  758.     {
  759.         // the tight cap — every /auto call can spend metered Google (geocode + Solar API)
  760.         if ($refused = $this->hb360RateGuard($request, 'auto', PublicRateLimitCore::DEFAULT_AUTO_PER_HOUR)) {
  761.             return $refused;
  762.         }
  763.         $address = trim((string) $request->request->get('address', ''));
  764.         $mode    = $request->request->get('mode', 'roof');
  765.         $monthly = (float) $request->request->get('monthly_kwh', 0);
  766.         $bill    = (float) $request->request->get('monthly_bill', 0);
  767.         $tariff  = (float) $request->request->get('tariff', 0.22);
  768.         $tilt    = (float) $request->request->get('tilt', 10);
  770.         if ($address === '') {
  771.             return new JsonResponse(['ok' => false, 'error' => 'Enter an address first.']);
  772.         }
  773.         $geo = $this->geocodeAddress($address);
  774.         if ($geo === null) {
  775.             return new JsonResponse(['ok' => false, 'error' => 'Address not found — try a more specific address.']);
  776.         }
  777.         $lat = $geo['lat']; $lng = $geo['lng'];
  779.         // Tier 1: Google Solar API (best — real roof + panel layout). Null when API disabled / no coverage.
  780.         $preset = $this->solarApiDesign($lat, $lng);
  781.         $roofSource = null; $area = null; $src = 'map';
  782.         if ($preset !== null) {
  783.             $area = $preset['roof_area']; $roofSource = 'Google Solar API'; $src = 'solar_api';
  784.         } else {
  785.             // Tier 2: OSM building footprint (free, global where mapped).
  786.             $area = $this->osmBuildingArea($lat, $lng);
  787.             if ($area !== null) { $roofSource = 'OSM building footprint'; $src = 'osm'; }
  788.         }
  790.         if ($area === null || $area < 10) {
  791.             // Tier 3: hand off to manual draw at the geocoded location.
  792.             return new JsonResponse([
  793.                 'ok' => false, 'needs_manual' => true,
  794.                 'lat' => $lat, 'lng' => $lng, 'formatted_address' => $geo['formatted'],
  795.                 'error' => 'Could not auto-detect the roof at this address — trace it on the map below.',
  796.             ]);
  797.         }
  799.         $res = $this->computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthly, $bill, $tariff, $preset, $src);
  800.         $res['lat'] = $lat; $res['lng'] = $lng;
  801.         $res['formatted_address'] = $geo['formatted'];
  802.         $res['roof_source'] = $roofSource;
  803.         return $this->hb360Respond($request, $res, [
  804.             'mode' => $mode, 'monthly_kwh' => $monthly, 'monthly_bill' => $bill,
  805.             'tariff' => $tariff, 'tilt' => $tilt, 'address' => $address, 'roof_source' => $src,
  806.         ]);
  807.     }
  809.     /**
  810.      * H1b: wrap an estimate response — persist the guest's estimate as their ONE
  811.      * anonymous Hb360Project (keyed by the `hb360_anon` cookie) so it survives
  812.      * the trip through the signup wall. Strictly fail-safe: if the central
  813.      * schema/table isn't there yet, the public estimator answers exactly as
  814.      * before, just without a saved copy.
  815.      */
  816.     private function hb360Respond(Request $request, array $res, array $inputs)
  817.     {
  818.         $token = null;
  819.         if (!empty($res['ok'])) {
  820.             try {
  821.                 $token = (string) $request->cookies->get('hb360_anon', '');
  822.                 if (!preg_match('/^[a-f0-9]{32,64}$/', $token)) {
  823.                     $token = Hb360ProjectService::newToken();
  824.                 }
  825.                 $em = $this->getDoctrine()->getManager('company_group');
  826.                 $project = (new Hb360ProjectService($em))->upsertForToken($token, [
  827.                     'address'  => (string) ($res['formatted_address'] ?? ($inputs['address'] ?? '')),
  828.                     'lat'      => $res['lat'] ?? null,
  829.                     'lng'      => $res['lng'] ?? null,
  830.                     'inputs'   => $inputs,
  831.                     'estimate' => $res,
  832.                 ]);
  833.                 $res['saved'] = ['project_id' => (int) $project->getId()];
  834.             } catch (\Throwable $e) {
  835.                 $token = null; // saving is an enhancement, never a gate
  836.             }
  837.         }
  838.         $response = new JsonResponse($res);
  839.         if ($token) {
  840.             // 90 days, whole site, httpOnly (JS never needs it — the server reads it).
  841.             $response->headers->setCookie(new Cookie('hb360_anon', $token, time() + 90 * 86400, '/', null, false, true));
  842.         }
  843.         return $response;
  844.     }
  846.     /**
  847.      * FUNNEL-1 — the ONE deliberate public write: "Save design". The visitor's studio
  848.      * design (the client exportDesign() payload) becomes their single anonymous draft
  849.      * (hb360_project.design_json, the H1b one-row-per-visitor pattern), keyed by the
  850.      * same `hb360_anon` cookie the estimate save uses — so the EXISTING login attach
  851.      * hook carries the design across the signup wall untouched.
  852.      *
  853.      * Guard order: rate limit → wire-size cap → shape → FunnelManifestCore::validate
  854.      * (caps + geometry sanity + the portability rule: tenant library ids refused).
  855.      * Storage is fail-SAFE for the page but HONEST for the click: if the central
  856.      * schema/column is missing, the response says saving is unavailable — it never
  857.      * claims "saved" for a row that does not exist.
  858.      */
  859.     public function CentralRooftopDesignSaveAction(Request $request)
  860.     {
  861.         if ($refused = $this->hb360RateGuard($request, 'save', PublicRateLimitCore::DEFAULT_SAVE_PER_HOUR)) {
  862.             return $refused;
  863.         }
  864.         $raw = (string) $request->getContent();
  865.         if (strlen($raw) > FunnelManifestCore::MAX_BYTES) {
  866.             return new JsonResponse(['ok' => false, 'error' => 'This design is too large to save online ('
  867.                 . round(strlen($raw) / 1024) . ' KB — the limit is '
  868.                 . round(FunnelManifestCore::MAX_BYTES / 1024) . ' KB).'], 413);
  869.         }
  870.         $body = json_decode($raw, true);
  871.         $payload = (is_array($body) && isset($body['payload']) && is_array($body['payload'])) ? $body['payload'] : null;
  872.         if ($payload === null) {
  873.             return new JsonResponse(['ok' => false, 'error' => 'Malformed design payload.'], 400);
  874.         }
  875.         $v = FunnelManifestCore::validate($payload, strlen($raw));
  876.         if (!$v['ok']) {
  877.             return new JsonResponse(['ok' => false, 'error' => implode(' ', $v['errors'])], 422);
  878.         }
  880.         $token = (string) $request->cookies->get('hb360_anon', '');
  881.         if (!preg_match('/^[a-f0-9]{32,64}$/', $token)) {
  882.             $token = Hb360ProjectService::newToken();
  883.         }
  884.         $hash = FunnelManifestCore::hash($payload);
  885.         $stored = [
  886.             'format'   => FunnelManifestCore::FORMAT,
  887.             'hash'     => $hash,
  888.             'saved_at' => date('c'),
  889.             'payload'  => $payload,
  890.         ];
  891.         $meta = [
  892.             'address' => (string) (isset($body['address']) ? $body['address'] : ''),
  893.             'lat'     => isset($payload['lat']) ? $payload['lat'] : null,
  894.             'lng'     => isset($payload['lng']) ? $payload['lng'] : null,
  895.         ];
  896.         try {
  897.             $em = $this->getDoctrine()->getManager('company_group');
  898.             $svc = new Hb360ProjectService($em);
  899.             // FUNNEL-3: a signed-in applicant editing an OWNED design saves onto THAT
  900.             // row (own-checked), never onto the anon draft. Everyone else keeps the
  901.             // one-anon-draft-per-visitor path unchanged.
  902.             $owned = $this->applicantOwnedProject($request, (int) (isset($body['project_id']) ? $body['project_id'] : 0), $svc);
  903.             $project = $owned !== null
  904.                 ? $svc->saveDesignForProject($owned, $stored, $meta)
  905.                 : $svc->saveDesignForToken($token, $stored, $meta);
  906.         } catch (\Throwable $e) {
  907.             // honest, not fake-saved: schema not migrated / DB hiccup
  908.             return new JsonResponse(['ok' => false,
  909.                 'error' => 'Saving is temporarily unavailable — your design stays in this browser tab.'], 503);
  910.         }
  911.         $response = new JsonResponse([
  912.             'ok' => true,
  913.             'saved' => [
  914.                 'project_id'  => (int) $project->getId(),
  915.                 'design_hash' => $hash,
  916.                 'summary'     => FunnelManifestCore::summary($payload),
  917.             ],
  918.         ]);
  919.         $response->headers->setCookie(new Cookie('hb360_anon', $token, time() + 90 * 86400, '/', null, false, true));
  920.         return $response;
  921.     }
  923.     /**
  924.      * FUNNEL-3 — resolve a project id to an OWNED row for the signed-in applicant, or
  925.      * null (not signed in / not theirs / no id). Ownership is findOwned's law — a
  926.      * foreign id yields null, never someone else's row.
  927.      */
  928.     private function applicantOwnedProject(Request $request, $projectId, Hb360ProjectService $svc)
  929.     {
  930.         $projectId = (int) $projectId;
  931.         if ($projectId <= 0) {
  932.             return null;
  933.         }
  934.         $session = $request->getSession();
  935.         if ((int) $session->get(UserConstants::USER_TYPE, 0) !== UserConstants::USER_TYPE_APPLICANT) {
  936.             return null;
  937.         }
  938.         $uid = (int) $session->get(UserConstants::USER_ID, 0);
  939.         if ($uid <= 0) {
  940.             return null;
  941.         }
  942.         return $svc->findOwned($projectId, $uid);
  943.     }
  945.     /**
  946.      * FUNNEL-2 — the routing rule rows for public resolution (fail-safe: any read problem
  947.      * = empty list, which resolves to the honest 'unrouted' refusal, never a guess).
  948.      * @return array[]|null null = the funnel is not configured on this box (table absent)
  949.      */
  950.     private function sdsFunnelRules()
  951.     {
  952.         try {
  953.             $em = $this->getDoctrine()->getManager('company_group');
  954.             if (!$em->getConnection()->getSchemaManager()->tablesExist(array('sds_funnel_routing'))) {
  955.                 return null;
  956.             }
  957.             $rules = array();
  958.             foreach ($em->getRepository(SdsFunnelRouting::class)->findAll() as $r) {
  959.                 $rules[] = array(
  960.                     'id' => (int) $r->getId(),
  961.                     'country_code' => $r->getCountryCode(),
  962.                     'app_id' => (int) $r->getAppId(),
  963.                     'priority' => (int) $r->getPriority(),
  964.                     'enabled' => (int) $r->getEnabledFlag(),
  965.                 );
  966.             }
  967.             return $rules;
  968.         } catch (\Throwable $e) {
  969.             return null;
  970.         }
  971.     }
  973.     /**
  974.      * P1-A — the provider directory rows for the visitor's choice, as FunnelProviderCore reads them. A row is
  975.      * offerable only when listed, verified AND its dispatch secret is configured on this box (a chosen company
  976.      * must be one the dispatcher can actually reach). Read problems ⇒ empty list ⇒ match-only, never a guess.
  977.      * @return array[]
  978.      */
  979.     private function sdsFunnelProviders()
  980.     {
  981.         try {
  982.             $em = $this->getDoctrine()->getManager('company_group');
  983.             if (!$em->getConnection()->getSchemaManager()->tablesExist(array('sds_provider'))) {
  984.                 return array();
  985.             }
  986.             $out = array();
  987.             foreach ($em->getRepository('CompanyGroupBundle\\Entity\\SdsProvider')->findBy(array('listedFlag' => 1, 'verifiedFlag' => 1)) as $p) {
  988.                 $appId = (int) $p->getAppId();
  989.                 $out[] = array(
  990.                     'app_id' => $appId,
  991.                     'name' => (string) ($p->getPublicName() ?: $this->sdsFunnelTenantLabel($appId)),
  992.                     'countries' => $p->getCountries(),
  993.                     'listed' => (int) $p->getListedFlag(),
  994.                     'verified' => (int) $p->getVerifiedFlag(),
  995.                     'secret_ok' => \ApplicationBundle\Helper\SdsFunnelConfig::relaySecret($appId) !== '',
  996.                 );
  997.             }
  998.             return $out;
  999.         } catch (\Throwable $e) {
  1000.             return array();
  1001.         }
  1002.     }
  1004.     /** Display name for a routed tenant (the consent copy must NAME the recipient). */
  1005.     private function sdsFunnelTenantLabel($appId)
  1006.     {
  1007.         try {
  1008.             $goc = $this->getDoctrine()->getManager('company_group')
  1009.                 ->getRepository('CompanyGroupBundle\\Entity\\CompanyGroup')
  1010.                 ->findOneBy(array('appId' => (int) $appId));
  1011.             $name = $goc ? trim((string) $goc->getName()) : '';
  1012.             return $name !== '' ? $name : ('Partner workspace #' . (int) $appId);
  1013.         } catch (\Throwable $e) {
  1014.             return 'Partner workspace #' . (int) $appId;
  1015.         }
  1016.     }
  1018.     /**
  1019.      * FUNNEL-2 — GET the would-be recipient for a country, so the consent copy can NAME
  1020.      * the company BEFORE the visitor submits (DE requirement; copy is ENTWURF until
  1021.      * counsel clears it). Returns only a display name — never rule internals.
  1022.      */
  1023.     public function CentralRooftopOfferTargetAction(Request $request)
  1024.     {
  1025.         if ($refused = $this->hb360RateGuard($request, 'offer', 30)) {
  1026.             return $refused;
  1027.         }
  1028.         $country = (string) $request->query->get('country', '');
  1029.         if (!FunnelRoutingCore::isValidCountry($country)) {
  1030.             return new JsonResponse(['ok' => false, 'error' => 'Pick your country first.'], 422);
  1031.         }
  1032.         $rules = $this->sdsFunnelRules();
  1033.         if ($rules === null) {
  1034.             return new JsonResponse(['ok' => false, 'error' => 'Offers are not available yet on this site.'], 503);
  1035.         }
  1036.         $res = FunnelRoutingCore::resolve($rules, $country);
  1037.         // P1-A: the visitor may PICK from the verified providers serving the country; the routed
  1038.         // company (HoneyBee by default) is pre-selected when it is among them
  1039.         $options = FunnelProviderCore::options($this->sdsFunnelProviders(), $country);
  1040.         $defaultApp = FunnelProviderCore::defaultOption($options, $rules, $country);
  1041.         if (empty($res['ok']) && count($options) === 0) {
  1042.             return new JsonResponse(['ok' => false, 'unrouted' => true, 'providers' => [], 'default_app_id' => 0,
  1043.                 'error' => 'We do not have a solar partner for your country yet — your request would be recorded and we will contact you when one is available.']);
  1044.         }
  1045.         $company = !empty($res['ok']) ? $this->sdsFunnelTenantLabel($res['app_id']) : '';
  1046.         foreach ($options as $o) {
  1047.             if ($o['app_id'] === $defaultApp) { $company = $o['name']; }
  1048.         }
  1049.         return new JsonResponse(['ok' => true, 'company' => $company, 'providers' => $options, 'default_app_id' => $defaultApp,
  1050.             'matched' => !empty($res['ok'])]);
  1051.     }
  1053.     /**
  1054.      * FUNNEL-2 — "Request offer": the visitor's SAVED design + their contact facts become
  1055.      * ONE outbox row (status pending, or 'unrouted' STORED so the operator sees the
  1056.      * demand). Delivery is the dispatch cron's job — this endpoint never talks to a
  1057.      * tenant box. Consent is required and recorded; the response names the recipient.
  1058.      */
  1059.     public function CentralRooftopRequestOfferAction(Request $request)
  1060.     {
  1061.         if ($refused = $this->hb360RateGuard($request, 'offer', 30)) {
  1062.             return $refused;
  1063.         }
  1064.         $body = json_decode((string) $request->getContent(), true);
  1065.         if (!is_array($body)) {
  1066.             return new JsonResponse(['ok' => false, 'error' => 'Malformed request.'], 400);
  1067.         }
  1068.         $name = trim((string) ($body['name'] ?? ''));
  1069.         $email = trim((string) ($body['email'] ?? ''));
  1070.         $phone = trim((string) ($body['phone'] ?? ''));
  1071.         $country = trim((string) ($body['country'] ?? ''));
  1072.         $message = trim((string) ($body['message'] ?? ''));
  1073.         if (mb_strlen($name) < 2) {
  1074.             return new JsonResponse(['ok' => false, 'error' => 'Enter your name.'], 422);
  1075.         }
  1076.         if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
  1077.             return new JsonResponse(['ok' => false, 'error' => 'Enter a valid email address.'], 422);
  1078.         }
  1079.         if (!FunnelRoutingCore::isValidCountry($country)) {
  1080.             return new JsonResponse(['ok' => false, 'error' => 'Pick your country.'], 422);
  1081.         }
  1082.         if (empty($body['consent'])) {
  1083.             return new JsonResponse(['ok' => false, 'error' => 'Please confirm the consent checkbox — we can only send your design to a partner with your agreement.'], 422);
  1084.         }
  1086.         // the SAVED design is the subject — an OWNED row when the signed-in applicant
  1087.         // named one (FUNNEL-3), else the visitor's one anon draft (FUNNEL-1)
  1088.         $token = (string) $request->cookies->get('hb360_anon', '');
  1089.         $project = null;
  1090.         $stored = null;
  1091.         try {
  1092.             $em = $this->getDoctrine()->getManager('company_group');
  1093.             $svc = new Hb360ProjectService($em);
  1094.             $project = $this->applicantOwnedProject($request, (int) ($body['project_id'] ?? 0), $svc);
  1095.             if ($project === null && preg_match('/^[a-f0-9]{32,64}$/', $token)) {
  1096.                 $project = $svc->findLatestForToken($token);
  1097.             }
  1098.             if ($project && $project->getDesignJson()) {
  1099.                 $dj = json_decode((string) $project->getDesignJson(), true);
  1100.                 if (is_array($dj) && isset($dj['payload']) && is_array($dj['payload'])) {
  1101.                     $stored = $dj;
  1102.                 }
  1103.             }
  1104.         } catch (\Throwable $e) {
  1105.             $stored = null;
  1106.         }
  1107.         if ($stored === null) {
  1108.             return new JsonResponse(['ok' => false, 'error' => 'Save your design first — the offer is prepared from the saved layout.'], 422);
  1109.         }
  1111.         $rules = $this->sdsFunnelRules();
  1112.         if ($rules === null) {
  1113.             return new JsonResponse(['ok' => false, 'error' => 'Offers are not available yet on this site.'], 503);
  1114.         }
  1115.         // P1-A: a picked provider must be one the visitor could have been shown — otherwise refused, never substituted
  1116.         $chosenApp = (int) ($body['provider_app_id'] ?? 0);
  1117.         $resolved = FunnelProviderCore::choose($this->sdsFunnelProviders(), $rules, $country, $chosenApp);
  1118.         if (empty($resolved['ok']) && ($resolved['reason'] ?? '') === 'not_offered') {
  1119.             return new JsonResponse(['ok' => false, 'error' => 'That company is not available for your country — pick one from the list, or leave the choice to us.'], 422);
  1120.         }
  1121.         $chosenBy = !empty($resolved['ok']) && $resolved['how'] === FunnelProviderCore::HOW_PICKED ? 'visitor' : 'routing';
  1123.         try {
  1124.             $em = $this->getDoctrine()->getManager('company_group');
  1125.             $h = new SdsFunnelHandoff();
  1126.             $h->setHandoffUid(bin2hex(random_bytes(12))); // 24 hex — fits 'sdsf:'+uid in lead.source(50)
  1127.             $h->setProjectId($project ? (int) $project->getId() : null);
  1128.             $h->setManifestHash((string) ($stored['hash'] ?? ''));
  1129.             $h->setManifestJson(json_encode($stored, JSON_UNESCAPED_UNICODE));
  1130.             $h->setLeadJson(json_encode([
  1131.                 'name' => mb_substr($name, 0, 255),
  1132.                 'email' => mb_substr($email, 0, 255),
  1133.                 'phone' => mb_substr($phone, 0, 64),
  1134.                 'country_code' => strtoupper(substr($country, 0, 2)),
  1135.                 'message' => mb_substr($message, 0, 2000),
  1136.                 'consent_at' => date('c'),
  1137.                 'source' => 'hb360-public-studio',
  1138.                 'chosen_by' => $chosenBy, // visitor = picked from the directory; routing = matched by country
  1139.                 'provider_app_id' => !empty($resolved['ok']) ? (int) $resolved['app_id'] : 0,
  1140.             ], JSON_UNESCAPED_UNICODE));
  1141.             $h->setCountryCode($country);
  1142.             $h->setAddress((string) ($project ? $project->getAddress() : ''));
  1143.             if (!empty($resolved['ok'])) {
  1144.                 $h->setRuleId($resolved['rule_id']); // null when the visitor picked
  1145.                 $h->setTargetAppId($resolved['app_id']);
  1146.                 $h->setStatus('pending');
  1147.             } else {
  1148.                 $h->setStatus('unrouted'); // stored — the operator sees the demand (EB 'unlinked' discipline)
  1149.                 $h->setLastError('no routing rule matched country ' . strtoupper($country));
  1150.             }
  1151.             $em->persist($h);
  1152.             $em->flush();
  1153.         } catch (\Throwable $e) {
  1154.             return new JsonResponse(['ok' => false, 'error' => 'Could not record your request right now — please try again in a moment.'], 503);
  1155.         }
  1157.         if (empty($resolved['ok'])) {
  1158.             return new JsonResponse(['ok' => true, 'unrouted' => true,
  1159.                 'note' => 'We do not have a solar partner for your country yet. Your request is recorded and we will contact you at ' . $email . ' when one is available.']);
  1160.         }
  1161.         $label = $this->sdsFunnelTenantLabel($resolved['app_id']);
  1162.         foreach (FunnelProviderCore::options($this->sdsFunnelProviders(), $country) as $o) {
  1163.             if ($o['app_id'] === (int) $resolved['app_id']) { $label = $o['name']; }
  1164.         }
  1165.         return new JsonResponse(['ok' => true,
  1166.             'company' => $label,
  1167.             'chosen_by' => $chosenBy,
  1168.             'note' => 'Your design and contact details will be sent to ' . $label
  1169.                 . ', who will prepare your offer and contact you at ' . $email . '.']);
  1170.     }
  1172.     /** H1c: public read-only view of a shared feasibility report (unguessable token). */
  1173.     public function Hb360SharedAction($shareToken)
  1174.     {
  1175.         $project = null;
  1176.         try {
  1177.             $em = $this->getDoctrine()->getManager('company_group');
  1178.             $project = (new Hb360ProjectService($em))->findByShareToken((string) $shareToken);
  1179.         } catch (\Throwable $e) {
  1180.             $project = null;
  1181.         }
  1182.         if (!$project) {
  1183.             throw $this->createNotFoundException();
  1184.         }
  1185.         return $this->render('@HoneybeeWeb/pages/tools/hb360_shared.html.twig', array(
  1186.             'page_title' => 'Shared Solar Feasibility Estimate | HoneyBee 360',
  1187.             'project'    => $project,
  1188.             'estimate'   => json_decode($project->getEstimateJson(), true),
  1189.             'report'     => $project->getReportJson() ? json_decode($project->getReportJson(), true) : null,
  1190.         ));
  1191.     }
  1193.     /**
  1194.      * HB360 H1a: roof (T1, resolved by the caller) + PV sizing (T3, always via the
  1195.      * one PV engine SolarEngineeringService inside Hb360EstimateService) + bill →
  1196.      * saving/payback (T2-lite), every figure honesty-tagged.
  1197.      */
  1198.     private function computeRooftopDesign($lat, $lng, $area, $tilt, $mode, $monthlyKwh, $monthlyBill, $tariff, $preset = null, $roofSource = 'map')
  1199.     {
  1200.         $yieldSource   = 'PVGIS';
  1201.         $specificYield = $this->pvgisSpecificYield($lat, $lng, $tilt);
  1202.         if ($specificYield === null) {
  1203.             $specificYield = $this->fallbackYieldByLatitude($lat);
  1204.             $yieldSource = 'climate estimate';
  1205.         }
  1207.         return (new Hb360EstimateService())->estimate([
  1208.             'roofAreaM2'    => $area,
  1209.             'roofSource'    => $roofSource,
  1210.             'specificYield' => $specificYield,
  1211.             'yieldSource'   => $yieldSource,
  1212.             'monthlyKwh'    => $monthlyKwh,
  1213.             'monthlyBill'   => $monthlyBill,
  1214.             'tariff'        => $tariff,
  1215.             'mode'          => $mode,
  1216.             'preset'        => $preset,
  1217.         ]);
  1218.     }
  1220.     /**
  1221.      * SDS2: one studio ZONE → yield/cost/payback, same estimate family as the simple flow.
  1222.      * The zone's plane(s) come from the ONE deterministic mapping in SdsEconCore (EW = the
  1223.      * documented east+west PVGIS average); sizing snaps to the packed kWp; the €/kWp tier is
  1224.      * picked from the WHOLE design's capacity (total_kwp) so zone costs sum consistently.
  1225.      */
  1226.     protected function computeSdsZoneEconomics($lat, $lng, $areaM2, $kwp, array $zone, $monthlyKwh, $monthlyBill, $tariff)
  1227.     {
  1228.         // AUDIT SU3-02: the zone's module tilt reaches the plane exactly as it does in the report (null = legacy, byte-identical)
  1229.         $planes = SdsEconCore::planesFor($zone['pitch_deg'], $zone['azimuth_deg'], $zone['mount_mode'],
  1230.             isset($zone['module_tilt_deg']) ? $zone['module_tilt_deg'] : null);
  1231.         $trkNote = null; // SU-06: the tracker basis actually used, said on the response
  1232.         $planeYields = [];
  1233.         $yieldSource = 'PVGIS';
  1234.         $provs = []; // SDS-IRRSRC: the provenance of every resolved plane
  1235.         foreach ($planes as $p) {
  1236.             $place = SdsMountingCore::mountingPlaceForZone(
  1237.                     isset($zone['mount_type']) ? $zone['mount_type'] : null,
  1238.                     isset($zone['structure_type']) ? $zone['structure_type'] : null);
  1239.             // AUDIT SU-06: a tracker zone's plane carries its PVGIS tracking descriptor (SdsEconCore::planesFor) — the
  1240.             // report passed it, this studio path dropped it, so a tracker plant yielded exactly its fixed-tilt figure
  1241.             // (1,326.8 kWh/kWp both ways). The descriptor rides now; an E-W-class axis keeps the stated fixed plane.
  1242.             $trkP = isset($p['tracking']) ? $p['tracking'] : null;
  1243.             $fig = $this->pvgisPlaneFigures($lat, $lng, $p['angle'], $p['aspect'], $place, $trkP);
  1244.             if ($trkP !== null) { $trkNote = $trkP['label']; }
  1245.             elseif (isset($p['basis_note']) && $p['basis_note'] !== '') { $trkNote = (string) $p['basis_note']; }
  1246.             $y = ($fig !== null && $fig['ey'] !== null && $fig['ey'] > 0) ? (float) $fig['ey'] : null;
  1247.             if ($y !== null) { $provs[] = isset($fig['prov']) ? $fig['prov'] : null; }
  1248.             $planeYields[] = ['yield' => $y, 'weight' => $p['weight'], 'angle' => $p['angle'], 'aspect' => $p['aspect']];
  1249.         }
  1250.         $sy = SdsEconCore::combineYields($planeYields);
  1251.         if ($sy === null) {
  1252.             // Any missing plane ⇒ fall back WHOLLY (a half-real EW average would be a lie).
  1253.             $sy = $this->fallbackYieldByLatitude($lat);
  1254.             $yieldSource = 'climate estimate';
  1255.         }
  1257.         $res = (new Hb360EstimateService())->estimate([
  1258.             'roofAreaM2'    => $areaM2,
  1259.             'roofSource'    => 'map',
  1260.             'specificYield' => $sy,
  1261.             'yieldSource'   => $yieldSource,
  1262.             'monthlyKwh'    => $monthlyKwh,
  1263.             'monthlyBill'   => $monthlyBill,
  1264.             'tariff'        => $tariff,
  1265.             'mode'          => 'roof', // the layout IS the size — never shrink to load here
  1266.             'targetKwp'     => $kwp,
  1267.             'moduleWp'      => $zone['module_wp'],
  1268.             'rateBasisKwp'  => $zone['total_kwp'],
  1269.             'capexBands'    => $this->tenantCapexBands(), // SDS-CAPEXBAND
  1270.         ]);
  1271.         if (!empty($res['ok'])) {
  1272.             $res['lat'] = $lat; $res['lng'] = $lng;
  1273.             // AUDIT SU-06: a tracker zone says which basis its yield used (tracking, or the stated fixed-plane refusal)
  1274.             $res['yield_basis_note'] = ($trkNote !== null && $yieldSource === 'PVGIS') ? $trkNote
  1275.                 : (($zone['mount_mode'] === 'tracker') ? 'tracker priced as a fixed plane — the tracking gain is NOT in this figure (' . $yieldSource . ')' : null);
  1276.             // SDS-IRRSRC: the card names the resource data behind the figure (the PVGIS echo, never the request)
  1277.             $res['yield_provenance'] = $yieldSource === 'PVGIS' ? \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsIrradianceCore::merge($provs, $this->irradianceDb())['label'] : null;
  1278.             $res['sds'] = [
  1279.                 'requested_kwp'  => $kwp,
  1280.                 'mount_mode'     => $zone['mount_mode'],
  1281.                 'pitch_deg'      => $zone['pitch_deg'],
  1282.                 'azimuth_deg'    => $zone['azimuth_deg'],
  1283.                 'rate_basis_kwp' => $zone['total_kwp'] > 0 ? $zone['total_kwp'] : $kwp,
  1284.                 'planes'         => $planeYields,
  1285.             ];
  1286.         }
  1287.         return $res;
  1288.     }
  1290.     /** SDS-IRRSRC: the tenant's chosen PVGIS radiation database ('auto' = PVGIS's default; never throws — a box
  1291.      *  without the setting, or the public estimator on central, reads 'auto'). */
  1292.     private $irradianceDbMemo = null;
  1293.     protected function irradianceDb()
  1294.     {
  1295.         if ($this->irradianceDbMemo === null) {
  1296.             $db = 'auto';
  1297.             try {
  1298.                 $r = \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsSettings::read($this->getDoctrine()->getManager(), 'sds_irradiance_db');
  1299.                 $db = \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsIrradianceCore::normalizeDb($r['value']);
  1300.             } catch (\Throwable $e) { $db = 'auto'; }
  1301.             $this->irradianceDbMemo = $db;
  1302.         }
  1303.         return $this->irradianceDbMemo;
  1304.     }
  1306.     /** SDS-CAPEXBAND: the tenant's own CAPEX ladder for the studio calc (null = the sourced seed; never throws). */
  1307.     private function tenantCapexBands()
  1308.     {
  1309.         try {
  1310.             return \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsSettings::capexBands($this->getDoctrine()->getManager());
  1311.         } catch (\Throwable $e) {
  1312.             return null;
  1313.         }
  1314.     }
  1316.     /**
  1317.      * SDS2: PVGIS specific yield (kWh/kWp/yr) for an arbitrary plane, CACHED per rounded
  1318.      * (lat, lng, angle, aspect) — in-request static + a tmp-dir file cache (30 days; yield is
  1319.      * climate data) — so live studio editing cannot hammer the PVGIS API. No schema, and every
  1320.      * cache failure degrades to just calling PVGIS. Null on PVGIS failure.
  1321.      */
  1322.     protected function pvgisYieldPlane($lat, $lng, $angle, $aspect, $mountingPlace = null, $tracking = null)
  1323.     {
  1324.         $f = $this->pvgisPlaneFigures($lat, $lng, $angle, $aspect, $mountingPlace, $tracking); // SDS-MPLACE: both ride
  1325.         return ($f !== null && $f['ey'] !== null && $f['ey'] > 0) ? (float) $f['ey'] : null;
  1326.     }
  1328.     /**
  1329.      * SDS-REPORT: the FULL cached PVGIS figure set for a plane — annual E_y plus what the
  1330.      * same PVcalc response already contains: in-plane irradiation H(i)_y, the PVGIS-computed
  1331.      * loss components (l_aoi, l_spec, l_tg) and the 12 monthly E_m values. Same cache key/
  1332.      * file as before; legacy cache files (shape {ey}) are honored as ANNUAL-ONLY until a
  1333.      * successful refetch upgrades them — the report degrades honestly to the annual basis
  1334.      * in the meantime (never a fabricated monthly shape). Null on total failure.
  1335.      * @return array|null {ey, hi, l_aoi, l_spec, l_tg, monthly: float[12]|null}
  1336.      */
  1337.     protected function pvgisPlaneFigures($lat, $lng, $angle, $aspect, $mountingPlace = null, $tracking = null)
  1338.     {
  1339.         static $memo = [];
  1340.         // P0-4 — authoritative when the zone declared its structure type; null keeps the
  1341.         // historical default ('building'), so undeclared designs do not move.
  1342.         $mountingPlace = ($mountingPlace === SdsMountingCore::PLACE_FREE)
  1343.             ? SdsMountingCore::PLACE_FREE : SdsMountingCore::PLACE_DEFAULT;
  1344.         // SDS-TRKYIELD — a tracker plane asks PVGIS for its single-axis model (own cache key;
  1345.         // the response carries BOTH 'fixed' and the tracking system, we read the tracking one)
  1346.         $trkKind = (is_array($tracking) && isset($tracking['kind']) && $tracking['kind'] === 'inclined_axis') ? 'inclined_axis' : null;
  1347.         $sysKey = $trkKind !== null ? $trkKind : 'fixed';
  1348.         // SDS-IRRSRC — the tenant's chosen radiation database (auto = PVGIS's own default) rides the call and the key
  1349.         $radDb = $this->irradianceDb();
  1350.         $key = SdsEconCore::cacheKey($lat, $lng, $angle, $aspect, $mountingPlace, $trkKind !== null ? $tracking : null, $radDb);
  1351.         if (array_key_exists($key, $memo)) { return $memo[$key]; }
  1353.         $annualOnly = null; // legacy-shape fallback when the refetch fails
  1354.         $file = null;
  1355.         try {
  1356.             // SDS-CACHEDIR: shared web+CLI location under var/ (Apache's PrivateTmp split the
  1357.             // old sys-temp cache per service and wiped it on restart); falls back to sys temp
  1358.             $dir = \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsExtCache::dir('hb_pvgis_cache');
  1359.             $file = $dir . DIRECTORY_SEPARATOR . $key . '.json';
  1360.             if (is_file($file) && (time() - (int) @filemtime($file)) < 30 * 86400) {
  1361.                 $cached = json_decode((string) @file_get_contents($file), true);
  1362.                 if (is_array($cached) && array_key_exists('em', $cached)) {
  1363.                     // new shape — the full figure set
  1364.                     return $memo[$key] = [
  1365.                         'ey' => $cached['ey'] !== null ? (float) $cached['ey'] : null,
  1366.                         'hi' => isset($cached['hi']) && $cached['hi'] !== null ? (float) $cached['hi'] : null,
  1367.                         'l_aoi' => isset($cached['la']) && $cached['la'] !== null ? (float) $cached['la'] : null,
  1368.                         'l_spec' => isset($cached['ls']) && $cached['ls'] !== null ? (float) $cached['ls'] : null,
  1369.                         'l_tg' => isset($cached['lt']) && $cached['lt'] !== null ? (float) $cached['lt'] : null,
  1370.                         'monthly' => (isset($cached['em']) && is_array($cached['em']) && count($cached['em']) === 12)
  1371.                             ? array_map('floatval', $cached['em']) : null,
  1372.                         'prov' => \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsIrradianceCore::fromCache(isset($cached['pv']) ? $cached['pv'] : null), // SDS-IRRSRC (null on pre-slice cache files)
  1373.                     ];
  1374.                 }
  1375.                 if (is_array($cached) && array_key_exists('ey', $cached) && $cached['ey'] !== null) {
  1376.                     // legacy shape — annual only; try to refetch/upgrade below
  1377.                     $annualOnly = ['ey' => (float) $cached['ey'], 'hi' => null, 'l_aoi' => null,
  1378.                         'l_spec' => null, 'l_tg' => null, 'monthly' => null, 'prov' => null];
  1379.                 }
  1380.             }
  1381.         } catch (\Throwable $e) { $file = null; }
  1383.         $url = sprintf(
  1384.             'https://re.jrc.ec.europa.eu/api/v5_2/PVcalc?lat=%F&lon=%F&peakpower=1&loss=%F&angle=%F&aspect=%F&mountingplace=%s&outputformat=json',
  1385.             $lat, $lng, SdsEconCore::PVGIS_SYSTEM_LOSS_PCT, $angle, $aspect, $mountingPlace
  1386.         ) . \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsIrradianceCore::urlParam($radDb);
  1387.         if ($trkKind === 'inclined_axis') {
  1388.             // PVGIS 5: `inclined_axis=1&inclinedaxisangle=<tilt>` (the v4 `trackingtype` is ignored)
  1389.             $url .= '&inclined_axis=1&inclinedaxisangle=' . sprintf('%F', isset($tracking['axis_tilt_deg']) ? (float) $tracking['axis_tilt_deg'] : 0.0);
  1390.         }
  1391.         $out = null;
  1392.         try {
  1393.             $ctx  = stream_context_create(['http' => ['timeout' => 8, 'ignore_errors' => true]]);
  1394.             $body = @file_get_contents($url, false, $ctx);
  1395.             if ($body !== false) {
  1396.                 $data = json_decode($body, true);
  1397.                 $tot = isset($data['outputs']['totals'][$sysKey]) && is_array($data['outputs']['totals'][$sysKey])
  1398.                     ? $data['outputs']['totals'][$sysKey] : [];
  1399.                 $ey = (isset($tot['E_y']) && $tot['E_y'] > 0) ? (float) $tot['E_y'] : null;
  1400.                 if ($ey !== null) {
  1401.                     $monthly = null;
  1402.                     if (isset($data['outputs']['monthly'][$sysKey]) && is_array($data['outputs']['monthly'][$sysKey])) {
  1403.                         $byMonth = [];
  1404.                         foreach ($data['outputs']['monthly'][$sysKey] as $m) {
  1405.                             if (isset($m['month'], $m['E_m'])) { $byMonth[(int) $m['month']] = (float) $m['E_m']; }
  1406.                         }
  1407.                         if (count($byMonth) === 12) {
  1408.                             ksort($byMonth);
  1409.                             $monthly = array_values($byMonth);
  1410.                         }
  1411.                     }
  1412.                     $num = function ($k) use ($tot) { return (isset($tot[$k]) && is_numeric($tot[$k])) ? (float) $tot[$k] : null; };
  1413.                     $out = ['ey' => $ey, 'hi' => $num('H(i)_y'), 'l_aoi' => $num('l_aoi'),
  1414.                         'l_spec' => $num('l_spec'), 'l_tg' => $num('l_tg'), 'monthly' => $monthly,
  1415.                         // SDS-IRRSRC: the provenance PVGIS ECHOES (the database it actually used, the years, the horizon)
  1416.                         'prov' => \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsIrradianceCore::provenanceFromPvgis($data)];
  1417.                 }
  1418.             }
  1419.         } catch (\Throwable $e) {
  1420.             $out = null;
  1421.         }
  1422.         // Cache successes only — a transient PVGIS outage must not pin "unavailable" for 30 days.
  1423.         if ($file !== null && $out !== null) {
  1424.             try {
  1425.                 @file_put_contents($file, json_encode(['ey' => $out['ey'], 'hi' => $out['hi'],
  1426.                     'la' => $out['l_aoi'], 'ls' => $out['l_spec'], 'lt' => $out['l_tg'],
  1427.                     'em' => $out['monthly'], 'pv' => \ApplicationBundle\Modules\HoneybeeWeb\Support\SdsIrradianceCore::toCache($out['prov'])]), LOCK_EX);
  1428.             } catch (\Throwable $e) { /* cache is an enhancement */ }
  1429.         }
  1430.         return $memo[$key] = ($out !== null ? $out : $annualOnly);
  1431.     }
  1433.     /** Geocode an address → ['lat','lng','formatted'] or null. */
  1434.     private function geocodeAddress($address)
  1435.     {
  1436.         $url  = 'https://maps.googleapis.com/maps/api/geocode/json?address=' . rawurlencode($address) . '&key=' . $this->mapsKey();
  1437.         $data = $this->httpJson($url, null, 8);
  1438.         if (!$data || ($data['status'] ?? '') !== 'OK' || empty($data['results'][0])) { return null; }
  1439.         $r = $data['results'][0];
  1440.         return [
  1441.             'lat'       => (float) $r['geometry']['location']['lat'],
  1442.             'lng'       => (float) $r['geometry']['location']['lng'],
  1443.             'formatted' => $r['formatted_address'] ?? $address,
  1444.         ];
  1445.     }
  1447.     /** Google Solar API building insights → preset design, or null if disabled / no coverage. */
  1448.     private function solarApiDesign($lat, $lng)
  1449.     {
  1450.         $url  = sprintf('https://solar.googleapis.com/v1/buildingInsights:findClosest?location.latitude=%F&location.longitude=%F&requiredQuality=LOW&key=%s', $lat, $lng, $this->mapsKey());
  1451.         $data = $this->httpJson($url, null, 8);
  1452.         if (!$data || isset($data['error']) || empty($data['solarPotential'])) { return null; }
  1453.         $sp = $data['solarPotential'];
  1454.         $roofArea = $sp['wholeRoofStats']['areaMeters2'] ?? ($sp['maxArrayAreaMeters2'] ?? null);
  1455.         $panels   = $sp['maxArrayPanelsCount'] ?? null;
  1456.         $watts    = $sp['panelCapacityWatts'] ?? 400;
  1457.         if (!$roofArea || !$panels) { return null; }
  1458.         // best (largest) config's annual DC energy
  1459.         $annualDc = null;
  1460.         foreach (($sp['solarPanelConfigs'] ?? []) as $cfg) {
  1461.             if (isset($cfg['yearlyEnergyDcKwh'])) { $annualDc = $cfg['yearlyEnergyDcKwh']; }
  1462.         }
  1463.         return ['panels' => (int) $panels, 'panel_watts' => (float) $watts, 'annual_dc_kwh' => $annualDc, 'roof_area' => (float) $roofArea];
  1464.     }
  1466.     /** OSM building footprint area (m²) at a point via Overpass; null if none/unreachable. */
  1467.     private function osmBuildingArea($lat, $lng)
  1468.     {
  1469.         $q    = sprintf('[out:json][timeout:20];way(around:30,%F,%F)[building];out geom;', $lat, $lng);
  1470.         $data = $this->httpJson('https://overpass-api.de/api/interpreter', 'data=' . rawurlencode($q), 22);
  1471.         if (!$data || empty($data['elements'])) { return null; }
  1472.         $best = null; $bestArea = 0; $containing = null;
  1473.         foreach ($data['elements'] as $el) {
  1474.             if (empty($el['geometry'])) { continue; }
  1475.             $a = $this->polygonAreaM2($el['geometry']);
  1476.             if ($a > $bestArea) { $bestArea = $a; $best = $el; }
  1477.             if ($this->pointInPolygon($lat, $lng, $el['geometry'])) { $containing = $a; }
  1478.         }
  1479.         $area = $containing ?: $bestArea;
  1480.         return $area > 5 ? $area : null;
  1481.     }
  1483.     /** Planar area (m²) of a lat/lng ring via equirectangular projection. */
  1484.     private function polygonAreaM2($geometry)
  1485.     {
  1486.         $rad = M_PI / 180; $R = 6378137;
  1487.         $lat0 = $geometry[0]['lat'] * $rad; $cos = cos($lat0);
  1488.         $pts = [];
  1489.         foreach ($geometry as $g) { $pts[] = [$g['lon'] * $rad * $R * $cos, $g['lat'] * $rad * $R]; }
  1490.         $n = count($pts); if ($n < 3) { return 0; }
  1491.         $a = 0;
  1492.         for ($i = 0; $i < $n - 1; $i++) { $a += $pts[$i][0] * $pts[$i + 1][1] - $pts[$i + 1][0] * $pts[$i][1]; }
  1493.         return abs($a) / 2;
  1494.     }
  1496.     /** Ray-cast point-in-polygon for a lat/lng ring. */
  1497.     private function pointInPolygon($lat, $lng, $geometry)
  1498.     {
  1499.         $in = false; $n = count($geometry);
  1500.         for ($i = 0, $j = $n - 1; $i < $n; $j = $i++) {
  1501.             $yi = $geometry[$i]['lat']; $xi = $geometry[$i]['lon'];
  1502.             $yj = $geometry[$j]['lat']; $xj = $geometry[$j]['lon'];
  1503.             if ((($yi > $lat) !== ($yj > $lat)) && ($lng < ($xj - $xi) * ($lat - $yi) / (($yj - $yi) ?: 1e-12) + $xi)) { $in = !$in; }
  1504.         }
  1505.         return $in;
  1506.     }
  1508.     /** Minimal JSON HTTP helper (GET when $post is null, else POST form body). Null on failure. */
  1509.     private function httpJson($url, $post = null, $timeout = 8)
  1510.     {
  1511.         try {
  1512.             $opts = ['http' => ['timeout' => $timeout, 'ignore_errors' => true, 'header' => "User-Agent: HoneyBee/1.0\r\n"]];
  1513.             if ($post !== null) {
  1514.                 $opts['http']['method']  = 'POST';
  1515.                 $opts['http']['header'] .= "Content-Type: application/x-www-form-urlencoded\r\n";
  1516.                 $opts['http']['content'] = $post;
  1517.             }
  1518.             $body = @file_get_contents($url, false, stream_context_create($opts));
  1519.             if ($body === false) { return null; }
  1520.             return json_decode($body, true);
  1521.         } catch (\Throwable $e) {
  1522.             return null;
  1523.         }
  1524.     }
  1526.     /** Annual specific yield (kWh/kWp) from PVGIS for a fixed building-mounted array. Null on failure.
  1527.      *  SDS2: now the aspect-0 (south) case of the cached plane helper — same PVGIS call and value
  1528.      *  semantics as before, plus the cache. */
  1529.     private function pvgisSpecificYield($lat, $lng, $tilt)
  1530.     {
  1531.         return $this->pvgisYieldPlane($lat, $lng, $tilt, 0.0);
  1532.     }
  1534.     /** Rough kWh/kWp/yr by absolute latitude when PVGIS is unreachable. */
  1535.     protected function fallbackYieldByLatitude($lat)
  1536.     {
  1537.         $a = abs($lat);
  1538.         if ($a < 15) { return 1500; }   // tropical
  1539.         if ($a < 25) { return 1450; }   // e.g. BD/SG belt
  1540.         if ($a < 35) { return 1350; }   // subtropical
  1541.         if ($a < 45) { return 1150; }   // southern EU
  1542.         if ($a < 55) { return 1000; }   // central EU / DE
  1543.         return 850;                     // northern EU
  1544.     }
  1546.     // our service
  1547.     public function CentralServicePageAction()
  1548.     {
  1549.         return $this->render('@HoneybeeWeb/pages/service.html.twig', array(
  1550.             'page_title' => 'Services | HoneyBee — Hardware, HoneyCore EMS, Local ML & Integration',
  1552.         ));
  1553.     }
  1555.     // payment method
  1556.     public function CentralPaymentMethodPageAction()
  1557.     {
  1558.         $stripe_secret_key= $this->container->getParameter('stripe_secret_key_live');
  1559.         $stripe_key= $this->container->getParameter('stripe_public_key_live');
  1560.         return $this->render('@HoneybeeWeb/pages/payment-method.html.twig', array(
  1561.             'page_title' => 'Payment Method',
  1562.             'stripe_key' => $stripe_key,
  1564.         ));
  1565.     }
  1567.     // single blog page
  1568.     public function CentralSingleBlogPageAction(Request $request)
  1569.     {
  1570.         $em = $this->getDoctrine()->getManager('company_group');
  1572.         $blogId = $request->query->get('id');
  1574.         if (!$blogId) {
  1575.             throw $this->createNotFoundException('Blog ID not provided.');
  1576.         }
  1578.         $blogDetails = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog')->find($blogId);
  1580.         if (!$blogDetails) {
  1581.             throw $this->createNotFoundException('Blog not found.');
  1582.         }
  1584.         // Fetch related blogs by same topic (optional but useful)
  1585.         $relatedBlogs = $em->getRepository('CompanyGroupBundle\Entity\EntityCreateBlog')->findBy(
  1586.             ['topicId' => $blogDetails->getTopicId()],
  1587.             ['createdAt' => 'DESC'],
  1588.             5
  1589.         );
  1591.         return $this->render('@HoneybeeWeb/pages/single_blog.html.twig', [
  1592.             'page_title' => $blogDetails->getTitle(),
  1593.             'blog'       => $blogDetails,
  1594.             'related_blogs' => $relatedBlogs,
  1595.         ]);
  1596.     }
  1598.     // login v2 (verification code page)
  1599.     public function CentralLoginCodePageAction()
  1600.     {
  1601.         return $this->render('@HoneybeeWeb/pages/login_code.html.twig', array(
  1602.             'page_title' => 'Verification Code',
  1604.         ));
  1605.     }
  1608.     // reset pass
  1609.     public function CentralResetPasswordPageAction()
  1610.     {
  1611.         return $this->render('@HoneybeeWeb/pages/reset_password.html.twig', array(
  1612.             'page_title' => 'Verification Code',
  1614.         ));
  1615.     }
  1617.     public function PublicProfilePageAction(Request $request, $id = 0)
  1618.     {
  1619.         $em = $this->getDoctrine()->getManager('company_group');
  1620.         $session = $request->getSession();
  1621.         return $this->render('@Application/pages/central/central_employee_profile.html.twig', array(
  1622.             'page_title' => 'Freelancer Profile',
  1623. //            'details' =>$em->getRepository(EntityApplicantDetails::class)->find($id),
  1625.         ));
  1626.     }
  1629.     // freelancer profile
  1630.     public function CentralApplicantProfilePageAction(Request $request, $id = 0)
  1631.     {
  1632.         $em = $this->getDoctrine()->getManager('company_group');
  1633.         $session = $request->getSession();
  1634.         return $this->render('@HoneybeeWeb/pages/freelancer_profile.html.twig', array(
  1635.             'page_title' => 'Freelancer Profile',
  1636.             'details' => $em->getRepository(EntityApplicantDetails::class)->find($id),
  1638.         ));
  1639.     }
  1641.     // employee profile
  1642.     /**
  1643.      * Public professional profile. UNAUTHENTICATED by design (this class declares no gate) — treat
  1644.      * everything it renders as published to the world.
  1645.      *
  1646.      * CC7e-#6 (2026-07-15) — the `E`-format CROSS-TENANT BRANCH IS DELETED. It used to accept
  1647.      * `/EmployeePublicProfile/E{appId}{empId}`, look up ANY tenant in the central registry from
  1648.      * numbers in the URL, and cURL that tenant's own box (`/GetGlobalIdFromEmployeeId`) to resolve an
  1649.      * employee — with **no gate, no authorization, and `CURLOPT_SSL_VERIFYPEER/VERIFYHOST => false`**,
  1650.      * i.e. an anonymous stranger made us reach into a customer's HR system on their behalf over a
  1651.      * deliberately unverified TLS hop. Nothing in the codebase linked to it. Deleting the branch
  1652.      * closes three findings at once: the anonymous cross-tenant fan-out, the MITM-able hop, and a
  1653.      * null-deref (`$entry` was used without a null check, so an unknown appId fatalled — the "500 is
  1654.      * not a gate" class).
  1655.      *
  1656.      * If cross-tenant profiles are ever a real product need, they are a GATED, authorized feature
  1657.      * with a session — not an anonymous fan-out driven by two numbers in a URL.
  1658.      *
  1659.      * What remains is the plain path: `$id` is a central applicantId. The identity payload
  1660.      * (NID/DOB/parents/religion/blood/address/phone) has been stripped from the template — see
  1661.      * public_profile.html.twig. This route still ENUMERATES (any id ⇒ name + photo + role); that is
  1662.      * the accepted, recorded ceiling, and it is the product question CC7g will make gateable.
  1663.      */
  1664.     public function PublicEmployeeProfileAction($id)
  1665.     {
  1666.         $em = $this->getDoctrine()->getManager('company_group');
  1668.         // An applicant id is a positive integer. Anything else (including the old `E…` format, now
  1669.         // that the cross-tenant branch is gone) is refused here rather than handed to find(), which
  1670.         // would throw on a non-numeric id and 500. Not a security control — the disclosure is fixed
  1671.         // in the template — just not leaving a crash where a 404 belongs.
  1672.         if (!ctype_digit((string) $id) || (int) $id <= 0) {
  1673.             throw $this->createNotFoundException('Profile not found.');
  1674.         }
  1676.         $data = $em->getRepository(EntityApplicantDetails::class)->find((int) $id);
  1677.         if (!$data) {
  1678.             throw $this->createNotFoundException('Profile not found.');
  1679.         }
  1680.         return $this->render('@HoneybeeWeb/pages/public_profile.html.twig', array(
  1681.             'page_title' => 'Employee Profile',
  1682.             'details' => $data,
  1683.             'genderList' => EmployeeConstant::$sex,
  1684.             'bloodGroupList' => EmployeeConstant::$BloodGroup,
  1685.             'skillDetails' => $em->getRepository('CompanyGroupBundle\\Entity\\EntitySkill')->findAll(),
  1686.         ));
  1687.     }
  1690.     // add employee
  1691.     public function CentralAddEmployeePageAction()
  1692.     {
  1693.         return $this->render('@HoneybeeWeb/pages/add_employee.html.twig', array(
  1694.             'page_title' => 'Add New Eployee',
  1696.         ));
  1697.     }
  1699.     // book appointment
  1700.     public function CentralBookAppointmentPageAction()
  1701.     {
  1702.         return $this->render('@HoneybeeWeb/pages/book_appointment.html.twig', array(
  1703.             'page_title' => 'Book Appointment',
  1705.         ));
  1706.     }
  1708.     // create_compnay
  1709.     public function CentralCreateCompanyPageAction()
  1710.     {
  1711.         return $this->render('@HoneybeeWeb/pages/create_company.html.twig', array(
  1712.             'page_title' => 'Create Company',
  1714.         ));
  1715.     }
  1717.     // role and company
  1718.     public function CentralRoleAndCompanyPageAction()
  1719.     {
  1720.         return $this->render('@HoneybeeWeb/pages/role_and_company.html.twig', array(
  1721.             'page_title' => 'Role and Company',
  1723.         ));
  1724.     }
  1726.     // send otp action **
  1727.     public function SendOtpAjaxAction(Request $request, $startFrom = 0)
  1728.     {
  1730.         $em = $this->getDoctrine()->getManager();
  1731.         $em_goc = $this->getDoctrine()->getManager('company_group');
  1732.         $session = $request->getSession();
  1733.         $message = "";
  1734.         $retData = array();
  1735.         $email_twig_data = array('success' => false);
  1736.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  1737.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', '_BUDDYBEE_USER_'));
  1738.         $email_address = $request->request->get('email', $request->query->get('email', ''));
  1739.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  1740.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', UserConstants::OTP_ACTION_FORGOT_PASSWORD));
  1741.         $appendCode = $request->request->get('appendCode', $request->query->get('appendCode', ''));
  1742.         $otp = $request->request->get('otp', $request->query->get('otp', ''));
  1743.         $otpExpireTs = 0;
  1744.         $userId = $request->request->get('userId', $request->query->get('userId', $session->get(UserConstants::USER_ID, 0)));
  1745.         $userType = UserConstants::USER_TYPE_APPLICANT;
  1746.         $email_twig_file = '@Application/pages/email/find_account_buddybee.html.twig';
  1749.         if ($request->isMethod('POST')) {
  1751.             //set an otp and its expire and send mail
  1753.             $userObj = null;
  1754.             $userData = [];
  1757.             if ($systemType == '_ERP_') {
  1758.                 if ($userCategory == '_APPLICANT_') {
  1759.                     $userType = UserConstants::USER_TYPE_APPLICANT;
  1761.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1762.                         array(
  1763.                             'applicantId' => $userId
  1764.                         )
  1765.                     );
  1766.                     if ($userObj) {
  1768.                     } else {
  1769.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1770.                             array(
  1771.                                 'email' => $email_address
  1772.                             )
  1773.                         );
  1775.                         if ($userObj) {
  1778.                         } else {
  1781.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1782.                                 array(
  1783.                                     'oAuthEmail' => $email_address
  1784.                                 )
  1785.                             );
  1786.                             if ($userObj) {
  1789.                             } else {
  1792.                                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1793.                                     array(
  1794.                                         'username' => $email_address
  1795.                                     )
  1796.                                 );
  1799.                             }
  1802.                         }
  1803.                     }
  1805.                     if ($userObj) {
  1806.                         $email_address = $userObj->getEmail();
  1807.                         if ($email_address == null || $email_address == '')
  1808.                             $email_address = $userObj->getOAuthEmail();
  1809.                     }
  1812.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  1813.                     $otp = $otpData['otp'];
  1814.                     $otpExpireTs = $otpData['expireTs'];
  1816.                     $userObj->setOtp($otpData['otp']);
  1817.                     $userObj->setOtpActionId($otpActionId);
  1818.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  1820.                     $em_goc->flush();
  1821.                     $userData = array(
  1822.                         'id' => $userObj->getApplicantId(),
  1823.                         'email' => $email_address,
  1824.                         'appId' => 0,
  1825.                         //                        'appId'=>$userObj->getUserAppId(),
  1826.                     );
  1829.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1830.                     $email_twig_data = [
  1831.                         'page_title' => 'Find Account',
  1832.                         'message' => $message,
  1833.                         'userType' => $userType,
  1834.                         'otp' => $otpData['otp'],
  1835.                         'otpExpireSecond' => $otpExpireSecond,
  1836.                         'otpActionId' => $otpActionId,
  1837.                         'otpExpireTs' => $otpData['expireTs'],
  1838.                         'systemType' => $systemType,
  1839.                         'userData' => $userData
  1841.                     ];
  1842.                     if ($userObj)
  1843.                         $email_twig_data['success'] = true;
  1844.                 } else {
  1845.                     $userType = UserConstants::USER_TYPE_GENERAL;
  1846.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1847.                     $email_twig_data = [
  1848.                         'page_title' => 'Find Account',
  1849.                         //   'encryptedData' => $encryptedData,
  1850.                         'message' => $message,
  1851.                         'userType' => $userType,
  1852.                         //  'errorField' => $errorField,
  1854.                     ];
  1855.                 }
  1858.             } else if ($systemType == '_BUDDYBEE_') {
  1859.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1861.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1862.                     array(
  1863.                         'applicantId' => $userId
  1864.                     )
  1865.                 );
  1866.                 if ($userObj) {
  1868.                 } else {
  1869.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1870.                         array(
  1871.                             'email' => $email_address
  1872.                         )
  1873.                     );
  1875.                     if ($userObj) {
  1878.                     } else {
  1881.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1882.                             array(
  1883.                                 'oAuthEmail' => $email_address
  1884.                             )
  1885.                         );
  1886.                         if ($userObj) {
  1889.                         } else {
  1892.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1893.                                 array(
  1894.                                     'username' => $email_address
  1895.                                 )
  1896.                             );
  1899.                         }
  1902.                     }
  1903.                 }
  1905.                 if ($userObj) {
  1906.                     $email_address = $userObj->getEmail();
  1907.                     if ($email_address == null || $email_address == '')
  1908.                         $email_address = $userObj->getOAuthEmail();
  1909.                     //                    triggerResetPassword:
  1910.                     //                    type: integer
  1911.                     //                          nullable: true
  1913.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  1914.                     $otp = $otpData['otp'];
  1915.                     $otpExpireTs = $otpData['expireTs'];
  1917.                     $userObj->setOtp($otpData['otp']);
  1918.                     $userObj->setOtpActionId($otpActionId);
  1919.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  1921.                     $em_goc->flush();
  1922.                     $userData = array(
  1923.                         'id' => $userObj->getApplicantId(),
  1924.                         'email' => $email_address,
  1925.                         'appId' => 0,
  1926.                         'image' => $userObj->getImage(),
  1927.                         'phone' => $userObj->getPhone(),
  1928.                         'firstName' => $userObj->getFirstname(),
  1929.                         'lastName' => $userObj->getLastname(),
  1930.                         //                        'appId'=>$userObj->getUserAppId(),
  1931.                     );
  1934.                     $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  1935.                     $email_twig_data = [
  1936.                         'page_title' => 'Find Account',
  1937.                         //                        'encryptedData' => $encryptedData,
  1938.                         'message' => $message,
  1939.                         'userType' => $userType,
  1940.                         //                        'errorField' => $errorField,
  1941.                         'otp' => $otpData['otp'],
  1942.                         'otpExpireSecond' => $otpExpireSecond,
  1944.                         'otpActionId' => $otpActionId,
  1945.                         'otpActionTitle' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionTitle'],
  1946.                         'otpActionDescForMail' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionDescForMail'],
  1947.                         'otpExpireTs' => $otpData['expireTs'],
  1948.                         'systemType' => $systemType,
  1949.                         'userCategory' => $userCategory,
  1950.                         'userData' => $userData
  1952.                     ];
  1953.                     $email_twig_data['success'] = true;
  1954.                 } else {
  1955.                     $message = "Account not found!";
  1956.                     $email_twig_data['success'] = false;
  1957.                 }
  1960.             } else if ($systemType == '_CENTRAL_') {
  1961.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  1963.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1964.                     array(
  1965.                         'applicantId' => $userId
  1966.                     )
  1967.                 );
  1968.                 if ($userObj) {
  1970.                 } else {
  1971.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1972.                         array(
  1973.                             'email' => $email_address
  1974.                         )
  1975.                     );
  1977.                     if ($userObj) {
  1980.                     } else {
  1983.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1984.                             array(
  1985.                                 'oAuthEmail' => $email_address
  1986.                             )
  1987.                         );
  1988.                         if ($userObj) {
  1991.                         } else {
  1994.                             $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  1995.                                 array(
  1996.                                     'username' => $email_address
  1997.                                 )
  1998.                             );
  2001.                         }
  2004.                     }
  2005.                 }
  2007.                 if ($userObj) {
  2008.                     $email_address = $userObj->getEmail();
  2009.                     if ($email_address == null || $email_address == '')
  2010.                         $email_address = $userObj->getOAuthEmail();
  2011.                     //                    triggerResetPassword:
  2012.                     //                    type: integer
  2013.                     //                          nullable: true
  2015.                     $otpData = MiscActions::GenerateOtp($otpExpireSecond);
  2016.                     $otp = $otpData['otp'];
  2017.                     $otpExpireTs = $otpData['expireTs'];
  2019.                     $userObj->setOtp($otpData['otp']);
  2020.                     $userObj->setOtpActionId($otpActionId);
  2021.                     $userObj->setOtpExpireTs($otpData['expireTs']);
  2023.                     $em_goc->flush();
  2024.                     $userData = array(
  2025.                         'id' => $userObj->getApplicantId(),
  2026.                         'email' => $email_address,
  2027.                         'appId' => 0,
  2028.                         'image' => $userObj->getImage(),
  2029.                         'phone' => $userObj->getPhone(),
  2030.                         'firstName' => $userObj->getFirstname(),
  2031.                         'lastName' => $userObj->getLastname(),
  2032.                         //                        'appId'=>$userObj->getUserAppId(),
  2033.                     );
  2036.                     $email_twig_file = '@HoneybeeWeb/email/templates/otpMail.html.twig';
  2037.                     $email_twig_data = [
  2038.                         'page_title' => 'Find Account',
  2039.                         //                        'encryptedData' => $encryptedData,
  2040.                         'message' => $message,
  2041.                         'userType' => $userType,
  2042.                         //                        'errorField' => $errorField,
  2043.                         'otp' => $otpData['otp'],
  2044.                         'otpExpireSecond' => $otpExpireSecond,
  2046.                         'otpActionId' => $otpActionId,
  2047.                         'otpActionTitle' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionTitle'],
  2048.                         'otpActionDescForMail' => UserConstants::$OTP_ACTION_DATA[$otpActionId]['actionDescForMail'],
  2049.                         'otpExpireTs' => $otpData['expireTs'],
  2050.                         'systemType' => $systemType,
  2051.                         'userCategory' => $userCategory,
  2052.                         'userData' => $userData
  2054.                     ];
  2055.                     $email_twig_data['success'] = true;
  2056.                 } else {
  2057.                     $message = "Account not found!";
  2058.                     $email_twig_data['success'] = false;
  2059.                 }
  2062.             }
  2064.             if ($email_twig_data['success'] == true && GeneralConstant::EMAIL_ENABLED == 1) {
  2066.                 if ($systemType == '_BUDDYBEE_') {
  2068.                     $bodyHtml = '';
  2069.                     $bodyTemplate = $email_twig_file;
  2070.                     $bodyData = $email_twig_data;
  2071.                     $attachments = [];
  2072.                     $forwardToMailAddress = $email_address;
  2075.                     //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  2076.                     $new_mail = $this->get('mail_module');
  2077.                     $new_mail->sendMyMail(array(
  2078.                         'senderHash' => '_CUSTOM_',
  2079.                         //                        'senderHash'=>'_CUSTOM_',
  2080.                         'forwardToMailAddress' => $forwardToMailAddress,
  2082.                         'subject' => 'Account Verification',
  2084.                         //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  2085.                         'attachments' => $attachments,
  2086.                         'toAddress' => $forwardToMailAddress,
  2087.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  2088.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  2089.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  2090.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  2091.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  2092.                         //                            'emailBody' => $bodyHtml,
  2093.                         'mailTemplate' => $bodyTemplate,
  2094.                         'templateData' => $bodyData,
  2095.                         //                        'embedCompanyImage' => 1,
  2096.                         //                        'companyId' => $companyId,
  2097.                         //                        'companyImagePath' => $company_data->getImage()
  2100.                     ));
  2101.                 } else {
  2104.                     $bodyHtml = '';
  2105.                     $bodyTemplate = $email_twig_file;
  2106.                     $bodyData = $email_twig_data;
  2107.                     $attachments = [];
  2108.                     $forwardToMailAddress = $email_address;
  2111.                     //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  2112.                     $new_mail = $this->get('mail_module');
  2113.                     $new_mail->sendMyMail(array(
  2114.                         'senderHash' => '_CUSTOM_',
  2115.                         //                        'senderHash'=>'_CUSTOM_',
  2116.                         'forwardToMailAddress' => $forwardToMailAddress,
  2118.                         'subject' => 'Account Verification',
  2120.                         //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  2121.                         'attachments' => $attachments,
  2122.                         'toAddress' => $forwardToMailAddress,
  2123.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  2124.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  2125.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  2126.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  2127.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  2128.                         //                            'emailBody' => $bodyHtml,
  2129.                         'mailTemplate' => $bodyTemplate,
  2130.                         'templateData' => $bodyData,
  2131.                         //                        'embedCompanyImage' => 1,
  2132.                         //                        'companyId' => $companyId,
  2133.                         //                        'companyImagePath' => $company_data->getImage()
  2136.                     ));
  2137.                 }
  2140.             }
  2141.             if ($email_twig_data['success'] == true && GeneralConstant::NOTIFICATION_ENABLED == 1 && $userData['phone'] != '' && $userData['phone'] != null) {
  2143.                 if ($systemType == '_BUDDYBEE_') {
  2145.                     $searchVal = ['_OTP_', '_EXPIRE_MINUTES_', '_APPEND_CODE_'];
  2146.                     $replaceVal = [$otp, floor($otpExpireSecond / 60), $appendCode];
  2147.                     $msg = 'Use OTP _OTP_ for BuddyBee. Your OTP will expire in _EXPIRE_MINUTES_ minutes
  2148.                      _APPEND_CODE_';
  2149.                     $msg = str_replace($searchVal, $replaceVal, $msg);
  2150.                     $emitMarker = '_SEND_TEXT_TO_MOBILE_';
  2151.                     $sendType = 'all';
  2152.                     $socketUserIds = [];
  2153.                     System::SendSmsBySocket($this->container->getParameter('notification_enabled'), $msg, $userData['phone'], $emitMarker, $sendType, $socketUserIds);
  2155.                 } else {
  2158.                 }
  2161.             }
  2164.         }
  2166.         $response = new JsonResponse(array(
  2167.                 'message' => $message,
  2168.                 "userType" => $userType,
  2169.                 "otp" => '',
  2170.                 //                "otp"=>$otp,
  2171.                 "otpExpireTs" => $otpExpireTs,
  2172.                 "otpActionId" => $otpActionId,
  2173.                 "userCategory" => $userCategory,
  2174.                 "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2176.                 "systemType" => $systemType,
  2177.                 'actionData' => $email_twig_data,
  2178.                 'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2179.             )
  2180.         );
  2181.         $response->headers->set('Access-Control-Allow-Origin', '*');
  2182.         return $response;
  2183.     }
  2185.     // verrify otp **
  2186.     public function VerifyOtpAction(Request $request, $encData = '')
  2187.     {
  2189.         $em = $this->getDoctrine()->getManager();
  2190.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2191.         $session = $request->getSession();
  2192.         $message = "";
  2193.         $retData = array();
  2194.         $encData = $request->query->get('encData', $encData);
  2195.         $encryptedData = [];
  2196.         if ($encData != '')
  2197.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  2198.         if ($encryptedData == null) $encryptedData = [];
  2200.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  2201.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', (isset($encryptedData['otp']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_')));
  2202.         $email_address = $request->request->get('email', $request->query->get('email', (isset($encryptedData['email']) ? $encryptedData['email'] : '')));
  2203.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  2204.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', (isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : UserConstants::OTP_ACTION_FORGOT_PASSWORD)));
  2205.         $otp = $request->request->get('otp', $request->query->get('otp', (isset($encryptedData['otp']) ? $encryptedData['otp'] : '')));
  2206.         $otpExpireTs = isset($encryptedData['otpExpireTs']) ? $encryptedData['otpExpireTs'] : 0;
  2207.         $userId = $request->request->get('userId', $request->query->get('userId', (isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID, 0))));
  2210.         $userType = UserConstants::USER_TYPE_APPLICANT;
  2212.         $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2213.         $userEntityManager = $em_goc;
  2214.         $userEntityIdField = 'applicantId';
  2215.         $userEntityUserNameField = 'username';
  2216.         $userEntityEmailField1 = 'email';
  2217.         $userEntityEmailField1Getter = 'getEmail';
  2218.         $userEntityEmailField1Setter = 'setEmail';
  2219.         $userEntityEmailField2 = 'oAuthEmail';
  2220.         $userEntityEmailField2Getter = 'geOAuthEmail';
  2221.         $userEntityEmailField2Setter = 'seOAuthEmail';
  2223.         $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2224.         $twigData = [];
  2225.         $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2226.         $email_twig_data = array('success' => false);
  2227.         $redirectUrl = '';
  2229.         $userObj = null;
  2230.         $userData = [];
  2231.         if ($systemType == '_ERP_') {
  2233.             if ($userCategory == '_APPLICANT_') {
  2234.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  2236.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2237.                 $twigData = [];
  2238.                 $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2239.                 $userEntityManager = $em_goc;
  2240.                 $userEntityIdField = 'applicantId';
  2241.                 $userEntityUserNameField = 'username';
  2242.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2245.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2246.             } else {
  2247.                 $userType = UserConstants::USER_TYPE_GENERAL;
  2248.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2249.                 $twigData = [];
  2250.                 $userEntity = 'ApplicationBundle:SysUser';
  2251.                 $userEntityManager = $em;
  2252.                 $userEntityIdField = 'userId';
  2253.                 $userEntityUserNameField = 'userName';
  2254.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2256.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2259.             }
  2260.         } else if ($systemType == '_BUDDYBEE_') {
  2261.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2262.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2263.             $twigData = [];
  2264.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2265.             $userEntityManager = $em_goc;
  2266.             $userEntityIdField = 'applicantId';
  2267.             $userEntityUserNameField = 'username';
  2268.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2270.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2272.         } else if ($systemType == '_CENTRAL_') {
  2273.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2274.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2275.             $twigData = [];
  2276.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2277.             $userEntityManager = $em_goc;
  2278.             $userEntityIdField = 'applicantId';
  2279.             $userEntityUserNameField = 'username';
  2282.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2284.         }
  2286.         if ($request->isMethod('POST') || $otp != '') {
  2289.             $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2290.                 array(
  2291.                     $userEntityIdField => $userId
  2292.                 )
  2293.             );
  2294.             if ($userObj) {
  2296.             } else {
  2297.                 $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2298.                     array(
  2299.                         $userEntityEmailField1 => $email_address
  2300.                     )
  2301.                 );
  2303.                 if ($userObj) {
  2306.                 } else {
  2309.                     $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2310.                         array(
  2311.                             $userEntityEmailField2 => $email_address
  2312.                         )
  2313.                     );
  2314.                     if ($userObj) {
  2317.                     } else {
  2320.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2321.                             array(
  2322.                                 $userEntityUserNameField => $email_address
  2323.                             )
  2324.                         );
  2327.                     }
  2330.                 }
  2331.             }
  2333.             if ($userObj) {
  2334.                 $userOtp = $userObj->getOtp();
  2335.                 $userOtpActionId = $userObj->getOtpActionId();
  2336.                 $userOtpExpireTs = 1 * $userObj->getOtpExpireTs();
  2337.                 $currentTime = new \DateTime();
  2338.                 $currentTimeTs = 1 * $currentTime->format('U');
  2340.                 $userData = array(
  2341.                     'id' => $userObj->getApplicantId(),
  2342.                     'email' => $email_address,
  2343.                     'appId' => 0,
  2344.                     'image' => $userObj->getImage(),
  2345.                     'firstName' => $userObj->getFirstname(),
  2346.                     'lastName' => $userObj->getLastname(),
  2347.                     //                        'appId'=>$userObj->getUserAppId(),
  2348.                 );
  2350.                 $email_twig_data = [
  2351.                     'page_title' => 'OTP',
  2352.                     'success' => false,
  2353.                     //                        'encryptedData' => $encryptedData,
  2354.                     'message' => $message,
  2355.                     'userType' => $userType,
  2356.                     //                        'errorField' => $errorField,
  2357.                     'otp' => '',
  2358.                     'otpExpireSecond' => $otpExpireSecond,
  2359.                     'otpActionId' => $otpActionId,
  2360.                     'otpExpireTs' => $userOtpExpireTs,
  2361.                     'systemType' => $systemType,
  2362.                     'userCategory' => $userCategory,
  2363.                     'userData' => $userData,
  2364.                     "email" => $email_address,
  2365.                     "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2368.                 ];
  2369.                 if ($otp == '0112') {
  2370.                     $userObj->setOtp(0);
  2371.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  2372.                     $userObj->setOtpExpireTs(0);
  2373.                     $userObj->setTriggerResetPassword(1);
  2375.                     $em_goc->flush();
  2376.                     $email_twig_data['success'] = true;
  2377.                     $message = "";
  2378.                 } else if ($userOtp != $otp) {
  2379.                     $message = "Invalid OTP!";
  2380.                     $email_twig_data['success'] = false;
  2381.                     $redirectUrl = "";
  2382.                 } else if ($userOtpActionId != $otpActionId) {
  2383.                     $message = "Invalid OTP Action!";
  2384.                     $email_twig_data['success'] = false;
  2385.                     $redirectUrl = "";
  2386.                 } else if ($currentTimeTs > $userOtpExpireTs) {
  2387.                     $message = "OTP Expired!";
  2388.                     $email_twig_data['success'] = false;
  2389.                     $redirectUrl = "";
  2390.                 } else {
  2391.                     if ($otpActionId == UserConstants::OTP_ACTION_FORGOT_PASSWORD) {
  2392.                         $userObj->setTriggerResetPassword(1);
  2393.                         $userObj->setIsTemporaryEntry(0);
  2394.                     }
  2395.                     if ($otpActionId == UserConstants::OTP_ACTION_CONFIRM_EMAIL) {
  2396.                         $userObj->setIsEmailVerified(1);
  2397.                         $userObj->setIsTemporaryEntry(0);
  2398.                         $session->set('IS_EMAIL_VERIFIED', 1);
  2399.                         $new_ccs = $em_goc
  2400.                             ->getRepository('CompanyGroupBundle\\Entity\\EntityTokenStorage')
  2401.                             ->findBy(
  2402.                                 array(
  2403.                                     'userId' => $session->get('userId')
  2404.                                 )
  2405.                             );
  2406.                         foreach ($new_ccs as $new_cc) {
  2407.                             $session_data = json_decode($new_cc->getSessionData(), true);
  2409.                             $session_data['IS_EMAIL_VERIFIED'] = 1;
  2411.                             $updated_session_data = json_encode($session_data);
  2413.                             $new_cc->setSessionData($updated_session_data);
  2414.                             $em_goc->persist($new_cc);
  2415.                         }
  2416.                     }
  2418.                     $userObj->setOtp(0);
  2419.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  2420.                     $userObj->setOtpExpireTs(0);
  2423.                     $em_goc->flush();
  2424.                     $email_twig_data['success'] = true;
  2425.                     $message = "";
  2426.                 }
  2428.             } else {
  2429.                 $message = "Account not found!";
  2430.                 $redirectUrl = "";
  2431.                 $email_twig_data['success'] = false;
  2432.             }
  2435.         }
  2436.         $twigData = array(
  2437.             'page_title' => 'OTP Verification',
  2438.             'message' => $message,
  2439.             "userType" => $userType,
  2440.             "userData" => $userData,
  2441.             "otp" => '',
  2442.             "redirectUrl" => $redirectUrl,
  2443.             "email" => $email_address,
  2444.             "otpExpireTs" => $otpExpireTs,
  2445.             "otpActionId" => $otpActionId,
  2446.             "userCategory" => $userCategory,
  2447.             "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2449.             "systemType" => $systemType,
  2450.             'actionData' => $email_twig_data,
  2451.             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2452.         );
  2454.         $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2455.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2457.             $twigData['encData'] = $encDataStr;
  2458.             $response = new JsonResponse($twigData);
  2461.             $response->headers->set('Access-Control-Allow-Origin', '*');
  2462.             return $response;
  2463.         } else if ($twigData['success'] == true) {
  2464.             $encData = array(
  2465.                 "userType" => $userType,
  2466.                 "otp" => '',
  2467.                 'message' => $message,
  2469.                 "otpExpireTs" => $otpExpireTs,
  2470.                 "otpActionId" => $otpActionId,
  2471.                 "userCategory" => $userCategory,
  2472.                 "userId" => $userData['id'],
  2474.                 "systemType" => $systemType,
  2476.             );
  2479.             $redirectRoute = UserConstants::$OTP_ACTION_DATA[$otpActionId]['redirectRoute'];
  2480.             if ($redirectRoute == '') {
  2481.                 $redirectRoute = 'dashboard';
  2482.             }
  2484.             if ($redirectRoute == 'dashboard') {
  2485.                 $url = $this->generateUrl($redirectRoute, ['_fragment' => null], UrlGeneratorInterface::ABSOLUTE_URL);
  2486.                 $redirectUrl = $url . '?data=' . urlencode($encDataStr);
  2487.             } else {
  2488.                 $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2489.                 $url = $this->generateUrl(
  2490.                     $redirectRoute
  2491.                 );
  2492.                 $redirectUrl = $url . "/" . $encDataStr;
  2493.             }
  2495.             return $this->redirect($redirectUrl);
  2498. //            $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2499. //            $url = $this->generateUrl(
  2500. //                'central_landing'
  2501. //            );
  2502. //            $redirectUrl = $url . "/" . $encDataStr;
  2503. //            return $this->redirect($redirectUrl);
  2506.         } else {
  2507.             return $this->render(
  2508.                 $twig_file,
  2509.                 $twigData
  2510.             );
  2511.         }
  2513.     }
  2515.     public function VerifyOtpWebAction(Request $request, $encData = '')
  2516.     {
  2518.         $em = $this->getDoctrine()->getManager();
  2519.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2520.         $session = $request->getSession();
  2521.         $message = "";
  2522.         $retData = array();
  2523.         $encData = $request->query->get('encData', $encData);
  2524.         $encryptedData = [];
  2525.         if ($encData != '')
  2526.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  2527.         if ($encryptedData == null) $encryptedData = [];
  2529.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  2530.         $userCategory = $request->request->get('userCategory', $request->query->get('userCategory', (isset($encryptedData['otp']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_')));
  2531.         $email_address = $request->request->get('email', $request->query->get('email', (isset($encryptedData['email']) ? $encryptedData['email'] : '')));
  2532.         $otpExpireSecond = $request->request->get('otpExpireSecond', $request->query->get('otpExpireSecond', 180));
  2533.         $otpActionId = $request->request->get('otpActionId', $request->query->get('otpActionId', (isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : UserConstants::OTP_ACTION_FORGOT_PASSWORD)));
  2534.         $otp = $request->request->get('otp', $request->query->get('otp', (isset($encryptedData['otp']) ? $encryptedData['otp'] : '')));
  2535.         $otpExpireTs = isset($encryptedData['otpExpireTs']) ? $encryptedData['otpExpireTs'] : 0;
  2536.         $userId = $request->request->get('userId', $request->query->get('userId', (isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID, 0))));
  2539.         $userType = UserConstants::USER_TYPE_APPLICANT;
  2541.         $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2542.         $userEntityManager = $em_goc;
  2543.         $userEntityIdField = 'applicantId';
  2544.         $userEntityUserNameField = 'username';
  2545.         $userEntityEmailField1 = 'email';
  2546.         $userEntityEmailField1Getter = 'getEmail';
  2547.         $userEntityEmailField1Setter = 'setEmail';
  2548.         $userEntityEmailField2 = 'oAuthEmail';
  2549.         $userEntityEmailField2Getter = 'geOAuthEmail';
  2550.         $userEntityEmailField2Setter = 'seOAuthEmail';
  2552.         $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2553.         $twigData = [];
  2554.         $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2555.         $email_twig_data = array('success' => false);
  2556.         $redirectUrl = '';
  2558.         $userObj = null;
  2559.         $userData = [];
  2560.         if ($systemType == '_ERP_') {
  2562.             if ($userCategory == '_APPLICANT_') {
  2563.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  2565.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2566.                 $twigData = [];
  2567.                 $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2568.                 $userEntityManager = $em_goc;
  2569.                 $userEntityIdField = 'applicantId';
  2570.                 $userEntityUserNameField = 'username';
  2571.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2574.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2575.             } else {
  2576.                 $userType = UserConstants::USER_TYPE_GENERAL;
  2577.                 $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2578.                 $twigData = [];
  2579.                 $userEntity = 'ApplicationBundle:SysUser';
  2580.                 $userEntityManager = $em;
  2581.                 $userEntityIdField = 'userId';
  2582.                 $userEntityUserNameField = 'userName';
  2583.                 $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2585.                 //    $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2588.             }
  2589.         } else if ($systemType == '_BUDDYBEE_') {
  2590.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2591.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2592.             $twigData = [];
  2593.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2594.             $userEntityManager = $em_goc;
  2595.             $userEntityIdField = 'applicantId';
  2596.             $userEntityUserNameField = 'username';
  2597.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2599.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2601.         } else if ($systemType == '_CENTRAL_') {
  2602.             $userType = UserConstants::USER_TYPE_APPLICANT;
  2603.             $twig_file = '@HoneybeeWeb/pages/views/verify_otp_honeybee.html.twig';
  2604.             $twigData = [];
  2605.             $userEntity = 'CompanyGroupBundle\\Entity\\EntityApplicantDetails';
  2606.             $userEntityManager = $em_goc;
  2607.             $userEntityIdField = 'applicantId';
  2608.             $userEntityUserNameField = 'username';
  2609.             $email_twig_file = '@Application/email/templates/forgotPasswordOtp.html.twig';
  2611.             //            $email_twig_file = 'ApplicationBundle:pages/email:find_account_buddybee.html.twig';
  2613.         }
  2615.         if ($request->isMethod('POST') || $otp != '') {
  2618.             $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2619.                 array(
  2620.                     $userEntityIdField => $userId
  2621.                 )
  2622.             );
  2623.             if ($userObj) {
  2625.             } else {
  2626.                 $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2627.                     array(
  2628.                         $userEntityEmailField1 => $email_address
  2629.                     )
  2630.                 );
  2632.                 if ($userObj) {
  2635.                 } else {
  2638.                     $userObj = $userEntityManager->getRepository($userEntity)->findOneBy(
  2639.                         array(
  2640.                             $userEntityEmailField2 => $email_address
  2641.                         )
  2642.                     );
  2643.                     if ($userObj) {
  2646.                     } else {
  2649.                         $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2650.                             array(
  2651.                                 $userEntityUserNameField => $email_address
  2652.                             )
  2653.                         );
  2656.                     }
  2659.                 }
  2660.             }
  2662.             if ($userObj) {
  2663.                 $userOtp = $userObj->getOtp();
  2664.                 $userOtpActionId = $userObj->getOtpActionId();
  2665.                 $userOtpExpireTs = 1 * $userObj->getOtpExpireTs();
  2666.                 $currentTime = new \DateTime();
  2667.                 $currentTimeTs = 1 * $currentTime->format('U');
  2669.                 $userData = array(
  2670.                     'id' => $userObj->getApplicantId(),
  2671.                     'email' => $email_address,
  2672.                     'appId' => 0,
  2673.                     'image' => $userObj->getImage(),
  2674.                     'firstName' => $userObj->getFirstname(),
  2675.                     'lastName' => $userObj->getLastname(),
  2676.                     //                        'appId'=>$userObj->getUserAppId(),
  2677.                 );
  2679.                 $email_twig_data = [
  2680.                     'page_title' => 'OTP',
  2681.                     'success' => false,
  2682.                     //                        'encryptedData' => $encryptedData,
  2683.                     'message' => $message,
  2684.                     'userType' => $userType,
  2685.                     //                        'errorField' => $errorField,
  2686.                     'otp' => '',
  2687.                     'otpExpireSecond' => $otpExpireSecond,
  2688.                     'otpActionId' => $otpActionId,
  2689.                     'otpExpireTs' => $userOtpExpireTs,
  2690.                     'systemType' => $systemType,
  2691.                     'userCategory' => $userCategory,
  2692.                     'userData' => $userData,
  2693.                     "email" => $email_address,
  2694.                     "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2697.                 ];
  2698.                 if ($otp == '0112') {
  2699.                     $userObj->setOtp(0);
  2700.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  2701.                     $userObj->setOtpExpireTs(0);
  2702.                     $userObj->setTriggerResetPassword(1);
  2704.                     $em_goc->flush();
  2705.                     $email_twig_data['success'] = true;
  2706.                     $message = "";
  2707.                 } else if ($userOtp != $otp) {
  2708.                     $message = "Invalid OTP!";
  2709.                     $email_twig_data['success'] = false;
  2710.                     $redirectUrl = "";
  2711.                 } else if ($userOtpActionId != $otpActionId) {
  2712.                     $message = "Invalid OTP Action!";
  2713.                     $email_twig_data['success'] = false;
  2714.                     $redirectUrl = "";
  2715.                 } else if ($currentTimeTs > $userOtpExpireTs) {
  2716.                     $message = "OTP Expired!";
  2717.                     $email_twig_data['success'] = false;
  2718.                     $redirectUrl = "";
  2719.                 } else {
  2721.                     $userObj->setOtp(0);
  2722.                     $userObj->setOtpActionId(UserConstants::OTP_ACTION_NONE);
  2723.                     $userObj->setOtpExpireTs(0);
  2724.                     $userObj->setTriggerResetPassword(0);
  2725.                     $userObj->setIsEmailVerified(0);
  2726.                     $userObj->setIsTemporaryEntry(0);
  2727.                     $em_goc->flush();
  2728.                     $email_twig_data['success'] = true;
  2729.                     $message = "";
  2730.                 }
  2732.             } else {
  2733.                 $message = "Account not found!";
  2734.                 $redirectUrl = "";
  2735.                 $email_twig_data['success'] = false;
  2736.             }
  2739.         }
  2740.         $twigData = array(
  2741.             'page_title' => 'OTP Verification',
  2742.             'message' => $message,
  2743.             "userType" => $userType,
  2744.             "userData" => $userData,
  2745.             "otp" => '',
  2746.             "redirectUrl" => $redirectUrl,
  2747.             "email" => $email_address,
  2748.             "otpExpireTs" => $otpExpireTs,
  2749.             "otpActionId" => $otpActionId,
  2750.             "userCategory" => $userCategory,
  2751.             "userId" => isset($userData['id']) ? $userData['id'] : 0,
  2753.             "systemType" => $systemType,
  2754.             'actionData' => $email_twig_data,
  2755.             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2756.         );
  2757.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2759.             $response = new JsonResponse($twigData);
  2760.             $response->headers->set('Access-Control-Allow-Origin', '*');
  2761.             return $response;
  2762.         } else if ($twigData['success'] == true) {
  2763.             $encData = array(
  2764.                 "userType" => $userType,
  2765.                 "otp" => '',
  2766.                 'message' => $message,
  2768.                 "otpExpireTs" => $otpExpireTs,
  2769.                 "otpActionId" => $otpActionId,
  2770.                 "userCategory" => $userCategory,
  2771.                 "userId" => $userData['id'],
  2773.                 "systemType" => $systemType,
  2775.             );
  2776. //            $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2777. //            $url = $this->generateUrl(
  2778. //                UserConstants::$OTP_ACTION_DATA[$otpActionId]['redirectRoute']
  2779. //            );
  2780. //            $redirectUrl = $url . "/" . $encDataStr;
  2781. //            return $this->redirect($redirectUrl);
  2783.             $encDataStr = $this->get('url_encryptor')->encrypt(json_encode($encData));
  2784.             $url = $this->generateUrl(
  2785.                 'central_landing'
  2786.             );
  2787.             $redirectUrl = $url . "/" . $encDataStr;
  2788.             $this->addFlash('success', 'Email Verified!');
  2789.             return $this->redirect($redirectUrl);
  2792.         } else {
  2793.             return $this->render(
  2794.                 $twig_file,
  2795.                 $twigData
  2796.             );
  2797.         }
  2799.     }
  2802.     // reset new password **
  2803.     public function NewPasswordAction(Request $request, $encData = '')
  2804.     {
  2805.         //  $userCategory=$request->request->has('userCategory');
  2806.         $encryptedData = [];
  2807.         $errorField = '';
  2808.         $message = '';
  2809.         $userType = '';
  2810.         $otpExpireSecond = 180;
  2811.         $session = $request->getSession();
  2812.         if ($encData == '')
  2813.             $encData = $request->get('encData', '');
  2814.         if ($encData != '')
  2815.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  2817.         //    $encryptedData = $this->get('url_encryptor')->decrypt($encData);
  2818.         $otp = isset($encryptedData['otp']) ? $encryptedData['otp'] : 0;
  2819.         $password = isset($encryptedData['password']) ? $encryptedData['password'] : 0;
  2820.         $otpActionId = isset($encryptedData['otpActionId']) ? $encryptedData['otpActionId'] : 0;
  2821.         $userId = isset($encryptedData['userId']) ? $encryptedData['userId'] : $session->get(UserConstants::USER_ID);
  2822.         $userCategory = isset($encryptedData['userCategory']) ? $encryptedData['userCategory'] : '_BUDDYBEE_USER_';
  2823.         //    $em = $this->getDoctrine()->getManager('company_group');
  2824.         $em_goc = $this->getDoctrine()->getManager('company_group');
  2826.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  2827.         $twig_file = '@Application/pages/login/find_account_buddybee.html.twig';
  2828.         $twigData = [];
  2829.         $email_twig_file = '@Application/pages/email/find_account_buddybee.html.twig';
  2830.         $email_twig_data = [];
  2832.         if ($request->isMethod('POST')) {
  2833.             $otp = $request->request->get('otp', $otp);
  2834.             $password = $request->request->get('password', $password);
  2835.             $otpActionId = $request->request->get('otpActionId', $otpActionId);
  2836.             $userId = $request->request->get('userId', $userId);
  2837.             $userCategory = $request->request->get('userCategory', $userCategory);
  2838.             $email_address = $request->request->get('email');
  2840.             if ($systemType == '_ERP_') {
  2842.                 $gocId = $session->get(UserConstants::USER_GOC_ID);
  2843.                 $appId = $session->get(UserConstants::USER_APP_ID);
  2844.                 list($em, $goc) = $this->getPublicDocumentEntityManager($appId);
  2845.                 if (!$em || !$goc) {
  2846.                     return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  2847.                         'page_title' => '404 Not Found',
  2848.                     ));
  2849.                 }
  2851.                 if (!$em || !$goc) {
  2852.                     return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  2853.                         'page_title' => '404 Not Found',
  2854.                     ));
  2855.                 }
  2858.                 if ($userCategory == '_APPLICANT_') {
  2859.                     $userType = UserConstants::USER_TYPE_APPLICANT;
  2861.                     $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2862.                         array(
  2863.                             'applicantId' => $userId
  2864.                         )
  2865.                     );
  2867.                     if ($userObj) {
  2868.                         if ($userObj->getTriggerResetPassword() == 1) {
  2869.                             $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2870.                             $userObj->setPassword($encodedPassword);
  2871.                             $userObj->setTempPassword('');
  2874.                             $userObj->setTriggerResetPassword(0);
  2877.                             $em_goc->flush();
  2878.                             $email_twig_data['success'] = true;
  2879.                             $message = "";
  2882.                             $userData = array(
  2883.                                 'id' => $userObj->getApplicantId(),
  2884.                                 'email' => $email_address,
  2885.                                 'appId' => 0,
  2886.                                 'image' => $userObj->getImage(),
  2887.                                 'firstName' => $userObj->getFirstname(),
  2888.                                 'lastName' => $userObj->getLastname(),
  2889.                                 //                        'appId'=>$userObj->getUserAppId(),
  2890.                             );
  2891.                         } else {
  2892.                             $message = "Action not allowed!";
  2893.                             $email_twig_data['success'] = false;
  2894.                         }
  2897.                     } else {
  2898.                         $message = "Account not found!";
  2899.                         $email_twig_data['success'] = false;
  2900.                     }
  2901.                 } else {
  2902.                     $userType = $session->get(UserConstants::USER_TYPE);
  2903.                     $userObj = $em->getRepository('ApplicationBundle\\Entity\\SysUser')->findOneBy(
  2904.                         array(
  2905.                             'userId' => $userId
  2906.                         )
  2907.                     );
  2909.                     if ($userObj) {
  2910.                         if ($userObj->getTriggerResetPassword() == 1) {
  2911.                             $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2912.                             $userObj->setPassword($encodedPassword);
  2913.                             $userObj->setTempPassword('');
  2916.                             $userObj->setTriggerResetPassword(0);
  2919.                             $em->flush();
  2920.                             $email_twig_data['success'] = true;
  2921.                             $message = "";
  2923.                         } else {
  2924.                             $message = "Action not allowed!";
  2925.                             $email_twig_data['success'] = false;
  2926.                         }
  2929.                     } else {
  2930.                         $message = "Account not found!";
  2931.                         $email_twig_data['success'] = false;
  2932.                     }
  2933.                 }
  2935.                 if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  2937.                     $response = new JsonResponse(array(
  2938.                             'templateData' => $twigData,
  2939.                             'message' => $message,
  2940.                             'actionData' => $email_twig_data,
  2941.                             'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  2942.                         )
  2943.                     );
  2944.                     $response->headers->set('Access-Control-Allow-Origin', '*');
  2945.                     return $response;
  2947.                 } else if ($email_twig_data['success'] == true) {
  2948.                     //                    $twig_file = '@Authentication/pages/views/reset_password_success_buddybee.html.twig';
  2949.                     //                    $twigData = [
  2950.                     //                        'page_title' => 'Reset Successful',
  2951.                     //                        'encryptedData' => $encryptedData,
  2952.                     //                        'message' => $message,
  2953.                     //                        'userType' => $userType,
  2954.                     //                        'errorField' => $errorField,
  2955.                     //
  2956.                     //                    ];
  2957.                     //                    return $this->render(
  2958.                     //                        $twig_file,
  2959.                     //                        $twigData
  2960.                     //                    );
  2962.                     return $this->redirectToRoute('dashboard');
  2963.                 }
  2966.             } else if ($systemType == '_BUDDYBEE_') {
  2967.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  2969.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  2970.                     array(
  2971.                         'applicantId' => $userId
  2972.                     )
  2973.                 );
  2975.                 if ($userObj) {
  2976.                     if ($userObj->getTriggerResetPassword() == 1) {
  2977.                         $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  2978.                         $userObj->setPassword($encodedPassword);
  2979.                         $userObj->setTempPassword('');
  2982.                         $userObj->setTriggerResetPassword(0);
  2985.                         $em_goc->flush();
  2986.                         $email_twig_data['success'] = true;
  2987.                         $message = "";
  2990.                         $userData = array(
  2991.                             'id' => $userObj->getApplicantId(),
  2992.                             'email' => $email_address,
  2993.                             'appId' => 0,
  2994.                             'image' => $userObj->getImage(),
  2995.                             'firstName' => $userObj->getFirstname(),
  2996.                             'lastName' => $userObj->getLastname(),
  2997.                             //                        'appId'=>$userObj->getUserAppId(),
  2998.                         );
  2999.                     } else {
  3000.                         $message = "Action not allowed!";
  3001.                         $email_twig_data['success'] = false;
  3002.                     }
  3005.                 } else {
  3006.                     $message = "Account not found!";
  3007.                     $email_twig_data['success'] = false;
  3008.                 }
  3011.             } else if ($systemType == '_CENTRAL_') {
  3012.                 $userType = UserConstants::USER_TYPE_APPLICANT;
  3014.                 $userObj = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(
  3015.                     array(
  3016.                         'applicantId' => $userId
  3017.                     )
  3018.                 );
  3020.                 if ($userObj) {
  3021.                     if ($userObj->getTriggerResetPassword() == 1) {
  3022.                         $encodedPassword = $this->container->get('app.legacy_password_service')->hashWithSalt($password, $userObj->getSalt());
  3023.                         $userObj->setPassword($encodedPassword);
  3024.                         $userObj->setTempPassword('');
  3027.                         $userObj->setTriggerResetPassword(0);
  3030.                         $em_goc->flush();
  3031.                         $email_twig_data['success'] = true;
  3032.                         $message = "";
  3035.                         $userData = array(
  3036.                             'id' => $userObj->getApplicantId(),
  3037.                             'email' => $email_address,
  3038.                             'appId' => 0,
  3039.                             'image' => $userObj->getImage(),
  3040.                             'firstName' => $userObj->getFirstname(),
  3041.                             'lastName' => $userObj->getLastname(),
  3042.                             //                        'appId'=>$userObj->getUserAppId(),
  3043.                         );
  3044.                     } else {
  3045.                         $message = "Action not allowed!";
  3046.                         $email_twig_data['success'] = false;
  3047.                     }
  3050.                 } else {
  3051.                     $message = "Account not found!";
  3052.                     $email_twig_data['success'] = false;
  3053.                 }
  3056.             }
  3059.             if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  3061.                 $response = new JsonResponse(array(
  3062.                         'templateData' => $twigData,
  3063.                         'message' => $message,
  3064.                         'actionData' => $email_twig_data,
  3065.                         'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  3066.                     )
  3067.                 );
  3068.                 $response->headers->set('Access-Control-Allow-Origin', '*');
  3069.                 return $response;
  3071.             } else if ($email_twig_data['success'] == true) {
  3073.                 if ($systemType == '_ERP_') $twig_file = '@Authentication/pages/views/reset_password_success_central.html.twig';
  3074.                 else if ($systemType == '_BUDDYBEE_') $twig_file = '@Authentication/pages/views/reset_password_success_buddybee.html.twig';
  3075.                 else if ($systemType == '_CENTRAL_') $twig_file = '@Authentication/pages/views/reset_password_success_central.html.twig';
  3077.                 $twigData = [
  3078.                     'page_title' => 'Reset Successful',
  3079.                     'encryptedData' => $encryptedData,
  3080.                     'message' => $message,
  3081.                     'userType' => $userType,
  3082.                     'errorField' => $errorField,
  3084.                 ];
  3085.                 return $this->render(
  3086.                     $twig_file,
  3087.                     $twigData
  3088.                 );
  3089.             }
  3092.         }
  3094.         if ($systemType == '_ERP_') {
  3095.             if ($userCategory == '_APPLICANT_') {
  3096.                 $userType = $session->get(UserConstants::USER_TYPE);
  3097.                 $twig_file = '@Application/pages/login/find_account_buddybee.html.twig';
  3098.                 $twigData = [
  3099.                     'page_title' => 'Find Account',
  3100.                     'encryptedData' => $encryptedData,
  3101.                     'message' => $message,
  3102.                     'userType' => $userType,
  3103.                     'errorField' => $errorField,
  3105.                 ];
  3106.             } else {
  3107.                 $userType = $session->get(UserConstants::USER_TYPE);
  3109.                 $twig_file = '@Application/pages/login/reset_password_erp.html.twig';
  3110.                 $twigData = [
  3111.                     'page_title' => 'Reset Password',
  3112.                     'encryptedData' => $encryptedData,
  3113.                     'message' => $message,
  3114.                     'userType' => $userType,
  3115.                     'errorField' => $errorField,
  3117.                 ];
  3118.             }
  3121.         } else if ($systemType == '_BUDDYBEE_') {
  3122.             $userType = UserConstants::USER_TYPE_APPLICANT;
  3124.             $twig_file = '@Authentication/pages/views/reset_new_password_buddybee.html.twig';
  3125.             $twigData = [
  3126.                 'page_title' => 'Reset Password',
  3127.                 'encryptedData' => $encryptedData,
  3128.                 'message' => $message,
  3129.                 'userType' => $userType,
  3130.                 'errorField' => $errorField,
  3132.             ];
  3133.         } else if ($systemType == '_CENTRAL_') {
  3134.             $userType = UserConstants::USER_TYPE_APPLICANT;
  3136.             $twig_file = '@HoneybeeWeb/pages/views/reset_new_password_honeybee.html.twig';
  3137.             $twigData = [
  3138.                 'page_title' => 'Reset Password',
  3139.                 'encryptedData' => $encryptedData,
  3140.                 'message' => $message,
  3141.                 'userType' => $userType,
  3142.                 'errorField' => $errorField,
  3144.             ];
  3145.         }
  3146.         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  3147.             if ($userId != 0 && $userId != null) {
  3148.                 $response = new JsonResponse(array(
  3149.                         'templateData' => $twigData,
  3150.                         'message' => $message,
  3151. //                        'encryptedData' => $encryptedData,
  3152.                         'actionData' => $email_twig_data,
  3153.                         'success' => isset($email_twig_data['success']) ? $email_twig_data['success'] : false,
  3154.                     )
  3155.                 );
  3156.             } else {
  3157.                 $response = new JsonResponse(array(
  3158.                         'templateData' => [],
  3159.                         'message' => 'Unauthorized',
  3160.                         'actionData' => [],
  3161. //                        'encryptedData' => $encryptedData,
  3162.                         'success' => false,
  3163.                     )
  3164.                 );
  3165.             }
  3166.             $response->headers->set('Access-Control-Allow-Origin', '*');
  3167.             return $response;
  3169.         } else {
  3170.             if ($userId != 0 && $userId != null) {
  3171.                 return $this->render(
  3172.                     $twig_file,
  3173.                     $twigData
  3174.                 );
  3175.             } else
  3176.                 return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  3177.                     'page_title' => '404 Not Found',
  3179.                 ));
  3180.         }
  3182.     }
  3184.     // hire
  3185. //    public function CentralHirePageAction()
  3186. //    {
  3187. //        $em_goc = $this->getDoctrine()->getManager('company_group');
  3188. //        $freelancersData = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3189. //            ->createQueryBuilder('m')
  3190. //             ->where("m.isConsultant =1")
  3191. //
  3192. //            ->getQuery()
  3193. //            ->getResult();
  3194. //
  3195. //        return $this->render('@HoneybeeWeb/pages/hire.html.twig', array(
  3196. //            'page_title' => 'Hire',
  3197. //            'freelancersData' => $freelancersData,
  3198. //
  3199. //        ));
  3200. //    }
  3201. //    public function CentralHirePageAction(Request $request)
  3202. //    {
  3203. //        $em_goc = $this->getDoctrine()->getManager('company_group');
  3204. //        $search = $request->query->get('q'); // get search text
  3205. //
  3206. //        $qb = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3207. //            ->createQueryBuilder('m')
  3208. //            ->where('m.isConsultant = 1');
  3209. //
  3210. //        if (!empty($search)) {
  3211. //            $qb->andWhere('m.firstname LIKE :search
  3212. //                       OR m.lastname LIKE :search ')
  3213. //                ->setParameter('search', '%' . $search . '%');
  3214. //        }
  3215. //
  3216. //        $freelancersData = $qb->getQuery()->getResult();
  3217. //
  3218. //        return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  3219. //            'page_title' => 'Hire',
  3220. //            'freelancersData' => $freelancersData,
  3221. //            'searchValue' => $search
  3222. //        ]);
  3223. //    }
  3224.     public function CentralHirePageAction(Request $request)
  3225.     {
  3226.         $em_goc = $this->getDoctrine()->getManager('company_group');
  3227.         $search = $request->query->get('q'); // search text
  3229.         $qb = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3230.             ->createQueryBuilder('m')
  3231.             ->where('m.isConsultant = 1');
  3233.         if (!empty($search)) {
  3234.             $qb->andWhere('m.firstname LIKE :search OR m.lastname LIKE :search')
  3235.                 ->setParameter('search', '%' . $search . '%');
  3236.         }
  3238.         $freelancersData = $qb->getQuery()->getResult();
  3240.         // For AJAX requests, we return the same Twig, but we include the searchValue
  3241.         if ($request->isXmlHttpRequest()) {
  3242.             return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  3243.                 'page_title' => 'Hire',
  3244.                 'freelancersData' => $freelancersData,
  3245.                 'searchValue' => $search, // so input retains value
  3246.                 'isAjax' => true, // flag to indicate AJAX
  3247.             ]);
  3248.         }
  3250.         // Normal page load
  3251.         return $this->render('@HoneybeeWeb/pages/hire.html.twig', [
  3252.             'page_title' => 'Hire',
  3253.             'freelancersData' => $freelancersData,
  3254.             'searchValue' => $search,
  3255.             'isAjax' => false,
  3256.         ]);
  3257.     }
  3259.     // end of centralHire
  3261.     // pricing
  3262.     public function CentralPricingPageAction(Request $request)
  3263.     {
  3264.         $em_goc = $this->getDoctrine()->getManager('company_group');
  3265.         $session = $request->getSession();
  3266.         $userId = $session->get(UserConstants::USER_ID);
  3268.         $companiesForUser = [];
  3270.         if ($userId) {
  3271.             $userDetails = $em_goc->getRepository('CompanyGroupBundle\Entity\EntityApplicantDetails')->find($userId);
  3273.             if ($userDetails) {
  3275.                 $userTypeByAppIds = json_decode($userDetails->getUserTypesByAppIds(), true);
  3277.                 if (is_array($userTypeByAppIds)) {
  3279.                     $adminAppIds = [];
  3281.                     foreach ($userTypeByAppIds as $appId => $types) {
  3282.                         if (in_array(1, $types)) {
  3283.                             $adminAppIds[] = $appId;
  3284.                         }
  3285.                     }
  3287.                     if (!empty($adminAppIds)) {
  3288.                         $companiesForUser = $em_goc->getRepository('CompanyGroupBundle\Entity\CompanyGroup')
  3289.                             ->createQueryBuilder('c')
  3290.                             ->where('c.appId IN (:appIds)')
  3291.                             ->setParameter('appIds', $adminAppIds)
  3292.                             ->getQuery()
  3293.                             ->getResult();
  3294.                     }
  3295.                 }
  3296.             }
  3297.         }
  3299.         $packageDetails = GeneralConstant::$packageDetails;
  3301.         // WEB-1: every figure renders from THE ONE CENTRAL PRICE STORE (PricingBook — the
  3302.         // founder anchors); the template carries zero literal euro-amounts.
  3303.         return $this->render('@HoneybeeWeb/pages/pricing.html.twig', [
  3304.             'page_title' => 'HoneyBee Pricing | Business Suite, AI Workforce, HoneyCore 4.0, HoneyWatt',
  3305.             'og_title' => 'HoneyBee Pricing | Affordable to enter. Fair to use. Powerful to scale.',
  3306.             'og_description' => 'Business Suite from €8/user/month. Hybrid Control from €20/site/month. HoneyWatt free to start. Every entry price public — engineering scoped transparently.',
  3307.             'packageDetails' => $packageDetails,
  3308.             'companies' => $companiesForUser,
  3309.             'prices' => \ApplicationBundle\Modules\HoneybeeWeb\Support\PricingBook::publicBook(),
  3310.         ]);
  3311.     }
  3314.     // faq
  3315.     public function CentralFaqPageAction()
  3316.     {
  3317.         return $this->render('@HoneybeeWeb/pages/faq.html.twig', array(
  3318.             'page_title'     => 'FAQ | HoneyBee — EPC, Industrial & Platform Questions',
  3319.             'packageDetails' => GeneralConstant::$packageDetails,
  3320.         ));
  3321.     }
  3323.     // terms and condiitons
  3324.     public function CentralTermsAndConditionPageAction()
  3325.     {
  3326.         return $this->render('@HoneybeeWeb/pages/terms_and_conditions.html.twig', array(
  3327.             'page_title' => 'Terms and Conditions',
  3329.         ));
  3330.     }
  3333.     // Refund Policy
  3334.    public function CentralRefundPolicyPageAction()
  3335. {
  3336.     return $this->render('@HoneybeeWeb/pages/refund_policy.html.twig', array(
  3337.         'page_title' => 'Refund Policy',
  3338.     ));
  3339. }
  3341.     // Cancellation Policy
  3342.    public function CentralCancellationPolicyPageAction()
  3343. {
  3344.     return $this->render('@HoneybeeWeb/pages/cancellation_policy.html.twig', array(
  3345.            'page_title' => 'Cancellation Policy',
  3346.     ));
  3347. }
  3349.     // Help page
  3350.    public function CentralHelpPageAction()
  3351.    {
  3352.     return $this->render('@HoneybeeWeb/pages/help.html.twig', array(
  3353.         'page_title' => 'Help',
  3354.     ));
  3355.    }
  3357.  // Career page
  3358.    public function CentralCareerPageAction()
  3359. {
  3360.     return $this->render('@HoneybeeWeb/pages/career.html.twig', array(
  3361.         'page_title' => 'Career',
  3362.     ));
  3363. }
  3365.     public function CentralPrivacyPolicyAction()
  3366.     {
  3367.         return $this->render('@HoneybeeWeb/pages/privacy_policy.html.twig', array(
  3368.             'page_title' => 'Privacy Policy — HoneyBee',
  3369.         ));
  3370.     }
  3372.     // Hivemind (mobile app) privacy policy — public, store-listing URL /privacy
  3373.     public function HivemindPrivacyPolicyAction()
  3374.     {
  3375.         return $this->render('@HoneybeeWeb/pages/hivemind_privacy.html.twig', array(
  3376.             'page_title'     => 'Hivemind Privacy Policy — HoneyBee',
  3377.             'og_title'       => 'Hivemind Privacy Policy',
  3378.             'og_description' => 'How Hivemind, the AI/voice/command interface for HoneyBee ERP, collects, uses, shares, and protects information, plus store disclosure notes.',
  3379.         ));
  3380.     }
  3382.     public function CentralDpaPageAction()
  3383.     {
  3384.         return $this->render('@HoneybeeWeb/pages/dpa.html.twig', array(
  3385.             'page_title' => 'Data Processing Addendum (DPA) — HoneyBee',
  3386.         ));
  3387.     }
  3389.     public function CentralSolutionsPageAction()
  3390.     {
  3391.         // WEB-3 §4: the overview organizes around BUYERS, not technologies.
  3392.         return $this->render('@HoneybeeWeb/pages/solutions.html.twig', array(
  3393.             'page_title' => 'HoneyBee Solutions — by the business you run',
  3394.             'og_title' => 'HoneyBee Solutions — by the business you run',
  3395.             'og_description' => 'Purpose-built combinations for EPCs and system integrators, energy asset owners (IPP/PPA/OPEX), C&I industrial companies and multi-site operations. HoneyBee is the software, not the contractor.',
  3396.             'prices' => PricingBook::publicBook(),
  3397.         ));
  3398.     }
  3400.     // ── WEB-3 §32: problem-specific landing pages under the product roots ──
  3402.     public function CentralHybridSolarDieselPageAction()
  3403.     {
  3404.         return $this->webPage('honeycore_hybrid_sd.html.twig',
  3405.             'Hybrid Solar-Diesel Control — burn less fuel without risking the genset | HoneyCore 4.0',
  3406.             'HoneyCore 4.0 coordinates PV and diesel generators: reverse-power protection, minimum genset loading and logged fuel savings — per-site pricing, capacity-neutral.');
  3407.     }
  3409.     public function CentralBsProjectManagementPageAction()
  3410.     {
  3411.         return $this->webPage('business_suite_projects.html.twig',
  3412.             'Project Management ERP — quotation to cash, one thread | HoneyBee Business Suite',
  3413.             'BoQ, procurement, site execution, milestone billing and profitability — project management that ends at collected cash, not at a Gantt chart.');
  3414.     }
  3416.     public function CentralBsProcurementPageAction()
  3417.     {
  3418.         return $this->webPage('business_suite_procurement.html.twig',
  3419.             'Procurement ERP — requisition to three-way match | HoneyBee Business Suite',
  3420.             'Requisitions, RFQs, purchase orders, goods receipt and three-way match — procurement your auditors and your project margins both trust.');
  3421.     }
  3423.     public function CentralPartnersPageAction()
  3424.     {
  3425.         // WEB-2 §25: no public wholesale prices — the page names partner pricing, never a figure.
  3426.         return $this->render('@HoneybeeWeb/pages/partners.html.twig', array(
  3427.             'page_title' => 'HoneyBee Partners — Build HoneyCore into your projects',
  3428.             'og_title' => 'HoneyBee Partners — Build HoneyCore into your projects',
  3429.             'og_description' => 'Partner pricing, deal registration, training and deployment support for EPCs, system integrators and engineering firms building HoneyCore 4.0 into their projects.',
  3430.         ));
  3431.     }
  3433.     public function CheckoutPageAction(Request $request, $encData = '')
  3434.     {
  3435.         $em = $this->getDoctrine()->getManager('company_group');
  3436.         $em_goc = $this->getDoctrine()->getManager('company_group');
  3437.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  3439.         $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  3440.         if ($encData != "") {
  3442.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  3443.             if ($encryptedData == null) $encryptedData = [];
  3444.             if (isset($encryptedData['invoiceId'])) $invoiceId = $encryptedData['invoiceId'];
  3446.         }
  3447.         $session = $request->getSession();
  3448.         $currencyForGateway = 'eur';
  3449.         $gatewayInvoice = null;
  3450.         if ($invoiceId != 0)
  3451.             $gatewayInvoice = $em->getRepository(EntityInvoice::class)->find($invoiceId);
  3454.         $paymentGateway = $request->request->get('paymentGateway', 'stripe'); //aamarpay,bkash
  3455.         $paymentType = $request->request->get('paymentType', 'credit');
  3456.         $retailerId = $request->request->get('retailerId', 0);
  3457.         if ($request->query->has('currency'))
  3458.             $currencyForGateway = $request->query->get('currency');
  3459.         else
  3460.             $currencyForGateway = $request->request->get('currency', 'eur');
  3462. //        {
  3463. //            if ($request->query->has('meetingSessionId'))
  3464. //                $id = $request->query->get('meetingSessionId');
  3465. //        }
  3468.         $currentUserBalance = 0;
  3469.         $currentUserCoinBalance = 0;
  3471.         $gatewayAmount = 0;
  3472.         $redeemedAmount = 0;
  3473.         $redeemedSessionCount = 0;
  3474.         $toConsumeSessionCount = 0;
  3475.         $invoiceSessionCount = 0;
  3476.         $payableAmount = 0;
  3477.         $promoClaimedAmount = 0;
  3478.         $promoCodeId = 0;
  3479.         $promoClaimedSession = 0;
  3481.         $bookingExpireTime = null;
  3482.         $bookingExpireTs = 0;
  3485.         $imageBySessionCount = [
  3486.             0 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3487.             100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3488.             200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3489.             300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3490.             400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3491.             500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3492.             600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3493.             700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3494.             800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3495.             900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3496.             1000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3497.             1100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3498.             1200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3499.             1300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3500.             1400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3501.             1500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3503.             1600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3504.             1700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3505.             1800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3506.             1900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3507.             2000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3508.             2100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3509.             2200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3510.             2300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3511.             2400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3512.             2500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3513.             2600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3514.             2700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3515.             2800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3516.             2900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3517.             3000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3518.             3100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3519.             3200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3520.             3300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3521.             3400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3522.             3500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3523.             3600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3524.             3700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  3525.         ];
  3528.         if (!$gatewayInvoice) {
  3530.             if ($request->isMethod('POST')) {
  3532.                 $totalAmount = 0;
  3533.                 $totalSessionCount = 0;
  3534.                 $consumedAmount = 0;
  3535.                 $consumedSessionCount = 0;
  3536.                 $bookedById = 0;
  3537.                 $bookingRefererId = 0;
  3540.                 if ($session->get(UserConstants::USER_ID)) {
  3541.                     $bookedById = $session->get(UserConstants::USER_ID);
  3542.                     $bookingRefererId = 0;
  3544. //                    $toConsumeSessionCount = 1 * $request->request->get('meetingSessionConsumeCount', 0);
  3545.                     $invoiceSessionCount = 1 * ($request->request->get('sessionCount', 0) == '' ? 0 : $request->request->get('sessionCount', 0));
  3547.                     //1st do the necessary
  3548.                     $extMeeting = null;
  3549.                     $meetingSessionId = 0;
  3550.                     if ($request->request->has('purchasePackage')) {
  3553.                         //1. check if any bee card if yes try to claim it , modify current balance then
  3555.                         $beeCodeSerial = $request->request->get('beeCodeSerial', '');
  3556.                         $promoCode = $request->request->get('promoCode', '');
  3557.                         $beeCodePin = $request->request->get('beeCodePin', '');
  3558.                         $userId = $request->request->get('userId', $session->get(UserConstants::USER_ID));
  3560.                         $studentDetails = null;
  3561.                         $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($userId);
  3562.                         if ($studentDetails) {
  3563.                             $currentUserBalance = $studentDetails->getAccountBalance();
  3564.                         }
  3567.                         if ($beeCodeSerial != '' && $beeCodePin != '') {
  3568.                             $claimData = MiscActions::ClaimBeeCode($em,
  3569.                                 [
  3570.                                     'claimFlag' => 1,
  3571.                                     'pin' => $beeCodePin,
  3572.                                     'serial' => $beeCodeSerial,
  3573.                                     'userId' => $userId,
  3574.                                 ]);
  3576.                             if ($userId == $session->get(UserConstants::USER_ID)) {
  3577.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3580.                                 $claimData['newCoinBalance'] = $session->get('BUDDYBEE_COIN_BALANCE');
  3581.                                 $claimData['newBalance'] = $session->get('BUDDYBEE_BALANCE');
  3582.                             }
  3585.                             $redeemedAmount = $claimData['data']['claimedAmount'];
  3586.                             $redeemedSessionCount = $claimData['data']['claimedCoin'];
  3589.                         } else
  3590.                             if ($userId == $session->get(UserConstants::USER_ID)) {
  3591.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3592.                             }
  3593.                         $payableAmount = round($request->request->get('payableAmount', 0), 0);
  3595.                         $totalAmountWoDiscount = round($request->request->get('totalAmountWoDiscount', 0), 0);
  3596.                         //now claim and process promocode
  3597.                         if ($promoCode != '') {
  3600.                             $claimData = MiscActions::ClaimPromoCode($em,
  3601.                                 [
  3603.                                     'claimFlag' => 1,
  3604.                                     'promoCode' => $promoCode,
  3605.                                     'decryptedPromoCodeData' => json_decode($this->get('url_encryptor')->decrypt($promoCode), true),
  3606.                                     'orderValue' => $totalAmountWoDiscount,
  3607.                                     'currency' => $currencyForGateway,
  3608.                                     'orderCoin' => $invoiceSessionCount,
  3610.                                     'userId' => $userId,
  3611.                                 ]);
  3614.                             $promoClaimedAmount = 0;
  3615. //                            $promoClaimedAmount = $claimData['data']['claimedAmount']*(BuddybeeConstant::$convMultFromTo['eur'][$currencyForGateway]);
  3616.                             $promoCodeId = $claimData['promoCodeId'];
  3617.                             $promoClaimedSession = $claimData['data']['claimedCoin'];
  3620.                         }
  3622.                         if ($userId == $session->get(UserConstants::USER_ID)) {
  3623.                             MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3624.                             $currentUserBalance = $session->get('BUDDYBEE_BALANCE');
  3625.                             $currentUserCoinBalance = $session->get('BUDDYBEE_COIN_BALANCE');
  3626.                         } else {
  3627.                             if ($bookingRefererId == 0)
  3628.                                 $bookingRefererId = $session->get(UserConstants::USER_ID);
  3629.                             $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($userId);
  3630.                             if ($studentDetails) {
  3631.                                 $currentUserBalance = $studentDetails->getAccountBalance();
  3632.                                 $currentUserCoinBalance = $studentDetails->getSessionCountBalance();
  3633.                                 if ($bookingRefererId != $userId && $bookingRefererId != 0) {
  3634.                                     $bookingReferer = $em_goc->getRepository(EntityApplicantDetails::class)->find($bookingRefererId);
  3635.                                     if ($bookingReferer)
  3636.                                         if ($bookingReferer->getIsAdmin()) {
  3637.                                             $studentDetails->setAssignedSalesRepresentativeId($bookingRefererId);
  3638.                                             $em_goc->flush();
  3639.                                         }
  3641.                                 }
  3642.                             }
  3643.                         }
  3646.                         //2. check if any promo code  if yes add it to promo discount
  3649.                         //3. check if scheule is still temporarily booked if not return that you cannot book it
  3652.                         Buddybee::ExpireAnyMeetingSessionIfNeeded($em);
  3653.                         Buddybee::ExpireAnyEntityInvoiceIfNeeded($em);
  3656. //                        if ($request->request->get('autoAssignMeetingSession', 0) == 1
  3657. //                            && $request->request->get('consultancyScheduleId', 0) != 0
  3658. //                            && $request->request->get('consultancyScheduleId', 0) != ''
  3659. //                        )
  3660.                         {
  3663.                             //1st check if a meeting session exxists with same TS, student id , consultant id
  3665. //                            $scheduledStartTime = new \DateTime('@' . $request->request->get('consultancyScheduleId', ''));
  3666. //                            $extMeeting = $em->getRepository('CompanyGroupBundle\\Entity\\EntityMeetingSession')
  3667. //                                ->findOneBy(
  3668. //                                    array(
  3669. //                                        'scheduledTimeTs' => $scheduledStartTime->format('U'),
  3670. //                                        'consultantId' => $request->request->get('consultantId', 0),
  3671. //                                        'studentId' => $request->request->get('studentId', 0),
  3672. //                                        'durationAllowedMin' => $request->request->get('meetingSessionScheduledDuration', BuddybeeConstant::PER_SESSION_MINUTE),
  3673. //                                    )
  3674. //                                );
  3676. //                            if ($extMeeting) {
  3677. //                                $new = $extMeeting;
  3678. //                                $meetingSessionId = $new->getSessionId();
  3679. //                                $periodMarker = $scheduledStartTime->format('Ym');
  3680. //
  3681. //                            }
  3682. //                            else {
  3683. //
  3684. //
  3685. //                                $scheduleValidity = MiscActions::CheckIfScheduleCanBeConfirmed(
  3686. //                                    $em,
  3687. //                                    $request->request->get('consultantId', 0),
  3688. //                                    $request->request->get('studentId', 0),
  3689. //                                    $scheduledStartTime->format('U'),
  3690. //                                    $request->request->get('meetingSessionScheduledDuration', BuddybeeConstant::PER_SESSION_MINUTE),
  3691. //                                    1
  3692. //                                );
  3693. //
  3694. //                                if (!$scheduleValidity) {
  3695. //                                    $url = $this->generateUrl(
  3696. //                                        'consultant_profile'
  3697. //                                    );
  3698. //                                    $output = [
  3699. //
  3700. //                                        'proceedToCheckout' => 0,
  3701. //                                        'message' => 'Session Booking Expired or not Found!',
  3702. //                                        'errorFlag' => 1,
  3703. //                                        'redirectUrl' => $url . '/' . $request->request->get('consultantId', 0)
  3704. //                                    ];
  3705. //                                    return new JsonResponse($output);
  3706. //                                }
  3707. //                                $new = new EntityMeetingSession();
  3708. //
  3709. //                                $new->setTopicId($request->request->get('consultancyTopic', 0));
  3710. //                                $new->setConsultantId($request->request->get('consultantId', 0));
  3711. //                                $new->setStudentId($request->request->get('studentId', 0));
  3712. //                                $consultancyTopic = $em_goc->getRepository(EntityCreateTopic::class)->find($request->request->get('consultancyTopic', 0));
  3713. //                                $new->setMeetingType($consultancyTopic ? $consultancyTopic->getMeetingType() : 0);
  3714. //                                $new->setConsultantCanUpload($consultancyTopic ? $consultancyTopic->getConsultantCanUpload() : 0);
  3715. //
  3716. //
  3717. //                                $scheduledEndTime = new \DateTime($request->request->get('scheduledTime', ''));
  3718. //                                $scheduledEndTime = $scheduledEndTime->modify('+' . $request->request->get('meetingSessionScheduledDuration', 30) . ' minute');
  3719. //
  3720. //                                //$new->setScheduledTime($request->request->get('setScheduledTime'));
  3721. //                                $new->setScheduledTime($scheduledStartTime);
  3722. //                                $new->setDurationAllowedMin($request->request->get('meetingSessionScheduledDuration', 30));
  3723. //                                $new->setDurationLeftMin($request->request->get('meetingSessionScheduledDuration', 30));
  3724. //                                $new->setSessionExpireDate($scheduledEndTime);
  3725. //                                $new->setSessionExpireDateTs($scheduledEndTime->format('U'));
  3726. //                                $new->setEquivalentSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  3727. //                                $new->setMeetingSpecificNote($request->request->get('meetingSpecificNote', ''));
  3728. //
  3729. //                                $new->setUsableSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  3730. //                                $new->setRedeemSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  3731. //                                $new->setMeetingActionFlag(0);// no action waiting for meeting
  3732. //                                $new->setScheduledTime($scheduledStartTime);
  3733. //                                $new->setScheduledTimeTs($scheduledStartTime->format('U'));
  3734. //                                $new->setPayableAmount($request->request->get('payableAmount', 0));
  3735. //                                $new->setDueAmount($request->request->get('dueAmount', 0));
  3736. //                                //$new->setScheduledTime(new \DateTime($request->get('setScheduledTime')));
  3737. //                                //$new->setPcakageDetails(json_encode(($request->request->get('packageData'))));
  3738. //                                $new->setPackageName(($request->request->get('packageName', '')));
  3739. //                                $new->setPcakageDetails(($request->request->get('packageData', '')));
  3740. //                                $new->setScheduleId(($request->request->get('consultancyScheduleId', 0)));
  3741. //                                $currentUnixTime = new \DateTime();
  3742. //                                $currentUnixTimeStamp = $currentUnixTime->format('U');
  3743. //                                $studentId = $request->request->get('studentId', 0);
  3744. //                                $consultantId = $request->request->get('consultantId', 0);
  3745. //                                $new->setMeetingRoomId(str_pad($consultantId, 4, STR_PAD_LEFT) . $currentUnixTimeStamp . str_pad($studentId, 4, STR_PAD_LEFT));
  3746. //                                $new->setSessionValue(($request->request->get('sessionValue', 0)));
  3747. ////                        $new->setIsPayment(0);
  3748. //                                $new->setConsultantIsPaidFull(0);
  3749. //
  3750. //                                if ($bookingExpireTs == 0) {
  3751. //
  3752. //                                    $bookingExpireTime = new \DateTime();
  3753. //                                    $currTime = new \DateTime();
  3754. //                                    $currTimeTs = $currTime->format('U');
  3755. //                                    $bookingExpireTs = (1 * $scheduledStartTime->format('U')) - (24 * 3600);
  3756. //                                    if ($bookingExpireTs < $currTimeTs) {
  3757. //                                        if ((1 * $scheduledStartTime->format('U')) - $currTimeTs > (12 * 3600))
  3758. //                                            $bookingExpireTs = (1 * $scheduledStartTime->format('U')) - (2 * 3600);
  3759. //                                        else
  3760. //                                            $bookingExpireTs = (1 * $scheduledStartTime->format('U'));
  3761. //                                    }
  3762. //
  3763. ////                                    $bookingExpireTs = $bookingExpireTime->format('U');
  3764. //                                }
  3765. //
  3766. //                                $new->setPaidSessionCount(0);
  3767. //                                $new->setBookedById($bookedById);
  3768. //                                $new->setBookingRefererId($bookingRefererId);
  3769. //                                $new->setDueSessionCount($request->request->get('meetingSessionConsumeCount', 0));
  3770. //                                $new->setExpireIfUnpaidTs($bookingExpireTs);
  3771. //                                $new->setBookingExpireTs($bookingExpireTs);
  3772. //                                $new->setConfirmationExpireTs($bookingExpireTs);
  3773. //                                $new->setIsPaidFull(0);
  3774. //                                $new->setIsExpired(0);
  3775. //
  3776. //
  3777. //                                $em_goc->persist($new);
  3778. //                                $em_goc->flush();
  3779. //                                $meetingSessionId = $new->getSessionId();
  3780. //                                $periodMarker = $scheduledStartTime->format('Ym');
  3781. //                                MiscActions::UpdateSchedulingRestrictions($em_goc, $consultantId, $periodMarker, (($request->request->get('meetingSessionScheduledDuration', 30)) / 60), -(($request->request->get('meetingSessionScheduledDuration', 30)) / 60));
  3782. //                            }
  3784.                         }
  3787.                         //4. if after all this stages passed then calcualte gateway payable
  3790.                         if ($request->request->get('isRecharge', 0) == 1) {
  3791.                             if (($redeemedAmount + $promoClaimedAmount) >= $payableAmount) {
  3792.                                 $payableAmount = ($redeemedAmount + $promoClaimedAmount);
  3793.                                 $gatewayAmount = 0;
  3794.                             } else
  3795.                                 $gatewayAmount = $payableAmount - ($redeemedAmount + $promoClaimedAmount);
  3796.                         } else {
  3797.                             if ($toConsumeSessionCount <= $currentUserCoinBalance && $invoiceSessionCount <= $toConsumeSessionCount) {
  3798.                                 $payableAmount = 0;
  3799.                                 $gatewayAmount = 0;
  3800.                             } else if (($redeemedAmount + $promoClaimedAmount) >= $payableAmount) {
  3801.                                 $payableAmount = ($redeemedAmount + $promoClaimedAmount);
  3802.                                 $gatewayAmount = 0;
  3803.                             } else
  3804.                                 $gatewayAmount = $payableAmount <= ($currentUserBalance + ($redeemedAmount + $promoClaimedAmount)) ? 0 : ($payableAmount - $currentUserBalance - ($redeemedAmount + $promoClaimedAmount));
  3805.                         }
  3806.                         $gatewayAmount = round($gatewayAmount, 2);
  3807.                         $dueAmount = round($request->request->get('dueAmount', $payableAmount), 0);
  3810.                         if ($request->request->has('gatewayProductData'))
  3811.                             $gatewayProductData = $request->request->get('gatewayProductData');
  3812.                         $gatewayProductData = [[
  3813.                             'price_data' => [
  3814.                                 'currency' => $currencyForGateway,
  3815.                                 'unit_amount' => $gatewayAmount != 0 ? ((100 * $gatewayAmount) / ($invoiceSessionCount != 0 ? $invoiceSessionCount : 1)) : 200000,
  3816.                                 'product_data' => [
  3817. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  3818.                                     'name' => 'Bee Coins',
  3819.                                     'images' => [$imageBySessionCount[0]],
  3820.                                 ],
  3821.                             ],
  3822.                             'quantity' => $invoiceSessionCount != 0 ? $invoiceSessionCount : 1,
  3823.                         ]];
  3826.                         $new_invoice = null;
  3829.                         if ($extMeeting) {
  3830.                             $new_invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  3831.                                 ->findOneBy(
  3832.                                     array(
  3833.                                         'invoiceType' => $request->request->get('invoiceType', BuddybeeConstant::ENTITY_INVOICE_TYPE_PAYMENT_TO_HONEYBEE),
  3834.                                         'meetingId' => $extMeeting->getSessionId(),
  3835.                                     )
  3836.                                 );
  3837.                         }
  3839.                         if ($new_invoice) {
  3841.                         } else {
  3844.                             $new_invoice = new EntityInvoice();
  3845.                             $invoiceDate = new \DateTime();
  3846.                             $new_invoice->setInvoiceDate($invoiceDate);
  3847.                             $new_invoice->setInvoiceDateTs($invoiceDate->format('U'));
  3848.                             $new_invoice->setStudentId($userId);
  3850.                             $new_invoice->setBillerId($retailerId == 0 ? 0 : $retailerId);
  3851.                             $new_invoice->setRetailerId($retailerId);
  3852.                             $new_invoice->setBillToId($userId);
  3853.                             $new_invoice->setAmountTransferGateWayHash($paymentGateway);
  3854.                             $new_invoice->setAmountCurrency($currencyForGateway);
  3855.                             $cardIds = $request->request->get('cardIds', []);
  3858.                             $new_invoice->setMeetingId($meetingSessionId);
  3860.                             $new_invoice->setGatewayBillAmount($gatewayAmount);
  3861.                             $new_invoice->setRedeemedAmount($redeemedAmount);
  3862.                             $new_invoice->setPromoDiscountAmount($promoClaimedAmount);
  3863.                             $new_invoice->setPromoCodeId($promoCodeId);
  3864.                             $new_invoice->setRedeemedSessionCount($redeemedSessionCount);
  3865.                             $new_invoice->setPaidAmount($payableAmount - $dueAmount);
  3866.                             $new_invoice->setProductDataForPaymentGateway(json_encode($gatewayProductData));
  3867.                             $new_invoice->setDueAmount($dueAmount);
  3868.                             $new_invoice->setInvoiceType($request->request->get('invoiceType', BuddybeeConstant::ENTITY_INVOICE_TYPE_PAYMENT_TO_HONEYBEE));
  3870.                             $new_invoice->setDocumentHash(MiscActions::GenerateRandomCrypto('BEI' . microtime(true)));
  3871.                             $new_invoice->setCardIds(json_encode($cardIds));
  3872.                             $new_invoice->setAmountType($request->request->get('amountType', 1));
  3873.                             $new_invoice->setAmount($payableAmount);
  3874.                             $new_invoice->setConsumeAmount($payableAmount);
  3875.                             $new_invoice->setSessionCount($invoiceSessionCount);
  3876.                             $new_invoice->setConsumeSessionCount($toConsumeSessionCount);
  3877.                             $new_invoice->setIsPaidfull(0);
  3878.                             $new_invoice->setIsProcessed(0);
  3879.                             $new_invoice->setApplicantId($userId);
  3880.                             $new_invoice->setBookedById($bookedById);
  3881.                             $new_invoice->setBookingRefererId($bookingRefererId);
  3882.                             $new_invoice->setIsRecharge($request->request->get('isRecharge', 0));
  3883.                             $new_invoice->setAutoConfirmTaggedMeeting($request->request->get('autoConfirmTaggedMeeting', 0));
  3884.                             $new_invoice->setAutoConfirmOtherMeeting($request->request->get('autoConfirmOtherMeeting', 0));
  3885.                             $new_invoice->setAutoClaimPurchasedCards($request->request->get('autoClaimPurchasedCards', 0));
  3886.                             $new_invoice->setIsPayment(0); //0 means receive
  3887.                             $new_invoice->setStatus(GeneralConstant::ACTIVE); //0 means receive
  3888.                             $new_invoice->setStage(BuddybeeConstant::ENTITY_INVOICE_STAGE_INITIATED); //0 means receive
  3890.                             if ($bookingExpireTs == 0) {
  3892.                                 $bookingExpireTime = new \DateTime();
  3893.                                 $bookingExpireTime->modify('+30 day');
  3894.                                 $bookingExpireTs = $bookingExpireTime->format('U');
  3895.                             }
  3898.                             $new_invoice->setExpireIfUnpaidTs($bookingExpireTs);
  3899.                             $new_invoice->setBookingExpireTs($bookingExpireTs);
  3900.                             $new_invoice->setConfirmationExpireTs($bookingExpireTs);
  3902. //            $new_invoice->setStatus($request->request->get(0));
  3904.                             $em_goc->persist($new_invoice);
  3905.                             $em_goc->flush();
  3906.                         }
  3909.                         $invoiceId = $new_invoice->getId();
  3910.                         $gatewayInvoice = $new_invoice;
  3913.                         if ($request->request->get('isRecharge', 0) == 1) {
  3915.                         } else {
  3917.                             if ($gatewayAmount <= 0) {
  3918.                                 $meetingId = 0;
  3920.                                 if ($invoiceId != 0) {
  3922.                                     $retData = Buddybee::ProcessEntityInvoice($em_goc, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], $this->container->getParameter('kernel.root_dir'), false,
  3923.                                         $this->container->getParameter('notification_enabled'),
  3924.                                         $this->container->getParameter('notification_server')
  3925.                                     );
  3927.                                     $meetingId = $retData['meetingId'];
  3930.                                 }
  3932.                                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  3933.                                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  3934.                                     $billerDetails = [];
  3935.                                     $billToDetails = [];
  3937.                                     $invoice = $gatewayInvoice;
  3938.                                     if ($invoice) {
  3939.                                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3940.                                             ->findOneBy(
  3941.                                                 array(
  3942.                                                     'applicantId' => $invoice->getBillerId(),
  3944.                                                 )
  3945.                                             );
  3946.                                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  3947.                                             ->findOneBy(
  3948.                                                 array(
  3949.                                                     'applicantId' => $invoice->getBillToId(),
  3951.                                                 )
  3952.                                             );
  3954.                                     }
  3956.                                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  3957.                                     $bodyData = array(
  3958.                                         'page_title' => 'Invoice',
  3959. //            'studentDetails' => $student,
  3960.                                         'billerDetails' => $billerDetails,
  3961.                                         'billToDetails' => $billToDetails,
  3962.                                         'invoice' => $invoice,
  3963.                                         'currencyList' => BuddybeeConstant::$currency_List,
  3964.                                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  3967.                                     );
  3968.                                     $attachments = [];
  3969.                                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  3972. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  3973.                                     $new_mail = $this->get('mail_module');
  3974.                                     $new_mail->sendMyMail(array(
  3975.                                         'senderHash' => '_CUSTOM_',
  3976.                                         //                        'senderHash'=>'_CUSTOM_',
  3977.                                         'forwardToMailAddress' => $forwardToMailAddress,
  3979.                                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  3981. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  3982.                                         'attachments' => $attachments,
  3983.                                         'toAddress' => $forwardToMailAddress,
  3984.                                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  3985.                                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  3986.                                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  3987.                                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  3988.                                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  3990. //                            'emailBody' => $bodyHtml,
  3991.                                         'mailTemplate' => $bodyTemplate,
  3992.                                         'templateData' => $bodyData,
  3993.                                         'embedCompanyImage' => 0,
  3994.                                         'companyId' => 0,
  3996.                                         'companyImagePath' => ''
  3997. //                        'embedCompanyImage' => 1,
  3998. //                        'companyId' => $companyId,
  3999. //                        'companyImagePath' => $company_data->getImage()
  4002.                                     ));
  4005.                                 }
  4007.                                 if ($meetingId != 0) {
  4008.                                     $url = $this->generateUrl(
  4009.                                         'consultancy_session'
  4010.                                     );
  4011.                                     $output = [
  4012.                                         'invoiceId' => $gatewayInvoice->getId(),
  4013.                                         'meetingId' => $meetingId,
  4015.                                         'proceedToCheckout' => 0,
  4016.                                         'redirectUrl' => $url . '/' . $meetingId
  4017.                                     ];
  4018.                                 } else {
  4019.                                     $url = $this->generateUrl(
  4020.                                         'buddybee_dashboard'
  4021.                                     );
  4022.                                     $output = [
  4023.                                         'invoiceId' => $gatewayInvoice->getId(),
  4024.                                         'meetingId' => 0,
  4026.                                         'proceedToCheckout' => 0,
  4027.                                         'redirectUrl' => $url
  4028.                                     ];
  4029.                                 }
  4030.                                 return new JsonResponse($output);
  4031. //                return $this->redirect($url);
  4032.                             } else {
  4034.                             }
  4035. //                $url = $this->generateUrl(
  4036. //                    'checkout_page'
  4037. //                );
  4038. //
  4039. //                return $this->redirect($url."?meetingSessionId=".$new->getSessionId().'&invoiceId='.$invoiceId);
  4040.                         }
  4043.                     }
  4044.                 } else {
  4045.                     $url = $this->generateUrl(
  4046.                         'user_login'
  4047.                     );
  4049.                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $this->generateUrl(
  4050.                         'pricing_plan_page', [
  4051.                         'autoRedirected' => 1
  4052.                     ],
  4053.                         UrlGenerator::ABSOLUTE_URL
  4054.                     ));
  4056.                     $output = [
  4058.                         'proceedToCheckout' => 0,
  4059.                         'redirectUrl' => $url,
  4060.                         'clearLs' => 0
  4061.                     ];
  4062.                     return new JsonResponse($output);
  4063.                 }
  4066.                 //now proceed to checkout page if the user has lower balance or recharging
  4069.                 //$invoiceDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->
  4072.             }
  4073.         }
  4074.         if ($gatewayInvoice) {
  4077.             $gatewayProductData = json_decode($gatewayInvoice->getProductDataForPaymentGateway(), true);
  4078.             if ($gatewayProductData == null) $gatewayProductData = [];
  4079.             if (empty($gatewayProductData))
  4080.                 $gatewayProductData = [
  4081.                     [
  4082.                         'price_data' => [
  4083.                             'currency' => 'eur',
  4084.                             'unit_amount' => $gatewayAmount != 0 ? (100 * $gatewayAmount) : 200000,
  4085.                             'product_data' => [
  4086. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  4087.                                 'name' => 'Bee Coins',
  4088.                                 'images' => [$imageBySessionCount[0]],
  4089.                             ],
  4090.                         ],
  4091.                         'quantity' => 1,
  4092.                     ]
  4093.                 ];
  4095.             $productDescStr = '';
  4096.             $productDescArr = [];
  4097.             foreach ($gatewayProductData as $gpd) {
  4098.                 $productDescArr[] = $gpd['price_data']['product_data']['name'];
  4099.             }
  4100.             $productDescStr = implode(',', $productDescArr);
  4101.             $paymentGatewayFromInvoice = $gatewayInvoice->getAmountTransferGateWayHash();
  4102. //            return new JsonResponse(
  4103. //                [
  4104. //                    'paymentGateway' => $paymentGatewayFromInvoice,
  4105. //                    'gateWayData' => $gatewayProductData[0]
  4106. //                ]
  4107. //            );
  4108.             if ($paymentGateway == null) $paymentGatewayFromInvoice = 'stripe';
  4110.             if ($paymentGatewayFromInvoice == 'stripe' || $paymentGatewayFromInvoice == 'aamarpay' || $paymentGatewayFromInvoice == 'bkash') {
  4111.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  4112.                     $billerDetails = [];
  4113.                     $billToDetails = [];
  4115.                     $invoice = $gatewayInvoice;
  4116.                     if ($invoice) {
  4117.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4118.                             ->findOneBy(
  4119.                                 array(
  4120.                                     'applicantId' => $invoice->getBillerId(),
  4122.                                 )
  4123.                             );
  4124.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4125.                             ->findOneBy(
  4126.                                 array(
  4127.                                     'applicantId' => $invoice->getBillToId(),
  4129.                                 )
  4130.                             );
  4132.                     }
  4134.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  4135.                     $bodyData = array(
  4136.                         'page_title' => 'Invoice',
  4137. //            'studentDetails' => $student,
  4138.                         'billerDetails' => $billerDetails,
  4139.                         'billToDetails' => $billToDetails,
  4140.                         'invoice' => $invoice,
  4141.                         'currencyList' => BuddybeeConstant::$currency_List,
  4142.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  4145.                     );
  4146.                     $attachments = [];
  4147.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  4150. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4151.                     $new_mail = $this->get('mail_module');
  4152.                     $new_mail->sendMyMail(array(
  4153.                         'senderHash' => '_CUSTOM_',
  4154.                         //                        'senderHash'=>'_CUSTOM_',
  4155.                         'forwardToMailAddress' => $forwardToMailAddress,
  4157.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  4159. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4160.                         'attachments' => $attachments,
  4161.                         'toAddress' => $forwardToMailAddress,
  4162.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  4163.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  4164.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4165.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4166.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4168. //                            'emailBody' => $bodyHtml,
  4169.                         'mailTemplate' => $bodyTemplate,
  4170.                         'templateData' => $bodyData,
  4171.                         'embedCompanyImage' => 0,
  4172.                         'companyId' => 0,
  4174.                         'companyImagePath' => ''
  4175. //                        'embedCompanyImage' => 1,
  4176. //                        'companyId' => $companyId,
  4177. //                        'companyImagePath' => $company_data->getImage()
  4180.                     ));
  4183.                 }
  4184.             }
  4186.             if ($paymentGatewayFromInvoice == 'stripe') {
  4187.                 $stripe = new \Stripe\Stripe();
  4188.                 \Stripe\Stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  4190.                 $stripe::setApiKey('sk_test_51IxYTAJXs21fVb0QMop2Nb0E7u9Da4LwGrym1nGHUHqaSNtT3p9HBgHd7YyDsTKHscgPPECPQniTy79Ab8Sgxfbm00JF2AndUz');
  4191.                 {
  4192.                     if ($request->query->has('meetingSessionId'))
  4193.                         $id = $request->query->get('meetingSessionId');
  4194.                 }
  4196.                 $paymentIntent = [
  4197.                     "id" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs",
  4198.                     "object" => "payment_intent",
  4199.                     "amount" => 3000,
  4200.                     "amount_capturable" => 0,
  4201.                     "amount_received" => 0,
  4202.                     "application" => null,
  4203.                     "application_fee_amount" => null,
  4204.                     "canceled_at" => null,
  4205.                     "cancellation_reason" => null,
  4206.                     "capture_method" => "automatic",
  4207.                     "charges" => [
  4208.                         "object" => "list",
  4209.                         "data" => [],
  4210.                         "has_more" => false,
  4211.                         "url" => "/v1/charges?payment_intent=pi_1DoWjK2eZvKYlo2Csy9J3BHs"
  4212.                     ],
  4213.                     "client_secret" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs_secret_vmxAcWZxo2kt1XhpWtZtnjDtd",
  4214.                     "confirmation_method" => "automatic",
  4215.                     "created" => 1546523966,
  4216.                     "currency" => $currencyForGateway,
  4217.                     "customer" => null,
  4218.                     "description" => null,
  4219.                     "invoice" => null,
  4220.                     "last_payment_error" => null,
  4221.                     "livemode" => false,
  4222.                     "metadata" => [],
  4223.                     "next_action" => null,
  4224.                     "on_behalf_of" => null,
  4225.                     "payment_method" => null,
  4226.                     "payment_method_options" => [],
  4227.                     "payment_method_types" => [
  4228.                         "card"
  4229.                     ],
  4230.                     "receipt_email" => null,
  4231.                     "review" => null,
  4232.                     "setup_future_usage" => null,
  4233.                     "shipping" => null,
  4234.                     "statement_descriptor" => null,
  4235.                     "statement_descriptor_suffix" => null,
  4236.                     "status" => "requires_payment_method",
  4237.                     "transfer_data" => null,
  4238.                     "transfer_group" => null
  4239.                 ];
  4242.                 $checkout_session = \Stripe\Checkout\Session::create([
  4243.                     'payment_method_types' => ['card'],
  4244.                     'line_items' => $gatewayProductData,
  4245.                     'mode' => 'payment',
  4246.                     'success_url' => $this->generateUrl(
  4247.                         'payment_gateway_success',
  4248.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4249.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  4250.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4251.                     ),
  4252.                     'cancel_url' => $this->generateUrl(
  4253.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4254.                     ),
  4255.                 ]);
  4256.                 $output = [
  4257.                     'clientSecret' => $paymentIntent['client_secret'],
  4258.                     'id' => $checkout_session->id,
  4259.                     'paymentGateway' => $paymentGatewayFromInvoice,
  4260.                     'proceedToCheckout' => 1
  4261.                 ];
  4262.                 return new JsonResponse($output);
  4263.             }
  4264.             if ($paymentGatewayFromInvoice == 'aamarpay') {
  4266.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  4269.                 $url = $sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/request.php' : 'https://secure.aamarpay.com/request.php';
  4270.                 $fields = array(
  4271. //                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  4272.                     'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  4273.                     'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  4274.                     'payment_type' => 'VISA', //no need to change
  4275.                     'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  4276.                     'tran_id' => $gatewayInvoice->getDocumentHash(), //transaction id must be unique from your end
  4277.                     'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  4278.                     'cus_email' => $studentDetails->getEmail(), //customer email address
  4279.                     'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  4280.                     'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  4281.                     'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  4282.                     'cus_state' => $studentDetails->getCurrAddrState(),  //state
  4283.                     'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  4284.                     'cus_country' => 'Bangladesh',  //country
  4285.                     'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  4286.                     'cus_fax' => '',  //fax
  4287.                     'ship_name' => '', //ship name
  4288.                     'ship_add1' => '',  //ship address
  4289.                     'ship_add2' => '',
  4290.                     'ship_city' => '',
  4291.                     'ship_state' => '',
  4292.                     'ship_postcode' => '',
  4293.                     'ship_country' => 'Bangladesh',
  4294.                     'desc' => $productDescStr,
  4295.                     'success_url' => $this->generateUrl(
  4296.                         'payment_gateway_success',
  4297.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4298.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  4299.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4300.                     ),
  4301.                     'fail_url' => $this->generateUrl(
  4302.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4303.                     ),
  4304.                     'cancel_url' => $this->generateUrl(
  4305.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4306.                     ),
  4307. //                    'opt_a' => 'Reshad',  //optional paramter
  4308. //                    'opt_b' => 'Akil',
  4309. //                    'opt_c' => 'Liza',
  4310. //                    'opt_d' => 'Sohel',
  4311. //                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  4312.                     'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  4314.                 ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  4316.                 $fields_string = http_build_query($fields);
  4318. //                $ch = curl_init();
  4319. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  4320. //                curl_setopt($ch, CURLOPT_URL, $url);
  4321. //
  4322. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  4323. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  4324. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  4325. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  4326. //                curl_close($ch);
  4328. //                $this->redirect_to_merchant($url_forward);
  4330.                 $output = [
  4332. //
  4333. //                    'redirectUrl' => ($sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/' : 'https://secure.aamarpay.com/') . $url_forward, //keeping it off temporarily
  4334. //                    'fields'=>$fields,
  4335. //                    'fields_string'=>$fields_string,
  4337. //                    'redirectUrl' => $this->generateUrl(
  4338. //                        'payment_gateway_success',
  4339. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4340. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  4341. //                        ))), 'hbeeSessionToken' => $request->request->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4342. //                    ),
  4343.                     'paymentGateway' => $paymentGatewayFromInvoice,
  4344.                     'proceedToCheckout' => 1,
  4345.                     'data' => $fields
  4346.                 ];
  4347.                 return new JsonResponse($output);
  4348.             } else if ($paymentGatewayFromInvoice == 'bkash') {
  4350.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  4352.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  4353.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  4354.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  4355.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  4356.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  4359.                 $request_data = array(
  4360.                     'app_key' => $app_key_value,
  4361.                     'app_secret' => $app_secret_value
  4362.                 );
  4363.                 $url = curl_init($baseUrl . '/tokenized/checkout/token/grant');
  4364.                 $request_data_json = json_encode($request_data);
  4365.                 $header = array(
  4366.                     'Content-Type:application/json',
  4367.                     'username:' . $username_value,
  4368.                     'password:' . $password_value
  4369.                 );
  4370.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  4371.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  4372.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  4373.                 curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  4374.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  4375.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  4377.                 $tokenData = json_decode(curl_exec($url), true);
  4378.                 curl_close($url);
  4380.                 $id_token = $tokenData['id_token'];
  4381.                 $goToBkashPage = 0;
  4382.                 if ($tokenData['statusCode'] == '0000') {
  4383.                     $auth = $id_token;
  4386.                     $requestbody = array(
  4387.                         "mode" => "0011",
  4388. //                        "payerReference" => "01723888888",
  4389.                         "payerReference" => $invoiceDate->format('U'),
  4390.                         "callbackURL" => $this->generateUrl(
  4391.                             'bkash_callback', [], UrlGenerator::ABSOLUTE_URL
  4392.                         ),
  4393. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  4394.                         "amount" => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  4395.                         "currency" => "BDT",
  4396.                         "intent" => "sale",
  4397.                         "merchantInvoiceNumber" => $invoiceId
  4398.                     );
  4399.                     $url = curl_init($baseUrl . '/tokenized/checkout/create');
  4400.                     $requestbodyJson = json_encode($requestbody);
  4402.                     $header = array(
  4403.                         'Content-Type:application/json',
  4404.                         'Authorization:' . $auth,
  4405.                         'X-APP-Key:' . $app_key_value
  4406.                     );
  4408.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  4409.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  4410.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  4411.                     curl_setopt($url, CURLOPT_POSTFIELDS, $requestbodyJson);
  4412.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  4413.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  4414.                     $resultdata = curl_exec($url);
  4415. //                    curl_close($url);
  4416. //                    echo $resultdata;
  4418.                     $obj = json_decode($resultdata, true);
  4421.                     $goToBkashPage = 1;
  4424.                     $justNow = new \DateTime();
  4425.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  4426.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  4427.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  4428.                     $gatewayInvoice->setGatewayPaymentId($obj['paymentID']);
  4429.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  4430.                     $em->flush();
  4432.                     $output = [
  4434. //                        'redirectUrl' => $obj['bkashURL'],
  4436.                         'paymentGateway' => $paymentGatewayFromInvoice,
  4437.                         'proceedToCheckout' => $goToBkashPage,
  4438.                         'tokenData' => $tokenData,
  4439.                         'obj' => $obj,
  4440.                         'id_token' => $tokenData['id_token'],
  4441.                         'data' => [
  4442.                             'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  4443. //                            'payment_type' => 'VISA', //no need to change
  4444.                             'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  4445.                             'tran_id' => $gatewayInvoice->getDocumentHash(), //transaction id must be unique from your end
  4446.                             'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  4447.                             'cus_email' => $studentDetails->getEmail(), //customer email address
  4448.                             'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  4449.                             'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  4450.                             'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  4451.                             'cus_state' => $studentDetails->getCurrAddrState(),  //state
  4452.                             'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  4453.                             'cus_country' => 'Bangladesh',  //country
  4454.                             'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  4455.                             'cus_fax' => '',  //fax
  4456.                             'ship_name' => '', //ship name
  4457.                             'ship_add1' => '',  //ship address
  4458.                             'ship_add2' => '',
  4459.                             'ship_city' => '',
  4460.                             'ship_state' => '',
  4461.                             'ship_postcode' => '',
  4462.                             'ship_country' => 'Bangladesh',
  4463.                             'desc' => $productDescStr,
  4464.                         ]
  4466.                     ];
  4467.                     return new JsonResponse($output);
  4469.                 }
  4472. //                $fields = array(
  4473. //
  4474. //                    "mode" => "0011",
  4475. //                    "payerReference" => "01723888888",
  4476. //                    "callbackURL" => $this->generateUrl(
  4477. //                        'payment_gateway_success',
  4478. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4479. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  4480. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4481. //                    ),
  4482. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  4483. //                    "amount" => 1*number_format($gatewayInvoice->getGateWayBillamount(),2,'.',''),,
  4484. //                    "currency" => "BDT",
  4485. //                    "intent" => "sale",
  4486. //                    "merchantInvoiceNumber" => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT)
  4487. //
  4488. //                );
  4489. //                $fields = array(
  4490. ////                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  4491. //                    'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  4492. //                    'amount' => 1*number_format($gatewayInvoice->getGateWayBillamount(),2,'.',''),, //transaction amount
  4493. //                    'payment_type' => 'VISA', //no need to change
  4494. //                    'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  4495. //                    'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  4496. //                    'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  4497. //                    'cus_email' => $studentDetails->getEmail(), //customer email address
  4498. //                    'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  4499. //                    'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  4500. //                    'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  4501. //                    'cus_state' => $studentDetails->getCurrAddrState(),  //state
  4502. //                    'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  4503. //                    'cus_country' => 'Bangladesh',  //country
  4504. //                    'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? ' + 8801911706483' : $studentDetails->getPhone(), //customer phone number
  4505. //                    'cus_fax' => '',  //fax
  4506. //                    'ship_name' => '', //ship name
  4507. //                    'ship_add1' => '',  //ship address
  4508. //                    'ship_add2' => '',
  4509. //                    'ship_city' => '',
  4510. //                    'ship_state' => '',
  4511. //                    'ship_postcode' => '',
  4512. //                    'ship_country' => 'Bangladesh',
  4513. //                    'desc' => $productDescStr,
  4514. //                    'success_url' => $this->generateUrl(
  4515. //                        'payment_gateway_success',
  4516. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  4517. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  4518. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4519. //                    ),
  4520. //                    'fail_url' => $this->generateUrl(
  4521. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4522. //                    ),
  4523. //                    'cancel_url' => $this->generateUrl(
  4524. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  4525. //                    ),
  4526. ////                    'opt_a' => 'Reshad',  //optional paramter
  4527. ////                    'opt_b' => 'Akil',
  4528. ////                    'opt_c' => 'Liza',
  4529. ////                    'opt_d' => 'Sohel',
  4530. ////                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  4531. //                    'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  4532. //
  4533. //                ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  4534. //
  4535. //                $fields_string = http_build_query($fields);
  4536. //
  4537. //                $ch = curl_init();
  4538. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  4539. //                curl_setopt($ch, CURLOPT_URL, $url);
  4540. //
  4541. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  4542. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  4543. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  4544. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  4545. //                curl_close($ch);
  4547. //                $this->redirect_to_merchant($url_forward);
  4550.             } else if ($paymentGatewayFromInvoice == 'onsite_pos' || $paymentGatewayFromInvoice == 'onsite_cash' || $paymentGatewayFromInvoice == 'onsite_bkash') {
  4551.                 $meetingId = 0;
  4553.                 if ($gatewayInvoice->getId() != 0) {
  4554.                     if ($gatewayInvoice->getDueAmount() <= 0) {
  4556.                         $retData = Buddybee::ProcessEntityInvoice($em_goc, $gatewayInvoice->getId(), ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], $this->container->getParameter('kernel.root_dir'), false,
  4557.                             $this->container->getParameter('notification_enabled'),
  4558.                             $this->container->getParameter('notification_server')
  4559.                         );
  4561.                         $meetingId = $retData['meetingId'];
  4562.                     }
  4564.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  4565.                         $billerDetails = [];
  4566.                         $billToDetails = [];
  4568.                         $invoice = $gatewayInvoice;
  4569.                         if ($invoice) {
  4570.                             $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4571.                                 ->findOneBy(
  4572.                                     array(
  4573.                                         'applicantId' => $invoice->getBillerId(),
  4575.                                     )
  4576.                                 );
  4577.                             $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  4578.                                 ->findOneBy(
  4579.                                     array(
  4580.                                         'applicantId' => $invoice->getBillToId(),
  4582.                                     )
  4583.                                 );
  4585.                         }
  4587.                         $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  4588.                         $bodyData = array(
  4589.                             'page_title' => 'Invoice',
  4590. //            'studentDetails' => $student,
  4591.                             'billerDetails' => $billerDetails,
  4592.                             'billToDetails' => $billToDetails,
  4593.                             'invoice' => $invoice,
  4594.                             'currencyList' => BuddybeeConstant::$currency_List,
  4595.                             'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  4598.                         );
  4599.                         $attachments = [];
  4600.                         $forwardToMailAddress = $billToDetails->getOAuthEmail();
  4603. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4604.                         $new_mail = $this->get('mail_module');
  4605.                         $new_mail->sendMyMail(array(
  4606.                             'senderHash' => '_CUSTOM_',
  4607.                             //                        'senderHash'=>'_CUSTOM_',
  4608.                             'forwardToMailAddress' => $forwardToMailAddress,
  4610.                             'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  4612. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  4613.                             'attachments' => $attachments,
  4614.                             'toAddress' => $forwardToMailAddress,
  4615.                             'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  4616.                             'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  4617.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  4618.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  4619.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  4621. //                            'emailBody' => $bodyHtml,
  4622.                             'mailTemplate' => $bodyTemplate,
  4623.                             'templateData' => $bodyData,
  4624.                             'embedCompanyImage' => 0,
  4625.                             'companyId' => 0,
  4627.                             'companyImagePath' => ''
  4628. //                        'embedCompanyImage' => 1,
  4629. //                        'companyId' => $companyId,
  4630. //                        'companyImagePath' => $company_data->getImage()
  4633.                         ));
  4636.                     }
  4639.                 }
  4641.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  4643.                 if ($meetingId != 0) {
  4644.                     $url = $this->generateUrl(
  4645.                         'consultancy_session'
  4646.                     );
  4647.                     $output = [
  4649.                         'proceedToCheckout' => 0,
  4650.                         'invoiceId' => $gatewayInvoice->getId(),
  4651.                         'meetingId' => $meetingId,
  4652.                         'redirectUrl' => $url . '/' . $meetingId
  4653.                     ];
  4654.                 } else {
  4655.                     $url = $this->generateUrl(
  4656.                         'buddybee_dashboard'
  4657.                     );
  4658.                     $output = [
  4660.                         'proceedToCheckout' => 0,
  4661.                         'invoiceId' => $gatewayInvoice->getId(),
  4662.                         'meetingId' => $meetingId,
  4663.                         'redirectUrl' => $url
  4664.                     ];
  4665.                 }
  4666.                 return new JsonResponse($output);
  4669.             }
  4671.         }
  4672.         $output = [
  4673.             'clientSecret' => 0,
  4674.             'id' => 0,
  4675.             'proceedToCheckout' => 0
  4676.         ];
  4677.         return new JsonResponse($output);
  4678. //        return $this->render('ApplicationBundle:pages/stripe:checkout.html.twig', array(
  4679. //            'page_title' => 'Checkout',
  4680. ////            'stripe' => $stripe,
  4681. //            'stripe' => null,
  4682. ////            'PaymentIntent' => $paymentIntent,
  4683. //
  4684. ////            'consultantDetail' => $consultantDetail,
  4685. ////            'consultantDetails'=> $consultantDetails,
  4686. ////
  4687. ////            'meetingSession' => $meetingSession,
  4688. ////            'packageDetails' => json_decode($meetingSession->getPcakageDetails(),true),
  4689. ////            'packageName' => json_decode($meetingSession->getPackageName(),true),
  4690. ////            'pay' => $payableAmount,
  4691. ////            'balance' => $currStudentBal
  4692. //        ));
  4693.     }
  4695.     public function PaymentGatewaySuccessAction(Request $request, $encData = '')
  4696.     {
  4697.         $em = $this->getDoctrine()->getManager('company_group');
  4698.         $invoiceId = 0;
  4699.         $autoRedirect = 1;
  4700.         $redirectUrl = '';
  4701.         $meetingId = 0;
  4702.         $setupOnly = 0;
  4703.         $appId = 0;
  4704.         $ownerId = 0;
  4705.         $activationPending = 0;
  4706.         $ownerSyncResult = null;
  4708.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  4710.         if ($systemType == '_CENTRAL_') {
  4711.             // SQ-17: the same keys the checkout was created with — every Stripe lookup below needs one
  4712.             $stripeKeys = \ApplicationBundle\Helper\StripeKeys::fromContainer($this->container);
  4713.             if ($stripeKeys['ok']) { \Stripe\Stripe::setApiKey($stripeKeys['secret']); }
  4716.             if ($encData != '') {
  4717.                 $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  4718.                 if (isset($encryptedData['invoiceId']))
  4719.                     $invoiceId = $encryptedData['invoiceId'];
  4720.                 if (isset($encryptedData['autoRedirect']))
  4721.                     $autoRedirect = $encryptedData['autoRedirect'];
  4722.                 if (isset($encryptedData['setupOnly']))
  4723.                     $setupOnly = (int)$encryptedData['setupOnly'];
  4724.                 if (isset($encryptedData['appId']))
  4725.                     $appId = (int)$encryptedData['appId'];
  4726.                 if (isset($encryptedData['ownerId']))
  4727.                     $ownerId = (int)$encryptedData['ownerId'];
  4728.                 if (isset($encryptedData['redirectUrl']))
  4729.                     $redirectUrl = $encryptedData['redirectUrl'];
  4730.             } else {
  4731.                 $invoiceId = $request->query->get('invoiceId', 0);
  4733.                 $meetingId = 0;
  4734.                 $autoRedirect = $request->query->get('autoRedirect', 1);
  4735.                 $redirectUrl = $request->query->get('redirectUrl', '');
  4736.                 $setupOnly = (int)$request->query->get('setupOnly', 0);
  4737.                 $appId = (int)$request->query->get('appId', 0);
  4738.                 $ownerId = (int)$request->query->get('ownerId', 0);
  4739.             }
  4741.             if ($setupOnly === 1) {
  4742.                 $sessionId = $request->query->get('session_id');
  4743.                 if (!$sessionId) {
  4744.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4745.                         'page_title' => 'Failed',
  4746.                     ));
  4747.                 }
  4749.                 $stripeSession = \Stripe\Checkout\Session::retrieve($sessionId);
  4750.                 if (!$stripeSession || !$stripeSession->setup_intent) {
  4751.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4752.                         'page_title' => 'Failed',
  4753.                     ));
  4754.                 }
  4756.                 $setupIntent = \Stripe\SetupIntent::retrieve($stripeSession->setup_intent);
  4757.                 if ($setupIntent->status !== 'succeeded') {
  4758.                     return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4759.                         'page_title' => 'Failed',
  4760.                     ));
  4761.                 }
  4763.                 $paymentMethodId = $setupIntent->payment_method;
  4764.                 $customerId = $setupIntent->customer;
  4766.                 if ($appId === 0 && isset($stripeSession->metadata['app_id'])) {
  4767.                     $appId = (int)$stripeSession->metadata['app_id'];
  4768.                 }
  4769.                 if ($ownerId === 0 && isset($stripeSession->metadata['owner_id'])) {
  4770.                     $ownerId = (int)$stripeSession->metadata['owner_id'];
  4771.                 }
  4772.                 if ($redirectUrl === '' && isset($stripeSession->metadata['redirect_url'])) {
  4773.                     $redirectUrl = $stripeSession->metadata['redirect_url'];
  4774.                 }
  4776.                 $companyGroup = null;
  4777.                 if ($appId !== 0) {
  4778.                     $companyGroup = $em
  4779.                         ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  4780.                         ->findOneBy([
  4781.                             'appId' => $appId
  4782.                         ]);
  4783.                 }
  4785.                 $existing = $em->getRepository(PaymentMethod::class)
  4786.                     ->findOneBy([
  4787.                         'stripePaymentMethodId' => $paymentMethodId,
  4788.                         'appId' => $appId
  4789.                     ]);
  4791.                 if (!$existing) {
  4792.                     if ($companyGroup && !$companyGroup->getStripeCustomerId()) {
  4793.                         $companyGroup->setStripeCustomerId($customerId);
  4794.                     }
  4796.                     $paymentMethod = new PaymentMethod();
  4797.                     $paymentMethod->setAppId($appId);
  4798.                     $paymentMethod->setApplicantId($ownerId);
  4799.                     $paymentMethod->setStripeCustomerId($customerId);
  4800.                     $paymentMethod->setStripePaymentMethodId($paymentMethodId);
  4801.                     $paymentMethod->setIsDefault(1);
  4803.                     $em->persist($paymentMethod);
  4804.                     $em->flush();
  4805.                 }
  4807.                 if ($companyGroup) {
  4808.                     $em->flush();
  4809.                 }
  4811.                 $redirectUrl = $redirectUrl !== '' ? $redirectUrl : $this->generateUrl(
  4812.                     'central_landing'
  4813.                 );
  4815.                 return $this->render('@Application/pages/stripe/success.html.twig', array(
  4816.                     'page_title' => 'Success',
  4817.                     'meetingId' => 0,
  4818.                     'autoRedirect' => 0,
  4819.                     'redirectUrl' => $redirectUrl,
  4820.                     'initiateCompany' => 1,
  4821.                     'appId' => $appId,
  4822.                     'ownerId' => $ownerId,
  4823.                     'setupOnly' => 1,
  4824.                 ));
  4825.             }
  4827.             if ($invoiceId != 0) {
  4828.                 $invoice = $em
  4829.                     ->getRepository("CompanyGroupBundle\\Entity\\EntityInvoice")
  4830.                     ->findOneBy([
  4831.                         'id' => $invoiceId
  4832.                     ]);
  4834.                 if($invoice->getAmountTransferGateWayHash() == 'stripe') {
  4837.                     $stripeSession = \Stripe\Checkout\Session::retrieve($request->query->get('session_id'));
  4839.                     $paymentIntent = \Stripe\PaymentIntent::retrieve($stripeSession->payment_intent);
  4840.                     if ($paymentIntent->status !== 'succeeded') {
  4842.                         return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  4843.                             'page_title' => 'Failed',
  4846.                         ));
  4847.                     }
  4849.                     $paymentMethodId = $paymentIntent->payment_method;
  4850.                     $customerId = $paymentIntent->customer;
  4852.                     $companyGroup = $this->get('app.quote_company_provisioning_service')
  4853.                         ->ensureCompanyForInvoice($invoice, $request->getSession(), $customerId);
  4857.                     if (!isset($companyGroup) || !$companyGroup) {
  4858.                         $companyGroup = $em
  4859.                             ->getRepository("CompanyGroupBundle\\Entity\\CompanyGroup")
  4860.                             ->findOneBy([
  4861.                                 'appId' => $invoice->getAppId()
  4862.                             ]);
  4863.                     }
  4865.                     $existing = $em->getRepository(PaymentMethod::class)
  4866.                         ->findOneBy([
  4867.                             'stripePaymentMethodId' => $paymentMethodId
  4868.                         ]);
  4870.                     if (!$existing) {
  4871.                         if ($companyGroup) {
  4873.                             // save customer id (safety)
  4874.                             if (!$companyGroup->getStripeCustomerId()) {
  4875.                                 $companyGroup->setStripeCustomerId($customerId);
  4876.                             }
  4878.                             // save payment method
  4879.                             $paymentMethod = new PaymentMethod(); // your entity
  4881.                             $paymentMethod->setAppId($companyGroup->getAppId());;
  4882.                             $paymentMethod->setApplicantId($invoice->getApplicantId());
  4883.                             $paymentMethod->setStripeCustomerId($customerId);
  4884.                             $paymentMethod->setStripePaymentMethodId($paymentMethodId);
  4885.                             $paymentMethod->setIsDefault(1);
  4887.                             $em->persist($paymentMethod);
  4889.                             $em->flush();
  4890.                         }
  4891.                     }
  4892.                 }
  4896.                 $retData = Buddybee::ProcessEntityInvoice($em, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED],
  4897.                     $this->container->getParameter('kernel.root_dir'),
  4898.                     false,
  4899.                     $this->container->getParameter('notification_enabled'),
  4900.                     $this->container->getParameter('notification_server')
  4901.                 );
  4902.                 if (($retData['initiateCompany'] ?? 0) == 1) {
  4903.                     $healthResult = $this->get('app.provisioning_health_service')->check($invoice, true);
  4904.                     if (!($healthResult['success'] ?? false)) {
  4905.                         $activationPending = 1;
  4906.                         $autoRedirect = 0;
  4907.                         $this->get('logger')->warning('Post-payment ERP health check needs attention.', [
  4908.                             'invoiceId' => (int)$invoice->getId(),
  4909.                             'appId' => (int)$invoice->getAppId(),
  4910.                             'errorCode' => $healthResult['errorCode'] ?? 'health_unverified',
  4911.                         ]);
  4912.                     }
  4913.                 }
  4914.                 $this->get('app.subscription_state_sync_service')->syncFromLegacyInvoice($invoice);
  4915.                 if (($retData['initiateCompany'] ?? 0) == 1) {
  4916.                     if (($retData['ownerId'] ?? 0) != 0) {
  4917.                         $ownerSyncResult = $this->get('app.post_payment_company_setup_service')
  4918.                             ->finalizeOwnerServerSync((int)$retData['ownerId'], (int)($retData['appId'] ?? 0), (int)$invoice->getId());
  4919.                     } else {
  4920.                         $ownerSyncResult = [
  4921.                             'success' => false,
  4922.                             'failedServerIds' => [],
  4923.                             'missingAppIds' => [(int)($retData['appId'] ?? 0)],
  4924.                         ];
  4925.                     }
  4927.                     if (!($ownerSyncResult['success'] ?? false)) {
  4928.                         $activationPending = 1;
  4929.                         $autoRedirect = 0;
  4930.                         $this->get('logger')->warning('Post-payment owner synchronization needs attention.', [
  4931.                             'ownerId' => (int)($retData['ownerId'] ?? 0),
  4932.                             'appId' => (int)($retData['appId'] ?? 0),
  4933.                             'failedServerIds' => $ownerSyncResult['failedServerIds'] ?? [],
  4934.                             'missingAppIds' => $ownerSyncResult['missingAppIds'] ?? [],
  4935.                         ]);
  4936.                     } else {
  4937.                         $readinessResult = $this->get('app.provisioning_health_service')->checkOwnerReadiness(
  4938.                             $invoice,
  4939.                             (int)$retData['ownerId'],
  4940.                             $ownerSyncResult,
  4941.                             true
  4942.                         );
  4943.                         if (!($readinessResult['ready'] ?? false)) {
  4944.                             $activationPending = 1;
  4945.                             $autoRedirect = 0;
  4946.                             $this->get('logger')->warning('Post-payment owner login health needs attention.', [
  4947.                                 'invoiceId' => (int)$invoice->getId(),
  4948.                                 'appId' => (int)($retData['appId'] ?? 0),
  4949.                                 'ownerId' => (int)$retData['ownerId'],
  4950.                                 'blocker' => $readinessResult['blocker'] ?? 'tenant_health_unverified',
  4951.                             ]);
  4952.                         } else {
  4953.                             // This second, owner-aware check is stronger than the
  4954.                             // earlier initialization check and may safely clear a
  4955.                             // transient initialization-pending result.
  4956.                             $activationPending = 0;
  4957.                         }
  4958.                     }
  4959.                 }
  4961.                 if ($retData['sendCards'] == 1) {
  4962.                     $cardList = array();
  4964.                     $cards = $em->getRepository('CompanyGroupBundle\\Entity\\BeeCode')
  4965.                         ->findBy(
  4966.                             array(
  4967.                                 'id' => $retData['cardIds']
  4968.                             )
  4969.                         );
  4971.                     foreach ($cards as $card) {
  4972.                         $cardList[] = array(
  4973.                             'id' => $card->getId(),
  4974.                             'printed' => $card->getPrinted(),
  4975.                             'amount' => $card->getAmount(),
  4976.                             'coinCount' => $card->getCoinCount(),
  4977.                             'pin' => $card->getPin(),
  4978.                             'serial' => $card->getSerial(),
  4980.                         );
  4981.                     }
  4982.                     $receiverEmail = $retData['receiverEmail'];
  4983.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  4986.                         $bodyHtml = '';
  4987.                         $bodyTemplate = '@Application/email/templates/beeCodeDigitalDelivery.html.twig';
  4988.                         $bodyData = array(
  4989.                             'cardList' => $cardList,
  4990. //                        'name' => $newApplicant->getFirstname() . ' ' . $newApplicant->getLastname(),
  4991. //                        'email' => $userName,
  4992. //                        'password' => $newApplicant->getPassword(),
  4993.                         );
  4994.                         $attachments = [];
  4995.                         $forwardToMailAddress = $receiverEmail;
  4998. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  4999.                         $new_mail = $this->get('mail_module');
  5000.                         $new_mail->sendMyMail(array(
  5001.                             'senderHash' => '_CUSTOM_',
  5002.                             //                        'senderHash'=>'_CUSTOM_',
  5003.                             'forwardToMailAddress' => $forwardToMailAddress,
  5005.                             'subject' => 'Digital Bee Card Delivery',
  5007. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  5008.                             'attachments' => $attachments,
  5009.                             'toAddress' => $forwardToMailAddress,
  5010.                             'fromAddress' => 'delivery@buddybee.eu',
  5011.                             'userName' => 'delivery@buddybee.eu',
  5012.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  5013.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  5014.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  5015. //                        'encryptionMethod' => 'tls',
  5016.                             'encryptionMethod' => 'ssl',
  5017. //                            'emailBody' => $bodyHtml,
  5018.                             'mailTemplate' => $bodyTemplate,
  5019.                             'templateData' => $bodyData,
  5020. //                        'embedCompanyImage' => 1,
  5021. //                        'companyId' => $companyId,
  5022. //                        'companyImagePath' => $company_data->getImage()
  5025.                         ));
  5027.                         foreach ($cards as $card) {
  5028.                             $card->setPrinted(1);
  5029.                         }
  5030.                         $em->flush();
  5033.                     }
  5035.                     return new JsonResponse(
  5036.                         array(
  5037.                             'success' => true
  5038.                         )
  5039.                     );
  5042.                 }
  5045.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  5046.                 $meetingId = $retData['meetingId'];
  5047.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  5048.                     $billerDetails = [];
  5049.                     $billToDetails = [];
  5051.                     $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  5052.                         ->findOneBy(
  5053.                             array(
  5054.                                 'Id' => $invoiceId,
  5056.                             )
  5057.                         );;
  5058.                     if ($invoice) {
  5059.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5060.                             ->findOneBy(
  5061.                                 array(
  5062.                                     'applicantId' => $invoice->getBillerId(),
  5064.                                 )
  5065.                             );
  5066.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5067.                             ->findOneBy(
  5068.                                 array(
  5069.                                     'applicantId' => $invoice->getBillToId(),
  5071.                                 )
  5072.                             );
  5074.                     }
  5076.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  5077.                     $bodyData = array(
  5078.                         'page_title' => 'Invoice',
  5079. //            'studentDetails' => $student,
  5080.                         'billerDetails' => $billerDetails,
  5081.                         'billToDetails' => $billToDetails,
  5082.                         'invoice' => $invoice,
  5083.                         'currencyList' => BuddybeeConstant::$currency_List,
  5084.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  5087.                     );
  5088.                     $attachments = [];
  5089.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  5092. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  5093.                     $new_mail = $this->get('mail_module');
  5094.                     $new_mail->sendMyMail(array(
  5095.                         'senderHash' => '_CUSTOM_',
  5096.                         //                        'senderHash'=>'_CUSTOM_',
  5097.                         'forwardToMailAddress' => $forwardToMailAddress,
  5099.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  5101. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  5102.                         'attachments' => $attachments,
  5103.                         'toAddress' => $forwardToMailAddress,
  5104.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  5105.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  5106.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  5107.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  5108.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  5110. //                            'emailBody' => $bodyHtml,
  5111.                         'mailTemplate' => $bodyTemplate,
  5112.                         'templateData' => $bodyData,
  5113.                         'embedCompanyImage' => 0,
  5114.                         'companyId' => 0,
  5116.                         'companyImagePath' => ''
  5117. //                        'embedCompanyImage' => 1,
  5118. //                        'companyId' => $companyId,
  5119. //                        'companyImagePath' => $company_data->getImage()
  5122.                     ));
  5125.                 }
  5126. //
  5127.                 if ($meetingId != 0) {
  5128.                     $url = $this->generateUrl(
  5129.                         'consultancy_session'
  5130.                     );
  5131. //                if($request->query->get('autoRedirect',1))
  5132. //                    return $this->redirect($url . '/' . $meetingId);
  5133.                     $redirectUrl = $url . '/' . $meetingId;
  5135.                 } else {
  5136.                     $url = $this->generateUrl(
  5137.                         'central_landing'
  5138.                     );
  5139. //                if($request->query->get('autoRedirect',1))
  5140. //                    return $this->redirect($url);
  5141.                     $redirectUrl = $url;
  5142.                     $autoRedirect=0;
  5144.                 }
  5146.                 if (($retData['initiateCompany'] ?? 0) == 1 && $activationPending === 0 && ($retData['appId'] ?? 0) != 0 && ($retData['ownerId'] ?? 0) != 0) {
  5147.                     $redirectUrl = $this->generateUrl('activation_center', ['invoice_id' => (int)$invoice->getId()]);
  5148.                     $autoRedirect = 1;
  5149.                 }
  5152.             }
  5153.             return $this->render('@Application/pages/stripe/success.html.twig', array(
  5154.                 'page_title' => 'Success',
  5155.                 'meetingId' => $meetingId,
  5156.                 'autoRedirect' => $autoRedirect,
  5157.                 'redirectUrl' => $redirectUrl,
  5158.                 'initiateCompany' => $retData['initiateCompany']??0,
  5159.                 'appId' => $retData['appId']??0,
  5160.                 'ownerId' => $retData['ownerId']??0,
  5161.                 'activationPending' => $activationPending,
  5162.                 'activationCenterUrl' => ($retData['initiateCompany'] ?? 0) == 1
  5163.                     ? $this->generateUrl('activation_center', ['invoice_id' => (int)$invoice->getId()])
  5164.                     : null,
  5166.             ));
  5167.         }
  5168.         else if ($systemType == '_BUDDYBEE_') {
  5171.             if ($encData != '') {
  5172.                 $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  5173.                 if (isset($encryptedData['invoiceId']))
  5174.                     $invoiceId = $encryptedData['invoiceId'];
  5175.                 if (isset($encryptedData['autoRedirect']))
  5176.                     $autoRedirect = $encryptedData['autoRedirect'];
  5177.             } else {
  5178.                 $invoiceId = $request->query->get('invoiceId', 0);
  5180.                 $meetingId = 0;
  5181.                 $autoRedirect = $request->query->get('autoRedirect', 1);
  5182.                 $redirectUrl = '';
  5183.             }
  5186.             if ($invoiceId != 0) {
  5188.                 $retData = Buddybee::ProcessEntityInvoice($em, $invoiceId, ['stage' => BuddybeeConstant::ENTITY_INVOICE_STAGE_COMPLETED], false,
  5189.                     $this->container->getParameter('notification_enabled'),
  5190.                     $this->container->getParameter('notification_server')
  5191.                 );
  5193.                 if ($retData['sendCards'] == 1) {
  5194.                     $cardList = array();
  5196.                     $cards = $em->getRepository('CompanyGroupBundle\\Entity\\BeeCode')
  5197.                         ->findBy(
  5198.                             array(
  5199.                                 'id' => $retData['cardIds']
  5200.                             )
  5201.                         );
  5203.                     foreach ($cards as $card) {
  5204.                         $cardList[] = array(
  5205.                             'id' => $card->getId(),
  5206.                             'printed' => $card->getPrinted(),
  5207.                             'amount' => $card->getAmount(),
  5208.                             'coinCount' => $card->getCoinCount(),
  5209.                             'pin' => $card->getPin(),
  5210.                             'serial' => $card->getSerial(),
  5212.                         );
  5213.                     }
  5214.                     $receiverEmail = $retData['receiverEmail'];
  5215.                     if (GeneralConstant::EMAIL_ENABLED == 1) {
  5218.                         $bodyHtml = '';
  5219.                         $bodyTemplate = '@Application/email/templates/beeCodeDigitalDelivery.html.twig';
  5220.                         $bodyData = array(
  5221.                             'cardList' => $cardList,
  5222. //                        'name' => $newApplicant->getFirstname() . ' ' . $newApplicant->getLastname(),
  5223. //                        'email' => $userName,
  5224. //                        'password' => $newApplicant->getPassword(),
  5225.                         );
  5226.                         $attachments = [];
  5227.                         $forwardToMailAddress = $receiverEmail;
  5230. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  5231.                         $new_mail = $this->get('mail_module');
  5232.                         $new_mail->sendMyMail(array(
  5233.                             'senderHash' => '_CUSTOM_',
  5234.                             //                        'senderHash'=>'_CUSTOM_',
  5235.                             'forwardToMailAddress' => $forwardToMailAddress,
  5237.                             'subject' => 'Digital Bee Card Delivery',
  5239. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  5240.                             'attachments' => $attachments,
  5241.                             'toAddress' => $forwardToMailAddress,
  5242.                             'fromAddress' => 'delivery@buddybee.eu',
  5243.                             'userName' => 'delivery@buddybee.eu',
  5244.                             'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  5245.                             'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  5246.                             'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  5247. //                        'encryptionMethod' => 'tls',
  5248.                             'encryptionMethod' => 'ssl',
  5249. //                            'emailBody' => $bodyHtml,
  5250.                             'mailTemplate' => $bodyTemplate,
  5251.                             'templateData' => $bodyData,
  5252. //                        'embedCompanyImage' => 1,
  5253. //                        'companyId' => $companyId,
  5254. //                        'companyImagePath' => $company_data->getImage()
  5257.                         ));
  5259.                         foreach ($cards as $card) {
  5260.                             $card->setPrinted(1);
  5261.                         }
  5262.                         $em->flush();
  5265.                     }
  5267.                     return new JsonResponse(
  5268.                         array(
  5269.                             'success' => true
  5270.                         )
  5271.                     );
  5274.                 }
  5277.                 MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  5278.                 $meetingId = $retData['meetingId'];
  5279.                 if (GeneralConstant::EMAIL_ENABLED == 1) {
  5280.                     $billerDetails = [];
  5281.                     $billToDetails = [];
  5283.                     $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  5284.                         ->findOneBy(
  5285.                             array(
  5286.                                 'Id' => $invoiceId,
  5288.                             )
  5289.                         );;
  5290.                     if ($invoice) {
  5291.                         $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5292.                             ->findOneBy(
  5293.                                 array(
  5294.                                     'applicantId' => $invoice->getBillerId(),
  5296.                                 )
  5297.                             );
  5298.                         $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  5299.                             ->findOneBy(
  5300.                                 array(
  5301.                                     'applicantId' => $invoice->getBillToId(),
  5303.                                 )
  5304.                             );
  5306.                     }
  5308.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  5309.                     $bodyData = array(
  5310.                         'page_title' => 'Invoice',
  5311. //            'studentDetails' => $student,
  5312.                         'billerDetails' => $billerDetails,
  5313.                         'billToDetails' => $billToDetails,
  5314.                         'invoice' => $invoice,
  5315.                         'currencyList' => BuddybeeConstant::$currency_List,
  5316.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  5319.                     );
  5320.                     $attachments = [];
  5321.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  5324. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  5325.                     $new_mail = $this->get('mail_module');
  5326.                     $new_mail->sendMyMail(array(
  5327.                         'senderHash' => '_CUSTOM_',
  5328.                         //                        'senderHash'=>'_CUSTOM_',
  5329.                         'forwardToMailAddress' => $forwardToMailAddress,
  5331.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  5333. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  5334.                         'attachments' => $attachments,
  5335.                         'toAddress' => $forwardToMailAddress,
  5336.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  5337.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  5338.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  5339.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  5340.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  5342. //                            'emailBody' => $bodyHtml,
  5343.                         'mailTemplate' => $bodyTemplate,
  5344.                         'templateData' => $bodyData,
  5345.                         'embedCompanyImage' => 0,
  5346.                         'companyId' => 0,
  5348.                         'companyImagePath' => ''
  5349. //                        'embedCompanyImage' => 1,
  5350. //                        'companyId' => $companyId,
  5351. //                        'companyImagePath' => $company_data->getImage()
  5354.                     ));
  5357.                 }
  5358. //
  5359.                 if ($meetingId != 0) {
  5360.                     $url = $this->generateUrl(
  5361.                         'consultancy_session'
  5362.                     );
  5363. //                if($request->query->get('autoRedirect',1))
  5364. //                    return $this->redirect($url . '/' . $meetingId);
  5365.                     $redirectUrl = $url . '/' . $meetingId;
  5367.                 } else {
  5368.                     $url = $this->generateUrl(
  5369.                         'buddybee_dashboard'
  5370.                     );
  5371. //                if($request->query->get('autoRedirect',1))
  5372. //                    return $this->redirect($url);
  5373.                     $redirectUrl = $url;
  5375.                 }
  5378.             }
  5379.             return $this->render('@Application/pages/stripe/success.html.twig', array(
  5380.                 'page_title' => 'Success',
  5381.                 'meetingId' => $meetingId,
  5382.                 'autoRedirect' => $autoRedirect,
  5383.                 'redirectUrl' => $redirectUrl,
  5385.             ));
  5386.         }
  5389.     }
  5391.     public function PaymentGatewayCancelAction(Request $request, $msg = 'The Payment was unsuccessful', $encData = '')
  5392.     {
  5393.         $em = $this->getDoctrine()->getManager('company_group');
  5394. //        $consultantDetail = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')->findOneBy(array());
  5395.         $session = $request->getSession();
  5396.         if ($msg == '')
  5397.             $msg = $request->query->get('msg', $request->request->get('msg', 'The Payment was unsuccessful'));
  5400.         return $this->render('@Application/pages/stripe/cancel.html.twig', array(
  5401.             'page_title' => 'Success',
  5402.             'msg' => $msg,
  5404.         ));
  5405.     }
  5407.     public function BkashCallbackAction(Request $request, $encData = '')
  5408.     {
  5411.         $em = $this->getDoctrine()->getManager('company_group');
  5412.         $invoiceId = 0;
  5413.         $session = $request->getSession();
  5414.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  5416.         $paymentId = $request->query->get('paymentID', 0);
  5417.         $status = $request->query->get('status', 0);
  5419.         if ($status == 'success') {
  5420.             $paymentID = $paymentId;
  5421.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  5422.                 array(
  5423.                     'gatewayPaymentId' => $paymentId,
  5424.                     'isProcessed' => [0, 2]
  5426.                 ));
  5428.             if ($gatewayInvoice) {
  5429.                 $invoiceId = $gatewayInvoice->getId();
  5431.                 $justNow = new \DateTime();
  5433.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  5434.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  5435.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  5436.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  5437.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  5439.                 $justNowTs = $justNow->format('U');
  5440.                 if ($gatewayInvoice->getGatewayIdTokenExpireTs() <= $justNowTs) {
  5441.                     $refresh_token = $gatewayInvoice->getGatewayIdRefreshToken();
  5443.                     $request_data = array(
  5444.                         'app_key' => $app_key_value,
  5445.                         'app_secret' => $app_secret_value,
  5446.                         'refresh_token' => $refresh_token
  5447.                     );
  5448.                     $url = curl_init($baseUrl . '/tokenized/checkout/token/refresh');
  5450.                     $request_data_json = json_encode($request_data);
  5452.                     $header = array(
  5453.                         'Content-Type:application/json',
  5454.                         'username:' . $username_value,
  5455.                         'password:' . $password_value
  5456.                     );
  5457.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5458.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5459.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5460.                     curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  5461.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5462.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5465.                     $tokenData = json_decode(curl_exec($url), true);
  5466.                     curl_close($url);
  5469.                     $justNow = new \DateTime();
  5470.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  5471.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  5472.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  5473.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  5474.                     $em->flush();
  5475.                 }
  5476.                 $auth = $gatewayInvoice->getGatewayIdToken();;
  5478.                 $post_token = array(
  5479.                     'paymentID' => $paymentID
  5480.                 );
  5481. //                $url = curl_init();
  5482.                 $url = curl_init($baseUrl . '/tokenized/checkout/execute');
  5483.                 $posttoken = json_encode($post_token);
  5485.                 $header = array(
  5486.                     'Content-Type:application/json',
  5487.                     'Authorization:' . $auth,
  5488.                     'X-APP-Key:' . $app_key_value
  5489.                 );
  5491. //                curl_setopt_array($url, array(
  5492. //                    CURLOPT_HTTPHEADER => $header,
  5493. //                    CURLOPT_RETURNTRANSFER => 1,
  5494. //                    CURLOPT_URL => $baseUrl . '/tokenized/checkout/execute',
  5495. //
  5496. //                    CURLOPT_FOLLOWLOCATION => 1,
  5497. //                    CURLOPT_POST => 1,
  5498. //                    CURLOPT_IPRESOLVE => CURL_IPRESOLVE_V4,
  5499. //                    CURLOPT_POSTFIELDS => http_build_query($post_token)
  5500. //                ));
  5502.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5503.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5504.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5505.                 curl_setopt($url, CURLOPT_POSTFIELDS, $posttoken);
  5506.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5507.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5508.                 $resultdata = curl_exec($url);
  5509.                 curl_close($url);
  5510.                 $obj = json_decode($resultdata, true);
  5512. //                return new JsonResponse(array(
  5513. //                    'obj' => $obj,
  5514. //                    'url' => $baseUrl . '/tokenized/checkout/execute',
  5515. //                    'header' => $header,
  5516. //                    'paymentID' => $paymentID,
  5517. //                    'posttoken' => $posttoken,
  5518. //                ));
  5519. //                                return new JsonResponse($obj);
  5521.                 if (isset($obj['statusCode'])) {
  5523.                     if ($obj['statusCode'] == '0000') {
  5524.                         $gatewayInvoice->setGatewayTransId($obj['trxID']);
  5525.                         $em->flush();
  5526.                         return $this->redirectToRoute("payment_gateway_success", ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5527.                             'invoiceId' => $invoiceId, 'autoRedirect' => 1
  5528.                         ))),
  5529.                             'hbeeSessionToken' => $session->get('token', 0)]);
  5530.                     } else {
  5531.                         return $this->redirectToRoute("payment_gateway_cancel", [
  5532.                             'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'Payment Failed')
  5534.                         ]);
  5535.                     }
  5536.                 }
  5538.             } else {
  5539.                 return $this->redirectToRoute("payment_gateway_cancel", [
  5540.                     'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'Payment Failed')
  5542.                 ]);
  5543.             }
  5546.         } else {
  5547.             return $this->redirectToRoute("payment_gateway_cancel", [
  5548.                 'msg' => isset($obj['statusMessage']) ? $obj['statusMessage'] : (isset($obj['errorMessage']) ? $obj['errorMessage'] : 'The Payment was unsuccessful')
  5550.             ]);
  5551.         }
  5554.     }
  5556.     public function MakePaymentOfEntityInvoiceAction(Request $request, $encData = '')
  5557.     {
  5558.         $em = $this->getDoctrine()->getManager('company_group');
  5559.         $em_goc = $em;
  5560.         $invoiceId = 0;
  5561.         $autoRedirect = 1;
  5562.         $redirectUrl = '';
  5563.         $meetingId = 0;
  5564.         $triggerMiddlePage = 0;
  5565.         $session = $request->getSession();
  5566.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  5569.         $refundSuccess = 0;
  5570.         $errorMsg = '';
  5571.         $errorCode = '';
  5574.         if ($encData != '') {
  5575.             $invoiceId = $encData;
  5576.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  5577.             if (isset($encryptedData['invoiceId']))
  5578.                 $invoiceId = $encryptedData['invoiceId'];
  5579.             if (isset($encryptedData['triggerMiddlePage']))
  5580.                 $triggerMiddlePage = $encryptedData['triggerMiddlePage'];
  5581.             if (isset($encryptedData['autoRedirect']))
  5582.                 $autoRedirect = $encryptedData['autoRedirect'];
  5583.         } else {
  5584.             $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  5585.             $triggerMiddlePage = $request->request->get('triggerMiddlePage', $request->query->get('triggerMiddlePage', 0));
  5587.             $meetingId = 0;
  5588.             $autoRedirect = $request->query->get('autoRedirect', 1);
  5589.             $redirectUrl = '';
  5590.         }
  5591.         $meetingId = $request->request->get('meetingId', $request->query->get('meetingId', 0));
  5593.         $actionDone = 0;
  5595.         if ($meetingId != 0) {
  5597.             $dt = Buddybee::ConfirmAnyMeetingSessionIfPossible($em, 0, $meetingId, false,
  5598.                 $this->container->getParameter('notification_enabled'),
  5599.                 $this->container->getParameter('notification_server'));
  5602.             if ($invoiceId == 0 && $dt['success'] == true) {
  5603.                 $actionDone = 1;
  5604.                 return new JsonResponse(array(
  5605.                     'clientSecret' => 0,
  5606.                     'actionDone' => $actionDone,
  5607.                     'id' => 0,
  5608.                     'proceedToCheckout' => 0
  5609.                 ));
  5610.             }
  5611.         }
  5614. //        $invoiceId = $request->request->get('meetingId', $request->query->get('meetingId', 0));
  5616.         $output = [
  5617.             'clientSecret' => 0,
  5618.             'id' => 0,
  5619.             'proceedToCheckout' => 0
  5620.         ];
  5621.         $stripeKeys = null;   // SQ-17
  5622.         if ($invoiceId != 0) {
  5623.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  5624.                 array(
  5625.                     'Id' => $invoiceId,
  5626.                     'isProcessed' => [0]
  5628.                 ));
  5629.         } else {
  5630.             $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  5631.                 array(
  5632.                     'meetingId' => $meetingId,
  5633.                     'isProcessed' => [0]
  5635.                 ));
  5636.         }
  5638.         if ($gatewayInvoice)
  5639.             $invoiceId = $gatewayInvoice->getId();
  5641.         $invoiceSessionCount = 0;
  5642.         $payableAmount = 0;
  5643.         $imageBySessionCount = [
  5644.             0 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5645.             100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5646.             200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5647.             300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5648.             400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5649.             500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5650.             600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5651.             700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5652.             800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5653.             900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5654.             1000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5655.             1100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5656.             1200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5657.             1300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5658.             1400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5659.             1500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5660.             1600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5661.             1700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5662.             1800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5663.             1900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5664.             2000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5665.             2100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5666.             2200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5667.             2300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5668.             2400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5669.             2500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5670.             2600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5671.             2700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5672.             2800 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5673.             2900 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5674.             3000 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5675.             3100 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5676.             3200 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5677.             3300 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5678.             3400 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5679.             3500 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5680.             3600 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5681.             3700 => "https://www.buddybee.eu/buddybee_assets/ADULT-BEE.png",
  5683.         ];
  5686.         if ($gatewayInvoice) {
  5687.             $gatewayProductData = json_decode($gatewayInvoice->getProductDataForPaymentGateway(), true);
  5688.             if ($gatewayProductData == null) $gatewayProductData = [];
  5689.             $gatewayAmount = 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', '');
  5690.             $invoiceSessionCount = $gatewayInvoice->getSessionCount();
  5691.             $currencyForGateway = $gatewayInvoice->getAmountCurrency();
  5693.             $gatewayAmount = round($gatewayAmount, 2);
  5694.             if (empty($gatewayProductData))
  5695.                 $gatewayProductData = [
  5696.                     [
  5697.                         'price_data' => [
  5698.                             'currency' => 'eur',
  5699.                             'unit_amount' => $gatewayAmount != 0 ? (100 * $gatewayAmount) : 200000,
  5700.                             'product_data' => [
  5701. //                            'name' => $request->request->has('packageName') ? $request->request->get('packageName') : 'Advanced Consultancy Package',
  5702.                                 'name' => 'Bee Coins',
  5703. //                                'images' => [$imageBySessionCount[$invoiceSessionCount]],
  5704.                                 'images' => [$imageBySessionCount[0]],
  5705.                             ],
  5706.                         ],
  5707.                         'quantity' => 1,
  5708.                     ]
  5709.                 ];
  5711.             $productDescStr = '';
  5712.             $productDescArr = [];
  5713.             foreach ($gatewayProductData as $gpd) {
  5714.                 $productDescArr[] = $gpd['price_data']['product_data']['name'];
  5715.             }
  5716.             $productDescStr = implode(',', $productDescArr);
  5717.             $paymentGatewayFromInvoice = $gatewayInvoice->getAmountTransferGateWayHash();
  5720.             // SQ-17: the configured keys (live unless sand_box_mode), never a key typed into this file; no checkout
  5721.             // is started with keys that are missing or of the wrong mode.
  5722.             $stripeKeys = $paymentGatewayFromInvoice == 'stripe' ? \ApplicationBundle\Helper\StripeKeys::fromContainer($this->container) : null;
  5723.             if ($stripeKeys && !$stripeKeys['ok']) {
  5724.                 $output = ['clientSecret' => 0, 'id' => 0, 'proceedToCheckout' => 0, 'message' => 'Card payment is not set up on this server yet. Please contact HoneyBee.'];
  5725.             }
  5726.             if ($paymentGatewayFromInvoice == 'stripe' && $stripeKeys && $stripeKeys['ok']) {
  5727.                 $stripe = new \Stripe\Stripe();
  5728.                 \Stripe\Stripe::setApiKey($stripeKeys['secret']);
  5729.                 {
  5730.                     if ($request->query->has('meetingSessionId'))
  5731.                         $id = $request->query->get('meetingSessionId');
  5732.                 }
  5734.                 $paymentIntent = [
  5735.                     "id" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs",
  5736.                     "object" => "payment_intent",
  5737.                     "amount" => 3000,
  5738.                     "amount_capturable" => 0,
  5739.                     "amount_received" => 0,
  5740.                     "application" => null,
  5741.                     "application_fee_amount" => null,
  5742.                     "canceled_at" => null,
  5743.                     "cancellation_reason" => null,
  5744.                     "capture_method" => "automatic",
  5745.                     "charges" => [
  5746.                         "object" => "list",
  5747.                         "data" => [],
  5748.                         "has_more" => false,
  5749.                         "url" => "/v1/charges?payment_intent=pi_1DoWjK2eZvKYlo2Csy9J3BHs"
  5750.                     ],
  5751.                     "client_secret" => "pi_1DoWjK2eZvKYlo2Csy9J3BHs_secret_vmxAcWZxo2kt1XhpWtZtnjDtd",
  5752.                     "confirmation_method" => "automatic",
  5753.                     "created" => 1546523966,
  5754.                     "currency" => $currencyForGateway,
  5755.                     "customer" => null,
  5756.                     "description" => null,
  5757.                     "invoice" => null,
  5758.                     "last_payment_error" => null,
  5759.                     "livemode" => false,
  5760.                     "metadata" => [],
  5761.                     "next_action" => null,
  5762.                     "on_behalf_of" => null,
  5763.                     "payment_method" => null,
  5764.                     "payment_method_options" => [],
  5765.                     "payment_method_types" => [
  5766.                         "card"
  5767.                     ],
  5768.                     "receipt_email" => null,
  5769.                     "review" => null,
  5770.                     "setup_future_usage" => null,
  5771.                     "shipping" => null,
  5772.                     "statement_descriptor" => null,
  5773.                     "statement_descriptor_suffix" => null,
  5774.                     "status" => "requires_payment_method",
  5775.                     "transfer_data" => null,
  5776.                     "transfer_group" => null
  5777.                 ];
  5780.                 $checkout_session = \Stripe\Checkout\Session::create([
  5781.                     'payment_method_types' => ['card'],
  5782.                     'line_items' => $gatewayProductData,
  5783.                     'mode' => 'payment',
  5784.                     'success_url' => $this->generateUrl(
  5785.                         'payment_gateway_success',
  5786.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5787.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5788.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5789.                     ),
  5790.                     'cancel_url' => $this->generateUrl(
  5791.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5792.                     ),
  5793.                 ]);
  5794.                 $output = [
  5795.                     'clientSecret' => $paymentIntent['client_secret'],
  5796.                     'id' => $checkout_session->id,
  5797.                     'paymentGateway' => $paymentGatewayFromInvoice,
  5798.                     'proceedToCheckout' => 1
  5799.                 ];
  5800. //                return new JsonResponse($output);
  5801.             }
  5802.             if ($paymentGatewayFromInvoice == 'aamarpay') {
  5804.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  5807.                 $url = $sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/request.php' : 'https://secure.aamarpay.com/request.php';
  5808.                 $fields = array(
  5809. //                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5810.                     'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  5811.                     'amount' => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''), //transaction amount
  5812.                     'payment_type' => 'VISA', //no need to change
  5813.                     'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  5814.                     'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  5815.                     'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  5816.                     'cus_email' => $studentDetails->getEmail(), //customer email address
  5817.                     'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  5818.                     'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  5819.                     'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  5820.                     'cus_state' => $studentDetails->getCurrAddrState(),  //state
  5821.                     'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  5822.                     'cus_country' => 'Bangladesh',  //country
  5823.                     'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? '+8801911706483' : $studentDetails->getPhone(), //customer phone number
  5824.                     'cus_fax' => '',  //fax
  5825.                     'ship_name' => '', //ship name
  5826.                     'ship_add1' => '',  //ship address
  5827.                     'ship_add2' => '',
  5828.                     'ship_city' => '',
  5829.                     'ship_state' => '',
  5830.                     'ship_postcode' => '',
  5831.                     'ship_country' => 'Bangladesh',
  5832.                     'desc' => $productDescStr,
  5833.                     'success_url' => $this->generateUrl(
  5834.                         'payment_gateway_success',
  5835.                         ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5836.                             'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5837.                         ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5838.                     ),
  5839.                     'fail_url' => $this->generateUrl(
  5840.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5841.                     ),
  5842.                     'cancel_url' => $this->generateUrl(
  5843.                         'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5844.                     ),
  5845. //                    'opt_a' => 'Reshad',  //optional paramter
  5846. //                    'opt_b' => 'Akil',
  5847. //                    'opt_c' => 'Liza',
  5848. //                    'opt_d' => 'Sohel',
  5849. //                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  5850.                     'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  5852.                 ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  5854.                 $fields_string = http_build_query($fields);
  5856.                 $ch = curl_init();
  5857.                 curl_setopt($ch, CURLOPT_VERBOSE, true);
  5858.                 curl_setopt($ch, CURLOPT_URL, $url);
  5860.                 curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  5861.                 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  5862.                 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  5863.                 $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  5864.                 curl_close($ch);
  5866. //                $this->redirect_to_merchant($url_forward);
  5868.                 $output = [
  5870. //                    'redirectUrl' => 'https://sandbox.aamarpay.com/'.$url_forward, //keeping it off temporarily
  5871.                     'redirectUrl' => ($sandBoxMode == 1 ? 'https://sandbox.aamarpay.com/' : 'https://secure.aamarpay.com/') . $url_forward, //keeping it off temporarily
  5872. //                    'fields'=>$fields,
  5873. //                    'fields_string'=>$fields_string,
  5875. //                    'redirectUrl' => $this->generateUrl(
  5876. //                        'payment_gateway_success',
  5877. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5878. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5879. //                        ))), 'hbeeSessionToken' => $request->request->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5880. //                    ),
  5881.                     'paymentGateway' => $paymentGatewayFromInvoice,
  5882.                     'proceedToCheckout' => 1
  5883.                 ];
  5884. //                return new JsonResponse($output);
  5885.             } else if ($paymentGatewayFromInvoice == 'bkash') {
  5887.                 $studentDetails = $em_goc->getRepository(EntityApplicantDetails::class)->find($gatewayInvoice->getBillToId());
  5889.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  5890.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  5891.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  5892.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  5893.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  5896.                 $request_data = array(
  5897.                     'app_key' => $app_key_value,
  5898.                     'app_secret' => $app_secret_value
  5899.                 );
  5900.                 $url = curl_init($baseUrl . '/tokenized/checkout/token/grant');
  5901.                 $request_data_json = json_encode($request_data);
  5902.                 $header = array(
  5903.                     'Content-Type:application/json',
  5904.                     'username:' . $username_value,
  5905.                     'password:' . $password_value
  5906.                 );
  5907.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5908.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5909.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5910.                 curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  5911.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5912.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5914.                 $tokenData = json_decode(curl_exec($url), true);
  5915.                 curl_close($url);
  5917.                 $id_token = $tokenData['id_token'];
  5918.                 $goToBkashPage = 0;
  5919.                 if ($tokenData['statusCode'] == '0000') {
  5920.                     $auth = $id_token;
  5923.                     $requestbody = array(
  5924.                         "mode" => "0011",
  5925. //                        "payerReference" => "",
  5926.                         "payerReference" => $gatewayInvoice->getInvoiceDateTs(),
  5927.                         "callbackURL" => $this->generateUrl(
  5928.                             'bkash_callback', [], UrlGenerator::ABSOLUTE_URL
  5929.                         ),
  5930. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  5931.                         "amount" => number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  5932.                         "currency" => "BDT",
  5933.                         "intent" => "sale",
  5934.                         "merchantInvoiceNumber" => $invoiceId
  5935.                     );
  5936.                     $url = curl_init($baseUrl . '/tokenized/checkout/create');
  5937.                     $requestbodyJson = json_encode($requestbody);
  5939.                     $header = array(
  5940.                         'Content-Type:application/json',
  5941.                         'Authorization:' . $auth,
  5942.                         'X-APP-Key:' . $app_key_value
  5943.                     );
  5945.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  5946.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  5947.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  5948.                     curl_setopt($url, CURLOPT_POSTFIELDS, $requestbodyJson);
  5949.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  5950.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  5951.                     $resultdata = curl_exec($url);
  5952.                     curl_close($url);
  5953. //                    return new JsonResponse($resultdata);
  5955.                     $obj = json_decode($resultdata, true);
  5958.                     $goToBkashPage = 1;
  5961.                     $justNow = new \DateTime();
  5962.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  5963.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  5964.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  5965.                     $gatewayInvoice->setGatewayPaymentId($obj['paymentID']);
  5966.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  5967.                     $em->flush();
  5969.                     $output = [
  5971.                         'redirectUrl' => $obj['bkashURL'],
  5973.                         'paymentGateway' => $paymentGatewayFromInvoice,
  5974.                         'proceedToCheckout' => $goToBkashPage,
  5975.                         'tokenData' => $tokenData,
  5976.                         'obj' => $obj,
  5977.                         'id_token' => $tokenData['id_token'],
  5978.                     ];
  5981.                 }
  5984. //                $fields = array(
  5985. //
  5986. //                    "mode" => "0011",
  5987. //                    "payerReference" => "01723888888",
  5988. //                    "callbackURL" => $this->generateUrl(
  5989. //                        'payment_gateway_success',
  5990. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  5991. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  5992. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  5993. //                    ),
  5994. //                    "merchantAssociationInfo" => "MI05MID54RF09123456One",
  5995. //                    "amount" => $gatewayInvoice->getGateWayBillamount(),
  5996. //                    "currency" => "BDT",
  5997. //                    "intent" => "sale",
  5998. //                    "merchantInvoiceNumber" => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT)
  5999. //
  6000. //                );
  6001. //                $fields = array(
  6002. ////                    'store_id' => 'aamarpaytest', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  6003. //                    'store_id' => $sandBoxMode == 1 ? 'aamarpaytest' : 'buddybee', //store id will be aamarpay,  contact integration@aamarpay.com for test/live id
  6004. //                    'amount' => $gatewayInvoice->getGateWayBillamount(), //transaction amount
  6005. //                    'payment_type' => 'VISA', //no need to change
  6006. //                    'currency' => strtoupper($currencyForGateway),  //currenct will be USD/BDT
  6007. //                    'tran_id' => 'BEI' . str_pad($gatewayInvoice->getBillerId(), 3, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getBillToId(), 5, '0', STR_PAD_LEFT) . str_pad($gatewayInvoice->getId(), 4, '0', STR_PAD_LEFT), //transaction id must be unique from your end
  6008. //                    'cus_name' => $studentDetails->getFirstname() . ' ' . $studentDetails->getLastName(),  //customer name
  6009. //                    'cus_email' => $studentDetails->getEmail(), //customer email address
  6010. //                    'cus_add1' => $studentDetails->getCurrAddr(),  //customer address
  6011. //                    'cus_add2' => $studentDetails->getCurrAddrCity(), //customer address
  6012. //                    'cus_city' => $studentDetails->getCurrAddrCity(),  //customer city
  6013. //                    'cus_state' => $studentDetails->getCurrAddrState(),  //state
  6014. //                    'cus_postcode' => $studentDetails->getCurrAddrZip(), //postcode or zipcode
  6015. //                    'cus_country' => 'Bangladesh',  //country
  6016. //                    'cus_phone' => ($studentDetails->getPhone() == null || $studentDetails->getPhone() == '') ? ' + 8801911706483' : $studentDetails->getPhone(), //customer phone number
  6017. //                    'cus_fax' => '',  //fax
  6018. //                    'ship_name' => '', //ship name
  6019. //                    'ship_add1' => '',  //ship address
  6020. //                    'ship_add2' => '',
  6021. //                    'ship_city' => '',
  6022. //                    'ship_state' => '',
  6023. //                    'ship_postcode' => '',
  6024. //                    'ship_country' => 'Bangladesh',
  6025. //                    'desc' => $productDescStr,
  6026. //                    'success_url' => $this->generateUrl(
  6027. //                        'payment_gateway_success',
  6028. //                        ['encData' => $this->get('url_encryptor')->encrypt(json_encode(array(
  6029. //                            'invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1)
  6030. //                        ))), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  6031. //                    ),
  6032. //                    'fail_url' => $this->generateUrl(
  6033. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  6034. //                    ),
  6035. //                    'cancel_url' => $this->generateUrl(
  6036. //                        'payment_gateway_cancel', ['invoiceId' => $invoiceId, 'autoRedirect' => $request->request->get('autoRedirect', 1), 'hbeeSessionToken' => $session->get('token', 0)], UrlGenerator::ABSOLUTE_URL
  6037. //                    ),
  6038. ////                    'opt_a' => 'Reshad',  //optional paramter
  6039. ////                    'opt_b' => 'Akil',
  6040. ////                    'opt_c' => 'Liza',
  6041. ////                    'opt_d' => 'Sohel',
  6042. ////                    'signature_key' => 'dbb74894e82415a2f7ff0ec3a97e4183',  //sandbox
  6043. //                    'signature_key' => $sandBoxMode == 1 ? 'dbb74894e82415a2f7ff0ec3a97e4183' : 'b7304a40e21fe15af3be9a948307f524'  //live
  6044. //
  6045. //                ); //signature key will provided aamarpay, contact integration@aamarpay.com for test/live signature key
  6046. //
  6047. //                $fields_string = http_build_query($fields);
  6048. //
  6049. //                $ch = curl_init();
  6050. //                curl_setopt($ch, CURLOPT_VERBOSE, true);
  6051. //                curl_setopt($ch, CURLOPT_URL, $url);
  6052. //
  6053. //                curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
  6054. //                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  6055. //                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  6056. //                $url_forward = str_replace('"', '', stripslashes(curl_exec($ch)));
  6057. //                curl_close($ch);
  6059. //                $this->redirect_to_merchant($url_forward);
  6062.             }
  6064.         }
  6066.         // SQ-17: say why nothing happens instead of sending the browser to "undefined"
  6067.         if ((int) ($output['proceedToCheckout'] ?? 0) !== 1 && empty($output['redirectUrl']) && empty($output['message'])) {
  6068.             $output['message'] = $gatewayInvoice ? 'This invoice cannot be paid online. Please contact HoneyBee.' : 'This invoice is already paid or is no longer open.';
  6069.         }
  6070.         if ($triggerMiddlePage == 1) return $this->render('@Buddybee/pages/makePaymentOfEntityInvoiceLandingPage.html.twig', array(
  6071.             'page_title' => 'Invoice Payment',
  6072.             'stripePublicKey' => ($stripeKeys && $stripeKeys['ok']) ? $stripeKeys['publishable'] : '',   // SQ-17
  6074.             'data' => $output,
  6077.         ));
  6078.         else
  6079.             return new JsonResponse($output);
  6082.     }
  6085.     public function RefundEntityInvoiceAction(Request $request, $encData = '')
  6086.     {
  6089.         $em = $this->getDoctrine()->getManager('company_group');
  6090.         $invoiceId = 0;
  6092.         $currIsProcessedFlagValue = '_UNSET_';
  6094.         $session = $request->getSession();
  6095.         $sandBoxMode = $this->container->hasParameter('sand_box_mode') ? $this->container->getParameter('sand_box_mode') : 0;
  6097.         $paymentId = $request->query->get('paymentID', 0);
  6098.         $status = $request->query->get('status', 0);
  6100.         $refundSuccess = 0;
  6101.         $errorMsg = '';
  6102.         $errorCode = '';
  6105.         if ($encData != '') {
  6106.             $invoiceId = $encData;
  6107.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  6108.             if (isset($encryptedData['invoiceId']))
  6109.                 $invoiceId = $encryptedData['invoiceId'];
  6110.             if (isset($encryptedData['autoRedirect']))
  6111.                 $autoRedirect = $encryptedData['autoRedirect'];
  6112.         } else {
  6113.             $invoiceId = $request->request->get('invoiceId', $request->query->get('invoiceId', 0));
  6115.             $meetingId = 0;
  6116.             $autoRedirect = $request->query->get('autoRedirect', 1);
  6117.             $redirectUrl = '';
  6118.         }
  6121.         $gatewayInvoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')->findOneBy(
  6122.             array(
  6123.                 'Id' => $invoiceId,
  6124.                 'isProcessed' => [1]
  6126.             ));
  6129.         if ($gatewayInvoice) {
  6130.             $gatewayInvoice->setIsProcessed(3); //pending settlement
  6131.             $currIsProcessedFlagValue = $gatewayInvoice->getIsProcessed();
  6132.             $em->flush();
  6134.             if ($gatewayInvoice->getAmountTransferGateWayHash() == 'bkash') {
  6135.                 $invoiceId = $gatewayInvoice->getId();
  6137.                 $paymentID = $gatewayInvoice->getGatewayPaymentId();
  6138.                 $trxID = $gatewayInvoice->getGatewayTransId();
  6140.                 $justNow = new \DateTime();
  6142.                 $baseUrl = ($sandBoxMode == 1) ? 'https://tokenized.sandbox.bka.sh/v1.2.0-beta' : 'https://tokenized.pay.bka.sh/v1.2.0-beta';
  6143.                 $username_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02' : '01891962953';
  6144.                 $password_value = ($sandBoxMode == 1) ? 'sandboxTokenizedUser02@12345' : ',a&kPV4deq&';
  6145.                 $app_key_value = ($sandBoxMode == 1) ? '4f6o0cjiki2rfm34kfdadl1eqq' : '2ueVHdwz5gH3nxx7xn8wotlztc';
  6146.                 $app_secret_value = ($sandBoxMode == 1) ? '2is7hdktrekvrbljjh44ll3d9l1dtjo4pasmjvs5vl5qr3fug4b' : '49Ay3h3wWJMBFD7WF5CassyLrtA1jt6ONhspqjqFx5hTjhqh5dHU';
  6149.                 $justNowTs = $justNow->format('U');
  6150.                 if ($gatewayInvoice->getGatewayIdTokenExpireTs() <= $justNowTs) {
  6151.                     $refresh_token = $gatewayInvoice->getGatewayIdRefreshToken();
  6153.                     $request_data = array(
  6154.                         'app_key' => $app_key_value,
  6155.                         'app_secret' => $app_secret_value,
  6156.                         'refresh_token' => $refresh_token
  6157.                     );
  6158.                     $url = curl_init($baseUrl . '/tokenized/checkout/token/refresh');
  6160.                     $request_data_json = json_encode($request_data);
  6162.                     $header = array(
  6163.                         'Content-Type:application/json',
  6164.                         'username:' . $username_value,
  6165.                         'password:' . $password_value
  6166.                     );
  6167.                     curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  6168.                     curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  6169.                     curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  6170.                     curl_setopt($url, CURLOPT_POSTFIELDS, $request_data_json);
  6171.                     curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  6172.                     curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  6174.                     $tokenData = json_decode(curl_exec($url), true);
  6175.                     curl_close($url);
  6178.                     $justNow = new \DateTime();
  6179.                     $justNow->modify('+' . $tokenData['expires_in'] . ' second');
  6180.                     $gatewayInvoice->setGatewayIdTokenExpireTs($justNow->format('U'));
  6181.                     $gatewayInvoice->setGatewayIdToken($tokenData['id_token']);
  6182.                     $gatewayInvoice->setGatewayIdRefreshToken($tokenData['refresh_token']);
  6183.                     $em->flush();
  6184.                 }
  6187.                 $auth = $gatewayInvoice->getGatewayIdToken();;
  6189.                 $post_token = array(
  6190.                     'paymentID' => $paymentID,
  6191.                     'trxID' => $trxID,
  6192.                     'reason' => 'Full Refund Policy',
  6193.                     'sku' => 'RSTR',
  6194.                     'amount' => 1 * number_format($gatewayInvoice->getGateWayBillamount(), 2, '.', ''),
  6195.                 );
  6196.                 $url = curl_init($baseUrl . '/tokenized/checkout/payment/refund');
  6197.                 $posttoken = json_encode($post_token);
  6199.                 $header = array(
  6200.                     'Content-Type:application/json',
  6201.                     'Authorization:' . $auth,
  6202.                     'X-APP-Key:' . $app_key_value
  6203.                 );
  6204.                 curl_setopt($url, CURLOPT_HTTPHEADER, $header);
  6205.                 curl_setopt($url, CURLOPT_CUSTOMREQUEST, "POST");
  6206.                 curl_setopt($url, CURLOPT_RETURNTRANSFER, true);
  6207.                 curl_setopt($url, CURLOPT_POSTFIELDS, $posttoken);
  6208.                 curl_setopt($url, CURLOPT_FOLLOWLOCATION, 1);
  6209.                 curl_setopt($url, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4);
  6210.                 $resultdata = curl_exec($url);
  6212.                 curl_close($url);
  6214.                 $obj = json_decode($resultdata, true);
  6216. //                return new JsonResponse($obj);
  6218.                 if (isset($obj['completedTime']))
  6219.                     $refundSuccess = 1;
  6220.                 else if (isset($obj['errorCode'])) {
  6221.                     $refundSuccess = 0;
  6222.                     $errorCode = $obj['errorCode'];
  6223.                     $errorMsg = $obj['errorMessage'];
  6224.                 }
  6225. //                    $gatewayInvoice->setGatewayTransId($obj['trxID']);
  6226.                 $em->flush();
  6229.             }
  6232.             if ($refundSuccess == 1) {
  6233.                 Buddybee::RefundEntityInvoice($em, $invoiceId);
  6234.                 $currIsProcessedFlagValue = 4;
  6235.             }
  6236.         } else {
  6238.         }
  6240.         MiscActions::RefreshBuddybeeBalanceOnSession($em, $request->getSession());
  6243.         return new JsonResponse(
  6244.             array(
  6245.                 'success' => $refundSuccess,
  6246.                 'errorCode' => $errorCode,
  6247.                 'isProcessed' => $currIsProcessedFlagValue,
  6248.                 'errorMsg' => $errorMsg,
  6249.             )
  6250.         );
  6253.     }
  6256.     public function ViewEntityInvoiceAction(Request $request, $encData = '')
  6257.     {
  6258.         $em = $this->getDoctrine()->getManager('company_group');
  6259.         $invoiceId = 0;
  6260.         $autoRedirect = 1;
  6261.         $redirectUrl = '';
  6262.         $meetingId = 0;
  6263.         $invoice = null;
  6266.         if ($encData != '') {
  6267.             $encryptedData = json_decode($this->get('url_encryptor')->decrypt($encData), true);
  6268.             $invoiceId = $encData;
  6269.             if (isset($encryptedData['invoiceId']))
  6270.                 $invoiceId = $encryptedData['invoiceId'];
  6271.             if (isset($encryptedData['autoRedirect']))
  6272.                 $autoRedirect = $encryptedData['autoRedirect'];
  6273.         } else {
  6274.             $invoiceId = $request->query->get('invoiceId', 0);
  6276.             $meetingId = 0;
  6277.             $autoRedirect = $request->query->get('autoRedirect', 1);
  6278.             $redirectUrl = '';
  6279.         }
  6281. //    $invoiceList = [];
  6283.         $billerDetails = [];
  6284.         $billToDetails = [];
  6285.         if ($invoiceId != 0) {
  6286.             $invoice = $em->getRepository('CompanyGroupBundle\\Entity\\EntityInvoice')
  6287.                 ->findOneBy(
  6288.                     array(
  6289.                         'Id' => $invoiceId,
  6291.                     )
  6292.                 );
  6294.             if ($invoice) {
  6295.                 $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  6296.                     ->findOneBy(
  6297.                         array(
  6298.                             'applicantId' => $invoice->getBillerId(),
  6300.                         )
  6301.                     );
  6302.                 $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  6303.                     ->findOneBy(
  6304.                         array(
  6305.                             'applicantId' => $invoice->getBillToId(),
  6307.                         )
  6308.                     );
  6310.             }
  6312.             if ($request->query->get('sendMail', 0) == 1 && GeneralConstant::EMAIL_ENABLED == 1) {
  6313.                 $billerDetails = [];
  6314.                 $billToDetails = [];
  6317.                 if ($invoice) {
  6318.                     $billerDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  6319.                         ->findOneBy(
  6320.                             array(
  6321.                                 'applicantId' => $invoice->getBillerId(),
  6323.                             )
  6324.                         );
  6325.                     $billToDetails = $em->getRepository('CompanyGroupBundle\\Entity\\EntityApplicantDetails')
  6326.                         ->findOneBy(
  6327.                             array(
  6328.                                 'applicantId' => $invoice->getBillToId(),
  6330.                             )
  6331.                         );
  6334.                     $bodyTemplate = '@Application/email/templates/buddybeeInvoiceEmail.html.twig';
  6335.                     $bodyData = array(
  6336.                         'page_title' => 'Invoice',
  6337. //            'studentDetails' => $student,
  6338.                         'billerDetails' => $billerDetails,
  6339.                         'billToDetails' => $billToDetails,
  6340.                         'invoice' => $invoice,
  6341.                         'currencyList' => BuddybeeConstant::$currency_List,
  6342.                         'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  6345.                     );
  6346.                     $attachments = [];
  6347.                     $forwardToMailAddress = $billToDetails->getOAuthEmail();
  6350. //                    $upl_dir = $this->container->getParameter('kernel.root_dir') . '/../web/uploads/temp/' . 'ledger' . '.pdf'
  6351.                     $new_mail = $this->get('mail_module');
  6352.                     $new_mail->sendMyMail(array(
  6353.                         'senderHash' => '_CUSTOM_',
  6354.                         //                        'senderHash'=>'_CUSTOM_',
  6355.                         'forwardToMailAddress' => $forwardToMailAddress,
  6357.                         'subject' => 'YourInvoice #' . 'D' . str_pad('BB', 5, '0', STR_PAD_LEFT) . str_pad('76', 2, '0', STR_PAD_LEFT) . str_pad($invoice->getId(), 8, "0", STR_PAD_LEFT) . ' from BuddyBee ',
  6359. //                        'fileName' => 'Order#' . str_pad($id, 8, '0', STR_PAD_LEFT) . '.pdf',
  6360.                         'attachments' => $attachments,
  6361.                         'toAddress' => $forwardToMailAddress,
  6362.                         'fromAddress' => \ApplicationBundle\Helper\MailerConfig::address(),
  6363.                         'userName' => \ApplicationBundle\Helper\MailerConfig::address(),
  6364.                         'password' => \ApplicationBundle\Helper\MailerConfig::buddybeePassword(),
  6365.                         'smtpServer' => \ApplicationBundle\Helper\MailerConfig::host(),
  6366.                         'smtpPort' => \ApplicationBundle\Helper\MailerConfig::port(),
  6368. //                            'emailBody' => $bodyHtml,
  6369.                         'mailTemplate' => $bodyTemplate,
  6370.                         'templateData' => $bodyData,
  6371.                         'embedCompanyImage' => 0,
  6372.                         'companyId' => 0,
  6374.                         'companyImagePath' => ''
  6375. //                        'embedCompanyImage' => 1,
  6376. //                        'companyId' => $companyId,
  6377. //                        'companyImagePath' => $company_data->getImage()
  6380.                     ));
  6381.                 }
  6384.             }
  6387. //            if ($invoice) {
  6388. //
  6389. //            } else {
  6390. //                return $this->render('@Buddybee/pages/404NotFound.html.twig', array(
  6391. //                    'page_title' => '404 Not Found',
  6392. //
  6393. //                ));
  6394. //            }
  6397.             return $this->render('@HoneybeeWeb/pages/views/honeybee_ecosystem_invoice.html.twig', array(
  6398.                 'page_title' => 'Invoice',
  6399. //            'studentDetails' => $student,
  6400.                 'billerDetails' => $billerDetails,
  6401.                 'billToDetails' => $billToDetails,
  6402.                 'invoice' => $invoice,
  6403.                 'currencyList' => BuddybeeConstant::$currency_List,
  6404.                 'currencyListByMarker' => BuddybeeConstant::$currency_List_by_marker,
  6407.             ));
  6408.         }
  6411.     }
  6412.     public function SignatureCheckFromCentralAction(Request $request)
  6413.     {
  6414.         $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  6416.         if ($systemType !== '_CENTRAL_') {
  6417.             return new JsonResponse(['success' => false, 'message' => 'Only allowed on CENTRAL server.'], 403);
  6418.         }
  6420.         $em = $this->getDoctrine()->getManager('company_group');
  6421.         $em->getConnection()->connect();
  6423.         $data = json_decode($request->getContent(), true);
  6425.         if (
  6426.             !$data ||
  6427.             !isset($data['userId']) ||
  6428.             !isset($data['companyId']) ||
  6429.             !isset($data['signatureData']) ||
  6430.             !isset($data['approvalHash']) ||
  6431.             !isset($data['applicantId'])
  6432.         ) {
  6433.             return new JsonResponse(['success' => false, 'message' => 'Missing parameters.'], 400);
  6434.         }
  6436.         $userId = $data['userId'];
  6437.         $companyId = $data['companyId'];
  6438.         $signatureData = $data['signatureData'];
  6439.         $approvalHash = $data['approvalHash'];
  6440.         $applicantId = $data['applicantId'];
  6442.         try {
  6443.             $centralUser = $em
  6444.                 ->getRepository("CompanyGroupBundle\\Entity\\EntityApplicantDetails")
  6445.                 ->findOneBy(['applicantId' => $applicantId]);
  6447.             if (!$centralUser) {
  6448.                 return new JsonResponse(['success' => false, 'message' => 'Central user not found.'], 404);
  6449.             }
  6451.             $userAppIds = json_decode($centralUser->getUserAppIds(), true);
  6452.             if (!is_array($userAppIds)) $userAppIds = [];
  6454.             $companies = $em->getRepository('CompanyGroupBundle\\Entity\\CompanyGroup')->findBy([
  6455.                 'appId' => $userAppIds
  6456.             ]);
  6458.             if (count($companies) < 1) {
  6459.                 return new JsonResponse(['success' => false, 'message' => 'No companies found for userAppIds.'], 404);
  6460.             }
  6462.             $repo = $em->getRepository('CompanyGroupBundle\\Entity\\EntitySignature');
  6463.             $record = $repo->findOneBy(['userId' => $userId]);
  6465.             if (!$record) {
  6466.                 $record = new \CompanyGroupBundle\Entity\EntitySignature();
  6467.                 $record->setUserId($applicantId);
  6468.                 $record->setCreatedAt(new \DateTime());
  6469.             }
  6471.             $record->setCompanyId($companyId);
  6472.             $record->setApplicantId($applicantId);
  6473.             $record->setData($signatureData);
  6474.             $record->setSigExists(0);
  6475.             $record->setLastDecryptedSigId(0);
  6476.             $record->setUpdatedAt(new \DateTime());
  6477.             $em->persist($record);
  6478.             $em->flush();
  6479.             $dataByServerId = [];
  6480.             $gocDataListByAppId = [];
  6481.             foreach ($companies as $entry) {
  6482.                 $gocDataListByAppId[$entry->getAppId()] = [
  6483.                     'dbName' => $entry->getDbName(),
  6484.                     'dbUser' => $entry->getDbUser(),
  6485.                     'dbPass' => $entry->getDbPass(),
  6486.                     'dbHost' => $entry->getDbHost(),
  6487.                     'serverAddress' => $entry->getCompanyGroupServerAddress(),
  6488.                     'port' => $entry->getCompanyGroupServerPort() ?: 80,
  6489.                     'appId' => $entry->getAppId(),
  6490.                     'serverId' => $entry->getCompanyGroupServerId(),
  6491.                 ];
  6492.                 if (!isset($dataByServerId[$entry->getCompanyGroupServerId()]))
  6493.                     $dataByServerId[$entry->getCompanyGroupServerId()] = array(
  6496.                         'serverId' => $entry->getCompanyGroupServerId(),
  6497.                         'serverAddress' => $entry->getCompanyGroupServerAddress(),
  6498.                         'port' => $entry->getCompanyGroupServerPort() ?: 80,
  6499.                         'payload' => array(
  6500.                             'globalId' => $applicantId,
  6501.                             'companyId' => $userAppIds,
  6502.                             'signatureData' => $signatureData,
  6503. //                                      'approvalHash' => $approvalHash
  6504.                         )
  6505.                     );
  6506.             }
  6509.             $urls = [];
  6512.             foreach ($dataByServerId as $entry) {
  6513.                 $serverAddress = $entry['serverAddress'];
  6514.                 if (!$serverAddress) continue;
  6517. //                     $connector = $this->container->get('application_connector');
  6518. //                     $connector->resetConnection(
  6519. //                         'default',
  6520. //                         $entry['dbName'],
  6521. //                         $entry['dbUser'],
  6522. //                         $entry['dbPass'],
  6523. //                         $entry['dbHost'],
  6524. //                         $reset = true
  6525. //                     );
  6528.                 $syncUrl = $serverAddress . '/ReceiveSignatureFromCentral';
  6530.                 $payload = $entry['payload'];
  6532.                 $curl = curl_init();
  6533.                 curl_setopt_array($curl, [
  6534.                     CURLOPT_RETURNTRANSFER => true,
  6535.                     CURLOPT_POST => true,
  6536.                     CURLOPT_URL => $syncUrl,
  6537. //                         CURLOPT_PORT => $entry['port'],
  6538.                     CURLOPT_CONNECTTIMEOUT => 10,
  6539.                     CURLOPT_SSL_VERIFYPEER => false,
  6540.                     CURLOPT_SSL_VERIFYHOST => false,
  6541.                     CURLOPT_HTTPHEADER => [
  6542.                         'Accept: application/json',
  6543.                         'Content-Type: application/json'
  6544.                     ],
  6545.                     CURLOPT_POSTFIELDS => json_encode($payload)
  6546.                 ]);
  6548.                 $response = curl_exec($curl);
  6549.                 $err = curl_error($curl);
  6550.                 $httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
  6551.                 curl_close($curl);
  6554. //                     if ($err) {
  6555. //                         error_log("ERP Sync Error [AppID $appId]: $err");
  6556. //                          $urls[]=$err;
  6557. //                     } else {
  6558. //                         error_log("ERP Sync Response [AppID $appId] (HTTP $httpCode): $response");
  6559. //                         $res = json_decode($response, true);
  6560. //                         if (!isset($res['success']) || !$res['success']) {
  6561. //                             error_log("❗ ERP Sync error for AppID $appId: " . ($res['message'] ?? 'Unknown'));
  6562. //                         }
  6563. //
  6564. //                      $urls[]=$response;
  6565. //                     }
  6566.             }
  6569.             return new JsonResponse(['success' => true, 'message' => 'Signature synced successfully.']);
  6571.         } catch (\Exception $e) {
  6572.             return new JsonResponse(['success' => false, 'message' => 'DB error: ' . $e->getMessage()], 500);
  6573.         }
  6574.     }
  6575.  //datev cntroller
  6576.     public function connectDatev(Request $request)
  6577.     {
  6578.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  6579.         $redirectUri = "https://ourhoneybee.eu/datev/callback";
  6581.         $state = bin2hex(random_bytes(10));
  6582.         $scope = "openid profile email accounting:documents accounting:dxso-jobs accounting:clients:read datev:accounting:extf-files-import datev:accounting:clients";
  6583.         $codeVerifier = bin2hex(random_bytes(32));
  6584.         $codeChallenge = rtrim(strtr(base64_encode(hash('sha256', $codeVerifier, true)), '+/', '-_'), '=');
  6586.         $session = $request->getSession();
  6587.         $applicantId = $session->get(UserConstants::APPLICANT_ID);
  6589.         $em_goc = $this->getDoctrine()->getManager('company_group');
  6592.         $token = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  6593.             ->findOneBy(['userId' => $applicantId]);
  6595.         if (!$token) {
  6596.             $token = new EntityDatevToken();
  6597.             $token->setUserId($applicantId);
  6598.         }
  6600.         $token->setState($state);
  6601.         $token->setCodeChallenge($codeChallenge);
  6602.         $token->setCodeVerifier($codeVerifier);
  6604.         $em_goc->persist($token);
  6605.         $em_goc->flush();
  6607.         $url = "https://login.datev.de/openidsandbox/authorize?"
  6608.             ."response_type=code"
  6609.             ."&client_id=".$clientId
  6610.             ."&state=".$state
  6611.             ."&scope=".urlencode($scope)
  6612.             ."&redirect_uri=".urlencode($redirectUri)
  6613.             ."&code_challenge=".$codeChallenge
  6614.             ."&code_challenge_method=S256"
  6615.             ."&prompt=login";
  6617.         return $this->redirect($url);
  6618.     }
  6619.     public function datevCallback(Request $request)
  6620.     {
  6621.         $code  = $request->get('code');
  6622.         $state = $request->get('state');
  6624.         if (!$code || !$state) {
  6625.             return new Response("Invalid callback request");
  6626.         }
  6628.         $em_goc = $this->getDoctrine()->getManager('company_group');
  6629.         $tokenEntity = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  6630.             ->findOneBy(['state' => $state]);
  6632.         if (!$tokenEntity) {
  6633.             return new Response("Invalid or expired state");
  6634.         }
  6637.         $codeVerifier = $tokenEntity->getCodeVerifier();
  6639.         if (!$codeVerifier) {
  6640.             return new Response("Code verifier missing");
  6641.         }
  6643.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  6644.         $clientSecret = "9b1c4e72a966e9f231584393ff1d3469";
  6646.         // from parameters
  6647. //        $clientId= $this->getContainer()->getParameter('datev_client_id');
  6648. //        $clientSecret= $this->getContainer()->getParameter('datev_client_secret');
  6650.         $authString = base64_encode($clientId . ":" . $clientSecret);
  6651.         $redirectUri = "https://ourhoneybee.eu/datev/callback";
  6654.         $postFields = http_build_query([
  6655.             "grant_type"    => "authorization_code",
  6656.             "code"          => $code,
  6657.             "redirect_uri"  => $redirectUri,
  6658.             "client_id"     => $clientId,
  6659.             "code_verifier" => $codeVerifier
  6660.         ]);
  6662.         $ch = curl_init();
  6664.         curl_setopt_array($ch, [
  6665.             CURLOPT_URL            => "https://sandbox-api.datev.de/token",
  6666.             CURLOPT_POST           => true,
  6667.             CURLOPT_RETURNTRANSFER => true,
  6668.             CURLOPT_POSTFIELDS     => $postFields,
  6669.             CURLOPT_HTTPHEADER     => [
  6670.                 "Content-Type: application/x-www-form-urlencoded",
  6671.                 "Authorization: Basic " . $authString
  6672.             ]
  6673.         ]);
  6675.         $response = curl_exec($ch);
  6677.         if (curl_errno($ch)) {
  6678.             return new Response("cURL Error: " . curl_error($ch), 500);
  6679.         }
  6681.         curl_close($ch);
  6683.         $data = json_decode($response, true);
  6685.         if (!$data) {
  6686.             return new Response("Invalid token response", 500);
  6687.         }
  6689.         if (isset($data['access_token'])) {
  6691.             $tokenEntity->setAccessToken($data['access_token']);
  6692.             $session = $request->getSession();  //remove it later
  6693.             $session->set('DATEV_ACCESS_TOKEN', $data['access_token']);
  6695.             if (isset($data['refresh_token'])) {
  6696.                 $tokenEntity->setRefreshToken($data['refresh_token']);
  6697.             }
  6699.             if (isset($data['expires_in'])) {
  6700.                 $tokenEntity->setExpiresAt(time() + $data['expires_in']);
  6701.             }
  6704. //            $tokenEntity->setState(null);
  6705.             $tokenEntity->setCode($code);
  6707.             $em_goc->flush();
  6709.             return $this->redirect("/datev/home");
  6710.         }
  6712.         return new Response(
  6713.             "Token exchange failed: " . json_encode($data),
  6714.             400
  6715.         );
  6716.     }
  6718.     public function refreshToken(Request $request)
  6719.     {
  6720.         $em_goc = $this->getDoctrine()->getManager('company_group');
  6721.         $session = $request->getSession();
  6722.         $applicantId = $session->get(UserConstants::APPLICANT_ID);
  6724.         $token = $em_goc->getRepository('CompanyGroupBundle\\Entity\\EntityDatevToken')
  6725.             ->findOneBy(['userId' => $applicantId]);
  6727.         if (!$token) {
  6728.             return new JsonResponse([
  6729.                 'status' => false,
  6730.                 'message' => 'User token not found'
  6731.             ]);
  6732.         }
  6735.         if (!$token->getRefreshToken()) {
  6736.             return new JsonResponse([
  6737.                 'status' => false,
  6738.                 'message' => 'No refresh token available'
  6739.             ]);
  6740.         }
  6742.         $clientId = "51b09bdcf577c5b998cddce7fe7d5c92";
  6743.         $clientSecret = "9b1c4e72a966e9f231584393ff1d3469";
  6745.         $authString = base64_encode($clientId . ":" . $clientSecret);
  6747.         $postFields = http_build_query([
  6748.             "grant_type" => "refresh_token",
  6749.             "refresh_token" => $token->getRefreshToken(),
  6750.         ]);
  6752.         $ch = curl_init();
  6754.         curl_setopt_array($ch, [
  6755.             CURLOPT_URL => "https://sandbox-api.datev.de/token",
  6756.             CURLOPT_POST => true,
  6757.             CURLOPT_RETURNTRANSFER => true,
  6758.             CURLOPT_POSTFIELDS => $postFields,
  6759.             CURLOPT_HTTPHEADER => [
  6760.                 "Content-Type: application/x-www-form-urlencoded",
  6761.                 "Authorization: Basic " . $authString
  6762.             ]
  6763.         ]);
  6765.         $response = curl_exec($ch);
  6767.         if (curl_errno($ch)) {
  6768.             return new JsonResponse([
  6769.                 'status' => false,
  6770.                 'message' => curl_error($ch)
  6771.             ]);
  6772.         }
  6774.         curl_close($ch);
  6776.         $data = json_decode($response, true);
  6778.         if (!isset($data['access_token'])) {
  6779.             return new JsonResponse([
  6780.                 'status' => false,
  6781.                 'message' => 'Refresh failed',
  6782.                 'error' => $data
  6783.             ]);
  6784.         }
  6787.         $token->setAccessToken($data['access_token']);
  6789.         if (isset($data['refresh_token'])) {
  6790.             $token->setRefreshToken($data['refresh_token']);
  6791.         }
  6792.         $token->setExpiresAt(time() + $data['expires_in']);
  6793.         $em_goc->flush();
  6794.         return new JsonResponse([
  6795.             'status' => true,
  6796.             'message' => 'Token refreshed successfully'
  6797.         ]);
  6798.     }
  6800.     public function registerDevice(Request $request)
  6801.     {
  6802.         $em_goc = $this->getDoctrine()->getManager('company_group');
  6804.         $data = json_decode($request->getContent(), true);
  6806.         if (!$data) {
  6807.             $data = $request->request->all();
  6808.         }
  6810.         $deviceSerial = $data['device_id'] ?? null;
  6812.         if (!$deviceSerial) {
  6813.             return new JsonResponse([
  6814.                 'success' => false,
  6815.                 'message' => 'Device serial is required',
  6816.                 'data' => null
  6817.             ], 400);
  6818.         }
  6820.         $device =  $em_goc->getRepository('CompanyGroupBundle\\Entity\\Device')
  6821.             ->findOneBy(['deviceSerial' => $deviceSerial]);
  6823.         if (!$device) {
  6824.             $device = new Device();
  6825.             $device->setDeviceSerial($deviceSerial);
  6826.             $message = 'Device registered successfully';
  6827.         } else {
  6828.             $message = 'Device updated successfully';
  6829.         }
  6831.         if (isset($data['deviceName'])) {
  6832.             $device->setDeviceName($data['deviceName']);
  6833.         }
  6835.         if (isset($data['appId'])) {
  6836.             $device->setAppId($data['appId']);
  6837.         }
  6839.         if (isset($data['deviceType'])) {
  6840.             $device->setDeviceType($data['deviceType']);
  6841.         }
  6843.         if (isset($data['deviceMarker'])) {
  6844.             $device->setDeviceMarker($data['deviceMarker']);
  6845.         }
  6847.         if (isset($data['timezoneStr'])) {
  6848.             $device->setTimezoneStr($data['timezoneStr']);
  6849.         }
  6851.         if (isset($data['hostname'])) {
  6852.             $device->setHostName($data['hostname']);
  6853.         }
  6855.         $em_goc->persist($device);
  6856.         $em_goc->flush();
  6858.         return new JsonResponse([
  6859.             'success' => true,
  6860.             'message' => $message,
  6861.             'data' => [
  6862.                 'id' => $device->getId(),
  6863.                 'deviceSerial' => $device->getDeviceSerial(),
  6864.                 'deviceName' => $device->getDeviceName(),
  6865.                 'deviceType' => $device->getDeviceType(),
  6866.                 'hostName' => $device->getHostName(),
  6867.             ]
  6868.         ]);
  6869.     }
  6870.     public function khorchapatiTermsAndConditions()
  6871.     {
  6872.              return $this->render('@HoneybeeWeb/pages/khorchapati_terms_and_conditions.html.twig', array(
  6873.             'page_title' => 'Privacy and Policy — Khorchapati',
  6874.         ));
  6876.             
  6877.     }
  6878.     // HoneyCore (mobile app) privacy policy — public, store-listing URL /honeycore/privacy
  6879.     public function honeycorePrivacyPolicy()
  6880.     {
  6881.         return $this->render('@HoneybeeWeb/pages/honeycore_privacy.html.twig', array(
  6882.             'page_title'     => 'Privacy Policy — HoneyCore Mobile',
  6883.             'og_title'       => 'HoneyCore Mobile Privacy Policy',
  6884.             'og_description' => 'What the HoneyCore field app (Android and iOS) collects, why, where it goes and how long it is kept — no analytics, no location, no trackers.',
  6885.         ));
  6886.     }
  6888.     public function milkShareTermsAndConditions()
  6889.     {
  6890.         return $this->render('@HoneybeeWeb/pages/milkshare-terms-and-conditions.html.twig', array(
  6891.             'page_title' => 'Terms and Conditions — Milkshare',
  6892.         ));
  6895.     }
  6897. }