Étape 2 : Flux de paiement

const express = require("express");
const fetch = require("node-fetch");
const app = express();

app.use(express.json());

// 1. Créer la commande et rediriger vers le paiement
app.post("/checkout", async (req, res) => {
  const { items, total, customerId } = req.body;

  try {
    // Créer la commande en base de données
    const orderId = generateOrderId();
    await db.orders.create({
      id: orderId,
      customerId: customerId,
      items: items,
      total: total,
      status: "PENDING",
    });

    // Créer le lien de paiement
    const response = await fetch(
      "https://api.oneclickdz.com/v3/ocpay/createLink",
      {
        method: "POST",
        headers: {
          "Content-Type": "application/json",
          "X-Access-Token": process.env.ONECLICK_API_KEY,
        },
        body: JSON.stringify({
          productInfo: {
            title: `Order ${orderId}`,
            amount: total,
          },
          redirectUrl: `https://yoursite.com/orders/${orderId}`,
        }),
      }
    );

    const data = await response.json();

    // IMPORTANT : Sauvegarder paymentRef avec la commande
    await db.orders.update(orderId, {
      paymentRef: data.data.paymentRef,
    });

    // Rediriger vers la page de paiement
    res.redirect(data.data.paymentUrl);
  } catch (error) {
    console.error("Checkout error:", error);
    res.status(500).json({ error: "Checkout failed" });
  }
});

// 2. Page de statut de commande
app.get("/orders/:orderId", async (req, res) => {
  const { orderId } = req.params;

  try {
    const order = await db.orders.findOne({ id: orderId });

    if (!order) {
      return res.status(404).send("Order not found");
    }

    // Check payment if still pending
    if (order.status === "PENDING" && order.paymentRef) {
      const statusResponse = await fetch(
        `https://api.oneclickdz.com/v3/ocpay/checkPayment/${order.paymentRef}`,
        {
          headers: { "X-Access-Token": process.env.ONECLICK_API_KEY },
        }
      );

      const statusData = await statusResponse.json();

      if (statusData.data.status === "CONFIRMED") {
        await db.orders.update(orderId, { status: "PAID" });
        order.status = "PAID";
      } else if (statusData.data.status === "FAILED") {
        await db.orders.update(orderId, { status: "FAILED" });
        order.status = "FAILED";
      }
    }

    res.render("order-status", { order });
  } catch (error) {
    console.error("Error:", error);
    res.status(500).send("Error loading order");
  }
});

// 3. Endpoint de vérification manuelle du paiement
app.post("/orders/:orderId/check", async (req, res) => {
  const { orderId } = req.params;

  try {
    const order = await db.orders.findOne({ id: orderId });

    if (!order || !order.paymentRef) {
      return res.status(404).json({ error: "Order not found" });
    }

    const response = await fetch(
      `https://api.oneclickdz.com/v3/ocpay/checkPayment/${order.paymentRef}`,
      {
        headers: { "X-Access-Token": process.env.ONECLICK_API_KEY },
      }
    );

    const data = await response.json();

    // Mettre à jour le statut de la commande
    if (data.data.status === "CONFIRMED") {
      await db.orders.update(orderId, { status: "PAID" });
    } else if (data.data.status === "FAILED") {
      await db.orders.update(orderId, { status: "FAILED" });
    }

    res.json({ status: data.data.status });
  } catch (error) {
    console.error("Check error:", error);
    res.status(500).json({ error: "Check failed" });
  }
});

function generateOrderId() {
  return `ORD-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
}

app.listen(3000);