POS Integrations

import os, hmac, hashlib, base64, re, requests
from flask import Flask, request

app = Flask(__name__)

SQUARE_SIGNATURE_KEY = os.environ['SQUARE_SIGNATURE_KEY'].encode()
SQUARE_ACCESS_TOKEN  = os.environ['SQUARE_ACCESS_TOKEN']
TABSY_API_KEY        = os.environ['TABSY_API_KEY']
SQUARE_BASE = 'https://connect.squareup.com'   # use squareupsandbox.com for sandbox
TABSY_URL   = 'https://zhnyoztnyvudmqpbikrj.supabase.co/functions/v1/pos-receipt'
SQ_HEADERS  = {'Authorization': f'Bearer {SQUARE_ACCESS_TOKEN}', 'Square-Version': '2024-01-18'}

def extract_member_code(s):
    m = re.search(r'TABSY:([A-Z0-9]{4,12})', (s or '').upper())
    return m.group(1) if m else None

@app.route('/webhooks/square', methods=['POST'])
def square_webhook():
    # Verify HMAC signature
    proto = request.headers.get('X-Forwarded-Proto', 'https')
    host  = request.headers.get('X-Forwarded-Host', request.host)
    url   = f'{proto}://{host}{request.path}'
    sig   = base64.b64encode(hmac.new(SQUARE_SIGNATURE_KEY, (url + request.get_data(as_text=True)).encode(), hashlib.sha256).digest())
    if not hmac.compare_digest(sig, request.headers.get('X-Square-Hmacsha256-Signature', '').encode()):
        return '', 200

    event = request.get_json()
    if event.get('type') != 'payment.created':
        return '', 200

    # Re-fetch full payment to get order_id
    pay_id  = event['data']['object']['payment']['id']
    payment = requests.get(f'{SQUARE_BASE}/v2/payments/{pay_id}', headers=SQ_HEADERS).json().get('payment', {})

    # Fetch order for line items and member code
    items, member_code = [], None
    if order_id := payment.get('order_id'):
        order = requests.get(f'{SQUARE_BASE}/v2/orders/{order_id}', headers=SQ_HEADERS).json().get('order', {})
        member_code = extract_member_code(order.get('reference_id')) or extract_member_code(order.get('note'))
        items = [{'name': li['name'], 'price': li['base_price_money']['amount'] / 100,
                  'qty': int(li.get('quantity', 1))} for li in order.get('line_items', [])]

    if member_code:        identifier = {'member_code': member_code}
    elif payment.get('buyer_email_address'): identifier = {'email': payment['buyer_email_address']}
    else:                  identifier = {}

    requests.post(TABSY_URL, headers={'Authorization': f'Bearer {TABSY_API_KEY}'}, json={
        'external_id':  payment['id'],
        'identifier':   identifier,
        'total':         payment['amount_money']['amount'] / 100,
        'currency':      payment['amount_money']['currency'],
        'receipt_date':  payment['created_at'],
        'items':         items,
    }, timeout=10)
    return '', 200

if __name__ == '__main__':
    app.run(port=3000)

requests.post(
    f'https://{SHOP}.myshopify.com/admin/api/2024-01/webhooks.json',
    json={'webhook': {'topic': 'orders/paid',
                   'address': 'https://yourserver.com/webhooks/shopify',
                   'format': 'json'}},
    headers={'X-Shopify-Access-Token': SHOPIFY_TOKEN},
)

import os, hmac, hashlib, base64, requests
from flask import Flask, request

app = Flask(__name__)

SHOPIFY_SECRET = os.environ['SHOPIFY_WEBHOOK_SECRET'].encode()
TABSY_API_KEY  = os.environ['TABSY_API_KEY']
TABSY_URL      = 'https://zhnyoztnyvudmqpbikrj.supabase.co/functions/v1/pos-receipt'

def verify_shopify(req):
    digest = base64.b64encode(
        hmac.new(SHOPIFY_SECRET, req.get_data(), hashlib.sha256).digest()
    )
    return hmac.compare_digest(
        digest, req.headers.get('X-Shopify-Hmac-Sha256', '').encode()
    )

@app.route('/webhooks/shopify', methods=['POST'])
def shopify_webhook():
    if not verify_shopify(request):
        return '', 401

    order = request.get_json()

    # Prefer member code from note attributes
    member_code = next(
        (a['value'] for a in order.get('note_attributes', [])
         if a['name'] == 'tabsy_member_code'), None
    )
    cust = order.get('customer') or {}
    if member_code:
        identifier = {'member_code': member_code}
    elif cust.get('email'):
        identifier = {'email': cust['email']}
    elif cust.get('phone'):
        identifier = {'phone': cust['phone']}
    else:
        identifier = {}

    items = [
        {'name': li['title'], 'price': float(li['price']),
         'qty': li['quantity'], 'sku': li.get('sku') or None}
        for li in order.get('line_items', [])
    ]

    requests.post(TABSY_URL,
        json={
            'external_id':  str(order['id']),
            'identifier':   identifier,
            'total':         float(order['total_price']),
            'currency':      order['currency'],
            'receipt_date':  order['created_at'],
            'items':         items,
        },
        headers={'Authorization': f'Bearer {TABSY_API_KEY}'},
        timeout=10,
    )
    return '', 200

if __name__ == '__main__':
    app.run(port=3000)

import os, requests
from flask import Flask, request

app = Flask(__name__)

TABSY_API_KEY = os.environ['TABSY_API_KEY']
DEFAULT_CCY   = 'AED'  # set your outlet's default currency
TABSY_URL     = 'https://zhnyoztnyvudmqpbikrj.supabase.co/functions/v1/pos-receipt'

@app.route('/webhooks/lightspeed', methods=['POST'])
def lightspeed_webhook():
    body = request.get_json()
    sale = body.get('sale', body)

    cust = sale.get('customer') or {}
    # Check custom customer field for member code
    member_code = cust.get('custom_field_1')  # configure your field name
    if member_code:
        identifier = {'member_code': member_code}
    elif cust.get('email'):
        identifier = {'email': cust['email']}
    elif cust.get('phone'):
        identifier = {'phone': cust['phone']}
    else:
        identifier = {}

    items = [
        {'name': li.get('product', {}).get('name', li.get('name', '')),
         'price': float(li.get('price', li.get('unit_price', 0))),
         'qty': float(li.get('quantity', 1)),
         'sku': li.get('product', {}).get('sku') or None}
        for li in sale.get('line_items', [])
        if li.get('type') != 'payment'
    ]

    requests.post(TABSY_URL,
        json={
            'external_id':  str(sale['id']),
            'identifier':   identifier,
            'total':         float(sale['total_price']),
            'currency':      sale.get('currency', DEFAULT_CCY),
            'receipt_date':  sale['sale_date'],
            'items':         items,
        },
        headers={'Authorization': f'Bearer {TABSY_API_KEY}'},
        timeout=10,
    )
    return '', 200

if __name__ == '__main__':
    app.run(port=3000)

import os, requests as http

TABSY_API_KEY = os.environ['TABSY_API_KEY']
TABSY_URL     = 'https://zhnyoztnyvudmqpbikrj.supabase.co/functions/v1/pos-receipt'

def send_to_tabsy(sale: dict):
    """Call after every completed sale."""
    identifier = {}
    if sale.get('tabsy_member_code'): identifier['member_code'] = sale['tabsy_member_code']
    elif sale.get('customer_email'):   identifier['email']       = sale['customer_email']
    elif sale.get('customer_phone'):   identifier['phone']       = sale['customer_phone']

    res = http.post(
        TABSY_URL,
        json={
            'external_id':         sale['id'],
            'identifier':          identifier,
            'total':                sale['total'],
            'currency':             sale['currency'],       # e.g. "AED"
            'receipt_date':         sale['completed_at'],    # ISO 8601
            'return_window_days':   sale.get('return_days'),
            'items': [
                {
                    'name':            i['name'],
                    'price':           i['unit_price'],
                    'qty':             i['quantity'],
                    'sku':             i.get('sku'),
                    'warranty_months': i.get('warranty'),
                    'category':        i.get('category'),
                }
                for i in sale['items']
            ],
        },
        headers={'Authorization': f'Bearer {TABSY_API_KEY}'},
        timeout=10,
    )
    if not res.ok:
        print(f'Tabsy error {res.status_code}: {res.text}')