|,,...,
+ :param code: A valid code as a string between 01 and 07.
+ :param uuids: A list of uuids returned by the government.
+ :return: A valid string to be put inside the l10n_mx_edi_origin field.
+ """
+ return "%s|%s" % (code, ",".join(uuids))
+
+ @api.model
+ def _l10n_mx_edi_read_cfdi_origin(self, cfdi_origin):
+ splitted = cfdi_origin.split("|")
+ if len(splitted) != 2:
+ return False
+
+ try:
+ code = int(splitted[0])
+ except ValueError:
+ return False
+
+ if code < 1 or code > 7:
+ return False
+ return splitted[0], [uuid.strip() for uuid in splitted[1].split(",")]
+
+ # -------------------------------------------------------------------------
+ # COMPUTE METHODS
+ # -------------------------------------------------------------------------
+
+ @api.depends("edi_document_ids")
+ def _compute_cfdi_values(self):
+ """Fill the invoice fields from the cfdi values."""
+ for payslip in self:
+ cfdi_infos = payslip._l10n_mx_hr_payroll_edi_decode_cfdi()
+ _logger.info("_compute_cfdi_values --->> " + str(cfdi_infos))
+ if cfdi_infos.get("uuid"):
+ payslip.l10n_mx_edi_state_pac = "signed"
+ else:
+ payslip.l10n_mx_edi_state_pac = "no_signed"
+ payslip.l10n_mx_edi_cfdi_uuid = cfdi_infos.get("uuid")
+ payslip.l10n_mx_edi_cfdi_supplier_rfc = cfdi_infos.get("supplier_rfc")
+ payslip.l10n_mx_edi_cfdi_customer_rfc = cfdi_infos.get("customer_rfc")
+ payslip.l10n_mx_edi_cfdi_amount = cfdi_infos.get("amount_total")
diff --git a/l10n_mx_hr_payroll_edi/models/l10n_mx_hr_payroll_certificate.py b/l10n_mx_hr_payroll_edi/models/l10n_mx_hr_payroll_certificate.py
new file mode 100644
index 0000000..732c9fe
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/models/l10n_mx_hr_payroll_certificate.py
@@ -0,0 +1,245 @@
+import base64
+import logging
+import ssl
+import subprocess
+import tempfile
+from datetime import datetime
+
+from lxml import etree, objectify
+from pytz import timezone
+
+from odoo import _, api, fields, models, tools
+from odoo.exceptions import UserError, ValidationError
+from odoo.tools.misc import DEFAULT_SERVER_DATETIME_FORMAT
+
+_logger = logging.getLogger(__name__)
+_tzmx = timezone("America/Mexico_City")
+
+try:
+ from OpenSSL import crypto
+except ImportError:
+ _logger.warning(
+ "OpenSSL library not found. If you plan to use l10n_mx_edi, please "
+ "install the library from https://pypi.python.org/pypi/pyOpenSSL"
+ )
+
+
+KEY_TO_PEM_CMD = "openssl pkcs8 -in %s -inform der -outform pem -out %s -passin file:%s"
+
+
+def convert_key_cer_to_pem(key, password):
+ # TODO compute it from a python way
+ with tempfile.NamedTemporaryFile(
+ "wb", suffix=".key", prefix="edi.mx.tmp."
+ ) as key_file, tempfile.NamedTemporaryFile(
+ "wb", suffix=".txt", prefix="edi.mx.tmp."
+ ) as pwd_file, tempfile.NamedTemporaryFile(
+ "rb", suffix=".key", prefix="edi.mx.tmp."
+ ) as keypem_file:
+ key_file.write(key)
+ key_file.flush()
+ pwd_file.write(password)
+ pwd_file.flush()
+ subprocess.call(
+ (KEY_TO_PEM_CMD % (key_file.name, keypem_file.name, pwd_file.name)).split()
+ )
+ key_pem = keypem_file.read()
+ return key_pem
+
+
+def str_to_datetime(dt_str, tz=_tzmx):
+ return tz.localize(fields.Datetime.from_string(dt_str))
+
+
+class CertificatePayroll(models.Model):
+ _name = "l10n_mx_payroll_edi.certificate"
+ _description = "SAT Digital Sail"
+ _order = "date_start desc, id desc"
+
+ content = fields.Binary(
+ string="Certificate",
+ help="Certificate in der format",
+ required=True,
+ attachment=False,
+ )
+ key = fields.Binary(
+ string="Certificate Key",
+ help="Certificate Key in der format",
+ required=True,
+ attachment=False,
+ )
+ password = fields.Char(
+ string="Certificate Password",
+ help="Password for the Certificate Key",
+ required=True,
+ )
+ serial_number = fields.Char(
+ string="Serial number",
+ help="The serial number to add to electronic documents",
+ readonly=True,
+ index=True,
+ )
+ date_start = fields.Datetime(
+ string="Available date",
+ help="The date on which the certificate starts to be valid",
+ readonly=True,
+ )
+ date_end = fields.Datetime(
+ string="Expiration date",
+ help="The date on which the certificate expires",
+ readonly=True,
+ )
+
+ @tools.ormcache("content")
+ def _get_pem_cer(self, content):
+ """Get the current content in PEM format"""
+ self.ensure_one()
+ return ssl.DER_cert_to_PEM_cert(base64.decodebytes(content)).encode("UTF-8")
+
+ @tools.ormcache("key", "password")
+ def _get_pem_key(self, key, password):
+ """Get the current key in PEM format"""
+ self.ensure_one()
+ return convert_key_cer_to_pem(base64.decodebytes(key), password.encode("UTF-8"))
+
+ def _get_data(self):
+ """Return the content (b64 encoded) and the certificate decrypted"""
+ self.ensure_one()
+ cer_pem = self._get_pem_cer(self.content)
+ certificate = crypto.load_certificate(crypto.FILETYPE_PEM, cer_pem)
+ for to_del in ["\n", ssl.PEM_HEADER, ssl.PEM_FOOTER]:
+ cer_pem = cer_pem.replace(to_del.encode("UTF-8"), b"")
+ return cer_pem, certificate
+
+ def get_mx_current_datetime(self):
+ """Get the current datetime with the Mexican timezone."""
+ return fields.Datetime.context_timestamp(
+ self.with_context(tz="America/Mexico_City"), fields.Datetime.now()
+ )
+
+ def get_valid_certificate(self):
+ """Search for a valid certificate that is available and not expired."""
+ mexican_dt = self.get_mx_current_datetime()
+ for record in self:
+ date_start = str_to_datetime(record.date_start)
+ date_end = str_to_datetime(record.date_end)
+ if date_start <= mexican_dt <= date_end:
+ return record
+ return None
+
+ def _get_encrypted_cadena(self, cadena):
+ """Encrypt the cadena using the private key."""
+ self.ensure_one()
+ key_pem = self._get_pem_key(self.key, self.password)
+ private_key = crypto.load_privatekey(crypto.FILETYPE_PEM, bytes(key_pem))
+ encrypt = "sha256WithRSAEncryption"
+ cadena_crypted = crypto.sign(private_key, bytes(cadena.encode()), encrypt)
+ return base64.b64encode(cadena_crypted)
+
+ @api.model
+ def _get_cadena_chain(self, xml_tree, xslt_path):
+ """Use the provided XSLT document to generate a pipe-delimited string
+ :param xml_tree: the source lxml document
+ :param xslt_path: Path to the XSLT document
+ :return: string
+ """
+ cadena_transformer = etree.parse(tools.file_open(xslt_path))
+ return str(etree.XSLT(cadena_transformer)(xml_tree))
+
+ def _certify_and_stamp(
+ self, xml_content_str, xslt_path, no_cert_attrib_name="NoCertificado"
+ ):
+ """Appends the seal stamp, certificate, and serial number to CFDI
+ documents
+ :param xml_content_str: The XML document string to certify and stamp
+ :param xslt_path: Path to the XSLT used to generate the cadena chain
+ (pipe delimited string of important values)
+ :param no_cert_attrib_name: string of the NoCertificado (default)
+ attribute which can be replaced with noCertificado
+ :return: A string of the XML with appended attributes: NoCertificado,
+ Certificado, Sello
+ """
+
+ self.ensure_one()
+ if not xml_content_str:
+ return None
+ tree = objectify.fromstring(xml_content_str)
+ tree.attrib[no_cert_attrib_name] = self.serial_number
+ tree.attrib["Certificado"] = self._get_data()[0]
+ cadena_chain = self._get_cadena_chain(tree, xslt_path)
+ sello = self._get_encrypted_cadena(cadena_chain)
+ tree.attrib["Sello"] = sello
+ return etree.tostring(
+ tree, pretty_print=True, xml_declaration=True, encoding="UTF-8"
+ )
+
+ @api.constrains("content", "key", "password")
+ def _check_credentials(self):
+ """Check the validity of content/key/password and fill the fields
+ with the certificate values.
+ """
+ mexican_tz = timezone("America/Mexico_City")
+ mexican_dt = self.get_mx_current_datetime()
+ date_format = "%Y%m%d%H%M%SZ"
+ for record in self:
+ # Try to decrypt the certificate
+ try:
+ certificate = record._get_data()[1]
+ before = mexican_tz.localize(
+ datetime.strptime(
+ certificate.get_notBefore().decode("utf-8"), date_format
+ )
+ )
+ after = mexican_tz.localize(
+ datetime.strptime(
+ certificate.get_notAfter().decode("utf-8"), date_format
+ )
+ )
+ serial_number = certificate.get_serial_number()
+ except UserError as exc_orm: # ;-)
+ raise exc_orm
+ except Exception as e:
+ raise ValidationError(
+ _("The certificate content is invalid " "%s.", e)
+ ) from e
+ # Assign extracted values from the certificate
+ record.serial_number = ("%x" % serial_number)[1::2]
+ record.date_start = before.strftime(DEFAULT_SERVER_DATETIME_FORMAT)
+ record.date_end = after.strftime(DEFAULT_SERVER_DATETIME_FORMAT)
+ if mexican_dt > after:
+ raise ValidationError(
+ _("The certificate is expired since %s", record.date_end)
+ )
+ # Check the pair key/password
+ try:
+ key_pem = self._get_pem_key(self.key, self.password)
+ crypto.load_privatekey(crypto.FILETYPE_PEM, key_pem)
+ except Exception:
+ raise ValidationError(
+ _("The certificate key and/or password is/are invalid.")
+ ) from None
+
+ @api.ondelete(at_uninstall=True)
+ def _unlink_except_invoices(self):
+ mx_edi = self.env.ref("l10n_mx_edi.edi_cfdi_3_3")
+ if (
+ self.env["account.edi.document"]
+ .sudo()
+ .search(
+ [
+ ("edi_format_id", "=", mx_edi.id),
+ ("state", "=", "sent"),
+ ],
+ limit=1,
+ )
+ ):
+ raise UserError(
+ _(
+ "You cannot remove a certificate if at least one invoice "
+ "has been signed. "
+ "Expired certificates will not be used as Odoo uses the "
+ "latest valid certificate. "
+ "To not use it, you can unlink it from the current company "
+ "certificates."
+ )
+ )
diff --git a/l10n_mx_hr_payroll_edi/models/payslip_edi_document.py b/l10n_mx_hr_payroll_edi/models/payslip_edi_document.py
new file mode 100644
index 0000000..093650c
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/models/payslip_edi_document.py
@@ -0,0 +1,69 @@
+# Part of Odoo. See LICENSE file for full copyright and licensing details.
+
+import base64
+import logging
+
+from odoo import api, fields, models
+
+_logger = logging.getLogger(__name__)
+
+
+class PayslipEdiDocument(models.Model):
+ _name = "payslip.edi.document"
+ _description = "Electronic Document for an hr.payslip"
+
+ # == Stored fields ==
+ payslip_id = fields.Many2one("hr.payslip", required=True, ondelete="cascade")
+ edi_format_id = fields.Many2one("account.edi.format", required=True)
+ attachment_id = fields.Many2one(
+ "ir.attachment",
+ help="The file generated by edi_format_id when the invoice is posted "
+ "(and this document is processed).",
+ )
+ state = fields.Selection(
+ [
+ ("to_send", "To Send"),
+ ("sent", "Sent"),
+ ("to_cancel", "To Cancel"),
+ ("cancelled", "Cancelled"),
+ ]
+ )
+ error = fields.Html(
+ help="The text of the last error that happened during Electronic Invoice operation."
+ )
+
+ # == Not stored fields ==
+ name = fields.Char(related="attachment_id.name")
+ edi_format_name = fields.Char(string="Format Name", related="edi_format_id.name")
+ edi_content = fields.Binary(compute="_compute_edi_content", compute_sudo=True)
+
+ _sql_constraints = [
+ (
+ "unique_edi_document_by_payslip_by_format",
+ "UNIQUE(edi_format_id, payslip_id)",
+ "Only one edi document by payslip by format",
+ ),
+ ]
+
+ @api.depends("payslip_id", "error", "state")
+ def _compute_edi_content(self):
+ for doc in self:
+ res = b""
+ if doc.state in ("to_send", "to_cancel"):
+ payslip = doc.payslip_id
+ config_errors = doc.edi_format_id._check_move_configuration(payslip)
+ if config_errors:
+ res = base64.b64encode("\n".join(config_errors).encode("UTF-8"))
+ else:
+ res = base64.b64encode(
+ doc.edi_format_id._get_payslip_edi_content(doc.payslip_id)
+ )
+ _logger.info("_compute_edi_content", res)
+ doc.edi_content = res
+
+ def action_export_xml(self):
+ self.ensure_one()
+ return {
+ "type": "ir.actions.act_url",
+ "url": "/web/content/account.edi.document/%s/edi_content" % self.id,
+ }
diff --git a/l10n_mx_hr_payroll_edi/models/res_company.py b/l10n_mx_hr_payroll_edi/models/res_company.py
new file mode 100644
index 0000000..361791a
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/models/res_company.py
@@ -0,0 +1,51 @@
+import logging
+
+from odoo import fields, models
+
+_logger = logging.getLogger(__name__)
+
+
+class ResCompany(models.Model):
+ _inherit = "res.company"
+
+ # == PAC web-services ==
+ l10n_mx_hr_payroll_edi_pac = fields.Selection(
+ selection=[
+ ("solfact", "Solución Factible"),
+ ("facturalo", "Factúralo"),
+ ("finkok", "Finkok"),
+ ("sw", "SW sapien-SmarterWEB"),
+ ("emaanu", "e-Maanu (Multipac)"),
+ ],
+ string="PAC for payroll",
+ help="The PAC that will sign/cancel the invoices",
+ default="emaanu",
+ )
+ l10n_mx_hr_payroll_edi_pac_test_env = fields.Boolean(
+ string="PAC test environment for payroll",
+ help="Enable the usage of test credentials",
+ default=False,
+ )
+ l10n_mx_hr_payroll_edi_pac_username = fields.Char(
+ string="PAC username for payroll",
+ help="The username used to request the seal from the PAC",
+ groups="base.group_system",
+ )
+ l10n_mx_hr_payroll_edi_pac_password = fields.Char(
+ string="PAC password for payroll",
+ help="The password used to request the seal from the PAC",
+ groups="base.group_system,hr_payroll.group_hr_payroll_manager",
+ )
+ l10n_mx_hr_payroll_edi_certificate_ids = fields.Many2many(
+ "l10n_mx_payroll_edi.certificate", string="Certificates (MX) for payroll"
+ )
+
+ l10n_mx_hr_payroll_mode2work = fields.Selection(
+ selection=[
+ ("stamp", "Stamp First and then create entries account"),
+ ("same_time", "Stamp and create entries account at the same time"),
+ ],
+ string="Payroll Work Method",
+ help="",
+ default="stamp",
+ )
diff --git a/l10n_mx_hr_payroll_edi/models/res_config_setting.py b/l10n_mx_hr_payroll_edi/models/res_config_setting.py
new file mode 100644
index 0000000..b067e0d
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/models/res_config_setting.py
@@ -0,0 +1,38 @@
+from odoo import fields, models
+
+
+class ResConfigSettings(models.TransientModel):
+ _inherit = "res.config.settings"
+
+ # == PAC web-services ==
+ l10n_mx_hr_payroll_edi_pac = fields.Selection(
+ related="company_id.l10n_mx_hr_payroll_edi_pac",
+ readonly=False,
+ string="MX PAC* for Payroll",
+ )
+ l10n_mx_hr_payroll_edi_pac_test_env = fields.Boolean(
+ related="company_id.l10n_mx_hr_payroll_edi_pac_test_env",
+ readonly=False,
+ string="MX PAC test environment* for Payroll",
+ )
+ l10n_mx_hr_payroll_edi_pac_username = fields.Char(
+ related="company_id.l10n_mx_hr_payroll_edi_pac_username",
+ readonly=False,
+ string="MX PAC username* for Patroll",
+ )
+ l10n_mx_hr_payroll_edi_pac_password = fields.Char(
+ related="company_id.l10n_mx_hr_payroll_edi_pac_password",
+ readonly=False,
+ string="MX PAC password* for payroll",
+ )
+ l10n_mx_hr_payroll_edi_certificate_ids = fields.Many2many(
+ related="company_id.l10n_mx_hr_payroll_edi_certificate_ids",
+ readonly=False,
+ string="MX Certificates* for payroll",
+ )
+
+ l10n_mx_hr_payroll_mode2work = fields.Selection(
+ related="company_id.l10n_mx_hr_payroll_mode2work",
+ readonly=False,
+ string="Payroll Work Method",
+ )
diff --git a/l10n_mx_hr_payroll_edi/pyproject.toml b/l10n_mx_hr_payroll_edi/pyproject.toml
new file mode 100644
index 0000000..4231d0c
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/pyproject.toml
@@ -0,0 +1,3 @@
+[build-system]
+requires = ["whool"]
+build-backend = "whool.buildapi"
diff --git a/l10n_mx_hr_payroll_edi/security/ir.model.access.csv b/l10n_mx_hr_payroll_edi/security/ir.model.access.csv
new file mode 100644
index 0000000..ff296e4
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/security/ir.model.access.csv
@@ -0,0 +1,3 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_l10n_mx_payroll_edi_certificate,l10n_mx_payroll_edi_certificate,model_l10n_mx_payroll_edi_certificate,hr_payroll.group_hr_payroll_user,1,1,1,1
+access_payslip_edi_document,payslip_edi_document,model_payslip_edi_document,hr_payroll.group_hr_payroll_user,1,1,1,1
diff --git a/l10n_mx_hr_payroll_edi/static/description/icon.png b/l10n_mx_hr_payroll_edi/static/description/icon.png
new file mode 100755
index 0000000..4da9a11
Binary files /dev/null and b/l10n_mx_hr_payroll_edi/static/description/icon.png differ
diff --git a/l10n_mx_hr_payroll_edi/static/src/scss/report.scss b/l10n_mx_hr_payroll_edi/static/src/scss/report.scss
new file mode 100644
index 0000000..d08db8b
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/static/src/scss/report.scss
@@ -0,0 +1,23 @@
+#complement {
+ page-break-before: auto;
+ page-break-inside: avoid;
+ div {
+ padding-top: 0.3em;
+ padding-bottom: 0.3em;
+ }
+ .barcode {
+ float: none;
+ }
+ .complement-details {
+ font-size: 8px;
+ }
+ div.digital-stamp {
+ background-color: grey;
+ color: white;
+ text-align: center;
+ font-weight: bold;
+ }
+ div.digital-stamp-content {
+ width: 93%;
+ }
+}
diff --git a/l10n_mx_hr_payroll_edi/views/hr_payslip.xml b/l10n_mx_hr_payroll_edi/views/hr_payslip.xml
new file mode 100644
index 0000000..ca9663d
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/views/hr_payslip.xml
@@ -0,0 +1,287 @@
+
+
+
+ hr.payslip.form.inherit_page_payroll_mx
+ hr.payslip
+ 100
+
+
+
+
+
+
+
+
+
+
+
+
+ hr.payslip.buttons.inherit_page_payroll_mx
+ hr.payslip
+
+
+
+
+
+
+
+
+ hr.payslip.form.inherit_page_payroll_mx_1
+ hr.payslip
+
+
+
+
+
+
+
+
+
+
+
+ hr.payslip.form.inherit_page_payroll_mx_3
+ hr.payslip
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ hr.payslip.tree.inherit_page_payroll_mx
+ hr.payslip
+
+
+
+
+
+
+
diff --git a/l10n_mx_hr_payroll_edi/views/res_config_settings.xml b/l10n_mx_hr_payroll_edi/views/res_config_settings.xml
new file mode 100644
index 0000000..b938c7d
--- /dev/null
+++ b/l10n_mx_hr_payroll_edi/views/res_config_settings.xml
@@ -0,0 +1,132 @@
+
+
+
+ res.config.settings.view.form.inherit.hr_payroll_mx
+ res.config.settings
+
+
+ Mexican EDI Payroll
+
+
+
+
+ MX PAC for payroll
+
+ Configure the Authorized Certification Provider (PAC).
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/requirements.txt b/requirements.txt
index cdb5551..21600ca 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,5 @@
# generated from manifests external_dependencies
facturama
pdfminer.six==20220319
+pyOpenSSL
+zeep