File controllers/class-wc-stripe-controller-payment-intent.php

  1   2   3   4   5   6   7   8   9  10  11  12  13  14  15  16  17  18  19  20  21  22  23  24  25  26  27  28  29  30  31  32  33  34  35  36  37  38  39  40  41  42  43  44  45  46  47  48  49  50  51  52  53  54  55  56  57  58  59  60  61  62  63  64  65  66  67  68  69  70  71  72  73  74  75  76  77  78  79  80  81  82  83  84  85  86  87  88  89  90  91  92  93  94  95  96  97  98  99 100 101 102 103 104 105 106

<?php
defined( 'ABSPATH' ) || exit();

/**
 * Controller which handles Payment Intent related actions such as creation.
 *
 * @author PaymentPlugins
 * @package Stripe/Controllers
 *
 */
class WC_Stripe_Controller_Payment_Intent extends WC_Stripe_Rest_Controller {

    protected $namespace = '';

    public function register_routes() {
        register_rest_route(
            $this->rest_uri(),
            'setup-intent',
            array(
                'methods'             => WP_REST_Server::CREATABLE,
                'permission_callback' => '__return_true',
                'callback'            => array(
                    $this,
                    'create_setup_intent',
                ),
                'args'                => array(
                    'payment_method' => array(
                        'required' => true
                    )
                )
            )
        );
        register_rest_route(
            $this->rest_uri(),
            'sync-payment-intent',
            array(
                'methods'             => WP_REST_Server::CREATABLE,
                'callback'            => array( $this, 'sync_payment_intent' ),
                'permission_callback' => '__return_true',
                'args'                => array(
                    'order_id'      => array( 'required' => true ),
                    'client_secret' => array( 'required' => true ),
                ),
            )
        );
    }

    /**
     *
     * @param WP_REST_Request $request
     */
    public function create_setup_intent( $request ) {
        /**
         * @var WC_Payment_Gateway_Stripe $payment_method
         */
        $payment_method = WC()->payment_gateways()->payment_gateways()[ $request['payment_method'] ];
        $params         = array( 'usage' => 'off_session' );
        // @3.3.12 - check if 3DS is being forced
        if ( $payment_method->is_active( 'force_3d_secure' ) ) {
            $params['payment_method_options']['card']['request_three_d_secure'] = 'any';
        }
        $intent = $payment_method->payment_object->get_gateway()->setupIntents->create( $params );
        try {
            if ( is_wp_error( $intent ) ) {
                throw new Exception( $intent->get_error_message() );
            }

            return rest_ensure_response( array( 'intent' => array( 'client_secret' => $intent->client_secret ) ) );
        } catch ( Exception $e ) {
            return new WP_Error(
                'payment-intent-error',
                sprintf( __( 'Error creating payment intent. Reason: %s', 'woo-stripe-payment' ), $e->getMessage() ),
                array(
                    'status' => 200,
                )
            );
        }
    }

    /**
     *
     * @param WP_REST_Request $request
     */
    public function sync_payment_intent( $request ) {
        try {
            $order = wc_get_order( absint( $request->get_param( 'order_id' ) ) );
            if ( ! $order ) {
                throw new Exception( __( 'Invalid order id provided', 'woo-stripe-payment' ) );
            }

            $intent = WC_Stripe_Gateway::load()->paymentIntents->retrieve( $order->get_meta( WC_Stripe_Constants::PAYMENT_INTENT_ID ) );

            if ( ! hash_equals( $intent->client_secret, $request->get_param( 'client_secret' ) ) ) {
                throw new Exception( __( 'You are not authorized to update this order.', 'woo-stripe-payment' ) );
            }

            $order->update_meta_data( WC_Stripe_Constants::PAYMENT_INTENT, $intent->jsonSerialize() );
            $order->save();

            return rest_ensure_response( array( 'success' => true ) );
        } catch ( Exception $e ) {
            return new WP_Error( 'payment-intent-error', $e->getMessage(), array( 'status' => 200 ) );
        }
    }
}

Namespaces

Classes

Traits

Functions