# ivyforms/1.5.1/backend/src/Controllers/Square/SquareAuthTokenController.php

The Innovative Form Builder – IvyForms, version 1.5.1. 70 lines.

- Page: https://pluginprobe.com/plugins/ivyforms/1.5.1/code/backend/src/Controllers/Square/SquareAuthTokenController.php
- Raw: https://pluginprobe.com/plugins/ivyforms/1.5.1/raw/backend/src/Controllers/Square/SquareAuthTokenController.php
- Modified: 2026-10-05T14:37:20+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/ivyforms/1.5.1/code/backend/src/Controllers/Square/SquareAuthTokenController.php#L10-L20`.

```php
<?php

namespace IvyForms\Controllers\Square;

use IvyForms\Services\Integrations\MiddlewareSignatureService;
use IvyForms\Services\Payment\SquareOAuthService;
use IvyForms\Services\Translations\BackendStrings;
use WP_REST_Request;
use WP_REST_Response;

/**
 * Server-to-server OAuth token delivery from ivyforms-middleware (POST only).
 */
class SquareAuthTokenController
{
    private SquareOAuthService $squareOAuthService;
    private MiddlewareSignatureService $middlewareSignatureService;

    public function __construct(
        SquareOAuthService $squareOAuthService,
        MiddlewareSignatureService $middlewareSignatureService
    ) {
        $this->squareOAuthService = $squareOAuthService;
        $this->middlewareSignatureService = $middlewareSignatureService;
    }

    public function __invoke(WP_REST_Request $data): WP_REST_Response
    {
        return $this->handle($data);
    }

    public function handle(WP_REST_Request $data): WP_REST_Response
    {
        $params = $data->get_json_params();
        if (!is_array($params)) {
            $params = $data->get_params();
        }

        if (!$this->middlewareSignatureService->verifyTokenDeliverySignature($params)) {
            return new WP_REST_Response(
                [
                    'message' => BackendStrings::getCommonStrings()['invalid_request_data'],
                    'data' => ['success' => false],
                ],
                403
            );
        }

        $result = $this->squareOAuthService->handleAuthCallback($params);

        if (!$result['success']) {
            return new WP_REST_Response(
                [
                    'message' => $result['message'] ?? BackendStrings::getPaymentStrings()['square_connect_failed'],
                    'data' => ['success' => false],
                ],
                400
            );
        }

        return new WP_REST_Response(
            [
                'message' => BackendStrings::getCommonStrings()['ok'],
                'data' => ['success' => true],
            ],
            200
        );
    }
}

```