# learnpress/4.3.9/inc/rest-api/v1/frontend/class-lp-rest-gateway-webhook-controller.php

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses, version 4.3.9. 135 lines.

- Page: https://pluginprobe.com/plugins/learnpress/4.3.9/code/inc/rest-api/v1/frontend/class-lp-rest-gateway-webhook-controller.php
- Raw: https://pluginprobe.com/plugins/learnpress/4.3.9/raw/inc/rest-api/v1/frontend/class-lp-rest-gateway-webhook-controller.php
- Modified: 2026-06-08T02:53:42+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/learnpress/4.3.9/code/inc/rest-api/v1/frontend/class-lp-rest-gateway-webhook-controller.php#L10-L20`.

```php
<?php
use LearnPress\Helpers\Response;

defined( 'ABSPATH' ) || exit();

if ( ! class_exists( 'LP_REST_Gateway_Webhook_Controller' ) ) {
	/**
	 * REST API endpoint for gateway subscription webhooks.
	 *
	 * @since 4.3.7
	 * @version 1.0.0
	 */
	class LP_REST_Gateway_Webhook_Controller extends LP_Abstract_REST_Controller {
		/**
		 * Configure REST namespace/base for gateway webhook routes.
		 *
		 * @return void
		 */
		public function __construct() {
			$this->namespace = 'lp/v1';
			$this->rest_base = 'gateways';

			parent::__construct();
		}

		/**
		 * Register public subscription webhook route.
		 *
		 * Path pattern: /lp/v1/gateways/{gateway}/subscription-webhook
		 *
		 * @return void
		 */
		public function register_routes() {
			$this->routes = array(
				'(?P<gateway>[a-zA-Z0-9_-]+)/subscription-webhook' => array(
					array(
						'methods'             => WP_REST_Server::ALLMETHODS,
						'callback'            => array( $this, 'listen_subscription_webhook' ),
						'permission_callback' => '__return_true',
					),
				),
			);

			parent::register_routes();
		}

		/**
		 * Dispatch provider subscription webhook to gateway implementation.
		 *
		 * This is the centralized entrypoint used by Stripe/PayPal webhook calls.
		 *
		 * @param WP_REST_Request $request
		 *
		 * @return Response
		 * @since 4.3.7
		 * @version 1.0.0
		 */
		public function listen_subscription_webhook( WP_REST_Request $request ): Response {
			$response = new Response();

			try {
				$gateway_id = sanitize_key( (string) $request->get_param( 'gateway' ) );
				if ( empty( $gateway_id ) ) {
					throw new Exception( __( 'Gateway is required.', 'learnpress' ), 400 );
				}

				$gateway = LP_Gateways::instance()->get_gateway( $gateway_id );
				if ( ! $gateway instanceof LP_Gateway_Abstract ) {
					throw new Exception( __( 'Gateway not found.', 'learnpress' ), 404 );
				}

				if ( ! $gateway->is_enabled() ) {
					throw new Exception( __( 'Gateway is not enable.', 'learnpress' ), 404 );
				}

				LP_Debug::log_to_comment( 'Webhook payload: ' . json_encode( $request->get_body(), JSON_UNESCAPED_UNICODE ) );

				/**
				 * @var LP_Gateway_Paypal|LP_Gateway_Stripe $gateway
				 */
				$gateway->capture_subscription_webhook( $request );
			} catch ( Throwable $e ) {
				LP_Debug::error_log( $e );
				$response->message = $e->getMessage();
			}

			return $response;
		}

		/**
		 * Build sanitized REST error response for public webhook endpoint.
		 *
		 * Internal provider error details are logged server-side, while API
		 * response returns a generic/safe message by status class.
		 *
		 * @param Throwable $error
		 *
		 * @return WP_REST_Response
		 */
		protected function build_error_response( Throwable $error ): WP_REST_Response {
			$status = absint( $error->getCode() );
			if ( $status < 100 || $status > 599 ) {
				$status = 400;
			}

			$error_code      = 'lp_subscription_webhook_error';
			$private_message = (string) $error->getMessage();
			$public_message  = __( 'Invalid webhook request.', 'learnpress' );

			if ( 429 === $status ) {
				$public_message = __( 'Too many webhook requests.', 'learnpress' );
			} elseif ( 413 === $status ) {
				$public_message = __( 'Webhook payload too large.', 'learnpress' );
			}

			error_log(
				sprintf(
					'LP subscription webhook error [%s]: %s',
					$error_code,
					$private_message
				)
			);

			return new WP_REST_Response(
				array(
					'status'  => 'error',
					'code'    => $error_code,
					'message' => $public_message,
				),
				$status
			);
		}
	}
}

```