← All changes | src/includes/classes/paypal-webhook-in.inc.php +188 -3 260829 → 261001 View file →

		@@ -226,11 +226,70 @@
226	226
227	227	if($subscr_id)
228	228	$subscr_done_option = 's2m_ppco_subscr_done_'.md5($subscr_id); //260406 Match the checkout subscription-done option so webhook ACTIVATED/RE-ACTIVATED stays fallback-only.
229	229
230		- //260401 Treat CREATED as informational only, and let ACTIVATED/RE-ACTIVATED act only as a fallback when checkout has not already handled this Subscription.
231	230	if($event_type === 'BILLING.SUBSCRIPTION.CREATED')
232	231	{
	232	+ $invoice = !empty($resource['custom_id']) ? (string)$resource['custom_id'] : '';
	233	+ if(!$invoice && $subscr_id)
	234	+ {
	235	+ $subscription_details = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_subscription_details($subscr_id);
	236	+ if(!empty($subscription_details['__error']))
	237	+ {
	238	+ //260902.0224 A temporary details lookup failure must not consume CREATED; ask PayPal to retry so an ambiguous browser create can still be repaired off-session.
	239	+ c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array(
	240	+ 'ppco' => 'webhook',
	241	+ 'env_setting'=> $env_site,
	242	+ 'env_webhook'=> $env_webhook,
	243	+ 'event' => 'subscription_created_details_failed',
	244	+ 'event_id' => $event_id,
	245	+ 'subscr_id' => $subscr_id,
	246	+ 'details' => $subscription_details,
	247	+ ));
	248	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	249	+ status_header(500);
	250	+ exit();
	251	+ }
	252	+ if(!empty($subscription_details['custom_id']))
	253	+ $invoice = (string)$subscription_details['custom_id'];
	254	+ }
	255	+
	256	+ $status = !empty($resource['status']) ? strtoupper((string)$resource['status']) : 'APPROVAL_PENDING';
	257	+ $recovery = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_subscription_gateway_checkout_recover($invoice, $subscr_id, $status);
	258	+ if(!empty($recovery['handled']) && empty($recovery['ok']))
	259	+ {
	260	+ if(!empty($recovery['error']) && (string)$recovery['error'] === 'gateway_checkout_subscription_conflict')
	261	+ {
	262	+ //260902.0200 Never overwrite an already-authoritative subscription ID; a conflicting late CREATED event is diagnostic only and must not trigger fulfillment.
	263	+ c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array(
	264	+ 'ppco' => 'webhook',
	265	+ 'env_setting'=> $env_site,
	266	+ 'env_webhook'=> $env_webhook,
	267	+ 'event' => 'subscription_created_conflict_ignored',
	268	+ 'event_id' => $event_id,
	269	+ 'subscr_id' => $subscr_id,
	270	+ 'invoice' => $invoice,
	271	+ 'recovery' => $recovery,
	272	+ ));
	273	+ }
	274	+ else
	275	+ {
	276	+ c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array(
	277	+ 'ppco' => 'webhook',
	278	+ 'env_setting'=> $env_site,
	279	+ 'env_webhook'=> $env_webhook,
	280	+ 'event' => 'subscription_created_recovery_failed',
	281	+ 'event_id' => $event_id,
	282	+ 'subscr_id' => $subscr_id,
	283	+ 'invoice' => $invoice,
	284	+ 'recovery' => $recovery,
	285	+ ));
	286	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	287	+ status_header(500);
	288	+ exit();
	289	+ }
	290	+ }
	291	+
233	292	c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array(
234	293	'ppco' => 'webhook',
235	294	'env_setting'=> $env_site,
236	295	'env_webhook'=> $env_webhook,
		@@ -237,11 +296,13 @@
237	296	'event' => 'subscription_created',
238	297	'event_id' => $event_id,
239	298	'event_type' => $event_type,
240	299	'subscr_id' => $subscr_id,
	300	+ 'invoice' => $invoice,
	301	+ 'recovery' => $recovery,
241	302	));
242	303
243		- //260406 Mark the webhook event done and release its lock for valid terminal events.
	304	+ //260902.0200 CREATED repairs coordinator identity only; it remains unpaid/unfulfilled until PayPal activates the subscription.
244	305	c_ws_plugin__s2member_paypal_utilities::dedupe_done_mark($event_done_option);
245	306	c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
246	307
247	308	status_header(200);
		@@ -300,8 +361,58 @@
300	361	status_header(500);
301	362	exit();
302	363	}
303	364
	365	+ $activation_recovery = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_subscription_gateway_checkout_recover((string)$paypal['invoice'], $subscr_id, 'ACTIVE');
	366	+ if(!empty($activation_recovery['handled']) && empty($activation_recovery['ok']))
	367	+ {
	368	+ if(!empty($activation_recovery['error']) && (string)$activation_recovery['error'] === 'gateway_checkout_subscription_conflict')
	369	+ {
	370	+ //260902.0200 A conflicting coordinator subscription must never be fulfilled as the expected checkout; leave the authoritative ID untouched for administrator diagnostics.
	371	+ c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array(
	372	+ 'ppco' => 'webhook',
	373	+ 'env_setting'=> $env_site,
	374	+ 'env_webhook'=> $env_webhook,
	375	+ 'event' => 'subscription_activation_conflict_ignored',
	376	+ 'event_id' => $event_id,
	377	+ 'subscr_id' => $subscr_id,
	378	+ 'invoice' => (string)$paypal['invoice'],
	379	+ 'recovery' => $activation_recovery,
	380	+ ));
	381	+ c_ws_plugin__s2member_paypal_utilities::dedupe_done_mark($event_done_option);
	382	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	383	+ status_header(200);
	384	+ exit();
	385	+ }
	386	+
	387	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	388	+ status_header(500);
	389	+ exit();
	390	+ }
	391	+
	392	+
	393	+ //260928.1538 Standalone Framework buttons are coordinator-backed; a verified activation now recovers all original purchase terms and completes membership even if the browser never calls confirm_subscription.
	394	+ if(strpos((string)$paypal['invoice'], 's2mb-') === 0)
	395	+ {
	396	+ $button_checkout_id = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_gateway_checkout_id_from_invoice((string)$paypal['invoice']);
	397	+ $button_private = $button_checkout_id ? c_ws_plugin__s2member_gateway_checkouts::private_context_get($button_checkout_id) : FALSE;
	398	+ $button_token = is_array($button_private) && !empty($button_private['paypal_checkout']['token']) && is_array($button_private['paypal_checkout']['token']) ? $button_private['paypal_checkout']['token'] : array();
	399	+ $subscription_details = $subscr_id ? c_ws_plugin__s2member_paypal_utilities::paypal_checkout_subscription_details($subscr_id) : array();
	400	+ $button_fulfillment = (!$button_token || !empty($subscription_details['__error']))
	401	+ ? array('ok' => FALSE, 'error' => 'gateway_checkout_purchase_context_or_provider_missing')
	402	+ : c_ws_plugin__s2member_paypal_utilities::paypal_checkout_button_subscription_fulfill($subscription_details, $button_token, 'webhook');
	403	+ if(empty($button_fulfillment['ok']))
	404	+ {
	405	+ c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array('ppco' => 'webhook', 'event' => 'button_subscription_fulfillment_retry', 'subscription_id' => $subscr_id, 'invoice' => (string)$paypal['invoice'], 'error' => !empty($button_fulfillment['error']) ? (string)$button_fulfillment['error'] : 'unknown'));
	406	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	407	+ status_header(500); //260928.1538 Leave the activation event unconsumed so PayPal retries on temporary recovery/Notify failure.
	408	+ exit();
	409	+ }
	410	+ c_ws_plugin__s2member_paypal_utilities::dedupe_done_mark($event_done_option);
	411	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	412	+ status_header(200);
	413	+ exit();
	414	+ }
304	415	$paypal['txn_type'] = 'subscr_signup'; //260401 Keep webhook activation as a fallback to the legacy signup handler only when checkout did not already handle this Subscription.
305	416	$paypal['payment_status'] = 'Completed';
306	417
307	418	$subscr_handled_by_webhook = true;
		@@ -465,9 +576,11 @@
465	576	// Recurring payment events (PayPal often emits PAYMENT.SALE.COMPLETED for subscription payments).
466	577	//260216 Add refund/reversal webhook support so refunds can trigger immediate EOT/demotion.
467	578	else if(in_array($event_type, array(
468	579	'PAYMENT.SALE.COMPLETED',
	580	+ 'PAYMENT.CAPTURE.PENDING',
469	581	'PAYMENT.CAPTURE.COMPLETED',
	582	+ 'PAYMENT.CAPTURE.DENIED',
470	583	'PAYMENT.SALE.REFUNDED',
471	584	'PAYMENT.CAPTURE.REFUNDED',
472	585	'PAYMENT.SALE.REVERSED',
473	586	'PAYMENT.CAPTURE.REVERSED',
		@@ -481,9 +594,81 @@
481	594	$subscr_id = (string)$resource['subscription_id'];
482	595	else if(!empty($resource['supplementary_data']['related_ids']['billing_agreement_id']))
483	596	$subscr_id = (string)$resource['supplementary_data']['related_ids']['billing_agreement_id'];
484	597
485		- //260228 Ignore one-time sale/capture webhooks that have no subscription reference.
	598	+ //260907.1820 One-time PayPal Checkout captures intentionally have no subscription reference; resolve order -> invoice -> Gateway Checkout here before the legacy no-subscription ignore path below.
	599	+ if(!$subscr_id && in_array($event_type, array('PAYMENT.CAPTURE.PENDING', 'PAYMENT.CAPTURE.COMPLETED', 'PAYMENT.CAPTURE.DENIED'), TRUE))
	600	+ {
	601	+ $order_id = !empty($resource['supplementary_data']['related_ids']['order_id']) ? (string)$resource['supplementary_data']['related_ids']['order_id'] : '';
	602	+ if($order_id)
	603	+ {
	604	+ $order = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_order_details($order_id);
	605	+ if(!empty($order['__error']))
	606	+ {
	607	+ //260902.0635 Do not consume a coordinator capture webhook when its authoritative order lookup temporarily fails; PayPal can redeliver it.
	608	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	609	+ status_header(500);
	610	+ exit();
	611	+ }
	612	+
	613	+ $invoice = !empty($order['purchase_units'][0]['invoice_id']) ? (string)$order['purchase_units'][0]['invoice_id'] : '';
	614	+ $gateway_checkout_id = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_gateway_checkout_id_from_invoice($invoice);
	615	+ if($gateway_checkout_id)
	616	+ {
	617	+ $capture_id = !empty($resource['id']) ? (string)$resource['id'] : '';
	618	+ $capture_status = ($event_type === 'PAYMENT.CAPTURE.COMPLETED') ? 'COMPLETED' : (($event_type === 'PAYMENT.CAPTURE.DENIED') ? 'DENIED' : 'PENDING');
	619	+ $recovery = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_order_gateway_checkout_recover($invoice, $order_id, $capture_id, $capture_status, 'webhook');
	620	+ if(!empty($recovery['handled']) && empty($recovery['ok']))
	621	+ {
	622	+ if(!empty($recovery['error']) && in_array((string)$recovery['error'], array('gateway_checkout_order_conflict', 'gateway_checkout_capture_conflict'), TRUE))
	623	+ {
	624	+ //260902.0646 A conflicting late webhook is diagnostic only; never let it replace or fulfill against the checkout's authoritative provider identity.
	625	+ c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array('ppco' => 'webhook', 'event' => 'capture_recovery_conflict_ignored', 'event_id' => $event_id, 'event_type' => $event_type, 'recovery' => $recovery));
	626	+ c_ws_plugin__s2member_paypal_utilities::dedupe_done_mark($event_done_option);
	627	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	628	+ status_header(200);
	629	+ exit();
	630	+ }
	631	+ else
	632	+ {
	633	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	634	+ status_header(500);
	635	+ exit();
	636	+ }
	637	+ }
	638	+
	639	+ //260907.1820 PENDING and DENIED events only reconcile state; COMPLETED is the sole capture event allowed to cross the entitlement boundary into shared fulfillment.
	640	+ if($capture_status === 'COMPLETED')
	641	+ {
	642	+ //260907.1820 Off-session fulfillment must use the encrypted server-validated purchase token; never reconstruct trusted price/access terms from the webhook payload itself.
	643	+ $private_context = c_ws_plugin__s2member_gateway_checkouts::private_context_get($gateway_checkout_id);
	644	+ $token = is_array($private_context) && !empty($private_context['paypal_checkout']['token']) && is_array($private_context['paypal_checkout']['token']) ? $private_context['paypal_checkout']['token'] : array();
	645	+ if(!$token || ($validation_error = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_order_completion_error($order, $order_id, $token)))
	646	+ {
	647	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	648	+ status_header(500);
	649	+ exit();
	650	+ }
	651	+
	652	+ $fulfillment = c_ws_plugin__s2member_paypal_utilities::paypal_checkout_order_fulfill($order, $token);
	653	+ if(empty($fulfillment['ok']))
	654	+ {
	655	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	656	+ status_header(500);
	657	+ exit();
	658	+ }
	659	+ }
	660	+
	661	+ c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array('ppco' => 'webhook', 'event' => 'one_time_capture_recovered', 'event_id' => $event_id, 'event_type' => $event_type, 'order_id' => $order_id, 'capture_id' => $capture_id, 'invoice' => $invoice));
	662	+ c_ws_plugin__s2member_paypal_utilities::dedupe_done_mark($event_done_option);
	663	+ c_ws_plugin__s2member_paypal_utilities::dedupe_lock_release($event_lock_option);
	664	+ status_header(200);
	665	+ exit();
	666	+ }
	667	+ }
	668	+ }
	669	+
	670	+ //260228 Ignore legacy/non-coordinator one-time sale/capture webhooks that have no subscription reference.
486	671	if(!$subscr_id)
487	672	{
488	673	c_ws_plugin__s2member_utils_logs::log_entry('paypal-checkout', array(
489	674	'ppco' => 'webhook',