| @@ -54,11 +54,8 @@ | ||
| 54 | 54 | |
| 55 | 55 | // True if HPOS is being used |
| 56 | 56 | public $HPOSActive = null; |
| 57 | 57 | |
| 58 | - // used in the fake locking mechanism using transients | |
| 59 | - private $lockKey = null; | |
| 60 | - | |
| 61 | 58 | public $vippsJSConfig = array(); |
| 62 | 59 | |
| 63 | 60 | public $button_options_version = '2.0'; |
| 64 | 61 | public $button_options_express_version = '2.0'; |
| @@ -117,9 +114,10 @@ | ||
| 117 | 114 | add_action('wp_footer', array($Vipps,'footer')); |
| 118 | 115 | } |
| 119 | 116 | add_action( 'plugins_loaded', array($Vipps,'plugins_loaded')); |
| 120 | 117 | add_action( 'after_setup_theme', array($Vipps,'after_setup_theme')); |
| 121 | - add_action('init',array($Vipps,'init')); | |
| 118 | + add_action( 'init',array($Vipps,'init')); | |
| 119 | + add_action( 'rest_api_init', array($Vipps, 'rest_api_init')); | |
| 122 | 120 | add_action( 'woocommerce_loaded', array($Vipps,'woocommerce_loaded')); |
| 123 | 121 | add_filter( 'woocommerce_available_payment_gateways', array($Vipps, 'payment_gateway_filter')); |
| 124 | 122 | add_action( 'woocommerce_blocks_loaded', [$Vipps, 'woocommerce_blocks_loaded']); |
| 125 | 123 | // Express Checkout and Checkout supports the new pickup_location shipping method, but the admin interface for this may |
| @@ -227,8 +225,9 @@ | ||
| 227 | 225 | // Register certain scripts in wp_loaded because they will be added to the backend as well - the gutenberg checkout block |
| 228 | 226 | // needs these to be defined in the backend. IOK 2024-04-16 |
| 229 | 227 | add_action('wp_loaded', array($this, 'wp_register_scripts')); |
| 230 | 228 | add_action('wp_enqueue_scripts', array($this, 'wp_enqueue_scripts')); |
| 229 | + add_action('wp_enqueue_scripts', array($this, 'enqueue_classic_checkout_scripts'), 20); | |
| 231 | 230 | |
| 232 | 231 | // Remove the possibility of restarting failed orders etc. This will be fixed in the future. IOK 2023-05-26 |
| 233 | 232 | add_filter('woocommerce_my_account_my_orders_actions', array($this,'woocommerce_my_account_my_orders_actions'), 10, 2); |
| 234 | 233 | |
| @@ -244,16 +243,8 @@ | ||
| 244 | 243 | |
| 245 | 244 | // Extra order actions on the order screen, now using ajax to be compatible with HPOS. IOK 2022-12-02 |
| 246 | 245 | add_action('wp_ajax_woo_vipps_order_action', array($this, 'order_handle_vipps_action')); |
| 247 | 246 | |
| 248 | - // Fetch wc products, but filter those only purchasable by VMP express checkout. LP 2026-01-22 | |
| 249 | - add_action('rest_api_init', function() { | |
| 250 | - register_rest_route(self::get_rest_namespace('v1'), '/express-products', [ | |
| 251 | - 'methods' => 'GET', | |
| 252 | - 'callback' => [$this, 'rest_express_checkout_products'], | |
| 253 | - 'permission_callback' => '__return_true', | |
| 254 | - ]); | |
| 255 | - }); | |
| 256 | 247 | |
| 257 | 248 | // We need a 5-minute scheduled event for the handler for missed callbacks. Using the |
| 258 | 249 | // action scheduler would be better, but we can't do that just yet because of backwards |
| 259 | 250 | // compatibility. At some point, support for older woo-versions should be dropped; then this |
| @@ -276,15 +267,8 @@ | ||
| 276 | 267 | // because it is self-updating or because it has been deactivated just now or something, we won't have access to it. |
| 277 | 268 | // Therefore test it first. IOK 2022-12-08 |
| 278 | 269 | $gw = $this->gateway(); |
| 279 | 270 | |
| 280 | - // This is a developer-mode level feature because flock() is not portable. This ensures callbacks and shopreturns do not | |
| 281 | - // simultaneously update the orders, in particular not the express checkout order lines wrt shipping. IOK 2020-05-19 | |
| 282 | - if ($gw && $gw->get_option('use_flock') == 'yes') { | |
| 283 | - add_filter('woo_vipps_lock_order', array($this,'flock_lock_order')); | |
| 284 | - add_action('woo_vipps_unlock_order', array($this, 'flock_unlock_order')); | |
| 285 | - } | |
| 286 | - | |
| 287 | 271 | // Set default button options, migrating any older setup IOK 2026-07-15 |
| 288 | 272 | $this->init_button_options(); |
| 289 | 273 | |
| 290 | 274 | /* |
| @@ -310,23 +294,36 @@ | ||
| 310 | 294 | |
| 311 | 295 | |
| 312 | 296 | // We want this special page to have a certain title and maybe special scripts and so on, |
| 313 | 297 | // this gets run in template redirect for these pages. |
| 314 | - add_action('woo_vipps_before_handling_special_page', function ($action) { | |
| 315 | - // Change title dynamically depending on action. LP 2026-09-02 | |
| 316 | - add_filter('the_title', [$this, 'vipps_special_page_endpoint_title'], 10, 2); | |
| 298 | + add_action('woo_vipps_before_handling_special_page', array($this, 'pre_special_page_actions')); | |
| 317 | 299 | |
| 318 | - // If we are handling the 'wait for payment' action, we need to poll the order status before | |
| 319 | - // we start producing content IOK 2026-09-21 | |
| 320 | - if ($action == 'wait_for_payment') { | |
| 321 | - $this->handle_payment_poll_and_redirect(); | |
| 322 | - } | |
| 300 | + // Add an admin interface for this page as well IOK 2026-09-11 | |
| 301 | + add_action('woocommerce_settings_pages', array($this, 'woocommerce_settings_pages')); | |
| 302 | + } | |
| 323 | 303 | |
| 324 | - }); | |
| 325 | 304 | |
| 326 | - // Add an admin interface for this page as well IOK 2026-09-11 | |
| 327 | - add_action('woocommerce_settings_pages', array($this, 'woocommerce_settings_pages')); | |
| 305 | + public function rest_api_init () { | |
| 328 | 306 | |
| 307 | + // Fetch wc products, but filter those only purchasable by VMP express checkout. LP 2026-01-22 | |
| 308 | + register_rest_route(self::get_rest_namespace('v1'), '/express-products', [ | |
| 309 | + 'methods' => 'GET', | |
| 310 | + 'callback' => [$this, 'rest_express_checkout_products'], | |
| 311 | + 'permission_callback' => '__return_true', | |
| 312 | + ]); | |
| 313 | + | |
| 314 | + // Start a single product express checkout process. IOK 2026-08-25 | |
| 315 | + register_rest_route(self::get_rest_namespace('v1'), '/express_checkout_single', [ | |
| 316 | + 'methods' => 'POST', | |
| 317 | + 'callback' => [$this, 'rest_do_single_product_express_checkout'], | |
| 318 | + 'permission_callback' => '__return_true', | |
| 319 | + ]); | |
| 320 | + // And one for the cart. IOK 2026-09-04 | |
| 321 | + register_rest_route(self::get_rest_namespace('v1'), '/express_checkout', [ | |
| 322 | + 'methods' => 'POST', | |
| 323 | + 'callback' => [$this, 'rest_do_express_checkout'], | |
| 324 | + 'permission_callback' => '__return_true', | |
| 325 | + ]); | |
| 329 | 326 | } |
| 330 | 327 | |
| 331 | 328 | public function admin_init () { |
| 332 | 329 | $gw = $this->gateway(); |
| @@ -355,10 +352,8 @@ | ||
| 355 | 352 | // Styling etc |
| 356 | 353 | add_action('admin_head', array($this, 'admin_head')); |
| 357 | 354 | |
| 358 | 355 | // Scripts |
| 359 | - $this->vippsJSConfig['vippssecnonce'] = wp_create_nonce('vippssecnonce'); | |
| 360 | - wp_localize_script('vipps-gw', 'VippsConfig', $this->vippsJSConfig); | |
| 361 | 356 | add_action('admin_enqueue_scripts', array($this,'admin_enqueue_scripts')); |
| 362 | 357 | |
| 363 | 358 | // IOK 2026-05-26 redirect the old Woo-generated settings-screen to our own settings page. |
| 364 | 359 | add_action('current_screen', function ($screen) { |
| @@ -1053,12 +1048,30 @@ | ||
| 1053 | 1048 | |
| 1054 | 1049 | public function get_html_button_attrs_for_context($context = 'global') { |
| 1055 | 1050 | $options = get_option('vipps_button_options2', []); |
| 1056 | 1051 | if (!is_string($context)) $context = 'global'; |
| 1052 | + | |
| 1053 | + // Gutenberg express checkout buttons really want to be stretched, so we'll treat them somewhat differently. | |
| 1054 | + $gutenberg = false; | |
| 1055 | + if ($context == 'checkout_gutenberg') { | |
| 1056 | + $context = 'checkout'; | |
| 1057 | + $gutenberg = true; | |
| 1058 | + } | |
| 1059 | + if ($context == 'cart_gutenberg') { | |
| 1060 | + $context = 'cart'; | |
| 1061 | + $gutenberg = true; | |
| 1062 | + } | |
| 1063 | + | |
| 1057 | 1064 | $config = $options['express']['configs'][$context] ?? []; |
| 1058 | - if (!$config || ($config['use-global-config'] ?? false)) { | |
| 1065 | + $use_global = !$config || ($config['use-global-config'] ?? false); | |
| 1066 | + if ($use_global) { | |
| 1059 | 1067 | $config = $options['express']['configs']['global'] ?? $this->get_html_button_default_attrs(); |
| 1060 | 1068 | } |
| 1069 | + | |
| 1070 | + // see above. | |
| 1071 | + if ($gutenberg) { | |
| 1072 | + $config['stretched']='true'; | |
| 1073 | + } | |
| 1061 | 1074 | return $config; |
| 1062 | 1075 | } |
| 1063 | 1076 | |
| 1064 | 1077 | public function get_html_button_for_context($context = 'global') { |
| @@ -1078,8 +1091,10 @@ | ||
| 1078 | 1091 | // Don't support these login verbs. LP 2026-06-04 |
| 1079 | 1092 | if (in_array($attrs['verb'], ['login', 'register'])) $attrs['verb'] = 'buy'; |
| 1080 | 1093 | // Looks like button and badge web components now use 'da' instead of 'dk' for danish. LP 2026-08-11 |
| 1081 | 1094 | if ('dk' === $attrs['language']) $attrs['language'] = 'da'; |
| 1095 | + // Fix swedish too. LP 2026-10-06 | |
| 1096 | + if ('se' === $attrs['language']) $attrs['language'] = 'sv'; | |
| 1082 | 1097 | |
| 1083 | 1098 | $escaped_attrs = []; |
| 1084 | 1099 | foreach($attrs as $k => $v) { |
| 1085 | 1100 | $escaped_attrs[$k] = esc_attr($v); |
| @@ -1145,8 +1160,10 @@ | ||
| 1145 | 1160 | private function button_menu_express_section() { |
| 1146 | 1161 | $options = get_option('vipps_button_options2', []); |
| 1147 | 1162 | $express = $options['express'] ?? []; |
| 1148 | 1163 | $configs = $express['configs'] ?? []; |
| 1164 | + | |
| 1165 | + | |
| 1149 | 1166 | $contexts = [ |
| 1150 | 1167 | 'global' => __('Global', 'woo-vipps'), |
| 1151 | 1168 | 'product' => __('Product', 'woo-vipps'), |
| 1152 | 1169 | 'catalog' => __('Catalog', 'woo-vipps'), |
| @@ -1319,8 +1336,9 @@ | ||
| 1319 | 1336 | |
| 1320 | 1337 | // Swap to new context: set all input fields to the stored values if exists. LP 2026-06-25 |
| 1321 | 1338 | const newContext = jQuery("#context").val(); |
| 1322 | 1339 | const newConfig = contextConfigs[newContext]; |
| 1340 | + | |
| 1323 | 1341 | setInputsFromConfig(newContext, newConfig); |
| 1324 | 1342 | currentContext = newContext; |
| 1325 | 1343 | } |
| 1326 | 1344 | |
| @@ -1683,12 +1701,14 @@ | ||
| 1683 | 1701 | <?php |
| 1684 | 1702 | } |
| 1685 | 1703 | // Scripts used in the backend |
| 1686 | 1704 | public function admin_enqueue_scripts($hook) { |
| 1705 | + | |
| 1706 | + wp_register_script('vipps-admin',plugins_url('js/admin.js',__FILE__),array('jquery'),filemtime(dirname(__FILE__) . "/js/admin.js"), 'all'); | |
| 1707 | + $this->vippsJSConfig['vippssecnonce'] = wp_create_nonce('vippssecnonce'); | |
| 1708 | + wp_localize_script('vipps-admin', 'VippsConfig', $this->vippsJSConfig); | |
| 1687 | 1709 | // Add certain translations very late so translation plugins get a chance to work. IOK 2026-02-02 |
| 1688 | - $this->script_add_vippslocale(); | |
| 1689 | - | |
| 1690 | - wp_register_script('vipps-admin',plugins_url('js/admin.js',__FILE__),array('jquery','vipps-gw'),filemtime(dirname(__FILE__) . "/js/admin.js"), 'all'); | |
| 1710 | + $this->script_add_vippslocale('vipps-admin'); | |
| 1691 | 1711 | wp_enqueue_script('vipps-admin'); |
| 1692 | 1712 | |
| 1693 | 1713 | wp_enqueue_style('vipps-admin-style',plugins_url('css/admin.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/admin.css"), 'all'); |
| 1694 | 1714 | wp_enqueue_style('vipps-fonts'); |
| @@ -1758,12 +1778,9 @@ | ||
| 1758 | 1778 | |
| 1759 | 1779 | public function wp_register_scripts () { |
| 1760 | 1780 | // We are going to use the 'hooks' library introduced by WP 5.1, but we still support WP 4.7. So if this isn't enqueues |
| 1761 | 1781 | // (which it only is if Gutenberg is active) or not provided at all, add it now. |
| 1762 | - if (!wp_script_is( 'wp-hooks', 'registered')) { | |
| 1763 | - wp_register_script('wp-hooks', plugins_url('/compat/hooks.min.js', __FILE__)); | |
| 1764 | - } | |
| 1765 | - wp_register_script('vipps-gw',plugins_url('js/vipps.js',__FILE__),array('jquery','wp-hooks'),filemtime(dirname(__FILE__) . "/js/vipps.js"), 'true'); | |
| 1782 | + wp_register_script('vipps-gw',plugins_url('js/vipps.js',__FILE__),array('jquery','wp-hooks', 'wp-api-fetch','vipps-widget-sdk'),filemtime(dirname(__FILE__) . "/js/vipps.js"), true); | |
| 1766 | 1783 | |
| 1767 | 1784 | // Badges - web components provided by Vipps MobilePay to display payment options in-store. |
| 1768 | 1785 | wp_register_script('vipps-onsite-messageing', |
| 1769 | 1786 | plugins_url('js/vipps-on-site-messaging.js', WC_VIPPS_PAYMENT_MAIN_FILE), |
| @@ -1769,13 +1786,27 @@ | ||
| 1769 | 1786 | plugins_url('js/vipps-on-site-messaging.js', WC_VIPPS_PAYMENT_MAIN_FILE), |
| 1770 | 1787 | array(), |
| 1771 | 1788 | filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps-on-site-messaging.js'), |
| 1772 | 1789 | [ |
| 1773 | - 'in_footer' => true, | |
| 1774 | - 'strategy' => 'async', | |
| 1790 | + 'in_footer' => true, | |
| 1791 | + 'strategy' => 'async', | |
| 1775 | 1792 | ], |
| 1776 | 1793 | ); |
| 1777 | 1794 | |
| 1795 | + add_filter( 'script_loader_tag', function($tag, $handle,$src) { | |
| 1796 | + if ($handle == 'vipps-widget-sdk') { | |
| 1797 | + $tag = preg_replace("!^<script!", "<script data-vipps-widget-sdk ", $tag); | |
| 1798 | + return $tag; | |
| 1799 | + } | |
| 1800 | + return $tag; | |
| 1801 | + },10,3); | |
| 1802 | + | |
| 1803 | + wp_register_script('vipps-widget-sdk', "https://cdn.vippsmobilepay.com/js/widget-sdk/vipps-widget.js", | |
| 1804 | + array('vipps-button-webcomponent'), | |
| 1805 | + filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps.js'), | |
| 1806 | + ['in_footer' => true] | |
| 1807 | + ); | |
| 1808 | + | |
| 1778 | 1809 | // Button web component downloaded from https://cdn.vippsmobilepay.com/js/button/button.js. LP 2026-06-24 |
| 1779 | 1810 | wp_register_script('vipps-button-webcomponent', |
| 1780 | 1811 | plugins_url('js/vipps-button.js', WC_VIPPS_PAYMENT_MAIN_FILE), |
| 1781 | 1812 | array(), |
| @@ -1781,27 +1812,45 @@ | ||
| 1781 | 1812 | array(), |
| 1782 | 1813 | filemtime(dirname(WC_VIPPS_PAYMENT_MAIN_FILE) . '/js/vipps-button.js'), |
| 1783 | 1814 | [ |
| 1784 | 1815 | 'in_footer' => false |
| 1785 | - ], | |
| 1816 | + ] | |
| 1786 | 1817 | ); |
| 1787 | 1818 | } |
| 1788 | 1819 | |
| 1789 | 1820 | // Runs late in both wp_enqueue_scripts and admin_enqueue_scripts to make it more compatible with translation plugins IOK 2026-02-02 |
| 1790 | - public function script_add_vippslocale () { | |
| 1821 | + public function script_add_vippslocale ($handle) { | |
| 1791 | 1822 | // This is actually for the payment block, where localize script has started to not-work in certain contexts. IOK 2022-12-13 |
| 1823 | + $name = $this->get_payment_method_name(); | |
| 1792 | 1824 | $strings = array( |
| 1793 | - 'Continue with Vipps'=>sprintf(__('Continue with %1$s', 'woo-vipps'), $this->get_payment_method_name()), | |
| 1794 | - 'Vipps'=> sprintf(__('%1$s', 'woo-vipps'), $this->get_payment_method_name()), | |
| 1795 | - 'pay_with_card' => sprintf(__('Pay with card through %1$s', 'woo-vipps'), $this->get_payment_method_name()), | |
| 1825 | + 'Continue with Vipps'=>sprintf(__('Continue with %1$s', 'woo-vipps'), $name), | |
| 1826 | + 'Vipps'=> sprintf(__('%1$s', 'woo-vipps'), $name), | |
| 1827 | + 'pay_with_card' => sprintf(__('Pay with card through %1$s', 'woo-vipps'), $name), | |
| 1828 | + 'termsAndConditionsError' => __( 'Please read and accept the terms and conditions to proceed with your order.', 'woocommerce' ), | |
| 1829 | + 'temporaryError' => sprintf(__('%1$s is temporarily unavailable.','woo-vipps'),$name), | |
| 1830 | + 'successMessage' => sprintf(__('To the %1$s app!','woo-vipps'), $name), | |
| 1831 | + 'cancel'=> __("Cancel", 'woo-vipps'), | |
| 1832 | + 'close'=> __("Close", 'woo-vipps'), | |
| 1833 | + 'missingPaymentUrl'=> __("Successful checkout response has no payment URL", 'woo-vipps'), | |
| 1834 | + 'expressCheckoutFailed'=> __("Express checkout failed", 'woo-vipps'), | |
| 1835 | + 'unexpectedCheckoutResponse'=> __("Unexpected express checkout response", 'woo-vipps'), | |
| 1836 | + 'vippsCheckoutFailed'=> __("Vipps Mobilepay checkout failed", 'woo-vipps'), | |
| 1837 | + 'correctHighlightedFields'=> __("Please correct the highlighted fields.", 'woo-vipps'), | |
| 1838 | + 'checkFormBeforeContinuing'=> __("Please check the form before continuing.", 'woo-vipps'), | |
| 1839 | + 'cartCheckoutUnavailable'=> __("Cannot start express checkout: cart checkout is unavailable", 'woo-vipps'), | |
| 1840 | + 'productIdentifiersMissing'=> __("Cannot buy product: product id, variation id and sku are missing", 'woo-vipps'), | |
| 1841 | + 'productFormNotFound'=> __("Cannot buy product: product form not found", 'woo-vipps'), | |
| 1842 | + 'paymentSuccessfulRedirecting' => __("Payment successful. Redirecting…", 'woo-vipps'), | |
| 1796 | 1843 | ); |
| 1797 | - wp_localize_script('vipps-gw', 'VippsLocale', $strings); | |
| 1844 | + wp_localize_script($handle, 'VippsLocale', $strings); | |
| 1798 | 1845 | } |
| 1799 | 1846 | |
| 1800 | 1847 | public function wp_enqueue_scripts() { |
| 1848 | + // Add late: if this value isn't 'yes' we wil not add order attribution to express orders. IOK 2026-09-10 | |
| 1849 | + $this->vippsJSConfig['expressOrderAttribution'] = $this->gateway()->get_option('vippsorderattribution'); | |
| 1801 | 1850 | wp_localize_script('vipps-gw', 'VippsConfig', $this->vippsJSConfig); |
| 1802 | 1851 | // Add certain translations very late so translation plugins get a chance to work. IOK 2026-02-02 |
| 1803 | - $this->script_add_vippslocale(); | |
| 1852 | + $this->script_add_vippslocale('vipps-gw'); | |
| 1804 | 1853 | |
| 1805 | 1854 | wp_enqueue_script('vipps-gw'); |
| 1806 | 1855 | wp_enqueue_style('vipps-gw',plugins_url('css/vipps.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/vipps.css")); |
| 1807 | 1856 | wp_enqueue_script('vipps-button-webcomponent'); |
| @@ -1806,13 +1855,55 @@ | ||
| 1806 | 1855 | wp_enqueue_style('vipps-gw',plugins_url('css/vipps.css',__FILE__),array(),filemtime(dirname(__FILE__) . "/css/vipps.css")); |
| 1807 | 1856 | wp_enqueue_script('vipps-button-webcomponent'); |
| 1808 | 1857 | } |
| 1809 | 1858 | |
| 1859 | + // These scripts should be loaded only on the checkout screen and is used only for the classic shortcode checkout and | |
| 1860 | + // the pay-for-order screen. IOK 2026-09-15 | |
| 1861 | + public function enqueue_classic_checkout_scripts () { | |
| 1862 | + if ( ! function_exists( 'is_checkout' ) || ! is_checkout() || is_order_received_page() ) { | |
| 1863 | + return; | |
| 1864 | + } | |
| 1865 | + // Order-pay is rendered by the classic form even with a Blocks checkout page. | |
| 1866 | + // It must bypass the check for the parent checkout page's block content. | |
| 1867 | + if ( ! is_checkout_pay_page() ) { | |
| 1868 | + $utils = '\\Automattic\\WooCommerce\\Blocks\\Utils\\CartCheckoutUtils'; | |
| 1869 | + $uses_checkout_block = is_callable( array( $utils, 'is_checkout_block_default' ) ) | |
| 1870 | + ? $utils::is_checkout_block_default() | |
| 1871 | + : has_block( 'woocommerce/checkout', wc_get_page_id( 'checkout' ) ); | |
| 1810 | 1872 | |
| 1873 | + if ( $uses_checkout_block ) { | |
| 1874 | + return; | |
| 1875 | + } | |
| 1876 | + } | |
| 1877 | + | |
| 1878 | + // This script uses jQuery because the classic checkout screen does too. IOK 2026-09-15 | |
| 1879 | + $relative_path = 'js/vipps-classic-checkout.js'; | |
| 1880 | + wp_enqueue_script( | |
| 1881 | + 'vipps-classic-checkout', | |
| 1882 | + plugins_url( $relative_path, __FILE__ ), | |
| 1883 | + array( 'jquery', 'wc-checkout', 'vipps-gw' ), | |
| 1884 | + filemtime( plugin_dir_path( __FILE__ ) . $relative_path ), | |
| 1885 | + true | |
| 1886 | + ); | |
| 1887 | + | |
| 1888 | + if ( is_checkout_pay_page() ) { | |
| 1889 | + $order = wc_get_order( absint( get_query_var( 'order-pay' ) ) ); | |
| 1890 | + wp_add_inline_script( 'vipps-classic-checkout', 'window.VippsOrderPayConfig = ' . wp_json_encode( array( | |
| 1891 | + 'orderId' => $order ? $order->get_id() : 0, | |
| 1892 | + 'orderKey' => $order ? $order->get_order_key() : '', | |
| 1893 | + 'billingEmail' => $order ? $order->get_billing_email() : '', | |
| 1894 | + 'endpoint' => $order ? rest_url( 'wc/store/v1/checkout/' . $order->get_id() ) : '', | |
| 1895 | + 'nonce' => wp_create_nonce( 'wc_store_api' ), | |
| 1896 | + 'billingAddress' => $order ? $order->get_address( 'billing' ) : array(), | |
| 1897 | + 'shippingAddress' => $order ? $order->get_address( 'shipping' ) : array(), | |
| 1898 | + ) ) . ';', 'before' ); | |
| 1899 | + } | |
| 1900 | + } | |
| 1901 | + | |
| 1902 | + | |
| 1811 | 1903 | public function add_shortcodes() { |
| 1812 | 1904 | add_shortcode('woo_vipps_buy_now', array($this, 'buy_now_button_shortcode')); |
| 1813 | 1905 | add_shortcode('woo_vipps_express_checkout_button', array($this, 'express_checkout_button_shortcode')); |
| 1814 | - add_shortcode('woo_vipps_express_checkout_banner', array($this, 'express_checkout_banner_shortcode')); | |
| 1815 | 1906 | |
| 1816 | 1907 | // Badges, if using shortcodes |
| 1817 | 1908 | // New vipps-mobilepay-badge shortcode. LP 19.11.2024 |
| 1818 | 1909 | add_shortcode('vipps-mobilepay-badge', array($this, 'vipps_mobilepay_badge_shortcode')); |
| @@ -1858,83 +1949,57 @@ | ||
| 1858 | 1949 | public function express_checkout_section_html() { |
| 1859 | 1950 | $payment_method = $this->get_payment_method_name(); |
| 1860 | 1951 | $header_text = __('Express Checkout', 'woo-vipps'); |
| 1861 | 1952 | $header = "<legend class='express-header'>$header_text</legend>"; |
| 1862 | - $div_classes = "legacy-checkout vipps-express-checkout $payment_method"; | |
| 1953 | + $div_classes = "legacy-checkout express $payment_method"; | |
| 1863 | 1954 | echo "<fieldset class='$div_classes'>$header"; |
| 1864 | 1955 | $this->checkout_express_checkout_button_html(); |
| 1865 | 1956 | echo '</fieldset>'; |
| 1866 | 1957 | } |
| 1867 | 1958 | |
| 1868 | - public function express_checkout_banner() { | |
| 1959 | + // Show the express button if reasonable to do so | |
| 1960 | + public function cart_express_checkout_button() { | |
| 1869 | 1961 | $gw = $this->gateway(); |
| 1870 | - if (!$gw->show_express_checkout()) return; | |
| 1871 | - return $this->express_checkout_banner_html(); | |
| 1872 | - } | |
| 1873 | 1962 | |
| 1874 | - public function express_checkout_banner_html() { | |
| 1875 | - $url = $this->express_checkout_url(); | |
| 1876 | - $url = wp_nonce_url($url,'express','sec'); | |
| 1877 | - $text = __('Skip entering your address and just checkout using', 'woo-vipps'); | |
| 1878 | - $linktext = 'Express'; // dont translate. LP 2025-09-03 | |
| 1879 | - $logo = $this->get_express_banner_logo(); | |
| 1880 | - $payment_method = $this->get_payment_method_name(); | |
| 1881 | - | |
| 1882 | - $img_classes = 'express-banner-logo inline negative ' . strtolower($payment_method) . '-logo'; | |
| 1883 | - $div_classes = 'woocommerce-info ' . strtolower($payment_method) . '-info'; | |
| 1884 | - $a_classes = 'express-banner-link ' . strtolower($payment_method) . '-link'; | |
| 1885 | - | |
| 1886 | - $message = $text . "<a href='$url' class='$a_classes'><img class='$img_classes' border=0 src='$logo' alt='$payment_method'/>$linktext!</a>"; | |
| 1887 | - $message = apply_filters('woo_vipps_express_checkout_banner', $message, $url, $payment_method); | |
| 1888 | - ?> | |
| 1889 | - <div class="<?php echo $div_classes;?>"><?php echo $message;?></div> | |
| 1890 | - <?php | |
| 1963 | + if ($gw->show_express_checkout()){ | |
| 1964 | + return $this->cart_express_checkout_button_html(); | |
| 1965 | + } | |
| 1891 | 1966 | } |
| 1892 | 1967 | |
| 1893 | - public function checkout_express_checkout_button() { | |
| 1968 | + public function minicart_express_checkout_button() { | |
| 1894 | 1969 | $gw = $this->gateway(); |
| 1895 | 1970 | |
| 1896 | 1971 | if ($gw->show_express_checkout()){ |
| 1897 | - return $this->checkout_express_checkout_button_html(); | |
| 1972 | + return $this->cart_express_checkout_button_html('minicart'); | |
| 1898 | 1973 | } |
| 1899 | 1974 | } |
| 1900 | 1975 | |
| 1901 | - public function checkout_express_checkout_button_html() { | |
| 1902 | - $url = $this->express_checkout_url(); | |
| 1903 | - $url = wp_nonce_url($url,'express','sec'); | |
| 1904 | - $button= apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context('checkout')); | |
| 1976 | + // This is for the Vipps SDK button used instead of the normal "pay for order" and "confirm order" buttons | |
| 1977 | + // on the classic checkout and pay-for-order pages. It gets swapped in when the user selects vipps, and swapped out otherwise. | |
| 1978 | + public function add_checkout_button_for_classic () { | |
| 1979 | + $button = $this->get_html_button_for_context('checkout'); | |
| 1980 | + $submit = "<div class='vipps-classic-checkout-container'><button id='vipps-classic-checkout-submit' class='hidden vipps-submit-wrapper' type='submit'>$button</button></div>"; | |
| 1981 | + echo $submit; | |
| 1982 | + } | |
| 1983 | + | |
| 1984 | + public function cart_express_checkout_button_html($context= 'cart') { | |
| 1985 | + $button = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context($context)); | |
| 1905 | 1986 | $method = $this->get_payment_method_name(); |
| 1906 | 1987 | $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $method); |
| 1907 | - $html = "<a href='$url' class='vipps-express-checkout short $method' title='$title'>$button</a>"; | |
| 1988 | + $url = "#"; | |
| 1989 | + $sec = wp_create_nonce('express'); | |
| 1990 | + $html = "<a href='#' class='vipps-express-checkout short " . esc_attr($method) . "' title='" . esc_attr($title) . "' data-sec='" . esc_attr($sec) . "'>$button</a>"; | |
| 1908 | 1991 | $html = apply_filters('woo_vipps_cart_express_checkout_button', $html, $url); |
| 1909 | 1992 | echo $html; |
| 1910 | 1993 | } |
| 1911 | 1994 | |
| 1912 | - // Show the express button if reasonable to do so | |
| 1913 | - public function cart_express_checkout_button() { | |
| 1914 | - $gw = $this->gateway(); | |
| 1915 | - | |
| 1916 | - if ($gw->show_express_checkout()){ | |
| 1917 | - return $this->cart_express_checkout_button_html(); | |
| 1918 | - } | |
| 1919 | - } | |
| 1920 | - | |
| 1921 | - public function minicart_express_checkout_button() { | |
| 1922 | - $gw = $this->gateway(); | |
| 1923 | - | |
| 1924 | - if ($gw->show_express_checkout()){ | |
| 1925 | - return $this->cart_express_checkout_button_html(true); | |
| 1926 | - } | |
| 1927 | - } | |
| 1928 | - | |
| 1929 | - public function cart_express_checkout_button_html($minicart = false) { | |
| 1930 | - $url = $this->express_checkout_url(); | |
| 1931 | - $url = wp_nonce_url($url,'express','sec'); | |
| 1932 | - $context = $minicart ? 'minicart' : 'cart'; | |
| 1933 | - $button= apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context($context)); | |
| 1995 | + public function checkout_express_checkout_button_html() { | |
| 1996 | + $button = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button_for_context('checkout')); | |
| 1934 | 1997 | $method = $this->get_payment_method_name(); |
| 1935 | 1998 | $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $method); |
| 1936 | - $html = "<a href='$url' class='vipps-express-checkout short $method' title='$title'>$button</a>"; | |
| 1999 | + $url = "#"; | |
| 2000 | + $sec = wp_create_nonce('express'); | |
| 2001 | + $html = "<a href='#' class='vipps-express-checkout short " . esc_attr($method) . "' title='" . esc_attr($title) . "' data-sec='" . esc_attr($sec) . "'>$button</a>"; | |
| 1937 | 2002 | $html = apply_filters('woo_vipps_cart_express_checkout_button', $html, $url); |
| 1938 | 2003 | echo $html; |
| 1939 | 2004 | } |
| 1940 | 2005 | |
| @@ -1973,19 +2038,11 @@ | ||
| 1973 | 2038 | public function express_checkout_button_shortcode() { |
| 1974 | 2039 | $gw = $this->gateway(); |
| 1975 | 2040 | if (!$gw->cart_supports_express_checkout()) return; |
| 1976 | 2041 | ob_start(); |
| 1977 | - $this->cart_express_checkout_button_html('shortcode'); | |
| 2042 | + $this->cart_express_checkout_button_html('cart'); | |
| 1978 | 2043 | return ob_get_clean(); |
| 1979 | 2044 | } |
| 1980 | - // Show a banner normally shown for non-logged-in-users at the checkout page. It does not need to check if we are to show the button, obviously, but needs to see if the cart works | |
| 1981 | - public function express_checkout_banner_shortcode() { | |
| 1982 | - $gw = $this->gateway(); | |
| 1983 | - if (!$gw->cart_supports_express_checkout()) return; | |
| 1984 | - ob_start(); | |
| 1985 | - $this->express_checkout_banner_html(); | |
| 1986 | - return ob_get_clean(); | |
| 1987 | - } | |
| 1988 | 2045 | |
| 1989 | 2046 | // Manage the various product meta fields |
| 1990 | 2047 | public function process_product_meta ($id, $post) { |
| 1991 | 2048 | // This is for the 'buy now' button |
| @@ -2511,82 +2568,9 @@ | ||
| 2511 | 2568 | if ($ok) return $callbackdir; |
| 2512 | 2569 | return null; |
| 2513 | 2570 | } |
| 2514 | 2571 | |
| 2515 | - // Unfortunately, we cannot do any form of portable locking, and we may get callbacks from Vipps arriving at the same moment as we check the status at Vipps, | |
| 2516 | - // which in the very worst case, for Express Checkout orders, may lead to a double shipping line. Changing this to a queue system is non-trivial, because some of | |
| 2517 | - // the operations done when modifying the order actually requires the customers session to be active. This operation will make conflicts a litte less probable | |
| 2518 | - // by implementing something that isn't quite a lock, and the filter may be used to implement proper locking, using e.g. flock, where this can be used | |
| 2519 | - // (non-distributed environments using unix on standard filesystems. IOK 2020-05-15 | |
| 2520 | - // Returns true if lock succeeds, or false. | |
| 2521 | - public function lockOrder($order) { | |
| 2522 | - $orderid = $order->get_id(); | |
| 2523 | - if (has_filter('woo_vipps_lock_order')) { | |
| 2524 | - $ok = apply_filters('woo_vipps_lock_order', $order); | |
| 2525 | - if (!$ok) return false; | |
| 2526 | - } else { | |
| 2527 | - if(get_transient('order_lock_'.$orderid)) return false; | |
| 2528 | - $this->lockKey = uniqid(); | |
| 2529 | - set_transient('order_lock_' . $orderid, $this->lockKey, 30); | |
| 2530 | - } | |
| 2531 | - add_action('shutdown', function () use ($order) { global $Vipps; $Vipps->unlockOrder($order); }); | |
| 2532 | - return true; | |
| 2533 | - } | |
| 2534 | - // If the order is locked, it means it is in the process of being finalized, so for instance, we do *not* want to abandon it | |
| 2535 | - // in checkout. | |
| 2536 | - public function isLocked ($order) { | |
| 2537 | - $orderid = $order->get_id(); | |
| 2538 | - $locked = get_transient('order_lock_'.$orderid); | |
| 2539 | - return apply_filters('woo_vipps_order_locked', $locked, $order); | |
| 2540 | - } | |
| 2541 | - public function unlockOrder($order) { | |
| 2542 | - $orderid = $order->get_id(); | |
| 2543 | - if (has_action('woo_vipps_unlock_order')) { | |
| 2544 | - do_action('woo_vipps_unlock_order', $order); | |
| 2545 | - } else { | |
| 2546 | - if(get_transient('order_lock_'.$orderid) == $this->lockKey) { | |
| 2547 | - delete_transient('order_lock_'.$orderid); | |
| 2548 | - } | |
| 2549 | - } | |
| 2550 | - } | |
| 2551 | 2572 | |
| 2552 | - // Functions using flock() and files to lock orders. This is only guaranteed to work on certain setups, ie, non-distributed setups | |
| 2553 | - // using Unix with normal filesystems (not NFS). | |
| 2554 | - public function flock_lock_order($order) { | |
| 2555 | - global $_orderlocks; | |
| 2556 | - if (!$_orderlocks) $_orderlocks = array(); | |
| 2557 | - $dir = $this->callbackDir(); | |
| 2558 | - if (!$dir) { | |
| 2559 | - $this->log(__("Cannot use flock() to lock orders: cannot create or write to directory", "woo-vipps"), 'error'); | |
| 2560 | - return true; | |
| 2561 | - } | |
| 2562 | - $fname = '.ht-vipps-lock-'.md5($order->get_order_key() . $order->get_meta('_vipps_transaction')); | |
| 2563 | - $path = $dir . DIRECTORY_SEPARATOR . $fname; | |
| 2564 | - touch($path); | |
| 2565 | - if (!is_writable($path)) { | |
| 2566 | - $this->log(__("Cannot use flock() to lock orders: cannot create lockfiles ", "woo-vipps"), 'error'); | |
| 2567 | - return true; | |
| 2568 | - } | |
| 2569 | - $handle = fopen($path, 'w+'); | |
| 2570 | - if (flock($handle, LOCK_EX | LOCK_NB)) { | |
| 2571 | - $_orderlocks[$order->get_id()] = array($handle,$path); | |
| 2572 | - return true; | |
| 2573 | - } | |
| 2574 | - return false; | |
| 2575 | - } | |
| 2576 | - public function flock_unlock_order($order) { | |
| 2577 | - $orderid=$order->get_id(); | |
| 2578 | - global $_orderlocks; | |
| 2579 | - if (!$_orderlocks) return; | |
| 2580 | - if (!isset($_orderlocks[$orderid])) return; | |
| 2581 | - list($handle, $path) = $_orderlocks[$orderid]; | |
| 2582 | - unset($_orderlocks[$orderid]); | |
| 2583 | - flock($handle, LOCK_UN); | |
| 2584 | - fclose($handle); | |
| 2585 | - @unlink($path); | |
| 2586 | - } | |
| 2587 | - | |
| 2588 | - | |
| 2589 | 2573 | // Because the prefix used to create the Vipps order id is editable |
| 2590 | 2574 | // by the user, we will store that as a meta and use this for callbacks etc. |
| 2591 | 2575 | // IOK 2023-01-23 this function is no longer used, and kept only for backwards compatibility with |
| 2592 | 2576 | // debug filters and similar. |
| @@ -2660,8 +2644,32 @@ | ||
| 2660 | 2644 | do_action('woo_vipps_before_handling_special_page', ($_GET['action'] ?? "")); |
| 2661 | 2645 | } |
| 2662 | 2646 | } |
| 2663 | 2647 | |
| 2648 | + // Ran in template redirect for the special page. IOK 2026-09-2 | |
| 2649 | + public function pre_special_page_actions ($action) { | |
| 2650 | + // Change title dynamically depending on action. LP 2026-09-02 | |
| 2651 | + add_filter('the_title', [$this, 'vipps_special_page_endpoint_title'], 10, 2); | |
| 2652 | + | |
| 2653 | + // If we are handling the 'wait for payment' action, we need to poll the order status before | |
| 2654 | + // we start producing content IOK 2026-09-21 | |
| 2655 | + if ($action == 'wait_for_payment') { | |
| 2656 | + $this->handle_payment_poll_and_redirect(); | |
| 2657 | + } | |
| 2658 | + | |
| 2659 | + // Some validation is required for this action | |
| 2660 | + if ($action == 'do_express_checkout') { | |
| 2661 | + $this->vipps_express_checkout_consistency_check(); | |
| 2662 | + } | |
| 2663 | + // These two actions require an extra script | |
| 2664 | + if (in_array($action, ['buy_product','do_express_checkout'])) { | |
| 2665 | + wp_enqueue_script('vipps-purchase', plugins_url('js/vipps-purchase.js',__FILE__), ['vipps-gw'], | |
| 2666 | + filemtime(dirname(__FILE__) . "/js/vipps-purchase.js"), | |
| 2667 | + ['in_footer'=>true] | |
| 2668 | + ); | |
| 2669 | + } | |
| 2670 | + } | |
| 2671 | + | |
| 2664 | 2672 | // Dynamic special page title depending on endpoint/action, only frontend. LP 2026-09-02 |
| 2665 | 2673 | public function vipps_special_page_endpoint_title($title, $postid = 0) { |
| 2666 | 2674 | global $wp_query; |
| 2667 | 2675 | // Comment from woocommerce's wc_page_endpoint_title where this logic is from: LP 2026-09-02 |
| @@ -2810,8 +2818,12 @@ | ||
| 2810 | 2818 | |
| 2811 | 2819 | add_action('woocommerce_after_add_to_cart_button', array($this, 'single_product_buy_now_button')); |
| 2812 | 2820 | add_action('woocommerce_after_shop_loop_item', array($this, 'loop_single_product_buy_now_button'), 20); |
| 2813 | 2821 | |
| 2822 | + // For the classic checkout page and pay-for-order page, use a custom submit button when payment method | |
| 2823 | + // is Vipps | |
| 2824 | + add_action('woocommerce_review_order_after_submit', array($this, 'add_checkout_button_for_classic')); | |
| 2825 | + add_action('woocommerce_pay_order_after_submit', array($this, 'add_checkout_button_for_classic')); | |
| 2814 | 2826 | |
| 2815 | 2827 | // Special pages and callbacks handled by template_redirect. IOK 2023-02-22 |
| 2816 | 2828 | add_action('template_redirect', array($this,'template_redirect'),1); |
| 2817 | 2829 | |
| @@ -2821,21 +2833,8 @@ | ||
| 2821 | 2833 | // Ajax endpoints for checking the order status while waiting for confirmation |
| 2822 | 2834 | add_action('wp_ajax_nopriv_check_order_status', array($this, 'ajax_check_order_status')); |
| 2823 | 2835 | add_action('wp_ajax_check_order_status', array($this, 'ajax_check_order_status')); |
| 2824 | 2836 | |
| 2825 | - | |
| 2826 | - // Buying a single product directly using express checkout IOK 2018-09-28 | |
| 2827 | - add_action('wp_ajax_nopriv_vipps_buy_single_product', array($this, 'ajax_vipps_buy_single_product')); | |
| 2828 | - add_action('wp_ajax_vipps_buy_single_product', array($this, 'ajax_vipps_buy_single_product')); | |
| 2829 | - | |
| 2830 | - // This is for express checkout which we will also do asynchronously IOK 2018-05-28 | |
| 2831 | - add_action('wp_ajax_nopriv_do_express_checkout', array($this, 'ajax_do_express_checkout')); | |
| 2832 | - add_action('wp_ajax_do_express_checkout', array($this, 'ajax_do_express_checkout')); | |
| 2833 | - | |
| 2834 | - // Same thing, but for single products IOK 2018-05-28 | |
| 2835 | - add_action('wp_ajax_nopriv_do_single_product_express_checkout', array($this, 'ajax_do_single_product_express_checkout')); | |
| 2836 | - add_action('wp_ajax_do_single_product_express_checkout', array($this, 'ajax_do_single_product_express_checkout')); | |
| 2837 | - | |
| 2838 | 2837 | // Handle the cancel unpaid order action when the "hold stock" times out. |
| 2839 | 2838 | // For *normal* vipps orders, we run another cronjob every 5. minute which checks order status, |
| 2840 | 2839 | // therefore here it suffices to check if the order is 'cancelled' at Vipps, and if so we return. |
| 2841 | 2840 | // For Checkout the rules are different though. |
| @@ -2914,9 +2913,8 @@ | ||
| 2914 | 2913 | $this->vippsJSConfig = array(); |
| 2915 | 2914 | $this->vippsJSConfig['vippsajaxurl'] = admin_url('admin-ajax.php'); |
| 2916 | 2915 | $this->vippsJSConfig['BuyNowWith'] = __('Buy now with', 'woo-vipps'); |
| 2917 | 2916 | $this->vippsJSConfig['BuyNowWithVipps'] = sprintf(__('Buy now with %1$s', 'woo-vipps'), $this->get_payment_method_name()); |
| 2918 | - $this->vippsJSConfig['vippslogourl'] = plugins_url('img/vipps_logo_negativ_rgb_transparent.png',__FILE__); | |
| 2919 | 2917 | $this->vippsJSConfig['vippssmileurl'] = plugins_url('img/vmp-logo.png',__FILE__); |
| 2920 | 2918 | $this->vippsJSConfig['vippsbuynowbutton'] = sprintf(__( '%1$s Buy Now button', 'woo-vipps' ), $this->get_payment_method_name()); |
| 2921 | 2919 | $this->vippsJSConfig['vippsbuynowdescription'] = sprintf(__( 'Add a %1$s Buy Now-button to the product block or choose a product manually', 'woo-vipps'), $this->get_payment_method_name()); |
| 2922 | 2920 | $this->vippsJSConfig['vippslanguage'] = $this->get_customer_language(); |
| @@ -2921,10 +2919,17 @@ | ||
| 2921 | 2919 | $this->vippsJSConfig['vippsbuynowdescription'] = sprintf(__( 'Add a %1$s Buy Now-button to the product block or choose a product manually', 'woo-vipps'), $this->get_payment_method_name()); |
| 2922 | 2920 | $this->vippsJSConfig['vippslanguage'] = $this->get_customer_language(); |
| 2923 | 2921 | $this->vippsJSConfig['vippslocale'] = get_locale(); |
| 2924 | 2922 | $this->vippsJSConfig['vippsexpressbuttonurl'] = $this->get_payment_method_name(); |
| 2925 | - | |
| 2923 | + $this->vippsJSConfig['paymentMethodSlug'] = sanitize_title($this->get_payment_method_name()); | |
| 2924 | + $this->vippsJSConfig['paymentMethodName'] = $this->get_payment_method_name(); | |
| 2925 | + $wc_lang = $this->get_html_button_attrs_for_context()['language']; | |
| 2926 | + if ('store' === $wc_lang) $wc_lang = $this->get_customer_language(); | |
| 2927 | + // Looks like button and badge web components now use 'da' instead of 'dk' for danish. LP 2026-08-11 | |
| 2928 | + if ('dk' === $wc_lang) $wc_lang = 'da'; | |
| 2929 | + $this->vippsJSConfig['webcomponentLanguage'] = $wc_lang; | |
| 2926 | 2930 | |
| 2931 | + | |
| 2927 | 2932 | // If the site supports Gutenberg Blocks, support the Checkout block IOK 2020-08-10 |
| 2928 | 2933 | if (class_exists('Automattic\WooCommerce\Blocks\Payments\Integrations\AbstractPaymentMethodType')) { |
| 2929 | 2934 | // Ensure gateways are loaded at this point IOK 2026-05-27 |
| 2930 | 2935 | require_once(dirname(__FILE__) . '/WC_Gateway_VippsCard.class.php'); |
| @@ -3796,9 +3801,9 @@ | ||
| 3796 | 3801 | $shipping_method = $methodclass ? new $methodclass($rate->get_instance_id()) : null; |
| 3797 | 3802 | |
| 3798 | 3803 | $tax = $rate->get_shipping_tax() ?: 0; |
| 3799 | 3804 | $cost = $rate->get_cost() ?: 0; |
| 3800 | - $label = $rate->get_label(); | |
| 3805 | + $label = html_entity_decode($rate->get_label()); | |
| 3801 | 3806 | |
| 3802 | 3807 | if ($cost == 0 && ($methodid != 'local_pickup' && $methodid != 'pickup_location')) { |
| 3803 | 3808 | $has_free_shipping = true; |
| 3804 | 3809 | } |
| @@ -3824,9 +3829,9 @@ | ||
| 3824 | 3829 | $shippingcostB = sprintf("%.2F",wc_format_decimal($cost, '') + wc_format_decimal($tax,'')); |
| 3825 | 3830 | $shippingcost = max($shippingcostA, $shippingcostB); |
| 3826 | 3831 | |
| 3827 | 3832 | $vippsmethod['shippingCost'] = $shippingcost; |
| 3828 | - $vippsmethod['shippingMethod'] = $rate->get_label(); | |
| 3833 | + $vippsmethod['shippingMethod'] = html_entity_decode($rate->get_label()); | |
| 3829 | 3834 | $vippsmethod['shippingMethodId'] = $key; |
| 3830 | 3835 | $vippsmethods[]=$vippsmethod; |
| 3831 | 3836 | |
| 3832 | 3837 | // Metadata and settings stored for later use for Checkout |
| @@ -4140,9 +4145,9 @@ | ||
| 4140 | 4145 | WC()->cart->calculate_totals(); |
| 4141 | 4146 | WC()->cart->set_session(); |
| 4142 | 4147 | return true; |
| 4143 | 4148 | } catch (Exception $e) { |
| 4144 | - $this->log(sprintf(__("Error regenerating cart from order %1\$d: %2\$s", 'woo-vipps'), $order_id, $e->get_message()), 'error'); | |
| 4149 | + $this->log(sprintf(__("Error regenerating cart from order %1\$d: %2\$s", 'woo-vipps'), $order_id, $e->getMessage()), 'error'); | |
| 4145 | 4150 | return false; |
| 4146 | 4151 | } |
| 4147 | 4152 | } |
| 4148 | 4153 | |
| @@ -4171,9 +4176,9 @@ | ||
| 4171 | 4176 | $tax = $rate->get_shipping_tax() ?: 0; |
| 4172 | 4177 | $cost = $rate->get_cost() ?: 0; |
| 4173 | 4178 | |
| 4174 | 4179 | $method['shippingCost'] = sprintf("%.2F",wc_format_decimal($cost+$tax,'')); |
| 4175 | - $method['shippingMethod'] = $rate->get_label(); | |
| 4180 | + $method['shippingMethod'] = html_entity_decode($rate->get_label()); | |
| 4176 | 4181 | // We may not really need the tax stashed here, but just to be sure. |
| 4177 | 4182 | $method['shippingMethodId'] = $rate->get_id() . ";" . $tax; |
| 4178 | 4183 | $methods[]= $method; |
| 4179 | 4184 | |
| @@ -4252,9 +4257,11 @@ | ||
| 4252 | 4257 | if ( empty($_REQUEST['add-to-cart']) || ! is_numeric($_REQUEST['add-to-cart']) || empty($_REQUEST['vipps_compat_mode']) || !$_REQUEST['vipps_compat_mode']) { |
| 4253 | 4258 | return $url; |
| 4254 | 4259 | } |
| 4255 | 4260 | $url = $this->express_checkout_url(); |
| 4256 | - $url = wp_nonce_url($url,'express','sec'); | |
| 4261 | + // At this point, there is always a query argument here. IOK 2026-09-21 | |
| 4262 | + $nonce = wp_create_nonce('express'); | |
| 4263 | + $url = $url . "&sec=$nonce"; | |
| 4257 | 4264 | |
| 4258 | 4265 | return $url; |
| 4259 | 4266 | } |
| 4260 | 4267 | |
| @@ -4451,28 +4458,12 @@ | ||
| 4451 | 4458 | $order = wc_get_order($order->get_id()); |
| 4452 | 4459 | $order_status = $order->get_status(); |
| 4453 | 4460 | |
| 4454 | 4461 | if ($order_status != 'pending') return $order_status; |
| 4455 | - // No callback has occured yet. If this has been going on for a while, check directly with Vipps | |
| 4456 | - // We can't use the vipps init timestamp here, because that may be in the past for Checkout at least. IOK 2025-08-13 | |
| 4457 | - if ($order_status == 'pending') { | |
| 4458 | - if (WC()->session) { | |
| 4459 | - $now = time(); | |
| 4460 | - $then = WC()->session->get('_vipps_check_' . $order->get_id()); | |
| 4461 | - if (!$then) { | |
| 4462 | - $then = $now; | |
| 4463 | - WC()->session->set('_vipps_check_' . $order->get_id(), $then); | |
| 4464 | - } | |
| 4465 | - if (($then + (1 * 30)) > $now) { // more than half a minute? Start checking at Vipps | |
| 4466 | - return $order_status; | |
| 4467 | - } | |
| 4468 | - } else { | |
| 4469 | - // No session shouldn't be possible, but if it is.. | |
| 4470 | - return $order_status; | |
| 4471 | - } | |
| 4472 | - } | |
| 4462 | + | |
| 4463 | + $gw = $this->gateway(); | |
| 4473 | 4464 | $this->log("Checking order status on Vipps for order id: " . $order->get_id(), 'info'); |
| 4474 | - return $this->check_status_of_pending_order($order); | |
| 4465 | + $newstatus = $gw->poll_and_check_order_status($order); | |
| 4475 | 4466 | } |
| 4476 | 4467 | |
| 4477 | 4468 | // In some situations we have to empty the cart when the user goes to Vipps, so |
| 4478 | 4469 | // we store it in the session and restore it if the users cancels. IOK 2018-05-07 |
| @@ -4540,8 +4531,9 @@ | ||
| 4540 | 4531 | |
| 4541 | 4532 | // Maybe log in user |
| 4542 | 4533 | // It is done on the thank-you page of the order, and only for express checkout. |
| 4543 | 4534 | function maybe_log_in_user ($order) { |
| 4535 | + | |
| 4544 | 4536 | if (is_user_logged_in()) return; |
| 4545 | 4537 | if (!$order || ! self::is_vipps_order($order)) return; |
| 4546 | 4538 | |
| 4547 | 4539 | // We *do* want to log in express checkout customers, but not those that |
| @@ -4687,129 +4679,233 @@ | ||
| 4687 | 4679 | } |
| 4688 | 4680 | if (!$o) return; |
| 4689 | 4681 | if (!$o->get_meta('_vipps_single_product_express')) return; |
| 4690 | 4682 | if ($failed && !apply_filters('woo_vipps_restore_cart_on_express_checkout_failure', true, $o)) return; |
| 4691 | - if ($failed) WC()->cart->empty_cart(); | |
| 4683 | + // Restoring cart! But clear it first so we dont add this single product to the restored cart. LP 2026-09-22 | |
| 4684 | + WC()->cart->empty_cart(); | |
| 4692 | 4685 | $this->restore_cart($o); |
| 4693 | 4686 | } |
| 4694 | 4687 | |
| 4695 | 4688 | |
| 4696 | - public function ajax_vipps_buy_single_product () { | |
| 4697 | - Vipps::nocache(); | |
| 4698 | - static::set_locale_if_in_header(); | |
| 4699 | - // We're not checking ajax referer here, because what we do is creating a session and redirecting to the | |
| 4700 | - // 'create order' page wherein we'll do the actual work. IOK 2018-09-28 | |
| 4701 | - $session = WC()->session; | |
| 4702 | - if (!$session->has_session()) { | |
| 4703 | - $session->set_customer_session_cookie(true); | |
| 4689 | + // Actually create a express checkout order object, with no shipping or personal information, returning information about | |
| 4690 | + // the result. The order should at this point be in a/the cart. For single product purchases, this is a different cart than | |
| 4691 | + // the main one; for cart purchases, it's just the WC()->cart object. IOK 2026-08-25 | |
| 4692 | + private function create_and_process_express_order() { | |
| 4693 | + $result = null; | |
| 4694 | + $gw = $this->gateway(); | |
| 4695 | + try { | |
| 4696 | + $orderid = $gw->create_partial_order(); | |
| 4697 | + do_action('woo_vipps_ajax_do_express_checkout', $orderid); | |
| 4698 | + } catch (Exception $e) { | |
| 4699 | + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false); | |
| 4700 | + return $result; | |
| 4701 | + } | |
| 4702 | + if (!$orderid) { | |
| 4703 | + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4704 | + return $result; | |
| 4704 | 4705 | } |
| 4705 | - $session->set('__vipps_buy_product', json_encode($_REQUEST)); | |
| 4706 | 4706 | |
| 4707 | - // Incredibly, some caches will cache this page even with cookies set and no-cache headers set. So we try to | |
| 4708 | - // add yet another way to inform caches that this is, in fact, not cacheable. IOK 2023-06-12 | |
| 4709 | - $url = add_query_arg('nc', sha1(uniqid(WC()->session->get_customer_id(),true)), $this->buy_product_url()); | |
| 4707 | + try { | |
| 4708 | + $this->maybe_add_static_shipping($gw,$orderid); | |
| 4709 | + } catch (Exception $e) { | |
| 4710 | + $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error'); | |
| 4711 | + $this->log($e->getMessage(),'error'); | |
| 4712 | + $result = array('ok'=>0, 'orderid'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4713 | + return $result; | |
| 4714 | + } | |
| 4710 | 4715 | |
| 4711 | - $result = array('ok'=>1, 'msg'=>__('Processing order... ','woo-vipps'), 'url'=> $url); | |
| 4712 | - wp_send_json($result); | |
| 4713 | - exit(); | |
| 4716 | + // Now pass this to the Woo gateway and get a redirect URL back IOK 2026-08-25 | |
| 4717 | + $ok = $gw->process_payment($orderid); | |
| 4718 | + if ($ok && $ok['result'] == 'success') { | |
| 4719 | + $result = array('ok'=>1, 'orderid'=>$orderid, 'msg'=>'', 'url'=>$ok['redirect']); | |
| 4720 | + return $result; | |
| 4721 | + } | |
| 4722 | + $result = array('ok'=>0, 'orderid'=>$orderid, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>''); | |
| 4723 | + return $result; | |
| 4714 | 4724 | } |
| 4715 | 4725 | |
| 4716 | - public function ajax_do_express_checkout () { | |
| 4717 | - check_ajax_referer('do_express','sec'); | |
| 4718 | - Vipps::nocache(); | |
| 4719 | - static::set_locale_if_in_header(); | |
| 4726 | + // This creates a simple hash for the 'current order' which we will store in the session if we proceed to checkout. We use this to | |
| 4727 | + // avoid/warn the user of duplicate purchases. IOK 2026-09-09 | |
| 4728 | + public function create_order_hash($args=null) { | |
| 4729 | + // If we have no arguments, we'll hash the cart. | |
| 4730 | + if (empty($args)) { | |
| 4731 | + $cartitems = WC()->cart->get_cart(); | |
| 4732 | + $orderspec = array(); | |
| 4733 | + foreach($cartitems as $item => $values) { | |
| 4734 | + $orderspec[] = array('sku'=> ($values['sku'] ?? ""), 'product_id'=>($values['product_id'] ?? 0), 'variation_id'=>($values['variation_id'] ?? 0), 'quantity'=>($values['quantity'] ?? 1)); | |
| 4735 | + } | |
| 4736 | + $args = $orderspec; | |
| 4737 | + } | |
| 4738 | + return md5(serialize($args)); | |
| 4739 | + } | |
| 4740 | + | |
| 4741 | + | |
| 4742 | + // This method may provide HTML form elements to ask a user questions after starting | |
| 4743 | + // express checkout. It is used to detect duplicate orders, possibly for terms and conditions, and user-definiable customizations. IOK 2026-09-09 | |
| 4744 | + // NULL productinfo means use the cart; the "current hash" is used to detect duplicates, and is calculated by the caller. | |
| 4745 | + public function express_order_needs_confirmation($args, $productinfo, $current_hash) { | |
| 4746 | + $elements = []; | |
| 4747 | + $html = ""; | |
| 4748 | + | |
| 4749 | + // First, let's check if we need to confirm the purchase. | |
| 4750 | + $last_express_purchase_hash = WC()->session->get('woo_vipps_last_express'); | |
| 4751 | + if ($last_express_purchase_hash) { | |
| 4752 | + list($hash, $orderid, $stamp) = explode(":", $last_express_purchase_hash); | |
| 4753 | + $cutoff = $stamp + apply_filters('woo_vipps_recent_order_cutoff', (3*60)); | |
| 4754 | + if ($hash == $current_hash && (time() <= $cutoff )) { | |
| 4755 | + $order = wc_get_order($orderid); | |
| 4756 | + $status = $order ? $order->get_status() : false; | |
| 4757 | + // IOK TODO/FIXME actually, if the order is pending/failed/cancelled and *identical* to our current productinfo, we could plausibly do a restart here. Would probably require careful checking though, and | |
| 4758 | + // a different flow. IOK 2026-09-17 | |
| 4759 | + if (in_array($status, ['on-hold', 'processing', 'completed'])) { | |
| 4760 | + $header = __("Are you sure?",'woo-vipps'); | |
| 4761 | + $body = __("You recently completed an order with exactly the same products as you are buying now. There should be an email in your inbox from the previous purchase. Are you sure you want to order again?",'woo-vipps'); | |
| 4762 | + $elements['possible_duplicate'] = "<h1>$header</h1><p>$body</p>"; | |
| 4763 | + $this->log(__("It seems a customer is trying to re-order product(s) recently bought in the same session, asking user for confirmation", 'woo-vipps'), 'info'); | |
| 4764 | + } | |
| 4765 | + } | |
| 4766 | + } | |
| 4767 | + | |
| 4720 | 4768 | $gw = $this->gateway(); |
| 4769 | + $askForTerms = function_exists('wc_terms_and_conditions_checkbox_enabled') ? wc_terms_and_conditions_checkbox_enabled() : true; | |
| 4770 | + $askForTerms = $askForTerms && ($gw->get_option('expresscheckout_termscheckbox') == 'yes'); | |
| 4771 | + $askForTerms = apply_filters('woo_vipps_express_checkout_terms_and_conditions_checkbox_enabled', $askForTerms); | |
| 4721 | 4772 | |
| 4722 | - if (!$gw->express_checkout_available() || !$gw->cart_supports_express_checkout()) { | |
| 4723 | - $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); | |
| 4724 | - wp_send_json($result); | |
| 4725 | - exit(); | |
| 4773 | + if ($askForTerms) { | |
| 4774 | + $termsHTML = ''; | |
| 4775 | + // Include shop terms | |
| 4776 | + ob_start(); | |
| 4777 | + wc_get_template('checkout/terms.php'); | |
| 4778 | + $termsHTML = ob_get_clean(); | |
| 4779 | + $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML); | |
| 4780 | + $elements['terms'] = $termsHTML; | |
| 4726 | 4781 | } |
| 4727 | 4782 | |
| 4783 | + // Custom fields | |
| 4784 | + ob_start(); | |
| 4785 | + do_action('woo_vipps_express_checkout_orderspec_form', $productinfo, $args); | |
| 4786 | + $extra_fields = ob_get_clean(); | |
| 4787 | + if (!empty($extra_fields)) { | |
| 4788 | + $elements['extra'] = $extra_fields; | |
| 4789 | + } | |
| 4728 | 4790 | |
| 4729 | - | |
| 4791 | + if (!empty($elements)) { | |
| 4792 | + $html = join("\n", array_values($elements)); | |
| 4793 | + $msg = join(",", array_keys($elements)); | |
| 4794 | + return ['ok'=>2, 'msg'=>$msg, 'html'=>$html, 'url'=>'']; | |
| 4795 | + } | |
| 4730 | 4796 | |
| 4797 | + return false; | |
| 4798 | + | |
| 4799 | + } | |
| 4800 | + | |
| 4801 | + public function rest_do_express_checkout ($request) { | |
| 4802 | + Vipps::nocache(); | |
| 4803 | + check_ajax_referer('express', 'sec'); | |
| 4804 | + static::set_locale_if_in_header(); | |
| 4805 | + $args = $request->get_json_params(); | |
| 4806 | + if (!$args) { | |
| 4807 | + return new WP_Error('no_data', __('No data passed to express checkout', 'woo-vipps'), ['status' => 400]); | |
| 4808 | + } | |
| 4809 | + | |
| 4810 | + // Since this is the REST api, we need to load the cart manually here. IOK 2026-08-27 | |
| 4811 | + if ( is_null( WC()->cart ) ) { | |
| 4812 | + WC()->frontend_includes(); | |
| 4813 | + if ( ! WC()->session instanceof WC_Session ) { | |
| 4814 | + WC()->session = new WC_Session_Handler(); | |
| 4815 | + WC()->session->init(); | |
| 4816 | + } | |
| 4817 | + if (is_null( WC()->customer)) { | |
| 4818 | + WC()->customer = new WC_Customer( get_current_user_id(), true ); | |
| 4819 | + } | |
| 4820 | + WC()->cart = new WC_Cart(); | |
| 4821 | + WC()->cart->get_cart_from_session(); | |
| 4822 | + } | |
| 4823 | + | |
| 4824 | + | |
| 4825 | + $gw = $this->gateway(); | |
| 4826 | + if (!$gw->express_checkout_available() || !$gw->cart_supports_express_checkout()) { | |
| 4827 | + $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); | |
| 4828 | + return $result; | |
| 4829 | + } | |
| 4731 | 4830 | // Validate cart going forward using same logic as WC_Cart->check_cart() but not adding notices. |
| 4732 | 4831 | $toolate = false; |
| 4733 | 4832 | $msg = ""; |
| 4734 | 4833 | $valid = WC()->cart->check_cart_item_validity(); |
| 4735 | 4834 | if ( is_wp_error( $valid) ) { |
| 4736 | - $toolate = true; | |
| 4737 | - $msg = "<br>" . $valid->get_error_message(); | |
| 4835 | + $toolate = true; | |
| 4836 | + $msg = "<br>" . $valid->get_error_message(); | |
| 4738 | 4837 | } |
| 4739 | 4838 | $stock = WC()->cart->check_cart_item_stock(); |
| 4740 | - if ( is_wp_error( $stock) ) { | |
| 4741 | - $toolate = true; | |
| 4742 | - $msg = "<br>" . $stock->get_error_message(); | |
| 4743 | - } | |
| 4839 | + if ( is_wp_error( $stock) ) { | |
| 4840 | + $toolate = true; | |
| 4841 | + $msg = "<br>" . $stock->get_error_message(); | |
| 4842 | + } | |
| 4744 | 4843 | |
| 4745 | 4844 | if ($toolate) { |
| 4746 | 4845 | $result = array('ok'=>0, 'msg'=>sprintf(__('Some of the products in your cart are no longer available in the quantities you have ordered. Please <a href="%1$s">edit your order</a> before continuing the checkout','woo-vipps'), wc_get_cart_url()) . $msg, 'url'=>false); |
| 4747 | - wp_send_json($result); | |
| 4748 | - exit(); | |
| 4846 | + return $result; | |
| 4749 | 4847 | } |
| 4750 | 4848 | |
| 4751 | - try { | |
| 4752 | - $orderid = $gw->create_partial_order(); | |
| 4753 | - do_action('woo_vipps_ajax_do_express_checkout', $orderid); | |
| 4754 | - } catch (Exception $e) { | |
| 4755 | - $this->log($e->getMessage(),'error'); | |
| 4756 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false); | |
| 4757 | - wp_send_json($result); | |
| 4758 | - exit(); | |
| 4759 | - } | |
| 4760 | - if (!$orderid) { | |
| 4761 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4762 | - wp_send_json($result); | |
| 4763 | - exit(); | |
| 4849 | + // Then the cookies. These would be the _ga and sbjs_ cookies typically, but we'll let users handle these themselves. | |
| 4850 | + // These are passed as arguments from the javascript, since proxies are likely to strip them. This should allow | |
| 4851 | + // systems like MonsterInsights that look for the _GA cookie to succeed. IOK 2026-08-30 | |
| 4852 | + $cookies = $args['cookies'] ?? []; | |
| 4853 | + foreach($cookies as $key => $value) { | |
| 4854 | + if (!isset($_COOKIE[$key])) { | |
| 4855 | + $_COOKIE[$key] = $value; | |
| 4856 | + } | |
| 4764 | 4857 | } |
| 4858 | + // There might be extra values here now, which would typically have been posted as POST arguments, in a form. | |
| 4859 | + // User-defined stuff and so on. We'll initiate the POST value with these to simulate this for backwards compatibility. | |
| 4860 | + $others =$args['post'] ?? []; | |
| 4861 | + foreach($args['post'] as $key=>$value) { | |
| 4862 | + $_POST[$key] = $value; | |
| 4863 | + } | |
| 4765 | 4864 | |
| 4766 | - try { | |
| 4767 | - $this->maybe_add_static_shipping($gw,$orderid); | |
| 4768 | - } catch (Exception $e) { | |
| 4769 | - $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error'); | |
| 4770 | - $this->log($e->getMessage(),'error'); | |
| 4771 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4772 | - wp_send_json($result); | |
| 4773 | - exit(); | |
| 4865 | + // Try to avoid re-purchasing the same order repeatedly. IOK 2026-09-02 | |
| 4866 | + $current_hash = $this->create_order_hash(); | |
| 4867 | + $confirmation = (bool) intval(($others['confirmed'] ?? 0)); | |
| 4868 | + if (!$confirmation) { | |
| 4869 | + $result = $this->express_order_needs_confirmation($args, null, $current_hash); | |
| 4870 | + if (!empty($result)) { | |
| 4871 | + return $result; | |
| 4872 | + } | |
| 4774 | 4873 | } |
| 4775 | - | |
| 4776 | - $ok = $gw->process_payment($orderid); | |
| 4777 | - if ($ok && $ok['result'] == 'success') { | |
| 4778 | - $result = array('ok'=>1, 'msg'=>'', 'url'=>$ok['redirect']); | |
| 4779 | - wp_send_json($result); | |
| 4780 | - exit(); | |
| 4874 | + | |
| 4875 | + $result = $this->create_and_process_express_order(); | |
| 4876 | + if ($result['ok'] == 1) { | |
| 4877 | + $orderid = $result['orderid']; | |
| 4878 | + WC()->session->set('woo_vipps_last_express', "$current_hash:$orderid:" . time()); | |
| 4879 | + WC()->session->save_data(); | |
| 4781 | 4880 | } |
| 4782 | - $result = array('ok'=>0, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>''); | |
| 4783 | - wp_send_json($result); | |
| 4784 | - exit(); | |
| 4881 | + return $result; | |
| 4882 | + | |
| 4785 | 4883 | } |
| 4786 | 4884 | |
| 4787 | - // Same as ajax_do_express_checkout, but for a single product/variation. Duplicate code because we want to manipulate the cart differently here. IOK 2018-09-25 | |
| 4788 | - public function ajax_do_single_product_express_checkout() { | |
| 4789 | - check_ajax_referer('do_express','sec'); | |
| 4790 | - Vipps::nocache(); | |
| 4885 | + | |
| 4886 | + // Rest handler for single product express checkout. Expects arguments as JSON. IOK 2026-08-25 | |
| 4887 | + public function rest_do_single_product_express_checkout ($request) { | |
| 4888 | + Vipps::nocache(); | |
| 4791 | 4889 | static::set_locale_if_in_header(); |
| 4792 | - require_once(dirname(__FILE__) . "/WC_Gateway_Vipps.class.php"); | |
| 4793 | - $gw = $this->gateway(); | |
| 4794 | - | |
| 4795 | - if (!$gw->express_checkout_available()) { | |
| 4796 | - $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); | |
| 4797 | - wp_send_json($result); | |
| 4798 | - exit(); | |
| 4890 | + $args = $request->get_json_params(); | |
| 4891 | + if (!$args) { | |
| 4892 | + return new WP_Error('no_data', __('No data passed to express checkout', 'woo-vipps'), ['status' => 400]); | |
| 4799 | 4893 | } |
| 4894 | + $result = ['ok' => 0, 'msg'=>'', 'orderid'=>0, 'url'=>'']; | |
| 4800 | 4895 | |
| 4896 | + // We receive the varid, prodid, sku and quantity directly. One of these. The sku is the dominant one. IOK 2026-08-27 | |
| 4897 | + $varid = intval($args['variation_id'] ?? 0); | |
| 4898 | + $prodid = intval($args['product_id'] ?? 0); | |
| 4899 | + $sku = sanitize_text_field($args['sku'] ?? ""); | |
| 4900 | + $quantity = max(1, intval($args['quantity'] ?? 0)); | |
| 4801 | 4901 | |
| 4802 | - // Here we will either have a product-id, a variant-id and a product-id, or just a SKU. The product-id will not be a variant - but | |
| 4803 | - // we'll double-check just in case. Also if we somehow *just* get a variant-id we should fix that too. But a SKU trumps all. IOK 2018-10-02 | |
| 4804 | - $varid = intval(@$_POST['variation_id']); | |
| 4805 | - $prodid = intval(@$_POST['product_id']); | |
| 4806 | - $sku = sanitize_text_field(@$_POST['sku']); | |
| 4807 | - $quant = intval(@$_POST['quantity']); | |
| 4808 | 4902 | |
| 4809 | - // Get any attributes posted for variable products (where one of the dimensions is "any" for instance) | |
| 4810 | - $variations = array(); | |
| 4811 | - foreach ($_POST as $key => $value ) { | |
| 4903 | + // We expect the variations - that is, the fields named "attribute_..." to be sent as post fields. | |
| 4904 | + // We just need to sanitize them. | |
| 4905 | + $variations = []; | |
| 4906 | + $invars = $args['post'] ?? []; | |
| 4907 | + foreach ($invars as $key => $value) { | |
| 4812 | 4908 | if ( 'attribute_' !== substr( $key, 0, 10 ) ) { |
| 4813 | 4909 | continue; |
| 4814 | 4910 | } |
| 4815 | 4911 | $variations[ sanitize_title( wp_unslash( $key ) ) ] = wp_unslash( $value ); |
| @@ -4814,15 +4910,94 @@ | ||
| 4814 | 4910 | } |
| 4815 | 4911 | $variations[ sanitize_title( wp_unslash( $key ) ) ] = wp_unslash( $value ); |
| 4816 | 4912 | } |
| 4817 | 4913 | |
| 4818 | - $product = null; | |
| 4819 | - $variant = null; | |
| 4820 | - $parent = null; | |
| 4821 | - $parentid = null; | |
| 4822 | - $quantity = 1; | |
| 4823 | - if ($quant && $quant>1) $quantity=$quant; | |
| 4914 | + // Then the cookies. These would be the _ga and sbjs_ cookies typically, but we'll let users handle these themselves. | |
| 4915 | + // These are passed as arguments from the javascript, since proxies are likely to strip them. This should allow | |
| 4916 | + // systems like MonsterInsights that look for the _GA cookie to succeed. IOK 2026-08-30 | |
| 4917 | + $cookies = $args['cookies'] ?? []; | |
| 4918 | + foreach($cookies as $key => $value) { | |
| 4919 | + if (!isset($_COOKIE[$key])) { | |
| 4920 | + $_COOKIE[$key] = $value; | |
| 4921 | + } | |
| 4922 | + } | |
| 4824 | 4923 | |
| 4924 | + // There might be extra values here now, which would typically have been posted as POST arguments, in a form. | |
| 4925 | + // User-defined stuff and so on. We'll initiate the POST value with these to simulate this for backwards compatibility. | |
| 4926 | + $others =$args['post'] ?? []; | |
| 4927 | + foreach($args['post'] as $key=>$value) { | |
| 4928 | + $_POST[$key] = $value; | |
| 4929 | + } | |
| 4930 | + | |
| 4931 | + // Since this is the REST api, we need to load the cart manually here. *Not* loading the cart could be an option but unpredictable. IOK 2026-08-27 | |
| 4932 | + if ( is_null( WC()->cart ) ) { | |
| 4933 | + WC()->frontend_includes(); | |
| 4934 | + if ( ! WC()->session instanceof WC_Session ) { | |
| 4935 | + WC()->session = new WC_Session_Handler(); | |
| 4936 | + WC()->session->init(); | |
| 4937 | + | |
| 4938 | + // If we don't have a session cookie, we need to set it, and also initialize the $_COOKIE value. IOK 2026-09-29 | |
| 4939 | + if (! WC()->session->get_session_cookie()) { | |
| 4940 | + $store_session_cookie = function ( $options, $name, $value ) { $_COOKIE[$name] = $value; return $options;}; | |
| 4941 | + add_filter('woocommerce_set_cookie_options', $store_session_cookie, 10, 3); | |
| 4942 | + try { | |
| 4943 | + WC()->session->set_customer_session_cookie( true ); // We have to explicitly set the cookie if this session is fresh. IOK 2026-09-29 | |
| 4944 | + } finally { | |
| 4945 | + remove_filter('woocommerce_set_cookie_options', $store_session_cookie, 10); | |
| 4946 | + } | |
| 4947 | + } | |
| 4948 | + } | |
| 4949 | + if (is_null( WC()->customer)) { | |
| 4950 | + WC()->customer = new WC_Customer( get_current_user_id(), true ); | |
| 4951 | + } | |
| 4952 | + WC()->cart = new WC_Cart(); | |
| 4953 | + WC()->cart->get_cart_from_session(); | |
| 4954 | + } | |
| 4955 | + | |
| 4956 | + // Try to avoid re-purchasing the same order repeatedly. IOK 2026-09-02 | |
| 4957 | + // We calculate this here so we can add it to the session later. IOK 2026-09-09 | |
| 4958 | + $orderspec = array('sku'=> $sku, 'product_id'=>$prodid, 'variation_id'=>$varid, 'quantity'=>$quantity); | |
| 4959 | + $current_hash = $this->create_order_hash($orderspec); | |
| 4960 | + | |
| 4961 | + // Now to handle "extra questions" for an order, including terms + conditions and "possible duplicate order" IOK 2026-09-09 | |
| 4962 | + $confirmation = (bool) intval(($others['confirmed'] ?? 0)); | |
| 4963 | + if (!$confirmation) { | |
| 4964 | + $result = $this->express_order_needs_confirmation($args, $orderspec, $current_hash); | |
| 4965 | + if (!empty($result)) { | |
| 4966 | + $response = new WP_REST_Response($result); | |
| 4967 | + $response->set_status(200); | |
| 4968 | + return $response; | |
| 4969 | + } | |
| 4970 | + } | |
| 4971 | + | |
| 4972 | + // Basically always return 200 after this, and always return an object with an 'ok' and a 'msg' value, possibly 'orderid' and 'url'. | |
| 4973 | + $result = $this->really_do_single_product_express_checkout($prodid, $varid, $sku, $quantity, $variations); | |
| 4974 | + // And if we're going to express now so let's note the order. IOK 2026-08-27. Now this assumes success, but *basically* I think this is ok. | |
| 4975 | + // We'll reset it on order failure I think. IOK 2026-08-20 FIXME | |
| 4976 | + if ($result['ok'] == 1) { | |
| 4977 | + $orderid = $result['orderid']; | |
| 4978 | + WC()->session->set('woo_vipps_last_express', "$current_hash:$orderid:" . time()); | |
| 4979 | + WC()->session->save_data(); | |
| 4980 | + } | |
| 4981 | + | |
| 4982 | + $response = new WP_REST_Response($result); | |
| 4983 | + $response->set_status(200); | |
| 4984 | + | |
| 4985 | + return $response; | |
| 4986 | + } | |
| 4987 | + | |
| 4988 | + // Common private method to do single product express checkout, used by the new REST express. IOK 2026-08-25 | |
| 4989 | + private function really_do_single_product_express_checkout($prodid, $varid, $sku, $quantity=1, $variations=[]) { | |
| 4990 | + require_once(dirname(__FILE__) . "/WC_Gateway_Vipps.class.php"); | |
| 4991 | + $gw = $this->gateway(); | |
| 4992 | + | |
| 4993 | + if (!$gw->express_checkout_available()) { | |
| 4994 | + $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); | |
| 4995 | + return $result; | |
| 4996 | + } | |
| 4997 | + // Here we will either have a product-id, a variant-id and a product-id, or just a SKU. The product-id will not be a variant - but | |
| 4998 | + // we'll double-check just in case. Also if we somehow *just* get a variant-id we should fix that too. But a SKU trumps all. IOK 2018-10-02 | |
| 4999 | + | |
| 4825 | 5000 | // Find the product, or variation, and get everything in order so we can check existence, availability etc. IOK 2018-10-02 |
| 4826 | 5001 | // Moved rules around as the _sku variant broke in 3.6.1 for stores that didn't bother to update the database IOK 2019-04-24 |
| 4827 | 5002 | // This broke single-product purchases for variable products; fixed IOK 2019-05-21 thanks to Gaute Terland Nilsen @ Easyweb for the report |
| 4828 | 5003 | try { |
| @@ -4835,17 +5010,14 @@ | ||
| 4835 | 5010 | $product = wc_get_product($skuid); |
| 4836 | 5011 | } |
| 4837 | 5012 | } catch (Exception $e) { |
| 4838 | 5013 | $result = array('ok'=>0, 'msg'=>__('Error finding product - cannot create order','woo-vipps'), 'url'=>false); |
| 4839 | - wp_send_json($result); | |
| 4840 | - exit(); | |
| 5014 | + return $result; | |
| 4841 | 5015 | } |
| 4842 | 5016 | |
| 4843 | - | |
| 4844 | 5017 | if (!$product) { |
| 4845 | 5018 | $result = array('ok'=>0, 'msg'=>__('Unknown product, cannot create order','woo-vipps'), 'url'=>false); |
| 4846 | - wp_send_json($result); | |
| 4847 | - exit(); | |
| 5019 | + return $result; | |
| 4848 | 5020 | } |
| 4849 | 5021 | |
| 4850 | 5022 | $parentid = $product ? $product->get_parent_id() : null; // If the product is a variation, then the parent product is the parentid. |
| 4851 | 5023 | $parent = $parentid ? wc_get_product($parentid) : null; |
| @@ -4852,34 +5024,30 @@ | ||
| 4852 | 5024 | |
| 4853 | 5025 | // This can't really happen, but if it did.. |
| 4854 | 5026 | if ($prodid && $parentid && ($prodid != $parentid)) { |
| 4855 | 5027 | $result = array('ok'=>0, 'msg'=>__('Selected product variant is not available','woo-vipps'), 'url'=>false); |
| 4856 | - wp_send_json($result); | |
| 4857 | - exit(); | |
| 5028 | + return $result; | |
| 4858 | 5029 | } |
| 4859 | 5030 | if (!$gw->product_supports_express_checkout($product)) { |
| 4860 | 5031 | $result = array('ok'=>0, 'msg'=>sprintf(__('%1$s is not available for this order','woo-vipps'), Vipps::ExpressCheckoutName()), 'url'=>false); |
| 4861 | - wp_send_json($result); | |
| 4862 | - exit(); | |
| 5032 | + return $result; | |
| 4863 | 5033 | } |
| 4864 | 5034 | |
| 4865 | 5035 | // Somebody addded the wrong SKU |
| 4866 | 5036 | if ($product->get_type() == 'variable'){ |
| 4867 | 5037 | $result = array('ok'=>0, 'msg'=>__('Selected product variant is not available for purchase','woo-vipps'), 'url'=>false); |
| 4868 | - wp_send_json($result); | |
| 4869 | - exit(); | |
| 5038 | + return $result; | |
| 4870 | 5039 | } |
| 4871 | 5040 | // Final check of availability |
| 4872 | 5041 | if (!$product->is_purchasable() || !$product->is_in_stock()) { |
| 4873 | 5042 | $result = array('ok'=>0, 'msg'=>__('Your product is temporarily no longer available for purchase','woo-vipps'), 'url'=>false); |
| 4874 | - wp_send_json($result); | |
| 4875 | - exit(); | |
| 5043 | + return $result; | |
| 4876 | 5044 | } |
| 4877 | 5045 | |
| 4878 | 5046 | // Now it should be safe to continue to the checkout process. IOK 2018-10-02 |
| 4879 | - | |
| 4880 | 5047 | // Create a new temporary cart for this order. We need to get (and save) the real session cart, |
| 4881 | 5048 | // because some plugins actually override this. |
| 5049 | + // NB: Please note the cart must have been loaded here, be aware when doing REST. IOK 2026-08-27 | |
| 4882 | 5050 | $current_cart = clone WC()->cart; |
| 4883 | 5051 | WC()->cart->empty_cart(); |
| 4884 | 5052 | |
| 4885 | 5053 | if ($parent && $parent->get_type() == 'variable') { |
| @@ -4886,50 +5054,22 @@ | ||
| 4886 | 5054 | WC()->cart->add_to_cart($parent->get_id(),$quantity,$product->get_id(), $variations); |
| 4887 | 5055 | } else { |
| 4888 | 5056 | WC()->cart->add_to_cart($product->get_id(),$quantity); |
| 4889 | 5057 | } |
| 5058 | + WC()->session->save_data(); | |
| 4890 | 5059 | |
| 4891 | - try { | |
| 4892 | - $orderid = $gw->create_partial_order(); | |
| 4893 | - do_action('woo_vipps_ajax_do_express_checkout', $orderid); | |
| 4894 | - } catch (Exception $e) { | |
| 4895 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps') . ': ' . $e->getMessage(), 'url'=>false); | |
| 4896 | - wp_send_json($result); | |
| 4897 | - exit(); | |
| 4898 | - } | |
| 5060 | + $result = $this->create_and_process_express_order(); | |
| 4899 | 5061 | |
| 4900 | - if (!$orderid) { | |
| 4901 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4902 | - wp_send_json($result); | |
| 4903 | - exit(); | |
| 5062 | + if ($result['ok'] ?? false) { | |
| 5063 | + // Single product purchase, so save any contents of the real cart | |
| 5064 | + $orderid = $result['orderid']; | |
| 5065 | + $order = wc_get_order($orderid); | |
| 5066 | + $order->update_meta_data('_vipps_single_product_express',true); | |
| 5067 | + $order->save(); | |
| 5068 | + $this->save_cart($order,$current_cart); | |
| 4904 | 5069 | } |
| 4905 | 5070 | |
| 4906 | - try { | |
| 4907 | - $this->maybe_add_static_shipping($gw,$orderid); | |
| 4908 | - } catch (Exception $e) { | |
| 4909 | - $this->log(__("Error calculating static shipping", 'woo-vipps'), 'error'); | |
| 4910 | - $this->log($e->getMessage(),'error'); | |
| 4911 | - $result = array('ok'=>0, 'msg'=>__('Could not create order','woo-vipps'), 'url'=>false); | |
| 4912 | - wp_send_json($result); | |
| 4913 | - exit(); | |
| 4914 | - } | |
| 4915 | - | |
| 4916 | - | |
| 4917 | - // Single product purchase, so save any contents of the real cart | |
| 4918 | - $order = wc_get_order($orderid); | |
| 4919 | - $order->update_meta_data('_vipps_single_product_express',true); | |
| 4920 | - $order->save(); | |
| 4921 | - $this->save_cart($order,$current_cart); | |
| 4922 | - | |
| 4923 | - $ok = $gw->process_payment($orderid); | |
| 4924 | - if ($ok && $ok['result'] == 'success') { | |
| 4925 | - $result = array('ok'=>1, 'msg'=>'', 'url'=>$ok['redirect']); | |
| 4926 | - wp_send_json($result); | |
| 4927 | - exit(); | |
| 4928 | - } | |
| 4929 | - $result = array('ok'=>0, 'msg'=> sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()), 'url'=>''); | |
| 4930 | - wp_send_json($result); | |
| 4931 | - exit(); | |
| 5071 | + return $result; | |
| 4932 | 5072 | } |
| 4933 | 5073 | |
| 4934 | 5074 | // This calculates and adds static shipping info to a partial order for express checkout if merchant has enabled this. IOK 2020-03-19 |
| 4935 | 5075 | // Made visible for consistency with add_static_shipping. IOK 2021-10-22 |
| @@ -4995,9 +5135,9 @@ | ||
| 4995 | 5135 | $transaction = sanitize_text_field(@$_POST['transaction']); |
| 4996 | 5136 | |
| 4997 | 5137 | $sessionorders= WC()->session->get('_vipps_session_orders'); |
| 4998 | 5138 | if (!isset($sessionorders[$orderid])) { |
| 4999 | - wp_send_json(array('status'=>'error', 'msg'=>__('Not an order','woo-vipps'))); | |
| 5139 | + wp_send_json(array('status'=>'error', 'msg'=>__('Not a session order','woo-vipps'))); | |
| 5000 | 5140 | } |
| 5001 | 5141 | |
| 5002 | 5142 | $order = wc_get_order($orderid); |
| 5003 | 5143 | if (!$order) { |
| @@ -5254,9 +5394,8 @@ | ||
| 5254 | 5394 | echo "<div class='vipps_buy_now_wrapper loop'>$button</div>"; |
| 5255 | 5395 | } |
| 5256 | 5396 | |
| 5257 | 5397 | |
| 5258 | - | |
| 5259 | 5398 | // Checkout replaces the default checkout page, and currently uses its own page for this which needs to exist |
| 5260 | 5399 | // IOK 2026-04-30 remove this when checkout is end-of-life'd |
| 5261 | 5400 | // We now also use this for the vipps special page, previously a fakepage. LP 2026-08-18 |
| 5262 | 5401 | public function woocommerce_create_pages ($data) { |
| @@ -5337,15 +5476,8 @@ | ||
| 5337 | 5476 | // This URL will when accessed add a product to the cart and go directly to the express checkout page. |
| 5338 | 5477 | // The argument passed must be a shareable link created for a given product - so this in effect acts as a landing page for |
| 5339 | 5478 | // the buying thru Vipps Express Checkout of a single product linked to in for instance banners. IOK 2018-09-24 |
| 5340 | 5479 | public function vipps_buy_product() { |
| 5341 | - | |
| 5342 | - add_filter('body_class', function ($classes) { | |
| 5343 | - $classes[] = 'vipps-express-checkout'; | |
| 5344 | - $classes[] = 'woocommerce-checkout'; // Required by Pixel Your Site IOK 2022-11-24 | |
| 5345 | - return apply_filters('woo_vipps_express_checkout_body_class', $classes); | |
| 5346 | - }); | |
| 5347 | - | |
| 5348 | 5480 | do_action('woo_vipps_express_checkout_page'); |
| 5349 | 5481 | |
| 5350 | 5482 | $session = WC()->session; |
| 5351 | 5483 | $posted = $session->get('__vipps_buy_product'); |
| @@ -5379,32 +5511,33 @@ | ||
| 5379 | 5511 | } |
| 5380 | 5512 | |
| 5381 | 5513 | // Pass the productinfo to the express checkout form |
| 5382 | 5514 | $args = array(); |
| 5383 | - $args['quantity'] = 1; | |
| 5384 | - if (array_key_exists('product_id',$productinfo)) $args['product_id'] = intval($productinfo['product_id']); | |
| 5385 | - if (array_key_exists('variation_id',$productinfo)) $args['variation_id'] = intval($productinfo['variation_id']); | |
| 5386 | - if (array_key_exists('product_sku',$productinfo)) $args['sku'] = sanitize_text_field($productinfo['product_sku']); | |
| 5387 | - if (array_key_exists('quantity',$productinfo)) $args['quantity'] = intval($productinfo['quantity']); | |
| 5515 | + $args['product_id'] = esc_attr(intval($productinfo['product_id'] ?? 0)); | |
| 5516 | + $args['variation_id'] = esc_attr(intval($productinfo['variation_id'] ?? 0)); | |
| 5517 | + $args['sku'] = esc_attr(sanitize_text_field($productinfo['product_sku'] ?? "")); | |
| 5518 | + $args['quantity'] = esc_attr(max(1, intval($productinfo['quantity'] ?? 0))); | |
| 5388 | 5519 | |
| 5389 | - // For variable products where some of the attributes are "any", we need to add these as well. This is from woos form-handler for these. | |
| 5390 | - foreach ($productinfo as $key => $value) { | |
| 5391 | - if ( 'attribute_' !== substr( $key, 0, 10 ) ) { | |
| 5392 | - continue; | |
| 5393 | - } | |
| 5394 | - $args[sanitize_title(wp_unslash($key))] = sanitize_text_field(wp_unslash($value)); | |
| 5395 | - } | |
| 5520 | + $payment_method = $this->get_payment_method_name(); | |
| 5521 | + $btitle = esc_attr(sprintf(__('Buy now with %1$s', 'woo-vipps'), $payment_method)); | |
| 5522 | + $bclass = esc_attr($payment_method); | |
| 5396 | 5523 | |
| 5397 | - return $this->express_checkout_page_html(true,'do_single_product_express_checkout',$args); | |
| 5524 | + $content = "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "...</p>"; | |
| 5525 | + $content .= "<div class='vipps-qr-purchase' style='visibility:hidden'>"; | |
| 5526 | + $content .= "<a href='javascript:void(0)' class='single-product button vipps-buy-now $bclass' data-vipps-autostart='true' data-vipps-purchase='single' data-product_id='{$args['product_id']}' data-variation_id='{$args['variation_id']}' data-product_sku='{$args['sku']}' data-quantity='{$args['quantity']}' title='{$btitle}'; | |
| 5527 | + >"; | |
| 5528 | + $content .= $this->get_html_button_for_context('global'); | |
| 5529 | + $content .= "</a>"; | |
| 5530 | + $content .= "</div>"; | |
| 5531 | + | |
| 5532 | + return $content; | |
| 5398 | 5533 | } |
| 5399 | 5534 | |
| 5400 | - // This is a landing page for the express checkout of then normal cart - it is done like this because this could take time on slower hosts. | |
| 5401 | - public function vipps_express_checkout() { | |
| 5535 | + public function vipps_express_checkout_consistency_check() { | |
| 5402 | 5536 | // We need a nonce to get here, but we should only get here when we have a cart, so this will not be cached. |
| 5403 | 5537 | // IOK 2018-05-28 |
| 5404 | 5538 | $ok = isset($_REQUEST['sec']) && wp_verify_nonce($_REQUEST['sec'],'express'); |
| 5405 | 5539 | |
| 5406 | - | |
| 5407 | 5540 | $backurl = wp_validate_redirect(@$_SERVER['HTTP_REFERER']); |
| 5408 | 5541 | if (!$backurl) $backurl = home_url(); |
| 5409 | 5542 | |
| 5410 | 5543 | if (!$ok) { |
| @@ -5418,216 +5551,41 @@ | ||
| 5418 | 5551 | wp_redirect($backurl); |
| 5419 | 5552 | exit(); |
| 5420 | 5553 | } |
| 5421 | 5554 | |
| 5422 | - add_filter('body_class', function ($classes) { | |
| 5423 | - $classes[] = 'vipps-express-checkout'; | |
| 5424 | - $classes[] = 'woocommerce-checkout'; // Required by Pixel Your Site IOK 2022-11-24 | |
| 5425 | - return apply_filters('woo_vipps_express_checkout_body_class', $classes); | |
| 5426 | - }); | |
| 5427 | - | |
| 5428 | - do_action('woo_vipps_express_checkout_page'); | |
| 5429 | - | |
| 5430 | - return $this->express_checkout_page_html(true, 'do_express_checkout'); | |
| 5555 | + add_filter('woo_vipps_express_checkout_consistent', '__return_true'); | |
| 5431 | 5556 | } |
| 5432 | 5557 | |
| 5433 | - // This method tries to ensure that a customer does not 'lose' the return page and | |
| 5434 | - // starts ordering the same products twice. IOK 2020-01-22 | |
| 5435 | - protected function validate_express_checkout_orderspec ($orderspec) { | |
| 5436 | - if (empty($orderspec)) return true; // It's not a duplicate, it's nothing. | |
| 5437 | - | |
| 5438 | - // First build for the current order an array of hash-tables keyed by prodid, varid and quantity. | |
| 5439 | - $orderset = array(); | |
| 5440 | - foreach($orderspec as $entry) $orderset[] = join(':', $entry); | |
| 5441 | - | |
| 5442 | - // Then get open orders | |
| 5443 | - $sessionorders = array(); | |
| 5444 | - $sessionorderdata = WC()->session->get('_vipps_session_orders'); | |
| 5445 | - if ($sessionorderdata) { | |
| 5446 | - foreach(array_keys($sessionorderdata) as $oid) { | |
| 5447 | - $orderobject = wc_get_order($oid); | |
| 5448 | - // Check to see that this hasn't been deleted yet IOK 2020-01-07 | |
| 5449 | - if ($orderobject instanceof WC_Order) { | |
| 5450 | - $sessionorders[] = $orderobject; | |
| 5451 | - } | |
| 5452 | - } | |
| 5558 | + // This is a landing page for the express checkout of the normal cart - it is done like this because this could take time on slower hosts. | |
| 5559 | + // IOK 2026-09-09 - nowadays this is only used for compatibility mode. It will automatically start express checkout of the current cart when reached. | |
| 5560 | + public function vipps_express_checkout() { | |
| 5561 | + // Some checks are made in template_redirect, we check here if they are ok IOK 2026-09-21 | |
| 5562 | + if (!apply_filters('woo_vipps_express_checkout_consistent', false)) { | |
| 5563 | + $content = __('Link expired, please try again', 'woo-vipps'); | |
| 5564 | + return $content; | |
| 5453 | 5565 | } |
| 5454 | - // Nothing more to do here | |
| 5455 | - if (empty($sessionorders)) return true; | |
| 5566 | + | |
| 5567 | + do_action('woo_vipps_express_checkout_page'); | |
| 5456 | 5568 | |
| 5457 | - // And create a similar hash table for each of the open orders | |
| 5458 | - $openorderdata = array(); | |
| 5459 | - foreach ($sessionorders as $open_order) { | |
| 5460 | - $status = $open_order->get_status(); | |
| 5461 | - if ($status == 'cancelled' || $status == 'pending') continue; | |
| 5462 | - $when = strtotime($open_order->get_date_modified()); | |
| 5463 | - $cutoff = $when + apply_filters('woo_vipps_recent_order_cutoff', (5*60)); | |
| 5464 | - if (time() > $cutoff) { | |
| 5465 | - continue; | |
| 5466 | - } | |
| 5467 | - $orderdata = array(); | |
| 5468 | - foreach($open_order->get_items() as $item) { | |
| 5469 | - $productspec = $item->get_product_id() . ':' . $item->get_variation_id() . ':' . $item->get_quantity(); | |
| 5470 | - $orderdata[] = $productspec; | |
| 5471 | - } | |
| 5472 | - $openorderdata[]=$orderdata; | |
| 5473 | - } | |
| 5569 | + $payment_method = $this->get_payment_method_name(); | |
| 5570 | + $btitle = esc_attr(sprintf(__('Buy now with %1$s', 'woo-vipps'), $payment_method)); | |
| 5571 | + $bclass = esc_attr($payment_method); | |
| 5572 | + $sec = esc_attr($_REQUEST['sec']); | |
| 5573 | + $content = ""; | |
| 5574 | + $content .= "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "...</p>"; | |
| 5575 | + $content .= '<div class="vipps-cart-purchase" style="visibility:hidden">"'; | |
| 5576 | + $content .= "<a href='javascript:void(0)' class='vipps-express-checkout short $bclass' data-vipps-autostart='true' data-sec='$sec' title='$btitle'>"; | |
| 5577 | + $content .= $this->get_html_button_for_context('global'); | |
| 5578 | + $content .="</a>"; | |
| 5579 | + $content .="</div>"; | |
| 5474 | 5580 | |
| 5475 | - // Now: For each entry in the orderhash, check if there is an order that has a) all of them and b) not any more of them. | |
| 5476 | - foreach($openorderdata as $prevorder) { | |
| 5477 | - $a = array_diff($prevorder, $orderset); | |
| 5478 | - $b = array_diff($orderset, $prevorder); | |
| 5479 | - if (empty($a) && empty($b)) { | |
| 5480 | - $this->log(__("It seems a customer is trying to re-order product(s) recently bought in the same session, asking user for confirmation", 'woo-vipps'), 'info'); | |
| 5481 | - return false; | |
| 5482 | - } | |
| 5483 | - } | |
| 5484 | - // Else, order is good. | |
| 5485 | - return true; | |
| 5581 | + return $content; | |
| 5486 | 5582 | } |
| 5487 | 5583 | |
| 5488 | - // Returns a triple of productid, variantid and quantity from an array of arguments which can pass either these or a SKU value. | |
| 5489 | - // Return value is like in a cart. | |
| 5490 | - // Used to create an order in express checkout, and to see that this order isn't a repeat. IOK 2020-01-22 | |
| 5491 | - protected function get_orderspec_from_arguments ($productinfo) { | |
| 5492 | - if (!$productinfo) return array(); | |
| 5493 | - $variantid = 0; | |
| 5494 | - $productid = 0; | |
| 5495 | - $quantity = intval(@$productinfo['quantity']); | |
| 5496 | - if (!$quantity) $quantity = 1; | |
| 5497 | - if (isset($productinfo['sku']) && $productinfo['sku']) { | |
| 5498 | - $sku = $productinfo['sku']; | |
| 5499 | - $skuid = wc_get_product_id_by_sku($sku); | |
| 5500 | - $product = wc_get_product($skuid); | |
| 5501 | - $parentid = $product ? $product->get_parent_id() : null; | |
| 5502 | - if ($product) { | |
| 5503 | - if ($parentid) { | |
| 5504 | - $variantid = $skuid; $productid = $parentid; | |
| 5505 | - } else { | |
| 5506 | - $productid = $skuid; | |
| 5507 | - } | |
| 5508 | - } | |
| 5509 | - } else if (isset($productinfo['product_id']) && $productinfo['product_id']) { | |
| 5510 | - $productid = intval($productinfo['product_id']); | |
| 5511 | - $variantid = intval(@$productinfo['variation_id']); | |
| 5512 | - } | |
| 5513 | - if ($productid) return array(array('product_id'=>$productid, 'variation_id'=>$variantid, 'quantity'=>$quantity)); | |
| 5514 | - return array(); | |
| 5515 | - } | |
| 5516 | - // If no productinfo, this will produce an orderspec from the current cart IOK 2020-01-24 | |
| 5517 | - protected function get_orderspec_from_cart () { | |
| 5518 | - $cartitems = WC()->cart->get_cart(); | |
| 5519 | - $orderspec = array(); | |
| 5520 | - foreach($cartitems as $item => $values) { | |
| 5521 | - $orderspec[] = array('product_id'=>$values['product_id'], 'variation_id'=>$values['variation_id'], 'quantity'=>$values['quantity']); | |
| 5522 | - } | |
| 5523 | - return $orderspec; | |
| 5524 | - } | |
| 5525 | - | |
| 5526 | - // Used as a landing page for launching express checkout - borh for the cart and for single products. IOK 2018-09-28 | |
| 5527 | - // Returns the html. LP 2026-08-27 | |
| 5528 | - protected function express_checkout_page_html($execute,$action,$productinfo=null) { | |
| 5529 | - $gw = $this->gateway(); | |
| 5530 | - | |
| 5531 | - $expressCheckoutMessages = array(); | |
| 5532 | - $expressCheckoutMessages['termsAndConditionsError'] = __( 'Please read and accept the terms and conditions to proceed with your order.', 'woocommerce' ); | |
| 5533 | - $expressCheckoutMessages['temporaryError'] = sprintf(__('%1$s is temporarily unavailable.','woo-vipps'), $this->get_payment_method_name()); | |
| 5534 | - $expressCheckoutMessages['successMessage'] = sprintf(__('To the %1$s app!','woo-vipps'), $this->get_payment_method_name()); | |
| 5535 | - | |
| 5536 | - wp_register_script('vipps-express-checkout',plugins_url('js/express-checkout.js',__FILE__),array('jquery','wp-hooks'),filemtime(dirname(__FILE__) . "/js/express-checkout.js"), 'true'); | |
| 5537 | - wp_localize_script('vipps-express-checkout', 'VippsCheckoutMessages', $expressCheckoutMessages); | |
| 5538 | - wp_enqueue_script('vipps-express-checkout'); | |
| 5539 | - // If we have a valid nonce when we get here, just call the 'create order' bit at once. Otherwise, make a button | |
| 5540 | - // to actually perform the express checkout. | |
| 5541 | - $buttonhtml = apply_filters('woo_vipps_express_checkout_button', $this->get_html_button()); | |
| 5542 | - | |
| 5543 | - | |
| 5544 | - | |
| 5545 | - $orderspec = $this->get_orderspec_from_arguments($productinfo); | |
| 5546 | - if (empty($orderspec)) { | |
| 5547 | - $orderspec = $this->get_orderspec_from_cart(); | |
| 5548 | - } | |
| 5549 | - $orderisOK = $this->validate_express_checkout_orderspec($orderspec); | |
| 5550 | - $orderisOK = apply_filters('woo_vipps_validate_express_checkout_orderspec', $orderisOK, $orderspec); | |
| 5551 | - | |
| 5552 | - $askForTerms = function_exists('wc_terms_and_conditions_checkbox_enabled') ? wc_terms_and_conditions_checkbox_enabled() : true; | |
| 5553 | - $askForTerms = $askForTerms && ($gw->get_option('expresscheckout_termscheckbox') == 'yes'); | |
| 5554 | - $askForTerms = apply_filters('woo_vipps_express_checkout_terms_and_conditions_checkbox_enabled', $askForTerms); | |
| 5555 | - | |
| 5556 | - $askForConfirmationHTML = ''; | |
| 5557 | - if (!$orderisOK) { | |
| 5558 | - $header = __("Are you sure?",'woo-vipps'); | |
| 5559 | - $body = __("You recently completed an order with exactly the same products as you are buying now. There should be an email in your inbox from the previous purchase. Are you sure you want to order again?",'woo-vipps'); | |
| 5560 | - $askForConfirmationHTML = apply_filters('woo_vipps_ask_user_to_confirm_repurchase', "<h2 class='confirmVippsExpressCheckoutHeader'>$header</h2><p>$body</p>"); | |
| 5561 | - } | |
| 5562 | - // Should we go directly to checkout, or do we need to stop and ask the user something (for instance?) IOK 2010-01-20 | |
| 5563 | - $execute = $execute && $orderisOK && !$askForTerms; | |
| 5564 | - $execute = apply_filters('woo_vipps_checkout_directly_to_vipps', $execute, $productinfo); | |
| 5565 | - | |
| 5566 | - $content = $this->spinner(); | |
| 5567 | - | |
| 5568 | - // We impersonate the woocommerce-checkout form here mainly to work with the Pixel Your Site plugin IOK 2022-11-24 | |
| 5569 | - // The form data below is sent on order creation; the sec is also used to poll session status | |
| 5570 | - $classlist = apply_filters("woo_vipps_express_checkout_form_classes", "woocommerce-checkout"); | |
| 5571 | - $content .= "<form id='vippsdata' class='" . esc_attr($classlist) . "'>"; | |
| 5572 | - $content .= "<input type='hidden' name='action' value='" . esc_attr($action) ."'>"; | |
| 5573 | - if ($this->gateway()->get_option('vippsorderattribution') == 'yes') { | |
| 5574 | - // This is for the new order attribution feature of woo. IOK 2024-01-09 | |
| 5575 | - $content .= '<input type="hidden" id="vippsorderattribution" value="1" />'; | |
| 5576 | - ob_start(); | |
| 5577 | - do_action( 'woocommerce_after_order_notes'); | |
| 5578 | - $content .= ob_get_clean(); | |
| 5579 | - } | |
| 5580 | - $content .= wp_nonce_field('do_express','sec',1,false); | |
| 5581 | - | |
| 5582 | - $termsHTML = ''; | |
| 5583 | - if ($askForTerms) { | |
| 5584 | - // Include shop terms | |
| 5585 | - ob_start(); | |
| 5586 | - wc_get_template('checkout/terms.php'); | |
| 5587 | - $termsHTML = ob_get_clean(); | |
| 5588 | - $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML); | |
| 5589 | - } | |
| 5590 | - $termsHTML = apply_filters('woo_vipps_express_checkout_terms_and_conditions_html',$termsHTML); | |
| 5591 | - | |
| 5592 | - if ($productinfo) { | |
| 5593 | - foreach($productinfo as $key=>$value) { | |
| 5594 | - $k = esc_attr($key); | |
| 5595 | - $v = esc_attr($value); | |
| 5596 | - $content .= "<input type='hidden' name='$k' value='$v' />"; | |
| 5597 | - } | |
| 5598 | - } | |
| 5599 | - ob_start(); | |
| 5600 | - $content .= do_action('woo_vipps_express_checkout_orderspec_form', $productinfo); | |
| 5601 | - $content .= ob_get_clean(); | |
| 5602 | - $content .= "</form>"; | |
| 5603 | - | |
| 5604 | - $extraHTML = apply_filters('woo_vipps_express_checkout_final_html', '', $termsHTML,$askForConfirmationHTML); | |
| 5605 | - $pressTheButtonHTML = ""; | |
| 5606 | - if (empty($termsHTML) && empty($askForConfirmationHTML) && empty($extraHTML)) { | |
| 5607 | - $pressTheButtonHTML = "<p id=waiting>" . sprintf(__('Ready for %1$s - press the button', 'woo-vipps'), Vipps::ExpressCheckoutName()) . "</p>"; | |
| 5608 | - } | |
| 5609 | - | |
| 5610 | - if ($execute) { | |
| 5611 | - $content .= "<p id=waiting>" . __("Please wait while we are preparing your order", 'woo-vipps') . "</p>"; | |
| 5612 | - $content .= "<div id='vipps-status-message'></div>"; | |
| 5613 | - return $this->special_page_html('', $content); | |
| 5614 | - } else { | |
| 5615 | - $content .= $askForConfirmationHTML; | |
| 5616 | - $content .= $extraHTML; | |
| 5617 | - $content .= $termsHTML; | |
| 5618 | - $content .= apply_filters('woo_vipps_express_checkout_validation_elements', ''); | |
| 5619 | - $title = sprintf(__('Buy now with %1$s!', 'woo-vipps'), $this->get_payment_method_name()); | |
| 5620 | - $content .= "<div class='vipps_buy_now_wrapper noloop'><a href='#' id='do-express-checkout' class='vipps-express-checkout' title='$title'>$buttonhtml</a></div>"; | |
| 5621 | - $content .= "<div id='vipps-status-message'></div>"; | |
| 5622 | - return $this->special_page_html('', $content); | |
| 5623 | - } | |
| 5624 | - } | |
| 5625 | - | |
| 5626 | - | |
| 5627 | 5584 | // Called in template_redirect before we get to the wait-for-payment page IOK 2026-09-21 |
| 5628 | 5585 | private function handle_payment_poll_and_redirect () { |
| 5629 | 5586 | $orderid = WC()->session->get('_vipps_pending_order'); |
| 5587 | + | |
| 5630 | 5588 | $order = null; |
| 5631 | 5589 | $gw = $this->gateway(); |
| 5632 | 5590 | |
| 5633 | 5591 | // Failsafe for when the session disappears IOK 2018-11-19 |
| @@ -5656,9 +5614,14 @@ | ||
| 5656 | 5614 | $session = WC()->session; |
| 5657 | 5615 | if (!$session->has_session()) { |
| 5658 | 5616 | $session->set_customer_session_cookie(true); |
| 5659 | 5617 | } |
| 5618 | + | |
| 5619 | + $sessionorders= WC()->session->get('_vipps_session_orders'); | |
| 5620 | + $sessionorders[$orderid] = 1; | |
| 5621 | + WC()->session->set('_vipps_session_orders',$sessionorders); | |
| 5660 | 5622 | $session->set('_vipps_pending_order', $orderid); |
| 5623 | + WC()->session->save_data(); | |
| 5661 | 5624 | } |
| 5662 | 5625 | } |
| 5663 | 5626 | |
| 5664 | 5627 | $deleted_order=0; |
| @@ -5664,9 +5627,9 @@ | ||
| 5664 | 5627 | $deleted_order=0; |
| 5665 | 5628 | if ($orderid && !$order) { |
| 5666 | 5629 | // If this happens, we actually did have an order, but it has been deleted, which must mean that it was cancelled. |
| 5667 | 5630 | // Concievably a hook on the 'cancel'-transition or in the callback handlers could clean that up before we get here. IOK 2019-09-26 |
| 5668 | - $this->log(__("In order return: The order %1\$d seems to be deleted", 'woo-vipps'), 'debug'); | |
| 5631 | + $this->log(sprintf(__("In order return: The order %1\$d seems to be deleted", 'woo-vipps'), $orderid), 'debug'); | |
| 5669 | 5632 | $deleted_order=1; |
| 5670 | 5633 | } |
| 5671 | 5634 | |
| 5672 | 5635 | if (!$order && !$deleted_order) wp_die(__('Unknown order', 'woo-vipps')); |
| @@ -5676,12 +5639,13 @@ | ||
| 5676 | 5639 | |
| 5677 | 5640 | // This is for debugging only - set to false to ensure we wait for the callback. IOK 2023-08-04 |
| 5678 | 5641 | $do_poll = true; |
| 5679 | 5642 | |
| 5680 | - // Still pending, no callback. Make a call to the server as the order might not have been created. IOK 2018-05-16 | |
| 5643 | + // Do a single poll here to check and set the order status at Woo using the order status at Vipps IOK 2026-09-29 | |
| 5681 | 5644 | if ($do_poll && $status == 'pending') { |
| 5682 | - // Just in case the callback hasn't come yet, do a quick check of the order status at Vipps. | |
| 5683 | - $newstatus = $gw->callback_check_order_status($order); | |
| 5645 | + // We will do *one* poll before waiting for the callback (for a while, at least.) IOK 2026-09-29 | |
| 5646 | + $newstatus = $gw->poll_and_check_order_status($order); | |
| 5647 | + $this->log(sprintf(__("In order return: Order status of %1\$d is %2\$s", 'woo-vipps'), $orderid, $newstatus), 'info'); | |
| 5684 | 5648 | if ($status != $newstatus) { |
| 5685 | 5649 | $status = $newstatus; |
| 5686 | 5650 | clean_post_cache($orderid); |
| 5687 | 5651 | $order = wc_get_order($orderid); // Reload order object |
| @@ -5689,8 +5653,10 @@ | ||
| 5689 | 5653 | } else { |
| 5690 | 5654 | // No need to do anyting here. IOK 2020-01-26 |
| 5691 | 5655 | } |
| 5692 | 5656 | |
| 5657 | + // Actually, this may cause a second poll if the first left us pending. Should be rewritten - but *mostly* it will just check | |
| 5658 | + // the payment status at Vipps without polls, which will tell us if the payment succeeded in case people use custom order statuses and so on. IOK 2026-09-29 | |
| 5693 | 5659 | $payment = 'notchecked'; |
| 5694 | 5660 | if ($do_poll) { |
| 5695 | 5661 | $payment = $deleted_order ? 'cancelled' : $gw->check_payment_status($order); |
| 5696 | 5662 | } |
| @@ -5725,8 +5691,10 @@ | ||
| 5725 | 5691 | // If not, enqueue the status checker IOK 2026-09-21 |
| 5726 | 5692 | wp_enqueue_script('check-vipps',plugins_url('js/check-order-status.js',__FILE__),array('jquery','vipps-gw'),filemtime(dirname(__FILE__) . "/js/check-order-status.js"), 'true'); |
| 5727 | 5693 | } |
| 5728 | 5694 | |
| 5695 | + $this->log(sprintf(__("Order status of %1\$d not ready in order return: payment status %2\$s", 'woo-vipps'), $orderid, $payment), 'info'); | |
| 5696 | + | |
| 5729 | 5697 | // Communicate this to the shortcode IOK 2026-09-21 |
| 5730 | 5698 | add_filter('woo_vipps_wait_for_payment_status', function () use($orderid, $status, $payment) { |
| 5731 | 5699 | return ['orderid'=>$orderid, 'status'=>$status, 'payment'=>$payment]; |
| 5732 | 5700 | }); |
| @@ -5733,9 +5701,8 @@ | ||
| 5733 | 5701 | |
| 5734 | 5702 | } |
| 5735 | 5703 | |
| 5736 | 5704 | public function vipps_wait_for_payment() { |
| 5737 | - | |
| 5738 | 5705 | // This will have been computed in template_redirect, but the status will be either still pending or failed. IOK 2026-09-21 |
| 5739 | 5706 | $data = apply_filters('woo_vipps_wait_for_payment_status', []); |
| 5740 | 5707 | |
| 5741 | 5708 | $orderid = $data['orderid'] ?? 0; |
| @@ -5775,9 +5742,8 @@ | ||
| 5775 | 5742 | $content .= "<input type='hidden' name='key' value='".htmlspecialchars($order->get_order_key())."'>"; |
| 5776 | 5743 | $content .= "<input type='hidden' name='action' value='check_order_status'>"; |
| 5777 | 5744 | $content .= wp_nonce_field('vippsstatus','sec',1,false); |
| 5778 | 5745 | $content .= "</form>"; |
| 5779 | - | |
| 5780 | 5746 | |
| 5781 | 5747 | $content .= "<div id='error' style='display:none'><p>".__('Error during order confirmation','woo-vipps'). '</p>'; |
| 5782 | 5748 | $content .= "<p>" . __('An error occured during order confirmation. The error has been logged. Please contact us to determine the status of your order', 'woo-vipps') . "</p>"; |
| 5783 | 5749 | $content .= "<p><a href='" . home_url() . "' class='btn button'>" . __('Continue shopping','woo-vipps') . '</a></p>'; |
