Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

namespace WPForms\Integrations\Stripe\Api;

[2] Fix | Delete

[3] Fix | Delete

use WPForms\Vendor\Stripe\Mandate;

[4] Fix | Delete

use WPForms\Vendor\Stripe\SetupIntent;

[5] Fix | Delete

use WPForms\Vendor\Stripe\Customer;

[6] Fix | Delete

use WPForms\Vendor\Stripe\PaymentIntent;

[7] Fix | Delete

use WPForms\Vendor\Stripe\PaymentMethod;

[8] Fix | Delete

use WPForms\Vendor\Stripe\Stripe;

[9] Fix | Delete

use WPForms\Vendor\Stripe\Subscription;

[10] Fix | Delete

use WPForms\Vendor\Stripe\Refund;

[11] Fix | Delete

use WPForms\Vendor\Stripe\Exception\ApiErrorException;

[12] Fix | Delete

use WPForms\Integrations\Stripe\Fields\StripeCreditCard;

[13] Fix | Delete

use WPForms\Integrations\Stripe\Fields\PaymentElementCreditCard;

[14] Fix | Delete

use WPForms\Integrations\Stripe\Helpers;

[15] Fix | Delete

use WPForms\Helpers\Crypto;

[16] Fix | Delete

use Exception;

[17] Fix | Delete

use WPForms\Vendor\Stripe\Charge;

[18] Fix | Delete

[19] Fix | Delete

/**

[20] Fix | Delete

* Stripe PaymentIntents API.

[21] Fix | Delete

[22] Fix | Delete

* @since 1.8.2

[23] Fix | Delete

[24] Fix | Delete

class PaymentIntents extends Common implements ApiInterface {

[25] Fix | Delete

[26] Fix | Delete

/**

[27] Fix | Delete

* Stripe PaymentMethod id received from Elements.

[28] Fix | Delete

[29] Fix | Delete

* @since 1.8.2

[30] Fix | Delete

[31] Fix | Delete

* @var string

[32] Fix | Delete

[33] Fix | Delete

protected $payment_method_id;

[34] Fix | Delete

[35] Fix | Delete

/**

[36] Fix | Delete

* Stripe PaymentIntent id received from Elements.

[37] Fix | Delete

[38] Fix | Delete

* @since 1.8.2

[39] Fix | Delete

[40] Fix | Delete

* @var string

[41] Fix | Delete

[42] Fix | Delete

protected $payment_intent_id;

[43] Fix | Delete

[44] Fix | Delete

/**

[45] Fix | Delete

* Stripe PaymentIntent object.

[46] Fix | Delete

[47] Fix | Delete

* @since 1.8.2

[48] Fix | Delete

[49] Fix | Delete

* @var PaymentIntent

[50] Fix | Delete

[51] Fix | Delete

protected $intent;

[52] Fix | Delete

[53] Fix | Delete

/**

[54] Fix | Delete

* API config data.

[55] Fix | Delete

[56] Fix | Delete

* @since 1.8.2

[57] Fix | Delete

[58] Fix | Delete

* @var array

[59] Fix | Delete

[60] Fix | Delete

protected $config;

[61] Fix | Delete

[62] Fix | Delete

/**

[63] Fix | Delete

* Initialize.

[64] Fix | Delete

[65] Fix | Delete

* @since 1.8.2

[66] Fix | Delete

[67] Fix | Delete

* @return PaymentIntents

[68] Fix | Delete

[69] Fix | Delete

public function init() {

[70] Fix | Delete

[71] Fix | Delete

$this->set_config();

[72] Fix | Delete

$this->load_card_field();

[73] Fix | Delete

$this->hooks();

[74] Fix | Delete

[75] Fix | Delete

return $this;

[76] Fix | Delete

}

[77] Fix | Delete

[78] Fix | Delete

/**

[79] Fix | Delete

* Register hooks.

[80] Fix | Delete

[81] Fix | Delete

* @since 1.8.2

[82] Fix | Delete

[83] Fix | Delete

private function hooks() {

[84] Fix | Delete

[85] Fix | Delete

add_filter( 'wpforms_process_bypass_captcha', [ $this, 'bypass_captcha_on_3dsecure_submit' ], 10, 3 );

[86] Fix | Delete

}

[87] Fix | Delete

[88] Fix | Delete

/**

[89] Fix | Delete

* Load Credit Card Field Class.

[90] Fix | Delete

[91] Fix | Delete

* @since 1.8.2

[92] Fix | Delete

[93] Fix | Delete

private function load_card_field() {

[94] Fix | Delete

[95] Fix | Delete

if ( Helpers::is_payment_element_enabled() ) {

[96] Fix | Delete

new PaymentElementCreditCard();

[97] Fix | Delete

[98] Fix | Delete

return;

[99] Fix | Delete

}

[100] Fix | Delete

[101] Fix | Delete

new StripeCreditCard();

[102] Fix | Delete

}

[103] Fix | Delete

[104] Fix | Delete

/**

[105] Fix | Delete

* Set API configuration.

[106] Fix | Delete

[107] Fix | Delete

* @since 1.8.2

[108] Fix | Delete

[109] Fix | Delete

public function set_config() {

[110] Fix | Delete

[111] Fix | Delete

$localize_script = [

[112] Fix | Delete

'element_locale' => $this->filter_config_element_locale(),

[113] Fix | Delete

];

[114] Fix | Delete

[115] Fix | Delete

$this->config = [

[116] Fix | Delete

'remote_js_url' => 'https://js.stripe.com/v3/',

[117] Fix | Delete

'field_slug' => 'stripe-credit-card',

[118] Fix | Delete

'localize_script' => $localize_script,

[119] Fix | Delete

];

[120] Fix | Delete

[121] Fix | Delete

if ( Helpers::is_payment_element_enabled() ) {

[122] Fix | Delete

$this->set_payment_element_config();

[123] Fix | Delete

[124] Fix | Delete

return;

[125] Fix | Delete

}

[126] Fix | Delete

[127] Fix | Delete

$this->set_card_element_config();

[128] Fix | Delete

}

[129] Fix | Delete

[130] Fix | Delete

/**

[131] Fix | Delete

* Set API configuration for Payment Element.

[132] Fix | Delete

[133] Fix | Delete

* @since 1.8.2

[134] Fix | Delete

[135] Fix | Delete

private function set_payment_element_config() {

[136] Fix | Delete

[137] Fix | Delete

$min = wpforms_get_min_suffix();

[138] Fix | Delete

[139] Fix | Delete

/**

[140] Fix | Delete

* This filter allows to overwrite a Payment element appearance object.

[141] Fix | Delete

[142] Fix | Delete

* @since 1.8.5

[143] Fix | Delete

[144] Fix | Delete

* @link https://stripe.com/docs/elements/appearance-api

[145] Fix | Delete

[146] Fix | Delete

* @param array $appearance Appearance object.

[147] Fix | Delete

[148] Fix | Delete

$element_style = (array) apply_filters( 'wpforms_integrations_stripe_api_payment_intents_set_element_appearance', [] );

[149] Fix | Delete

[150] Fix | Delete

$this->config['localize_script']['element_appearance'] = $element_style;

[151] Fix | Delete

[152] Fix | Delete

$this->config['local_js_url'] = WPFORMS_PLUGIN_URL . "assets/js/integrations/stripe/wpforms-stripe-payment-element{$min}.js";

[153] Fix | Delete

$this->config['local_css_url'] = WPFORMS_PLUGIN_URL . "assets/css/integrations/stripe/wpforms-stripe{$min}.css";

[154] Fix | Delete

}

[155] Fix | Delete

[156] Fix | Delete

/**

[157] Fix | Delete

* Set API configuration for Card Element.

[158] Fix | Delete

[159] Fix | Delete

* @since 1.8.2

[160] Fix | Delete

[161] Fix | Delete

private function set_card_element_config() {

[162] Fix | Delete

[163] Fix | Delete

/**

[164] Fix | Delete

* This filter allows to overwrite a Style object, which consists of CSS properties nested under objects.

[165] Fix | Delete

[166] Fix | Delete

* @since 1.8.2

[167] Fix | Delete

[168] Fix | Delete

* @link https://stripe.com/docs/js/appendix/style

[169] Fix | Delete

[170] Fix | Delete

* @param array $styles Style object.

[171] Fix | Delete

[172] Fix | Delete

$element_style = (array) apply_filters( 'wpforms_stripe_api_payment_intents_set_config_element_style', [] ); // phpcs:ignore WPForms.PHP.ValidateHooks.InvalidHookName

[173] Fix | Delete

[174] Fix | Delete

$this->config['localize_script']['element_style'] = $element_style;

[175] Fix | Delete

$this->config['localize_script']['element_classes'] = [

[176] Fix | Delete

'base' => 'wpforms-stripe-element',

[177] Fix | Delete

'complete' => 'wpforms-stripe-element-complete',

[178] Fix | Delete

'empty' => 'wpforms-stripe-element-empty',

[179] Fix | Delete

'focus' => 'wpforms-stripe-element-focus',

[180] Fix | Delete

'invalid' => 'wpforms-stripe-element-invalid',

[181] Fix | Delete

'webkitAutofill' => 'wpforms-stripe-element-webkit-autofill',

[182] Fix | Delete

];

[183] Fix | Delete

[184] Fix | Delete

$min = wpforms_get_min_suffix();

[185] Fix | Delete

[186] Fix | Delete

$this->config['local_js_url'] = WPFORMS_PLUGIN_URL . "assets/js/integrations/stripe/wpforms-stripe-elements{$min}.js";

[187] Fix | Delete

}

[188] Fix | Delete

[189] Fix | Delete

/**

[190] Fix | Delete

* Get stripe locale.

[191] Fix | Delete

[192] Fix | Delete

* @since 1.8.2

[193] Fix | Delete

[194] Fix | Delete

* @return string

[195] Fix | Delete

[196] Fix | Delete

public function filter_config_element_locale() {

[197] Fix | Delete

[198] Fix | Delete

/**

[199] Fix | Delete

* WPForms Stripe Api payment intent element locale.

[200] Fix | Delete

[201] Fix | Delete

* @since 1.8.2

[202] Fix | Delete

[203] Fix | Delete

* @param string $locale Element locale.

[204] Fix | Delete

[205] Fix | Delete

$locale = apply_filters( 'wpforms_stripe_api_payment_intents_filter_config_element_locale', '' ); // phpcs:ignore WPForms.PHP.ValidateHooks.InvalidHookName

[206] Fix | Delete

[207] Fix | Delete

// Stripe Elements makes its own locale validation, but we add a general sanity check.

[208] Fix | Delete

return strlen( $locale ) === 2 ? esc_html( $locale ) : 'auto';

[209] Fix | Delete

}

[210] Fix | Delete

[211] Fix | Delete

/**

[212] Fix | Delete

* Initial Stripe app configuration.

[213] Fix | Delete

[214] Fix | Delete

* @since 1.8.2

[215] Fix | Delete

[216] Fix | Delete

public function setup_stripe() {

[217] Fix | Delete

[218] Fix | Delete

parent::setup_stripe();

[219] Fix | Delete

[220] Fix | Delete

Stripe::setApiVersion( '2019-05-16' );

[221] Fix | Delete

}

[222] Fix | Delete

[223] Fix | Delete

/**

[224] Fix | Delete

* Set payment tokens from a submitted form data.

[225] Fix | Delete

[226] Fix | Delete

* @since 1.8.2

[227] Fix | Delete

[228] Fix | Delete

* @param array $entry Copy of original $_POST.

[229] Fix | Delete

[230] Fix | Delete

public function set_payment_tokens( $entry ) {

[231] Fix | Delete

[232] Fix | Delete

if ( ! empty( $entry['payment_method_id'] ) && empty( $entry['payment_intent_id'] ) ) {

[233] Fix | Delete

$this->payment_method_id = $entry['payment_method_id'];

[234] Fix | Delete

}

[235] Fix | Delete

[236] Fix | Delete

if ( ! empty( $entry['payment_intent_id'] ) ) {

[237] Fix | Delete

$this->payment_intent_id = $entry['payment_intent_id'];

[238] Fix | Delete

}

[239] Fix | Delete

[240] Fix | Delete

if ( empty( $this->payment_method_id ) && empty( $this->payment_intent_id ) ) {

[241] Fix | Delete

$this->error = esc_html__( 'Stripe payment stopped, missing both PaymentMethod and PaymentIntent ids.', 'wpforms-lite' );

[242] Fix | Delete

}

[243] Fix | Delete

}

[244] Fix | Delete

[245] Fix | Delete

/**

[246] Fix | Delete

* Retrieve PaymentIntent object from Stripe.

[247] Fix | Delete

[248] Fix | Delete

* @since 1.8.2

[249] Fix | Delete

* @since 1.8.7 Changed method visibility.

[250] Fix | Delete

[251] Fix | Delete

* @param string $id PaymentIntent id.

[252] Fix | Delete

* @param array $args Additional arguments (e.g. 'expand').

[253] Fix | Delete

[254] Fix | Delete

* @throws ApiErrorException If the request fails.

[255] Fix | Delete

[256] Fix | Delete

* @return PaymentIntent|null

[257] Fix | Delete

[258] Fix | Delete

public function retrieve_payment_intent( $id, $args = [] ) {

[259] Fix | Delete

[260] Fix | Delete

try {

[261] Fix | Delete

[262] Fix | Delete

$defaults = [ 'id' => $id ];

[263] Fix | Delete

[264] Fix | Delete

if ( isset( $args['mode'] ) ) {

[265] Fix | Delete

$auth_opts = [ 'api_key' => Helpers::get_stripe_key( 'secret', $args['mode'] ) ];

[266] Fix | Delete

[267] Fix | Delete

unset( $args['mode'] );

[268] Fix | Delete

}

[269] Fix | Delete

[270] Fix | Delete

$args = wp_parse_args( $args, $defaults );

[271] Fix | Delete

[272] Fix | Delete

return PaymentIntent::retrieve( $args, $auth_opts ?? Helpers::get_auth_opts() );

[273] Fix | Delete

} catch ( Exception $e ) {

[274] Fix | Delete

[275] Fix | Delete

$this->handle_exception( $e );

[276] Fix | Delete

}

[277] Fix | Delete

[278] Fix | Delete

return null;

[279] Fix | Delete

}

[280] Fix | Delete

[281] Fix | Delete

/**

[282] Fix | Delete

* Process single payment.

[283] Fix | Delete

[284] Fix | Delete

* @since 1.8.2

[285] Fix | Delete

[286] Fix | Delete

* @param array $args Single payment arguments.

[287] Fix | Delete

[288] Fix | Delete

* @throws ApiErrorException If the request fails.

[289] Fix | Delete

[290] Fix | Delete

public function process_single( $args ) {

[291] Fix | Delete

[292] Fix | Delete

if ( $this->payment_method_id ) {

[293] Fix | Delete

[294] Fix | Delete

// Normal flow.

[295] Fix | Delete

$this->charge_single( $args );

[296] Fix | Delete

[297] Fix | Delete

} elseif ( $this->payment_intent_id ) {

[298] Fix | Delete

[299] Fix | Delete

// 3D Secure flow.

[300] Fix | Delete

$this->finalize_single();

[301] Fix | Delete

}

[302] Fix | Delete

}

[303] Fix | Delete

[304] Fix | Delete

/**

[305] Fix | Delete

* Refund a payment.

[306] Fix | Delete

[307] Fix | Delete

* @since 1.8.4

[308] Fix | Delete

* @since 1.8.8.2 $args param was added.

[309] Fix | Delete

[310] Fix | Delete

* @param string $payment_intent_id PaymentIntent id.

[311] Fix | Delete

* @param array $args Additional arguments (e.g. 'mode', 'metadata', 'reason' ).

[312] Fix | Delete

[313] Fix | Delete

* @return bool

[314] Fix | Delete

[315] Fix | Delete

public function refund_payment( string $payment_intent_id, array $args = [] ): bool {

[316] Fix | Delete

[317] Fix | Delete

try {

[318] Fix | Delete

[319] Fix | Delete

$intent = $this->retrieve_payment_intent( $payment_intent_id );

[320] Fix | Delete

[321] Fix | Delete

if ( ! $intent ) {

[322] Fix | Delete

return false;

[323] Fix | Delete

}

[324] Fix | Delete

[325] Fix | Delete

$defaults = [

[326] Fix | Delete

'payment_intent' => $payment_intent_id,

[327] Fix | Delete

];

[328] Fix | Delete

[329] Fix | Delete

if ( isset( $args['mode'] ) ) {

[330] Fix | Delete

$auth_opts = [ 'api_key' => Helpers::get_stripe_key( 'secret', $args['mode'] ) ];

[331] Fix | Delete

[332] Fix | Delete

unset( $args['mode'] );

[333] Fix | Delete

}

[334] Fix | Delete

[335] Fix | Delete

$args = wp_parse_args( $args, $defaults );

[336] Fix | Delete

[337] Fix | Delete

$refund = Refund::create( $args, $auth_opts ?? Helpers::get_auth_opts() );

[338] Fix | Delete

[339] Fix | Delete

if ( ! $refund ) {

[340] Fix | Delete

return false;

[341] Fix | Delete

}

[342] Fix | Delete

} catch ( Exception $e ) {

[343] Fix | Delete

[344] Fix | Delete

$this->handle_exception( $e );

[345] Fix | Delete

[346] Fix | Delete

return false;

[347] Fix | Delete

}

[348] Fix | Delete

[349] Fix | Delete

return true;

[350] Fix | Delete

}

[351] Fix | Delete

[352] Fix | Delete

/**

[353] Fix | Delete

* Get a charge.

[354] Fix | Delete

[355] Fix | Delete

* @since 1.8.4

[356] Fix | Delete

[357] Fix | Delete

* @param string $charge_id Charge id.

[358] Fix | Delete

[359] Fix | Delete

* @return Charge|bool

[360] Fix | Delete

[361] Fix | Delete

public function get_charge( $charge_id ) {

[362] Fix | Delete

[363] Fix | Delete

try {

[364] Fix | Delete

[365] Fix | Delete

$charge = Charge::retrieve(

[366] Fix | Delete

$charge_id,

[367] Fix | Delete

Helpers::get_auth_opts()

[368] Fix | Delete

);

[369] Fix | Delete

[370] Fix | Delete

if ( ! $charge ) {

[371] Fix | Delete

return false;

[372] Fix | Delete

}

[373] Fix | Delete

} catch ( Exception $e ) {

[374] Fix | Delete

[375] Fix | Delete

$this->handle_exception( $e );

[376] Fix | Delete

[377] Fix | Delete

return false;

[378] Fix | Delete

}

[379] Fix | Delete

[380] Fix | Delete

return $charge;

[381] Fix | Delete

}

[382] Fix | Delete

[383] Fix | Delete

/**

[384] Fix | Delete

* Cancel a subscription.

[385] Fix | Delete

[386] Fix | Delete

* @since 1.8.4

[387] Fix | Delete

[388] Fix | Delete

* @param string $subscription_id Subscription id.

[389] Fix | Delete

[390] Fix | Delete

* @return bool

[391] Fix | Delete

[392] Fix | Delete

public function cancel_subscription( $subscription_id ) {

[393] Fix | Delete

[394] Fix | Delete

try {

[395] Fix | Delete

[396] Fix | Delete

$subscription = Subscription::retrieve(

[397] Fix | Delete

$subscription_id,

[398] Fix | Delete

Helpers::get_auth_opts()

[399] Fix | Delete

);

[400] Fix | Delete

[401] Fix | Delete

if ( ! $subscription ) {

[402] Fix | Delete

return false;

[403] Fix | Delete

}

[404] Fix | Delete

[405] Fix | Delete

Subscription::update(

[406] Fix | Delete

$subscription_id,

[407] Fix | Delete

[

[408] Fix | Delete

'metadata' => array_merge(

[409] Fix | Delete

$subscription->metadata->values(),

[410] Fix | Delete

[

[411] Fix | Delete

'canceled_by' => 'wpforms_dashboard',

[412] Fix | Delete

]

[413] Fix | Delete

[414] Fix | Delete

[415] Fix | Delete

Helpers::get_auth_opts()

[416] Fix | Delete

);

[417] Fix | Delete

[418] Fix | Delete

$subscription->cancel();

[419] Fix | Delete

[420] Fix | Delete

} catch ( Exception $e ) {

[421] Fix | Delete

[422] Fix | Delete

$this->handle_exception( $e );

[423] Fix | Delete

[424] Fix | Delete

return false;

[425] Fix | Delete

}

[426] Fix | Delete

[427] Fix | Delete

return true;

[428] Fix | Delete

}

[429] Fix | Delete

[430] Fix | Delete

/**

[431] Fix | Delete

* Request a single payment charge to be made by Stripe.

[432] Fix | Delete

[433] Fix | Delete

* @since 1.8.2

[434] Fix | Delete

[435] Fix | Delete

* @param array $args Single payment arguments.

[436] Fix | Delete

[437] Fix | Delete

protected function charge_single( $args ) { // phpcs:ignore Generic.Metrics.CyclomaticComplexity.TooHigh

[438] Fix | Delete

[439] Fix | Delete

if ( empty( $this->payment_method_id ) ) {

[440] Fix | Delete

$this->error = esc_html__( 'Stripe payment stopped, missing PaymentMethod id.', 'wpforms-lite' );

[441] Fix | Delete

[442] Fix | Delete

return;

[443] Fix | Delete

}

[444] Fix | Delete

[445] Fix | Delete

$defaults = [

[446] Fix | Delete

'payment_method' => $this->payment_method_id,

[447] Fix | Delete

];

[448] Fix | Delete

[449] Fix | Delete

$args = wp_parse_args( $args, $defaults );

[450] Fix | Delete

[451] Fix | Delete

if ( Helpers::is_payment_element_enabled() ) {

[452] Fix | Delete

$args['automatic_payment_methods'] = [ 'enabled' => true ];

[453] Fix | Delete

} else {

[454] Fix | Delete

$args['confirm'] = true;

[455] Fix | Delete

}

[456] Fix | Delete

[457] Fix | Delete

try {

[458] Fix | Delete

[459] Fix | Delete

if ( isset( $args['customer_email'] ) || isset( $args['customer_name'] ) ) {

[460] Fix | Delete

$this->set_customer( $args['customer_email'] ?? '', $args['customer_name'] ?? '', $args['customer_address'] ?? [] );

[461] Fix | Delete

[462] Fix | Delete

// Stop payment processing for all.

[463] Fix | Delete

// Otherwise, it might stop for WPForms, but proceed for Stripe.

[464] Fix | Delete

if ( is_null( $this->attach_customer_to_payment() ) ) {

[465] Fix | Delete

return;

[466] Fix | Delete

}

[467] Fix | Delete

[468] Fix | Delete

$args['customer'] = $this->get_customer( 'id' );

[469] Fix | Delete

}

[470] Fix | Delete

[471] Fix | Delete

unset( $args['customer_email'], $args['customer_name'], $args['customer_address'] );

[472] Fix | Delete

[473] Fix | Delete

$this->intent = PaymentIntent::create( $args, Helpers::get_auth_opts() );

[474] Fix | Delete

[475] Fix | Delete

if ( ! in_array( $this->intent->status, [ 'succeeded', 'requires_action', 'requires_confirmation' ], true ) ) {

[476] Fix | Delete

$this->error = esc_html__( 'Stripe payment stopped. Invalid PaymentIntent status.', 'wpforms-lite' );

[477] Fix | Delete

[478] Fix | Delete

return;

[479] Fix | Delete

}

[480] Fix | Delete

[481] Fix | Delete

if ( $this->intent->status === 'succeeded' ) {

[482] Fix | Delete

return;

[483] Fix | Delete

}

[484] Fix | Delete

[485] Fix | Delete

$this->set_bypass_captcha_3dsecure_token();

[486] Fix | Delete

[487] Fix | Delete

if ( $this->intent->status === 'requires_confirmation' ) {

[488] Fix | Delete

$this->request_confirm_payment_ajax( $this->intent );

[489] Fix | Delete

}

[490] Fix | Delete

[491] Fix | Delete

$this->request_3dsecure_ajax( $this->intent );

[492] Fix | Delete

} catch ( Exception $e ) {

[493] Fix | Delete

[494] Fix | Delete

$this->handle_exception( $e );

[495] Fix | Delete

}

[496] Fix | Delete

}

[497] Fix | Delete

[498] Fix | Delete

/**

[499] Fix | Delete

12 3