<?php

[0] Fix | Delete

[1] Fix | Delete

namespace WPForms\Integrations\Stripe\Api;

[2] Fix | Delete

[3] Fix | Delete

use WPForms\Vendor\Stripe\Mandate;

[4] Fix | Delete

use WPForms\Vendor\Stripe\SetupIntent;

[5] Fix | Delete

use WPForms\Vendor\Stripe\PaymentIntent;

[6] Fix | Delete

use WPForms\Vendor\Stripe\Stripe;

[7] Fix | Delete

use WPForms\Vendor\Stripe\Subscription;

[8] Fix | Delete

use WPForms\Vendor\Stripe\Refund;

[9] Fix | Delete

use WPForms\Vendor\Stripe\Exception\ApiErrorException;

[10] Fix | Delete

use WPForms\Integrations\Stripe\Fields\StripeCreditCard;

[11] Fix | Delete

use WPForms\Integrations\Stripe\Fields\PaymentElementCreditCard;

[12] Fix | Delete

use WPForms\Integrations\Stripe\Helpers;

[13] Fix | Delete

use WPForms\Helpers\Crypto;

[14] Fix | Delete

use Exception;

[15] Fix | Delete

use WPForms\Vendor\Stripe\Charge;

[16] Fix | Delete

use WPForms\Vendor\Stripe\CountrySpec;

[17] Fix | Delete

[18] Fix | Delete

/**

[19] Fix | Delete

* Stripe PaymentIntents API.

[20] Fix | Delete

*

[21] Fix | Delete

* @since 1.8.2

[22] Fix | Delete

*/

[23] Fix | Delete

class PaymentIntents extends Common implements ApiInterface {

[24] Fix | Delete

[25] Fix | Delete

/**

[26] Fix | Delete

* Stripe PaymentMethod id received from Elements.

[27] Fix | Delete

*

[28] Fix | Delete

* @since 1.8.2

[29] Fix | Delete

*

[30] Fix | Delete

* @var string

[31] Fix | Delete

*/

[32] Fix | Delete

protected $payment_method_id;

[33] Fix | Delete

[34] Fix | Delete

/**

[35] Fix | Delete

* Stripe PaymentIntent id received from Elements.

[36] Fix | Delete

*

[37] Fix | Delete

* @since 1.8.2

[38] Fix | Delete

*

[39] Fix | Delete

* @var string

[40] Fix | Delete

*/

[41] Fix | Delete

protected $payment_intent_id;

[42] Fix | Delete

[43] Fix | Delete

/**

[44] Fix | Delete

* Stripe PaymentIntent object.

[45] Fix | Delete

*

[46] Fix | Delete

* @since 1.8.2

[47] Fix | Delete

*

[48] Fix | Delete

* @var PaymentIntent

[49] Fix | Delete

*/

[50] Fix | Delete

protected $intent;

[51] Fix | Delete

[52] Fix | Delete

/**

[53] Fix | Delete

* API config data.

[54] Fix | Delete

*

[55] Fix | Delete

* @since 1.8.2

[56] Fix | Delete

*

[57] Fix | Delete

* @var array

[58] Fix | Delete

*/

[59] Fix | Delete

protected $config;

[60] Fix | Delete

[61] Fix | Delete

/**

[62] Fix | Delete

* Initialize.

[63] Fix | Delete

*

[64] Fix | Delete

* @since 1.8.2

[65] Fix | Delete

*

[66] Fix | Delete

* @return PaymentIntents

[67] Fix | Delete

*/

[68] Fix | Delete

public function init() {

[69] Fix | Delete

[70] Fix | Delete

$this->set_config();

[71] Fix | Delete

$this->load_card_field();

[72] Fix | Delete

$this->hooks();

[73] Fix | Delete

[74] Fix | Delete

return $this;

[75] Fix | Delete

}

[76] Fix | Delete

[77] Fix | Delete

/**

[78] Fix | Delete

* Register hooks.

[79] Fix | Delete

*

[80] Fix | Delete

* @since 1.8.2

[81] Fix | Delete

*/

[82] Fix | Delete

private function hooks() {

[83] Fix | Delete

[84] Fix | Delete

add_filter( 'wpforms_process_bypass_captcha', [ $this, 'bypass_captcha_on_3dsecure_submit' ], 10, 3 );

[85] Fix | Delete

}

[86] Fix | Delete

[87] Fix | Delete

/**

[88] Fix | Delete

* Load Credit Card Field Class.

[89] Fix | Delete

*

[90] Fix | Delete

* @since 1.8.2

[91] Fix | Delete

*/

[92] Fix | Delete

private function load_card_field() {

[93] Fix | Delete

[94] Fix | Delete

if ( Helpers::is_payment_element_enabled() ) {

[95] Fix | Delete

new PaymentElementCreditCard();

[96] Fix | Delete

[97] Fix | Delete

return;

[98] Fix | Delete

}

[99] Fix | Delete

[100] Fix | Delete

new StripeCreditCard();

[101] Fix | Delete

}

[102] Fix | Delete

[103] Fix | Delete

/**

[104] Fix | Delete

* Set API configuration.

[105] Fix | Delete

*

[106] Fix | Delete

* @since 1.8.2

[107] Fix | Delete

*/

[108] Fix | Delete

public function set_config() {

[109] Fix | Delete

[110] Fix | Delete

$localize_script = [

[111] Fix | Delete

'element_locale' => $this->filter_config_element_locale(),

[112] Fix | Delete

];

[113] Fix | Delete

[114] Fix | Delete

$this->config = [

[115] Fix | Delete

'remote_js_url' => 'https://js.stripe.com/v3/',

[116] Fix | Delete

'field_slug' => 'stripe-credit-card',

[117] Fix | Delete

'localize_script' => $localize_script,

[118] Fix | Delete

];

[119] Fix | Delete

[120] Fix | Delete

if ( Helpers::is_payment_element_enabled() ) {

[121] Fix | Delete

$this->set_payment_element_config();

[122] Fix | Delete

[123] Fix | Delete

return;

[124] Fix | Delete

}

[125] Fix | Delete

[126] Fix | Delete

$this->set_card_element_config();

[127] Fix | Delete

}

[128] Fix | Delete

[129] Fix | Delete

/**

[130] Fix | Delete

* Set API configuration for Payment Element.

[131] Fix | Delete

*

[132] Fix | Delete

* @since 1.8.2

[133] Fix | Delete

*/

[134] Fix | Delete

private function set_payment_element_config() {

[135] Fix | Delete

[136] Fix | Delete

$min = wpforms_get_min_suffix();

[137] Fix | Delete

[138] Fix | Delete

/**

[139] Fix | Delete

* This filter allows to overwrite a Payment element appearance object.

[140] Fix | Delete

*

[141] Fix | Delete

* @since 1.8.5

[142] Fix | Delete

*

[143] Fix | Delete

* @link https://stripe.com/docs/elements/appearance-api

[144] Fix | Delete

*

[145] Fix | Delete

* @param array $appearance Appearance object.

[146] Fix | Delete

*/

[147] Fix | Delete

$element_style = (array) apply_filters( 'wpforms_integrations_stripe_api_payment_intents_set_element_appearance', [] );

[148] Fix | Delete

[149] Fix | Delete

$this->config['localize_script']['element_appearance'] = $element_style;

[150] Fix | Delete

[151] Fix | Delete

$this->config['local_js_url'] = WPFORMS_PLUGIN_URL . "assets/js/integrations/stripe/wpforms-stripe-payment-element{$min}.js";

[152] Fix | Delete

$this->config['local_css_url'] = WPFORMS_PLUGIN_URL . "assets/css/integrations/stripe/wpforms-stripe{$min}.css";

[153] Fix | Delete

}

[154] Fix | Delete

[155] Fix | Delete

/**

[156] Fix | Delete

* Set API configuration for Card Element.

[157] Fix | Delete

*

[158] Fix | Delete

* @since 1.8.2

[159] Fix | Delete

*/

[160] Fix | Delete

private function set_card_element_config() {

[161] Fix | Delete

[162] Fix | Delete

/**

[163] Fix | Delete

* This filter allows to overwrite a Style object, which consists of CSS properties nested under objects.

[164] Fix | Delete

*

[165] Fix | Delete

* @since 1.8.2

[166] Fix | Delete

*

[167] Fix | Delete

* @link https://stripe.com/docs/js/appendix/style

[168] Fix | Delete

*

[169] Fix | Delete

* @param array $styles Style object.

[170] Fix | Delete

*/

[171] Fix | Delete

$element_style = (array) apply_filters( 'wpforms_stripe_api_payment_intents_set_config_element_style', [] ); // phpcs:ignore WPForms.PHP.ValidateHooks.InvalidHookName

[172] Fix | Delete

[173] Fix | Delete

$this->config['localize_script']['element_style'] = $element_style;

[174] Fix | Delete

$this->config['localize_script']['element_classes'] = [

[175] Fix | Delete

'base' => 'wpforms-stripe-element',

[176] Fix | Delete

'complete' => 'wpforms-stripe-element-complete',

[177] Fix | Delete

'empty' => 'wpforms-stripe-element-empty',

[178] Fix | Delete

'focus' => 'wpforms-stripe-element-focus',

[179] Fix | Delete

'invalid' => 'wpforms-stripe-element-invalid',

[180] Fix | Delete

'webkitAutofill' => 'wpforms-stripe-element-webkit-autofill',

[181] Fix | Delete

];

[182] Fix | Delete

[183] Fix | Delete

$min = wpforms_get_min_suffix();

[184] Fix | Delete

[185] Fix | Delete

$this->config['local_js_url'] = WPFORMS_PLUGIN_URL . "assets/js/integrations/stripe/wpforms-stripe-elements{$min}.js";

[186] Fix | Delete

}

[187] Fix | Delete

[188] Fix | Delete

/**

[189] Fix | Delete

* Get stripe locale.

[190] Fix | Delete

*

[191] Fix | Delete

* @since 1.8.2

[192] Fix | Delete

*

[193] Fix | Delete

* @return string

[194] Fix | Delete

*/

[195] Fix | Delete

public function filter_config_element_locale() {

[196] Fix | Delete

[197] Fix | Delete

/**

[198] Fix | Delete

* WPForms Stripe Api payment intent element locale.

[199] Fix | Delete

*

[200] Fix | Delete

* @since 1.8.2

[201] Fix | Delete

*

[202] Fix | Delete

* @param string $locale Element locale.

[203] Fix | Delete

*/

[204] Fix | Delete

$locale = apply_filters( 'wpforms_stripe_api_payment_intents_filter_config_element_locale', '' ); // phpcs:ignore WPForms.PHP.ValidateHooks.InvalidHookName

[205] Fix | Delete

[206] Fix | Delete

// Stripe Elements makes its own locale validation, but we add a general sanity check.

[207] Fix | Delete

return strlen( $locale ) === 2 ? esc_html( $locale ) : 'auto';

[208] Fix | Delete

}

[209] Fix | Delete

[210] Fix | Delete

/**

[211] Fix | Delete

* Initial Stripe app configuration.

[212] Fix | Delete

*

[213] Fix | Delete

* @since 1.8.2

[214] Fix | Delete

*/

[215] Fix | Delete

public function setup_stripe() {

[216] Fix | Delete

[217] Fix | Delete

parent::setup_stripe();

[218] Fix | Delete

[219] Fix | Delete

Stripe::setApiVersion( '2019-05-16' );

[220] Fix | Delete

}

[221] Fix | Delete

[222] Fix | Delete

/**

[223] Fix | Delete

* Set payment tokens from a submitted form data.

[224] Fix | Delete

*

[225] Fix | Delete

* @since 1.8.2

[226] Fix | Delete

*

[227] Fix | Delete

* @param array $entry Copy of original $_POST.

[228] Fix | Delete

*/

[229] Fix | Delete

public function set_payment_tokens( $entry ) {

[230] Fix | Delete

[231] Fix | Delete

if ( ! empty( $entry['payment_method_id'] ) && empty( $entry['payment_intent_id'] ) ) {

[232] Fix | Delete

$this->payment_method_id = $entry['payment_method_id'];

[233] Fix | Delete

}

[234] Fix | Delete

[235] Fix | Delete

if ( ! empty( $entry['payment_intent_id'] ) ) {

[236] Fix | Delete

$this->payment_intent_id = $entry['payment_intent_id'];

[237] Fix | Delete

}

[238] Fix | Delete

[239] Fix | Delete

if ( empty( $this->payment_method_id ) && empty( $this->payment_intent_id ) ) {

[240] Fix | Delete

$this->error = esc_html__( 'Stripe payment stopped, missing both PaymentMethod and PaymentIntent ids.', 'wpforms-lite' );

[241] Fix | Delete

}

[242] Fix | Delete

}

[243] Fix | Delete

[244] Fix | Delete

/**

[245] Fix | Delete

* Retrieve PaymentIntent object from Stripe.

[246] Fix | Delete

*

[247] Fix | Delete

* @since 1.8.2

[248] Fix | Delete

* @since 1.8.7 Changed method visibility.

[249] Fix | Delete

*

[250] Fix | Delete

* @param string $id PaymentIntent id.

[251] Fix | Delete

* @param array $args Additional arguments (e.g. 'expand').

[252] Fix | Delete

*

[253] Fix | Delete

* @throws ApiErrorException If the request fails.

[254] Fix | Delete

*

[255] Fix | Delete

* @return PaymentIntent|null

[256] Fix | Delete

*/

[257] Fix | Delete

public function retrieve_payment_intent( $id, $args = [] ) {

[258] Fix | Delete

[259] Fix | Delete

try {

[260] Fix | Delete

[261] Fix | Delete

$defaults = [ 'id' => $id ];

[262] Fix | Delete

[263] Fix | Delete

if ( isset( $args['mode'] ) ) {

[264] Fix | Delete

$auth_opts = [ 'api_key' => Helpers::get_stripe_key( 'secret', $args['mode'] ) ];

[265] Fix | Delete

[266] Fix | Delete

unset( $args['mode'] );

[267] Fix | Delete

}

[268] Fix | Delete

[269] Fix | Delete

$args = wp_parse_args( $args, $defaults );

[270] Fix | Delete

[271] Fix | Delete

return PaymentIntent::retrieve( $args, $auth_opts ?? Helpers::get_auth_opts() );

[272] Fix | Delete

} catch ( Exception $e ) {

[273] Fix | Delete

[274] Fix | Delete

$this->handle_exception( $e );

[275] Fix | Delete

}

[276] Fix | Delete

[277] Fix | Delete

return null;

[278] Fix | Delete

}

[279] Fix | Delete

[280] Fix | Delete

/**

[281] Fix | Delete

* Process single payment.

[282] Fix | Delete

*

[283] Fix | Delete

* @since 1.8.2

[284] Fix | Delete

*

[285] Fix | Delete

* @param array $args Single payment arguments.

[286] Fix | Delete

*

[287] Fix | Delete

* @throws ApiErrorException If the request fails.

[288] Fix | Delete

*/

[289] Fix | Delete

public function process_single( $args ) {

[290] Fix | Delete

[291] Fix | Delete

if ( $this->payment_method_id ) {

[292] Fix | Delete

[293] Fix | Delete

// Normal flow.

[294] Fix | Delete

$this->charge_single( $args );

[295] Fix | Delete

[296] Fix | Delete

} elseif ( $this->payment_intent_id ) {

[297] Fix | Delete

[298] Fix | Delete

// 3D Secure flow.

[299] Fix | Delete

$this->finalize_single();

[300] Fix | Delete

}

[301] Fix | Delete

}

[302] Fix | Delete

[303] Fix | Delete

/**

[304] Fix | Delete

* Refund a payment.

[305] Fix | Delete

*

[306] Fix | Delete

* @since 1.8.4

[307] Fix | Delete

* @since 1.8.8.2 $args param was added.

[308] Fix | Delete

*

[309] Fix | Delete

* @param string $payment_intent_id PaymentIntent id.

[310] Fix | Delete

* @param array $args Additional arguments (e.g. 'mode', 'metadata', 'reason' ).

[311] Fix | Delete

*

[312] Fix | Delete

* @return bool

[313] Fix | Delete

*/

[314] Fix | Delete

public function refund_payment( string $payment_intent_id, array $args = [] ): bool {

[315] Fix | Delete

[316] Fix | Delete

try {

[317] Fix | Delete

[318] Fix | Delete

$intent = $this->retrieve_payment_intent( $payment_intent_id );

[319] Fix | Delete

[320] Fix | Delete

if ( ! $intent ) {

[321] Fix | Delete

return false;

[322] Fix | Delete

}

[323] Fix | Delete

[324] Fix | Delete

$defaults = [

[325] Fix | Delete

'payment_intent' => $payment_intent_id,

[326] Fix | Delete

];

[327] Fix | Delete

[328] Fix | Delete

if ( isset( $args['mode'] ) ) {

[329] Fix | Delete

$auth_opts = [ 'api_key' => Helpers::get_stripe_key( 'secret', $args['mode'] ) ];

[330] Fix | Delete

[331] Fix | Delete

unset( $args['mode'] );

[332] Fix | Delete

}

[333] Fix | Delete

[334] Fix | Delete

$args = wp_parse_args( $args, $defaults );

[335] Fix | Delete

[336] Fix | Delete

$refund = Refund::create( $args, $auth_opts ?? Helpers::get_auth_opts() );

[337] Fix | Delete

[338] Fix | Delete

if ( ! $refund ) {

[339] Fix | Delete

return false;

[340] Fix | Delete

}

[341] Fix | Delete

} catch ( Exception $e ) {

[342] Fix | Delete

[343] Fix | Delete

$this->handle_exception( $e );

[344] Fix | Delete

[345] Fix | Delete

return false;

[346] Fix | Delete

}

[347] Fix | Delete

[348] Fix | Delete

return true;

[349] Fix | Delete

}

[350] Fix | Delete

[351] Fix | Delete

/**

[352] Fix | Delete

* Get a charge.

[353] Fix | Delete

*

[354] Fix | Delete

* @since 1.8.4

[355] Fix | Delete

*

[356] Fix | Delete

* @param string $charge_id Charge id.

[357] Fix | Delete

*

[358] Fix | Delete

* @return Charge|bool

[359] Fix | Delete

*/

[360] Fix | Delete

public function get_charge( $charge_id ) {

[361] Fix | Delete

[362] Fix | Delete

try {

[363] Fix | Delete

[364] Fix | Delete

$charge = Charge::retrieve(

[365] Fix | Delete

$charge_id,

[366] Fix | Delete

Helpers::get_auth_opts()

[367] Fix | Delete

);

[368] Fix | Delete

[369] Fix | Delete

if ( ! $charge ) {

[370] Fix | Delete

return false;

[371] Fix | Delete

}

[372] Fix | Delete

} catch ( Exception $e ) {

[373] Fix | Delete

[374] Fix | Delete

$this->handle_exception( $e );

[375] Fix | Delete

[376] Fix | Delete

return false;

[377] Fix | Delete

}

[378] Fix | Delete

[379] Fix | Delete

return $charge;

[380] Fix | Delete

}

[381] Fix | Delete

[382] Fix | Delete

/**

[383] Fix | Delete

* Cancel a subscription.

[384] Fix | Delete

*

[385] Fix | Delete

* @since 1.8.4

[386] Fix | Delete

*

[387] Fix | Delete

* @param string $subscription_id Subscription id.

[388] Fix | Delete

*

[389] Fix | Delete

* @return bool

[390] Fix | Delete

*/

[391] Fix | Delete

public function cancel_subscription( $subscription_id ) {

[392] Fix | Delete

[393] Fix | Delete

try {

[394] Fix | Delete

[395] Fix | Delete

$subscription = Subscription::retrieve(

[396] Fix | Delete

$subscription_id,

[397] Fix | Delete

Helpers::get_auth_opts()

[398] Fix | Delete

);

[399] Fix | Delete

[400] Fix | Delete

if ( ! $subscription ) {

[401] Fix | Delete

return false;

[402] Fix | Delete

}

[403] Fix | Delete

[404] Fix | Delete

Subscription::update(

[405] Fix | Delete

$subscription_id,

[406] Fix | Delete

[

[407] Fix | Delete

'metadata' => array_merge(

[408] Fix | Delete

$subscription->metadata->values(),

[409] Fix | Delete

[

[410] Fix | Delete

'canceled_by' => 'wpforms_dashboard',

[411] Fix | Delete

]

[412] Fix | Delete

),

[413] Fix | Delete

],

[414] Fix | Delete

Helpers::get_auth_opts()

[415] Fix | Delete

);

[416] Fix | Delete

[417] Fix | Delete

$subscription->cancel();

[418] Fix | Delete

[419] Fix | Delete

} catch ( Exception $e ) {

[420] Fix | Delete

[421] Fix | Delete

$this->handle_exception( $e );

[422] Fix | Delete

[423] Fix | Delete

return false;

[424] Fix | Delete

}

[425] Fix | Delete

[426] Fix | Delete

return true;

[427] Fix | Delete

}

[428] Fix | Delete

[429] Fix | Delete

/**

[430] Fix | Delete

* Request a single payment charge to be made by Stripe.

[431] Fix | Delete

*

[432] Fix | Delete

* @since 1.8.2

[433] Fix | Delete

*

[434] Fix | Delete

* @param array $args Single payment arguments.

[435] Fix | Delete

*/

[436] Fix | Delete

protected function charge_single( $args ) { // phpcs:ignore Generic.Metrics.CyclomaticComplexity.TooHigh

[437] Fix | Delete

[438] Fix | Delete

if ( empty( $this->payment_method_id ) ) {

[439] Fix | Delete

$this->error = esc_html__( 'Stripe payment stopped, missing PaymentMethod id.', 'wpforms-lite' );

[440] Fix | Delete

[441] Fix | Delete

return;

[442] Fix | Delete

}

[443] Fix | Delete

[444] Fix | Delete

$defaults = [

[445] Fix | Delete

'payment_method' => $this->payment_method_id,

[446] Fix | Delete

'confirm' => true,

[447] Fix | Delete

'automatic_payment_methods' => [

[448] Fix | Delete

'enabled' => true,

[449] Fix | Delete

'allow_redirects' => 'never',

[450] Fix | Delete

],

[451] Fix | Delete

];

[452] Fix | Delete

[453] Fix | Delete

$args = wp_parse_args( $args, $defaults );

[454] Fix | Delete

[455] Fix | Delete

try {

[456] Fix | Delete

[457] Fix | Delete

if ( isset( $args['customer_email'] ) || isset( $args['customer_name'] ) || isset( $args['customer_phone'] ) ) {

[458] Fix | Delete

$this->set_customer( $args['customer_email'] ?? '', $args['customer_name'] ?? '', $args['customer_address'] ?? [], $args['customer_phone'] ?? '', $args['customer_metadata'] ?? [] );

[459] Fix | Delete

[460] Fix | Delete

$args['customer'] = $this->get_customer( 'id' );

[461] Fix | Delete

}

[462] Fix | Delete

[463] Fix | Delete

unset( $args['customer_email'], $args['customer_name'], $args['customer_address'], $args['customer_phone'], $args['customer_metadata'] );

[464] Fix | Delete

[465] Fix | Delete

$this->intent = PaymentIntent::create( $args, Helpers::get_auth_opts() );

[466] Fix | Delete

[467] Fix | Delete

if ( ! in_array( $this->intent->status, [ 'succeeded', 'requires_action', 'requires_confirmation' ], true ) ) {

[468] Fix | Delete

$this->error = esc_html__( 'Stripe payment stopped. Invalid PaymentIntent status.', 'wpforms-lite' );

[469] Fix | Delete

[470] Fix | Delete

return;

[471] Fix | Delete

}

[472] Fix | Delete

[473] Fix | Delete

if ( $this->intent->status === 'succeeded' ) {

[474] Fix | Delete

return;

[475] Fix | Delete

}

[476] Fix | Delete

[477] Fix | Delete

$this->set_bypass_captcha_3dsecure_token( $args );

[478] Fix | Delete

[479] Fix | Delete

if ( $this->intent->status === 'requires_confirmation' ) {

[480] Fix | Delete

$this->request_confirm_payment_ajax( $this->intent );

[481] Fix | Delete

}

[482] Fix | Delete

[483] Fix | Delete

$this->request_3dsecure_ajax( $this->intent );

[484] Fix | Delete

} catch ( Exception $e ) {

[485] Fix | Delete

[486] Fix | Delete

$this->handle_exception( $e );

[487] Fix | Delete

}

[488] Fix | Delete

}

[489] Fix | Delete

[490] Fix | Delete

/**

[491] Fix | Delete

* Finalize single payment after 3D Secure authorization is finished successfully.

[492] Fix | Delete

*

[493] Fix | Delete

* @since 1.8.2

[494] Fix | Delete

*

[495] Fix | Delete

* @throws ApiErrorException If the request fails.

[496] Fix | Delete

*/

[497] Fix | Delete

protected function finalize_single() {

[498] Fix | Delete

[499] Fix | Delete