Fix webhook: add checkout.session.completed; propagate metadata to payment intent

api/webhook.php

@@ -34,21 +34,41 @@ $eventType = $event['type'] ?? '';
 $data      = $event['data']['object'] ?? [];
 
 switch ($eventType) {
-    case 'payment_intent.succeeded':
-        $paymentIntentId = $data['id'] ?? '';
-        $orderId = $data['metadata']['order_id'] ?? '';
 
-        if ($orderId) {
+    case 'checkout.session.completed':
+        // Stripe Checkout (hosted page) — metadata is on the session
+        $orderId         = $data['metadata']['order_id'] ?? '';
+        $paymentIntentId = $data['payment_intent'] ?? '';
+        if ($orderId && ($data['payment_status'] ?? '') === 'paid') {
             db()->update('orders',
                 [
                     'payment_status'        => 'paid',
-                    'order_status' => 'confirmed'
+                    'order_status'          => 'confirmed',
+                    'stripe_payment_intent' => $paymentIntentId,
                 ],
                 'order_id = :id',
                 ['id' => $orderId]
             );
+            $order = db()->fetch("SELECT * FROM orders WHERE order_id = :id", ['id' => $orderId]);
+            if ($order) {
+                sendOrderConfirmationEmail($order);
+            }
+        }
+        break;
 
-            // Send confirmation email
+    case 'payment_intent.succeeded':
+        // Payment Intent flow (embedded checkout) — metadata.order_id set directly on PI
+        $paymentIntentId = $data['id'] ?? '';
+        $orderId         = $data['metadata']['order_id'] ?? '';
+        if ($orderId) {
+            db()->update('orders',
+                [
+                    'payment_status' => 'paid',
+                    'order_status'   => 'confirmed',
+                ],
+                'order_id = :id',
+                ['id' => $orderId]
+            );
             $order = db()->fetch("SELECT * FROM orders WHERE order_id = :id", ['id' => $orderId]);
             if ($order) {
                 sendOrderConfirmationEmail($order);
@@ -73,7 +93,7 @@ switch ($eventType) {
             db()->update('orders',
                 [
                     'payment_status' => 'refunded',
-                    'order_status' => 'refunded'
+                    'order_status'   => 'refunded',
                 ],
                 'stripe_payment_intent = :pi',
                 ['pi' => $paymentIntentId]

includes/stripe.php

@@ -121,6 +121,7 @@ class StripeAPI {
         if (!empty($options['metadata'])) {
             foreach ($options['metadata'] as $key => $value) {
                 $data["metadata[$key]"] = $value;
+                $data["payment_intent_data[metadata][$key]"] = $value;
             }
         }