mirror of
https://github.com/myronblair/tomsjavajive
synced 2026-06-30 17:50:32 -05:00
myron
62dd05780a
Mirrors the checkout.session.completed case which checks payment_status === paid before acting. Now checks data.status === succeeded on the PaymentIntent object, consistent with how Stripe structures the event and defensive against any future edge case where the event fires in a non-final state.
113 lines
3.8 KiB
PHP
113 lines
3.8 KiB
PHP
<?php
|
|
/**
|
|
* Tom's Java Jive - Stripe Webhook Handler
|
|
* Uses cURL-based Stripe integration (no Composer required)
|
|
*/
|
|
|
|
require_once __DIR__ . '/../includes/functions.php';
|
|
require_once __DIR__ . '/../includes/stripe.php';
|
|
require_once __DIR__ . '/../includes/email.php';
|
|
|
|
header('Content-Type: application/json');
|
|
|
|
$payload = file_get_contents('php://input');
|
|
$sigHeader = $_SERVER['HTTP_STRIPE_SIGNATURE'] ?? '';
|
|
|
|
// Verify webhook signature (if secret is configured)
|
|
if (!empty(STRIPE_WEBHOOK_SECRET) && STRIPE_WEBHOOK_SECRET !== 'whsec_your_webhook_secret') {
|
|
try {
|
|
stripe()->verifyWebhookSignature($payload, $sigHeader, STRIPE_WEBHOOK_SECRET);
|
|
$event = json_decode($payload, true);
|
|
} catch (Exception $e) {
|
|
error_log('Stripe webhook signature verification failed: ' . $e->getMessage());
|
|
http_response_code(400);
|
|
exit();
|
|
}
|
|
} else {
|
|
$event = json_decode($payload, true);
|
|
if (!$event) {
|
|
http_response_code(400);
|
|
exit();
|
|
}
|
|
}
|
|
|
|
$eventType = $event['type'] ?? '';
|
|
$data = $event['data']['object'] ?? [];
|
|
|
|
switch ($eventType) {
|
|
|
|
case 'checkout.session.completed':
|
|
// Stripe Checkout (hosted page) — metadata is on the session
|
|
$orderId = $data['metadata']['order_id'] ?? '';
|
|
$paymentIntentId = $data['payment_intent'] ?? '';
|
|
if ($orderId && ($data['payment_status'] ?? '') === 'paid') {
|
|
db()->update('orders',
|
|
[
|
|
'payment_status' => 'paid',
|
|
'order_status' => 'confirmed',
|
|
'stripe_payment_intent' => $paymentIntentId,
|
|
],
|
|
'order_id = :id',
|
|
['id' => $orderId]
|
|
);
|
|
$order = db()->fetch("SELECT * FROM orders WHERE order_id = :id", ['id' => $orderId]);
|
|
if ($order) {
|
|
emailService()->sendOrderConfirmation($order);
|
|
}
|
|
}
|
|
break;
|
|
|
|
case 'payment_intent.succeeded':
|
|
// Payment Intent flow (embedded/direct) - skip if already confirmed by checkout.session.completed
|
|
$paymentIntentId = $data['id'] ?? '';
|
|
$orderId = $data['metadata']['order_id'] ?? '';
|
|
if ($orderId && ($data['status'] ?? '') === 'succeeded') {
|
|
$order = db()->fetch("SELECT * FROM orders WHERE order_id = :id", ['id' => $orderId]);
|
|
if ($order && $order['order_status'] !== 'confirmed') {
|
|
db()->update('orders',
|
|
[
|
|
'payment_status' => 'paid',
|
|
'order_status' => 'confirmed',
|
|
'stripe_payment_intent' => $paymentIntentId,
|
|
],
|
|
'order_id = :id',
|
|
['id' => $orderId]
|
|
);
|
|
$order = db()->fetch("SELECT * FROM orders WHERE order_id = :id", ['id' => $orderId]);
|
|
if ($order) {
|
|
emailService()->sendOrderConfirmation($order);
|
|
}
|
|
}
|
|
}
|
|
break;
|
|
|
|
case 'payment_intent.payment_failed':
|
|
$orderId = $data['metadata']['order_id'] ?? '';
|
|
if ($orderId) {
|
|
db()->update('orders',
|
|
['payment_status' => 'failed'],
|
|
'order_id = :id',
|
|
['id' => $orderId]
|
|
);
|
|
}
|
|
break;
|
|
|
|
case 'charge.refunded':
|
|
$paymentIntentId = $data['payment_intent'] ?? '';
|
|
if ($paymentIntentId) {
|
|
db()->update('orders',
|
|
[
|
|
'payment_status' => 'refunded',
|
|
'order_status' => 'refunded',
|
|
],
|
|
'stripe_payment_intent = :pi',
|
|
['pi' => $paymentIntentId]
|
|
);
|
|
}
|
|
break;
|
|
}
|
|
|
|
http_response_code(200);
|
|
echo json_encode(['received' => true]);
|
|
|