magento/Controller/WebhookAbstract.php at b22dfa71044f2b973c2e8258dcb67c172bfe5417 · Fintecture/magento · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
<?php

declare(strict_types=1);

namespace Fintecture\Payment\Controller;

use Fintecture\Payment\Gateway\Config\Config;
use Fintecture\Payment\Gateway\HandlePayment;
use Fintecture\Payment\Gateway\HandleRefund;
use Fintecture\Payment\Helper\Fintecture as FintectureHelper;
use Fintecture\Payment\Logger\Logger as FintectureLogger;
use Fintecture\Util\Validation;
use Magento\Framework\App\CsrfAwareActionInterface;
use Magento\Framework\App\Request\Http;
use Magento\Framework\App\Request\InvalidRequestException;
use Magento\Framework\App\RequestInterface;
use Magento\Framework\Controller\Result\RawFactory;
use Magento\Sales\Model\ResourceModel\Order\CollectionFactory;

abstract class WebhookAbstract implements CsrfAwareActionInterface
{
    /** @var FintectureLogger */
    protected $fintectureLogger;

    /** @var FintectureHelper */
    protected $fintectureHelper;

    /** @var RawFactory */
    protected $resultRawFactory;

    /** @var ResultFactory */
    protected $resultFactory;

    /** @var CollectionFactory */
    protected $orderCollectionFactory;

    /** @var Http */
    protected $request;

    /** @var HandlePayment */
    protected $handlePayment;

    /** @var HandleRefund */
    protected $handleRefund;

    /** @var Config */
    protected $config;

    /** @var array<string> */
    protected const ALLOWED_WEBHOOK_TYPES = [
        'PayByBank',
        'Refund',
        'ManualTransfer',
        'RequestToPay',
    ];

    public function __construct(
        FintectureLogger $fintectureLogger,
        FintectureHelper $fintectureHelper,
        RawFactory $resultRawFactory,
        CollectionFactory $orderCollectionFactory,
        Http $request,
        HandlePayment $handlePayment,
        HandleRefund $handleRefund,
        Config $config
    ) {
        $this->fintectureLogger = $fintectureLogger;
        $this->fintectureHelper = $fintectureHelper;
        $this->resultRawFactory = $resultRawFactory;
        $this->orderCollectionFactory = $orderCollectionFactory;
        $this->request = $request;
        $this->handlePayment = $handlePayment;
        $this->handleRefund = $handleRefund;
        $this->config = $config;
    }

    public function createCsrfValidationException(RequestInterface $request): ?InvalidRequestException
    {
        return null;
    }

    public function validateForCsrf(RequestInterface $request): ?bool
    {
        return true;
    }

    /**
     * @return bool
     *
     * session_id=b2bca2bcd3b64a32a7da0766df59a7d2
     * &status=payment_created
     * &customer_id=1ef74051a77673de120820fb370dc382
     * &provider=provider
     * &state=thisisastate
     */
    public function validateWebhook(): bool
    {
        $body = file_get_contents('php://input');
        if (!$body) {
            return false;
        }

        if (!isset($_SERVER['HTTP_DIGEST']) || !isset($_SERVER['HTTP_SIGNATURE'])) {
            return false;
        }
        $digest = $_SERVER['HTTP_DIGEST'];
        $signature = $_SERVER['HTTP_SIGNATURE'];

        return Validation::validSignature($body, $digest, $signature);
    }

    abstract public function execute();
}