Add PayPal webhook handling

2026-02-04 14:23:07 +01:00
parent 66c7131d79
commit 5c78ac00dd
12 changed files with 676 additions and 7 deletions
--- a/app/Http/Controllers/PayPalWebhookController.php
+++ b/app/Http/Controllers/PayPalWebhookController.php
@@ -0,0 +1,110 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Services\Integrations\IntegrationWebhookRecorder;
+use App\Services\PayPal\PayPalWebhookService;
+use App\Services\PayPal\PayPalWebhookVerifier;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Log;
+use Symfony\Component\HttpFoundation\Response;
+
+class PayPalWebhookController extends Controller
+{
+    public function __construct(
+        private readonly PayPalWebhookVerifier $verifier,
+        private readonly PayPalWebhookService $webhooks,
+        private readonly IntegrationWebhookRecorder $recorder,
+    ) {}
+
+    public function handle(Request $request): JsonResponse
+    {
+        try {
+            $payload = $this->decodePayload($request);
+
+            if (! is_array($payload)) {
+                return response()->json(['status' => 'ignored'], Response::HTTP_ACCEPTED);
+            }
+
+            if (! $this->verifier->verify($request, $payload)) {
+                Log::warning('PayPal webhook signature verification failed');
+
+                return response()->json(['status' => 'invalid'], Response::HTTP_BAD_REQUEST);
+            }
+
+            $eventType = $payload['event_type'] ?? null;
+            $eventId = $payload['id'] ?? null;
+
+            $webhookEvent = $this->recorder->recordReceived(
+                'paypal',
+                is_string($eventId) ? $eventId : null,
+                is_string($eventType) ? $eventType : null,
+            );
+
+            $handled = is_string($eventType) ? $this->webhooks->handle($payload) : false;
+
+            Log::info('PayPal webhook processed', [
+                'event_type' => $eventType,
+                'handled' => $handled,
+            ]);
+
+            if ($handled) {
+                $this->recorder->markProcessed($webhookEvent, ['handled' => true]);
+            } else {
+                $this->recorder->markIgnored($webhookEvent, ['handled' => false]);
+            }
+
+            return response()->json([
+                'status' => $handled ? 'processed' : 'ignored',
+            ], $handled ? Response::HTTP_OK : Response::HTTP_ACCEPTED);
+        } catch (\Throwable $exception) {
+            $eventId = $this->captureWebhookException($exception);
+
+            Log::error('PayPal webhook processing failed', [
+                'message' => $exception->getMessage(),
+                'event_type' => (string) data_get($request->json()->all(), 'event_type'),
+                'sentry_event_id' => $eventId,
+            ]);
+
+            if (isset($webhookEvent)) {
+                $this->recorder->markFailed($webhookEvent, $exception->getMessage());
+            }
+
+            return response()->json(['status' => 'error'], Response::HTTP_INTERNAL_SERVER_ERROR);
+        }
+    }
+
+    /**
+     * @return array<string, mixed>|null
+     */
+    protected function decodePayload(Request $request): ?array
+    {
+        $payload = $request->getContent();
+
+        if (! is_string($payload) || $payload === '') {
+            return null;
+        }
+
+        $decoded = json_decode($payload, true);
+
+        return is_array($decoded) ? $decoded : null;
+    }
+
+    protected function captureWebhookException(\Throwable $exception): ?string
+    {
+        report($exception);
+
+        if (! app()->bound('sentry') || empty(config('sentry.dsn'))) {
+            return null;
+        }
+
+        try {
+            $eventId = app('sentry')->captureException($exception);
+        } catch (\Throwable) {
+            return null;
+        }
+
+        return $eventId ? (string) $eventId : null;
+    }
+}