CRM/Core/Payment.php

   1 <?php
   2 /*
   3  +--------------------------------------------------------------------+
   4  | Copyright CiviCRM LLC. All rights reserved.                        |
   5  |                                                                    |
   6  | This work is published under the GNU AGPLv3 license with some      |
   7  | permitted exceptions and without any warranty. For full license    |
   8  | and copyright information, see https://civicrm.org/licensing       |
   9  +--------------------------------------------------------------------+
  10  */
  11
  12 use Civi\Payment\System;
  13 use Civi\Payment\Exception\PaymentProcessorException;
  14 use Civi\Payment\PropertyBag;
  15
  16 /**
  17  * Class CRM_Core_Payment.
  18  *
  19  * This class is the main class for the payment processor subsystem.
  20  *
  21  * It is the parent class for payment processors. It also holds some IPN related functions
  22  * that need to be moved. In particular handlePaymentMethod should be moved to a factory class.
  23  */
  24 abstract class CRM_Core_Payment {
  25
  26   /**
  27    * Component - ie. event or contribute.
  28    *
  29    * This is used for setting return urls.
  30    *
  31    * @var string
  32    */
  33   protected $_component;
  34
  35   /**
  36    * How are we getting billing information.
  37    *
  38    * We are trying to completely deprecate these parameters.
  39    *
  40    * FORM   - we collect it on the same page
  41    * BUTTON - the processor collects it and sends it back to us via some protocol
  42    */
  43   const
  44     BILLING_MODE_FORM = 1,
  45     BILLING_MODE_BUTTON = 2,
  46     BILLING_MODE_NOTIFY = 4;
  47
  48   /**
  49    * Which payment type(s) are we using?
  50    *
  51    * credit card
  52    * direct debit
  53    * or both
  54    * @todo create option group - nb omnipay uses a 3rd type - transparent redirect cc
  55    */
  56   const
  57     PAYMENT_TYPE_CREDIT_CARD = 1,
  58     PAYMENT_TYPE_DIRECT_DEBIT = 2;
  59
  60   /**
  61    * Subscription / Recurring payment Status
  62    * START, END
  63    */
  64   const
  65     RECURRING_PAYMENT_START = 'START',
  66     RECURRING_PAYMENT_END = 'END';
  67
  68   /**
  69    * @var array
  70    */
  71   protected $_paymentProcessor;
  72
  73   /**
  74    * Base url of the calling form (offsite processors).
  75    *
  76    * @var string
  77    */
  78   protected $baseReturnUrl;
  79
  80   /**
  81    * Return url upon success (offsite processors).
  82    *
  83    * @var string
  84    */
  85   protected $successUrl;
  86
  87   /**
  88    * Return url upon failure (offsite processors).
  89    *
  90    * @var string
  91    */
  92   protected $cancelUrl;
  93
  94   /**
  95    * Processor type label.
  96    *
  97    * (Deprecated unused parameter).
  98    *
  99    * @var string
 100    * @deprecated
 101    *
 102    */
 103   public $_processorName;
 104
 105   /**
 106    * The profile configured to show on the billing form.
 107    *
 108    * Currently only the pseudo-profile 'billing' is supported but hopefully in time we will take an id and
 109    * load that from the DB and the processor will be able to return a set of fields that combines it's minimum
 110    * requirements with the configured requirements.
 111    *
 112    * Currently only the pseudo-processor 'manual' or 'pay-later' uses this setting to return a 'curated' set
 113    * of fields.
 114    *
 115    * Note this change would probably include converting 'billing' to a reserved profile.
 116    *
 117    * @var int|string
 118    */
 119   protected $billingProfile;
 120
 121   /**
 122    * Payment instrument ID.
 123    *
 124    * This is normally retrieved from the payment_processor table.
 125    *
 126    * @var int
 127    */
 128   protected $paymentInstrumentID;
 129
 130   /**
 131    * Is this a back office transaction.
 132    *
 133    * @var bool
 134    */
 135   protected $backOffice = FALSE;
 136
 137   /**
 138    * This is only needed during the transitional phase. In future you should
 139    * pass your own PropertyBag into the method you're calling.
 140    *
 141    * New code should NOT use $this->propertyBag.
 142    *
 143    * @var Civi\Payment\PropertyBag
 144    */
 145   protected $propertyBag;
 146
 147   /**
 148    * Return the payment instrument ID to use.
 149    *
 150    * Note:
 151    * We normally SHOULD be returning the payment instrument of the payment processor.
 152    * However there is an outstanding case where this needs overriding, which is
 153    * when using CRM_Core_Payment_Manual which uses the pseudoprocessor (id = 0).
 154    *
 155    * i.e. If you're writing a Payment Processor you should NOT be using
 156    * setPaymentInstrumentID() at all.
 157    *
 158    * @todo
 159    * Ideally this exception-to-the-rule should be handled outside of this class
 160    * i.e. this class's getPaymentInstrumentID method should return it from the
 161    * payment processor and CRM_Core_Payment_Manual could override it to provide 0.
 162    *
 163    * @return int
 164    */
 165   public function getPaymentInstrumentID() {
 166     return isset($this->paymentInstrumentID)
 167       ? $this->paymentInstrumentID
 168       : (int) ($this->_paymentProcessor['payment_instrument_id'] ?? 0);
 169   }
 170
 171   /**
 172    * Getter for the id Payment Processor ID.
 173    *
 174    * @return int
 175    */
 176   public function getID() {
 177     return (int) $this->_paymentProcessor['id'];
 178   }
 179
 180   /**
 181    * @deprecated Set payment Instrument id - see note on getPaymentInstrumentID.
 182    *
 183    * By default we actually ignore the form value. The manual processor takes
 184    * it more seriously.
 185    *
 186    * @param int $paymentInstrumentID
 187    */
 188   public function setPaymentInstrumentID($paymentInstrumentID) {
 189     $this->paymentInstrumentID = (int) $paymentInstrumentID;
 190     // See note on getPaymentInstrumentID().
 191     return $this->getPaymentInstrumentID();
 192   }
 193
 194   /**
 195    * @return bool
 196    */
 197   public function isBackOffice() {
 198     return $this->backOffice;
 199   }
 200
 201   /**
 202    * Set back office property.
 203    *
 204    * @param bool $isBackOffice
 205    */
 206   public function setBackOffice($isBackOffice) {
 207     $this->backOffice = $isBackOffice;
 208   }
 209
 210   /**
 211    * Set base return path (offsite processors).
 212    *
 213    * This is only useful with an internal civicrm form.
 214    *
 215    * @param string $url
 216    *   Internal civicrm path.
 217    */
 218   public function setBaseReturnUrl($url) {
 219     $this->baseReturnUrl = $url;
 220   }
 221
 222   /**
 223    * Set success return URL (offsite processors).
 224    *
 225    * This overrides $baseReturnUrl
 226    *
 227    * @param string $url
 228    *   Full url of site to return browser to upon success.
 229    */
 230   public function setSuccessUrl($url) {
 231     $this->successUrl = $url;
 232   }
 233
 234   /**
 235    * Set cancel return URL (offsite processors).
 236    *
 237    * This overrides $baseReturnUrl
 238    *
 239    * @param string $url
 240    *   Full url of site to return browser to upon failure.
 241    */
 242   public function setCancelUrl($url) {
 243     $this->cancelUrl = $url;
 244   }
 245
 246   /**
 247    * Set the configured payment profile.
 248    *
 249    * @param int|string $value
 250    */
 251   public function setBillingProfile($value) {
 252     $this->billingProfile = $value;
 253   }
 254
 255   /**
 256    * Opportunity for the payment processor to override the entire form build.
 257    *
 258    * @param CRM_Core_Form $form
 259    *
 260    * @return bool
 261    *   Should form building stop at this point?
 262    */
 263   public function buildForm(&$form) {
 264     return FALSE;
 265   }
 266
 267   /**
 268    * Log payment notification message to forensic system log.
 269    *
 270    * @todo move to factory class \Civi\Payment\System (or similar)
 271    *
 272    * @param array $params
 273    */
 274   public static function logPaymentNotification($params) {
 275     $message = 'payment_notification ';
 276     if (!empty($params['processor_name'])) {
 277       $message .= 'processor_name=' . $params['processor_name'];
 278     }
 279     if (!empty($params['processor_id'])) {
 280       $message .= 'processor_id=' . $params['processor_id'];
 281     }
 282
 283     $log = new CRM_Utils_SystemLogger();
 284     // $_REQUEST doesn't handle JSON, to support providers that POST JSON we need the raw POST data.
 285     $rawRequestData = file_get_contents("php://input");
 286     if (CRM_Utils_JSON::isValidJSON($rawRequestData)) {
 287       $log->alert($message, json_decode($rawRequestData, TRUE));
 288     }
 289     else {
 290       $log->alert($message, $_REQUEST);
 291     }
 292   }
 293
 294   /**
 295    * Check if capability is supported.
 296    *
 297    * Capabilities have a one to one relationship with capability-related functions on this class.
 298    *
 299    * Payment processor classes should over-ride the capability-specific function rather than this one.
 300    *
 301    * @param string $capability
 302    *   E.g BackOffice, LiveMode, FutureRecurStartDate.
 303    *
 304    * @return bool
 305    */
 306   public function supports($capability) {
 307     $function = 'supports' . ucfirst($capability);
 308     if (method_exists($this, $function)) {
 309       return $this->$function();
 310     }
 311     return FALSE;
 312   }
 313
 314   /**
 315    * Are back office payments supported.
 316    *
 317    * e.g paypal standard won't permit you to enter a credit card associated
 318    * with someone else's login.
 319    * The intention is to support off-site (other than paypal) & direct debit but that is not all working yet so to
 320    * reach a 'stable' point we disable.
 321    *
 322    * @return bool
 323    */
 324   protected function supportsBackOffice() {
 325     if ($this->_paymentProcessor['billing_mode'] == 4 || $this->_paymentProcessor['payment_type'] != 1) {
 326       return FALSE;
 327     }
 328     else {
 329       return TRUE;
 330     }
 331   }
 332
 333   /**
 334    * Can more than one transaction be processed at once?
 335    *
 336    * In general processors that process payment by server to server communication support this while others do not.
 337    *
 338    * In future we are likely to hit an issue where this depends on whether a token already exists.
 339    *
 340    * @return bool
 341    */
 342   protected function supportsMultipleConcurrentPayments() {
 343     if ($this->_paymentProcessor['billing_mode'] == 4 || $this->_paymentProcessor['payment_type'] != 1) {
 344       return FALSE;
 345     }
 346     else {
 347       return TRUE;
 348     }
 349   }
 350
 351   /**
 352    * Are live payments supported - e.g dummy doesn't support this.
 353    *
 354    * @return bool
 355    */
 356   protected function supportsLiveMode() {
 357     return empty($this->_paymentProcessor['is_test']);
 358   }
 359
 360   /**
 361    * Are test payments supported.
 362    *
 363    * @return bool
 364    */
 365   protected function supportsTestMode() {
 366     return !empty($this->_paymentProcessor['is_test']);
 367   }
 368
 369   /**
 370    * Does this payment processor support refund?
 371    *
 372    * @return bool
 373    */
 374   public function supportsRefund() {
 375     return FALSE;
 376   }
 377
 378   /**
 379    * Should the first payment date be configurable when setting up back office recurring payments.
 380    *
 381    * We set this to false for historical consistency but in fact most new processors use tokens for recurring and can support this
 382    *
 383    * @return bool
 384    */
 385   protected function supportsFutureRecurStartDate() {
 386     return FALSE;
 387   }
 388
 389   /**
 390    * Does this processor support cancelling recurring contributions through code.
 391    *
 392    * If the processor returns true it must be possible to take action from within CiviCRM
 393    * that will result in no further payments being processed. In the case of token processors (e.g
 394    * IATS, eWay) updating the contribution_recur table is probably sufficient.
 395    *
 396    * @return bool
 397    */
 398   protected function supportsCancelRecurring() {
 399     return method_exists(CRM_Utils_System::getClassName($this), 'cancelSubscription');
 400   }
 401
 402   /**
 403    * Does the processor support the user having a choice as to whether to cancel the recurring with the processor?
 404    *
 405    * If this returns TRUE then there will be an option to send a cancellation request in the cancellation form.
 406    *
 407    * This would normally be false for processors where CiviCRM maintains the schedule.
 408    *
 409    * @return bool
 410    */
 411   protected function supportsCancelRecurringNotifyOptional() {
 412     return $this->supportsCancelRecurring();
 413   }
 414
 415   /**
 416    * Does this processor support pre-approval.
 417    *
 418    * This would generally look like a redirect to enter credentials which can then be used in a later payment call.
 419    *
 420    * Currently Paypal express supports this, with a redirect to paypal after the 'Main' form is submitted in the
 421    * contribution page. This token can then be processed at the confirm phase. Although this flow 'looks' like the
 422    * 'notify' flow a key difference is that in the notify flow they don't have to return but in this flow they do.
 423    *
 424    * @return bool
 425    */
 426   protected function supportsPreApproval() {
 427     return FALSE;
 428   }
 429
 430   /**
 431    * Does this processor support updating billing info for recurring contributions through code.
 432    *
 433    * If the processor returns true then it must be possible to update billing info from within CiviCRM
 434    * that will be updated at the payment processor.
 435    *
 436    * @return bool
 437    */
 438   protected function supportsUpdateSubscriptionBillingInfo() {
 439     return method_exists(CRM_Utils_System::getClassName($this), 'updateSubscriptionBillingInfo');
 440   }
 441
 442   /**
 443    * Can recurring contributions be set against pledges.
 444    *
 445    * In practice all processors that use the baseIPN function to finish transactions or
 446    * call the completetransaction api support this by looking up previous contributions in the
 447    * series and, if there is a prior contribution against a pledge, and the pledge is not complete,
 448    * adding the new payment to the pledge.
 449    *
 450    * However, only enabling for processors it has been tested against.
 451    *
 452    * @return bool
 453    */
 454   protected function supportsRecurContributionsForPledges() {
 455     return FALSE;
 456   }
 457
 458   /**
 459    * Does the processor work without an email address?
 460    *
 461    * The historic assumption is that all processors require an email address. This capability
 462    * allows a processor to state it does not need to be provided with an email address.
 463    * NB: when this was added (Feb 2020), the Manual processor class overrides this but
 464    * the only use of the capability is in the webform_civicrm module.  It is not currently
 465    * used in core but may be in future.
 466    *
 467    * @return bool
 468    */
 469   protected function supportsNoEmailProvided() {
 470     return FALSE;
 471   }
 472
 473   /**
 474    * Function to action pre-approval if supported
 475    *
 476    * @param array $params
 477    *   Parameters from the form
 478    *
 479    * This function returns an array which should contain
 480    *   - pre_approval_parameters (this will be stored on the calling form & available later)
 481    *   - redirect_url (if set the browser will be redirected to this.
 482    */
 483   public function doPreApproval(&$params) {
 484   }
 485
 486   /**
 487    * Get any details that may be available to the payment processor due to an approval process having happened.
 488    *
 489    * In some cases the browser is redirected to enter details on a processor site. Some details may be available as a
 490    * result.
 491    *
 492    * @param array $storedDetails
 493    *
 494    * @return array
 495    */
 496   public function getPreApprovalDetails($storedDetails) {
 497     return [];
 498   }
 499
 500   /**
 501    * Default payment instrument validation.
 502    *
 503    * Implement the usual Luhn algorithm via a static function in the CRM_Core_Payment_Form if it's a credit card
 504    * Not a static function, because I need to check for payment_type.
 505    *
 506    * @param array $values
 507    * @param array $errors
 508    */
 509   public function validatePaymentInstrument($values, &$errors) {
 510     CRM_Core_Form::validateMandatoryFields($this->getMandatoryFields(), $values, $errors);
 511     if ($this->_paymentProcessor['payment_type'] == 1) {
 512       CRM_Core_Payment_Form::validateCreditCard($values, $errors, $this->_paymentProcessor['id']);
 513     }
 514   }
 515
 516   /**
 517    * Getter for the payment processor.
 518    *
 519    * The payment processor array is based on the civicrm_payment_processor table entry.
 520    *
 521    * @return array
 522    *   Payment processor array.
 523    */
 524   public function getPaymentProcessor() {
 525     return $this->_paymentProcessor;
 526   }
 527
 528   /**
 529    * Setter for the payment processor.
 530    *
 531    * @param array $processor
 532    */
 533   public function setPaymentProcessor($processor) {
 534     $this->_paymentProcessor = $processor;
 535   }
 536
 537   /**
 538    * Setter for the payment form that wants to use the processor.
 539    *
 540    * @deprecated
 541    *
 542    * @param CRM_Core_Form $paymentForm
 543    */
 544   public function setForm(&$paymentForm) {
 545     $this->_paymentForm = $paymentForm;
 546   }
 547
 548   /**
 549    * Getter for payment form that is using the processor.
 550    * @deprecated
 551    * @return CRM_Core_Form
 552    *   A form object
 553    */
 554   public function getForm() {
 555     return $this->_paymentForm;
 556   }
 557
 558   /**
 559    * Get help text information (help, description, etc.) about this payment,
 560    * to display to the user.
 561    *
 562    * @param string $context
 563    *   Context of the text.
 564    *   Only explicitly supported contexts are handled without error.
 565    *   Currently supported:
 566    *   - contributionPageRecurringHelp (params: is_recur_installments, is_email_receipt)
 567    *   - contributionPageContinueText (params: amount, is_payment_to_existing)
 568    *   - cancelRecurDetailText:
 569    *     params:
 570    *       mode, amount, currency, frequency_interval, frequency_unit,
 571    *       installments, {membershipType|only if mode=auto_renew},
 572    *       selfService (bool) - TRUE if user doesn't have "edit contributions" permission.
 573    *         ie. they are accessing via a "self-service" link from an email receipt or similar.
 574    *   - cancelRecurNotSupportedText
 575    *
 576    * @param array $params
 577    *   Parameters for the field, context specific.
 578    *
 579    * @return string
 580    */
 581   public function getText($context, $params) {
 582     // I have deliberately added a noisy fail here.
 583     // The function is intended to be extendable, but not by changes
 584     // not documented clearly above.
 585     switch ($context) {
 586       case 'contributionPageRecurringHelp':
 587         if ($params['is_recur_installments']) {
 588           return ts('You can specify the number of installments, or you can leave the number of installments blank if you want to make an open-ended commitment. In either case, you can choose to cancel at any time.');
 589         }
 590         return '';
 591
 592       case 'contributionPageContinueText':
 593         return ts('Click the <strong>Continue</strong> button to proceed with the payment.');
 594
 595       case 'cancelRecurDetailText':
 596         if ($params['mode'] === 'auto_renew') {
 597           return ts('Click the button below if you want to cancel the auto-renewal option for your %1 membership. This will not cancel your membership. However you will need to arrange payment for renewal when your membership expires.',
 598             [1 => $params['membershipType']]
 599           );
 600         }
 601         else {
 602           $text = ts('Recurring Contribution Details: %1 every %2 %3', [
 603             1 => CRM_Utils_Money::format($params['amount'], $params['currency']),
 604             2 => $params['frequency_interval'],
 605             3 => $params['frequency_unit'],
 606           ]);
 607           if (!empty($params['installments'])) {
 608             $text .= ' ' . ts('for %1 installments', [1 => $params['installments']]) . '.';
 609           }
 610           $text = "<strong>{$text}</strong><div class='content'>";
 611           $text .= ts('Click the button below to cancel this commitment and stop future transactions. This does not affect contributions which have already been completed.');
 612           $text .= '</div>';
 613           return $text;
 614         }
 615
 616       case 'cancelRecurNotSupportedText':
 617         if (!$this->supportsCancelRecurring()) {
 618           return ts('Automatic cancellation is not supported for this payment processor. You or the contributor will need to manually cancel this recurring contribution using the payment processor website.');
 619         }
 620         return '';
 621
 622     }
 623     CRM_Core_Error::deprecatedFunctionWarning('Calls to getText must use a supported method');
 624     return '';
 625   }
 626
 627   /**
 628    * Get the title of the payment processor to display to the user
 629    *
 630    * @return string
 631    */
 632   public function getTitle() {
 633     return $this->getPaymentProcessor()['title'] ?? $this->getPaymentProcessor()['name'];
 634   }
 635
 636   /**
 637    * Getter for accessing member vars.
 638    *
 639    * @todo believe this is unused
 640    *
 641    * @param string $name
 642    *
 643    * @return null
 644    */
 645   public function getVar($name) {
 646     return $this->$name ?? NULL;
 647   }
 648
 649   /**
 650    * Get name for the payment information type.
 651    * @todo - use option group + name field (like Omnipay does)
 652    * @return string
 653    */
 654   public function getPaymentTypeName() {
 655     return $this->_paymentProcessor['payment_type'] == 1 ? 'credit_card' : 'direct_debit';
 656   }
 657
 658   /**
 659    * Get label for the payment information type.
 660    * @todo - use option group + labels (like Omnipay does)
 661    * @return string
 662    */
 663   public function getPaymentTypeLabel() {
 664     return $this->_paymentProcessor['payment_type'] == 1 ? ts('Credit Card') : ts('Direct Debit');
 665   }
 666
 667   /**
 668    * Get array of fields that should be displayed on the payment form.
 669    *
 670    * Common results are
 671    *   array('credit_card_type', 'credit_card_number', 'cvv2', 'credit_card_exp_date')
 672    *   or
 673    *   array('account_holder', 'bank_account_number', 'bank_identification_number', 'bank_name')
 674    *   or
 675    *   array()
 676    *
 677    * @return array
 678    *   Array of payment fields appropriate to the payment processor.
 679    *
 680    * @throws CiviCRM_API3_Exception
 681    */
 682   public function getPaymentFormFields() {
 683     if ($this->_paymentProcessor['billing_mode'] == 4) {
 684       return [];
 685     }
 686     return $this->_paymentProcessor['payment_type'] == 1 ? $this->getCreditCardFormFields() : $this->getDirectDebitFormFields();
 687   }
 688
 689   /**
 690    * Get an array of the fields that can be edited on the recurring contribution.
 691    *
 692    * Some payment processors support editing the amount and other scheduling details of recurring payments, especially
 693    * those which use tokens. Others are fixed. This function allows the processor to return an array of the fields that
 694    * can be updated from the contribution recur edit screen.
 695    *
 696    * The fields are likely to be a subset of these
 697    *  - 'amount',
 698    *  - 'installments',
 699    *  - 'frequency_interval',
 700    *  - 'frequency_unit',
 701    *  - 'cycle_day',
 702    *  - 'next_sched_contribution_date',
 703    *  - 'end_date',
 704    * - 'failure_retry_day',
 705    *
 706    * The form does not restrict which fields from the contribution_recur table can be added (although if the html_type
 707    * metadata is not defined in the xml for the field it will cause an error.
 708    *
 709    * Open question - would it make sense to return membership_id in this - which is sometimes editable and is on that
 710    * form (UpdateSubscription).
 711    *
 712    * @return array
 713    */
 714   public function getEditableRecurringScheduleFields() {
 715     if ($this->supports('changeSubscriptionAmount')) {
 716       return ['amount'];
 717     }
 718     return [];
 719   }
 720
 721   /**
 722    * Get the help text to present on the recurring update page.
 723    *
 724    * This should reflect what can or cannot be edited.
 725    *
 726    * @return string
 727    */
 728   public function getRecurringScheduleUpdateHelpText() {
 729     if (!in_array('amount', $this->getEditableRecurringScheduleFields())) {
 730       return ts('Updates made using this form will change the recurring contribution information stored in your CiviCRM database, but will NOT be sent to the payment processor. You must enter the same changes using the payment processor web site.');
 731     }
 732     return ts('Use this form to change the amount or number of installments for this recurring contribution. Changes will be automatically sent to the payment processor. You can not change the contribution frequency.');
 733   }
 734
 735   /**
 736    * Get the metadata for all required fields.
 737    *
 738    * @return array;
 739    */
 740   protected function getMandatoryFields() {
 741     $mandatoryFields = [];
 742     foreach ($this->getAllFields() as $field_name => $field_spec) {
 743       if (!empty($field_spec['is_required'])) {
 744         $mandatoryFields[$field_name] = $field_spec;
 745       }
 746     }
 747     return $mandatoryFields;
 748   }
 749
 750   /**
 751    * Get the metadata of all the fields configured for this processor.
 752    *
 753    * @return array
 754    *
 755    * @throws \CiviCRM_API3_Exception
 756    */
 757   protected function getAllFields() {
 758     $paymentFields = array_intersect_key($this->getPaymentFormFieldsMetadata(), array_flip($this->getPaymentFormFields()));
 759     $billingFields = array_intersect_key($this->getBillingAddressFieldsMetadata(), array_flip($this->getBillingAddressFields()));
 760     return array_merge($paymentFields, $billingFields);
 761   }
 762
 763   /**
 764    * Get array of fields that should be displayed on the payment form for credit cards.
 765    *
 766    * @return array
 767    */
 768   protected function getCreditCardFormFields() {
 769     return [
 770       'credit_card_type',
 771       'credit_card_number',
 772       'cvv2',
 773       'credit_card_exp_date',
 774     ];
 775   }
 776
 777   /**
 778    * Get array of fields that should be displayed on the payment form for direct debits.
 779    *
 780    * @return array
 781    */
 782   protected function getDirectDebitFormFields() {
 783     return [
 784       'account_holder',
 785       'bank_account_number',
 786       'bank_identification_number',
 787       'bank_name',
 788     ];
 789   }
 790
 791   /**
 792    * Return an array of all the details about the fields potentially required for payment fields.
 793    *
 794    * Only those determined by getPaymentFormFields will actually be assigned to the form
 795    *
 796    * @return array
 797    *   field metadata
 798    */
 799   public function getPaymentFormFieldsMetadata() {
 800     //@todo convert credit card type into an option value
 801     $creditCardType = ['' => ts('- select -')] + CRM_Contribute_PseudoConstant::creditCard();
 802     $isCVVRequired = Civi::settings()->get('cvv_backoffice_required');
 803     if (!$this->isBackOffice()) {
 804       $isCVVRequired = TRUE;
 805     }
 806     return [
 807       'credit_card_number' => [
 808         'htmlType' => 'text',
 809         'name' => 'credit_card_number',
 810         'title' => ts('Card Number'),
 811         'attributes' => [
 812           'size' => 20,
 813           'maxlength' => 20,
 814           'autocomplete' => 'off',
 815           'class' => 'creditcard required',
 816         ],
 817         'is_required' => TRUE,
 818         // 'description' => '16 digit card number', // If you enable a description field it will be shown below the field on the form
 819       ],
 820       'cvv2' => [
 821         'htmlType' => 'text',
 822         'name' => 'cvv2',
 823         'title' => ts('Security Code'),
 824         'attributes' => [
 825           'size' => 5,
 826           'maxlength' => 10,
 827           'autocomplete' => 'off',
 828           'class' => ($isCVVRequired ? 'required' : ''),
 829         ],
 830         'is_required' => $isCVVRequired,
 831         'rules' => [
 832           [
 833             'rule_message' => ts('Please enter a valid value for your card security code. This is usually the last 3-4 digits on the card\'s signature panel.'),
 834             'rule_name' => 'integer',
 835             'rule_parameters' => NULL,
 836           ],
 837         ],
 838       ],
 839       'credit_card_exp_date' => [
 840         'htmlType' => 'date',
 841         'name' => 'credit_card_exp_date',
 842         'title' => ts('Expiration Date'),
 843         'attributes' => CRM_Core_SelectValues::date('creditCard'),
 844         'is_required' => TRUE,
 845         'rules' => [
 846           [
 847             'rule_message' => ts('Card expiration date cannot be a past date.'),
 848             'rule_name' => 'currentDate',
 849             'rule_parameters' => TRUE,
 850           ],
 851         ],
 852         'extra' => ['class' => 'crm-form-select required'],
 853       ],
 854       'credit_card_type' => [
 855         'htmlType' => 'select',
 856         'name' => 'credit_card_type',
 857         'title' => ts('Card Type'),
 858         'attributes' => $creditCardType,
 859         'is_required' => FALSE,
 860       ],
 861       'account_holder' => [
 862         'htmlType' => 'text',
 863         'name' => 'account_holder',
 864         'title' => ts('Account Holder'),
 865         'attributes' => [
 866           'size' => 20,
 867           'maxlength' => 34,
 868           'autocomplete' => 'on',
 869           'class' => 'required',
 870         ],
 871         'is_required' => TRUE,
 872       ],
 873       //e.g. IBAN can have maxlength of 34 digits
 874       'bank_account_number' => [
 875         'htmlType' => 'text',
 876         'name' => 'bank_account_number',
 877         'title' => ts('Bank Account Number'),
 878         'attributes' => [
 879           'size' => 20,
 880           'maxlength' => 34,
 881           'autocomplete' => 'off',
 882           'class' => 'required',
 883         ],
 884         'rules' => [
 885           [
 886             'rule_message' => ts('Please enter a valid Bank Identification Number (value must not contain punctuation characters).'),
 887             'rule_name' => 'nopunctuation',
 888             'rule_parameters' => NULL,
 889           ],
 890         ],
 891         'is_required' => TRUE,
 892       ],
 893       //e.g. SWIFT-BIC can have maxlength of 11 digits
 894       'bank_identification_number' => [
 895         'htmlType' => 'text',
 896         'name' => 'bank_identification_number',
 897         'title' => ts('Bank Identification Number'),
 898         'attributes' => [
 899           'size' => 20,
 900           'maxlength' => 11,
 901           'autocomplete' => 'off',
 902           'class' => 'required',
 903         ],
 904         'is_required' => TRUE,
 905         'rules' => [
 906           [
 907             'rule_message' => ts('Please enter a valid Bank Identification Number (value must not contain punctuation characters).'),
 908             'rule_name' => 'nopunctuation',
 909             'rule_parameters' => NULL,
 910           ],
 911         ],
 912       ],
 913       'bank_name' => [
 914         'htmlType' => 'text',
 915         'name' => 'bank_name',
 916         'title' => ts('Bank Name'),
 917         'attributes' => [
 918           'size' => 20,
 919           'maxlength' => 64,
 920           'autocomplete' => 'off',
 921           'class' => 'required',
 922         ],
 923         'is_required' => TRUE,
 924
 925       ],
 926       'check_number' => [
 927         'htmlType' => 'text',
 928         'name' => 'check_number',
 929         'title' => ts('Check Number'),
 930         'is_required' => FALSE,
 931         'attributes' => NULL,
 932       ],
 933       'pan_truncation' => [
 934         'htmlType' => 'text',
 935         'name' => 'pan_truncation',
 936         'title' => ts('Last 4 digits of the card'),
 937         'is_required' => FALSE,
 938         'attributes' => [
 939           'size' => 4,
 940           'maxlength' => 4,
 941           'minlength' => 4,
 942           'autocomplete' => 'off',
 943         ],
 944         'rules' => [
 945           [
 946             'rule_message' => ts('Please enter valid last 4 digit card number.'),
 947             'rule_name' => 'numeric',
 948             'rule_parameters' => NULL,
 949           ],
 950         ],
 951       ],
 952       'payment_token' => [
 953         'htmlType' => 'hidden',
 954         'name' => 'payment_token',
 955         'title' => ts('Authorization token'),
 956         'is_required' => FALSE,
 957         'attributes' => [
 958           'size' => 10,
 959           'autocomplete' => 'off',
 960           'id' => 'payment_token',
 961         ],
 962       ],
 963     ];
 964   }
 965
 966   /**
 967    * Get billing fields required for this processor.
 968    *
 969    * We apply the existing default of returning fields only for payment processor type 1. Processors can override to
 970    * alter.
 971    *
 972    * @param int $billingLocationID
 973    *
 974    * @return array
 975    */
 976   public function getBillingAddressFields($billingLocationID = NULL) {
 977     if (!$billingLocationID) {
 978       // Note that although the billing id is passed around the forms the idea that it would be anything other than
 979       // the result of the function below doesn't seem to have eventuated.
 980       // So taking this as a param is possibly something to be removed in favour of the standard default.
 981       $billingLocationID = CRM_Core_BAO_LocationType::getBilling();
 982     }
 983     if ($this->_paymentProcessor['billing_mode'] != 1 && $this->_paymentProcessor['billing_mode'] != 3) {
 984       return [];
 985     }
 986     return [
 987       'first_name' => 'billing_first_name',
 988       'middle_name' => 'billing_middle_name',
 989       'last_name' => 'billing_last_name',
 990       'street_address' => "billing_street_address-{$billingLocationID}",
 991       'city' => "billing_city-{$billingLocationID}",
 992       'country' => "billing_country_id-{$billingLocationID}",
 993       'state_province' => "billing_state_province_id-{$billingLocationID}",
 994       'postal_code' => "billing_postal_code-{$billingLocationID}",
 995     ];
 996   }
 997
 998   /**
 999    * Get form metadata for billing address fields.
1000    *
1001    * @param int $billingLocationID
1002    *
1003    * @return array
1004    *   Array of metadata for address fields.
1005    */
1006   public function getBillingAddressFieldsMetadata($billingLocationID = NULL) {
1007     if (!$billingLocationID) {
1008       // Note that although the billing id is passed around the forms the idea that it would be anything other than
1009       // the result of the function below doesn't seem to have eventuated.
1010       // So taking this as a param is possibly something to be removed in favour of the standard default.
1011       $billingLocationID = CRM_Core_BAO_LocationType::getBilling();
1012     }
1013     $metadata = [];
1014     $metadata['billing_first_name'] = [
1015       'htmlType' => 'text',
1016       'name' => 'billing_first_name',
1017       'title' => ts('Billing First Name'),
1018       'cc_field' => TRUE,
1019       'attributes' => [
1020         'size' => 30,
1021         'maxlength' => 60,
1022         'autocomplete' => 'off',
1023         'class' => 'required',
1024       ],
1025       'is_required' => TRUE,
1026     ];
1027
1028     $metadata['billing_middle_name'] = [
1029       'htmlType' => 'text',
1030       'name' => 'billing_middle_name',
1031       'title' => ts('Billing Middle Name'),
1032       'cc_field' => TRUE,
1033       'attributes' => [
1034         'size' => 30,
1035         'maxlength' => 60,
1036         'autocomplete' => 'off',
1037       ],
1038       'is_required' => FALSE,
1039     ];
1040
1041     $metadata['billing_last_name'] = [
1042       'htmlType' => 'text',
1043       'name' => 'billing_last_name',
1044       'title' => ts('Billing Last Name'),
1045       'cc_field' => TRUE,
1046       'attributes' => [
1047         'size' => 30,
1048         'maxlength' => 60,
1049         'autocomplete' => 'off',
1050         'class' => 'required',
1051       ],
1052       'is_required' => TRUE,
1053     ];
1054
1055     $metadata["billing_street_address-{$billingLocationID}"] = [
1056       'htmlType' => 'text',
1057       'name' => "billing_street_address-{$billingLocationID}",
1058       'title' => ts('Street Address'),
1059       'cc_field' => TRUE,
1060       'attributes' => [
1061         'size' => 30,
1062         'maxlength' => 60,
1063         'autocomplete' => 'off',
1064         'class' => 'required',
1065       ],
1066       'is_required' => TRUE,
1067     ];
1068
1069     $metadata["billing_city-{$billingLocationID}"] = [
1070       'htmlType' => 'text',
1071       'name' => "billing_city-{$billingLocationID}",
1072       'title' => ts('City'),
1073       'cc_field' => TRUE,
1074       'attributes' => [
1075         'size' => 30,
1076         'maxlength' => 60,
1077         'autocomplete' => 'off',
1078         'class' => 'required',
1079       ],
1080       'is_required' => TRUE,
1081     ];
1082
1083     $metadata["billing_state_province_id-{$billingLocationID}"] = [
1084       'htmlType' => 'chainSelect',
1085       'title' => ts('State/Province'),
1086       'name' => "billing_state_province_id-{$billingLocationID}",
1087       'cc_field' => TRUE,
1088       'is_required' => TRUE,
1089       'extra' => ['class' => 'required'],
1090     ];
1091
1092     $metadata["billing_postal_code-{$billingLocationID}"] = [
1093       'htmlType' => 'text',
1094       'name' => "billing_postal_code-{$billingLocationID}",
1095       'title' => ts('Postal Code'),
1096       'cc_field' => TRUE,
1097       'attributes' => [
1098         'size' => 30,
1099         'maxlength' => 60,
1100         'autocomplete' => 'off',
1101         'class' => 'required',
1102       ],
1103       'is_required' => TRUE,
1104     ];
1105
1106     $metadata["billing_country_id-{$billingLocationID}"] = [
1107       'htmlType' => 'select',
1108       'name' => "billing_country_id-{$billingLocationID}",
1109       'title' => ts('Country'),
1110       'cc_field' => TRUE,
1111       'attributes' => [
1112         '' => ts('- select -'),
1113       ] + CRM_Core_PseudoConstant::country(),
1114       'is_required' => TRUE,
1115       'extra' => ['class' => 'required crm-form-select2 crm-select2'],
1116     ];
1117     return $metadata;
1118   }
1119
1120   /**
1121    * Get base url dependent on component.
1122    *
1123    * (or preferably set it using the setter function).
1124    *
1125    * @return string
1126    */
1127   protected function getBaseReturnUrl() {
1128     if ($this->baseReturnUrl) {
1129       return $this->baseReturnUrl;
1130     }
1131     if ($this->_component == 'event') {
1132       $baseURL = 'civicrm/event/register';
1133     }
1134     else {
1135       $baseURL = 'civicrm/contribute/transact';
1136     }
1137     return $baseURL;
1138   }
1139
1140   /**
1141    * Get the currency for the transaction from the params.
1142    *
1143    * Legacy wrapper. Better for a method to work on its own PropertyBag.
1144    *
1145    * This code now uses PropertyBag to allow for old inputs like currencyID.
1146    *
1147    * @param $params
1148    *
1149    * @return string
1150    */
1151   protected function getCurrency($params = []) {
1152     $localPropertyBag = new PropertyBag();
1153     $localPropertyBag->mergeLegacyInputParams($params);
1154     return $localPropertyBag->getCurrency();
1155   }
1156
1157   /**
1158    * Get the submitted amount, padded to 2 decimal places, if needed.
1159    *
1160    * @param array $params
1161    *
1162    * @return string
1163    */
1164   protected function getAmount($params = []) {
1165     if (!CRM_Utils_Rule::numeric($params['amount'])) {
1166       CRM_Core_Error::deprecatedWarning('Passing Amount value that is not numeric is deprecated please report this in gitlab');
1167       return CRM_Utils_Money::formatUSLocaleNumericRounded(filter_var($params['amount'], FILTER_SANITIZE_NUMBER_FLOAT, FILTER_FLAG_ALLOW_FRACTION), 2);
1168     }
1169     // Amount is already formatted to a machine-friendly format but may NOT have
1170     // decimal places - eg. it could be 1000.1 so this would return 1000.10.
1171     return Civi::format()->machineMoney($params['amount']);
1172   }
1173
1174   /**
1175    * Get url to return to after cancelled or failed transaction.
1176    *
1177    * @param string $qfKey
1178    * @param int $participantID
1179    *
1180    * @return string cancel url
1181    */
1182   public function getCancelUrl($qfKey, $participantID) {
1183     if (isset($this->cancelUrl)) {
1184       return $this->cancelUrl;
1185     }
1186
1187     if ($this->_component == 'event') {
1188       return CRM_Utils_System::url($this->getBaseReturnUrl(), [
1189         'reset' => 1,
1190         'cc' => 'fail',
1191         'participantId' => $participantID,
1192       ],
1193         TRUE, NULL, FALSE
1194       );
1195     }
1196
1197     return CRM_Utils_System::url($this->getBaseReturnUrl(), [
1198       '_qf_Main_display' => 1,
1199       'qfKey' => $qfKey,
1200       'cancel' => 1,
1201     ],
1202       TRUE, NULL, FALSE
1203     );
1204   }
1205
1206   /**
1207    * Get URL to return the browser to on success.
1208    *
1209    * @param string $qfKey
1210    *
1211    * @return string
1212    */
1213   protected function getReturnSuccessUrl($qfKey) {
1214     if (isset($this->successUrl)) {
1215       return $this->successUrl;
1216     }
1217
1218     return CRM_Utils_System::url($this->getBaseReturnUrl(), [
1219       '_qf_ThankYou_display' => 1,
1220       'qfKey' => $qfKey,
1221     ],
1222       TRUE, NULL, FALSE
1223     );
1224   }
1225
1226   /**
1227    * Get URL to return the browser to on failure.
1228    *
1229    * @param string $key
1230    * @param int $participantID
1231    * @param int $eventID
1232    *
1233    * @return string
1234    *   URL for a failing transactor to be redirected to.
1235    */
1236   protected function getReturnFailUrl($key, $participantID = NULL, $eventID = NULL) {
1237     if (isset($this->cancelUrl)) {
1238       return $this->cancelUrl;
1239     }
1240
1241     $test = $this->_is_test ? '&action=preview' : '';
1242     if ($this->_component == "event") {
1243       return CRM_Utils_System::url('civicrm/event/register',
1244         "reset=1&cc=fail&participantId={$participantID}&id={$eventID}{$test}&qfKey={$key}",
1245         FALSE, NULL, FALSE
1246       );
1247     }
1248     else {
1249       return CRM_Utils_System::url('civicrm/contribute/transact',
1250         "_qf_Main_display=1&cancel=1&qfKey={$key}{$test}",
1251         FALSE, NULL, FALSE
1252       );
1253     }
1254   }
1255
1256   /**
1257    * Get URl for when the back button is pressed.
1258    *
1259    * @param $qfKey
1260    *
1261    * @return string url
1262    */
1263   protected function getGoBackUrl($qfKey) {
1264     return CRM_Utils_System::url($this->getBaseReturnUrl(), [
1265       '_qf_Confirm_display' => 'true',
1266       'qfKey' => $qfKey,
1267     ],
1268       TRUE, NULL, FALSE
1269     );
1270   }
1271
1272   /**
1273    * Get the notify (aka ipn, web hook or silent post) url.
1274    *
1275    * If there is no '.' in it we assume that we are dealing with localhost or
1276    * similar and it is unreachable from the web & hence invalid.
1277    *
1278    * @return string
1279    *   URL to notify outcome of transaction.
1280    */
1281   protected function getNotifyUrl() {
1282     $url = CRM_Utils_System::getNotifyUrl(
1283       'civicrm/payment/ipn/' . $this->_paymentProcessor['id'],
1284       [],
1285       TRUE,
1286       NULL,
1287       FALSE,
1288       TRUE
1289     );
1290     return (stristr($url, '.')) ? $url : '';
1291   }
1292
1293   /**
1294    * Calling this from outside the payment subsystem is deprecated - use doPayment.
1295    * @deprecated
1296    * Does a server to server payment transaction.
1297    *
1298    * @param array $params
1299    *   Assoc array of input parameters for this transaction.
1300    *
1301    * @return array
1302    *   the result in an nice formatted array (or an error object - but throwing exceptions is preferred)
1303    */
1304   protected function doDirectPayment(&$params) {
1305     CRM_Core_Error::deprecatedFunctionWarning('doPayment');
1306     return $params;
1307   }
1308
1309   /**
1310    * Calling this from outside the payment subsystem is deprecated - use doPayment.
1311    * @deprecated
1312    *
1313    * @param array $params
1314    *   Assoc array of input parameters for this transaction.
1315    * @param string $component
1316    *
1317    * @return array
1318    *   the result in an nice formatted array (or an error object - but throwing exceptions is preferred)
1319    */
1320   protected function doTransferCheckout(&$params, $component = 'contribute') {
1321     CRM_Core_Error::deprecatedFunctionWarning('doPayment');
1322     return $params;
1323   }
1324
1325   /**
1326    * Processors may need to inspect, validate, cast and copy data that is
1327    * specific to this Payment Processor from the input array to custom fields
1328    * on the PropertyBag.
1329    *
1330    * @param Civi\Payment\PropertyBag $propertyBag
1331    * @param array $params
1332    * @param string $component
1333    *
1334    * @throws \Civi\Payment\Exception\PaymentProcessorException
1335    */
1336   public function extractCustomPropertiesForDoPayment(PropertyBag $propertyBag, array $params, $component = 'contribute') {
1337     // example
1338     // (validation and casting goes first)
1339     // $propertyBag->setCustomProperty('myprocessor_customPropertyName', $value);
1340   }
1341
1342   /**
1343    * Process payment - this function wraps around both doTransferCheckout and doDirectPayment.
1344    * Any processor that still implements the deprecated doTransferCheckout() or doDirectPayment() should be updated to use doPayment().
1345    *
1346    * This function adds some historical defaults ie. the assumption that if a 'doDirectPayment' processors comes back it completed
1347    *   the transaction & in fact doTransferCheckout would not traditionally come back.
1348    * Payment processors should throw exceptions and not return Error objects as they may have done with the old functions.
1349    *
1350    * Payment processors should set payment_status_id (which is really contribution_status_id) in the returned array. The default is assumed to be Pending.
1351    *   In some cases the IPN will set the payment to "Completed" some time later.
1352    *
1353    * @fixme Creating a contribution record is inconsistent! We should always create a contribution BEFORE calling doPayment...
1354    *  For the current status see: https://lab.civicrm.org/dev/financial/issues/53
1355    * If we DO have a contribution ID, then the payment processor can (and should) update parameters on the contribution record as necessary.
1356    *
1357    * @param array|PropertyBag $params
1358    *
1359    * @param string $component
1360    *
1361    * @return array
1362    *   Result array (containing at least the key payment_status_id)
1363    *
1364    * @throws \Civi\Payment\Exception\PaymentProcessorException
1365    */
1366   public function doPayment(&$params, $component = 'contribute') {
1367     $propertyBag = \Civi\Payment\PropertyBag::cast($params);
1368     $this->_component = $component;
1369
1370     // If we have a $0 amount, skip call to processor and set payment_status to Completed.
1371     // Conceivably a processor might override this - perhaps for setting up a token - but we don't
1372     // have an example of that at the moment.
1373     if ($propertyBag->getAmount() == 0) {
1374       $result = $this->setStatusPaymentCompleted([]);
1375       return $result;
1376     }
1377
1378     if ($this->_paymentProcessor['billing_mode'] == 4) {
1379       CRM_Core_Error::deprecatedFunctionWarning('doPayment', 'doTransferCheckout');
1380       $result = $this->doTransferCheckout($params, $component);
1381       if (is_array($result) && !isset($result['payment_status_id'])) {
1382         $result = $this->setStatusPaymentPending($result);
1383       }
1384     }
1385     else {
1386       CRM_Core_Error::deprecatedFunctionWarning('doPayment', 'doDirectPayment');
1387       $result = $this->doDirectPayment($params, $component);
1388       if (is_array($result) && !isset($result['payment_status_id'])) {
1389         if (!empty($params['is_recur'])) {
1390           // See comment block.
1391           $result = $this->setStatusPaymentPending($result);
1392         }
1393         else {
1394           $result = $this->setStatusPaymentCompleted($result);
1395         }
1396       }
1397     }
1398     if (is_a($result, 'CRM_Core_Error')) {
1399       CRM_Core_Error::deprecatedFunctionWarning('payment processors should throw exceptions rather than return errors');
1400       throw new PaymentProcessorException(CRM_Core_Error::getMessages($result));
1401     }
1402     return $result;
1403   }
1404
1405   /**
1406    * Set the payment status to Pending
1407    * @param \Civi\Payment\PropertyBag|array $params
1408    *
1409    * @return array
1410    */
1411   protected function setStatusPaymentPending($params) {
1412     $params['payment_status_id'] = CRM_Core_PseudoConstant::getKey('CRM_Contribute_BAO_Contribution', 'contribution_status_id', 'Pending');
1413     $params['payment_status'] = 'Pending';
1414     return $params;
1415   }
1416
1417   /**
1418    * Set the payment status to Completed
1419    * @param \Civi\Payment\PropertyBag|array $params
1420    *
1421    * @return array
1422    */
1423   protected function setStatusPaymentCompleted($params) {
1424     $params['payment_status_id'] = CRM_Core_PseudoConstant::getKey('CRM_Contribute_BAO_Contribution', 'contribution_status_id', 'Completed');
1425     $params['payment_status'] = 'Completed';
1426     return $params;
1427   }
1428
1429   /**
1430    * Cancel a recurring subscription.
1431    *
1432    * Payment processor classes should override this rather than implementing cancelSubscription.
1433    *
1434    * A PaymentProcessorException should be thrown if the update of the contribution_recur
1435    * record should not proceed (in many cases this function does nothing
1436    * as the payment processor does not need to take any action & this should silently
1437    * proceed. Note the form layer will only call this after calling
1438    * $processor->supports('cancelRecurring');
1439    *
1440    * A payment processor can control whether to notify the actual payment provider or just
1441    * cancel in CiviCRM by setting the `isNotifyProcessorOnCancelRecur` property on PropertyBag.
1442    * If supportsCancelRecurringNotifyOptional() is TRUE this will be automatically set based on
1443    * the user selection on the form. If FALSE you need to set it yourself.
1444    *
1445    * @param \Civi\Payment\PropertyBag $propertyBag
1446    *
1447    * @return array
1448    *
1449    * @throws \Civi\Payment\Exception\PaymentProcessorException
1450    */
1451   public function doCancelRecurring(PropertyBag $propertyBag) {
1452     if (method_exists($this, 'cancelSubscription')
1453     && ($propertyBag->has('isNotifyProcessorOnCancelRecur') && $propertyBag->getIsNotifyProcessorOnCancelRecur())) {
1454       $message = NULL;
1455       if ($this->cancelSubscription($message, $propertyBag)) {
1456         return ['message' => $message];
1457       }
1458       throw new PaymentProcessorException($message);
1459     }
1460     return ['message' => ts('Recurring contribution cancelled')];
1461   }
1462
1463   /**
1464    * Refunds payment
1465    *
1466    * Payment processors should set payment_status_id if it set the status to Refunded in case the transaction is successful
1467    *
1468    * @param array $params
1469    *
1470    * @throws \Civi\Payment\Exception\PaymentProcessorException
1471    */
1472   public function doRefund(&$params) {}
1473
1474   /**
1475    * Query payment processor for details about a transaction.
1476    *
1477    * @param array $params
1478    *   Array of parameters containing one of:
1479    *   - trxn_id Id of an individual transaction.
1480    *   - processor_id Id of a recurring contribution series as stored in the civicrm_contribution_recur table.
1481    *
1482    * @return array
1483    *   Extra parameters retrieved.
1484    *   Any parameters retrievable through this should be documented in the function comments at
1485    *   CRM_Core_Payment::doQuery. Currently:
1486    *   - fee_amount Amount of fee paid
1487    */
1488   public function doQuery($params) {
1489     return [];
1490   }
1491
1492   /**
1493    * This function checks to see if we have the right config values.
1494    *
1495    * @return string
1496    *   the error message if any
1497    */
1498   abstract protected function checkConfig();
1499
1500   /**
1501    * Redirect for paypal.
1502    *
1503    * @todo move to paypal class or remove
1504    *
1505    * @param $paymentProcessor
1506    *
1507    * @return bool
1508    */
1509   public static function paypalRedirect(&$paymentProcessor) {
1510     if (!$paymentProcessor) {
1511       return FALSE;
1512     }
1513
1514     if (isset($_GET['payment_date']) &&
1515       isset($_GET['merchant_return_link']) &&
1516       CRM_Utils_Array::value('payment_status', $_GET) == 'Completed' &&
1517       $paymentProcessor['payment_processor_type'] == "PayPal_Standard"
1518     ) {
1519       return TRUE;
1520     }
1521
1522     return FALSE;
1523   }
1524
1525   /**
1526    * Handle incoming payment notification.
1527    *
1528    * IPNs, also called silent posts are notifications of payment outcomes or activity on an external site.
1529    *
1530    * @todo move to0 \Civi\Payment\System factory method
1531    * Page callback for civicrm/payment/ipn
1532    */
1533   public static function handleIPN() {
1534     try {
1535       self::handlePaymentMethod(
1536         'PaymentNotification',
1537         [
1538           'processor_name' => CRM_Utils_Request::retrieveValue('processor_name', 'String'),
1539           'processor_id' => CRM_Utils_Request::retrieveValue('processor_id', 'Integer'),
1540           'mode' => CRM_Utils_Request::retrieveValue('mode', 'Alphanumeric'),
1541         ]
1542       );
1543     }
1544     catch (CRM_Core_Exception $e) {
1545       Civi::log()->error('ipn_payment_callback_exception', [
1546         'context' => [
1547           'backtrace' => $e->getTraceAsString(),
1548           'message' => $e->getMessage(),
1549         ],
1550       ]);
1551     }
1552     CRM_Utils_System::civiExit();
1553   }
1554
1555   /**
1556    * Payment callback handler.
1557    *
1558    * The processor_name or processor_id is passed in.
1559    * Note that processor_id is more reliable as one site may have more than one instance of a
1560    * processor & ideally the processor will be validating the results
1561    * Load requested payment processor and call that processor's handle<$method> method
1562    *
1563    * @todo move to \Civi\Payment\System factory method
1564    *
1565    * @param string $method
1566    *   'PaymentNotification' or 'PaymentCron'
1567    * @param array $params
1568    *
1569    * @throws \CRM_Core_Exception
1570    * @throws \Exception
1571    */
1572   public static function handlePaymentMethod($method, $params = []) {
1573     if (!isset($params['processor_id']) && !isset($params['processor_name'])) {
1574       $q = explode('/', CRM_Utils_System::currentPath());
1575       $lastParam = array_pop($q);
1576       if (is_numeric($lastParam)) {
1577         $params['processor_id'] = $_GET['processor_id'] = $lastParam;
1578       }
1579       else {
1580         self::logPaymentNotification($params);
1581         throw new CRM_Core_Exception("Either 'processor_id' (recommended) or 'processor_name' (deprecated) is required for payment callback.");
1582       }
1583     }
1584
1585     self::logPaymentNotification($params);
1586
1587     $sql = "SELECT ppt.class_name, ppt.name as processor_name, pp.id AS processor_id
1588               FROM civicrm_payment_processor_type ppt
1589         INNER JOIN civicrm_payment_processor pp
1590                 ON pp.payment_processor_type_id = ppt.id
1591                AND pp.is_active";
1592
1593     if (isset($params['processor_id'])) {
1594       $sql .= " WHERE pp.id = %2";
1595       $args[2] = [$params['processor_id'], 'Integer'];
1596       $notFound = ts("No active instances of payment processor %1 were found.", [1 => $params['processor_id']]);
1597     }
1598     else {
1599       // This is called when processor_name is passed - passing processor_id instead is recommended.
1600       $sql .= " WHERE ppt.name = %2 AND pp.is_test = %1";
1601       $args[1] = [
1602         (CRM_Utils_Array::value('mode', $params) == 'test') ? 1 : 0,
1603         'Integer',
1604       ];
1605       $args[2] = [$params['processor_name'], 'String'];
1606       $notFound = ts("No active instances of payment processor '%1' were found.", [1 => $params['processor_name']]);
1607     }
1608
1609     $dao = CRM_Core_DAO::executeQuery($sql, $args);
1610
1611     // Check whether we found anything at all.
1612     if (!$dao->N) {
1613       throw new CRM_Core_Exception($notFound);
1614     }
1615
1616     $method = 'handle' . $method;
1617     $extension_instance_found = FALSE;
1618
1619     // In all likelihood, we'll just end up with the one instance returned here. But it's
1620     // possible we may get more. Hence, iterate through all instances ..
1621
1622     while ($dao->fetch()) {
1623       // Check pp is extension - is this still required - surely the singleton below handles it.
1624       $ext = CRM_Extension_System::singleton()->getMapper();
1625       if ($ext->isExtensionKey($dao->class_name)) {
1626         $paymentClass = $ext->keyToClass($dao->class_name, 'payment');
1627         require_once $ext->classToPath($paymentClass);
1628       }
1629
1630       $processorInstance = System::singleton()->getById($dao->processor_id);
1631
1632       // Should never be empty - we already established this processor_id exists and is active.
1633       if (empty($processorInstance)) {
1634         continue;
1635       }
1636
1637       // Does PP implement this method, and can we call it?
1638       if (!method_exists($processorInstance, $method) ||
1639         !is_callable([$processorInstance, $method])
1640       ) {
1641         // on the off chance there is a double implementation of this processor we should keep looking for another
1642         // note that passing processor_id is more reliable & we should work to deprecate processor_name
1643         continue;
1644       }
1645
1646       // Everything, it seems, is ok - execute pp callback handler
1647       $processorInstance->$method();
1648       $extension_instance_found = TRUE;
1649     }
1650
1651     // Call IPN postIPNProcess hook to allow for custom processing of IPN data.
1652     $IPNParams = array_merge($_GET, $_REQUEST);
1653     CRM_Utils_Hook::postIPNProcess($IPNParams);
1654     if (!$extension_instance_found) {
1655       $message = "No extension instances of the '%1' payment processor were found.<br />" .
1656         "%2 method is unsupported in legacy payment processors.";
1657       throw new CRM_Core_Exception(ts($message, [
1658         1 => $params['processor_name'],
1659         2 => $method,
1660       ]));
1661     }
1662   }
1663
1664   /**
1665    * Check whether a method is present ( & supported ) by the payment processor object.
1666    *
1667    * @deprecated - use $paymentProcessor->supports(array('cancelRecurring');
1668    *
1669    * @param string $method
1670    *   Method to check for.
1671    *
1672    * @return bool
1673    */
1674   public function isSupported($method) {
1675     return method_exists(CRM_Utils_System::getClassName($this), $method);
1676   }
1677
1678   /**
1679    * Some processors replace the form submit button with their own.
1680    *
1681    * Returning false here will leave the button off front end forms.
1682    *
1683    * At this stage there is zero cross-over between back-office processors and processors that suppress the submit.
1684    */
1685   public function isSuppressSubmitButtons() {
1686     return FALSE;
1687   }
1688
1689   /**
1690    * Checks to see if invoice_id already exists in db.
1691    *
1692    * It's arguable if this belongs in the payment subsystem at all but since several processors implement it
1693    * it is better to standardise to being here.
1694    *
1695    * @param int $invoiceId The ID to check.
1696    * @param int|null $contributionID
1697    *   If a contribution exists pass in the contribution ID.
1698    *
1699    * @return bool
1700    *   True if invoice ID otherwise exists, else false
1701    */
1702   protected function checkDupe($invoiceId, $contributionID = NULL) {
1703     $contribution = new CRM_Contribute_DAO_Contribution();
1704     $contribution->invoice_id = $invoiceId;
1705     if ($contributionID) {
1706       $contribution->whereAdd("id <> $contributionID");
1707     }
1708     return $contribution->find();
1709   }
1710
1711   /**
1712    * Get url for users to manage this recurring contribution for this processor.
1713    *
1714    * @param int|null $entityID
1715    * @param string|null $entity
1716    * @param string $action
1717    *
1718    * @return string|null
1719    * @throws \CRM_Core_Exception
1720    */
1721   public function subscriptionURL($entityID = NULL, $entity = NULL, $action = 'cancel') {
1722     // Set URL
1723     switch ($action) {
1724       case 'cancel':
1725         if (!$this->supports('cancelRecurring')) {
1726           return NULL;
1727         }
1728         $url = 'civicrm/contribute/unsubscribe';
1729         break;
1730
1731       case 'billing':
1732         //in notify mode don't return the update billing url
1733         if (!$this->supports('updateSubscriptionBillingInfo')) {
1734           return NULL;
1735         }
1736         $url = 'civicrm/contribute/updatebilling';
1737         break;
1738
1739       case 'update':
1740         if (!$this->supports('changeSubscriptionAmount') && !$this->supports('editRecurringContribution')) {
1741           return NULL;
1742         }
1743         $url = 'civicrm/contribute/updaterecur';
1744         break;
1745
1746       default:
1747         $url = '';
1748         break;
1749     }
1750
1751     $userId = CRM_Core_Session::singleton()->get('userID');
1752     $contactID = 0;
1753     $checksumValue = '';
1754     $entityArg = '';
1755
1756     // Find related Contact
1757     if ($entityID) {
1758       switch ($entity) {
1759         case 'membership':
1760           $contactID = CRM_Core_DAO::getFieldValue("CRM_Member_DAO_Membership", $entityID, "contact_id");
1761           $entityArg = 'mid';
1762           break;
1763
1764         case 'contribution':
1765           $contactID = CRM_Core_DAO::getFieldValue("CRM_Contribute_DAO_Contribution", $entityID, "contact_id");
1766           $entityArg = 'coid';
1767           break;
1768
1769         case 'recur':
1770           $contactID = CRM_Core_DAO::getFieldValue("CRM_Contribute_DAO_ContributionRecur", $entityID, "contact_id");
1771           $entityArg = 'crid';
1772           break;
1773       }
1774     }
1775
1776     // Add entity arguments
1777     if ($entityArg != '') {
1778       // Add checksum argument
1779       if ($contactID != 0 && $userId != $contactID) {
1780         $checksumValue = '&cs=' . CRM_Contact_BAO_Contact_Utils::generateChecksum($contactID, NULL, 'inf');
1781       }
1782       return CRM_Utils_System::url($url, "reset=1&{$entityArg}={$entityID}{$checksumValue}", TRUE, NULL, FALSE, TRUE);
1783     }
1784
1785     // Else login URL
1786     if ($this->supports('accountLoginURL')) {
1787       return $this->accountLoginURL();
1788     }
1789
1790     // Else default
1791     return $this->_paymentProcessor['url_recur'] ?? '';
1792   }
1793
1794   /**
1795    * Get description of payment to pass to processor.
1796    *
1797    * This is often what people see in the interface so we want to get
1798    * as much unique information in as possible within the field length (& presumably the early part of the field)
1799    *
1800    * People seeing these can be assumed to be advanced users so quantity of information probably trumps
1801    * having field names to clarify
1802    *
1803    * @param array $params
1804    * @param int $length
1805    *
1806    * @return string
1807    */
1808   protected function getPaymentDescription($params = [], $length = 24) {
1809     $propertyBag = PropertyBag::cast($params);
1810     $parts = [
1811       $propertyBag->getter('contactID', TRUE),
1812       $propertyBag->getter('contributionID', TRUE),
1813       $propertyBag->getter('description', TRUE) ?: ($propertyBag->getter('isRecur', TRUE) ? ts('Recurring payment') : NULL),
1814       $propertyBag->getter('billing_first_name', TRUE),
1815       $propertyBag->getter('billing_last_name', TRUE),
1816     ];
1817     return substr(implode('-', array_filter($parts)), 0, $length);
1818   }
1819
1820   /**
1821    * Checks if back-office recurring edit is allowed
1822    *
1823    * @return bool
1824    */
1825   public function supportsEditRecurringContribution() {
1826     return FALSE;
1827   }
1828
1829   /**
1830    * Does this processor support changing the amount for recurring contributions through code.
1831    *
1832    * If the processor returns true then it must be possible to update the amount from within CiviCRM
1833    * that will be updated at the payment processor.
1834    *
1835    * @return bool
1836    */
1837   protected function supportsChangeSubscriptionAmount() {
1838     return method_exists(CRM_Utils_System::getClassName($this), 'changeSubscriptionAmount');
1839   }
1840
1841   /**
1842    * Checks if payment processor supports recurring contributions
1843    *
1844    * @return bool
1845    */
1846   public function supportsRecurring() {
1847     if (!empty($this->_paymentProcessor['is_recur'])) {
1848       return TRUE;
1849     }
1850     return FALSE;
1851   }
1852
1853   /**
1854    * Checks if payment processor supports an account login URL
1855    * TODO: This is checked by self::subscriptionURL but is only used if no entityID is found.
1856    * TODO: It is implemented by AuthorizeNET, any others?
1857    *
1858    * @return bool
1859    */
1860   protected function supportsAccountLoginURL() {
1861     return method_exists(CRM_Utils_System::getClassName($this), 'accountLoginURL');
1862   }
1863
1864   /**
1865    * Should a receipt be sent out for a pending payment.
1866    *
1867    * e.g for traditional pay later & ones with a delayed settlement a pending receipt makes sense.
1868    */
1869   public function isSendReceiptForPending() {
1870     return FALSE;
1871   }
1872
1873 }