mirror of
https://github.com/anikeen-com/id.git
synced 2026-11-02 05:39:35 +00:00
Maurice PreußandClaude Opus 5.5
f20a12e6da
Orders and subscriptions created by untrusted apps are confirmed by the user on Anikeen ID. confirmationUrl($returnUrl) on Order and Subscription builds the link with the return URL; checking out such a draft throws ConfirmationRequiredException carrying the same URL. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
28 lines
892 B
PHP
28 lines
892 B
PHP
<?php
|
|
|
|
namespace Anikeen\Id\Concerns;
|
|
|
|
/**
|
|
* Orders and subscriptions created by third-party apps are confirmed by the user on Anikeen ID.
|
|
*/
|
|
trait HasConfirmationUrl
|
|
{
|
|
/**
|
|
* Where the user confirms (or cancels) this booking, or null once it was checked out.
|
|
*
|
|
* Afterwards the user is sent back to $returnUrl with `status` (completed, pending or
|
|
* cancelled) and `order` or `subscription`. The return URL must have the origin of one of
|
|
* the app's redirect URIs. Check the status through the API; don't trust the query string.
|
|
*/
|
|
public function confirmationUrl(?string $returnUrl = null): ?string
|
|
{
|
|
$url = $this->confirmation_url ?? null;
|
|
|
|
if (!$url || !$returnUrl) {
|
|
return $url ?: null;
|
|
}
|
|
|
|
return $url . (str_contains($url, '?') ? '&' : '?') . http_build_query(['return_url' => $returnUrl]);
|
|
}
|
|
}
|