Send correct token to PayPal component

malmo-monei · malmo-monei · commit d0c74fa92d49 · 2025-05-14T15:40:57.000+02:00
diff --git a/src/Gateways/Abstracts/WCMoneiPaymentGatewayHosted.php b/src/Gateways/Abstracts/WCMoneiPaymentGatewayHosted.php
@@ -114,7 +114,7 @@ public function process_payment( $order_id, $allowed_payment_method = null ) {
 		if ( $this->tokenization && $this->get_save_payment_card_checkbox() ) {
 			$payload['generatePaymentToken'] = true;
 		}
-		$token_id = $this->get_frontend_generated_bizum_token();
+		$token_id = $this->get_frontend_generated_token();
 		if ( $token_id ) {
 			if ( ! $this->isBlockCheckout() ) {
 				$payload['paymentToken'] = $token_id;
@@ -140,7 +140,7 @@ public function process_payment( $order_id, $allowed_payment_method = null ) {
 					'result'      => 'success',
 					'redirect'    => false,
 					'paymentId'   => $payment->getId(), // Send the paymentId back to the client
-					'token'       => $this->get_frontend_generated_bizum_token(), // Send the token back to the client
+					'token'       => $this->get_frontend_generated_token(), // Send the token back to the client
 					'completeUrl' => $payload['completeUrl'],
 					'failUrl'     => $payload['failUrl'],
 					'orderId'     => $order_id,
@@ -165,11 +165,11 @@ public function process_payment( $order_id, $allowed_payment_method = null ) {
 	 *
 	 * @return false|string
 	 */
-	protected function get_frontend_generated_bizum_token() {
-		if ( $this->id !== 'monei_bizum' ) {
-			return false;
+	protected function get_frontend_generated_token() {
+		if ( $this->id === 'monei_bizum' || $this->id === 'monei_paypal') {
+            //phpcs:ignore WordPress.Security.NonceVerification, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
+            return ( isset( $_POST['monei_payment_request_token'] ) ) ? wc_clean( wp_unslash( $_POST['monei_payment_request_token'] ) ) : false; // WPCS: CSRF ok.
 		}
-        //phpcs:ignore WordPress.Security.NonceVerification, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
-		return ( isset( $_POST['monei_payment_request_token'] ) ) ? wc_clean( wp_unslash( $_POST['monei_payment_request_token'] ) ) : false; // WPCS: CSRF ok.
+        return false;
 	}
 }
