JezK

Edit File: brandagent-webhooks.php

<?php
/**
 * BrandAgent Webhooks Management Class
 *
 * Handles creation, validation, and management of WooCommerce webhooks for BrandAgent
 *
 * @package MicrosoftClarity
 * @since 0.10.21
 */

// Exit if accessed directly
defined( 'ABSPATH' ) || exit;

/**
 * Webhooks management class
 */
/**
 * Add HMAC authentication headers to WooCommerce webhook deliveries.
 * This ensures the Brand Agent server can verify webhook requests
 * using the same HMAC scheme as other authenticated endpoints.
 *
 * @param array  $http_args  The webhook HTTP request arguments.
 * @param string $arg        The webhook payload body.
 * @param int    $webhook_id The webhook ID.
 * @return array Modified HTTP request arguments with HMAC headers.
 */
function brandagent_add_hmac_to_webhook( $http_args, $arg, $webhook_id ) {
	$webhook = wc_get_webhook( $webhook_id );
	if ( ! $webhook || strpos( $webhook->get_name(), 'BrandAgent' ) !== 0 ) {
		return $http_args;
	}

$secret_key = brandagent_get_hmac_secret();
	if ( ! $secret_key ) {
		brandagent_log( 'BrandAgent Webhooks: Missing HMAC secret for WooCommerce webhook delivery headers', array(
			'webhook_id' => $webhook_id,
			'webhook_name' => $webhook->get_name(),
		) );
		return $http_args;
	}

$store_url = home_url();
	$client_id = brandagent_normalize_store_url( $store_url );
	$timestamp = time();
	$signature = brandagent_generate_hmac_signature( $client_id, $timestamp, $secret_key );

$http_args['headers']['X-WooCommerce-Client-Id'] = $client_id;
	$http_args['headers']['X-WooCommerce-Store-Url'] = $store_url;
	$http_args['headers']['X-WooCommerce-Signature'] = $signature;
	$http_args['headers']['X-WooCommerce-Timestamp'] = (string) $timestamp;

return $http_args;
}
add_filter( 'woocommerce_webhook_http_args', 'brandagent_add_hmac_to_webhook', 10, 3 );

class BrandAgent_Webhooks {

/**
	 * Create all BrandAgent webhooks
	 * Loops through all webhook configuration files and creates/updates them
	 *
	 * @return array Array of results with webhook names and success status
	 */
	public static function create_webhooks() {
		$results = array();
		$webhook_configs = self::get_webhook_configs();
		brandagent_log( 'BrandAgent Webhooks: Creating or updating configured webhooks', array( 'config_count' => count( $webhook_configs ) ) );

foreach ( $webhook_configs as $config_file => $config ) {
			$success = self::create_or_update_webhook( $config );
			$results[ $config['name'] ] = $success;
		}

$success_count = count( array_filter( $results ) );
		brandagent_log( 'BrandAgent Webhooks: Create/update completed', array(
			'webhook_count' => count( $results ),
			'success_count' => $success_count,
			'failure_count' => count( $results ) - $success_count,
		) );

return $results;
	}

/**
	 * Get all webhook configurations from the webhooks folder
	 *
	 * @return array Array of webhook configurations
	 */
	private static function get_webhook_configs() {
		$configs = array();
		$webhooks_dir = plugin_dir_path( __FILE__ ) . 'webhooks/';

// Check if webhooks directory exists
		if ( ! is_dir( $webhooks_dir ) ) {
			brandagent_log( 'BrandAgent Webhooks: Webhooks directory not found', array( 'webhooks_dir' => $webhooks_dir ) );
			return $configs;
		}

// Get all PHP files in the webhooks directory
		$files = glob( $webhooks_dir . '*.php' );

foreach ( $files as $file ) {
			$config = include $file;

// Validate config structure
			if ( is_array( $config ) && isset( $config['name'], $config['topic'], $config['endpoint'] ) ) {
				$configs[ basename( $file ) ] = $config;
			} else {
				brandagent_log( 'BrandAgent Webhooks: Invalid webhook config in file', array( 'file' => basename( $file ) ) );
			}
		}

return $configs;
	}

/**
	 * Create or update a webhook based on configuration
	 *
	 * @param array $config Webhook configuration array
	 * @return bool True on success, false on failure
	 */
	private static function create_or_update_webhook( $config ) {
		// Check if WooCommerce is loaded
		if ( ! class_exists( 'WC_Webhook' ) ) {
			brandagent_log( 'BrandAgent Webhooks: WooCommerce webhook class not available; cannot create webhook', array(
				'webhook_name' => $config['name'] ?? '',
				'topic' => $config['topic'] ?? '',
			) );
			return false;
		}

// Build delivery URL
		$backend_base_url = BrandAgent_Config::get_backend_base_url();
		$store_url = home_url();
		$delivery_url = $backend_base_url . $config['endpoint'] . '?store_url=' . rawurlencode( $store_url );

// Get HMAC secret for webhook signature validation
		$hmac_secret = brandagent_get_hmac_secret();
		if ( ! $hmac_secret ) {
			brandagent_log( 'BrandAgent Webhooks: HMAC secret missing while creating or updating webhook', array(
				'webhook_name' => $config['name'],
				'topic' => $config['topic'],
			) );
		}

// Find existing webhook by name and topic
		$existing_webhook = self::find_webhook_by_name_and_topic( $config['name'], $config['topic'] );

if ( $existing_webhook ) {
			return self::update_webhook( $existing_webhook, $delivery_url, $hmac_secret, $config['topic'] );
		} else {
			return self::create_webhook( $config['name'], $config['topic'], $delivery_url, $hmac_secret );
		}
	}

/**
	 * Find a webhook by name and topic
	 *
	 * @param string $webhook_name The webhook name to search for
	 * @param string $webhook_topic The webhook topic to search for
	 * @return WC_Webhook|null The webhook object if found, null otherwise
	 */
	private static function find_webhook_by_name_and_topic( $webhook_name, $webhook_topic ) {
		$webhook_ids = self::find_all_webhooks();

// Search through webhooks to find a match
		foreach ( $webhook_ids as $webhook_id ) {
			$webhook = wc_get_webhook( $webhook_id );

// If WooCommerce can't load the webhook object, check metadata directly
			if ( ! $webhook ) {
				self::handle_broken_webhook( $webhook_id, $webhook_name, $webhook_topic );
				continue;
			}

// Check if this webhook matches our criteria (by name AND topic)
			if ( $webhook->get_name() === $webhook_name && $webhook->get_topic() === $webhook_topic ) {
				return $webhook;
			}
		}

return null;
	}

/**
	 * Handle broken webhooks that can't be loaded by WooCommerce
	 *
	 * @param int $webhook_id The webhook ID
	 * @param string $webhook_name The expected webhook name
	 * @param string $webhook_topic The expected webhook topic
	 */
	private static function handle_broken_webhook( $webhook_id, $webhook_name, $webhook_topic ) {
		global $wpdb;
		$meta_topic = get_post_meta( $webhook_id, '_webhook_topic', true );
		$post_title = $wpdb->get_var( $wpdb->prepare( "SELECT post_title FROM {$wpdb->posts} WHERE ID = %d", $webhook_id ) );

// Check if this webhook matches by metadata - if so, delete it (it's broken)
		if ( $post_title === $webhook_name && $meta_topic === $webhook_topic ) {
			wp_delete_post( $webhook_id, true );
			brandagent_log( 'BrandAgent Webhooks: Deleted broken webhook; will create fresh one', array(
				'webhook_id' => $webhook_id,
				'webhook_name' => $webhook_name,
				'topic' => $webhook_topic,
			) );
		}
	}

/**
	 * Create a new webhook
	 *
	 * @param string $webhook_name The webhook name
	 * @param string $webhook_topic The webhook topic
	 * @param string $delivery_url The delivery URL
	 * @param string $hmac_secret The HMAC secret for signature validation
	 * @return bool True on success, false on failure
	 */
	private static function create_webhook( $webhook_name, $webhook_topic, $delivery_url, $hmac_secret ) {
		$webhook = new WC_Webhook();
		$webhook->set_name( $webhook_name );
		$webhook->set_topic( $webhook_topic );
		$webhook->set_delivery_url( $delivery_url );
		$webhook->set_secret( $hmac_secret );
		$webhook->set_status( 'active' );

// IMPORTANT: Set the user ID to an admin user who has permission to view products
		// This is required for WooCommerce to authenticate the webhook requests
		$current_user_id = get_current_user_id();
		if ( $current_user_id && user_can( $current_user_id, 'manage_woocommerce' ) ) {
			$webhook->set_user_id( $current_user_id );
		} else {
			// Current user is not an admin or not logged in - find an admin user
			$admin_users = get_users( array( 'role' => 'administrator', 'number' => 1 ) );
				if ( ! empty( $admin_users ) ) {
					$webhook->set_user_id( $admin_users[0]->ID );
				} else {
					brandagent_log( 'BrandAgent Webhooks: Warning - no admin user found for webhook authentication', array(
						'webhook_name' => $webhook_name,
						'topic' => $webhook_topic,
					) );
				}
			}

$webhook_id = $webhook->save();

if ( $webhook_id ) {
			// Manually save metadata as a workaround for WooCommerce not persisting it properly
			update_post_meta( $webhook_id, '_webhook_topic', $webhook_topic );
			update_post_meta( $webhook_id, '_webhook_delivery_url', $delivery_url );
			update_post_meta( $webhook_id, '_webhook_secret', $hmac_secret );
			update_post_meta( $webhook_id, '_webhook_status', 'active' );

brandagent_log( 'BrandAgent Webhooks: Successfully created webhook', array(
				'webhook_id' => $webhook_id,
				'webhook_name' => $webhook_name,
				'topic' => $webhook_topic,
			) );
			return true;
		} else {
			brandagent_log( 'BrandAgent Webhooks: Failed to create webhook', array(
				'webhook_name' => $webhook_name,
				'topic' => $webhook_topic,
			) );
			return false;
		}
	}

/**
	 * Update an existing webhook
	 *
	 * @param WC_Webhook $webhook The webhook object to update
	 * @param string $delivery_url The new delivery URL
	 * @param string $hmac_secret The new HMAC secret
	 * @param string $webhook_topic The webhook topic
	 * @return bool True if updated or already up-to-date, false on failure
	 */
	private static function update_webhook( $webhook, $delivery_url, $hmac_secret, $webhook_topic ) {
		$needs_update = false;

if ( $webhook->get_delivery_url() !== $delivery_url ) {
			$webhook->set_delivery_url( $delivery_url );
			$needs_update = true;
		}

if ( $webhook->get_secret() !== $hmac_secret ) {
			$webhook->set_secret( $hmac_secret );
			$needs_update = true;
		}

if ( $webhook->get_status() !== 'active' ) {
			$webhook->set_status( 'active' );
			$needs_update = true;
		}

// Ensure the webhook has a user ID for authentication
		if ( ! $webhook->get_user_id() ) {
			$current_user_id = get_current_user_id();
			if ( $current_user_id && user_can( $current_user_id, 'manage_woocommerce' ) ) {
				$webhook->set_user_id( $current_user_id );
			} else {
				// Current user is not an admin or not logged in - find an admin user
				$admin_users = get_users( array( 'role' => 'administrator', 'number' => 1 ) );
				if ( ! empty( $admin_users ) ) {
					$webhook->set_user_id( $admin_users[0]->ID );
				}
			}
			$needs_update = true;
		}

if ( $needs_update ) {
			$webhook->save();

// Manually update metadata as well to ensure persistence
			update_post_meta( $webhook->get_id(), '_webhook_topic', $webhook_topic );
			update_post_meta( $webhook->get_id(), '_webhook_delivery_url', $delivery_url );
			update_post_meta( $webhook->get_id(), '_webhook_secret', $hmac_secret );
			update_post_meta( $webhook->get_id(), '_webhook_status', 'active' );

brandagent_log( 'BrandAgent Webhooks: Updated existing webhook', array(
				'webhook_id' => $webhook->get_id(),
				'topic' => $webhook_topic,
			) );
		} else {
			brandagent_log( 'BrandAgent Webhooks: Webhook already exists and is up-to-date', array(
				'webhook_id' => $webhook->get_id(),
				'topic' => $webhook_topic,
			) );
		}

return true;
	}

/**
	 * Whether any BrandAgent webhook currently exists on this site.
	 * Used by the one-time migration that backfills BAWebhooksCreated.
	 *
	 * @return bool
	 */
	public static function has_any_brandagent_webhook() {
		if ( ! class_exists( 'WC_Webhook' ) ) {
			return false;
		}

$webhook_ids = self::find_all_webhooks();
		return ! empty( $webhook_ids );
	}

/**
	 * Find all webhooks using multiple methods
	 * Tries WooCommerce API first, then falls back to direct database queries
	 *
	 * @return array Array of webhook IDs
	 */
	private static function find_all_webhooks() {
		$webhook_ids = array();

// Method 1: Try WooCommerce data store search (works for all statuses)
		try {
			$data_store = WC_Data_Store::load( 'webhook' );
			$webhook_ids = $data_store->search_webhooks( array(
				'status' => '',  // Empty string = all statuses
				'limit'  => -1,
			) );
			
			if ( ! empty( $webhook_ids ) ) {
				brandagent_log( 'BrandAgent Webhooks: Found webhooks via data store', array( 'webhook_count' => count( $webhook_ids ) ) );
				return $webhook_ids;
			}
		} catch ( Exception $e ) {
			brandagent_log( 'BrandAgent Webhooks: Data store search failed', array( 'error' => $e->getMessage() ) );
		}

// Method 2: Direct query to wc_webhooks table (WooCommerce 3.3+)
		global $wpdb;
		$table_name = $wpdb->prefix . 'wc_webhooks';
		
		// Check if the custom webhooks table exists
		$table_exists = $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $table_name ) );
		
		if ( $table_exists ) {
			$webhook_ids = $wpdb->get_col( $wpdb->prepare( "SELECT webhook_id FROM %i", $table_name ) );
			
			if ( ! empty( $webhook_ids ) ) {
				brandagent_log( 'BrandAgent Webhooks: Found webhooks via wc_webhooks table', array( 'webhook_count' => count( $webhook_ids ) ) );
				return $webhook_ids;
			}
		}

// Method 3: Legacy fallback - posts table (WooCommerce < 3.3)
		$webhook_ids = $wpdb->get_col(
			"SELECT ID FROM {$wpdb->posts} 
			WHERE post_type = 'shop_webhook' 
			ORDER BY ID DESC"
		);
		
		if ( ! empty( $webhook_ids ) ) {
			brandagent_log( 'BrandAgent Webhooks: Found webhooks via posts table legacy fallback', array( 'webhook_count' => count( $webhook_ids ) ) );
		}

return $webhook_ids;
	}

/**
	 * Pause all BrandAgent webhooks
	 * Sets status to 'paused' instead of deleting them
	 * Useful when disconnecting the plugin
	 *
	 * @return int Number of webhooks paused
	 */
	public static function pause_all_brandagent_webhooks() {
		if ( ! class_exists( 'WC_Webhook' ) ) {
			brandagent_log( 'BrandAgent Webhooks: WC_Webhook class not available for pausing' );
			return 0;
		}

$webhook_ids = self::find_all_webhooks();
		brandagent_log( 'BrandAgent Webhooks: Attempting to pause webhooks', array( 'webhook_count' => count( $webhook_ids ) ) );
		
		$paused_count = 0;

foreach ( $webhook_ids as $webhook_id ) {
			$webhook = wc_get_webhook( $webhook_id );

if ( ! $webhook ) {
				brandagent_log( 'BrandAgent Webhooks: Could not load webhook while pausing', array( 'webhook_id' => $webhook_id ) );
				continue;
			}

$webhook_name = $webhook->get_name();
			
			// Only pause webhooks that belong to BrandAgent
			if ( strpos( $webhook_name, 'BrandAgent' ) === 0 ) {
					if ( $webhook->get_status() === 'active' ) {
						$webhook->set_status( 'paused' );
						$webhook->save();
						brandagent_log( 'BrandAgent Webhooks: Paused webhook', array(
							'webhook_id' => $webhook_id,
							'webhook_name' => $webhook_name,
						) );
						$paused_count++;
					} else {
						brandagent_log( 'BrandAgent Webhooks: Webhook already has non-active status during pause', array(
							'webhook_id' => $webhook_id,
							'webhook_name' => $webhook_name,
							'status' => $webhook->get_status(),
						) );
					}
				}
			}

brandagent_log( 'BrandAgent Webhooks: Pause completed', array( 'paused_count' => $paused_count ) );
		return $paused_count;
	}

/**
	 * Resume all BrandAgent webhooks
	 * Sets status to 'active' for all paused webhooks
	 * Useful when re-enabling the plugin
	 *
	 * @return int Number of webhooks resumed
	 */
	public static function resume_all_brandagent_webhooks() {
		if ( ! function_exists( 'wc_get_webhook' ) ) {
			brandagent_log( 'BrandAgent Webhooks: wc_get_webhook function not available for resume' );
			return 0;
		}

$webhook_ids = self::find_all_webhooks();
		$resumed_count = 0;
		brandagent_log( 'BrandAgent Webhooks: Attempting to resume webhooks', array( 'webhook_count' => count( $webhook_ids ) ) );

foreach ( $webhook_ids as $webhook_id ) {
			$webhook = wc_get_webhook( $webhook_id );

if ( ! $webhook ) {
				brandagent_log( 'BrandAgent Webhooks: Could not load webhook while resuming', array( 'webhook_id' => $webhook_id ) );
				continue;
			}

// Only resume webhooks that belong to BrandAgent and are paused
			if ( strpos( $webhook->get_name(), 'BrandAgent' ) === 0 && $webhook->get_status() === 'paused' ) {
				$webhook->set_status( 'active' );
				$webhook->save();
				$resumed_count++;
			}
		}

brandagent_log( 'BrandAgent Webhooks: Resume completed', array( 'resumed_count' => $resumed_count ) );

return $resumed_count;
	}

/**
	 * Delete all BrandAgent webhooks
	 * Permanently removes all webhooks that belong to BrandAgent
	 * Useful when uninstalling the plugin or resetting configuration
	 *
	 * @return int Number of webhooks deleted
	 */
	public static function delete_all_brandagent_webhooks() {
		if ( ! class_exists( 'WC_Webhook' ) ) {
			brandagent_log( 'BrandAgent Webhooks: WC_Webhook class not available for deletion' );
			return 0;
		}

$webhook_ids = self::find_all_webhooks();
		brandagent_log( 'BrandAgent Webhooks: Attempting to delete webhooks', array( 'webhook_count' => count( $webhook_ids ) ) );
		
		$deleted_count = 0;

foreach ( $webhook_ids as $webhook_id ) {
			$webhook = wc_get_webhook( $webhook_id );

if ( ! $webhook ) {
				// Try to delete broken webhook directly from database
					$webhook_name = self::get_webhook_name_from_db( $webhook_id );
					if ( $webhook_name && strpos( $webhook_name, 'BrandAgent' ) === 0 ) {
						self::delete_webhook_from_db( $webhook_id );
						brandagent_log( 'BrandAgent Webhooks: Deleted broken webhook directly from DB', array(
							'webhook_id' => $webhook_id,
							'webhook_name' => $webhook_name,
						) );
						$deleted_count++;
					}
					continue;
			}

$webhook_name = $webhook->get_name();
			
			// Only delete webhooks that belong to BrandAgent
				if ( strpos( $webhook_name, 'BrandAgent' ) === 0 ) {
					$webhook->delete( true );
					brandagent_log( 'BrandAgent Webhooks: Deleted webhook', array(
						'webhook_id' => $webhook_id,
						'webhook_name' => $webhook_name,
					) );
					$deleted_count++;
				}
			}

brandagent_log( 'BrandAgent Webhooks: Delete completed', array( 'deleted_count' => $deleted_count ) );
		return $deleted_count;
	}

/**
	 * Get webhook name directly from database
	 *
	 * @param int $webhook_id The webhook ID
	 * @return string|null The webhook name or null if not found
	 */
	private static function get_webhook_name_from_db( $webhook_id ) {
		global $wpdb;
		$table_name = $wpdb->prefix . 'wc_webhooks';
		
		// Try custom table first (WooCommerce 3.3+)
		$table_exists = $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $table_name ) );
		if ( $table_exists ) {
			return $wpdb->get_var( $wpdb->prepare( "SELECT name FROM {$table_name} WHERE webhook_id = %d", $webhook_id ) );
		}
		
		// Fallback to posts table
		return get_the_title( $webhook_id );
	}

/**
	 * Delete webhook directly from database
	 *
	 * @param int $webhook_id The webhook ID
	 */
	private static function delete_webhook_from_db( $webhook_id ) {
		global $wpdb;
		$table_name = $wpdb->prefix . 'wc_webhooks';
		
		// Try custom table first (WooCommerce 3.3+)
		$table_exists = $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $table_name ) );
		if ( $table_exists ) {
			$wpdb->delete( $table_name, array( 'webhook_id' => $webhook_id ), array( '%d' ) );
		}
		
		// Also try posts table for legacy support
		wp_delete_post( $webhook_id, true );
	}
}