[UPMERGE] 1.7 -> 2.0 (#357)

This PR has been generated automatically.
For more details see
[upmerge_pr.yaml](/Sylius/PayPalPlugin/blob/1.7/.github/workflows/upmerge_pr.yaml).

**Remember!** The upmerge should always be merged with using `Merge pull
request` button.

In case of conflicts, please resolve them manually with usign the
following commands:
```
git fetch upstream
gh pr checkout <this-pr-number>
git merge upstream/2.0 -m "Resolve conflicts between 1.7 and 2.0"
```

If you use other name for the upstream remote, please replace `upstream`
with the name of your remote pointing to the `Sylius/PayPalPlugin`
repository.

Once the conflicts are resolved, please run `git merge --continue` and
push the changes to this PR.

Author: GSadee

config/services.xml

@@ -143,6 +143,7 @@
 
         <service id="sylius_paypal.processor.paypal_order_complete" class="Sylius\PayPalPlugin\Processor\PayPalOrderCompleteProcessor" public="true">
             <argument type="service" id="sylius_paypal.manager.payment_state" />
+            <argument type="service" id="sylius_paypal.verifier.payment_amount" />
         </service>
 
         <service

spec/Processor/PayPalOrderCompleteProcessorSpec.php

@@ -20,12 +20,15 @@
 use Sylius\Component\Core\Model\PaymentMethodInterface;
 use Sylius\Component\Payment\Model\GatewayConfigInterface;
 use Sylius\PayPalPlugin\Manager\PaymentStateManagerInterface;
+use Sylius\PayPalPlugin\Verifier\PaymentAmountVerifierInterface;
 
 final class PayPalOrderCompleteProcessorSpec extends ObjectBehavior
 {
-    function let(PaymentStateManagerInterface $paymentStateManager): void
-    {
-        $this->beConstructedWith($paymentStateManager);
+    function let(
+        PaymentStateManagerInterface $paymentStateManager,
+        PaymentAmountVerifierInterface $paymentAmountVerifier,
+    ): void {
+        $this->beConstructedWith($paymentStateManager, $paymentAmountVerifier);
     }
 
     function it_completes_paypal_order(
@@ -34,12 +37,14 @@ function it_completes_paypal_order(
         PaymentInterface $payment,
         PaymentMethodInterface $paymentMethod,
         GatewayConfigInterface $gatewayConfig,
+        PaymentAmountVerifierInterface $paymentAmountVerifier,
     ): void {
         $order->getLastPayment(PaymentInterface::STATE_PROCESSING)->willReturn($payment);
 
         $payment->getMethod()->willReturn($paymentMethod);
         $paymentMethod->getGatewayConfig()->willReturn($gatewayConfig);
         $gatewayConfig->getFactoryName()->willReturn('sylius_paypal');
+        $paymentAmountVerifier->verify($payment)->shouldBeCalled();
 
         $paymentStateManager->complete($payment)->shouldBeCalled();
 

src/Processor/PayPalOrderCompleteProcessor.php

@@ -18,12 +18,24 @@
 use Sylius\Component\Core\Model\PaymentInterface;
 use Sylius\Component\Core\Model\PaymentMethodInterface;
 use Sylius\PayPalPlugin\DependencyInjection\SyliusPayPalExtension;
+use Sylius\PayPalPlugin\Exception\PaymentAmountMismatchException;
 use Sylius\PayPalPlugin\Manager\PaymentStateManagerInterface;
+use Sylius\PayPalPlugin\Verifier\PaymentAmountVerifierInterface;
 
 final readonly class PayPalOrderCompleteProcessor
 {
-    public function __construct(private PaymentStateManagerInterface $paymentStateManager)
-    {
+    public function __construct(
+        private PaymentStateManagerInterface $paymentStateManager,
+        private ?PaymentAmountVerifierInterface $paymentAmountVerifier = null,
+    ) {
+        if (null === $this->paymentAmountVerifier) {
+            trigger_deprecation(
+                'sylius/paypal-plugin',
+                '1.6',
+                'Not passing an instance of "%s" as the second argument is deprecated and will be prohibited in 3.0.',
+                PaymentAmountVerifierInterface::class,
+            );
+        }
     }
 
     public function completePayPalOrder(OrderInterface $order): void
@@ -42,6 +54,34 @@ public function completePayPalOrder(OrderInterface $order): void
             return;
         }
 
+        try {
+            if (null !== $this->paymentAmountVerifier) {
+                $this->paymentAmountVerifier->verify($payment);
+            } else {
+                $this->verify($payment);
+            }
+        } catch (PaymentAmountMismatchException) {
+            $this->paymentStateManager->cancel($payment);
+
+            return;
+        }
+
         $this->paymentStateManager->complete($payment);
     }
+
+    private function verify(PaymentInterface $payment): void
+    {
+        $totalAmount = $this->getTotalPaymentAmountFromPaypal($payment);
+
+        if ($payment->getOrder()->getTotal() !== $totalAmount) {
+            throw new PaymentAmountMismatchException();
+        }
+    }
+
+    private function getTotalPaymentAmountFromPaypal(PaymentInterface $payment): int
+    {
+        $details = $payment->getDetails();
+
+        return $details['payment_amount'] ?? 0;
+    }
 }