Fraud Protection: Add report flow with session ID persistence and order event tracking by leonardola · Pull Request #34 · woocommerce/woocommerce-fraud-protection

Add SessionVerifier to FraudProtectionController and implement session ID persistence

leonardola

committed

Add OrderEventsTracker to FraudProtectionController and initialize in hooks

leonardola

committed

Enhance OrderEventsTracker to support fraud protection reporting

leonardola

committed

Refactor ApiClient to conditionally handle payload structure for report endpoint

leonardola

committed

Removed refund hook as payment gateways will need to trigger the report flow on their side as we can't differenciate between a manual regular refund vs a automatic refund caused by a fraudulent pur…

leonardola

committed

Update OrderEventsTracker to expose `woocommerce_fraud_protection_report` action hook for 3rd-party plugins. This change allows payment gateways to report events to the Blackbox API, enhancing the …

leonardola

committed

Enhance on_fraud_protection_report method to validate status input

leonardola

committed

Refactor ApiClient to prevent payload from overriding session_id and private_key

leonardola

committed

Enhance ApiClient so make_request does not need to care about the data format.

leonardola

committed

Add logging for missing session ID in OrderEventsTracker

leonardola

committed

Now the report strings have their own constants

leonardola

committed

Sanitized the $notes data

leonardola

committed

Added test for "good" reports

leonardola

committed

Added test for when `wc_get_order` returns false

leonardola

committed

Refactor fraud protection reporting mechanism

leonardola

committed

Enhance fraud protection reporting with event source tracking

leonardola

committed

Make feature_is_enabled() static and guard compat layer registration

luizreis

authored and

leonardola

committed

Added feature_enabled check to prevent reports when it's disabled

leonardola

committed

Added empty line

leonardola

committed

Removed private_key override protection as it's not going to be used by Woo

leonardola

committed

Moved the blog_id check into the make_request function so the check runs for both verify and report endpoints

leonardola

committed

Removed empty register method

leonardola

committed

Refactor error handling in ApiClient and remove unused OrderEventsTracker dependency from FraudProtectionController

leonardola

committed

Removed unecessary assertions after stop sending the blog_id to the api

leonardola

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fraud Protection: Add report flow with session ID persistence and order event tracking#34

Fraud Protection: Add report flow with session ID persistence and order event tracking#34
leonardola merged 24 commits intotrunkfrom
add/WOOSUBS-1438-report-flow

Commits on Mar 19, 2026

Add SessionVerifier to FraudProtectionController and implement session ID persistence

Add OrderEventsTracker to FraudProtectionController and initialize in hooks

Enhance OrderEventsTracker to support fraud protection reporting

Refactor ApiClient to conditionally handle payload structure for report endpoint

Removed refund hook as payment gateways will need to trigger the report flow on their side as we can't differenciate between a manual regular refund vs a automatic refund caused by a fraudulent pur…

Update OrderEventsTracker to expose `woocommerce_fraud_protection_report` action hook for 3rd-party plugins. This change allows payment gateways to report events to the Blackbox API, enhancing the …

Enhance on_fraud_protection_report method to validate status input

Refactor ApiClient to prevent payload from overriding session_id and private_key

Enhance ApiClient so make_request does not need to care about the data format.

Add logging for missing session ID in OrderEventsTracker

Now the report strings have their own constants

Sanitized the $notes data

Added test for "good" reports

Added test for when `wc_get_order` returns false

Refactor fraud protection reporting mechanism

Enhance fraud protection reporting with event source tracking

Make feature_is_enabled() static and guard compat layer registration

Added feature_enabled check to prevent reports when it's disabled

Added empty line

Removed private_key override protection as it's not going to be used by Woo

Moved the blog_id check into the make_request function so the check runs for both verify and report endpoints

Removed empty register method

Refactor error handling in ApiClient and remove unused OrderEventsTracker dependency from FraudProtectionController

Removed unecessary assertions after stop sending the blog_id to the api