<?php
/**
 * WooCommerce Braintree Gateway
 *
 * This source file is subject to the GNU General Public License v3.0
 * that is bundled with this package in the file license.txt.
 * It is also available through the world-wide-web at this URL:
 * http://www.gnu.org/licenses/gpl-3.0.html
 * If you did not receive a copy of the license and are unable to
 * obtain it through the world-wide-web, please send an email
 * to license@woocommerce.com so we can send you a copy immediately.
 *
 * DISCLAIMER
 *
 * Do not edit or add to this file if you wish to upgrade WooCommerce Braintree Gateway to newer
 * versions in the future. If you wish to customize WooCommerce Braintree Gateway for your
 * needs please refer to http://docs.woocommerce.com/document/braintree/
 *
 * @package   WC-Braintree/Gateway/Credit-Card
 * @author    WooCommerce
 * @copyright Copyright: (c) 2016-2020, Automattic, Inc.
 * @license   http://www.gnu.org/licenses/gpl-3.0.html GNU General Public License v3.0
 */

namespace WC_Braintree;

use SkyVerge\WooCommerce\PluginFramework\v5_15_10 as Framework;
use WC_Braintree\Payment_Forms\WC_Braintree_Hosted_Fields_Payment_Form;
use WC_Order;

defined( 'ABSPATH' ) or exit;

/**
 * Braintree Credit Card Gateway Class
 *
 * @since 3.0.0
 */
#[AllowDynamicProperties]
class WC_Gateway_Braintree_Credit_Card extends WC_Gateway_Braintree {


	/**
	 * 3D Secure standard mode.
	 *
	 * @var string
	 */
	const THREED_SECURE_MODE_STANDARD = 'standard';

	/**
	 * 3D Secure strict mode.
	 *
	 * @var string
	 */
	const THREED_SECURE_MODE_STRICT = 'strict';

	/**
	 * Require CSC field.
	 *
	 * @var string
	 */
	protected $require_csc;

	/**
	 * Fraud tool to use.
	 *
	 * @var string
	 */
	protected $fraud_tool;

	/**
	 * Kount merchant ID.
	 *
	 * @var string
	 */
	protected $kount_merchant_id;

	/**
	 * 3D Secure enabled.
	 *
	 * @var string
	 */
	protected $threed_secure_enabled;

	/**
	 * 3D Secure mode, standard or strict.
	 *
	 * @var string
	 */
	protected $threed_secure_mode;

	/**
	 * 3D Secure card types.
	 *
	 * @var array
	 */
	protected $threed_secure_card_types = array();

	/**
	 * 3D Secure available.
	 *
	 * @var bool
	 */
	protected $threed_secure_available;

	/**
	 * Whether this gateway can store credentials.
	 *
	 * The Credit Card gateway is permitted to store its own Braintree connection credentials.
	 *
	 * @since 3.7.0
	 * @return bool
	 */
	protected function can_gateway_store_credentials(): bool {
		return true;
	}

	/**
	 * Whether Fastlane is enabled.
	 *
	 * @since 3.7.0
	 *
	 * @var bool
	 */
	protected $enable_fastlane;


	/**
	 * Initialize the gateway
	 *
	 * @since 3.0.0
	 */
	public function __construct() {

		$supports = [
			self::FEATURE_PRODUCTS,
			self::FEATURE_CARD_TYPES,
			self::FEATURE_PAYMENT_FORM,
			self::FEATURE_TOKENIZATION,
			self::FEATURE_CREDIT_CARD_CHARGE,
			self::FEATURE_CREDIT_CARD_CHARGE_VIRTUAL,
			self::FEATURE_CREDIT_CARD_AUTHORIZATION,
			self::FEATURE_CREDIT_CARD_CAPTURE,
			self::FEATURE_DETAILED_CUSTOMER_DECLINE_MESSAGES,
			self::FEATURE_REFUNDS,
			self::FEATURE_VOIDS,
			self::FEATURE_CUSTOMER_ID,
			self::FEATURE_ADD_PAYMENT_METHOD,
			self::FEATURE_TOKEN_EDITOR,
			self::FEATURE_APPLE_PAY,
			self::FEATURE_GOOGLE_PAY,
		];

		parent::__construct(
			WC_Braintree::CREDIT_CARD_GATEWAY_ID,
			wc_braintree(),
			array(
				'method_title'       => __( 'Braintree (Credit Card)', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'method_description' => __( 'Allow customers to securely pay using their credit card via Braintree.', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'supports'           => $supports,
				'payment_type'       => self::PAYMENT_TYPE_CREDIT_CARD,
				'environments'       => $this->get_braintree_environments(),
				'shared_settings'    => $this->shared_settings_names,
				'card_types'         => array(
					'VISA'    => 'Visa',
					'MC'      => 'MasterCard',
					'AMEX'    => 'American Express',
					'DISC'    => 'Discover',
					'DINERS'  => 'Diners',
					'MAESTRO' => 'Maestro',
					'JCB'     => 'JCB',
				),
			)
		);

		// sanitize admin options before saving.
		add_filter( 'woocommerce_settings_api_sanitized_fields_braintree_credit_card', array( $this, 'filter_admin_options' ) );

		// get the client token via AJAX.
		add_filter( 'wp_ajax_wc_' . $this->get_id() . '_get_client_token', array( $this, 'ajax_get_client_token' ) );
		add_filter( 'wp_ajax_nopriv_wc_' . $this->get_id() . '_get_client_token', array( $this, 'ajax_get_client_token' ) );

		// Disable fail on duplicate payment method for test environment.
		add_filter( 'wc_braintree_api_vault_request_credit_card_options', array( $this, 'disable_fail_on_duplicate_payment_method' ) );

		// Add Fastlane dashboard link after settings are loaded.
		add_filter( 'woocommerce_settings_api_form_fields_' . $this->get_id(), array( $this, 'add_fastlane_dashboard_link' ) );
	}


	/**
	 * Enqueue credit card method specific scripts, currently:
	 *
	 * + Fraud tool library
	 *
	 * @since 3.0.0
	 * @see SV_WC_Payment_Gateway::enqueue_gateway_assets()
	 */
	public function enqueue_gateway_assets() {

		if ( $this->is_available() && $this->is_payment_form_page() ) {

			parent::enqueue_gateway_assets();

			wp_enqueue_script( 'braintree-js-hosted-fields', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/hosted-fields.min.js', array(), WC_Braintree::VERSION, true );

			if ( $this->is_3d_secure_enabled() ) {
				wp_enqueue_script( 'braintree-js-3d-secure', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/three-d-secure.min.js', array(), WC_Braintree::VERSION, true );
			}

			// Load Fastlane SDK and handler script if enabled.
			if ( $this->is_fastlane_enabled() ) {
				wp_enqueue_script( 'braintree-js-fastlane', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/fastlane.min.js', array( 'braintree-js-client' ), WC_Braintree::VERSION, true );

				// Load asset file for Fastlane script dependencies.
				$asset_path   = $this->get_plugin()->get_plugin_path() . '/assets/js/frontend/wc-braintree-fastlane.asset.php';
				$version      = WC_Braintree::VERSION;
				$dependencies = array( 'jquery', 'braintree-js-fastlane', 'wc-braintree' );

				if ( file_exists( $asset_path ) ) {
					$asset        = require $asset_path;
					$version      = isset( $asset['version'] ) ? $asset['version'] : $version;
					$dependencies = array_merge( $dependencies, isset( $asset['dependencies'] ) ? $asset['dependencies'] : array() );
				}

				// Enqueue our Fastlane handler script.
				wp_enqueue_script(
					'wc-braintree-fastlane',
					$this->get_plugin()->get_plugin_url() . '/assets/js/frontend/wc-braintree-fastlane.min.js',
					$dependencies,
					$version,
					true
				);

				// Enqueue Fastlane styles.
				wp_enqueue_style(
					'wc-braintree-fastlane',
					$this->get_plugin()->get_plugin_url() . '/assets/css/frontend/wc-braintree-fastlane.min.css',
					array(),
					WC_Braintree::VERSION
				);
			}

			// Advanced/kount fraud tool.
			if ( $this->is_advanced_fraud_tool_enabled() ) {

				// Enqueue braintree-data.js library.
				wp_enqueue_script( 'braintree-js-data-collector', 'https://js.braintreegateway.com/web/' . WC_Braintree::BRAINTREE_JS_SDK_VERSION . '/js/data-collector.min.js', array( 'braintree-js-client' ), WC_Braintree::VERSION, true );

				// Adjust the script tag to add async attribute.
				add_filter( 'clean_url', array( $this, 'adjust_fraud_script_tag' ) );

				// This script must be rendered to the page before the braintree-data.js library, hence priority 1.
				add_action( 'wp_print_footer_scripts', array( $this, 'render_fraud_js' ), 1 );
			}
		}
	}


	/**
	 * Gets the payment form JS localized script params.
	 *
	 * Adds a couple of name params to the framework base.
	 *
	 * @since 2.3.4
	 *
	 * @return array
	 */
	protected function get_payment_form_js_localized_script_params(): array {

		$params = parent::get_payment_form_js_localized_script_params();

		$params['first_name_unsupported_characters'] = esc_html__( 'First name contains unsupported characters', 'woocommerce-gateway-paypal-powered-by-braintree' );
		$params['last_name_unsupported_characters']  = esc_html__( 'Last name contains unsupported characters', 'woocommerce-gateway-paypal-powered-by-braintree' );

		// Add card brand icon URLs for Fastlane.
		$params['card_icons'] = array(
			'visa'       => $this->get_payment_method_image_url( 'visa' ),
			'mastercard' => $this->get_payment_method_image_url( 'mastercard' ),
			'amex'       => $this->get_payment_method_image_url( 'amex' ),
			'discover'   => $this->get_payment_method_image_url( 'discover' ),
			'jcb'        => $this->get_payment_method_image_url( 'jcb' ),
			'maestro'    => $this->get_payment_method_image_url( 'maestro' ),
			'dinersclub' => $this->get_payment_method_image_url( 'dinersclub' ),
			'default'    => $this->get_payment_method_image_url( 'card' ),
		);

		return $params;
	}


	/**
	 * Initializes the payment form handler.
	 *
	 * @since 2.4.0
	 *
	 * @return \WC_Braintree\Payment_Forms\WC_Braintree_Hosted_Fields_Payment_Form
	 */
	protected function init_payment_form_instance() {

		return new WC_Braintree_Hosted_Fields_Payment_Form( $this );
	}


	/**
	 * Add credit card method specific form fields, currently:
	 *
	 * + Fraud tool settings
	 *
	 * @since 3.0.0
	 * @see WC_Gateway_Braintree::get_method_form_fields()
	 * @return array
	 */
	protected function get_method_form_fields() {

		$fraud_tool_options = array(
			'basic'    => esc_html__( 'Basic', 'woocommerce-gateway-paypal-powered-by-braintree' ),
			'advanced' => esc_html__( 'Advanced (must also enable advanced fraud tools in your Braintree control panel)', 'woocommerce-gateway-paypal-powered-by-braintree' ),
		);

		// Kount is only available for manual API connections.
		if ( $this->is_kount_supported() ) {
			$fraud_tool_options['kount_direct'] = esc_html__( 'Kount Direct (need to contact Braintree support to activate this)', 'woocommerce-gateway-paypal-powered-by-braintree' );
		}

		$fields = array(

			// fraud tools.
			'fraud_settings_title' => array(
				'title' => esc_html__( 'Fraud Settings', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'type'  => 'title',
			),
			'fraud_tool'           => array(
				'title'       => esc_html__( 'Fraud Tool', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'type'        => 'select',
				'class'       => 'js-fraud-tool wc-enhanced-select',
				'desc_tip'    => esc_html__( 'Select the fraud tool you want to use. Basic is enabled by default and requires no additional configuration. Advanced requires you to enable advanced fraud tools in your Braintree control panel. To use Kount Direct you must contact Braintree support.', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				/* translators: Placeholders %1$s - opening HTML <a> link tag, closing HTML </a> link tag */
				'description' => sprintf( esc_html__( 'Read more details on fraud and verification tools in the extension %1$sdocumentation%2$s.', 'woocommerce-gateway-paypal-powered-by-braintree' ), '<a href="' . esc_url( $this->get_plugin()->get_documentation_url() ) . '#fraud-and-verification-tools">', '</a>' ),
				'options'     => $fraud_tool_options,
			),
			'kount_merchant_id'    => array(
				'title'    => esc_html__( 'Kount merchant ID', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'type'     => 'text',
				'class'    => 'js-kount-merchant-id',
				'desc_tip' => esc_html__( 'Speak with your account management team at Braintree to get this.', 'woocommerce-gateway-paypal-powered-by-braintree' ),
			),
		);

		$fields = array_merge( $fields, $this->get_3d_secure_fields() );

		$fields['fastlane_settings_title'] = [
			'title' => esc_html__( 'PayPal Fastlane', 'woocommerce-gateway-paypal-powered-by-braintree' ),
			'type'  => 'title',
		];

		$fields['enable_fastlane'] = [
			'title'       => esc_html__( 'Enable Fastlane', 'woocommerce-gateway-paypal-powered-by-braintree' ),
			'type'        => 'checkbox',
			'label'       => esc_html__( 'Enable Fastlane when available', 'woocommerce-gateway-paypal-powered-by-braintree' ),
			'description' => esc_html__( 'Fastlane must be activated in your PayPal Fastlane Dashboard. This setting only controls whether Fastlane is used on your site once it is enabled in PayPal.', 'woocommerce-gateway-paypal-powered-by-braintree' ),
			'default'     => 'no',
		];

		return array_merge( parent::get_method_form_fields(), $fields );
	}


	/**
	 * Gets the 3D Secure settings fields.
	 *
	 * @since 2.2.0
	 *
	 * @return array
	 */
	protected function get_3d_secure_fields() {

		// Braintree declares 3D Secure support for AMEX, Maestro, MasterCard, and Visa.
		$card_types = $default_card_types = array(
			Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_AMEX       => Framework\SV_WC_Payment_Gateway_Helper::payment_type_to_name( Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_AMEX ),
			Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_MAESTRO    => Framework\SV_WC_Payment_Gateway_Helper::payment_type_to_name( Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_MAESTRO ),
			Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_MASTERCARD => Framework\SV_WC_Payment_Gateway_Helper::payment_type_to_name( Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_MASTERCARD ),
			Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_VISA       => Framework\SV_WC_Payment_Gateway_Helper::payment_type_to_name( Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_VISA ),
		);

		// exclude American Express by default, since that requires additional merchant configuration, but still let people enabled it.
		unset( $default_card_types[ Framework\SV_WC_Payment_Gateway_Helper::CARD_TYPE_AMEX ] );

		$fields = array(
			'threed_secure_title'      => array(
				'title'       => esc_html__( '3D Secure', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'type'        => 'title',
				/* translators: Placeholders %1$s - opening HTML <a> link tag, closing HTML </a> link tag */
				'description' => sprintf( esc_html__( '3D Secure benefits cardholders and merchants by providing an additional layer of verification using Verified by Visa, MasterCard SecureCode, and American Express SafeKey. %1$sLearn more about 3D Secure%2$s.', 'woocommerce-gateway-paypal-powered-by-braintree' ), '<a href="' . esc_url( $this->get_plugin()->get_documentation_url() ) . '#3d-secure' . '">', '</a>' ),
			),
			'threed_secure_mode'       => array(
				'title'   => esc_html__( 'Level', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'type'    => 'select',
				'class'   => 'wc-enhanced-select',
				'label'   => esc_html__( 'Only accept payments when the liability is shifted', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'default' => self::THREED_SECURE_MODE_STANDARD,
				'options' => array(
					self::THREED_SECURE_MODE_STANDARD => esc_html__( 'Standard', 'woocommerce-gateway-paypal-powered-by-braintree' ),
					self::THREED_SECURE_MODE_STRICT   => esc_html__( 'Strict', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				),
			),
			'threed_secure_card_types' => array(
				'title'       => esc_html__( 'Supported Card Types', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'type'        => 'multiselect',
				'class'       => 'wc-enhanced-select',
				'description' => esc_html__( '3D Secure validation will only occur for these cards.', 'woocommerce-gateway-paypal-powered-by-braintree' ),
				'default'     => array_keys( $default_card_types ),
				'options'     => $card_types,
			),
		);

		return $fields;
	}


	/**
	 * Override the standard CSC setting to instead indicate that it's a combined
	 * Display & Require CSC setting. Braintree doesn't allow the CSC field to be
	 * present without also requiring it to be populated.
	 *
	 * @since 3.0.0
	 * @param array $form_fields gateway form fields.
	 * @return array $form_fields gateway form fields
	 */
	protected function add_csc_form_fields( $form_fields ) {

		$form_fields['require_csc'] = array(
			'title'   => esc_html__( 'Card Verification (CSC)', 'woocommerce-gateway-paypal-powered-by-braintree' ),
			'label'   => esc_html__( 'Display and Require the Card Security Code (CVV/CID) field on checkout', 'woocommerce-gateway-paypal-powered-by-braintree' ),
			'type'    => 'checkbox',
			'default' => 'yes',
		);

		return $form_fields;
	}


	/**
	 * Returns true if the CSC field should be displayed and required at checkout
	 *
	 * @since 3.0.0
	 */
	public function is_csc_required() {

		return 'yes' === $this->require_csc;
	}


	/**
	 * Override the standard CSC enabled method to return the value of the csc_required()
	 * check since enabled/required is the same for Braintree
	 *
	 * @since 3.0.0
	 * @return bool
	 */
	public function csc_enabled() {

		return $this->is_csc_required();
	}


	/**
	 * Render credit card method specific JS to the settings page, currently:
	 *
	 * + Hide/show Fraud tool kount merchant ID setting
	 *
	 * @since 3.0.0
	 * @see WC_Gateway_Braintree::admin_options()
	 */
	public function admin_options() {

		parent::admin_options();

		ob_start();
		?>
		// show/hide the kount merchant ID field based on the fraud tools selection
		$( 'select.js-fraud-tool' ).change( function() {

			var $kount_id_row = $( '.js-kount-merchant-id' ).closest( 'tr' );

			if ( 'kount_direct' === $( this ).val() ) {
				$kount_id_row.show();
			} else {
				$kount_id_row.hide();
			}
		} ).change();
		<?php

		wc_enqueue_js( ob_get_clean() );

		// 3D Secure setting handler
		ob_start();
		?>

		if ( ! <?php echo (int) $this->is_3d_secure_available(); ?> ) {
			$( '#woocommerce_braintree_credit_card_threed_secure_title' ).hide().next( 'p' ).hide().next( 'table' ).hide();
		}

		<?php

		wc_enqueue_js( ob_get_clean() );
	}


	/**
	 * Returns true if the payment nonce is provided when not using a saved
	 * payment token. Note this can't be moved to the parent class because
	 * validation is payment-type specific.
	 *
	 * @since 3.0.0
	 * @param boolean $is_valid true if the fields are valid, false otherwise.
	 * @return boolean true if the fields are valid, false otherwise
	 */
	protected function validate_credit_card_fields( $is_valid ) {

		return $this->validate_payment_nonce( $is_valid );
	}


	/**
	 * Returns true if the payment nonce is provided when using a saved payment method
	 * and CSC is required.
	 *
	 * @since 3.2.0
	 * @param string $csc the card security code.
	 * @return bool
	 */
	protected function validate_csc( $csc ) {

		return $this->validate_payment_nonce( true );
	}


	/**
	 * Add credit card specific data to the order, primarily for 3DS support
	 *
	 * 1) $order->payment->is_3ds_required - require 3DS for every transaction
	 * 2) $order->payment->use_3ds_nonce - use nonce instead of token for transaction
	 *
	 * @since 3.0.0
	 * @param \WC_Order|int $order order.
	 * @return \WC_Order
	 */
	public function get_order( $order ) {

		$order = parent::get_order( $order );

		// ensure the card type is normalized to FW format.
		if ( empty( $order->payment->card_type ) ) {
			$order->payment->card_type = Framework\SV_WC_Payment_Gateway_Helper::normalize_card_type( Framework\SV_WC_Helper::get_posted_value( 'wc-' . $this->get_id_dasherized() . '-card-type' ) );
		}

		// add information for 3DS transactions, note that server-side verification
		// has already been checked in validate_fields() and passed.
		if ( $this->is_3d_secure_enabled() && Framework\SV_WC_Helper::get_posted_value( 'wc-' . $this->get_id_dasherized() . '-3d-secure-enabled' ) && ( ! $order->payment->card_type || $this->card_type_supports_3d_secure( $order->payment->card_type ) ) ) {

			// indicate if 3DS should be required for every transaction -- note
			// this will result in a gateway rejection for *every* transaction
			// that doesn't have a liability shift.
			$order->payment->is_3ds_required = $this->is_3d_secure_liability_shift_always_required();

			// when using a saved payment method for a transaction that has been
			// 3DS verified, indicate the nonce should be used instead, which
			// passes the 3DS verification details to Braintree.
			if ( Framework\SV_WC_Helper::get_posted_value( 'wc-' . $this->get_id_dasherized() . '-3d-secure-verified' ) && ! empty( $order->payment->token ) && ! empty( $order->payment->nonce ) ) {
				$order->payment->use_3ds_nonce = true;
			}
		}

		return $order;
	}


	/**
	 * Overrides the parent method to set the $order->payment members that are
	 * usually set prior to payment with a direct gateway. Because Braintree uses
	 * a nonce, we don't have access to the card info (last four, expiry date, etc)
	 * until after the transaction is processed.
	 *
	 * @since 3.0.0
	 * @see SV_WC_Payment_Gateway_Direct::do_credit_card_transaction()
	 * @param \WC_Order                                          $order the order object.
	 * @param \WC_Braintree_API_Credit_Card_Transaction_Response $response optional credit card transaction response.
	 * @return \WC_Braintree_API_Credit_Card_Transaction_Response
	 * @throws Framework\SV_WC_Plugin_Exception
	 */
	protected function do_credit_card_transaction( $order, $response = null ) {

		if ( is_null( $response ) ) {

			$response = $this->perform_credit_card_charge( $order ) ? $this->get_api()->credit_card_charge( $order ) : $this->get_api()->credit_card_authorization( $order );

			if ( $response->transaction_approved() ) {
				$order->payment->account_number = $response->get_masked_number();
				$order->payment->last_four      = $response->get_last_four();
				$order->payment->card_type      = Framework\SV_WC_Payment_Gateway_Helper::card_type_from_account_number( $response->get_masked_number() );
				$order->payment->exp_month      = $response->get_exp_month();
				$order->payment->exp_year       = $response->get_exp_year();
			}
		}

		return parent::do_credit_card_transaction( $order, $response );
	}


	/**
	 * Adds any gateway-specific transaction data to the order, for credit cards
	 * this is:
	 *
	 * + risk data (if available)
	 * + 3D Secure data (if available)
	 *
	 * @since 3.0.0
	 * @see SV_WC_Payment_Gateway_Direct::add_transaction_data()
	 * @param \WC_Order                                          $order the order object.
	 * @param \WC_Braintree_API_Credit_Card_Transaction_Response $response transaction response.
	 */
	public function add_payment_gateway_transaction_data( $order, $response ) {

		// add risk data.
		if ( $this->is_advanced_fraud_tool_enabled() && $response->has_risk_data() ) {
			$this->update_order_meta( $order, 'risk_id', $response->get_risk_id() );
			$this->update_order_meta( $order, 'risk_decision', $response->get_risk_decision() );
		}

		// add 3D secure data.
		if ( $this->is_3d_secure_enabled() && $response->has_3d_secure_info() ) {
			$this->update_order_meta( $order, 'threeds_status', $response->get_3d_secure_status() );
		}
	}


	/** Apple Pay Methods *********************************************************************************************/


	/**
	 * Gets the order for Apple Pay transactions.
	 *
	 * @since 2.2.0
	 *
	 * @param \WC_Order                                                  $order order object.
	 * @param Framework\SV_WC_Payment_Gateway_Apple_Pay_Payment_Response $response response object.
	 * @return \WC_Order
	 */
	public function get_order_for_apple_pay( \WC_Order $order, Framework\SV_WC_Payment_Gateway_Apple_Pay_Payment_Response $response ) {

		$order = parent::get_order_for_apple_pay( $order, $response );

		/** @var \WC_Braintree\Apple_Pay\API\Payment_Response $response */
		$order->payment->nonce = $response->get_braintree_nonce();

		return $order;
	}

	/** Google Pay Methods *********************************************************************************************/

	/**
	 * Gets the order for Google Pay transactions.
	 *
	 * @since 3.4.0
	 *
	 * @param \WC_Order   $order order object.
	 * @param mixed|array $response authorized payment response data.
	 * @return \WC_Order
	 */
	public function get_order_for_google_pay( WC_Order $order, $response ): WC_Order {

		$order = parent::get_order_for_google_pay( $order, $response );

		// SkyVerge does not have a Google Pay response object wrapper, so we need to parse the tokenization data manually.
		if ( isset( $response ) && is_array( $response ) ) {
			$token = json_decode( $response['paymentMethodData']['tokenizationData']['token'] ?? '', true );
			if ( is_array( $token ) && isset( $token['androidPayCards'][0] ) ) {
				$order->payment->nonce = $token['androidPayCards'][0]['nonce'] ?? null;
			}
		}

		return $order;
	}

	/** Refund/Void feature ***************************************************/


	/**
	 * Void a transaction instead of refunding when it has a submitted for settlement
	 * status. Note that only credit card transactions are eligible for this, as
	 * PayPal transactions are settled immediately
	 *
	 * @since 3.0.0
	 * @param \WC_Order                  $order order.
	 * @param \WC_Braintree_API_Response $response refund response.
	 * @return bool true if the transaction should be transaction
	 */
	protected function maybe_void_instead_of_refund( $order, $response ) {

		// Braintree conveniently returns a validation error code that indicates a void can be performed instead of refund.
		return $response->has_validation_errors() && in_array( \Braintree\Error\Codes::TRANSACTION_CANNOT_REFUND_UNLESS_SETTLED, array_keys( $response->get_validation_errors() ) );
	}


	/** Add Payment Method feature ********************************************/


	/**
	 * Save verification transactional data when a customer
	 * adds a new credit via the add payment method flow
	 *
	 * @since 3.0.0
	 * @param \WC_Braintree_API_Customer_Response|\WC_Braintree_API_Payment_Method_Response $response Payment method response.
	 * @return array
	 */
	protected function get_add_payment_method_payment_gateway_transaction_data( $response ) {

		$data = array();

		// transaction ID.
		if ( $response->get_transaction_id() ) {
			$data['trans_id'] = $response->get_transaction_id();
		}

		if ( $this->is_advanced_fraud_tool_enabled() && $response->has_risk_data() ) {
			$data['risk_id']       = $response->get_risk_id();
			$data['risk_decision'] = $response->get_risk_decision();
		}

		return $data;
	}


	/** Fraud Tool feature ****************************************************/


	/**
	 * Renders the fraud tool script.
	 *
	 * Note this is hooked to load at high priority (1) so that it's rendered prior to the braintree.js/braintree-data.js scripts being loaded
	 *
	 * @link https://developers.braintreepayments.com/guides/advanced-fraud-tools/overview
	 *
	 * @internal
	 *
	 * @since 3.0.0
	 */
	public function render_fraud_js() {

		$environment = 'BraintreeData.environments.' . ( $this->is_test_environment() ? 'sandbox' : 'production' );

		if ( $this->is_kount_direct_enabled() && $this->get_kount_merchant_id() ) {
			$environment .= '.withId( kount_id )'; // kount_id will be defined before this is output.
		}

		// TODO: consider moving this to it's own file.

		?>
		<script>
			( function( $ ) {

				var form_id;
				var kount_id = '<?php echo esc_js( $this->get_kount_merchant_id() ); ?>';

				if ( $( 'form.checkout' ).length ) {

					// checkout page
					// WC does not set a form ID, use an existing one if available
					form_id = $( 'form.checkout' ).attr( 'id' ) || 'checkout';

					// otherwise set it ourselves
					if ( 'checkout' === form_id ) {
						$( 'form.checkout' ).attr( 'id', form_id );
					}

				} else if ( $( 'form#order_review' ).length ) {

					// checkout > pay page
					form_id = 'order_review'

				} else if ( $( 'form#add_payment_method' ).length ) {

					// add payment method page
					form_id = 'add_payment_method'
				}

				if ( ! form_id ) {
					return;
				}

				window.onBraintreeDataLoad = function () {
					BraintreeData.setup( '<?php echo esc_js( $this->get_merchant_id() ); ?>', form_id, <?php echo esc_js( $environment ); ?> );
				}

			} ) ( jQuery );
		</script>
		<?php
	}


	/**
	 * Add an async attribute to the braintree-data.js script tag, there's no
	 * way to do this when enqueing so it must be done manually here
	 *
	 * @since 3.0.0
	 * @param string $url cleaned URL from esc_url().
	 * @return string
	 */
	public function adjust_fraud_script_tag( $url ) {

		if ( Framework\SV_WC_Helper::str_exists( $url, 'braintree-data.js' ) ) {

			$url = "{$url}' async='true";
		}

		return $url;
	}


	/**
	 * Return the enabled fraud tool setting, either 'basic', 'advanced', or
	 * 'kount_direct'
	 *
	 * @since 3.0.0
	 * @return string
	 */
	public function get_fraud_tool() {

		return $this->fraud_tool;
	}


	/**
	 * Return true if advanced fraud tools are enabled (either advanced or
	 * kount direct)
	 *
	 * @since 3.0.0
	 * @return bool
	 */
	public function is_advanced_fraud_tool_enabled() {

		return 'advanced' === $this->get_fraud_tool() || 'kount_direct' === $this->get_fraud_tool();
	}


	/**
	 * Return true if the Kount Direct fraud tool is enabled
	 *
	 * @since 3.0.0
	 * @return bool
	 */
	public function is_kount_direct_enabled() {

		return $this->is_kount_supported() && 'kount_direct' === $this->get_fraud_tool();
	}


	/**
	 * Get the Kount merchant ID, only used when the Kount Direct fraud tool
	 * is enabled
	 *
	 * @since 3.0.0
	 * @return string
	 */
	public function get_kount_merchant_id() {

		return $this->kount_merchant_id;
	}


	/**
	 * Determines if Kount is supported.
	 *
	 * @since 2.1.0
	 *
	 * @return bool
	 */
	public function is_kount_supported() {

		return $this->is_connected_manually();
	}


	/** 3D Secure feature *****************************************************/


	/**
	 * Determines if 3D Secure is available for the merchant account.
	 *
	 * @since 2.2.0
	 *
	 * @return bool
	 */
	public function is_3d_secure_available() {

		if ( null === $this->threed_secure_available ) {

			// we assume this is true so users aren't locked out when there are API issues.
			$this->threed_secure_available = true;

			if ( $this->is_configured() ) {

				// try and get the remote merchant configuration so the settings accurately display which services are available.
				try {

					$response = $this->get_api()->get_merchant_configuration();

					$this->threed_secure_available = $response->is_3d_secure_enabled();

				} catch ( Framework\SV_WC_API_Exception $exception ) {

					// there was a problem with the API, so nothing we can do but log the issues.
					$this->add_debug_message( "Could not determine the merchant's 3D Secure configuration. {$exception->getMessage()}" );
				}
			}
		}

		return $this->threed_secure_available;
	}


	/**
	 * Determines if 3D secure is enabled.
	 *
	 * We've removed the 3D Secure setting, and its availability is determined by the connected account, however this
	 * allows users to disable it completely via a filter should they want to.
	 *
	 * @since 2.0.0
	 *
	 * @return bool
	 */
	public function is_3d_secure_enabled() {

		/**
		 * Filters whether 3D Secure is enabled.
		 *
		 * @since 2.2.0
		 *
		 * @param bool $enabled whether 3D Secure is enabled
		 */
		return apply_filters( 'wc_' . $this->get_id() . '_enable_3d_secure', true );
	}


	/**
	 * Determines if 3D Secure is in strict mode.
	 *
	 * @since 2.2.0
	 *
	 * @return bool
	 */
	public function is_3d_secure_strict() {

		return self::THREED_SECURE_MODE_STRICT === $this->get_3d_secure_mode();
	}


	/**
	 * Gets the currently configured 3D Secure mode.
	 *
	 * @since 2.2.0
	 *
	 * @return string
	 */
	public function get_3d_secure_mode() {

		return $this->threed_secure_mode;
	}


	/**
	 * Return true if a liability shift is required for *every* 3DS-eligible
	 * transaction (even for those where liability shift wasn't possible, e.g.
	 * the cardholder was not enrolled)
	 *
	 * @since 2.0.0
	 *
	 * @return bool
	 */
	public function is_3d_secure_liability_shift_always_required() {

		/**
		 * Braintree Credit Card Always Require 3D Secure Liability Shift Filter.
		 *
		 * Allow actors to require a liability shift for every 3DS-eligible
		 * transaction, regardless of whether it was possible or not.
		 *
		 * @since 2.0.0
		 *
		 * @param bool $require
		 * @param \WC_Gateway_Braintree_Credit_Card $this instance
		 * @return bool true to require the liability shift
		 */
		return (bool) apply_filters( 'wc_' . $this->get_id() . '_always_require_3ds_liability_shift', false, $this );
	}


	/**
	 * Determines if the passed card type supports 3D Secure.
	 *
	 * This checks the card types configured in the settings.
	 *
	 * @since 2.2.0
	 *
	 * @param string $card_type card type.
	 * @return bool
	 */
	public function card_type_supports_3d_secure( $card_type ) {

		return in_array( Framework\SV_WC_Payment_Gateway_Helper::normalize_card_type( $card_type ), $this->get_3d_secure_card_types(), true );
	}


	/**
	 * Gets the card types to validate with 3D Secure.
	 *
	 * @since 2.2.0
	 *
	 * @return array
	 */
	public function get_3d_secure_card_types() {

		return (array) $this->get_option( 'threed_secure_card_types' );
	}


	/**
	 * Get a payment nonce for an existing payment token so that 3D Secure verification
	 * can be performed on a saved payment method
	 *
	 * @link https://developers.braintreepayments.com/guides/3d-secure/server-side/php#vaulted-credit-card-nonces
	 *
	 * @since 2.0.0
	 *
	 * @param \WC_Braintree_Payment_Method $token payment method.
	 * @return string nonce
	 */
	public function get_3d_secure_nonce_for_token( $token ) {
		$token_data = $this->get_3d_secure_data_for_token( $token );
		return $token_data['nonce'] ?? null;
	}

	/**
	 * Get a payment nonce and bin data for an existing payment token
	 * So that 3D Secure verification can be performed on a saved payment method
	 *
	 * @link https://developers.braintreepayments.com/guides/3d-secure/server-side/php#vaulted-credit-card-nonces
	 *
	 * @since 3.0.4
	 *
	 * @param \WC_Braintree_Payment_Method $token payment method.
	 * @return array 3d secure nonce and bin data
	 */
	public function get_3d_secure_data_for_token( $token ) {
		$data = array(
			'nonce' => null,
			'bin'   => null,
		);

		try {

			$result = $this->get_api()->get_nonce_from_payment_token( $token->get_id() );

			$data['nonce'] = $result->get_nonce();
			$data['bin']   = $result->get_bin();

		} catch ( Framework\SV_WC_Plugin_Exception $e ) {
			$this->add_debug_message( $e->getMessage(), 'error' );
		}

		return $data;
	}


	/**
	 * If 3D Secure is enabled, perform validation of the provided nonce. This
	 * complements the client-side check and must be performed server-side. Note
	 * that this is done in validate_fields() and not a later validation check
	 * as 3D Secure transactions also apply when using a saved payment token.
	 *
	 * @since 3.0.0
	 * @see SV_WC_Payment_Gateway_Direct::validate_fields()
	 * @return bool true if 3DS validations pass (or 3DS not enabled)
	 */
	public function validate_fields() {

		$is_valid = parent::validate_fields();

		// no additional validation if 3D Secure was disabled
		// we check both the gateway method (filtered) and if the client-side JS validated 3D Secure (hidden input).
		if ( ! $is_valid || ! $this->is_3d_secure_enabled() || ! Framework\SV_WC_Helper::get_posted_value( 'wc-' . $this->get_id_dasherized() . '-3d-secure-enabled' ) ) {
			return $is_valid;
		}

		$card_type = Framework\SV_WC_Helper::get_posted_value( 'wc-' . $this->get_id_dasherized() . '-card-type' );

		// nonce must always be present for validation.
		if ( Framework\SV_WC_Helper::get_posted_value( 'wc_braintree_credit_card_payment_nonce' ) && ( ! $card_type || $this->card_type_supports_3d_secure( $card_type ) ) ) {

			$error = false;

			try {

				$payment_method = $this->get_api()->get_payment_method_from_nonce( Framework\SV_WC_Helper::get_posted_value( 'wc_braintree_credit_card_payment_nonce' ) );

				if ( $payment_method->has_3d_secure_info() ) {

					$decline_statuses = [
						'authenticate_signature_verification_failed',
						'authenticate_failed',
					];

					if ( $this->is_3d_secure_strict() ) {

						$decline_statuses = array_merge(
							$decline_statuses,
							[
								'unsupported_card',
								'lookup_error',
								'lookup_not_enrolled',
								'authentication_unavailable',
								'authenticate_unable_to_authenticate',
								'authenticate_error',
							]
						);

						if ( $payment_method->get_3d_secure_liability_shift_possible() && ! $payment_method->get_3d_secure_liability_shifted() ) {
							$decline_statuses[] = 'lookup_enrolled';
						}
					}

					if ( in_array( $payment_method->get_3d_secure_status(), $decline_statuses, true ) ) {
						$error = esc_html__( 'We cannot process your order with the payment information that you provided. Please use an alternate payment method.', 'woocommerce-gateway-paypal-powered-by-braintree' );
					}
				}
			} catch ( Framework\SV_WC_Plugin_Exception $e ) {

				$this->add_debug_message( $e->getMessage(), 'error' );

				$error = esc_html__( 'Oops, there was a temporary payment error. Please try another payment method or contact us to complete your transaction.', 'woocommerce-gateway-paypal-powered-by-braintree' );
			}

			if ( $error ) {
				wc_add_notice( $error, 'error' );
				$is_valid = false;
			}
		}

		return $is_valid;
	}

	/**
	 * Disable fail on duplicate payment method for test environment.
	 *
	 * @param array $options The credit card options.
	 * @return array
	 */
	public function disable_fail_on_duplicate_payment_method( $options ) {
		if ( $this->is_test_environment() && isset( $options['failOnDuplicatePaymentMethod'] ) ) {
			$options['failOnDuplicatePaymentMethod'] = false;
		}
		return $options;
	}

	/**
	 * Adds the Fastlane dashboard link to the enable_fastlane field description.
	 *
	 * This filter runs after settings are loaded, so we can access merchant ID.
	 *
	 * @since 3.7.0
	 *
	 * @param array $form_fields The form fields array.
	 * @return array
	 */
	public function add_fastlane_dashboard_link( $form_fields ) {
		if ( ! isset( $form_fields['enable_fastlane'] ) ) {
			return $form_fields;
		}

		$dashboard_url = $this->get_fastlane_dashboard_url();

		if ( $dashboard_url ) {
			$form_fields['enable_fastlane']['description'] .= ' <a href="' . esc_url( $dashboard_url ) . '" target="_blank" rel="noopener noreferrer">' . esc_html__( 'Manage Fastlane in PayPal Dashboard', 'woocommerce-gateway-paypal-powered-by-braintree' ) . '</a>.';
		}

		return $form_fields;
	}

	/**
	 * Gets the Fastlane Dashboard URL.
	 *
	 * @since 3.7.0
	 *
	 * @return string|null The dashboard URL or null if merchant ID is not available.
	 */
	protected function get_fastlane_dashboard_url() {
		$merchant_id = $this->get_merchant_id();

		if ( empty( $merchant_id ) ) {
			return null;
		}

		$environment = $this->get_environment();

		if ( 'sandbox' === $environment ) {
			return sprintf( 'https://sandbox.braintreegateway.com/merchants/%s/customer-checkout', $merchant_id );
		}

		return sprintf( 'https://braintreegateway.com/merchants/%s/customer-checkout', $merchant_id );
	}

	/**
	 * Determines whether PayPal Fastlane is enabled.
	 *
	 * Fastlane is only available for guest shoppers. Logged-in users will see
	 * the regular hosted credit card fields to prevent the store user identity
	 * from conflicting with the Fastlane identity.
	 *
	 * Fastlane is also disabled when the cart contains a subscription and
	 * checkout requires manual password creation (i.e. "Allow subscription
	 * customers to create an account during checkout" is enabled but "Send
	 * password setup link" is not). In that case WooCommerce renders a password
	 * field that Fastlane's UI cannot accommodate.
	 *
	 * @since 3.7.0
	 *
	 * @return bool
	 */
	public function is_fastlane_enabled() {

		// Fastlane is only available to guest shoppers.
		if ( is_user_logged_in() ) {
			return false;
		}

		if ( 'yes' !== get_option( 'woocommerce_enable_guest_checkout' ) ) {
			return false;
		}

		// Disable Fastlane when subscription checkout requires manual password creation.
		if (
			$this->cart_contains_subscription()
			&& 'yes' === get_option( 'woocommerce_enable_signup_from_checkout_for_subscriptions', 'no' )
			&& 'yes' !== get_option( 'woocommerce_registration_generate_password' )
		) {
			return false;
		}

		return 'yes' === $this->enable_fastlane;
	}
}
