PayPal RESTful API Payment Module

[lat9]

OK, so... If my understanding is correct, there's no 3DS with this module? I'm looking at the API docs and it looks like SCA_ALWAYS means 3DS is always triggered, but then irrelevant of the response, this module lets the transaction through?

Could you point me in the right direction as to where to place the code to check their 3DS response and either proceed or decline the transaction based on 3DS response?

There is 3DS support. PayPal will send a 3DS request if it warrants it. That comes back through the webhook in the root.

See this PayPal testing documentation for details: https://developer.paypal.com/api/res.../card-testing/

[Jeff_Mash]

Cindy - Something appears to be happening right now, and I'm not sure if anyone else is experiencing this. 1.5.8a running the 1.0.5 version of the module.

I just noticed between last night and today that the module is disabled (after working fine).

I just enabled it again, and moved a pending (authorized only) order to a new ZenCart status (processing), and the module disabled again.

It gave this message: " The live credentials for the paypalr payment module are invalid. The payment module has been automatically disabled."

I logged into PayPal's Developer Portal and noticed that the setting was on Sandbox instead of LIVE (we didn't change this, so I don't know why it was on Sandbox mode).

I put it back to live mode, and made sure the credentials were correct in the module. But it keeps disabling. HELP!

EDIT - When I look in PayPal and edit the credentials to see the details, I see this:



Could that be the issue, and what would cause that?

[barco57]

Please use the curl tester at YOURDOMAIN.COM/extras/curltester.php to test over and over again to see if you get intermittent result on connection for "PayPal Express/Pro Server" and the "PayPal Express/Pro Sandbox"

[Jeff_Mash]

Please use the curl tester at YOURDOMAIN.COM/extras/curltester.php to test over and over again to see if you get intermittent result on connection for "PayPal Express/Pro Server" and the "PayPal Express/Pro Sandbox"

It appears to be failing in some areas....see screenshot.

[balihr]

There is 3DS support. PayPal will send a 3DS request if it warrants it. That comes back through the webhook in the root.

See this PayPal testing documentation for details: https://developer.paypal.com/api/res.../card-testing/

Thanks Cindy. I've spent all day trying to get this to work, but whatever I do, PayPal always responds with 3ds_return, even when I cancel the transaction during 3DS verification. I give up in hope someone smarter than me (it's not like I've set the bar high...) sorts it out in the future.

Based on what I can tell, 3DS is there, but not working. Since the module isn't checking for the 3DS response nor the EnrollmentStatus, Authentication_Status and LiabilityShift parameters at all, all transactions are authorized by default (speaking of 3DS only), meaning all liability falls down to the merchant. Please correct me if I'm wrong.

[Jeff_Mash]

In case anyone else is having CURL Connection Issues to the PayPal REST server.......

The issue in our case was that the FIREWALL was blocking a list of countries that are high risk for hacking, fraud, and malicious behavior. It turns out that RUSSIA being in the CC_DENY list for our firewall was the issue.

Why? No idea. Russia (RU) has been in our ban list for over a year with no issue. But suddenly, as of February 19th, 2025, it appears that there is some kind of relationship between Paypal REST servers and Russia.

When we REMOVED the "RU" country from CC_DENY on our firewall, wallah! We could connect to the PayPal REST server. When we put RU back on the list, the connection couldn't be made.

Hopefully that can help someone else out there. Thanks to Cindy for helping to rule out all the other issues we thought it could be. <3

[DrByte]

There are reports from several merchants that the intermittent issue happening earlier today and yesterday may be resolved.

Hopefully it has indeed been fixed. My last interaction with PayPal about it indicated that it was being escalated to a senior engineer to investigate.

[lat9]

v1.1.0 of the PayPal RESTful payment module is now available for download: https://www.zen-cart.com/downloads.php?do=file&id=2382

This release contains changes associated with the following GitHub issues:

#24: Display card payments' AVS/CVV status in the admin.
#48: Correct function signature.
#25: Add `Auth Only (Card Only)` transaction type.
#49: Add setting to enable `SCA_ALWAYS` on card payments and capture 3DS status from PayPal.

[brittainmark]

Is Update from 1.0.5 just a straight overwrite of the existing files? Or do I need to uninstall and reinstall?

[brittainmark]

Ignore me just found the read me. Simply overwrite the existing installation. Thanks