Zen Cart v1.5.5f
Site was upgraded about a month ago from v1.5.4 to 1.5.5f
We had our ISP do the upgrade and they set up a test site so assume it was an official upgrade procedure.
We use plug-ins Cross-Sell (X-Sell), Image Handler, Flexible Footer Menu, Wishlist, Westminister theme.
Our problem is payment-related to the Square 0.94 plug-in. We also have Check/Money Order, PayPal Express Checkout enabled (green). Authorize.net (AIM) and COD options are yellow; all others in Payment Module are red.
PHP Version 5.6.37 ; mysqlnd 5.0.11-dev - 20120503 - $Id:
Everything was working as expected until we needed a new Access Token for our Square account about a month after the upgrade. We have updated these tokens in the past with no problems prior to the recent upgrade. We successfully replaced our Personal Access Token in our Square account (and received confirmation of that within Square), copied the new token into our Zen Cart Square payment module, and updated the module. However, we are still getting the following error via e-mail with every customer who tries to place an order paying via credit card:
Results Received back from Square: Array
(
[401] => [HTTP/1.1 401 Unauthorized] {"errors":[{"category":"AUTHENTICATION_ERROR","code":"ACCESS_TOKEN_REVOKED","detail":"The provided OAuth access token has been revoked."}]}
)
We have spoken with Square and they said the problem must be in the Zen Cart module because we are able to manually input orders successfully via the virtual terminal within our Square account. We have contacted our ISP about this and received this response:
"There has been no update to server recently. However, we have found that shopping cart does shift to HTTPS upon checkout, so that may be a factor.
"We have checked the six possible conditions listed under "Problems with OAuth Token Generation" at - https://www.zen-cart.com/content.php?349-Square-Payments-for-Zen-Cart&styleid=3.
"None of these conditions are valid in this case.The files concerned have not been modified in months, and there is no .htredirect that is forcing redirects.
"As per the HTTP and HTTPS logs for holymtn.com for "square_handler.php", which Square accesses to complete transactions. In the past 2 weeks, there have been zero attempts to access this file from the outside. This suggests that either the plugin is misconfigured, or there is another error preventing Square from accessing the URL.
"At this point I think that Square should be contacted, as I have not found anything server-side that is generating errors."
We have replaced the access tokens three times but there has been no change in results.
We have read through the FAQs and searched for an answer in the forum area but without success. Can you please help? Here's our URL:
https://www.holymtn.com/catalog
Thank you in advance for any light you can shed on this.