Lets say I make a call to create a subscription, then redirect the user to paypal.com to fund the subscription and they close their browser. Then 2 years later, they decide to subscribe. Do I need to create a new subscription or can I still use their original subscription_id?
... View more
What is best practice for ensuring that our webhook events are only coming from paypal.com? Should we simply ensure that the domain of the incoming is paypal.com or is use an ip range? Or other means?
... View more
When to know that the user has paid for a subscription? When paypal redirects user to return_url? Or do we need to wait a little longer for the PAYMENT.SALE.COMPLETED with billing_agreement_id that matches the subscription_id?
... View more