Ghost: Email mismatch bug with google pay in members payment flow

[filmstorm]

Hi there,

I have noticed this major flaw in the payment flow inside Ghost for Stripe.

Issue Summary

For this example, I have a user signed up for a free account in Ghost with email: [email protected]

When the user [email protected] loads checkout to pay for their chosen upgrade subscription, and they choose to pay with Google Pay, if their email address associated with Google Pay is different i.e [email protected], to the email address signed up through the Ghost site, after payment is completed the user is set up with another account and not the one they already have with Ghost.

So the user now has two accounts but ghost redirects to the home page and reports that the user was signed up successfully. If the user then goes to their account it says they are still a free member and not paid - this causes confusion as they have been charged but not linked correctly.

To Reproduce

1. Sign up for a free account on ghost using one email i.e [email protected]
2. Go to upgrade the membership in Ghost and try to pay with Google Pay which uses another email address on their file i.e, [email protected]
3. After test payment is successful Ghost will redirect to the homepage and show successful subscription notification.
4. Go to account again and see that it still says free for member - when in fact they have paid. (As it has set up another account instead of linking to the current one)

Technical details:

• Ghost Version: 3.12.1

[pascalandy]

+1 since I upgraded to v3.12.1

The subscriptions were good and now stripe webhook can't push the confirmation to Ghost.

stripe dashboard

stripe email error

Thanks!

[naz]

@pascalandy is the webhook failure you are experiencing related to an email mismatch as well or is it something else?

[filmstorm]

My problem occurs with a fully functional email setup- using Mailgun for all events.

[pascalandy]

@gargol I'm snot sure to understand what you mean by an email mismatch here.

is the webhook failure you are experiencing related to an email mismatch as well or is it something else?

Also my Mailgun's credentials and API keys are running smoothly since more than 2 years.

[kevinansfield]

@pascalandy the question was to determine if your report is related to this issue. What you've provided so far suggests it isn't, can you move to the forum to try and debug separately please?

[pascalandy]

Oh I see. I have a "Major Bug for Members Payment Flow in Stripe" but it's not the same scenario. Will document separately. Thanks!

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[matthanley]

@allouis is this still an issue now that #12055 is closed?

[allouis]

I haven't replicated this yet, but I don't think the fix for #12055 will have affected this