[Bug]: Late AUTHORISATION after initial REFUSED leads to paid canceled orders

[thomascharbit]

Description

Late AUTHORISATION after initial REFUSED leads to paid canceled orders

Steps to reproduce

1. Customer submits a payment.
2. Adyen returns REFUSED (e.g. insufficient funds).
3. Magento cancels the order after receiving the REFUSED webhook.
4. Shortly afterwards, the same payment is successfully authorized.
5. Adyen sends the successful AUTHORISATION webhook.
6. Because the order is already Canceled, Magento ignores the authorization since cancellation is a terminal state.

Actual behavior

The customer is successfully charged, but the Magento order remains canceled and is never fulfilled.

This creates a critical situation where:

• the customer has paid,
• the merchant has received the funds,
• but the order is canceled and may never be shipped unless someone manually detects the issue.

Expected behavior

The Magento integration should handle this scenario more gracefully.

Maybe avoid immediately canceling the order on an initial REFUSED if a later authorization is still possible or forbid later authorization if not supported by Magento.

Code snippet or screenshots (if applicable)

No response

Adyen Magento Plugin version

10.10.2

Magento version

2.4.8-p5

Operating System

Linux

Browser (if applicable)

No response

Additional context and logs

No response