ACP2E-2055: Duplicate orders with same Quote Id at same time with few time difference

Author: viktym

app/code/Magento/Quote/Model/QuoteRepository.php

@@ -12,6 +12,7 @@
 use Magento\Framework\Api\SearchCriteria\CollectionProcessorInterface;
 use Magento\Framework\Api\SearchCriteriaInterface;
 use Magento\Framework\App\ObjectManager;
+use Magento\Framework\App\RequestSafetyInterface;
 use Magento\Framework\Exception\InputException;
 use Magento\Framework\Exception\NoSuchEntityException;
 use Magento\Framework\ObjectManager\ResetAfterRequestInterface;
@@ -96,6 +97,11 @@ class QuoteRepository implements CartRepositoryInterface, ResetAfterRequestInter
      */
     private $cartFactory;
 
+    /**
+     * @var RequestSafetyInterface
+     */
+    private $requestSafety;
+
     /**
      * Constructor
      *
@@ -107,6 +113,7 @@ class QuoteRepository implements CartRepositoryInterface, ResetAfterRequestInter
      * @param CollectionProcessorInterface|null $collectionProcessor
      * @param QuoteCollectionFactory|null $quoteCollectionFactory
      * @param CartInterfaceFactory|null $cartFactory
+     * @param RequestSafetyInterface|null $requestSafety
      * @SuppressWarnings(PHPMD.UnusedFormalParameter)
      */
     public function __construct(
@@ -117,7 +124,8 @@ public function __construct(
         JoinProcessorInterface $extensionAttributesJoinProcessor,
         CollectionProcessorInterface $collectionProcessor = null,
         QuoteCollectionFactory $quoteCollectionFactory = null,
-        CartInterfaceFactory $cartFactory = null
+        CartInterfaceFactory $cartFactory = null,
+        RequestSafetyInterface $requestSafety = null
     ) {
         $this->quoteFactory = $quoteFactory;
         $this->storeManager = $storeManager;
@@ -128,6 +136,7 @@ public function __construct(
         $this->quoteCollectionFactory = $quoteCollectionFactory ?: ObjectManager::getInstance()
             ->get(QuoteCollectionFactory::class);
         $this->cartFactory = $cartFactory ?: ObjectManager::getInstance()->get(CartInterfaceFactory::class);
+        $this->requestSafety = $requestSafety ?: ObjectManager::getInstance()->get(RequestSafetyInterface::class);
     }
 
     /**
@@ -194,7 +203,7 @@ public function getActive($cartId, array $sharedStoreIds = [])
      */
     private function validateCachedActiveQuote(int $cartId): void
     {
-        if (isset($this->quotesById[$cartId])) {
+        if (isset($this->quotesById[$cartId]) && !$this->requestSafety->isSafeMethod()) {
             $quote = $this->cartFactory->create();
             if (is_callable([$quote, 'setSharedStoreIds'])) {
                 $quote->setSharedStoreIds(['*']);
@@ -228,7 +237,7 @@ public function getActiveForCustomer($customerId, array $sharedStoreIds = [])
      */
     private function validateCachedCustomerActiveQuote(int $customerId): void
     {
-        if (isset($this->quotesByCustomerId[$customerId])) {
+        if (isset($this->quotesByCustomerId[$customerId]) && !$this->requestSafety->isSafeMethod()) {
             $quoteId = $this->quotesByCustomerId[$customerId]->getId();
             $quote = $this->cartFactory->create();
             if (is_callable([$quote, 'setSharedStoreIds'])) {