Some gateways want the gateway order_id to be consistent for transactions on the same order #4540
RyanofWoods
started this conversation in
New Features or Ideas
Replies: 1 comment
-
We could make the gateway order ID logic configurable, or perhaps a more sensible thing could be to delegate to the gateway for it. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Issue
When a payment gets processed it provides an
order-id
in thegateway_options
to go to the gateway. Because of issue, spree/spree#1998 the sentorder-id
was changed to be unique for eachtransaction
. For some gateways this is important so multiple transactions against the order do not get rejected as a duplicate. (see issue.)solidus/core/app/models/spree/payment/processing.rb
Lines 124 to 127 in f4b6de0
However, for solidus_paypal_braintree this is a problem. Because they offer velocity checks, where for example you can set up a rule to reject the transaction if so many have been made with the same
order-id
.We had a problem with credit card attacks and couldn't use this rule because the
order-id
was different even though the transactions belonged to the same order.Would it be best for gateways/payment methods just to override this param themselves or have a configuration method?
Additional context
I am writing this as part of the bigger issue on
solidus_paypal_braintree
:solidusio/solidus_paypal_braintree#309
Beta Was this translation helpful? Give feedback.
All reactions