Some gateways want the gateway order_id to be consistent for transactions on the same order #4540
RyanofWoods
started this conversation in
New Features or Ideas
Replies: 1 comment
-
We could make the gateway order ID logic configurable, or perhaps a more sensible thing could be to delegate to the gateway for it. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Issue
When a payment gets processed it provides an
order-id
in thegateway_options
to go to the gateway. Because of issue, spree/spree#1998 the sentorder-id
was changed to be unique for eachtransaction
. For some gateways this is important so multiple transactions against the order do not get rejected as a duplicate. (see issue.)solidus/core/app/models/spree/payment/processing.rb
Lines 124 to 127 in f4b6de0
However, for solidus_paypal_braintree this is a problem. Because they offer velocity checks, where for example you can set up a rule to reject the transaction if so many have been made with the same
order-id
.We had a problem with credit card attacks and couldn't use this rule because the
order-id
was different even though the transactions belonged to the same order.Would it be best for gateways/payment methods just to override this param themselves or have a configuration method?
Additional context
I am writing this as part of the bigger issue on
solidus_paypal_braintree
:solidusio/solidus_paypal_braintree#309
Beta Was this translation helpful? Give feedback.
All reactions