LexikPayboxBundle icon indicating copy to clipboard operation
LexikPayboxBundle copied to clipboard

Fix validation of IPN response

Open nykopol opened this issue 10 years ago • 1 comments

This PR fix the validation process to match specifications about the use of PBX_REPONDRE_A option or the use of the URL specified in paybox interface.

In concrete, if you use the PBX_REPONDRE_A option, the signature must be validated with data returned according to PBX_RETOUR option. While if you define the URL for IPN by the interface of Paybox, the signature must be validated with all the parameters, even those that can be external to PBX_RETOUR (for example a page parameter).

nykopol avatar Mar 27 '14 17:03 nykopol

@cedric-g i had forgotten to filter the data in Response::initData for url_ipn vaidation. So now pbx_retour does not require to be an array as this parameter isn't used anymore in validation by url_ipn.

I think this PR can be merge now.

nykopol avatar Apr 03 '14 05:04 nykopol