-
Notifications
You must be signed in to change notification settings - Fork 25
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merchant 2.0 From Key issue #13
Comments
yeah. I too face the same issue. form_key is appended to tokenization request. Due to this additional parameter signature mismatch. How to resolve this? |
in the checkout.js i have added the another field in the auto generated fro called "form_key" with disabled property . so that when the form get submitted it wont be posted . adding the field stops from the form_key auto generation . $('').attr({ |
@pmanojhs Great. |
File path : app/code/Payfort/Fort/view/frontend/web/js/view/payment/method-renderer/payfort_fort_cc_merchant_page2-method.js |
/**
|
@pmanojhs |
Hi all, we will check this issue and try to solve it ASAP. |
@pmanojhs can you provide me with magento version no that you are using ? |
Hi Guys, It seems that there is a plugin you installed on you magento, this plugin is appending form_key input to any form including our form. |
@DeyaZ88 @pmanojhs form_key is not due to a plugin. This is added by Magento 2.3. Magento has a form key validation in place for all POST non-AJAX requests. Some questions have been asked on other channels too https://magento.stackexchange.com/questions/262102/how-form-key-is-forcefully-required-in-the-magento-2-3 or https://magento.stackexchange.com/questions/135986/why-form-key-is-added-in-every-page-in-magento-2/135987 form key always existed, but in 2.3 it is now mandatory. We fixed this in our fork of Payfot by white listing the parameters in an array that should be used for signature calculation and ignore the rest in a post request. Just before calculating signature, sanitize the post request to only include the variables required to calculate the signature. |
@smoizs than you for your respond, I will install magento 2.3 to try it out. |
Hi All, I fixed this issue by disabling form_key inside Payfort form. I've pushed the change to my account https://github.com/DeyaZ88/magento2-payfort can anyone try it and confirm if its working, if confirmed I will proceed to merge it with Payfort account. |
the change is now pushed to master branch, please update your plugin. |
When Merchant 2.0 is enabled and trying to making payment . It shows invalid signature because magento for key generation .
The text was updated successfully, but these errors were encountered: