Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check format of transaction response before using it #31

Open
judgej opened this issue Jan 6, 2016 · 0 comments
Open

Check format of transaction response before using it #31

judgej opened this issue Jan 6, 2016 · 0 comments

Comments

@judgej
Copy link
Member

judgej commented Jan 6, 2016

This is as a result of issue #30 where the transaction to Authorize.Net was being sent through another device and library, but the notify/callback was being handled by OmniPay. It turns out there are alternative transaction response formats that can be sent in this instance, but which OmniPay does not realise and ends up declaring the transaction as authorised.

To be valid, the first field of the response MUST be "1", "2", "3" or "4". Any other value should raise an immediate exception. A value of "1.0" is the normal response when the transaction was sent via a card reader.

This isn't urgent or something that will affect many people, but when it does, the results can be very misleading, resulting in expired cards being declared as authorised.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant