You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm running into an issue where after running a store operation and holding onto the GUID from the sagepayments API and trying to authorize, my application passes in the GUID token as a string under the credit_card parameter for the add_credit_card method where it expects that parameter to be a full CC object.
At what point would this class run a SELECT_DATA operation from the sagepayments API to pull down CC data from the vault? Is that an expectation of the user's application and then passing a full credit_card object to this class (that seems like a potential security concern)? Would it make sense for me to decorate the add_credit_card method to run my own SELECT_DATA operation if I know that the credit_card parameter is a string?
The text was updated successfully, but these errors were encountered:
benparsell
changed the title
Ability to SELECT_DATA from Vault? (Passing in store GUID)
Ability to SELECT_DATA from Vault for Sage Gateway? (Passing in store GUID)
Jun 9, 2020
To provide a cleaner slate for the maintenance of the library, this PR/Issue is being labeled stale after 60 days without activity. It will be closed in 14 days unless you comment with an update regarding its applicability to the current build. Thank you!
Hi!
I'm running into an issue where after running a
store
operation and holding onto theGUID
from the sagepayments API and trying toauthorize
, my application passes in theGUID
token as a string under thecredit_card
parameter for theadd_credit_card
method where it expects that parameter to be a full CC object.At what point would this class run a
SELECT_DATA
operation from the sagepayments API to pull down CC data from the vault? Is that an expectation of the user's application and then passing a fullcredit_card
object to this class (that seems like a potential security concern)? Would it make sense for me to decorate theadd_credit_card
method to run my ownSELECT_DATA
operation if I know that thecredit_card
parameter is a string?The text was updated successfully, but these errors were encountered: