diff --git a/pay-api/requirements/prod.txt b/pay-api/requirements/prod.txt index 29d8c5558..cf33fa840 100644 --- a/pay-api/requirements/prod.txt +++ b/pay-api/requirements/prod.txt @@ -11,7 +11,7 @@ flask-jwt-oidc python-dotenv psycopg2-binary marshmallow-sqlalchemy==0.25.0 -jsonschema +jsonschema==4.17.3 requests asyncio-nats-client asyncio-nats-streaming diff --git a/pay-api/src/pay_api/config.py b/pay-api/src/pay_api/config.py index 56952f8a2..ee1c13773 100755 --- a/pay-api/src/pay_api/config.py +++ b/pay-api/src/pay_api/config.py @@ -149,6 +149,9 @@ class _Config(): # pylint: disable=too-few-public-methods SENTRY_ENABLE = _get_config('SENTRY_ENABLE', default=False) SENTRY_DSN = _get_config('SENTRY_DSN', default=None) + # Disable valid redirect URLs - for DEV only + DISABLE_VALID_REDIRECT_URLS = _get_config('DISABLE_VALID_REDIRECT_URLS', default='False').lower() == 'true' + # Valid Payment redirect URLs VALID_REDIRECT_URLS = [(val.strip() if val != '' else None) for val in _get_config('VALID_REDIRECT_URLS', default='').split(',')] diff --git a/pay-api/src/pay_api/utils/util.py b/pay-api/src/pay_api/utils/util.py index 669b63220..f570dcb47 100755 --- a/pay-api/src/pay_api/utils/util.py +++ b/pay-api/src/pay_api/utils/util.py @@ -49,6 +49,9 @@ def options(self, *args, **kwargs): # pylint: disable=unused-argument def is_valid_redirect_url(url: str) -> bool: """Validate if the url is valid based on the VALID Redirect Url.""" + disable_redirect_validation: bool = current_app.config.get('DISABLE_VALID_REDIRECT_URLS') + if disable_redirect_validation: + return True valid_urls: list = current_app.config.get('VALID_REDIRECT_URLS') is_valid = False for valid_url in valid_urls: