Changeset 17604 for main/kofacustom.nigeria/trunk/src

Timestamp:

8 Oct 2023, 07:20:49 (13 months ago)

Author:

Henrik Bettermann

Message:

Open function to allow receiving POST requests.

File:

• main/kofacustom.nigeria/trunk/src/kofacustom/nigeria/interswitch/browser.py (modified) (1 diff)

main/kofacustom.nigeria/trunk/src/kofacustom/nigeria/interswitch/browser.py

@@ -167 +167 @@
     grok.context(INigeriaStudentOnlinePayment)
     grok.name('request_webservice')
-    grok.require('waeup.payStudent')
+
+    #grok.require('waeup.payStudent')
+    
+    # Function temporarily opened on 08/10/23 because Interswitch is sending
+    # POST requests instead of GET requests. Usually all browsers protect
+    # against cross-site attacks by removing cookies included in requests
+    # originating from other websites. In other words, the cookies with the
+    # session id, which is used for authentication is beeing removed when
+    # receiving a POST request from the Interswitch platform.
+    grok.require('waeup.Public')
 
     product_id = None