845528 - Prevent duplicate purchases (Bango)

Status: RESOLVED FIXED

(Marketplace Graveyard :: Payments/Refunds, defect, P1)

Description

[Kumar McMillan [:kumar]]

We'd like to prevent duplicate purchases.

Currently, you can do this:
- pay for an app
- copy/paste the billing config URL, such as http://mozilla.test.bango.org/mozpayments/?bcid=220020
- pay for it again

Can Bango prevent this since the billing config ID should be marked as "paid" somehow?

Alternatively, we already pass in our externalTransactionId to the BillingConfigAPI. Would it be preferable for Bango to detect already-paid transaction IDs are stop duplicate payments that way?

Comment 1

[krupa raj[:krupa]]

Tom says this needs input from Keir.

Comment 2

[Keir Kettle]

Hi - back now! 

Quick question - what is the expected behaviour when the user hits a billing config id thats already been paid? Same as the first time (ie redirect to the success url)?

Comment 3

[Kumar McMillan [:kumar]]

Hi Keir, welcome back!

As discussed on a call, Bango will check for the externalTransactionId and either replay the transaction or throw an exception, whatever is the easier approach. We thought that replaying the transaction (success/error) would be easy enough.

The crucial fix is to not let a customer pay twice.

Comment 4

[Keir Kettle]

(In reply to Kumar McMillan [:kumar] from comment #3)
> As discussed on a call, Bango will check for the externalTransactionId and
> either replay the  transaction or throw an exception, whatever is the easier
> approach. We thought that replaying the transaction (success/error) would be
> easy enough.
> 
> The crucial fix is to not let a customer pay twice.

Just to confirm we'll check for a previous transactions on a billing configuration  id or a externalTransactionId?

Comment 5

[Kumar McMillan [:kumar]]

We use externalTransactionId in our session so if you could detect duplicates on that, it would be the easiest. This value will always be unique for new transactions.

Comment 6

[Steve Ruston]

in Bango test environment