912027 - Support token check API for verifying Bango responses

Status: RESOLVED FIXED

(Marketplace Graveyard :: Payments/Refunds, defect, P1)

Description

[Andy McKay]

The relay API was added in bug 887345, we need to implement and use the relay API so that we confirm incoming requests from Bango against Bango.

Comment 1

[Andy McKay]

Some great comments in this bug: https://bugzilla.mozilla.org/show_bug.cgi?id=887345#c16

Comment 2

[Kumar McMillan [:kumar]]

I can't get the token check service to work, details in bug 914263

Comment 3

[Kumar McMillan [:kumar]]

WIP patch: https://github.com/kumar303/solitude/compare/master...token

Comment 4

[Kumar McMillan [:kumar]]

Support for checking tokens has landed but it's disabled in prod until bug 914263 is fixed.

Solitude: https://github.com/mozilla/solitude/commit/bae1c0453c9f9639b41ee08eee182e60396c4df2
Webpay: https://github.com/mozilla/webpay/commit/11296803a5f6170cd1ac7f56e40f17c17ea13df6

Comment 5

[Kumar McMillan [:kumar]]

Since this is done I'm going to close it. We're waiting on Bango for some fixes though -- see bug 915359 for enabling token checks.

Comment 6

[Victor Carciu]

Can you please add some STRs to this bug or mark it as [qa-] ?

Comment 7

[Kumar McMillan [:kumar]]

The STR would be quite complicated since it involves building a custom B2G with a proxy in front of Bango's payment URL. I'll just qa- for now. We're relying on peer review to qa this logic.