Feature #145
closed[qiwi-provider] Add in new field to turn on/off whether skip checksum validation
100%
Description
[CHANGES]
1. Introduce a new flag indicator: skipCheckSum, with value 0 or 1.
2. Skip the checksum validation if skipCheckSum = 1; Else Perform checksum validation logic for skipCheckSum = 0.
Note: Replace the previous password null/empty value checking with this skipCheckSum validation logic, to determine whether perform checksum validation.
Background:
Due to the checksum logic is based on [uppercase(md5(txn + uppercase(md5(password))))], that make use of the merchant shop password as part of the element, to validate on data integrity of the status response by Qiwi via updateBill web service client call. This shop password is the password to access login to Qiwi Merchant Interface.
As the updateBill checksum validation have the dependency on password, so any changes on the password (without notify IT) will caused failure on status response back.
So skipCheckSum validation will drop the dependency on password, while Finance Dept can protect the merchant login from disclosure.
Updated by Soh Keong over 12 years ago
- % Done changed from 0 to 100
- Resolution set to Fixed
Added skipCheckSum in the properties file.
If skipCheckSum=0(false) and password is not match will return response code 300.
Others will return response code 0.