Page MenuHomePhabricator

Investigate 'Invalid control' errors from AstroPay
Closed, ResolvedPublic1 Estimated Story Points

Description

We're still getting some of these errors, which indicate that AstroPay didn't think we signed the request correctly. We eliminated most of the early ones when we added fiscal number validation, so I'm guessing a quirk in the format of one of the fields is to blame. When we get one of these errors, we should log the signed string and the signature so we can determine what's going wrong, while still not logging any sensitive parts of the request.

Event Timeline

Ejegg claimed this task.
Ejegg raised the priority of this task from to Medium.
Ejegg updated the task description. (Show Details)
Ejegg subscribed.

Change 232071 had a related patch set uploaded (by Ejegg):
Log signed message and signature on 'Invalid control'

https://gerrit.wikimedia.org/r/232071

Ejegg set Security to None.
Ejegg edited a custom field.
Ejegg moved this task from Backlog to Review on the Fundraising Sprint Queen board.

Change 232071 merged by jenkins-bot:
Log signed message and signature on 'Invalid control'

https://gerrit.wikimedia.org/r/232071

Change 232577 had a related patch set uploaded (by Ejegg):
Fix AstroPay signature when values contain plus sign

https://gerrit.wikimedia.org/r/232577

Change 232577 merged by jenkins-bot:
Fix AstroPay signature when values contain plus sign

https://gerrit.wikimedia.org/r/232577