Maniphest T116679

Update Adyen adapter to use SHA-256 signature
Closed, ResolvedPublic2 Estimated Story Points
Actions

Description

Adyen adapter is using deprecated SHA-1 signature for iframe requests. Update to use SHA-256 signature as described here: https://docs.adyen.com/pages/viewpage.action?pageId=5376964

We've been given a new account, which seems to have removed our ability to create skins using the SHA-1 HMAC. This is now blocking the internal test.

Details

	Subject	Repo	Branch	Lines +/-
	Use SHA-256 HMAC for Adyen	mediawiki/extensions/DonationInterface	master	+40 -77

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		None	T93302 Big English Fundraiser - December
		Resolved		None	T90748 [epic] Get Adyen back up
		Resolved		• cwdent	T118201 [epic] Adyen 1 hour test
		Resolved		• cwdent	T118293 Adyen: retest internally with real credit cards
		Resolved		• cwdent	T116679 Update Adyen adapter to use SHA-256 signature

Event Timeline

Ejegg created this task.Oct 26 2015, 10:31 PM

Ejegg raised the priority of this task from to Needs Triage.

Ejegg updated the task description. (Show Details)

Ejegg added projects: Fundraising-Backlog, MediaWiki-extensions-DonationInterface.

Ejegg subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 26 2015, 10:31 PM

Ejegg updated the task description. (Show Details)Nov 9 2015, 10:23 PM

Ejegg added a project: FR-Adyen.

Ejegg set Security to None.

Restricted Application added a subscriber: StudiesWorld. · View Herald TranscriptNov 9 2015, 10:23 PM

Ejegg renamed this task from Update Adyen adapter to use SHA-265 signature to Update Adyen adapter to use SHA-256 signature.Nov 24 2015, 2:42 AM

Change 255064 had a related patch set uploaded (by Ejegg):
WIP use SHA-256 HMAC for Adyen

https://gerrit.wikimedia.org/r/255064

gerritbot added a project: Patch-For-Review.Nov 24 2015, 3:38 AM

Ejegg triaged this task as High priority.Nov 24 2015, 3:51 AM

Ejegg updated the task description. (Show Details)

Ejegg added a project: Fundraising Sprint X-Ray Spex.

Ejegg edited a custom field.

Ejegg added a parent task: T118293: Adyen: retest internally with real credit cards.

Ejegg claimed this task.Nov 24 2015, 4:06 AM

Ejegg moved this task from Backlog to Doing on the Fundraising Sprint X-Ray Spex board.

• cwdent claimed this task.Nov 24 2015, 9:13 PM

• DStrine moved this task from Triage to Closed Sprint Work Completed in Q2 1516 on the Fundraising-Backlog board.Nov 25 2015, 6:53 PM

Ejegg added a project: Unplanned-Sprint-Work.Nov 25 2015, 11:15 PM

• DStrine added a project: Fundraising Sprint Yo La Tengo.Nov 26 2015, 12:21 AM

Ejegg moved this task from Backlog to Review on the Fundraising Sprint Yo La Tengo board.Nov 27 2015, 4:10 PM

Change 255064 merged by jenkins-bot:
Use SHA-256 HMAC for Adyen

https://gerrit.wikimedia.org/r/255064

ReleaseTaggerBot added a project: MW-1.27-release (WMF-deploy-2015-12-08_(1.27.0-wmf.8)).Nov 30 2015, 11:00 PM

Ejegg moved this task from Review to Done on the Fundraising Sprint Yo La Tengo board.Dec 1 2015, 1:02 AM

• DStrine added a project: Fundraising Sprint Zapp.Dec 9 2015, 11:57 PM

Ejegg closed this task as Resolved.Dec 10 2015, 12:10 AM

Ejegg removed a project: Fundraising Sprint Zapp.

• DStrine edited projects, added Fr-tech-archived-from-FY-2015/16; removed Fundraising-Backlog.Jan 11 2018, 9:45 PM