Page MenuHomePhabricator

Adyen: we don't deal well with two responses on same merchant ID
Closed, DeclinedPublic

Description

Order ID 55828254.1 on Dec 14:
Came back to resultswitcher with response 'CANCELLED' and we sent a failure message to the payments-init queue and redirected the user to the fail page. Then somehow, a minute and 9 seconds later, hit the resultswitcher again, with response 'AUTHORIZED', and we got an authorization message at the IPN.

Because we sent the failure message first, we deleted the donor details from the pending queue. Then when we tried to process the authorization message at the IPN, we rejected it with failmail for the missing donor details.

So.... if we can't stop Adyen from letting the donor try again on the same merchant ID after a failure, what can we do?

  • When a donor comes back authorized, and we see them as failed, can we send a second message to pending with the donor details? Or have we purged those from session at that point?
  • Should we just capture the payment and reconstruct the donor details from logs on the next audit run?

Event Timeline

@Ejegg think this is safe to close out? Not sure if this issue still occurs.

Thanks for flagging this @AKanji-WMF - we don't have to worry about this with the current integration. This problem only occurred with the old integration where we redirected to a hosted payment page that showed the card fields.