c3d32a04ce
Merge pull request #19 from SatoDri/19.0-fix-security-and-ipn
ndeet2026-08-12 22:11:31 +02:00
2a470afc5d
Merge pull request #2 from ndeet/satodri-19-fixes
Sato DRI2026-08-12 09:52:27 +02:00
cab44f0847
Make sure changes from 18.0 are also here: * Strict invoice and order identity binding. * IPN lookup by stored invoice ID instead of untrusted order ID. * Invoice ID stored as provider_reference and checked for reuse. * Transaction row locking prevents concurrent duplicate checkouts. * Existing invoices are reused; expired ones are replaced safely. * Late notifications for replaced invoices are ignored. * Reduced sensitive webhook logging and restricted IPN to POST.
ndeet2026-08-07 20:22:15 +02:00
e11cbab174
Merge pull request #1 from ndeet/satodri-18-fixes
Sato DRI2026-08-07 16:47:43 +02:00
fadfb0f6a8
* Strict invoice and order identity binding. * IPN lookup by stored invoice ID instead of untrusted order ID. * Invoice ID stored as provider_reference and checked for reuse. * Transaction row locking prevents concurrent duplicate checkouts. * Existing invoices are reused; expired ones are replaced safely. * Late notifications for replaced invoices are ignored. * Reduced sensitive webhook logging and restricted IPN to POST.
ndeet2026-08-07 16:25:15 +02:00
303bfce067
Build the BTCPay invoice server-side and validate the settled amount
SatoDri2026-07-20 00:06:39 +02:00
023e4060c5
Remove dead payment.provider create() override
SatoDri2026-07-20 00:06:39 +02:00
9f3f702c9f
Declare ecdsa as the module Python dependency
SatoDri2026-07-20 00:06:39 +02:00
9dc936ef33
Build the BTCPay invoice server-side and fix notification handling
SatoDri2026-07-19 23:56:03 +02:00
9705023233
Remove dead payment.provider create() override
SatoDri2026-07-19 23:56:03 +02:00
dc6b7a5758
Declare ecdsa as the module Python dependency
SatoDri2026-07-19 23:56:03 +02:00
488aea8771
Remove customizable return url and redirect the user to order confirmation / payment status page as it would be expected.
ndeet2024-07-08 16:37:32 +02:00
0aa893767d
Merge pull request #10 from ndeet/redirect
ndeet2024-07-08 16:38:46 +02:00
6a22f82a73
Remove customizable return url and redirect the user to order confirmation / payment status page as it would be expected.
ndeet2024-07-08 16:37:32 +02:00
0f31982616
Fix IPN processing to cover additional invoice states.
ndeet2024-07-08 11:12:29 +02:00
17cb4f7814
Fix IPN processing to cover additional invoice states.
ndeet2024-07-08 11:12:29 +02:00
c32776ba60
Change version to match 17.0 branch scheme.
ndeet2024-07-08 09:22:04 +02:00