You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixed
Adapters: the Express/Node and fetch-based adapters read at most 1 MiB of a request body and answer 413 for larger ones, instead of buffering bodies of any size. Change the limit with maxBodySize on toExpressHandler, toNodeHandler or toFetchHandler.
Akbank: completeThreeDSPayment() confirms the 3D Secure result with an order history query (txnCode 1010) and rejects a callback that does not match Akbank's record for the order as INVALID_HASH. A query that gets no response returns pending with NETWORK_ERROR.
Handler: only provider callbacks accept form bodies. Other actions answer 415 for application/x-www-form-urlencoded, multipart/form-data and text/plain, which a cross-site HTML form can send with the user's cookies and without a CORS preflight.
HttpError.config no longer keeps the request body and headers. The error is passed to the logger, and the body carried card data and Parampos credentials, the headers the iyzico authorization.
iyzico: a failed completeThreeDSPayment() result no longer carries paymentId or conversationId taken from the callback request or echoed by iyzico's error response. They are set only for a successful payment, from iyzico's response.