From 762d6f95a4eb77471400dac870e8a82ab5fa0c21 Mon Sep 17 00:00:00 2001
From: Bogdan Petrea <bogdan@presslabs.com>
Date: Fri, 5 Feb 2021 13:51:47 +0200
Subject: [PATCH] Don't  modify 3DS data for verified or canceled payment
 methods

---
 silver_payu/views.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/silver_payu/views.py b/silver_payu/views.py
index daac6ca..41578b8 100644
--- a/silver_payu/views.py
+++ b/silver_payu/views.py
@@ -50,6 +50,9 @@ def threeds_data_view(request, transaction, expired=None):
     if not payment_method:
         return HttpResponseNotAllowed()
 
+    if payment_method.verified or payment_method.canceled:
+        return HttpResponseNotAllowed()
+
     client_ip, _ = get_client_ip(request)
     if not client_ip:
         return HttpResponseServerError()