mollie | Unofficial Node | REST library
kandi X-RAY | mollie Summary
kandi X-RAY | mollie Summary
Unofficial Node.js module to access the Mollie payments API.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
- Talk API .
mollie Key Features
mollie Examples and Code Snippets
Community Discussions
Trending Discussions on mollie
QUESTION
I got a question about security. I am building a mobile webshop in Flutter. Is it bad to make those API calls in the frontend? Should I make a separate backend for it in Node for example?
I have also read that you can 'create' your own endpoints in WordPress with PHP. What about that? Does that make it any safer or not?
What endpoints do I use?There is an existing WooCommerce API to retrieve products, get categories, create orders on the WooCommerce API. On the CoCart API, you can retrieve the cart, add to cart, delete cart, etc...
For the Mollie payment APIs, I think it is better to make a backend.
My take on itI think it is fine to call those endpoints in the frontend. I have seen Flutter packages for WooCommerce to call those endpoints. Yes, I do send the basic auth in the headers... so I am not sure how 'dangerous' that is.
But on the other side. What can the 'hacker' do? They can see all the products, that is fine I guess. I am not sure if they can create orders... They cannot steal money at least :)
Reference codeFor reference, here is a piece of code when calling an endpoint:
...ANSWER
Answered 2022-Mar-16 at 10:01When talking about security main question is what goes over the network request. If your username & password from code above is something to keep secret, that can't be on client side.
If you sent code to user, user got it and can check what's happening while tracing network requests.
You can always skip the UI, debug network request and take all the details that were sent over that request and send those requests with cURL or anything else. Yet client must authenticate somehow, and that's a wide topic from "unlisted" URLs where you just need to have exact "random id" to get to the resource (e.g. youtube's or many file sharing services use that as "unlisted" link, which means this won't be in search results but if you have exact link, you will get into the resource) to oAuth2, which you can learn more about here and you could check this post too which covers several methods of token-based authentication.
QUESTION
I'm trying to implement a webhook for my payment system. I have a path to my webhook view, which is a simple definition where the provided id is printed.
The usage is like this
...ANSWER
Answered 2022-Feb-01 at 10:05Use the csrf_exempt decorator to mark the view as exempt from CSRF checks
QUESTION
I was wondering how can i change the default styles of Mollie Plugin in Shopware 6?
what i tried so far:
- using css to change credit-card components styles
- using jQuery and Javascript to overwriting CSS in JS files
- tried to change Plugin JS files directly but I need to
build:storefront
(and with next update it all will lost)
all things that I already tried didn't work. please if you have any idea i really appreciated.
I need to change this red color:
...ANSWER
Answered 2022-Jan-19 at 19:11The code is in an iframe, you cannot change it directly.
But if you look at the src of the iframe, the Moolie server accepts parameters for the background color. This can theoretically be changed from Shopware 6 side by adapting the module. (see https://docs.mollie.com/components/styling)
Anyways, the Mollie module does not seem to use the standard error color from the Theme. I would consider this a shortcoming / bug in the module and recommend you try to report it to the module vendor.
QUESTION
I have 3 PaymentProvider and in my config/app.php
3 lines with code for selecting the Provider like this:
ANSWER
Answered 2021-Dec-23 at 13:17I think you can try some thing like this;
Just assign returning array to a variable and then set the conditions on the base of env
QUESTION
I have been stuck on this for weeks now so I'm dropping my question here, hopefully someone can help me. I have a website where people can sell their car. You buy an advertisement and you can upload your vehicle. I have integrated Mollie Payment API so people can pay with iDeal, but it doesn't seem to read the payment status.
When the payment has been successful, my system doesn't give out an advertisement. How can I check if the payment has been successful and then automatically give out an advertisement if the order has been paid?
This is the code that processes the payments:
...ANSWER
Answered 2021-Dec-21 at 16:17Solved. I used the Mollie Webhook to check the status of the payment: https://github.com/mollie/mollie-api-php/blob/master/examples/payments/webhook.php.
QUESTION
While implementing a third-party API (mollie), it seems they've named one of the parameters to support pagination "from" which conflicts with the built in python from
.
Is there a way for me to use this properly? Am I not passing the parameters correctly? Note: they're written as **params
.
The only parameters it supports are: from
and limit
.
ANSWER
Answered 2021-Dec-14 at 15:10Assuming that the Client is defined something like:
QUESTION
I am creating a SPA with the help of Laravel and Vue and the routing has worked previously, but for some reason it is giving me this error now: "Method 405 is not allowed".
Here is the warning message I am getting:
"[Deprecation] The website requested a subresource from a network that it could only access because of its users' privileged network position. These requests expose non-public devices and servers to the internet, increasing the risk of a cross-site request forgery (CSRF) attack, and/or information leakage. To mitigate these risks, Chrome deprecates requests to non-public subresources when initiated from non-secure contexts, and will start blocking them in Chrome 92 (July 2021). See https://chromestatus.com/feature/5436853517811712 for more details."
This is the function which makes an API call:
...ANSWER
Answered 2021-Jun-24 at 15:15The request axios.post('api/molliepayment'...
refers to a relative URL, meaning that if you are e.g. currently in /checkout/payment
it would make a request to http://example.com/checkout/payment/api/molliepayment
if you have a SPA and a "catch-all" route to load the index then this is what will be hit with this request, and presumably POST is not allowed for such a request.
You can use axios.post('/api/molliepayment'...
to fix this but an even better approach is to pass the actual full URL via your .blade.php view e.g.
QUESTION
I am new to the Mollie API and I am trying to prepare a new payment. Therefore I have a form with a order id, order total and invoice number. Here the code of this form:
...ANSWER
Answered 2021-Jun-21 at 09:29I think you need to add the showInvoice
(redirect url) route to the exceptions in your VerifyCsrfToken
middleware's $except
array.
QUESTION
I have a simple form that sends a value to controller:
...ANSWER
Answered 2021-May-04 at 13:17Make use of laravel form request to validate request payload.
You can create new form request via command
QUESTION
I want to make a query with multiple conditions to get some objects out of my Order model, but i can't find a way to get all the results in a single query. Besides the option to make 2 queries, i would like to know if this is possible with just one so i can create a CSV sheet with all of these orders(this part already works so i will stick to the query). The conditions:
paymethod: Paypal and Mollie
created_at: in hours 15:00 and 16:00
&
paymethod: ApplePay
created_at: in hours 17:00 and 18:00
The two queries:
...ANSWER
Answered 2021-Mar-12 at 10:25You can do this using nested Q object as below:
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install mollie
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page