Extension is blocking stripe payment confirmation screen on certain browsers

Getting these error in chrome console: !

This error is shown MJWShared 0.7, stripe 6.4beta

Screenshot_2020-03-23_at_16.22.18

This error is shown MJWShared 0.6, stripe 6.4beta

Steps to reproduce:

1. Enabled firewall extension
2. "Chrome Desktop browser" - visit a contribution page link
3. Click "Confirm Contribution" Page gets stuck with grayed out "Confirm Contribution" button.

One of the above error in console.

changed the description

@tapash This is most likely caused by the csrfToken check here https://lab.civicrm.org/extensions/stripe/-/blob/6.4/CRM/Stripe/AJAX.php#L46

I actually saw this when doing some testing today - it will happen if the browser session is cleared and was happening when I was trying to submit from multiple tabs and with multiple Stripe processors enabled. Are you able to investigate further to see exactly when it happens? And also test https://lab.civicrm.org/extensions/stripe/-/tree/fixmultipleprocessors (which won't necessarily fix the problem but that's what I was working on at the time).

@mattwire Thanks, this PR solves the issue. At least I was able to submit both on chrome & safari.

closed

reopened

@mattwire spoke too soon. I forgot to enable firewall, hence it worked. In fact, it didn't work. Getting this error in console https://lab.civicrm.org/extensions/firewall/uploads/13801959048ec797955dd5f7c6910483/Screenshot_2020-03-23_at_16.22.18.png

On top of that, on this branch, the backend credit card element is not loading for event registration, no errors in console either.

@tapash the backend credit card element is loading for me? What is different with your setup? How many backend processors enabled, which is default?

@mattwire I have only stripe enabled & default . Paypal is installed but disabled.

re:backend For contribution pages are fine. but not loading on events pages.

@mattwire EDIT: Just found out, direct from profile, credit card link for registration works ok. but when used the link "civicrm/contact/view/participant?reset=1&action=add&context=standalone&mode=live" then element doesn't load. Events > Register event Participants > Submit Credit card registration

@tapash Can you open an issue for the Stripe issues if they are still a problem after updating to the latest 6.4-alpha3 (https://lab.civicrm.org/extensions/stripe/-/tree/6.4) and mjwshared 0.7-beta2 (https://lab.civicrm.org/extensions/mjwshared/-/tree/0.7)

mentioned in issue stripe#179 (closed)

@tapash I think this may be caused by opening the payment form in multiple tabs/windows and then submitting using an "old" tab/window. So the CSRF token would be invalid and you'd get a 400 bad request shown in the browser console. See #8 (closed)

Resolved in 1.1 - @tapash please confirm

closed

mentioned in issue #20 (closed)