Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

completeAuthorization called without required html form for 3D Secure with Continue button #18

Open
waggyza opened this issue Nov 14, 2017 · 2 comments

Comments

@waggyza
Copy link

waggyza commented Nov 14, 2017

In this case the 3D Secure page that is loaded into the WebView first asks your to press a "next" button. Once next is pressed the bank sends a USSD to the phone associated with your card. You then reply to the USSD, and the Webview shows a "CONTINUE" button. Once you press "continue" the redirect is caught. However the html that is sent to completeAuthorisation contains a pre-auth link with PaReq, TermUrl, MD, rather than the required form with MD & PaRes. Attached is the html that is caught.
continueHtml.txt

@waggyza
Copy link
Author

waggyza commented Nov 16, 2017

I am suspecting that the required post parameters are in an iframe which is not caught by the code.

@waggyza
Copy link
Author

waggyza commented Nov 30, 2017

As I suspected the redirect was occurring in an iFrame so for this specific case amending the javascript to get the HTML of the iFrame sorted the issue:
view.loadUrl(String.format("javascript:window.%s.processHTML(document.getElementById('authWindow').contentWindow.document.getElementsByTagName('html')[0].innerHTML);", JavaScriptNS));

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant