This pull request introduces a new field to configure native and redirect methods for 3D Secure 2 card payment authentications.
This has become a necessity after Adobe has introduces strict CSP ruling on payment pages to comply with PCI DSS 4.0 requirements. This requirement enforces our merchants to add all of the 3D Secure 2 domain names to their CSP allowlist. Therefore, this PR enables our merchants to fall back 3D Secure 2 Redirect authentication if they are not able to add domains to their allow lists.
Tested scenarios
Card payments with 3D Secure 2 with native and redirect flows configured from the plugin configuration.
Description
This pull request introduces a new field to configure native and redirect methods for 3D Secure 2 card payment authentications.
This has become a necessity after Adobe has introduces strict CSP ruling on payment pages to comply with PCI DSS 4.0 requirements. This requirement enforces our merchants to add all of the 3D Secure 2 domain names to their CSP allowlist. Therefore, this PR enables our merchants to fall back 3D Secure 2 Redirect authentication if they are not able to add domains to their allow lists.
Tested scenarios