search

braintree / braintree_spring_example

An example Braintree integration for Spring (Java)
MIT License
81 stars 60 forks source link

Production Ready #11

Closed samuel2629 closed 7 years ago

samuel2629 commented 7 years ago

Hello, In the Readme file it says that the actual code is not in a production ready state, could someone explains me why and what's missing ? (in term of security i mean, of course the pages, amount... is my problem). Thank you !!

lkorth commented 7 years ago

The example apps do not include any sort of authentication, there is no support for request countermeasures like CSRF tokens, all amounts are passed from the client side and errors are displayed from Braintree directly to the user which may not be desirable.

In general the example apps are good starting points for integrating Braintree with your framework or language of choice, but do not include everything you may need in a production environment.

samuel2629 commented 7 years ago

Ok thank's ! What if i use a firebase authentification is that enough ? And about token my client is an adroid app, the secrutity works like that : https://developers.braintreepayments.com/start/overview is that a enough ? Thank you again !

lkorth commented 7 years ago

If you are only using mobile clients and restrict your routes to require Firebase authentication that should handle your authentication needs.

You can also always contact our support team for help with an integration as well.

samuel2629 commented 7 years ago

Thank's mate !