checkout / frames-android

Frames Android: making native card payments simple
https://www.checkout.com/docs/integrate/sdks/android-sdk
MIT License
51 stars 35 forks source link

send card tokenisation to checkout server in JOSE format #60

Open Bloody-Badboy opened 3 years ago

Bloody-Badboy commented 3 years ago

Proposed changes

Describe the big picture of your changes here to communicate to the maintainers why we should accept this pull request. If it fixes a bug or resolves a feature request, be sure to link to that issue.

Types of changes

Transfer card tokenisation details to checkout server in JOSH format instead of plain text

What types of changes does your code introduce to frames-android?

Checklist

Further comments

Currently, card tokenisation request sent to checkout.com in applicaton/json format which is plain text and vulnerable to attack, instead of that send the card details in encrypted format using JWE token with RSA-OAEP-256 scheme and AES256 GCM symmetric encryption.

sonarcloud[bot] commented 11 months ago

SonarCloud Quality Gate failed.    Quality Gate failed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot E 1 Security Hotspot
Code Smell A 4 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

idea Catch issues before they fail your Quality Gate with our IDE extension sonarlint SonarLint