search

iZettle / sdk-ios

Add card payments from Zettle to your own app
https://developer.zettle.com/docs/ios-sdk
Other
81 stars 37 forks source link

No password for refund #385

Open MarcoDeJong opened 2 years ago

MarcoDeJong commented 2 years ago

I have been going through some past issues, and found a recurring theme for the Zettle Refund not asking for a password.

For an unknown and undocumented reason, you are asking for the password of the Zettle account. When I integrate within my own application, I have a sophisticated roles and rights structure integrated and I can even do biometric checks to verify my own users. However, the current SDK flow ask for an old-school password, which I have to share among a couple of users. Even after I already logged into the account to do regular transactions. It makes no sense for security or user experience at all.

Please make it optional, or remove as a whole.

  1. https://github.com/iZettle/sdk-ios/issues/95#issuecomment-276986372

  2. https://github.com/iZettle/sdk-ios/issues/124

  3. https://github.com/iZettle/sdk-ios/issues/154 
4. https://github.com/iZettle/sdk-ios/issues/214
davidzettle commented 1 year ago

Hello Marco,

We are currently investigating options for a more friendly refund flow while keeping it secure within our higher standards of compliance and safety. We will keep this thread open if there is anything relevant to share in the future.

Best regards,