krober / contain-amazon

Automatic Amazon Containerization for Firefox
Mozilla Public License 2.0
11 stars 11 forks source link

Container blocks checkout for credit card payments which require 2-step verification #15

Open ckleemann opened 3 years ago

ckleemann commented 3 years ago

Actual behavior

Credit card Checkout hangs after 2-step verification.

Expected behavior

After 2-Step verification I get returned to amazon.

Steps to reproduce

  1. Take an expensive article in the shopping cart.
  2. Complete the checkout and go to 2-step verification.
  3. After you have completed the verification the website hangs because the post request to get back to amazon is blocked by the container. This is reported within in the network console. The blocked post request is send to https://amazon.de/payments-portal/data/pages/v1/customer/XXX/hostedContinueWidget where XXX is my customer ID. This path needs to bey whitelist from every other website. I my case the request is posted from 3ds.sia.eu. But this might change in the future. So adding 3ds.sia.eu to the list of amazon service domains might not fix the problem for every credit card company.

Notes

The 2-step verification is required within the EU due to the PSD2 guideline. On Visa credit card this is called 3D secure. It is used by the Amazon Germany credit card.

harshid86 commented 3 years ago

I also experienced this issue when making payments to AWS