paypal / here-sideloader-api-samples

Sideloader API samples that enable to integrate PayPal Here into other apps
Other
24 stars 32 forks source link

Session Timeout then prompt for password of wrong user #40

Open bazauto opened 8 years ago

bazauto commented 8 years ago

I'm using the side-loader with my own Android till app and payments are being taken successfully. I'm using a limited privilege (only Request Money) user in my PayPal account for the till to login to PayPal Here.

I'm not sure if this is an issue with the side-loader or with the PayPal Here app itself. If there is a better place to raise this please let me know.

However we don't take a lot of card payments being a mainly cash business. If we take a payment and then don't take another for a long time (a day or more), the app appears to be still logged in but once the customer has entered their PIN we then get a Session Timeout. This would be fine except that when the PayPal Here app then requests a login it is for the password of my main PayPal login and not the limited privilege account that previously logged into the app.

As a work around at the moment I've got the staff to manually switch back to the PayPal Here app after each card payment and ensure they logout. Causing a fresh login and session to be done for the next payment.

Is this expected behaviour? Or should it be prompting for the password of the limited privilege user that logged in originally?

I hope that makes sense, if there is any more information you need please let me know. Any help will be much appreciated.

PayPal Here App Version 2.6.1 Build 2716

djMax commented 8 years ago

Are you including the limited user account credentials on the URL?

bazauto commented 8 years ago

I do, but they didn't seem to do anything. I'm still prompted to login.

I've got "user=&password=" in the URL. Are these the correct parameter names?

djMax commented 8 years ago

Sounds like a bug on our side. Let me check with the team on Monday.

bazauto commented 8 years ago

Did you find anything related to this?

g4spow commented 8 years ago

@bazauto @djMax Hi Paul, Been looking everywhere on how to pass username and password in the url with no joy so far. One I have tried is var pphereUrl = "paypalhere://takePayment/v2?returnUrl=user=myrestrictedusername&password=mypassword" + retUrl;

Could you share how this is tagged into the URL? Here is a clean Codeen with default code http://codepen.io/anon/pen/qaWXKd

bazauto commented 8 years ago

Hi,

Here is the URL I'm using, although it doesn't seem to work as the login screen still appears. Just a slightly different order to your parameters.

paypalhere://takePayment/v2?user=myrestrictedusername&password=mypassword&accepted=card%2Cpaypal&returnUrl=...

We have just had to give the staff the restricted account password and taught them how to login and handle the session timeout described in this issue. It would be really good if this was to work as we expect and auto-login each time the PayPal Here app is called allow seamless integration with 3rd party software.

Since I opened this issue I've moved my till software to a different tablet and never logged in with the admin account. This has allowed just the password to be entered when the session expires rather than having to quit all the way out to be able to enter the restricted user credentials as described in the initial report.

Not sure if that helps, but is just what I've observed.