search

verbb / postie

A Craft Commerce shipping calculator plugin.
Other
12 stars 18 forks source link

All object information is available in response if update-cart is run as an XHR request #8

Closed peter-tell closed 4 years ago

peter-tell commented 4 years ago

Description

If you update the the shipping address via an XHR request Postie will return all available matching shipping methods and associated data. For UPS at least this inclludes an object provider.settings that has includes the API key, username, and credentials in plane text.

Could this information not be included?

Steps to reproduce

  1. Add a shipping address
  2. POST to actions/commerce/cart/update-cart via XHR
  3. Examine cart object in the response

Additional info