Comments (3)
@Buckaroo-Rens
I was also experiencing this issue (local only), so I did a little research on what could be the problem here.
First thing I tried was clean install of different shopware- and Buckaroo versions, problem persisted as @MelvinAchterhuis describes. Then I tried it in Firefox and the plugin worked as expected, I could add to my shoppingbasket without the CSRF error.
But it did show a warning in my console:
Cookie “session-” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute,
Since 1.3.0 there's a framework.yaml
file that sets cookie_samesite: none
. Firefox still accepts setting these cookies, but Chrome already rejects setting these because they miss the secure attribute.
Adding the folowing file in the root html directory of shopware is what fixed the problem of adding to basket and checkout payment selection screen.
src/config/packages/framework.yaml
framework:
session:
cookie_secure: true
Replacing cookie_samesite with 'lax'
, 'strict'
or null
also seems to do the trick, but cookies, PHP and symfony configuration files are not really my cup of tea.
Shopware version 6.4.6.1
Buckaroo Payments 1.3.2
Still, after selecting a payment method and trying to place the order I still get the CSRF warning. Maybe these details can help somebody in the future to make a PR or solve it for themselves locally (kind of..).
from shopware6.
Hello @MelvinAchterhuis we will look into this a.s.a.p. keep you posted.
from shopware6.
@MelvinAchterhuis Can you e-mail me at [email protected] we are unable to reproduce it so any access to a staging environment would be helpful here.
from shopware6.
Related Issues (18)
- [Bug] FinishUrl ignored when using shopware 6 store-api HOT 4
- [BUG] Client sided Creditcards payment HOT 5
- [Question] Payment State HOT 4
- Incorrect signature on partial payments HOT 8
- Partial payments - order gets incorrectly cancelled HOT 1
- Tag for version 1.1.3 HOT 1
- Question about refunding HOT 7
- last_used_creditcard has not been set for a new Customer HOT 1
- Finalize page not loaded correctly, order not set to paid HOT 2
- Uncaught PHP Exception TypeError: "round(): Argument #1 ($num) must be of type int|float, string given" HOT 2
- The plugin crashes shopware 6.4.9.0 HOT 2
- [BP-1726] Unclear error message is shown to customer when (iDeal) payment provider is down. HOT 2
- [critical] Edit order - impossible HOT 1
- Partial payments with a cancelled part HOT 2
- Version in composer.json is not updated HOT 5
- changed redirect behaviour from Buckaroo HOT 4
- Partial payment - transition issue HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from shopware6.