Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow other hosts in renewal redirect #1192

Merged
merged 1 commit into from
Nov 14, 2023
Merged

Allow other hosts in renewal redirect #1192

merged 1 commit into from
Nov 14, 2023

Conversation

jim
Copy link
Member

@jim jim commented Nov 14, 2023

What it does

This fixes an exception we're seeing in production:

Unsafe redirect to "https://connect.squareup.com/v2/checkout?c=CLIPPED", pass allow_other_host: true to redirect anyway.

app/controllers/renewal/payments_controller.rb:24 create

I'm going to merge and deploy this now and will followup with another PR to add test coverage for this later on.

@jim jim merged commit 94af4b2 into main Nov 14, 2023
5 checks passed
@jim jim deleted the jim/fix-renewal-redirects branch November 14, 2023 15:25
jim added a commit that referenced this pull request Dec 1, 2023
# What it does

Adds a controller test for `Renewals::PaymentsController`, based heavily
on the one we have for `Signup::PaymentController`. This is a followup
to #1192, which fixed a bug but did not include tests for timing
reasons.

# Why it is important

This is a critical flow in the application, and we'd like to ensure that
it is still working as intended 😄

# Implementation notes

* There's a decent amount of duplication between
`Renewals::PaymentsController` and `Signup::PaymentController`, and the
same is true of their tests. It is looking like we may end up re-working
the payment flows as a part of upcoming work, so I opted to not do
anything too invasive at this time.

# Your bandwidth for additional changes to this PR

_Please choose one of the following to help the project maintainers
provide the appropriate level of support:_

- [x] I have the time and interest to make additional changes to this PR
based on feedback.
- [ ] I am interested in feedback but don't need to make the changes
myself.
- [ ] I don't have time or interest in making additional changes to this
work.
- [ ] Other or not sure (please describe):
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant