Closed
Bug 991117
Opened 11 years ago
Closed 11 years ago
SecReview: Marketplace payments for Boku
Categories
(mozilla.org :: Security Assurance: Review Request, task)
mozilla.org
Security Assurance: Review Request
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: andy+bugzilla, Assigned: rforbes)
References
Details
(Whiteboard: [pending secreview])
We are implementing Marketplace payments with Boku. This is going to be the same flows as Bango, except at the payment point, we call Boku instead of Bango.
That means that things like persona, pin and the like will not need changing.
However data flows between Boku and the Marketplace, callbacks and verifification of the callbacks all need to happen and be secure.
There is a deadline to get this in place by the end of April, so this is pretty high priority from the Marketplace point of view.
Comment 1•11 years ago
|
||
In Firefox OS, we currently have just a single provider in Gaia code:
https://github.com/mozilla-b2g/gaia/blob/master/build/config/payment-prefs.js
I don't suppose we know if Gaia UI actually support multiple payment providers? That's probably an input to this review (and how we do UX for users choosing which provider etc) This may already be supported, I'm just not sure.
What about other platforms ?
Updated•11 years ago
|
Assignee: nobody → rforbes
Reporter | ||
Comment 2•11 years ago
|
||
(In reply to Paul Theriault [:pauljt] from comment #1)
> In Firefox OS, we currently have just a single provider in Gaia code:
> https://github.com/mozilla-b2g/gaia/blob/master/build/config/payment-prefs.js
>
> I don't suppose we know if Gaia UI actually support multiple payment
> providers? That's probably an input to this review (and how we do UX for
> users choosing which provider etc) This may already be supported, I'm just
> not sure.
>
> What about other platforms ?
We aren't changing the provider in Gaia. This is about implementing the provider in marketplace. All Gaia has to do is keep pointing at marketplace and the decision will be made there.
Assignee | ||
Comment 3•11 years ago
|
||
this review was completed. we created the data flow diagrams. for the most part this process is very similar to the bango process we already approved.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Comment 4•10 years ago
|
||
rforbes
when you get a sec...
can you link to the data flow diagrams referenced above?
would be most useful!!
merci beaucoup!
caitlin
Flags: needinfo?(rforbes)
Flags: needinfo?(amuntner)
Comment 5•10 years ago
|
||
Flags: needinfo?(rforbes)
Flags: needinfo?(amuntner)
You need to log in
before you can comment on or make changes to this bug.
Description
•