3D Secure redirection fails if user not logged in
-
It appears if a user is not logged in (new customer) and checkout is enforcing account creation – when you enable “3D Secure” the payment errors after submitting payment and you get “Redirecting the cardholder to the card issuer’s ACS” Woo message in the cart, the spinner just remains spinning, and in browser console I can see a 403 forbidden on URL https://EXAMPLESITE.com/?wc-ajax=update_order_review.
A logged in user the payment with 3D Secure works perfect. If you take a tick out of “3D Secure” a non-logged in user also works fine. Have tested this on a live domain, and on a dev site, both different server setups, and also getting same issue using Storefront theme as well as our own custom theme.
3D secure is enabled in the clients ST account. Everything is pointing to a permission issue with WP AJAX/WC-AJAX and non-logged in (i.e. no-priv) users?
Has this been seen by anyone else, can this be confirmed?
WC Version: 3.8.1
REST API Version: 1.0.2
WP Version: 5.3
Secure Trading Version: 2.3
WP Memory Limit: 256 MB
PHP Version: 7.2.11
- The topic ‘3D Secure redirection fails if user not logged in’ is closed to new replies.