Gateways should not store both live and test credentials. Only one set should be stored, so that the user can enter test credentials, then override them via settings.php, which is a Drupal best practise.

See a similar issue we fixed in Commerce Stripe: #2878295: The gateway should only store one set of API keys.

CommentFileSizeAuthor
#2 only_store_one_set_of_credentials-2896198-2.patch8.65 KBkiani

Comments

bojanz created an issue. See original summary.

kiani’s picture

kiani commented
Status: Active » Needs review
StatusFileSize
new only_store_one_set_of_credentials-2896198-2.patch8.65 KB

I removed some unusable credentials such as the gateway urls and then stored only one set of api keys.
Sorry for the delay.

  • kiani committed 9e5f9d5 on 8.x-1.x 
    Issue #2896198 by kiani, bojanz: Only store one set of credentials