adyen/adyen-salesforce-headless-commerce-pwa

B2C Commerce Headless Integration Composable Storefront

Adyen Payments Integration for Salesforce Composable Storefront B2C Commerce PWA

This integration provides the opportunity to use Adyen as a payment service provider when building your Salesforce PWA application. Download the NPM package of Adyen integration here

In this GitHub repo there are two packages:

• Adyen-salesforce-pwa: source code for the Adyen PWA NPM package, that contains the default payments integration. This code is published to the NPM.
• Adyen-retail-react-app: a reference application that can be used for a demo of how to integrate the Adyen Payments Integration (NPM package) into your PWA Retail application. This reference application should not be used in production projects and we do not provide support on this implementaiotn.

Prerequisites

• Adyen test account
• API key
• Client key

Installation and Configuration

• Refer to Adyen Docs for NPM set-up, installation and Go-Live instructions.
• Refer to Adyen Docs for customisation instructions.
• Available Payment methods and features can be found on Adyen Docs.

Support & Maintenance

We provide specialized integration support for major versions of the NPM package following the SFCC B2C Support policy, along with permanent Adyen support. Migration from SFRA/SG and Upgrade Guide can be found on Adyen Docs. For other questions, contact our support team.

Upgrade

We recommend that you upgrade when we have a major release, such as v2.x.x. You can find the latest version on our NPM repository.

License

This repository is available under the MIT license.

adyen-salesforce-headless-commerce-pwa's Issues

[CRITICAL] Sensitive Adyen information is exposed to client side

Describe The Bug

Sensitive Adyen information is exposed to client side through application configurations.
Please note that all application configurations are exposed to the client side through SSR.

To Reproduce

Steps to reproduce the behavior:

1. Start the adyen-retail-react-app
2. Go to any page
3. Open Console tab in the Developer Tools
4. Print the Adyen configurations by window.__CONFIG__.app.sites[0].adyen

Expected Behavior

Sensitive information such as API keys, webhook accounts, webhook passwords, etc., must not be exposed to the client side.

Screenshots

Additional Context

The issue has been occurring since version 1.0.0-beta.4, Adyen Installation step no. 6.

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update dependency css-loader to v6.11.0
• chore(deps): update dependency mini-css-extract-plugin to v2.9.0
• chore(deps): update testing-library monorepo (@testing-library/jest-dom, @testing-library/react)
• fix(deps): update dependency @adyen/api-library to v16.3.0
• fix(deps): update dependency dotenv to v16.4.5
• fix(deps): update dependency express-validator to v7.1.0
• chore(deps): update actions/upload-artifact action to v4
• chore(deps): update commitlint monorepo to v19 (major) (@commitlint/cli, @commitlint/config-conventional)
• chore(deps): update dependency @testing-library/react to v15
• chore(deps): update dependency css-loader to v7
• chore(deps): update dependency eslint to v9
• chore(deps): update dependency husky to v9
• chore(deps): update dependency style-loader to v4
• chore(deps): update github/codeql-action action to v3
• fix(deps): update dependency @adyen/api-library to v17
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update babel monorepo to v7.24.6 (@babel/core, @babel/preset-env, @babel/preset-react)
• chore(deps): update dependency style-loader to v3.3.4
• chore(deps): update commitlint monorepo (@commitlint/cli, @commitlint/config-conventional)
• chore(deps): update dependency html-webpack-plugin to v5.6.0
• fix(deps): update dependency @adyen/adyen-web to v5.64.0
• fix(deps): update dependency @salesforce/retail-react-app to v2.4.2
• chore(deps): update actions/checkout action to v4
• chore(deps): update actions/setup-node action to v4
• chore(deps): update node.js to v20
• chore(deps): update npm to v10
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/workflows/codeql-analysis.yml

• actions/checkout v4
• github/codeql-action v2
• github/codeql-action v2
• github/codeql-action v2

.github/workflows/e2e.yml

• actions/checkout v3
• actions/setup-node v3
• actions/upload-artifact v3

.github/workflows/npm-publish.yml

• actions/checkout v4
• actions/setup-node v4

.github/workflows/npm-unpublish.yml

• actions/checkout v4
• actions/setup-node v4

npm

package.json

• @commitlint/cli ^18.2.0
• @commitlint/config-conventional ^18.1.0
• husky ^8.0.3
• node ^16.0.0 || ^18.0.0
• npm ^7.0.0 || ^8.0.0 || ^9.0.0

packages/adyen-retail-react-app/package.json

• @salesforce/retail-react-app 2.3.0
• css-loader ^6.8.1
• dotenv ^16.3.1
• style-loader ^3.3.3
• node ^16.0.0 || ^18.0.0
• npm ^7.0.0 || ^8.0.0 || ^9.0.0

packages/adyen-salesforce-pwa/package.json

• @adyen/adyen-web ^5.63.0
• @adyen/api-library ^16.0.1
• @salesforce/retail-react-app 2.3.0
• dotenv ^16.3.1
• express-validator ^7.0.1
• minimist ^1.2.8
• node-fetch ^3.3.2
• uuid ^9.0.1
• @babel/core ^7.23.3
• @babel/preset-env ^7.23.3
• @babel/preset-react ^7.23.3
• @testing-library/jest-dom ^6.2.0
• @testing-library/react ^14.1.2
• babel-jest ^29.7.0
• babel-loader ^9.1.3
• clean-webpack-plugin ^4.0.0
• cross-spawn ^7.0.3
• css-loader ^6.8.1
• eslint ^8.54.0
• eslint-plugin-react ^7.33.2
• file-loader ^6.2.0
• html-webpack-plugin ^5.5.3
• jest ^29.7.0
• jest-environment-jsdom ^29.7.0
• jest-extended ^4.0.2
• mini-css-extract-plugin ^2.7.6
• style-loader ^3.3.3
• url-loader ^4.1.1
• webpack ^5.89.0
• webpack-cli ^5.1.4

---

• Check this box to trigger a request for Renovate to run again on this repository