[Authorize.Net] How is «Merchant MD5» used?

dmitry_fedyuk · 2018-02-19 20:48:25 UTC

Is is used by the Magento\Authorizenet\Model\Directpost::validateResponse() method only:

magento/magento2/blob/2.2.2/app/code/Magento/Authorizenet/Model/Directpost.php#L525-L544


/**
 * Validate response data. Needed in controllers.
 *
 * @return bool true in case of validation success.
 * @throws \Magento\Framework\Exception\LocalizedException In case of validation error
 */
public function validateResponse()
{
    $response = $this->getResponse();
    //md5 check
    if (!$this->getConfigData('trans_md5')
        || !$this->getConfigData('login')
        || !$response->isValidHash($this->getConfigData('trans_md5'), $this->getConfigData('login'))
    ) {
        throw new \Magento\Framework\Exception\LocalizedException(
            __('The transaction was declined because the response hash validation failed.')
        );
    }
    return true;
}

dmitry_fedyuk · 2018-02-19 20:58:24 UTC