Apple pay token

Question

Created May ’22

Replies 1

Boosts 0

Participants 2

How to prevent Apple Pay tokens from being used a second time? After getting PKPaymentToken in my app. I am passing the payment information to my web server and from my web server am sending to the payment platform. It works well.

For testing, I send again this token to the payment platform. It works but it should be avoided.

Boost

Answer 1

Systems Engineer OP

Apple

May ’22

Your payment platform can reject this token by looking at the timestamp embedded into the signature of the token and comparing it against the transaction timestamp. If it's outside a specific window then the payment provider can reject the token. See more on this here.

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

0