Duplicate Payments

Hi there,

We’re seeing an issue of duplicate payments happening for orders – usually 1 or 2 per day, and not consistent across device type. The duplicates appear to be triggered by receipt of 2 3DS callbacks in quick succession eg:
[29/Nov/2019:23:27:18 +0000] “POST /?wc-api=st_gateway&order=1234 HTTP/1.1”
[29/Nov/2019:23:27:19 +0000] “POST /?wc-api=st_gateway&order=1234 HTTP/1.1”
(order id anonymised)

The duplicates are all coming from arcot.com (various subdomains), I’ve not been able to identify anything else that links the orders. I’ve contacted Secure Trading – they are not aware of any wider issues around this.

I’ve considered hooking into the same API call with a higher priority to set a lock file while the 3DS return is being dealt with (or something along those lines), to stop the duplicate from triggering another AUTH – though I can’t think of a way to detect reliably when the process is finished.

Have you had any other reports of duplicate payments? Would it be possible to lock down the process_payment method while it is in action for an order to prevent duplicates – or can you think of what else might be causing the issue?

Thanks

The page I need help with: [log in to see the link]