Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Accelerator idempotency handler needs an extension to handle requests that create resources inside the server (POST) but having an empty payload #308

Open
Akila94 opened this issue Jan 28, 2025 · 0 comments

Comments

@Akila94
Copy link
Member

Akila94 commented Jan 28, 2025

According to the current idempotency validation implementation, the method used to validate the idempotency of requests with empty payloads is written in a way that cannot be extended by the toolkits. There can be POST requests that don't have a request body (basically an empty JSON ({})). But still, these requests could create a resource inside the server.

A perfect example is the start authorization POST request of the NextGenPSD2 Implementation Guidelines. The request doesn't have a payload but still creates a resource inside the server. Making it non-idempotent. This request is used in multi-level authorization scenario in the NextGenPSD2 toolkit.

Definition of Idempotent Request

An HTTP method is considered idempotent if the intended effect on the server of making a single request is the same as the effect of making several identical requests.

Therefore, we need to expose an extension from the accelerator idempotency validator so the toolkits has such requests can be marked as non-idempotent requests.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant