Paypal "Security error. Security header is not valid"? - paypal

In shopware 5, while ordering with the Paypal payment method. Redirecting to the Paypal login page sometimes shows an error message "Security error. Security header is not valid". If we reload the page or try again to order with Paypal it does not show the error and is redirected to the Paypal login page.
My Question is Why sometimes does it show the error message?

If the error is intermittent, it's a programming or system error in retrieving its configuration.
The "security header is not valid" is returned by PayPal when the API credentials used in a request are missing, invalid, or for an incorrect environment (sandbox vs. live).

Related

PayPal Sandbox IPN URL returns "Secure Connection Failed"

Some time ago I set up a page on my in-progress web site for purchase processing with PayPay using IPN and a Sandbox account.
Everything was working fine, mock payments were completing successfully, but it's been a couple of months since I last tested this part of the site, and I've suddenly found that it's no longer functioning.
Nothing has changed with the page, but I'm getting an "Internal Server Error" response when my page redirects to the "Sandbox URL":
https://www.sandbox.paypal.com/cgi-bin/webscr
I frequently find myself going around in circles with the PayPal documentation, there often appear to be two or more entirely separate documents describing the same procedure, and with conflicting information.
For example, this page describes the IPN testing process as I've been following it to date: https://www.paypal.com/cgi-bin/webscr?cmd=p/sell/ipn-test-outside
it is the URL provided by this page that is now returning the 500 Internal Server Error message. But I've subsequently discovered this page: https://developer.paypal.com/docs/classic/ipn/integration-guide/IPNTesting/#sandbox
which indicates an entirely different Sandbox URL. The latter looks more up-to-date, but changing my URL to redirect here results in a "Secure Connection Failed" message in FireFox (ERR_CONNECTION_RESET in Chrome).
Are both of these URLs invalid? Is the Sandbox site presently not processing payments? The situation is very confusing and I can't figure out what might be wrong.
Thank you for any advice.
I'm using a PayPal encrypted button for IPN and I get the same 500 "Internal Server Error" in the Sandbox that you are getting on the checkout page. I did not change my code either and I'm suddenly getting this error on PayPal's sandbox.
Unfortunately, PayPal is putting a low priority on fixing this. If you want the Sandbox to be fixed, open a ticket with them. The only way they will address this if enough customers complain.
It seems that sandbox is down, I have same problem with my website currently.

Error with Opencart

I installed the module chekout Express OpenCart 2.1.0.1 for my eshop www.lecoccolekids.com/eshop
I created the API of my business account, I created a sandbox account and I connected my business account for my sandbox account.
When I went to do a test purchase on my website everything goes well and the system sends me back to the order page made, but if I go to check in Opencart System-> Tool-> ErrorLog returns error. In http://www.famarinu.com/log.rtf link you can download the file where log.rtf control the type of error.
What should I do?
Thank you!
Your linked document seems to contain the debug logs of the transaction and no errors.
It contains the SetExpressCheckout, GetExpressCheckoutDetails and DoExpressCheckoutPayment API requests that your integration is sending and the response from PayPal.
It's also showing that an IPN was received for the transaction and PayPal responded with VERIFIED when your integration POSTed back for verification.
If you are worried about the "Transaction exists" line, that seems to be an intended log line from your PayPal module, and not an error, as seen here:
https://forum.opencart.com/viewtopic.php?t=115661

Login with PayPal Sandbox

Working on a Login with PayPal integration using their sandbox environment. One requirement when obtaining the initial authorization code, you supply a redirect_url in the query string. That url must roughly (protocol,port,hostname) match the redirect URL in the sandbox.
When filling out a return URL in the sandbox, the form says "Something went wrong. Try again later" after submitting for the first time. Upon the second submission, the request just times out altogether.
Meanwhile, when trying to initiate the Login with PayPal flow, it warns that:
Relying Party Validation error: redirect_uri provided in the request does not match with the registered redirect_uri. Please check the request.
Has anyone found a workaround for this or experienced this issue in the sandbox?
As Jay Patel mentioned, there has been an issue effecting users of payPals sandbox. It now appears like it could be fixed (see PayPal Community).
Can you attempt to run the script again to see if that was the issue?

Paypal Error: Dispatch Error, please check logfile for more information

I'm creating a Recurring Payment Profile on Paypal, first step is I logged in on the developer.paypal.com website and entered on sandbox website then logged a sandbox account credentails.
Then upon redirecting for Paypal Authorization (see link below)
https://www.sandbox.paypal.com/webscr&cmd=_express-checkout&token=EC-5N576060NN902951N
I get this error:
Paypal Error: Dispatch Error, please check logfile for more information
Any ideas?
Apparently, I shouldn't log on my developer paypal account and just use the sandbox account, which is different from before.
Unless you are not using the latest version of the api your redirect url should be
https://www.sandbox.paypal.com/incontext?token=EC-5N576060NN902951N

PayPal IPN simulator - how to generate INVALID response?

I'm using Paypal IPN simulator to test changes. I'm trying to generate an INVALID response.
I select
Transaction type: Cart Checkout
payment_status: Denied, Failed or Expired.
However all of these generate a notification call with response VERIFIED
update didn't read close enough. Documentation says: PayPal sends a single word back, which is either VERIFIED if the message originated with PayPal or INVALID if there is any discrepancy with what was originally sent. So if I just browse to my IPN URL directly, I will get an INVALID response from Paypal because the call to IPN did not originate with PayPal.
Regarding your update: close, but not exactly.
IPN will return VERIFIED or INVALID depending on whether or not it recognizes the POST data you're sending as having originated from PayPal.
So yes, if you browse to your IPN URL directly and it directly POST's no data / dummy data to PayPal, then yes, we won't recognize it as having originated from us and we'll return INVALID.
For example, this link will return INVALID:
https://www.paypal.com/cgi-bin/webscr?cmd=_notify-validate&dummy_data=true