[
https://issues.apache.org/jira/browse/FINERACT-2485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18102138#comment-18102138
]
Aleksandar Vidakovic commented on FINERACT-2485:
------------------------------------------------
This doesn't look too bad... I'd say coding is done, did a couple of other
cleanups and introduced better extensibility via command hooks, the internal
API changed a bit, but the blast radius is fair/minimal (didn't leak outside
the command module). I might owe a test for idempotency. Will wait until the
first build and other tests are done to see if there are more action items.
> Standardize and harden idempotency
> ----------------------------------
>
> Key: FINERACT-2485
> URL: https://issues.apache.org/jira/browse/FINERACT-2485
> Project: Apache Fineract
> Issue Type: Sub-task
> Reporter: saifulhuq
> Assignee: Aleksandar Vidakovic
> Priority: Major
> Labels: poc, security
> Fix For: 1.16.0
>
> Attachments: GSoC 2026 – FINERACT-2485 Standardize and Harden
> Transaction Idempotency for Savings and Loans final 1_compressed.pdf
>
>
> *Goal:* Standardize idempotency enforcement to prevent replay attacks in core
> financial modules. *Implementation Strategy (Addressing James Dailey's
> feedback):*
> # *Opt-In Architecture:* New logic will be behind a Global Configuration
> flag. Default remains legacy behavior to ensure 100% backward compatibility.
> # *Phased Approach:* Audit existing {{m_portfolio_command_source}} usage and
> bridge gaps in the Savings module first.
> # *Testing:* Implementation of integration tests simulating network
> failures/retries.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
