[
https://issues.apache.org/jira/browse/FINERACT-2485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18101973#comment-18101973
]
Aleksandar Vidakovic edited comment on FINERACT-2485 at 8/5/26 7:07 AM:
------------------------------------------------------------------------
I'm taking this one over, because this is becoming a blocker for 2 other GSoC
projects related to new command processing. We have to have feature parity with
the current (legacy) implementation before we can merge more migrated
packages/modules.
Also: I changed the scope of this ticket. Before it was just targeting loan and
savings. This should be a generic/general solution anyway. There is no reason
why this should only work with these two packages/modules.
FYI
was (Author: aleks):
I'm taking this one over, because this is becoming a blocker for 2 other GSoC
projects related to new command processing. We have to have feature parity with
the current (legacy) implementation before we can merge more migrated
packages/modules.
> Standardize and harden idempotency
> ----------------------------------
>
> Key: FINERACT-2485
> URL: https://issues.apache.org/jira/browse/FINERACT-2485
> Project: Apache Fineract
> Issue Type: Sub-task
> Reporter: saifulhuq
> Assignee: Aleksandar Vidakovic
> Priority: Major
> Labels: poc, security
> Attachments: GSoC 2026 – FINERACT-2485 Standardize and Harden
> Transaction Idempotency for Savings and Loans final 1_compressed.pdf
>
>
> *Goal:* Standardize idempotency enforcement to prevent replay attacks in core
> financial modules. *Implementation Strategy (Addressing James Dailey's
> feedback):*
> # *Opt-In Architecture:* New logic will be behind a Global Configuration
> flag. Default remains legacy behavior to ensure 100% backward compatibility.
> # *Phased Approach:* Audit existing {{m_portfolio_command_source}} usage and
> bridge gaps in the Savings module first.
> # *Testing:* Implementation of integration tests simulating network
> failures/retries.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
