recurly/recurly-js — Issue #16: signature not in buildSubscriptionForm?
Author: talibsharif
Created: 2011-11-11 23:23:09+00:00
State: open

After reading the documentation at the following address i have
question about the security of the implementation:
http://docs.recurly.com/recurlyjs/reference

It seems like buildSubscriptionForm doesn't support signature. The
reason i ask is that because i don't want the user to be able to
manipulate the account_code (this is the logged in user accountId in
our internal system).

Is this intentionally left out? or is there is some other way to
ensure that the user can't forge the account_code.

Thanks,
Talib