Problems with API callback from LiqPay to website

What is the name of the domain?

domain.example.com.ua

What is the issue you’re encountering

Cloudflare is block callback from LiaPay

What steps have you taken to resolve the issue?

Disable all security - not working.
Disable DNS to direct connection with my server is working correct.

Can you check if you find the blocked requests on https://dash.cloudflare.com/?to=/:account/:zone/security/events?

1 Like

Firewall Events

No have any messages about this callback

if we use software Postman, then the callback goes to the final server and it is visible in the cloudflare log. Callback in Postman and Liqpay is the same, but from Liqpay not goes to the final server.

If no Events show up in that log, I would assume it wasn’t blocked by Cloudflare. Is your hosting platform maybe also using Cloudflare?

I’m not sure about platform maybe also using Cloudflare or not using.
I sure that Cloudflare is blocking my callback, because when change for DNS only service Liqpay working correct with final server.

We using Cloudflare is more than 2 years, but problems started from 8th of January

If Cloudflare was blocking the request, it would show up in the Event log.

Can you try the Trace feature to see if anything else interferes with the request?

Also, what response does LiqPay receive? Have they shared any information about that with you?

1 Like

My best guess is that API has changed over that period of time, obviously. Kindly cross-check API request(s) on both software again.

1 Like

Maybe API has changed over that period of time, but i don’t understand, why the same callback with Postman working correct and from Liqpay not correct?

Was Postman or Ligpay updated in the meantime? :thinking:
Do they changed some defined parameter or settings? Might be worth checking changelog if not.

HTTP 0
I don’t know why 0

What is the name of the domain?

What is the issue you’re encountering

Cloudflare started blocking requests from the liqpay payment system. It does not allow a response with the order payment status. Because of this, the order status does not change. It started not so long ago, before that everything worked fine. Moreover, this is on several different sites. These requests are not displayed in the security event log.

What steps have you taken to resolve the issue?

The IP of the payment system has been added to the allow list.

I have the same problem on all my sites.

Have you tried the trace in Cloudflare?

Yes, HTTP Status Code: 500 it’s from the trace in Cloudflare.

May I ask in which CMS did you integrated it? So I might give it a try and test out. Thank you in advance.

I was rate limited just when I visited their Website. Quite unusual behaviour :thinking:

I am afraid I cannot even test this out as I planned …

Might be they’re rate limiting Cloudflare IPs as well.
I’d suggest to try contacting their support as well, just to cross-check this.

Opencart 3 and Opencart 2.3

Russian and Belarusian is blocked, other country will be ok