[FEATURE] provision for secure payment links

[kashif-m]

Feature Description

Provide open and secure payment links for different use cases

• Open links
  • Accessible by anyone
  • Can be opened in new tabs
  • Can be iframed by any host
  • SPMs are never listed
• Secure links
  • Can be opened only in iframes by allowed_domains (configurable)
  • SPMs can be listed (configurable)

Possible Implementation

When payment links creation is requested, create two links

• Open
  • Always create this link
• Secure
  • Create only if allowed_domains are set in the profile
  • If created, store these domains in DB

When payment links render is requested

• Open - open as is (status vs initiate)
• Secure
  • Validate if the request is coming from an iframe
  • Validate Origin + Referer headers
  • Client side script to not load the SDK incase iframe is loaded in top

Have you spent some time checking if this feature request has been raised before?

• I checked and didn't find a similar issue

Have you read the Contributing Guidelines?

• I have read the Contributing Guidelines

Are you willing to submit a PR?

Yes, I am willing to submit a PR!