Declarative onboarding metadata for the Adyen adapter pair: the credentials a
host collects, the provider event codes a host subscribes its standard webhook
to, and the CSP sources Adyen Web needs. The credential keys mirror
AdyenServerAdapterConfig plus the client adapter's clientKey. The event
list is exactly what webhook.ts maps, so a host's subscription screen and the
parser cannot drift.
csp follows Adyen's recommended policy: script allows https://*.adyen.com,
and frame and connect are a bare "*". 3-D Secure 2 challenge frames load
from issuer domains Adyen cannot list, so a list of hosts would block them.
The page also needs style-src https://*.adyen.com for the Adyen Web
stylesheet, plus img-src * and form-action * from the same policy, none of
which this type has a field for; the Content-Security-Policy tip in
Set up Adyen
lists every directive and why.
Declarative onboarding metadata for the Adyen adapter pair: the credentials a host collects, the provider event codes a host subscribes its standard webhook to, and the CSP sources Adyen Web needs. The credential keys mirror
AdyenServerAdapterConfigplus the client adapter'sclientKey. The event list is exactly whatwebhook.tsmaps, so a host's subscription screen and the parser cannot drift.cspfollows Adyen's recommended policy:scriptallowshttps://*.adyen.com, andframeandconnectare a bare"*". 3-D Secure 2 challenge frames load from issuer domains Adyen cannot list, so a list of hosts would block them. The page also needsstyle-src https://*.adyen.comfor the Adyen Web stylesheet, plusimg-src *andform-action *from the same policy, none of which this type has a field for; the Content-Security-Policy tip in Set up Adyen lists every directive and why.