PayPal 2FA Login Not Working

[parose42]

User's using PayPal's 2FA (two factor authentication) security can't login using the Digital Goods API. They basically get a user/password combination error on every login request. As this is a growing feature that's being actively promoted by PayPal to improve user security, it would be good to support if possible.

[thenbrent]

it would be good to support if possible

It would indeed. Patches welcome. :)

[parose42]

Do you know if this is even possible with PayPal's core Digital Goods Express product? Googling around suggests that this might be a limitation on the PayPal side of the fence when using 2FA with SMS and Digital Goods Express.

[thenbrent]

I have no idea. I didn't even know PayPal had 2FA until I saw this issue this morning.

[albi90]

Im also having issues with this any updates? FYI @thenbrent loving your library made my integration so much easier.

[albi90]

just checked the paypal documentation and it states the following:

SMS security keys for mobile PayPal login, in which buyers can sign up for an extra
layer of security with a secure token. Buyers add a one-time secure code to their password
or mobile PIN when they log in to PayPal. Buyers can use secure codes from hardware
tokens but not from software tokens sent by SMS to the buyer’s mobile phone.

[thenbrent]

@albi90 can you send a link to any docs on PayPal's 2FA?

[albi90]

Sure its at the bottom of the page

https://developer.paypal.com/docs/classic/express-checkout/integration-guide/ECOnMobileDevices/#id3817a5d1-ab29-41d1-89bb-5d71370409d0

[albi90]

Sorry that was the mobile link its stated in the following pdf

https://www.paypalobjects.com/webstatic/en_US/developer/docs/pdf/pp_expresscheckout_advancedfeaturesguide.pdf

[albi90]

Wait both of those are for mobile PayPal's documentation is horrible.

[thenbrent]

@albi90 it is indeed. I tried search both for "authentication", "factor" and "two" with no success.

[iadj]

Has this been fixed?

[thenbrent]

@iadj no, I can't fix it if I can't get any information about it. 😄

If you can send me a link to documentation of PayPal's 2FA or some other source discussing what it is and how it's implemented, I can look into it further.