Thrusted redirect_uri for HelloAsso configurations

[armanddidierjean]

See #750

[Marc-Andrieu]

@armanddidierjean can this issue be closed?

[armanddidierjean]

I think we still use a global TRUSTED_PAYMENT_REDIRECT_URLS field:

Hyperion/app/core/mypayment/endpoints_mypayment.py

Line 1848 in 707bb52

if transfer_info.redirect_url not in settings.TRUSTED_PAYMENT_REDIRECT_URLS:

[Rotheem]

We use it only for MyPayment, other configuration use HelloassoConfiguration.redirect_uri

[Marc-Andrieu]

So this issue can be closed, right?

[armanddidierjean]

I would think it can not, as the global TRUSTED_PAYMENT_REDIRECT_URLS is still used for MyPayment.
I would personnaly be in favor of a per config thrusted list. See #750 (comment)

[Rotheem]

Didn't want to lose time on this when coding the multi config but it would indeed be a better solution