Developer finds MTN Mobile Money timeouts are ambiguous, not failures

·1 views

A developer testing MTN Mobile Money's sandbox on 16 September ran five identical collection requests via curl, varying only the X-Callback-Url header, and found that callbacks were only delivered when that header was explicitly included. The experiment revealed that the providerCallbackHost field registered during API user creation acts as an allowlist for permitted callback destinations, not an automatic delivery mechanism. A key insight from the tests is that a request timeout cannot be treated as a confirmed failure, since the operator may have processed the payment but lost the response in transit. To handle this ambiguity, the developer's payment system Nkap marks unanswered requests as UNKNOWN and uses a reconciler to keep querying the operator until a conclusive result is returned. If no resolution is found within a set window, the case is escalated to a human rather than being automatically marked as failed.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

New C Code Scoring Tool Flags Risky Functions Using Nesting and Pointer Depth

A lightweight open-source tool called c-code-score assigns a single risk score to C functions based on three factors: nesting depth, pointer depth, and dereference chain length. The score is calculated by multiplying these three metrics, aiming to highlight functions most prone to memory bugs and null-pointer errors. When tested against real-world projects like libXt and libtiff, the score correlated with maintenance churn at rates of 0.52 and 0.38 respectively, outperforming both raw line count and cyclomatic complexity. The tool also works as a feedback loop for LLM-generated C code, allowing developers to iteratively prompt rewrites until scores improve. It is available via pip and requires no external dependencies or complex parsing infrastructure.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds rule-based crypto wallet classifier to test on-chain label readability

A developer created a browser-based card game called LabelMe to explore how much of a crypto wallet's classification can be inferred from raw on-chain numbers alone. The project uses ten real Ethereum wallets, each displaying four Nansen-computed metrics — PnL, top trades, balance profile, and counterparty mix — and asks players to assign one of five labels: Smart Money, Exchange, Whale, Contract/Pool, or Regular. Answer keys are derived directly from Nansen API calls rather than the developer's own judgment, making the ground truth as objective as possible. Alongside the game, the developer wrote a minimal threshold-based rule reader — no machine learning model involved — to determine how accurately simple numeric rules can replicate Nansen's labeling. The experiment found that activity volume and token diversity were stronger signals for Smart Money classification than win rate or realized PnL.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Modular Architecture Offers a Simpler Path to Scaling Large Next.js Apps

As Next.js applications grow, codebases often become difficult to maintain, with features scattered across hundreds of files and multiple teams conflicting over the same code. Common scaling solutions like Multi-Zones and microfrontends address the problem by splitting the application into separate deployable units, but introduce significant operational overhead and do not fix the underlying code organisation issue. Modular architecture, familiar from frameworks like Nuxt and NestJS, instead splits code by feature within a single app, keeping all logic for a given feature in one self-contained folder. A developer has built an open-source package called next-modular to bring this pattern natively to Next.js, allowing each feature module to plug into the app through a single configuration entry. The approach aims to improve maintainability, debuggability, and code reuse without the complexity of running and coordinating multiple independent applications.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Retrofit Spring Security Into a Legacy Internal App When VPN Access Ends

A software developer has published a detailed guide on adding Spring Security to an existing Java Spring Boot application that previously relied solely on VPN-based network access for protection. The article addresses a common real-world scenario where internal business tools — such as accounting systems and admin panels — must handle authentication and authorization as remote and external access needs grow. Using a demonstration financial accounting system built on Java 21 and Spring Boot 3.5, the author walks through retrofitting security onto a live, publicly accessible app with a fabricated but structurally realistic dataset. The guide deliberately recreates actual bugs encountered during a parallel work project, allowing readers to trace each flaw from cause to fix using published code on GitHub. It is aimed at beginner and mid-level developers who have basic Spring Security experience but have not yet tackled row-level or role-based data authorization.

0 comments Read more at DEV Community