{"action":"opened","issue":{"url":"https://api.github.com/repos/thephpleague/omnipay-authorizenet/issues/22","labels_url":"https://api.github.com/repos/thephpleague/omnipay-authorizenet/issues/22/labels{/name}","comments_url":"https://api.github.com/repos/thephpleague/omnipay-authorizenet/issues/22/comments","events_url":"https://api.github.com/repos/thephpleague/omnipay-authorizenet/issues/22/events","html_url":"https://github.com/thephpleague/omnipay-authorizenet/issues/22","id":93553478,"number":22,"title":"SIMcompleteAuthorizeResponse and SPMcompleteResponse should be redirects","user":{"login":"judgej","id":395934,"avatar_url":"https://avatars.githubusercontent.com/u/395934?v=3","gravatar_id":"","url":"https://api.github.com/users/judgej","html_url":"https://github.com/judgej","followers_url":"https://api.github.com/users/judgej/followers","following_url":"https://api.github.com/users/judgej/following{/other_user}","gists_url":"https://api.github.com/users/judgej/gists{/gist_id}","starred_url":"https://api.github.com/users/judgej/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/judgej/subscriptions","organizations_url":"https://api.github.com/users/judgej/orgs","repos_url":"https://api.github.com/users/judgej/repos","events_url":"https://api.github.com/users/judgej/events{/privacy}","received_events_url":"https://api.github.com/users/judgej/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-07T15:08:46Z","updated_at":"2015-07-07T15:08:46Z","closed_at":null,"body":"This has niggled me for a while, but I could not put my finger on the problem. Just realised today, while writing a test harness, that the SIM/DPM \"complete\" respons messages just provide the transaction data and the result, but leave the merchant site entirely to decide what to do about that.\r\n\r\nIn fact, there is just one thing to do: a redirect. For Authorize.Net this redirect is not like the GET/POST methods offered by OmniPay Common. This is a HTML page that needs to be returned, containing a GET URL redirect. The redirect cannot use an auto-submitted POST, as that will generate browser security warnings if the final return page is not SSL (HTTPS)."}}