View Issue Details

IDProjectCategoryView StatusLast Update
0010120Talermerchant portal webuipublic2025-08-31 17:09
Reportersebasjm Assigned Tosebasjm Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeveritymajorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.0 
Target Version1.0 stretch goalsFixed in Version1.0 stretch goals 
Summary0010120: do not ask the admin for the current instance password to change to a new password
Descriptionotherwise, admin can't unlock merchnat accounts

i also suggest that we should add the feature from the merchant backend for the admin to reset the password and the backend should send an email with new random password (and reset-on-login flag)
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Relationships

related to 0010121 closedsebasjm should be able to change the instance password with the admin access token 

Activities

Christian Grothoff

2025-06-22 16:01

manager   ~0025306

Password reset involving the e-mail is another (already open) issue. Just make sure the admin can set the password for now.

sebasjm

2025-06-22 22:52

developer   ~0025312

Ok, SPA does this but the backend doesn't accept the token of the admin session to change the password of a random instance (in this case "qwe")

curl 'http://merchant.taler.test:1180/instances/qwe/private/auth' \
  -H 'Authorization: Bearer secret-token:W54DY9Q7PZMSHVN20HAKMWJAA5NDB1XKW9SY8XADZJ1NQN2CKYC0' \
  --data-raw '{"token":"secret-token:eee","method":"token"}'

sebasjm

2025-06-22 22:59

developer   ~0025313

22563a4f9..f25215a33 fixed the SPA, still needs the merchant backend

i'm keeping this open since it will be need to be adapted for v19 (with the new password auth type)

sebasjm

2025-06-23 12:22

developer   ~0025322

f25215a33..b677f250a

Issue History

Date ModifiedUsernameFieldChange
2025-06-22 15:31sebasjmNew Issue
2025-06-22 16:00Christian GrothoffAssigned To => sebasjm
2025-06-22 16:00Christian GrothoffStatusnew => assigned
2025-06-22 16:00Christian GrothoffTarget Version => 1.1
2025-06-22 16:01Christian GrothoffNote Added: 0025306
2025-06-22 22:52sebasjmNote Added: 0025312
2025-06-22 22:59sebasjmNote Added: 0025313
2025-06-22 23:21sebasjmRelationship addedrelated to 0010121
2025-06-22 23:22sebasjmAssigned Tosebasjm =>
2025-06-22 23:22sebasjmStatusassigned => implementing
2025-06-23 12:22sebasjmNote Added: 0025322
2025-06-23 12:22sebasjmAssigned To => sebasjm
2025-06-23 12:22sebasjmStatusimplementing => informing
2025-06-23 12:22sebasjmResolutionopen => fixed
2025-06-23 16:31Christian GrothoffProduct Version => 1.0
2025-06-23 16:31Christian GrothoffFixed in Version => 1.0 stretch goals
2025-06-23 16:31Christian GrothoffTarget Version1.1 => 1.0 stretch goals
2025-08-31 17:09Christian GrothoffStatusinforming => closed
2026-08-23 14:18Florian DoldCategorymerchant backoffice SPA => merchant portal webui