View Issue Details

IDProjectCategoryView StatusLast Update
0011106Talermerchant backoffice SPApublic2026-02-20 01:04
Reportervecirex Assigned Tovecirex  
PrioritynormalSeveritytweakReproducibilityalways
Status confirmedResolutionopen 
Target Version1.8 
Summary0011106: Phone numbers need proper checking
DescriptionIt's easy to see that even numbers like +41 get through for the backend to try to send them, which obviously fails.

TagsNo tags attached.
Attached Files

Relationships

duplicate of 0011105 acknowledgedvecirex no phone regex for taler ops 
related to 0011029 resolvedsebasjm add phone regex validation 
related to 0011107 confirmed Backend for sms auth needs fixing for cases where number wrong (e.g., too short, too long, or invalid (like flipped digit)) 
related to 0011108 confirmed Error message when an SMS cannot be delivered (bc of invalid number) should be subtle 

Activities

vecirex

2026-02-18 22:39

manager   ~0027790

Also the French string for start and end of number needs correction, but this I fix directly in fr.po.

Christian Grothoff

2026-02-19 17:52

manager   ~0027811

See also 0011103: multiple spaces in a row should also NOT be allowed.

sebasjm

2026-02-20 01:04

developer   ~0027825

i think we are running in circles, i saw multiple issue related to the phone validation and this is already fixed in spa 0011029 commit c2b9a77f5

but this requires the merchant deployment to have the configuration option PHONE_REGEX which exposes in /config and the SPA then uses the same validation as the server.
if this is in place, then @vecirex you can disallow any non-valid strings and will prevent all the 400 requests.

IF we require that SPA and backend have a sync default validation then this should be in the spec.
FTR the spa default validation is ^\+[0-9 ]*$

Issue History

Date Modified Username Field Change
2026-02-18 22:39 vecirex New Issue
2026-02-18 22:39 vecirex File Added: taler-merchant-better-backoffice-spa-phone-number-not-properly-checked.png
2026-02-18 22:39 vecirex Note Added: 0027790
2026-02-18 22:47 vecirex Relationship added related to 0011107
2026-02-19 00:52 vecirex Relationship added duplicate of 0011105
2026-02-19 02:50 vecirex Relationship added related to 0011108
2026-02-19 17:52 Christian Grothoff Note Added: 0027811
2026-02-19 17:52 Christian Grothoff Assigned To => sebasjm
2026-02-19 17:52 Christian Grothoff Status new => assigned
2026-02-19 17:53 Christian Grothoff Severity minor => tweak
2026-02-19 17:53 Christian Grothoff Target Version => 1.8
2026-02-19 18:42 Christian Grothoff Status assigned => confirmed
2026-02-20 00:59 sebasjm Relationship added related to 0011029
2026-02-20 01:04 sebasjm Note Added: 0027825
2026-02-20 01:04 sebasjm Assigned To sebasjm => vecirex