View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0011215Talermerchant backoffice SPApublic2026-03-09 16:042026-03-09 17:41
Reportervecirex Assigned Tovecirex  
PriorityurgentSeverityblockReproducibilityN/A
Status assignedResolutionopen 
Summary0011215: MFA seems broken (at least) when trying to change IBAN
DescriptionWhen trying to change the IBAN, a use-case which was common in practice already several times -- sometimes smaller merchants which don't have a collective company form added a wrong IBAN first or other info related to it -- the backoffice SPA cannot use any MFA.
Steps To ReproduceOn it.
Additional InformationIt's not clear yet if this only happens when trying to change the IBAN or if it's a general issue.
TagsNo tags attached.
Attached Files
taler-merchant-v1_5_0-with-mfa-auth-issuse-when-trying-to-change-iban.png (80,650 bytes)   
taler-merchant-v1_5_0-with-mfa-auth-issuse-when-trying-to-change-iban.png (80,650 bytes)   

Activities

vecirex

2026-03-09 16:05

manager   ~0028043

Assign to me, to see if I can reproduce or find other areas with that issue.

vecirex

2026-03-09 16:15

manager   ~0028044

Via DevConsole (brave) this can be seen.
taler-merchant-v1_5_0-with-mfa-auth-issuse-when-trying-to-change-iban-2.png (125,247 bytes)   
taler-merchant-v1_5_0-with-mfa-auth-issuse-when-trying-to-change-iban-2.png (125,247 bytes)   

vecirex

2026-03-09 16:18

manager   ~0028045

Last edited: 2026-03-09 16:19

 That's also what can be seen on the taler-merchant-httpd via journalctl:

 
[...]
Mar 09 16:12:44 betel taler-merchant-httpd[529831]: (Z5DQ9QVBA2HKVST3MA6TQWN54G) INFO Generating JSON response with code 2126 (46-QAWC8WGMW1KXY37T92QXGDMCTA58QSSG7CP1NH4GS4JTY21P5750)
Mar 09 16:12:44 betel taler-merchant-httpd[529831]: (Z5DQ9QVBA2HKVST3MA6TQWN54G) INFO Processing /challenge in phase 5
Mar 09 16:12:44 betel taler-merchant-httpd[529831]: (Z5DQ9QVBA2HKVST3MA6TQWN54G) INFO Request for `/instances/merchant1_5_0/challenge/46-QAWC8WGMW1KXY37T92QXGDMCTA58QSSG7CP1NH4GS4JTY21P5750' completed with HTTP status 404 (0)
Mar 09 16:13:06 betel taler-merchant-httpd[529831]: (CBJ0Y7F9BZDARE94F57E3N5PEW) INFO Handling request (POST) for URL '/'
Mar 09 16:13:06 betel taler-merchant-httpd[529831]: (CBJ0Y7F9BZDARE94F57E3N5PEW) WARNING External protocol violation detected at taler-merchant-httpd_dispatcher.c:1502.
Mar 09 16:13:06 betel taler-merchant-httpd[529831]: (CBJ0Y7F9BZDARE94F57E3N5PEW) INFO Generating JSON response with code 20 (POST)
Mar 09 16:13:06 betel taler-merchant-httpd[529831]: (CBJ0Y7F9BZDARE94F57E3N5PEW) INFO Request for `/' completed with HTTP status 405 (0)
Mar 09 16:13:25 betel taler-merchant-httpd[529831]: (YAN5A16QDH82TJTSWHVNC7VY28) INFO Handling request (POST) for URL '/'
Mar 09 16:13:25 betel taler-merchant-httpd[529831]: (YAN5A16QDH82TJTSWHVNC7VY28) WARNING External protocol violation detected at taler-merchant-httpd_dispatcher.c:1502.
Mar 09 16:13:25 betel taler-merchant-httpd[529831]: (YAN5A16QDH82TJTSWHVNC7VY28) INFO Generating JSON response with code 20 (POST)
Mar 09 16:13:25 betel taler-merchant-httpd[529831]: (YAN5A16QDH82TJTSWHVNC7VY28) INFO Request for `/' completed with HTTP status 405 (0)
Mar 09 16:13:31 betel taler-merchant-httpd[529831]: (77G4SXPDJ1WT9FXHCZH5RXBCTR) INFO Handling request (POST) for URL '/instances/merchant1_5_0/challenge/47-NMYBZHXNZFFT2HFNVD4NQ3AE59CX0QJD4AAESQNJXKNM40D547MG'
Mar 09 16:13:31 betel taler-merchant-httpd[529831]: (77G4SXPDJ1WT9FXHCZH5RXBCTR) INFO Processing /challenge in phase 0
Mar 09 16:13:31 betel taler-merchant-httpd[529831]: (77G4SXPDJ1WT9FXHCZH5RXBCTR) INFO Processing /challenge in phase 1
Mar 09 16:13:31 betel taler-merchant-httpd[529831]: (77G4SXPDJ1WT9FXHCZH5RXBCTR) ERROR Assertion failed at taler-merchant-httpd_post-challenge-ID.c:550.
Mar 09 16:13:31 betel taler-merchant-httpd[529831]: (77G4SXPDJ1WT9FXHCZH5RXBCTR) INFO Generating JSON response with code 2126 (47-NMYBZHXNZFFT2HFNVD4NQ3AE59CX0QJD4AAESQNJXKNM40D547MG)
Mar 09 16:13:31 betel taler-merchant-httpd[529831]: (77G4SXPDJ1WT9FXHCZH5RXBCTR) INFO Processing /challenge in phase 5
Mar 09 16:13:31 betel taler-merchant-httpd[529831]: (77G4SXPDJ1WT9FXHCZH5RXBCTR) INFO Request for `/instances/merchant1_5_0/challenge/47-NMYBZHXNZFFT2HFNVD4NQ3AE59CX0QJD4AAESQNJXKNM40D547MG' completed with HTTP status 404 (0)
Mar 09 16:13:36 betel taler-merchant-httpd[529831]: (EEESABQN8QVBYXK6BBJ2MEHC6R) INFO Handling request (POST) for URL '/instances/merchant1_5_0/challenge/47-NMYBZHXNZFFT2HFNVD4NQ3AE59CX0QJD4AAESQNJXKNM40D547MG'
Mar 09 16:13:36 betel taler-merchant-httpd[529831]: (EEESABQN8QVBYXK6BBJ2MEHC6R) INFO Processing /challenge in phase 0
Mar 09 16:13:36 betel taler-merchant-httpd[529831]: (EEESABQN8QVBYXK6BBJ2MEHC6R) INFO Processing /challenge in phase 1
Mar 09 16:13:36 betel taler-merchant-httpd[529831]: (EEESABQN8QVBYXK6BBJ2MEHC6R) ERROR Assertion failed at taler-merchant-httpd_post-challenge-ID.c:550.
Mar 09 16:13:36 betel taler-merchant-httpd[529831]: (EEESABQN8QVBYXK6BBJ2MEHC6R) INFO Generating JSON response with code 2126 (47-NMYBZHXNZFFT2HFNVD4NQ3AE59CX0QJD4AAESQNJXKNM40D547MG)
Mar 09 16:13:36 betel taler-merchant-httpd[529831]: (EEESABQN8QVBYXK6BBJ2MEHC6R) INFO Processing /challenge in phase 5
Mar 09 16:13:36 betel taler-merchant-httpd[529831]: (EEESABQN8QVBYXK6BBJ2MEHC6R) INFO Request for `/instances/merchant1_5_0/challenge/47-NMYBZHXNZFFT2HFNVD4NQ3AE59CX0QJD4AAESQNJXKNM40D547MG' completed with HTTP status 404 (0)
Mar 09 16:15:33 betel taler-merchant-httpd[529831]: (A8T66MJ4CXA5A33SW4DYGR1HN8) INFO Handling request (POST) for URL '/'
Mar 09 16:15:33 betel taler-merchant-httpd[529831]: (A8T66MJ4CXA5A33SW4DYGR1HN8) WARNING External protocol violation detected at taler-merchant-httpd_dispatcher.c:1502.
Mar 09 16:15:33 betel taler-merchant-httpd[529831]: (A8T66MJ4CXA5A33SW4DYGR1HN8) INFO Generating JSON response with code 20 (POST)
Mar 09 16:15:33 betel taler-merchant-httpd[529831]: (A8T66MJ4CXA5A33SW4DYGR1HN8) INFO Request for `/' completed with HTTP status 405 (0)
[...]

vecirex

2026-03-09 16:20

manager   ~0028046

Assign to you, CG, while I will do tests with other and new instances.

sebasjm

2026-03-09 17:02

developer   ~0028049

logs shows that the SPA made a POST request to `/` ??? i can't reproduce it locally

Christian Grothoff

2026-03-09 17:32

manager   ~0028053

Wild, but the POST to "/" cannot be fixed in the backend, that must be a SPA issue!?

Anyway, Hernani is likely testing with the outdated SPA of v1.5.0. Let's repackage and test again.

Christian Grothoff

2026-03-09 17:41

manager   ~0028054

New Debian package with latest SPA uploaded, please test...

Issue History

Date Modified Username Field Change
2026-03-09 16:04 vecirex New Issue
2026-03-09 16:04 vecirex File Added: taler-merchant-v1_5_0-with-mfa-auth-issuse-when-trying-to-change-iban.png
2026-03-09 16:05 vecirex Assigned To => vecirex
2026-03-09 16:05 vecirex Status new => assigned
2026-03-09 16:05 vecirex Note Added: 0028043
2026-03-09 16:15 vecirex Note Added: 0028044
2026-03-09 16:15 vecirex File Added: taler-merchant-v1_5_0-with-mfa-auth-issuse-when-trying-to-change-iban-2.png
2026-03-09 16:18 vecirex Note Added: 0028045
2026-03-09 16:19 vecirex Note Edited: 0028045
2026-03-09 16:19 vecirex Note Edited: 0028045
2026-03-09 16:20 vecirex Assigned To vecirex => Christian Grothoff
2026-03-09 16:20 vecirex Note Added: 0028046
2026-03-09 17:02 sebasjm Note Added: 0028049
2026-03-09 17:32 Christian Grothoff Note Added: 0028053
2026-03-09 17:41 Christian Grothoff Assigned To Christian Grothoff => vecirex
2026-03-09 17:41 Christian Grothoff Note Added: 0028054