View Issue Details

IDProjectCategoryView StatusLast Update
0007244Talermechant backendpublic2022-06-06 19:43
ReporterChristian Grothoff Assigned ToChristian Grothoff  
PriorityhighSeveritymajorReproducibilityalways
Status resolvedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version0.9Fixed in Version0.9 
Summary0007244: merchant backend allows paying twice for an order
DescriptionThis was demonstrated by paying with a mobile phone (with QR code shown by FF extension) and then ALSO paying with the FF extension. The same order ID was used in all cases.

Three issues:
1) Backend should reject the 2nd payment;
2) Wallet-core needs to handle 2nd payment being rejected as "already paid" by refresh + moving to fulfillment;
3) Wallets should be long-polling for a payment happening by someone else, and move to fullfilment without allowing payment if payment is detected;
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2022-05-18 09:54 Christian Grothoff New Issue
2022-05-18 09:54 Christian Grothoff Status new => assigned
2022-05-18 09:54 Christian Grothoff Assigned To => Christian Grothoff
2022-06-06 19:43 Christian Grothoff Status assigned => resolved
2022-06-06 19:43 Christian Grothoff Resolution open => fixed
2022-06-06 19:43 Christian Grothoff Fixed in Version => 0.9