View Issue Details

IDProjectCategoryView StatusLast Update
0010070Talerdeployment and operationspublic2025-08-31 17:10
Reporteravalos Assigned ToFlorian Dold Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Target Version1.0 stretch goalsFixed in Version1.0 stretch goals 
Summary0010070: TOPS exchange requires ToS download after phone number validation [5h]
DescriptionFor a p2p request, the KYC link first asks to validate the phone number, and then nothing happens.

If you click on the link again, it then asks you to accept the ToS, and it is until then that the transaction completes.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

The plan

IDSummaryStatusAssigned ToEstimated effort (hours)
0010099implement DD64 (kyc check algo) in wallet-core [8h] closedFlorian Dold
This issue (hours)
Its children (hours)0
Together (hours)0
Nothing is missing: the plan can be finished.

Relationships

parent of 0010099 closedFlorian Dold implement DD64 (kyc check algo) in wallet-core [8h] 

Activities

Florian Dold

2025-06-05 01:00

manager   ~0025139

It actually looks like the exchange is simply instating the zero rules here. Doesn't seem like an issue with the TOPS config, but the exchange kyclogic itself.

Maybe the deposit zero rules shouldn't be applied for a wallet account (with a merge reserve payto)?

Reproducer:

$ taler-harness run-integrationtests tops-peer

Note how the exchange logs say this after passing the challenger postal auth:

2025-06-05T02:54:03.855870+0200 taler-exchange-httpd-1598618(Y9AMDSVJ5K1XT9NAG520RJR5PC) INFO lookup_kyc_status_by_token returned 0
2025-06-05T02:54:03.855879+0200 taler-exchange-httpd-1598618(Y9AMDSVJ5K1XT9NAG520RJR5PC) INFO Making applicable zero-measures for accounts under current rules active
{
  "measures": [
    {
      "rule_name": "DEPOSIT-LIMIT-ZERO",
....

Florian Dold

2025-06-05 01:17

manager   ~0025140

Or ... actually, maybe the requirement is okay, and the wallet needs to do a trial merge?

Christian Grothoff

2025-06-05 07:14

manager   ~0025143

We can't exactly remove the zero-DEPOSIT rule here, as the wallet may still need to do a KYC-auth before DEPOSITing into a bank account, right? We validated a phone number, not a bank account.

However, zero-DEPOSIT limits have nothing to do with MERGE/p2p payments, so why would the wallet care about a zero-deposit rule if we're about to do P2P payments? That makes no sense. DEPOSIT rules do *not*apply on MERGE.

Florian Dold

2025-06-05 11:44

manager   ~0025147

Indeed. Thus the wallet should improve the kyc-check handling.

Here's a draft DD for the algorithm: https://docs.taler.net/design-documents/064-kyc-operation-algo.html

Florian Dold

2025-06-05 11:56

manager   ~0025151

Waiting with the implementation until the DD has been reviewed.

Christian Grothoff

2025-06-07 11:42

manager   ~0025180

Finished my review in 8f8839e0..d86185fd

Florian Dold

2025-07-09 00:00

manager   ~0025452

DD64 has been implemented in wallet-core v1.0.21.

We also have a test to check that the wallet doesn't ask the user to do the superfluous KYC check.

Issue History

Date ModifiedUsernameFieldChange
2025-06-04 14:26avalosNew Issue
2025-06-04 14:51Christian GrothoffAssigned To => Florian Dold
2025-06-04 14:51Christian GrothoffStatusnew => assigned
2025-06-04 21:17Florian DoldTarget Version => 1.0 stretch goals
2025-06-05 00:58Florian DoldAssigned ToFlorian Dold => Christian Grothoff
2025-06-05 01:00Florian DoldNote Added: 0025139
2025-06-05 01:17Florian DoldNote Added: 0025140
2025-06-05 07:14Christian GrothoffNote Added: 0025143
2025-06-05 07:14Christian GrothoffAssigned ToChristian Grothoff => Florian Dold
2025-06-05 11:43Florian DoldSummaryTOPS exchange requires ToS download after phone number validation => TOPS exchange requires ToS download after phone number validation [5h]
2025-06-05 11:44Florian DoldNote Added: 0025147
2025-06-05 11:56Florian DoldAssigned ToFlorian Dold => Christian Grothoff
2025-06-05 11:56Florian DoldNote Added: 0025151
2025-06-07 11:41Christian GrothoffAssigned ToChristian Grothoff => Florian Dold
2025-06-07 11:42Christian GrothoffNote Added: 0025180
2025-06-12 22:44Florian DoldRelationship addedparent of 0010099
2025-07-09 00:00Florian DoldNote Added: 0025452
2025-07-09 00:00Florian DoldStatusassigned => informing
2025-07-09 00:00Florian DoldResolutionopen => fixed
2025-08-31 17:09Christian GrothoffStatusinforming => closed
2025-08-31 17:10Christian GrothoffFixed in Version => 1.0 stretch goals