View Issue Details

IDProjectCategoryView StatusLast Update
0010389Talermerchant backendpublic2025-09-11 19:39
Reportersebasjm Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityfeatureReproducibilityalways
Status closedResolutionwon't fix 
Product Version1.0 
Target Version1.1Fixed in Version1.1 
Summary0010389: backend should enforce verification order
Descriptionsome verification are cheaper than others (sms vs email)

if all verification are required then backend should not do costly verification (sending sms) if the user can't even validated the fist check

right know orders in MANDATORY_TAN_CHANNELS is kept and shown in /config but it will also be good to reflect the order in ChallengeResponse and return an error code if the merchant don't follow the right order.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2025-09-11 19:39

manager   ~0025890

Nah, that's not something we should care to enforce in the backend I think. It's good if the frontend does, but I don't think the added complexity is necessary for the backend.

Issue History

Date ModifiedUsernameFieldChange
2025-09-10 13:21sebasjmNew Issue
2025-09-11 19:39Christian GrothoffNote Added: 0025890
2025-09-11 19:39Christian GrothoffAssigned To => Christian Grothoff
2025-09-11 19:39Christian GrothoffSeverityminor => feature
2025-09-11 19:39Christian GrothoffStatusnew => closed
2025-09-11 19:39Christian GrothoffResolutionopen => won't fix
2025-09-11 19:39Christian GrothoffProduct Version => 1.0
2025-09-11 19:39Christian GrothoffFixed in Version => 1.1
2025-09-11 19:39Christian GrothoffTarget Version => 1.1