View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0010396 | Taler | merchant backend | public | 2025-09-12 12:59 | 2025-10-31 19:49 |
| Reporter | sebasjm | Assigned To | Christian Grothoff | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | major | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Product Version | git (master) | ||||
| Target Version | 1.1 | Fixed in Version | 1.1 | ||
| Summary | 0010396: missing cors headers | ||||
| Description | can't test locally $ curl 'http://merchant.taler.test/challenge/80-QTB72FANPXE74QJFFBE5V90GHS0XMYD2A6X6PTA1FWJKMZHCN980' -H 'Accept: application/json' -H 'Accept-Language: en-US,en;q=0.9,es;q=0.8' -H 'Connection: keep-alive' -H 'Content-Type: application/json' -H 'Origin: http://localhost:8080' -H 'Referer: http://localhost:8080/' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36' --data-raw '{}' -v * Host merchant.taler.test:80 was resolved. * IPv6: (none) * IPv4: 127.0.0.1 * Trying 127.0.0.1:80... * Connected to merchant.taler.test (127.0.0.1) port 80 > POST /challenge/80-QTB72FANPXE74QJFFBE5V90GHS0XMYD2A6X6PTA1FWJKMZHCN980 HTTP/1.1 > Host: merchant.taler.test > Accept: application/json > Accept-Language: en-US,en;q=0.9,es;q=0.8 > Connection: keep-alive > Content-Type: application/json > Origin: http://localhost:8080 > Referer: http://localhost:8080/ > User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 > Content-Length: 2 > * upload completely sent off: 2 bytes < HTTP/1.1 204 No Content < date: Fri, 12 Sep 2025 12:57:45 GMT < Connection: keep-alive < Keep-Alive: timeout=5 < * Connection #0 to host merchant.taler.test left intact | ||||
| Tags | No tags attached. | ||||
| as a workaround i tried to add the header in my nginx proxy but this also create a problems with the /challenge/xxx/confirm endpoint which correctly add the header, so my simple workaround doesn't work | |
| Fix committed to master branch. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-09-12 12:59 | sebasjm | New Issue | |
| 2025-09-12 12:59 | sebasjm | Status | new => assigned |
| 2025-09-12 12:59 | sebasjm | Assigned To | => Christian Grothoff |
| 2025-09-12 13:01 | sebasjm | Note Added: 0025896 | |
| 2025-09-12 13:09 | Christian Grothoff | ||
| 2025-09-12 13:09 | Christian Grothoff | Note Added: 0025897 | |
| 2025-09-12 13:09 | Christian Grothoff | Status | assigned => informing |
| 2025-09-12 13:09 | Christian Grothoff | Resolution | open => fixed |
| 2025-09-12 13:09 | Christian Grothoff | Fixed in Version | => 1.1 |
| 2025-10-31 19:49 | Christian Grothoff | Status | informing => closed |