View Issue Details

IDProjectCategoryView StatusLast Update
0010525Talermerchant portal webuipublic2025-10-31 19:49
ReporterChristian Grothoff Assigned Tosebasjm Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PriorityhighSeverityfeatureReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version1.1Fixed in Version1.1 
Summary0010525: merchant backend SPA should implement payment target restrictions
DescriptionWith protocol v22, we introduced the ability to restrict account types. See /config:

      // Space-separated list of enabled payment target types.
      // Useful if the SPA should not show allow adding other
      // types of bank accounts. "*" is used to represent no
      // restriction.
      // Since protocol **v22**
      payment_target_types: string;

      // Regular expression representing further restrictions
      // on allowed payment targets. Any "payto://"-URI supplied
      // for a bank account must match the given regular expression.
      // For example, "payto://iban/CH.*" would restrict the system
      // to only Swiss bank accounts.
      // Optional, no restrictions are imposed if the field is
      // absent.
      // Since protocol **v22**
      payment_target_regex? string;

The SPA should enforce these. (The backend _also_ does, but never good to get a 400 Bad request :-)).
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2025-10-23 17:52

manager   ~0026239

Let's *restrict* this to ONLY the payment target type for now. The regex will clearly change, so that'll be a bug in the (distant) future...

sebasjm

2025-10-23 20:38

developer   ~0026241

2e77770d4..971e5a00a

Issue History

Date ModifiedUsernameFieldChange
2025-10-23 08:00Christian GrothoffNew Issue
2025-10-23 08:00Christian GrothoffStatusnew => assigned
2025-10-23 08:00Christian GrothoffAssigned To => sebasjm
2025-10-23 17:52Christian GrothoffNote Added: 0026239
2025-10-23 20:38sebasjmNote Added: 0026241
2025-10-23 20:38sebasjmStatusassigned => informing
2025-10-23 20:38sebasjmResolutionopen => fixed
2025-10-23 22:50Christian GrothoffFixed in Version => 1.1
2025-10-23 22:51Christian GrothoffTarget Version1.2 => 1.1
2025-10-31 19:49Christian GrothoffStatusinforming => closed
2026-08-23 14:18Florian DoldCategorymerchant backoffice SPA => merchant portal webui