View Issue Details

IDProjectCategoryView StatusLast Update
0010706Talermerchant backendpublic2026-02-04 19:00
Reportersebasjm Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version1.4Fixed in Version1.4 
Summary0010706: weird requirement of email when updating admin instance
DescriptionA required parameter in the request was NOT missing. This is likely a bug in the server implementation.

severity minor since it will only impact admin users with self provision configuration


curl 'http://merchant.taler.test/private' \
  -X 'PATCH' \
  -H 'Accept: application/json' \
  -H 'Accept-Language: en-US,en;q=0.9' \
  -H 'Authorization: Bearer secret-token:0YHBC2BGF8WE8Z7RGDAX35CYGK9VR2S0TXQMV0BY2X33S38DVPA0' \
  -H 'Cache-Control: no-cache' \
  -H 'Connection: keep-alive' \
  -H 'Content-Type: application/json' \
  -H 'Origin: http://merchant.taler.test' \
  -H 'Pragma: no-cache' \
  -H 'Referer: http://merchant.taler.test/webui/' \
  -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36' \
  --data-raw '{"default_pay_delay":{"d_us":180000000},"default_wire_transfer_delay":{"d_us":240000000},"use_stefan":true,"name":"we","email_validated":false,"phone_validated":false,"merchant_pub":"SFFV1RA3X5E3CPJRE1D9WZRCTVMPZ9EFZDMF4PATTFS18YPQ8NSG","address":{},"jurisdiction":{},"default_refund_delay":{"d_us":1296000000000},"default_wire_transfer_rounding_interval":"NONE","auth":{"method":"token"}}' \
  --insecure
{
  "code": 25,
  "hint": "A required parameter in the request was missing. This is likely a bug in the client implementation. Check if you are using the latest available version and/or file a report with the developers.",
  "detail": "email"
}

Steps To Reproduce1) reset db

2) config
[merchant]
....
MANDATORY_TAN_CHANNELS = email

3) create admin instance (no email, no phone)

x) try to update default wire delay

expected: update successful
actual: asking for email, admins should not care about self provision requirements
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2026-01-26 06:42

manager   ~0027364

I think this was fixed with the recent change where PATCH no longer requires an e-mail (or phone number) if the instance didn't have one previously.

Issue History

Date ModifiedUsernameFieldChange
2025-12-03 12:42sebasjmNew Issue
2026-01-26 06:42Christian GrothoffAssigned To => Christian Grothoff
2026-01-26 06:42Christian GrothoffStatusnew => informing
2026-01-26 06:42Christian GrothoffResolutionopen => fixed
2026-01-26 06:42Christian GrothoffFixed in Version => 1.4
2026-01-26 06:42Christian GrothoffNote Added: 0027364
2026-01-26 06:42Christian GrothoffProduct Version => git (master)
2026-01-26 06:42Christian GrothoffTarget Version => 1.4
2026-02-04 19:00Christian GrothoffStatusinforming => closed