View Issue Details

IDProjectCategoryView StatusLast Update
0010966Talermerchant backendpublic2026-02-22 18:43
ReporterChristian Grothoff Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritylowSeveritytweakReproducibilityalways
Status closedResolutionno change required 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version1.5Fixed in Version1.5 
Summary0010966: session ID weirdness in taler-merchant-http_private-get-orders-ID.c
DescriptionSee FIXME in the code:

  // FIXME: it is a bit wild that we use the session ID of the *client's request*
  // (which we usually use to check that the right session got paid!) here to
  // construct the payment URI when we actually _also_ have a session_id in the
  // orders table! CG thinks we probably should change this and *ignore* the
  // client's session ID and when building the taler://pay/ URI only use the
  // session ID of the order's table (is that one even used right now?).
  // Right now, test_merchant_templates.sh has to pass the PAIVANA_ID when
  // calling this endpoint, otherwise the taler://pay/-URI would have no
  // session ID, despite the templating mechanism having set one explicitly
  // when instantiating the order.
Tagsdiscussion-needed, vivy

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2026-02-17 20:39

manager   ~0027776

session is not actually provided on /claim.

Issue History

Date ModifiedUsernameFieldChange
2026-02-02 09:05Christian GrothoffNew Issue
2026-02-02 09:05Christian GrothoffStatusnew => assigned
2026-02-02 09:05Christian GrothoffAssigned To => Florian Dold
2026-02-02 09:06Christian GrothoffPrioritynormal => low
2026-02-02 09:06Christian GrothoffStatusassigned => implementing
2026-02-07 21:50Christian GrothoffTag Attached: discussion-needed
2026-02-07 21:50Christian GrothoffTag Attached: vivy
2026-02-17 20:39Christian GrothoffAssigned ToFlorian Dold => Christian Grothoff
2026-02-17 20:39Christian GrothoffStatusimplementing => closed
2026-02-17 20:39Christian GrothoffResolutionopen => no change required
2026-02-17 20:39Christian GrothoffFixed in Version => 1.5
2026-02-17 20:39Christian GrothoffNote Added: 0027776
2026-02-22 18:43Christian GrothoffTarget Versionpost-1.0 => 1.5