View Issue Details

IDProjectCategoryView StatusLast Update
0011295Talermerchant backendpublic2026-09-04 19:27
Reportervecirex Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeveritytweakReproducibilityalways
Status closedResolutionfixed 
Target Version1.6Fixed in Version1.6 
Summary0011295: MFA: first SMS, then email (to be the other way around)
DescriptionNon-blocking:

In current v1.5.10, SMS auth is sent out first automatically, if MFA is configured to be email and sms, which is the case for mytops.
Steps To ReproduceTry, e.g., to create a new instance in the stage instance.
Additional InformationWe said in the past, email should be first (separate ticket on the whole MFA flow exists).
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Relationships

related to 0011212 closedvecirex Upgrade TOPS/CHF prod to v1.5.x [upgrade done from taler-merchant v1.4.9 to v1.5.15] 

Activities

Christian Grothoff

2026-03-25 15:16

manager   ~0028270

Eh, the SPA is supposed to follow the order in the configuration. On my.taler-ops.ch/config I see that the order is (1) SMS (2) email, which suggests the configuration may be at fault here, not the SPA.

vecirex

2026-03-25 15:21

administrator   ~0028271

Oh, I was not aware of this: will test!

vecirex

2026-03-25 15:25

administrator   ~0028272

I just looked at stage config, which has

email sms (cf. /config)

It does not work. SMS goes out first.

=> Order in config without effect.

vecirex

2026-03-25 15:26

administrator   ~0028273

And, stage is running v1.5.10:

=> if it worked in the past, it doesn't work now

sebasjm

2026-03-25 20:09

developer   ~0028285

c875ab428..40044f09d adds channel order verification from the server and now integration test fails

taler-harness run-integrationtests merchant-self-provision-activation-and-login

Christian Grothoff

2026-03-25 22:11

manager   ~0028288

Not at all obvious to me why the test fails now.

Christian Grothoff

2026-03-26 06:42

manager   ~0028290

Backend now puts challenges in a different order, always email before SMS.

vecirex

2026-09-04 19:27

administrator   ~0029877

Old / clearly solved

Issue History

Date ModifiedUsernameFieldChange
2026-03-25 15:10vecirexNew Issue
2026-03-25 15:11vecirexRelationship addedrelated to 0011212
2026-03-25 15:12vecirexSummaryMFA: first SMS, then email => MFA: first SMS, then email (to be the other way around)
2026-03-25 15:12vecirexDescription Updated
2026-03-25 15:12vecirexAdditional Information Updated
2026-03-25 15:16Christian GrothoffNote Added: 0028270
2026-03-25 15:16Christian GrothoffAssigned To => vecirex
2026-03-25 15:16Christian GrothoffStatusnew => implementing
2026-03-25 15:16Christian GrothoffCategorymerchant backoffice SPA => deployment and operations
2026-03-25 15:16Christian GrothoffTarget Version => 1.8
2026-03-25 15:21vecirexNote Added: 0028271
2026-03-25 15:22vecirexStatusimplementing => assigned
2026-03-25 15:25vecirexNote Added: 0028272
2026-03-25 15:25vecirexAssigned Tovecirex => Christian Grothoff
2026-03-25 15:26vecirexNote Added: 0028273
2026-03-25 18:35Christian GrothoffAssigned ToChristian Grothoff => sebasjm
2026-03-25 18:35Christian GrothoffSeverityminor => tweak
2026-03-25 18:35Christian GrothoffCategorydeployment and operations => merchant backoffice SPA
2026-03-25 20:08sebasjmAssigned Tosebasjm => Christian Grothoff
2026-03-25 20:08sebasjmStatusassigned => implementing
2026-03-25 20:08sebasjmCategorymerchant backoffice SPA => merchant backend
2026-03-25 20:09sebasjmNote Added: 0028285
2026-03-25 22:10Christian GrothoffAssigned ToChristian Grothoff => Florian Dold
2026-03-25 22:11Christian GrothoffNote Added: 0028288
2026-03-25 22:11Christian GrothoffStatusimplementing => assigned
2026-03-26 06:42Christian GrothoffNote Added: 0028290
2026-05-29 19:20Christian GrothoffAssigned ToFlorian Dold => Christian Grothoff
2026-05-29 19:20Christian GrothoffStatusassigned => informing
2026-05-29 19:20Christian GrothoffResolutionopen => fixed
2026-05-29 19:20Christian GrothoffFixed in Version => 1.6
2026-05-29 19:20Christian GrothoffTarget Version1.8 => 1.6
2026-09-04 19:27vecirexNote Added: 0029877
2026-09-04 19:27vecirexStatusinforming => closed