View Issue Details

IDProjectCategoryView StatusLast Update
0004119Talerobsolete componentpublic2016-02-13 13:18
ReporterChristian Grothoff Assigned ToMarcello Stanisci Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityfeatureReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Version0.0 
Target Version0.0 
Summary0004119: integrate pin/tan authorization example
DescriptionRight now, after the wallet we immediately jump to the 'success' page. In practice, the pin/tan should be queried after the mint has been selected.

We should introduce such an 'authorization' page, i.e. where the user has so "solve" some arithmetic (42 * 499 / 3) to proceed.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Marcello Stanisci

2016-01-22 13:09

reporter   ~0010079

Is the wallet that does the form submission on the bank's DOM. So this control (the TAN thing) is only doable *before* the mint is chosen (the dialog through which a mint is chosen lives inside the wallet as well). In other words, once the user clicks on 'choose mint' the control never comes back to the bank's page.

Doing the TAN control before choosing the mint doesn't seem to make things worse,
and is quicker to implement.

Other suggestions?

Christian Grothoff

2016-01-22 22:47

manager   ~0010086

If you do the TAN before choosing the mint, you cannot use the TAN to protect the destination (SEPA) account, which is exactly what modern TANs are supposed to do. So it has to be done afterwards, which is why this is an interesting feature to consider: basically, we do need to change this so that control does go back to the bank. => We should probably discuss this more in person.

Issue History

Date ModifiedUsernameFieldChange
2016-01-02 11:19Christian GrothoffNew Issue
2016-01-15 16:48Florian DoldAssigned To => Marcello Stanisci
2016-01-15 16:48Florian DoldStatusnew => assigned
2016-01-22 13:09Marcello StanisciNote Added: 0010079
2016-01-22 22:18Christian GrothoffTarget Version => 0.2
2016-01-22 22:47Christian GrothoffNote Added: 0010086
2016-02-08 17:58Marcello StanisciStatusassigned => informing
2016-02-08 17:58Marcello StanisciResolutionopen => fixed
2016-02-09 00:51Christian GrothoffStatusinforming => closed
2016-02-13 13:18Christian GrothoffTarget Version0.2 => 0.0
2022-08-23 18:26Christian GrothoffCategorybank (demonstrator) => py bank (demonstrator, obsolete)
2023-12-03 00:23Christian GrothoffCategorypy bank (demonstrator, obsolete) => obsolete componet
2023-12-11 19:08Florian DoldCategoryobsolete componet => obsolete component