View Issue Details

IDProjectCategoryView StatusLast Update
0004159Talermerchant backendpublic2016-01-30 20:23
ReporterFlorian Dold Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PriorityhighSeverityblockReproducibilityN/A
Status closedResolutionfixed 
Product Version0.0 
Target Version0.0Fixed in Version0.0 
Summary0004159: merchant backend needs to additionally sign over amounts and transaction id
DescriptionUsing this mechanism, it is possible to decide for a contract that we got from a wallet whether it is one that we generated and thus want to accept.

The frontend can either reconstruct the contract from the fulfillment URL or ask the wallet to provide the whole contract again.

Two things need to be implemented:

1. The /backend/contract needs to sign over more things
2. The /backend/pay needs to verify the signature it got from the frontend
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2016-01-27 14:06

manager   ~0010108

Step (1) was implemented.

Christian Grothoff

2016-01-27 14:26

manager   ~0010109

d64edbd..d58ad22 implements (2), spec and the non-implemented merchant C APIs have also been updated.

Issue History

Date ModifiedUsernameFieldChange
2016-01-26 14:37Florian DoldNew Issue
2016-01-26 14:37Florian DoldStatusnew => assigned
2016-01-26 14:37Florian DoldAssigned To => Christian Grothoff
2016-01-27 14:06Christian GrothoffNote Added: 0010108
2016-01-27 14:26Christian GrothoffNote Added: 0010109
2016-01-27 14:26Christian GrothoffStatusassigned => informing
2016-01-27 14:26Christian GrothoffFixed in Version => 0.0
2016-01-27 14:26Christian GrothoffResolutionopen => fixed
2016-01-27 14:26Christian GrothoffProduct Version => 0.0
2016-01-30 20:23Christian GrothoffStatusinforming => closed
2025-03-22 13:09Christian GrothoffCategorymechant backend => merchant backend