View Issue Details

IDProjectCategoryView StatusLast Update
0005210Talerspecificationpublic2021-08-24 14:23
ReporterFlorian Dold Assigned ToFlorian Dold Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version0.8Fixed in Version0.8 
Summary0005210: merchant's /pay should also accept own signature for replay to save traffic and wallet/merchant storage
DescriptionCurrently even if coins are expired, we need to keep (at least parts of) them around, so we can to a /pay replay when we don't have the session cookie for e.g. an article.

Instead /pay should also accept the signature that the merchant previously gave.
 This way the merchant backend and wallet can garbage collect coins after they expired.

If we don't implement this, we either
a) must accept that after coins expired we can't do a replay and if cookies are lost we can't view digital goods anymore
b) need to store coins forever in the merchant and wallet
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2020-04-13 19:36

manager   ~0015642

Can we define another endpoint for this? Anything except /pay, to avoid overloading it?

Christian Grothoff

2020-07-18 19:49

manager   ~0016489

c95e975..ece354e (docs.git) specifies /paid as a new endpoint for this.

jonathanbuchanan

2020-07-24 20:56

reporter   ~0016519

Implemented in the merchant in 26c6bb9..b6cb1cc.

Florian Dold

2020-08-19 15:35

manager   ~0016662

Implemented in the wallet, including an integration test that checks if the right endpoints are called via the fault injection proxy.

Issue History

Date ModifiedUsernameFieldChange
2017-12-10 19:57Florian DoldNew Issue
2017-12-10 20:48Christian GrothoffStatusnew => implementing
2017-12-10 20:48Christian GrothoffProduct Version => git (master)
2017-12-10 20:48Christian GrothoffTarget Version => 0.7.1
2018-01-30 07:31Christian GrothoffSeverityminor => feature
2020-04-13 00:38Christian GrothoffCategoryother => merchant backend API (HTTP specification)
2020-04-13 00:38Christian GrothoffAssigned To => Christian Grothoff
2020-04-13 00:38Christian GrothoffStatusimplementing => assigned
2020-04-13 19:36Christian GrothoffTarget Version0.7.1 => 0.8
2020-04-13 19:36Christian GrothoffNote Added: 0015642
2020-07-18 19:49Christian GrothoffNote Added: 0016489
2020-07-22 09:53Christian GrothoffAssigned ToChristian Grothoff => jonathanbuchanan
2020-07-24 20:56jonathanbuchananNote Added: 0016519
2020-07-24 20:56jonathanbuchananAssigned Tojonathanbuchanan => Florian Dold
2020-08-19 15:35Florian DoldStatusassigned => informing
2020-08-19 15:35Florian DoldResolutionopen => fixed
2020-08-19 15:35Florian DoldNote Added: 0016662
2020-10-03 12:09Christian GrothoffFixed in Version => 0.8
2021-08-24 14:23Christian GrothoffStatusinforming => closed
2024-01-12 13:02Christian GrothoffCategorymerchant backend API (HTTP specification) => specification