View Issue Details

IDProjectCategoryView StatusLast Update
0005851Talermerchant backendpublic2024-01-12 13:04
ReporterFlorian Dold Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version0.6Fixed in Version0.6 
Summary0005851: /check-payment should support long polling and a 2nd, public endpoint
DescriptionIdeally we'd be able to specify a timeout=... query parameter.

The second public endpoint is necessary for JS in the browser to check if a mobile payment has happened.

Unlike the private /check-payment, the public version must be provided with both the order ID as well as the contract hash, and the backend must validate the contract hash. This prevents enumeration of orders and their status when order IDs have low entropy.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2019-09-16 07:42

manager   ~0014903

Florian, I'm not sure this bug note (still) properly describes the endpoint(s) we had discussed in the API spec. Could you please update the description (or link to spec) to make sure we are agreed on what should be done here?

Christian Grothoff

2019-11-02 12:44

manager   ~0015048

44b5eaf..0d42e6b specifies a new /public/poll-payment endpoint.
ae06bf1..ea48d9f implements this endpoint.
C API and test cases are still missing.

Christian Grothoff

2019-11-02 13:34

manager   ~0015049

ea48d9f..3a22e60 implements the C API.

Christian Grothoff

2019-11-02 23:01

manager   ~0015051

Test command API added in e3db526..ce7ed80. Actual integration into a TEST is still missing.

Christian Grothoff

2019-11-07 21:04

manager   ~0015053

add8722..edfc078 fixes a few bugs and adds a now passing test for /public/poll-payment to the merchant. Bug resolved.

Issue History

Date ModifiedUsernameFieldChange
2019-08-23 17:37Florian DoldNew Issue
2019-08-23 17:37Florian DoldStatusnew => assigned
2019-08-23 17:37Florian DoldAssigned To => Marcello Stanisci
2019-09-16 07:41Christian GrothoffAssigned ToMarcello Stanisci => Christian Grothoff
2019-09-16 07:42Christian GrothoffSeverityminor => feature
2019-09-16 07:42Christian GrothoffProduct Version => git (master)
2019-09-16 07:42Christian GrothoffNote Added: 0014903
2019-09-16 07:42Christian GrothoffAssigned ToChristian Grothoff => Florian Dold
2019-09-16 07:42Christian GrothoffStatusassigned => feedback
2019-11-02 12:44Christian GrothoffNote Added: 0015048
2019-11-02 12:44Christian GrothoffAssigned ToFlorian Dold => Christian Grothoff
2019-11-02 12:44Christian GrothoffStatusfeedback => assigned
2019-11-02 13:34Christian GrothoffNote Added: 0015049
2019-11-02 13:34Christian GrothoffTarget Version => 0.6
2019-11-02 23:01Christian GrothoffNote Added: 0015051
2019-11-07 21:04Christian GrothoffStatusassigned => informing
2019-11-07 21:04Christian GrothoffResolutionopen => fixed
2019-11-07 21:04Christian GrothoffFixed in Version => 0.6
2019-11-07 21:04Christian GrothoffNote Added: 0015053
2019-12-20 18:11Christian GrothoffStatusinforming => closed
2024-01-12 13:04Christian GrothoffCategorymerchant backend API (C) => mechant backend
2025-03-22 13:09Christian GrothoffCategorymechant backend => merchant backend