0006136: merchant should re-download /keys before refusing pay request

ID	Project	Category	View Status	Date Submitted	Last Update
0006136	Taler	merchant backend	public	2020-03-26 17:57	2024-01-12 13:04

Reporter	Florian Dold	Assigned To	Christian Grothoff	Resolution deadline
Implementer		Reviewer
Release signed by		Deployed by
Verifier		Communicator
Data protection authority notification required	No
CSIRT notification required	No
Estimated effort (hours)		Actual effort (hours)	0
Fast-track	No
Work package	none
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	closed	Resolution	fixed
Product Version	git (master)
Target Version	0.7.1	Fixed in Version	0.7.1

Summary	0006136: merchant should re-download /keys before refusing pay request
Description	... this must be rate-limited, so that it can't be abused to make the merchant do repeated requests to the exchange.
Tags	No tags attached.

Date Modified	Username	Field	Change
2020-03-26 17:57	Florian Dold	New Issue
2020-03-26 17:57	Florian Dold	Status	new => assigned
2020-03-26 17:57	Florian Dold	Assigned To	=> Christian Grothoff
2020-04-10 20:12	Christian Grothoff	Note Added: 0015615
2020-04-10 20:12	Christian Grothoff	Status	assigned => informing
2020-04-10 20:12	Christian Grothoff	Resolution	open => fixed
2020-04-10 20:12	Christian Grothoff	Fixed in Version	=> 0.7.1
2020-04-10 20:12	Christian Grothoff	Product Version	=> git (master)
2020-04-10 20:12	Christian Grothoff	Target Version	=> 0.7.1
2021-08-24 14:23	Christian Grothoff	Status	informing => closed
2024-01-12 13:04	Christian Grothoff	Category	merchant backend API (C) => mechant backend
2025-03-22 13:09	Christian Grothoff	Category	mechant backend => merchant backend

Christian Grothoff 2020-04-10 20:12 manager ~0015615	This is now implemented, with the FORCED_RELOAD_DELAY limiting the rate to once per 15 minutes (possibly higher if there are persistent failures). Commit is 1b7e296..c22eb34.