View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0006619 | Taler | obsolete component | public | 2020-10-07 13:01 | 2021-08-24 14:23 |
| Reporter | Florian Dold | Assigned To | MS | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | urgent | Severity | major | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Product Version | git (master) | ||||
| Target Version | 0.8 | Fixed in Version | 0.8 | ||
| Summary | 0006619: bank APIs should return response with 'Access-Control-Allow-Origin: *' header | ||||
| Description | ... otherwise browser wallets will have a hard time accessing those APIs. In particular, error messages from the API should also include this header. Thus the error handling middleware has to be potentially adjusted as well. | ||||
| Tags | No tags attached. | ||||
| Fixed here: 7d3fc76b7e18c228add147a4cf954aaa6dd31a36. | |
| Reopening until the header is only applied to *API* responses. Applying this to all response (also the one for browsers, where we use cookie auth) would be a security issue. | |
| MS: can you please prioritize this? Or do you need more info? | |
| This was addressed a while ago. Requesting feedback from wallet makers. | |
| Looks good to me now. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2020-10-07 13:01 | Florian Dold | New Issue | |
| 2020-10-07 13:01 | Florian Dold | Status | new => assigned |
| 2020-10-07 13:01 | Florian Dold | Assigned To | => MS |
| 2020-10-08 12:56 | MS | Note Added: 0017002 | |
| 2020-10-08 12:56 | MS | Status | assigned => informing |
| 2020-10-08 12:56 | MS | Resolution | open => fixed |
| 2020-10-08 13:16 | Florian Dold | Status | informing => assigned |
| 2020-10-08 13:16 | Florian Dold | Note Added: 0017003 | |
| 2020-10-11 18:57 | Christian Grothoff | Priority | normal => urgent |
| 2020-10-11 18:57 | Christian Grothoff | Severity | minor => major |
| 2020-10-22 10:08 | Christian Grothoff | Note Added: 0017035 | |
| 2020-10-31 09:31 | Christian Grothoff | Product Version | => git (master) |
| 2020-11-02 17:00 | MS | Status | assigned => feedback |
| 2020-11-02 17:00 | MS | Note Added: 0017083 | |
| 2020-11-16 15:24 | Florian Dold | Status | feedback => informing |
| 2020-11-16 15:24 | Florian Dold | Note Added: 0017144 | |
| 2021-07-30 11:57 | Christian Grothoff | Fixed in Version | => 0.8 |
| 2021-07-30 12:02 | Christian Grothoff | Target Version | 0.8.1 => 0.8 |
| 2021-08-24 14:23 | Christian Grothoff | Status | informing => closed |
| 2022-08-23 18:26 | Christian Grothoff | Category | bank (demonstrator) => py bank (demonstrator, obsolete) |
| 2023-12-03 00:23 | Christian Grothoff | Category | py bank (demonstrator, obsolete) => obsolete componet |
| 2023-12-11 19:08 | Florian Dold | Category | obsolete componet => obsolete component |