View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0006737 | Taler | merchant backend | public | 2021-02-04 17:18 | 2024-01-12 13:04 |
| Reporter | Florian Dold | Assigned To | Christian Grothoff | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Product Version | git (master) | ||||
| Target Version | 0.8 | Fixed in Version | 0.8 | ||
| Summary | 0006737: merchant should allow requests if authorization is not required, but "foreign" Authorization header is present | ||||
| Description | The merchant backend currently checks the syntax of the "Authorization" header before even checking if authorization is needed. The merchant *only* accepts bearer tokens in the Authorization header. This complicates the deployment of the merchant backend where the reverse proxy handles authentication. The reverse proxy might not remove the authentication header before giving the request to the merchant backend. | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2021-02-04 17:18 | Florian Dold | New Issue | |
| 2021-02-04 17:18 | Florian Dold | Status | new => assigned |
| 2021-02-04 17:18 | Florian Dold | Assigned To | => Christian Grothoff |
| 2021-02-04 17:35 | Christian Grothoff | Status | assigned => informing |
| 2021-02-04 17:35 | Christian Grothoff | Resolution | open => fixed |
| 2021-02-04 17:35 | Christian Grothoff | Fixed in Version | => 0.9 |
| 2021-02-04 17:35 | Christian Grothoff | Note Added: 0017497 | |
| 2021-02-04 17:35 | Christian Grothoff | Fixed in Version | 0.9 => 0.8.1 |
| 2021-07-30 12:02 | Christian Grothoff | Fixed in Version | 0.8.1 => 0.8 |
| 2021-07-30 12:02 | Christian Grothoff | Target Version | 0.8.1 => 0.8 |
| 2021-08-24 14:23 | Christian Grothoff | Status | informing => closed |
| 2021-09-02 16:22 | Christian Grothoff | ||
| 2021-09-02 16:23 | Christian Grothoff | Note Added: 0018362 | |
| 2024-01-12 13:04 | Christian Grothoff | Category | merchant backend API (C) => mechant backend |
| 2025-03-22 13:09 | Christian Grothoff | Category | mechant backend => merchant backend |