View Issue Details

IDProjectCategoryView StatusLast Update
0007034Talermerchant backendpublic2022-11-04 19:53
Reporterms-mantis Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version0.9Fixed in Version0.9 
Summary0007034: URL-decode the authentication token.
DescriptionThe merchant backend should URL-decode the token it reads from the Authorization:-header.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2021-11-20 22:53

manager   ~0018504

Implemented as of 4c5614c.

Sebastian: please take note of this, and make sure the SPA url-encodes as required in RFC 8959.

Issue History

Date ModifiedUsernameFieldChange
2021-10-13 05:59ms-mantisNew Issue
2021-10-13 05:59ms-mantisStatusnew => assigned
2021-10-13 05:59ms-mantisAssigned To => Christian Grothoff
2021-11-20 22:53Christian GrothoffStatusassigned => informing
2021-11-20 22:53Christian GrothoffResolutionopen => fixed
2021-11-20 22:53Christian GrothoffFixed in Version => 0.9
2021-11-20 22:53Christian GrothoffNote Added: 0018504
2021-11-20 22:54Christian GrothoffProduct Version => git (master)
2021-11-20 22:54Christian GrothoffTarget Version => 0.9
2022-11-04 19:53Christian GrothoffStatusinforming => closed
2025-03-22 13:09Christian GrothoffCategorymechant backend => merchant backend