View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009644 | Taler | libeufin-bank webui | public | 2025-03-20 19:11 | 2026-01-26 05:27 |
| Reporter | sebasjm | Assigned To | Resolution deadline | ||
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | low | Severity | feature | Reproducibility | always |
| Status | implementing | Resolution | open | ||
| Product Version | git (master) | ||||
| Target Version | post-2.0 | ||||
| Summary | 0009644: bank ui should support listing and revoking tokens | ||||
| Description | the api is implemented https://docs.taler.net/core/api-corebank.html#get--accounts-$USERNAME-tokens but the spa doesn't use that | ||||
| Tags | security | ||||
| related to | 0009523 | implementing | Allow connecting the merchant backend to the bank revenue API via token in URI | |
| related to | 0010118 | closed | schanzen | merchant backend should have API to list and revoke access tokens |
| related to | 0010108 | closed | sebasjm | customer unable to extract authorization token for WooCommerce integration |
| please prioritize, the only important use case for this (i can think of) is: if the customer doesn't have access to the merchant backoffice and want's to remove access to the revenue API. The token description should be enough to identify which token is. | |
| Indeed, not a high priority right now. | |
| See related merchant issues that the Bank API does not actually return the token value rn. | |
| the API to list tokens must not return the token values, it should return a reference id to delete them and an description to identify then (AFAIK last access, creation, description, scopes) | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-03-20 19:11 | sebasjm | New Issue | |
| 2025-03-20 19:11 | sebasjm | Status | new => assigned |
| 2025-03-20 19:11 | sebasjm | Assigned To | => sebasjm |
| 2025-03-20 19:21 | sebasjm | Assigned To | sebasjm => Christian Grothoff |
| 2025-03-20 19:21 | sebasjm | Status | assigned => feedback |
| 2025-03-20 19:21 | sebasjm | Note Added: 0024266 | |
| 2025-03-21 00:48 | Christian Grothoff | Priority | normal => low |
| 2025-03-21 00:48 | Christian Grothoff | Severity | major => feature |
| 2025-03-21 00:48 | Christian Grothoff | Target Version | 1.0 => post-1.0 |
| 2025-03-21 00:48 | Christian Grothoff | Note Added: 0024267 | |
| 2025-03-21 00:48 | Christian Grothoff | Assigned To | Christian Grothoff => sebasjm |
| 2025-04-23 23:25 | Christian Grothoff | Assigned To | sebasjm => |
| 2025-04-23 23:25 | Christian Grothoff | Status | feedback => implementing |
| 2025-04-23 23:25 | Christian Grothoff | Tag Attached: security | |
| 2025-04-28 06:46 | Christian Grothoff | Relationship added | related to 0009523 |
| 2025-06-21 19:18 | Christian Grothoff | Relationship added | related to 0010118 |
| 2025-06-24 20:27 | schanzen | Relationship added | related to 0010108 |
| 2025-06-24 20:33 | schanzen | Note Added: 0025353 | |
| 2025-06-24 22:44 | sebasjm | Note Added: 0025357 | |
| 2026-01-26 05:27 | Christian Grothoff | Target Version | post-1.0 => post-2.0 |
| 2026-08-23 14:18 | Florian Dold | Category | libeufin-bank-ui (SPA) => libeufin-bank webui |