View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009752 | Taler | challenger | public | 2025-04-17 16:04 | 2025-05-10 02:11 |
| Reporter | sebasjm | Assigned To | Christian Grothoff | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | high | Severity | major | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Target Version | 1.0 | Fixed in Version | 1.0 | ||
| Summary | 0009752: can't trigger the challenge when read only | ||||
| Description | this is because challenger-httpd_challenge.c line 536 the check_restrictions is waiting for all the fields to be string and read_only is not. adding if ((0 == strcmp (key, "read_only")) && (json_boolean_value(val)) ) continue; to skip the check for read only works but then it fails after Apr 17 12:58:48 challenger-httpd[124249]: (NA53RDQA66S94Z81EGQGPN77SG) DEBUG Executing prepared SQL statement `do_challenge_set_address_and_pin' Apr 17 12:58:48 challenger-httpd[124249]: (NA53RDQA66S94Z81EGQGPN77SG) DEBUG Execution of prepared SQL statement `do_challenge_set_address_and_pin' finished (PGRES_TUPLES_OK) Apr 17 12:58:48 challenger-httpd[124249]: (NA53RDQA66S94Z81EGQGPN77SG) ERROR NULL field encountered for `last_pin' where non-NULL was required Apr 17 12:58:48 challenger-httpd[124249]: (NA53RDQA66S94Z81EGQGPN77SG) ERROR Assertion failed at challenger-httpd_challenge.c:816. $ curl -X POST "http://challenger.taler.test:1180/challenge/0ATJCEGKXKWAXGADGAC47TSPAQCABPA442Y254WRYZ1AFSNWV6H0" -H "Content-Type: application/json" -H "Accept: application/json" -d '{"email":"AXFSJJQ5Q0EPX0T4Q03CDFEN8M6CX354R4ZEZ2VM0C7WX4VGTEQG@email.com","read_only":true}' -v Note: Unnecessary use of -X or --request, POST is already inferred. * Host challenger.taler.test:1180 was resolved. * IPv6: (none) * IPv4: 127.0.0.1 * Trying 127.0.0.1:1180... * Connected to challenger.taler.test (127.0.0.1) port 1180 > POST /challenge/0ATJCEGKXKWAXGADGAC47TSPAQCABPA442Y254WRYZ1AFSNWV6H0 HTTP/1.1 > Host: challenger.taler.test:1180 > User-Agent: curl/8.5.0 > Content-Type: application/json > Accept: application/json > Content-Length: 92 > < HTTP/1.1 400 Bad Request < Server: nginx/1.24.0 (Ubuntu) < Date: Thu, 17 Apr 2025 15:56:00 GMT < Content-Type: application/json < Content-Length: 241 < Connection: keep-alive < Access-Control-Allow-Origin: * < Access-Control-Expose-Headers: * < Access-Control-Allow-Credentials: true < { "code": 26, "hint": "A parameter in the request was malformed. This is likely a bug in the client implementation. Check if you are using the latest available version and/or file a report with the developers.", "detail": "read_only" * Connection #0 to host challenger.taler.test left intact } | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-04-17 16:04 | sebasjm | New Issue | |
| 2025-04-17 16:04 | sebasjm | Status | new => assigned |
| 2025-04-17 16:04 | sebasjm | Assigned To | => Christian Grothoff |
| 2025-04-17 18:52 | Christian Grothoff | Status | assigned => informing |
| 2025-04-17 18:52 | Christian Grothoff | Resolution | open => fixed |
| 2025-04-17 18:52 | Christian Grothoff | Fixed in Version | => 1.0 |
| 2025-05-10 02:11 | Christian Grothoff | Status | informing => closed |