summaryrefslogtreecommitdiff
path: root/src/exchange/taler-exchange-httpd_recoup.c
AgeCommit message (Collapse)Author
2024-01-12fixes for #8069, #8070 and #8072Özgür Kesim
- TALER_coin_ev_hash function now returns void - double free fixes - FAIL_IF logic fixes
2023-10-25new blind signing code buildsChristian Grothoff
2022-06-26-fix misc doxygen warnings, code clean upChristian Grothoff
2022-06-05complete P2P/W2W conflict handling, deduplicate code across handlersChristian Grothoff
2022-04-05adapt to latest GNUnet API: GNUNET_JSON_spec_mark_optional() changedChristian Grothoff
2022-03-17more explicit cipher usage countersMarco Boss
2022-03-14add metrics for number of crypto operationsMarco Boss
2022-02-21-big renaming of structs for consistent naming with P suffixChristian Grothoff
2022-02-18-minor merge conflict resolvesÖzgür Kesim
2022-02-18[age restriction] progress 15/n - melt/refresh/reveal and recoupÖzgür Kesim
Added age restriction support for - melt/refresh/reveal - recoup However, tests are not yet implemented for those flows. Also: minor fixes and refactoring.
2022-02-17-fix CS nonce reuse check logicChristian Grothoff
2022-02-16[age restriction] progress 14/n - withdraw and depositÖzgür Kesim
Age restriction support for - withdraw is done and tested - deposit is done and tested TODOs: - melt/refresh/reveal - link ------ Added functions - TALER_age_restriction_commit - TALER_age_commitment_derive - TALER_age_commitment_hash - TALER_age_restriction_commitment_free_inside - Hash of age commitment passed around API boundaries Exchangedb adjustments for denominations - all prepared statements re: denominations now handle age_mask - signature parameters adjusted Hash and signature verification of /keys adjusted - Hashes of (normal) denominations and age-restricted denominations are calculated seperately - The hash of the age-restricted ones will then be added to the other hash - The total hash is signed/verified Tests for withdraw with age restriction added - TALER_EXCHANGE_DenomPublickey now carries age_mask - TALER_TESTING_cmd_withdraw_amount* takes age parameter - TALER_TESTING_find_pk takes boolean age_restricted - WithdrawState carries age_commitment and its hash - withdraw_run derives new age commitment, if applicable - Added age parameter to testing (13 as example) Various Fixes and changes - Fixes of post handler for /management/extensions - Fixes for offline tool extensions signing - Slight refactoring of extensions - Age restriction extension simplified - config is now global to extension - added global TEH_age_restriction_enabled and TEH_age_mask in taler-exchange-httpd - helper functions and macros introduced
2022-02-15-correctly implement CS idempotency check on withdrawChristian Grothoff
2022-02-14-towards fixing the protocolChristian Grothoff
2022-02-11-simplify: nonce no longer hashedChristian Grothoff
2022-02-10-get recoup/refresh to passChristian Grothoff
2022-02-09pass exchange values to /recoupChristian Grothoff
2022-02-04resolves merge conflictsGian Demarmels
2022-02-04refactor TALER_coin_ev_hashGian Demarmels
2022-02-04include denom_pub into coin_ev_hashGian Demarmels
2022-02-04implement feedbackLucien Heuzeveldt
2022-02-04refactoringGian Demarmels
2022-02-04added CS data structures, implemented CS keypairGian Demarmels
2022-01-11The current recoup API is broken. I guess this is another example where ↵Christian Grothoff
"trivial" API changes turn out to have (multiple!) unexpected consequences. The current "/recoup" API does not have clear idempotency semantics, as we've discussed on the phone. This is already bad by itself, as it makes it hard to write down what the API does other than "whatever the implementation does". However, it actually breaks correctness in this (admittedly kinda contrived, but not impossible) case: Say that we have a coin A obtained via withdrawal and a coin B obtained via refreshing coin A. Now the denominations of A gets revoked.. The wallet does a recoup of A for EUR:1. Now the denomination of B also gets revoked. The wallet recoups B (incidentally also for EUR:1) and now A can be recouped again for EUR:1. But now the exchange is in a state where it will refuse a legitimate recoup request for A because the detection for an idempotent request kicks in. This is IMHO bad API design, and the exchange should simply always recoup the maximum amount. Furthermore, we usually follow the principle of "API calls that take up DB space are paid". With the current recoup API, I can do many tiny recoup requests which the exchange then has to store, right? I guess it would not be a big change to remove the "amount" value from the recoup/recoup-refresh request bodies, right? - Florian
2021-12-25protocol v12 changes (/recoup split, signature changes) plus database ↵Christian Grothoff
sharding plus O(n^2)=>O(n) worst-case complexity reduction on coin balance checks
2021-12-16-fix recoup uglinessChristian Grothoff
2021-12-14introducing GNUNET_TIME_Timestamp, recoup now with amountsChristian Grothoff
2021-12-11towards simplified / more efficient /recoupChristian Grothoff
2021-12-09-note FIXMEChristian Grothoff
2021-12-08move ensure_coin_known for melt and recoup outside of transaction, more loggingChristian Grothoff
2021-12-07add basic metrics collection logicChristian Grothoff
2021-11-16[age restriction] progress 3/nÖzgür Kesim
- remove redundant struct members for age commitment hash - undo pre-mature implementation in taler-exchange-secmod-rsa.c - carry through age restriction parameter for TALER_denom_blind
2021-11-05more crypto refactoringChristian Grothoff
2021-11-05-fixesChristian Grothoff
2021-10-27fix lib/ FTBFSChristian Grothoff
2021-10-27-work on FTBFSChristian Grothoff
2021-08-23complete implementation of long-polling for reserve status; remove support ↵Christian Grothoff
for multi-threaded exchange httpd
2021-07-30-eliminate more json_pack format stringsChristian Grothoff
2021-07-23-use new GNUNET_TIME functionsChristian Grothoff
2021-07-23-rename TALER_amount_get_zero to TALER_amount_set_zeroChristian Grothoff
2021-05-25return signed error message with HTTP_GONE status if denomination is not ↵Christian Grothoff
currently valid for specified operation (#6889)
2021-05-25return signed 404 statements for unknown denomination key hashes (#6889)Christian Grothoff
2020-12-14(start to) remove logic no longer needed with new key managementChristian Grothoff
2020-12-14activating implementation of #6175Christian Grothoff
2020-12-04conditionally use (un)blinding implementation from libgnunetutilFlorian Dold
2020-11-07adjust ECsChristian Grothoff
2020-08-25nicer generic error reporting logic, for #6432Christian Grothoff
2020-07-08complete server-side logic to generate response for conflicting denomination ↵Christian Grothoff
keys for the same coin
2020-07-08synchronize with latest GANAChristian Grothoff
2020-07-08merge known_coin transaction into main transaction (for #6416)Christian Grothoff
generated by cgit v1.2.3 (git 2.39.1) at 2024-04-20 08:51:45 +0000