libeufin

commit 94ccce0470c11b5235254f93d229ad1caeac88da
parent 3dbdedda04dc3014c5bfe18b5689c42e2e04efb4
Author: Antoine A <>
Date:   Wed,  8 Oct 2025 15:22:46 +0200

bank: trim challenge ids before parsing them

Diffstat:
M
bank/src/main/kotlin/tech/libeufin/bank/auth/mfa.kt
 | 
2
+-
M
bank/src/test/kotlin/helpers.kt
 | 
2
+-

2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/bank/src/main/kotlin/tech/libeufin/bank/auth/mfa.kt b/bank/src/main/kotlin/tech/libeufin/bank/auth/mfa.kt
@@ -129,7 +129,7 @@ suspend inline fun <reified B> ApplicationCall.receiveChallenge(
     if (ids == null) return Pair(body, null) 
 
     // List validated challenges
-    val uuids = ids.split(',').map { UUID.fromString(it) }
+    val uuids = ids.split(',').map { UUID.fromString(it.trim()) }
     val challenges = db.tan.challenge(uuids)
 
     val validated = challenges.mapNotNull { challenge ->
diff --git a/bank/src/test/kotlin/helpers.kt b/bank/src/test/kotlin/helpers.kt
@@ -384,7 +384,7 @@ suspend fun HttpResponse.assertChallenge(
 
     // Recover body from request
     val requestBody = this.request.content
-    val ids = res.challenges.map { it.challenge_id }.joinToString(",")
+    val ids = res.challenges.map { it.challenge_id }.joinToString(", ")
     return call.client.request(this.call.request.url) {
         tokenAuth(call.client, username)
         method = call.request.method