merchant

commit b447fbeb827dc6a0b811d3ce9adc18675fcb7fd3
parent b1a7583533da1fe08085115051d1b0e33427f34c
Author: Christian Grothoff <christian@grothoff.org>
Date:   Mon,  3 Aug 2026 01:00:58 +0200

-fix regression

Diffstat:
M
src/backend/taler-merchant-httpd_mfa.c
 | 
20
--------------------

1 file changed, 0 insertions(+), 20 deletions(-)
diff --git a/src/backend/taler-merchant-httpd_mfa.c b/src/backend/taler-merchant-httpd_mfa.c
@@ -189,26 +189,6 @@ mfa_challenge_check (
   case GNUNET_DB_STATUS_SUCCESS_ONE_RESULT:
     break;
   }
-
-  /* The MFA challenge table (merchant.tan_challenges) is global across
-     instances and challenge IDs are only unique globally.  Ensure the
-     challenge actually belongs to the instance handling this request;
-     otherwise one instance could satisfy its MFA requirement using
-     another instance's challenge.  (Defense-in-depth: challenge_id and
-     the body hash already bind the challenge to a specific request.) */
-  if ( (NULL != hc->instance) &&
-       (NULL != hc->instance->settings.id) &&
-       ( (NULL == instance_id) ||
-         (0 != strcmp (instance_id,
-                       hc->instance->settings.id)) ) )
-  {
-    GNUNET_log (GNUNET_ERROR_TYPE_WARNING,
-                "Challenge %s is for a different instance!\n",
-                challenge_id);
-    GNUNET_free (instance_id);
-    *solved = false;
-    return GNUNET_OK;
-  }
   GNUNET_free (instance_id);
 
   if (xop != op)