commit 07e13acb9c63d103969d85560c69a03191383e3d
parent 6ba1bdfdcfaa9d75bd72d9231a81ac68191f8e61
Author: Martin Schanzenbach <schanzen@gnunet.org>
Date: Mon, 23 Jun 2025 13:25:40 +0200
remove removed functionality in v19
Diffstat:
1 file changed, 3 insertions(+), 9 deletions(-)
diff --git a/core/api-merchant.rst b/core/api-merchant.rst
@@ -17,6 +17,7 @@
@author Florian Dold
@author Christian Grothoff
@author Priscilla Huang
+ @author Martin Schanzenbach
.. _merchant-api:
@@ -36,11 +37,7 @@ Merchant backends have one special ``default`` instance. This ``default``
instance is used when no explicit instance is specified. Note that using
``/instances/default/$ANYTHING`` is deprecated and will result in a permanent
redirect (HTTP status 308) to ``$ANYTHING``. a Despite its name, this instance
-must be created after the installation. In case *no* default instance is
-found - or its credentials got lost -, the administrator can use the default
-instance's rights by resorting on the ``--auth`` command line option, or by
-restarting the service by providing an environment variable called
-``TALER_MERCHANT_PASSWORD``.
+must be created after the installation.
Each instance (default and others) has a base URL. The resources under
this base URL are divided into to categories:
@@ -110,10 +107,7 @@ Currently, the ``/private/auth/`` API supports two main authentication methods i
The username corresponds to the instance ``$ID``, the password to the instance password ``$INSTANCE_PASSWORD``.
The token must be provided as a bearer token with the RFC 8958 prefix (``secret-token``) in the authorization header.
If the ``$INSTANCE_PASSWORD`` is lost, the administrator can set a password
- for the default instance using the ``--auth`` command line option of the service,
- or by restarting the service by providing an environment variable called ``TALER_MERCHANT_PASSWORD``.
- Alternatively, the ``taler-merchant-passwd`` command-line tool may be used to set or reset the password for any instance
- by an administrator.
+ using the ``taler-merchant-passwd`` command-line tool.
Any API may also be accessed using the bearer authentication ``secret-token: $INSTANCE_PASSWORD``.
Notice that this behaviour is deprecated and will be phased out in favor of login tokens.
* ``token`` (*deprecated*): With this method, the client must provide an authentication token in
