commit c3c23c70d6622181fec568d9a0aef88db6d74845
parent 95d0e2c8df85c9c259c7c203f941424bf1678184
Author: Christian Grothoff <christian@grothoff.org>
Date: Sat, 25 Apr 2026 23:58:08 +0200
spec fix-ups
Diffstat:
1 file changed, 21 insertions(+), 3 deletions(-)
diff --git a/core/api-challenger.rst b/core/api-challenger.rst
@@ -193,9 +193,21 @@ Setup
:http:statuscode:`200 OK`:
Response is a `ChallengeSetupResponse`.
+ :http:statuscode:`400 Bad request`:
+ The request is malformed. Usually returned with an
+ error code of ``TALER_EC_GENERIC_PARAMETER_MISSING`` or
+ ``TALER_EC_GENERIC_PARAMETER_MALFORMED``.
:http:statuscode:`404 Not found`:
- The backup service is unaware of a matching client.
+ The challenger service is unaware of a matching client.
or the credentials of the client are invalid.
+ Usually returned with
+ ``TALER_EC_CHALLENGER_GENERIC_CLIENT_UNKNOWN``.
+ :http:statuscode:`500 Internal server error`:
+ The challenger service encountered an internal error.
+ Usually returned with
+ ``TALER_EC_GENERIC_DB_FETCH_FAILED`` or
+ ``TALER_EC_GENERIC_DB_STORE_FAILED`` or
+ ``TALER_EC_GENERIC_INTERNAL_INVARIANT_FAILURE``.
**Details::**
@@ -237,6 +249,10 @@ Login
The NONCE is a unique value identifying the challenge, should be shown to
the user so that they can recognize it when they receive the TAN code.
+ Note that both for GET and POST requests the request arguments must
+ be given in the URL and the body should be empty. We currently do NOT
+ support using x-www-form-urlencoded arguments in the body, even for
+ a POST.
**Request:**
@@ -253,6 +269,10 @@ Login
:http:statuscode:`200 OK`:
The the response is
a `ChallengeStatus`. Since protocol **v1**.
+ :http:statuscode:`302 Found`:
+ Returned when the client explicitly accepts ``text/html``
+ returning a redirection to the WebUI.
+ Since protocol **v1**.
:http:statuscode:`400 Bad Request`:
The request does not follow the spec.
The response will include error
@@ -272,8 +292,6 @@ Login
.. ts:def:: ChallengeStatus
interface ChallengeStatus {
- // @deprecated since **v2**, use /config
- restrictions?: Object;
// indicates if the given address cannot be changed anymore, the
// form should be read-only if set to true.