hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

bank: auto usernames goa-account-<random> shown to user

Browse source 
API and docs describe the visible auto username shape.
This commit is contained in:
Hernâni Marques 2026-07-10 15:43:00 +02:00
parent 2519c8844b
commit 7583d0896e
No known key found for this signature in database
3 changed files with 10 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

3
configs/bank-landing/README.md
View file

@ -49,7 +49,8 @@ In the optional fold:
3. Server registers a new libeufin user via public `POST /accounts`. 3. Server registers a new libeufin user via public `POST /accounts`.
4. UI shows **username / password / balance GOA:0** once (“created for you”; 4. UI shows **username / password / balance GOA:0** once (“created for you”;
not stored for recovery). not stored for recovery).
5. Username shape: **`goa-bank-acc-<16-hex>`**. 5. Username shape: **`goa-account-<random>`** (shown to the user).
Password embeds **`pleasechangeme`** with random chars around it.
6. QR_Taler + link open `/webui/` so the user can log in with those credentials. 6. QR_Taler + link open `/webui/` so the user can log in with those credentials.
Balance **starts at zero** — not the shared `explorer` pool. Balance **starts at zero** — not the shared `explorer` pool.

2
scripts/taler-bank/README.md
View file

@ -42,7 +42,7 @@ Details + JSON schema: `configs/bank-landing/README.md`.
| Path | Behaviour | | Path | Behaviour |
|------|-----------| |------|-----------|
| `GET /demo-withdraw.json` | Mint one-shot withdraw from shared **`explorer`** pool; write `withdraw.uri` + watch ids | | `GET /demo-withdraw.json` | Mint one-shot withdraw from shared **`explorer`** pool; write `withdraw.uri` + watch ids |
| `GET /auto-account.json` | Public `POST /accounts` with generated **`goa-bank-acc-<hex>`** user + password; **balance GOA:0**; return credentials once | | `GET /auto-account.json` | Public `POST /accounts` with generated **`goa-account-<random>`** user + password containing **pleasechangeme**; **balance GOA:0**; return credentials once |
Install / restart: Install / restart:

14
scripts/taler-bank/demo-withdraw-api.py
View file

@ -124,8 +124,10 @@ def mint_withdraw() -> dict:
def _rand_username() -> str: def _rand_username() -> str:
# goa-bank-acc-<uuid> — unique guest id, bank-safe [a-z0-9-] # Shown to the user: goa-account-<random> (bank-safe [a-z0-9-])
return "goa-bank-acc-" + secrets.token_hex(8) alphabet = string.ascii_lowercase + string.digits
rnd = "".join(secrets.choice(alphabet) for _ in range(12))
return "goa-account-" + rnd
def _rand_password() -> str: def _rand_password() -> str:
@ -140,9 +142,8 @@ def create_personal_account() -> dict:
"""Public registration: auto username/password, balance starts at 0.""" """Public registration: auto username/password, balance starts at 0."""
username = _rand_username() username = _rand_username()
password = _rand_password() password = _rand_password()
# short label from id suffix # Display name mirrors username for webui clarity
suffix = username.rsplit("-", 1)[-1][:8] name = username
name = "GOA bank acc " + suffix
code, body = http_json( code, body = http_json(
"POST", "POST",
f"{BANK}/accounts", f"{BANK}/accounts",
@ -156,8 +157,7 @@ def create_personal_account() -> dict:
# retry once on conflict # retry once on conflict
if code in (409, 400): if code in (409, 400):
username = _rand_username() username = _rand_username()
suffix = username.rsplit("-", 1)[-1][:8] name = username
name = "GOA bank acc " + suffix
code, body = http_json( code, body = http_json(
"POST", "POST",
f"{BANK}/accounts", f"{BANK}/accounts",