From bb7bd5e73c1750f8b38684aa56d538683a92ad0e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Hern=C3=A2ni=20Marques?= Date: Fri, 10 Jul 2026 20:43:45 +0200 Subject: [PATCH] bank: auto-account username prefix goa-bank-acc- Personal auto-accounts use usernames of the form goa-bank-acc- plus a random hex id so they are easy to spot in admin lists and distinct from explorer or hand-registered users. --- scripts/taler-bank/demo-withdraw-api.py | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/scripts/taler-bank/demo-withdraw-api.py b/scripts/taler-bank/demo-withdraw-api.py index c5ca797..68c7e8a 100755 --- a/scripts/taler-bank/demo-withdraw-api.py +++ b/scripts/taler-bank/demo-withdraw-api.py @@ -124,9 +124,8 @@ def mint_withdraw() -> dict: def _rand_username() -> str: - # bank usernames: keep simple [a-z0-9] - alphabet = string.ascii_lowercase + string.digits - return "guest" + "".join(secrets.choice(alphabet) for _ in range(8)) + # goa-bank-acc- — unique guest id, bank-safe [a-z0-9-] + return "goa-bank-acc-" + secrets.token_hex(8) def _rand_password() -> str: @@ -139,7 +138,9 @@ def create_personal_account() -> dict: """Public registration: auto username/password, balance starts at 0.""" username = _rand_username() password = _rand_password() - name = "Guest " + username[5:9].upper() + # short label from id suffix + suffix = username.rsplit("-", 1)[-1][:8] + name = "GOA bank acc " + suffix code, body = http_json( "POST", f"{BANK}/accounts", @@ -153,6 +154,8 @@ def create_personal_account() -> dict: # retry once on conflict if code in (409, 400): username = _rand_username() + suffix = username.rsplit("-", 1)[-1][:8] + name = "GOA bank acc " + suffix code, body = http_json( "POST", f"{BANK}/accounts",