-
Notifications
You must be signed in to change notification settings - Fork 24
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix/enable decoupled tan submission #142
Fix/enable decoupled tan submission #142
Conversation
This is required for example for TAN mode 923 called pushTAN 2.0 by Sparkasse. This mode requires a confirmation in the pushTAN app but no TAN to be entered. The implementation presents the same tan-challenge screen without the text input. Instead of submitting a TAN, the decoupled submission is checked through the fints-library. Refs bnw#131
This enables the selection of the new pushTAN 2.0 authentication by Sparkasse. Refs bnw#131
Hey, thanks a lot for your contribution :) |
I tried it out using the docker container now, but I get the following error:
I did not get this in my development environment, so I guess it has something to do with an older version of phpFinTs? At least to the commit reference in |
I have reverted the PR. |
Sadly I could not find changelogs for phpFinTs.. I have no experience in dependency management in PHP. I guess, running Would you accept another PR with an updated |
Ok, we can do another 🤞-PR. Thanks a lot for your work! :) |
I will have a look into that, thanks for the hint! I'll open another PR when I'm ready. |
Since I now also encounter the problem described in #131 I went ahead and tried to implement a solution.
This is my first time writing PHP code, so please forgive me for doing things unusually.
This adds the basic functionality for decoupled TAN checks, presented by phpFinTs.
I could confirm this working with my Sparkasse bank account.
However, this implementation has a caveat: Confirming the import in the pushTAN app is necessary every time an import is started. Also this adds an entry to the list of saved devices in device management (Geräteverwaltung).
This is also an issue in phpFinTs: nemiah/phpFinTS#453, where it is described as an issue with the "kundensystemId"