LibreSign / LibreSign/libresign

Seemingly random users gets a notification about a sign request that was not intended for them

Open
#4,116 30 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

help wanted
Dominant language
PHP
Stars
818
Forks
146
Avg merge
10h 53m
Merged PRs (30d)
353

Description

there are times when requesting a signature from a colleague that their name is shown twice. It appears that the second one is a random user on the instance, leading to a seemingly random user receiving a notification to sign in addition to the intended party.

unfortunately i have not been able to reliably reproduce this behavior so i have no idea what scenario leads to it, so far it seems to vary between requesting a signature from one self to requesting a signature from the files app

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files or tests are identified. Start by tracing the signature-request and notification flow for requests to a colleague, to oneself, and from the Files app, then investigate how a second signer appears. Done means the intended signer is listed once and no unrelated instance user receives a notification.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.