PushTAN Decoupled: DE mit der TAN weglassen und nicht leer senden

hbci4j · Dec 22, 2023 · 34fd256 · 34fd256
1 parent ead6f37
commit 34fd256
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/src/main/java/org/kapott/hbci/security/Sig.java b/src/main/java/org/kapott/hbci/security/Sig.java
@@ -344,9 +344,14 @@ public boolean signIt()
                             if (pos!=-1)
                             {
                                 String pin = pintan.substring(0,pos);
-                                String tan = pintan.substring(pos+1);
                                 msg.propagateValue(sigtail.getPath()+".UserSig.pin",pin,SyntaxElement.DONT_TRY_TO_CREATE,SyntaxElement.DONT_ALLOW_OVERWRITE);
-                                msg.propagateValue(sigtail.getPath()+".UserSig.tan",tan,SyntaxElement.DONT_TRY_TO_CREATE,SyntaxElement.DONT_ALLOW_OVERWRITE);
+
+                                // TAN nur senden, wenn vorhanden. Andernfalls lassen wir das DE komplett weg
+                                if (pos<pintan.length()-1)
+                                {
+                                  String tan = pintan.substring(pos+1);
+                                  msg.propagateValue(sigtail.getPath()+".UserSig.tan",tan,SyntaxElement.DONT_TRY_TO_CREATE,SyntaxElement.DONT_ALLOW_OVERWRITE);
+                                }
                             }
                         }
                         else