Skip to content

Release MakePay 1.7.2 DPoP registration fix - #20

Merged
orangebtc merged 1 commit into
mainfrom
development/fix-btcpay-dpop-1.7.2
Jul 27, 2026
Merged

Release MakePay 1.7.2 DPoP registration fix#20
orangebtc merged 1 commit into
mainfrom
development/fix-btcpay-dpop-1.7.2

Conversation

@orangebtc

Copy link
Copy Markdown
Collaborator

What changed

  • send a signed DPoP proof when registering a native MakePay installation
  • support the previous-key proof required for safe key rotation
  • preserve the registered DPoP key across retries and disconnect/reconnect
  • bump the plugin and package versions to 1.7.2
  • add cryptographic request and reconnect regression tests

Root cause

Plugin 1.7.0 submitted a dpopJkt in the registration body but omitted the signed DPoP request header. MakeCrypto rejected the unproved key claim before authorization with invalid_dpop_proof.

Validation

  • dotnet test BTCPayServer.Plugins.MakePay.Tests/BTCPayServer.Plugins.MakePay.Tests.csproj --configuration Release --verbosity minimal -m:1 (24 passed)
  • Release build completed as part of the test run

@orangebtc
orangebtc merged commit a847e89 into main Jul 27, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant