tonkeeper / tonapi Goto Github PK

Bug Type

Functional

Reproduction steps

1. Click at the top "Login" button in header

Actual result

Nothing happend.

Expected result

You follow to the login flow

Suggested Severity

Medium

Device

• OS: macOS
• Browser chrome
• Version 105

Additional Context

This is because the iframe is located below the login button. Check video.

Bug Type

UI

Reproduction steps

1. Go to some wallet (account) page e.g. https://tonapi.io/account/EQDrLq-X6jKZNHAScgghh0h1iog3StK71zn8dcmrOj8jPWRA
2. And checkout transaction history blocks

Actual result

Background are rectangular, but borders are oval

Expected result

Background and borders are both should be either oval or rectangular

Suggested Severity

Low

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

Functional

Reproduction steps

The server responds with a 200 code data: null, when receiving a domain bid with invalid values

Steps:

1. Send a GET /v1/auction/getBids with values "кошелёк", "12345", "!@#$%^&"

Actual result

Response code is 200 and data: null
{ "data": null }

Expected result

Response code is 400 and data is:
{ "error": "error description" }

Suggested Severity

High

Device

Curl:
curl -X 'GET'
'https://testnet.tonapi.io/v1/auction/getBids?domain=%21%22%E2%84%96%3B%25%3A%3F%2A'
-H 'accept: application/json'

Request URL:
https://testnet.tonapi.io/v1/auction/getBids?domain=%21%22%E2%84%96%3B%25%3A%3F%2A

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Go to https://tonapi.io/swagger-ui

Actual result

"Failed to load API definition." error message appears

Expected result

List of API should be display correctly without any issues

Suggested Severity

High

Device

Desktop:

• OS: macOS Monterey
• Browser: Brave
• Version: v1.43.93

Smartphone:

• Device: iPhone 7
• OS: iOS 14.2
• Browser: Brave
• Version: 1.42

Additional Context

Bug Type

UI

Reproduction steps

Actual result

Test case:
0. Go to https://tonapi.io/

1. Click on Log in
2. Login window does not appear

Test case:
0. Go to https://tonapi.io/

1. Click outside the login button
2. Login window appears

Expected result

Only by pressing the Log in button the authorization window appear.

Suggested Severity

High

Device

Desktop (please complete the following information):

• OS: Ubuntu 22
• Browser Google Chrome
• Version 105.0.5195.52

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Send a GET /v1/nft/getItems with empty addresses parameter

Actual result

500 Internal Server Error. Response body:
{ "message": "Internal Server Error" }

Expected result

400 Client Side Error. Response body:
{ "error": "error description" }

Suggested Severity

Medium

Device

App:
Postman
Request url:
https://tonapi.io/v1/nft/getItems?addresses=

Additional Context

No response

Bug Type

UX

Reproduction steps

Click "Terms" or "Privacy" link at the bottom of the page

Actual result

Lead to the index page

Expected result

Lead to the appropriate page

Suggested Severity

Low

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

Functional

Reproduction steps

Switch between tabs: Explorer, Documentation, API. (Called stable. If it is not possible to reproduce, please contact @isopen)

Actual result

Expected result

Should not occur: Minified React error #200

Suggested Severity

Low

Device

Desktop (please complete the following information):

• OS: Ubuntu 22
• Browser Google Chrome
• Version 105.0.5195.52

Additional Context

No response

Bug Type

UI

Reproduction steps

1. Go to some wallet (account) page e.g. https://tonapi.io/account/EQDrLq-X6jKZNHAScgghh0h1iog3StK71zn8dcmrOj8jPWRA
2. Scroll to the very bottom

Actual result

The pagination block is overlaps footer (You can see only "T" from "Terms")

Expected result

Footer should be fully visible or not visible at all

Suggested Severity

Low

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

Functional

Reproduction steps

500 Server Error when requesting GET /v1/dns/resolve with domain names except casino.ton

Steps

1. Send a GET /v1/dns/resolve with domain name "wallet.ton"

Actual result

Error code: 500 Internal Server Error
{ "error": "no rows in result set" }

Expected result

200 OK
{ "next_resolver": "NEXT_RESOLVER", "site": [ "http://wallet.ton" ], "wallet": { "address": "ADDRESS", "has_method_pubkey": true, "has_method_seqno": true, "is_wallet": true, "names": [ "name" ] } }

Suggested Severity

Critical

Device

Curl:
curl -X 'GET'
'https://tonapi.io/v1/dns/resolve?name=wallet.ton'
-H 'accept: application/json'

Request URL:
https://tonapi.io/v1/dns/resolve?name=wallet.ton

Additional Context

Response headers:
cf-cache-status: DYNAMIC
cf-ray: 74cfdf5b3aab697b-FRA
content-length: 34
content-type: application/json; charset=UTF-8
date: Mon,19 Sep 2022 05:20:29 GMT
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v3?s=RconyFl7O8fgswncr7p3D72WsdzwS4b%2BNwl26jq0HEwetx0k3%2FHTDT00tarC9bAR452CjDn3tdeLDPqJIDpY1kfADGm6vrZV7GV1gxBiAnMM7VOqylTF6Fozwg%3D%3D"}],"group":"cf-nel","max_age":604800}
server: cloudflare

Bug Type

Functional

Reproduction steps

1. Open Postman
2. Receive Bearer Token
3. Create get request with the following link: https://tonapi.io/v1/nft/searchItems?limit=10&offset=10

Actual result

Response 400 bad request

Expected result

If you specify offset 0, then the server will return the correct data

Suggested Severity

Medium

Device

Desktop:

• OS: Win11
• Postman v10

Additional Context

No response

Bug Type

UI

Reproduction steps

1. Open https://tonapi.io/account/EQD_5Gn0KWVVr1nXWuNB_ZJlAWjAdI8LNqO_HTNH7ijeW6m6
2. Scroll to jettons
3. Look at "Starter Pack presale jetton"
   

Actual result

Explorer says that user owns 3e-9 EFZJ istead of 0.000000003

Expected result

Suggested Severity

Medium

Device

• any

Additional Context

No response

Bug Type

Security

Reproduction steps

1. Open https://tonapi.io/
2. Click [Log in] and complete login process using Telegram Authorization bot.
3. Open [Telegram] application -> Telegram service notifications
4. Navigate to [You have successfully logged in on tonapi.io via @tonapi_auth_bot...] notification
5. Click [Disconnect] button under notification
6. After disconnect click tonapi.io link from notification
   

Actual result

6. [Tonapi.io] is opened, but user remains logged in. (see video attached below)
   https://user-images.githubusercontent.com/79211743/190672088-8021e648-632d-43fa-8c62-711643ab8966.mp4

Expected result

6. [Tonapi.io] should be opened. Session should be terminated, user should be logged out

Suggested Severity

High

Device

Desktop:

• Windows 10
• Browser - Chrome (105.0.5195.127 (Official Build) (64-bit))
• Telegram desktop v4.1.1

Additional Context

No response

Bug Type

Functional

Reproduction steps

The server respond data: null, when getting a domain bid via GET /v1/auction/getBids with "cheapflights.ton" value, but respond right data without .ton value "cheapflights".

Preconditions:

1. Send a GET /v1/auction/getCurrent
2. Copy domain name

Steps:

1. Enter the copied domain name in the domain parameter value with ".ton" at the end
2. Send a GET /v1/auction/getBids request with domain parameter

Actual result

Return 200 OK with data: null
{ "data": null }

Expected result

Returns 200 OK with the data:
{ "data": [ { "bidderA": "bidderA", "success": true, "txTime": 1660050553, "value": 1660050553 } ] }

Suggested Severity

High

Device

Curl: curl -X 'GET'
'https://tonapi.io/v1/auction/getBids?domain=cheapflights.ton'
-H 'accept: application/json'

Request url: https://tonapi.io/v1/auction/getBids?domain=cheapflights.ton

Additional Context

No response

Bug Type

UI

Reproduction steps

Go to some jetton page e.g. https://tonapi.io/jetton/0:d4bb28d6539d0337deeb42228832777cd6413b330a631526fd49fd37e08bd14a

Actual result

Instead thumbnail shows just a circle (border)

Expected result

Shows actual jetton's thumbnail

Suggested Severity

Low

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

UI

Reproduction steps

1. Enter in search bar: testertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterov
2. Scroll scrolling page to the right in width

Actual result

Expected result

Scrollbar should not appear in width

Suggested Severity

Low

Device

Desktop (please complete the following information):

• OS: Ubuntu 22
• Browser Google Chrome
• Version 105.0.5195.52

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Open Postman
2. Receive Bearer Token
3. Create get request with the following link: https://tonapi.io/v1/blockchain/getAccount?account={account}
4. Copy your own Ton address instead of {account}

Actual result

Response body has such message:
"error": "entity not found"

Expected result

Response body has account realted information as it described here:

Suggested Severity

Medium

Device

Desktop (please complete the following information):

OS: [e.g. iOS]
Browser [e.g. chrome, safari]
Version [e.g. 22]
Smartphone (please complete the following information):

Device: Notebook
OS:Win 10
Postman
-7.2

Additional Context

No response

• Увидеть можно тут https://tonapi.io/v1/event/getAccountEvents?account=EQC3qDjaNf_IUpSO3U0Ssa9XUEoKmNmouS1okltdI72R1rl4&beforeLt=30803779000001&limit=1
• В tonkeeper всё отображается как надо.
• В интерфейсе tonapi-sdk-js поле comment присутствует.

Bug Type

UI

Reproduction steps

1. Adding all transactions values
2. Subtract the sum from the balance

Actual result

Specific number

Expected result

Zero

Suggested Severity

Medium

Device

• Device: [e.g. iPhone8]
• OS: [e.g. iOS15.6.1]
• Browser [safari]
• Version [?]

Additional Context

Calculation error is a multiple of ten

Bug Type

UI

Reproduction steps

1. Open a transaction (i.e. https://tonapi.io/transaction/50472d8625378a63cfca65ffcd56c7bd0d9e0542e09573fd76858ffe43c75ce3)

Actual result

Time = 11:40:21

Expected result

Time = 23:40:21

Suggested Severity

Low

Device

Desktop:

• OS: macOS Big Sur (11.6.1)
• Browser: Chrome
• Browser version: 105.0.5195.125 (x86_64)

Additional Context

Since there was no explicit indication of p.m / a.m, I decided that the time is still displayed in 24-hour format;)

Bug Type

UX

Reproduction steps

1. Go to some wallet (account) page e.g. https://tonapi.io/account/EQDrLq-X6jKZNHAScgghh0h1iog3StK71zn8dcmrOj8jPWRA
2. Click on wallet's name or address

Actual result

A click on wallet name copies address with message "Address copied", and right below a click on address does the same

Expected result

Click (copy address functionality) should be only for either one of them.
Or a click on wallet name should generate message "Wallet's name copied" and copy wallet's name

Suggested Severity

Low

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

Functional

Reproduction steps

1. Go to https://tonapi.io/
2. Click on "Log in" button

Actual result

"Log in" button is not working

Expected result

"Log in" button should work

Suggested Severity

High

Device

Smartphone:

• Device: iPhone 7, iPhone XS
• OS: iOS 14.2, iOS 14,2
• Browser: Brave, Safari
• Version: 1.42, 14

Additional Context

It's possible that this button works only when screen resolution is high (as on laptop), because when user tries to minimise browser screen then "Log in" button changes and also become non-working. Screen from WEB:

Before screen size changing (this button works):

Bug Type

UI

Reproduction steps

1. Go to 404 page e.g. https://tonapi.io/404

Actual result

Footer doesn't stick to the bottom

Expected result

Is more accepted to have a footer that stuck to the bottom

Suggested Severity

Low

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

Functional

Reproduction steps

1. Send a GET /v1/blockchain/getAccount with empty parameter "account"

Actual result

500 Internal Server Error. Response body:
{ "message": "Internal Server Error" }

Expected result

400 Client Side Error. Response body:
{ "error": "error description" }

Suggested Severity

Medium

Device

App: Postman
Request url:
https://tonapi.io/v1/blockchain/getAccount

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Go to https://tonapi.io/
2. Click on "Log in" button
3. Log in with your credentials
4. Click on your avatar and click on "Log out"

Actual result

Status 400 appears during log out for "logout" request

Expected result

Status 200 should appear

Suggested Severity

Medium

Device

Desktop:

• OS: macOS Monterey
• Browser: Brave
• Version: v1.43.93

Additional Context

Bug Type

UX

Reproduction steps

1. Go to search testertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterov
2. Press Enter: https://tonapi.io/account/testertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterovtestertesterov
3. Click native browser button <-
4. Incorrect moving back in history

Actual result

Incorrect moving back in history

Expected result

In my opinion, it should return by analogy with the Back to home button

Suggested Severity

Low

Device

Desktop (please complete the following information):

• OS: Ubuntu 22
• Browser Google Chrome
• Version 105.0.5195.52

Additional Context

No response

Проблема

• В API /v1/jetton/getInfo и /v1/jetton/getBalances пустая информация о токене (metadata).

• Токен создал через тулзу на tonwhales.com (для тестов, нужен был именно с digits != 9, а в jetton.live так было не сделать). Там данные все onchain.

• Адрес токена EQBRwbga1sZgx_aYHJrcYV5ySAwy_ensyRxSVqxAwe6YCKG8

• Адрес кошелька с балансом токена EQC3qDjaNf_IUpSO3U0Ssa9XUEoKmNmouS1okltdI72R1rl4

Here is demo:

Telegram usernames auction link go to TON DNS auctions

Bug Type

UI

Reproduction steps

1. Open [https://tonapi.io/]
2. Click [Log In] button: specifically top part of the button (see screenshot)
   
3. Click [Log In] button: specifically bottom part of the button and area below the button (see screenshot)
   

Actual result

2. Nothing happens after click event. Telegram login widget popup window is not present.
3. Click area is shifted, so user able to trigger telegram widget if clicks the area below actual [Log In] button
   
   

Expected result

2. Telegram login widget should be opened in popup window.
3. Telegram log in widget should NOT be triggered if clicked outside button area.

Suggested Severity

Medium

Device

Desktop:
OS Windows
Browser: Chrome (105.0.5195.127 (Official Build) (64-bit)), Edge (105.0.1343.33 (Official build) (64-bit))

Additional Context

No response

Bug Type

UI

Reproduction steps

1. Open https://tonapi.io/
2. Open Explorer tab
3. Enter a random text in the search field that will fill in several lines
4. Start search, send request

Actual result

The cross near the text in the history almost invisible

Expected result

The cross should not change the size depending of the text size.
The search field may be limited to some number of symbols

Suggested Severity

Low

Device

Desktop:

• Browser: FireFox
• Version: 104.0.2 (64-bit)
• OS: Windows

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Go to some wallet (account) page e.g. https://tonapi.io/account/EQDrLq-X6jKZNHAScgghh0h1iog3StK71zn8dcmrOj8jPWRA
2. Scroll all the way down and set "Transaction history" rows parameter to 100
3. Again scroll all the way down and click for next page (page 2)
4. (Again) scroll all the way down and click for next page (page 3)

Importing part it is scrolling all the way down

Actual result

After click to page 3 it stays on page 2 and now in the rows selector it shows "200"

Expected result

Paginate and not exceed rows per page selector

Suggested Severity

Low

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

Security

Reproduction steps

For security reasons I changed the wallet values in "Actual result"
Steps:

1. Send a GET /v1/wallet/findByPubkey with empty parameter "public_key"

Actual result

200 OK. Response body:
{ "wallets": [ {...}, {...}, {...}, {...}, {...}, {...}, {...}, {...}, {...} ] }

Expected result

400 Client Side Error. Response body:
{ "error": "error description" }

Suggested Severity

Critical

Device

App:
Postman
Request url:
https://tonapi.io/v1/wallet/findByPubkey?public_key=

Additional Context

No response

Bug Type

UX

Reproduction steps

Actual result

The "Try again" button does not work

Expected result

Fix the "Try again" button. If possible, change the validators to more adequate ones.
So that there is no transition to a separate page if there is a validation error.

Suggested Severity

Low

Device

Desktop (please complete the following information):

• OS: Ubuntu 22
• Browser Google Chrome
• Version 105.0.5195.52

Additional Context

No response

Bug Type

UX

Reproduction steps

1. Log in
2. Go to "Apps"
3. Try to create some app
   (with invalid image or name)
4. Got error from API

Actual result

Error don't displayed on frontend

Expected result

Display error on frontend

Suggested Severity

Low

Device

OS: macOS
Browser chrome
Version 105

Additional Context

No response

Bug Type

Functional

Reproduction steps

Precondition: open https://tonapi.io/

Steps to reproduce:

1. Navigate to the footer of website.
2. Hover mouse to [Terms] or [Privacy].
3. Click [Terms] or [Privacy]

Actual result

Link address is [https://tonapi.io/], which is current page URL so it is reloaded w/o displaying [Terms] or [Privacy] information

Expected result

According page should be opened after click on the link - [Terms] / [Privacy]

Suggested Severity

Critical

Device

Desktop (please complete the following information):

• OS: Windows 10
• Browser: Chrome (105.0.5195.127 (Official Build) (64-bit)), Edge (105.0.1343.33 (Official build) (64-bit))

Much likely reproducible in any browser.

Additional Context

No response

Bug Type

UI

Reproduction steps

1. Open API page: https://tonapi.io/swagger-ui
2. Enable dark mode.
3. Click on the "Authorize" button

Actual result

After entering the value and clicking "Authorize," a user can't see a confirmation about their authorization - the label has the same color as the background. Labels on buttons are not visible as well.

Expected result

The user should be able to see that they were authorized.

Suggested Severity

Low

Device

Desktop (please complete the following information):

• OS: macOS 12.5.1
• Browser: Chrome
• Version: 105.0.5195.102 (Official Build) (arm64)

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Open Postman
2. Receive Bearer Token
3. Create get request with the following link: https://tonapi.io/v1/account/getInfo?account={account}
4. Copy your own Ton address and do some mistake, e.g: delete last symbol of account

Actual result

Response body is empty. No message to clarify what exactly went wrong:

Expected result

Response body is not empty.

I received such message in response body as it described here:

Suggested Severity

Medium

Device

Desktop (please complete the following information):

• OS: [e.g. iOS]
• Browser [e.g. chrome, safari]
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: Notebook
• OS:Win 10
• Postman
  -7.2

Additional Context

No response

Bug Type

UX

Reproduction steps

1. вводим несколько поисковых адресов
2. при очередном адресе происходит загрузка состояния, но меню истории не сворачивается
3. при формировании ошибочного запроса ошибка выдается в том же окне, вместо подсказки или всплывающего окна

Actual result

меню истории не сворачивается
при формировании ошибочного запроса ошибка выдается в том же окне, вместо подсказки или всплывающего окна

Expected result

меню истории должно сворачиваться
при формировании ошибочного запроса ошибка должна выдаваться на той же странице

Suggested Severity

Medium

Device

Desktop (please complete the following information):
OS: iOS 12.6
Browser Google
Version 105.0.5195.102

Additional Context

Bug Type

Functional

Reproduction steps

1. Try to click on "Login" button in firefox, or around button (to click on iframe)

Actual result

Nothing happend.

Expected result

Login flow

Suggested Severity

Critical

Device

OS: macOS
Browser: Firefox
Version: 104.0.2

Additional Context

Unlike this bug #12 where we can click offset out "Login" button and got succesfull login, in this bug we can't login in any case. Login in firefox just broken.

Bug Type

Functional

Reproduction steps

In response body GET /v1/auction/getCurrent, "domain" value without ".ton"

Steps:

1. Send a GET /v1/auction/getCurrent

Actual result

Domain value without ".ton" at the end
{ "data": [ { "bids": 1660050553, "date": 1660050553, "domain": **"wallet"**, "owner": "owner", "price": 1660050553 } ] }

Expected result

Domain name has a ".ton" at the end
{ "data": [ { "bids": 1660050553, "date": 1660050553, "domain": **"wallet.ton"**, "owner": "owner", "price": 1660050553 } ] }

Suggested Severity

High

Device

Curl:
curl -X 'GET'
'https://tonapi.io/v1/auction/getCurrent'
-H 'accept: application/json'

Request URL:
https://tonapi.io/v1/auction/getCurrent

Additional Context

No response

Bug Type

UX

Reproduction steps

Go to https://tonapi.io/dns/auctions

Actual result

500 Error from server, infinite loading state

Expected result

Show a list of auctions or message that no auctions are found

Suggested Severity

Medium

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

UX

Reproduction steps

1. Go to some wallet (account) page e.g. https://tonapi.io/account/EQDrLq-X6jKZNHAScgghh0h1iog3StK71zn8dcmrOj8jPWRA
2. And checkout transaction history blocks

Actual result

When you hover over a table rows there is no indication that it is a link (no cursor pointer or hover effect), but in actuality it links you to another page. Only the title displayed as a link.

Expected result

The whole row should behave as a link

Suggested Severity

Low

Device

Desktop:

• OS: Windows 11
• Browser firefox
• Version 104.0.2

Additional Context

Bug Type

Functional

Reproduction steps

https://tonapi.io/v1/nft/searchItems?collection=EQBZt79z3nRH9Seo3Xtr50QUCCSXRhpuRsWsABqVagRMWoKb&limit=5000&offset=0&include_on_sale=true&owner=EQD_5Gn0KWVVr1nXWuNB_ZJlAWjAdI8LNqO_HTNH7ijeW6m6

query, among other things, returns token ID 138 and token ID 137 - with an empty metadata body.

Actual result

{
         "address":"0:d1969e1b4c946c258581ca8c694d6f382e6ccb523e42725be1b1c43987eb72a2",
         "approved_by":null,
         "collection":{
            "address":"0:59b7bf73de7447f527a8dd7b6be74414082497461a6e46c5ac001a956a044c5a",
            "name":"NeuroTonPunks"
         },
         "collection_address":"0:59b7bf73de7447f527a8dd7b6be74414082497461a6e46c5ac001a956a044c5a",
         "index":137,
         "metadata":{
            
         },
         "owner":{
            "address":"0:ffe469f4296555af59d75ae341fd92650168c0748f0b36a3bf1d3347ee28de5b",
            "is_scam":false
         },
         "verified":true
      },

Expected result

the metadata should be there.
see https://getgems.io/collection/EQBZt79z3nRH9Seo3Xtr50QUCCSXRhpuRsWsABqVagRMWoKb/EQB5baNfiniZFgVyQnRTYH4TDOS2mY4mKdKUt0SLM0El9boB

Suggested Severity

Critical

Device

• any

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Go to https://tonapi.io/
2. Click on "Log in" button
3. Log in with your credentials
4. Click on your avatar and click on "Apps"
5. Click on "Create App" button
6. Fill in Name field and upload any picture for your logo
7. Click on "Save" button

Actual result

App cannot be created. Status 400 appears for "app" POST request

Expected result

App should be created without any issues

Suggested Severity

High

Device

Desktop:

• OS: macOS Monterey
• Browser: Brave
• Version: v1.43.93

Additional Context

Bug Type

Functional

Reproduction steps

500 Server Error when attempt requesting GET /v1/event/getAccountEvents with limit parameter less or equal zero

Steps:

1. Send a GET /v1/event/getAccountEvents with limit parameter less or equal zero and with right parameters for "account" and "beforeLt"

Actual result

500 Internal Server Error. Response body:
{ "message": "Internal Server Error" }

Expected result

400 Client Side Error. Response body:
{ "error": "error description" }

Suggested Severity

High

Device

Curl:
curl -X 'GET'
'https://tonapi.io/v1/event/getAccountEvents?account=0%3ABA60BFBD527C0CD2D70C6396630C50A498AF015B987ADAAD1D4A9E287F604536&beforeLt=25758317000002&limit=-1'
-H 'accept: application/json'

Request URL:
https://tonapi.io/v1/event/getAccountEvents?account=0%3ABA60BFBD527C0CD2D70C6396630C50A498AF015B987ADAAD1D4A9E287F604536&beforeLt=25758317000002&limit=-1

Additional Context

Response headers:

cf-cache-status: DYNAMIC
cf-ray: 74d001db5d6290a2-FRA
content-length: 36
content-type: application/json; charset=UTF-8
date: Mon,19 Sep 2022 05:44:03 GMT
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v3?s=AoOszu60MwaMYjaXqxcMO5DYJtbGHDcbJm4jZQ8kH7P5F6s4Xmi6LgycMlzyIkUj0hqm6Zf5JDA%2FxQvw6z2JNDaNQLpzaDm18Xy5wbwVdG0Ni0xUDu%2Be461Qfw%3D%3D"}],"group":"cf-nel","max_age":604800}
server: cloudflare

Bug Type

Functional

Reproduction steps

1. Open https://tonapi.io/v1/jetton/getInfo?account=EQCzUQNb0sEwvRO6MTSCHhHQVjwntJY8oWqAVNrN1bZw3iUb
   -- Or open this jetton in tonapi explorer https://tonapi.io/jetton/EQCzUQNb0sEwvRO6MTSCHhHQVjwntJY8oWqAVNrN1bZw3iUb

Actual result

Incorrect image URL:

https://cache.tonapi.io/imgproxy/z7DrfDhihyu_WGRM_xU5AfPTz_EOANum7QRn31fPX_U/rs:fill:200:200:1/g:no/aXBmczovL2JhZnliZWlkMmo2dWF0and0NWs2ZHVhamdnNDJoN2lieGo1Z2tic2didjJ1NWpqcGplZ3B6dmQyYjN5.webp

So this url does not work and image content does not loaded

Expected result

Something like this https://tonscan.org/jetton/EQCzUQNb0sEwvRO6MTSCHhHQVjwntJY8oWqAVNrN1bZw3iUb

Suggested Severity

Low

Device

• any

Additional Context

No response

Problem

Мы отображаем NFT пользователя, и когда он ставит их на аукцион - они пропадают.
Для пользователя это совсем не очевидно и выглядит как баг.

• Используем запрос /v1/nft/searchItems?owner=<address>&include_on_sale=true.
• Речь идёт об аукционах на смарт-контрактах GetGems, которые появились недавно.

Bug Type

Functional

Reproduction steps

1. Send a GET /v1/nft/getCollection with empty parameter "account"

Actual result

500 Internal Server Error. Response body:
{ "message": "Internal Server Error" }

Expected result

400 Client Side Error. Response body:
{ "error": "error description" }

Suggested Severity

Medium

Device

App:
Postman
Request url:
https://tonapi.io/v1/nft/getCollection?account=

Additional Context

No response

Bug Type

Functional

Reproduction steps

1. Add several search queries for the button "Clear history" to appear
2. Click on "Clear history"
3. Try to search something
4. Open search field on the top

It's better to watch the video:

Actual result

All previous queries are displayed

Expected result

The history should be cleared, all previous requests deleted

Suggested Severity

Low

Device

Smartphone:

• Device: Samsung Galaxy S20 FE
• OS: Android 12
• Browser: Chrome
• Browser version: 105.0.5195.136

Additional Context

I also checked it in the desktop version, but it works stably there.

Perhaps this is due to the peculiarities of the mobile version, since there is a search bar on top, but there is no such button in the desktop version.
It is also known that these values are added to the array in cookies, perhaps it is better to do this through the internal store.