Overlong validity window (1 year)
Quirk · GET /api/x402/overlong-validity · 402 / Challenge Construction
Sets maxTimeoutSeconds to a full year, widening the replay window.
Explanation
maxTimeoutSeconds is set to a full year, leaving a signed quote replayable for far longer than is safe. The merchant should tighten the validity window to a reasonable duration.
What to watch
A signed quote stays usable for far too long.
Facilitator
Settled against the live Radius testnet facilitator (https://facilitator.testnet.radiustech.xyz). A valid payment runs a real /verify and /settle on-chain.
Metadata
- Status: Quirk
- Method: GET
- Price: 0.0001 (100 atomic)
- Responsible party: Merchant