View Issue Details

IDProjectCategoryView StatusLast Update
0010181Talermerchant backendpublic2025-07-14 19:59
ReporterChristian Grothoff Assigned Toschanzen  
PrioritynormalSeverityfeatureReproducibilityN/A
Status assignedResolutionopen 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version1.3 
Summary0010181: enable instance password reset with 2-FA
DescriptionWe should allow users to reset an instance password if they can do some kind of 2-FA.
(This will be important once we have hosted/self-provisioned instances in production.)

For 2-FA, we already have the owner's e-mail address and should add a (mobile) phone number as well.
Furthermore, we probably want to support (T)OTP as well. Given 2 (other) factors, we should then allow password reset (possibly when the right merchant backend configuration option is set to ENABLED).

We already have shell scripts for sending SMS in anastasis.git that can be used for sending the TAN code.

It would be good if we validated the phone number / e-mail address on sign-up (again, if the right configuration option "VALIDATE_XXX" is set to enable the feature).
TagsNo tags attached.

Relationships

parent of 0009815 confirmed Backend as a Service (EASE) durch GLS Bank: self-provisioning / Erfassung von Email Adresse und Telefonnummer 
parent of 0009817 confirmed Backend as a Service (EASE) durch GLS Bank: self-provisioning / Prozess für Passwort Change 
parent of 0009816 confirmed Backend as a Service (EASE) durch GLS Bank: self-provisioning / Validierung von Email Adresse und Telefonnummer 
Not all the children of this issue are yet resolved or closed.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2025-07-14 19:57 Christian Grothoff New Issue
2025-07-14 19:57 Christian Grothoff Status new => assigned
2025-07-14 19:57 Christian Grothoff Assigned To => schanzen
2025-07-14 19:58 Christian Grothoff Relationship added parent of 0009815
2025-07-14 19:59 Christian Grothoff Relationship added parent of 0009817
2025-07-14 19:59 Christian Grothoff Relationship added parent of 0009816