View Issue Details

IDProjectCategoryView StatusLast Update
0010373Talermerchant backoffice SPApublic2025-09-06 20:31
ReporterChristian Grothoff Assigned Tosebasjm  
PriorityurgentSeverityfeatureReproducibilityN/A
Status assignedResolutionopen 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version1.1 
Summary0010373: implement MFA support in SPA
DescriptionThere are various endpoints that may now trigger MFA:
- new "forgot-password" endpoint (0010181)
- adding bank account
- changing authentication
- changing e-mail/phone number
- deleting instance

See "202 accepted" and the new section 1.4.6 on Two Factor authentication in the manual.

The SPA needs to handle all of these, give the user a chance to trigger the transmission of one or more challenges, submit the solutions and re-try the requests with the new Taler-challenge-ids header set to the solved challenge codes.
TagsGLS

Relationships

child of 0010224 confirmedFlorian Dold merchant backend self-provisioning [meta] [01sept] 

Activities

Christian Grothoff

2025-09-06 20:30

manager   ~0025845

Note that MFA is only triggered if email/phone number were validated, which also is only the case if the instance was self-provisioned. So probably do 0010374 first ;-).

Issue History

Date Modified Username Field Change
2025-09-06 20:25 Christian Grothoff New Issue
2025-09-06 20:25 Christian Grothoff Status new => assigned
2025-09-06 20:25 Christian Grothoff Assigned To => sebasjm
2025-09-06 20:26 Christian Grothoff Relationship added child of 0010224
2025-09-06 20:30 Christian Grothoff Note Added: 0025845
2025-09-06 20:31 Christian Grothoff Tag Attached: GLS