View Issue Details

IDProjectCategoryView StatusLast Update
0010648Talermerchant backendpublic2025-11-24 15:15
Reportersebasjm Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Summary0010648: missing mfa validation
Descriptionafter the creation of a self provision instance with an verified email i can go to the instance settings and change the email to mr@evil.com and it will only require the validation of evil.com without requesting authorization of the first email

backend should return 2 challenges with combi_and = true instead of one
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2025-11-24 15:15 sebasjm New Issue