View Issue Details

IDProjectCategoryView StatusLast Update
0011157Talermerchant backoffice SPApublic2026-03-02 20:57
Reportervecirex Assigned Tosebasjm  
PriorityhighSeveritytweakReproducibilityalways
Status resolvedResolutionfixed 
Target Version1.5 
Summary0011157: MFA: don't wait for the user to click any button
DescriptionAs seen in practice several times (and maybe already filed, but coulnd't find): in MFA contexts, anytime either an email or SMS auth code or both together is/are required, just send out any auth code immediately out.

It can make sense to have a counter of like 30secs to allow to send out new auth codes; this then can be done for each auth code individually, because in such a case the user starts to more narrowly investigate what's on the screen, which often people don't do otherwise.
Additional InformationCertainly, the workflow needs to be changed a bit, as usually upon request of a, e.g., the email auth code the window changes to an area to enter the code, then eventually going back to the button area, where upon request of the second / SMS auth code the window changes again to the area to enter that code then.
TagsNo tags attached.

Activities

sebasjm

2026-03-02 20:47

developer   ~0027961

56031c345..d1a5c5fd4

now after Spa gets the Accept with the challenges if there is at least 1 immediately send a code (the first one)
if request went ok then shows directly the verification code page

sebasjm

2026-03-02 20:57

developer   ~0027962

d1a5c5fd4..21bcbab2a

adds the same behavior after solving a challenge

Issue History

Date Modified Username Field Change
2026-02-25 10:22 vecirex New Issue
2026-02-25 10:22 vecirex Severity trivial => tweak
2026-02-25 10:23 vecirex Description Updated
2026-02-25 10:24 vecirex Description Updated
2026-02-25 15:33 Christian Grothoff Assigned To => sebasjm
2026-02-25 15:33 Christian Grothoff Status new => assigned
2026-02-25 15:33 Christian Grothoff Target Version => 1.5
2026-03-02 20:47 sebasjm Note Added: 0027961
2026-03-02 20:57 sebasjm Note Added: 0027962
2026-03-02 20:57 sebasjm Status assigned => resolved
2026-03-02 20:57 sebasjm Resolution open => fixed