View Issue Details

IDProjectCategoryView StatusLast Update
0009272Talerlibeufin-bankpublic2024-11-21 00:00
ReporterAntoine A Assigned ToAntoine A  
PriorityhighSeverityfeatureReproducibilityN/A
Status resolvedResolutionfixed 
Target Version0.14Fixed in Version0.14 
Summary0009272: Password recovery and account unlocking
DescriptionWe need users who have forgotten their password but whose 2fa is enabled to be able to change their current password.
We already have an endpoint to change the password of a bank account at PATCH /accounts/$USERNAME/auth, this endpoint should reset the attempt counter and allow password change without entering the current password if 2fa is used.
We can't do this at the moment, as the 2fa challenge access points are authenticated and disclose 2fa channel information (email or phone number).
TagsNo tags attached.

Relationships

related to 0009271 resolvedAntoine A Lockout policy 
child of 0009269 resolvedAntoine A Password and lockout policy 

Activities

Antoine A

2024-11-18 18:11

developer   ~0023731

Fixed in 5f53f42899821e4fb7e353ae5ec6b76981ee5dd9

Issue History

Date Modified Username Field Change
2024-10-15 18:29 Antoine A New Issue
2024-10-15 18:29 Antoine A Status new => assigned
2024-10-15 18:29 Antoine A Assigned To => Antoine A
2024-10-15 18:29 Antoine A Relationship added child of 0009269
2024-10-15 18:29 Antoine A Relationship added related to 0009271
2024-11-18 18:11 Antoine A Status assigned => resolved
2024-11-18 18:11 Antoine A Resolution open => fixed
2024-11-18 18:11 Antoine A Note Added: 0023731
2024-11-21 00:00 Christian Grothoff Fixed in Version => 0.14
2024-11-21 00:00 Christian Grothoff Target Version 1.0 => 0.14