View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0009342 | Taler | libeufin-bank-ui (SPA) | public | 2024-11-19 13:39 | 2024-11-19 13:39 |
Reporter | Antoine A | Assigned To | sebasjm | ||
Priority | normal | Severity | minor | Reproducibility | N/A |
Status | assigned | Resolution | open | ||
Target Version | 1.0 | ||||
Summary | 0009342: Support locked account and token creation 2FA challenges | ||||
Description | In the next version of libeufin-bank (API v7), 2FA challenges are required to create tokens using password authentication. For this to work, TAN endpoints are unauthenticated only for token creation challenges. If a user fails TAN token creation challenges to many times, their account is locked. To unlock his account, he must contact the administrator or change his password using an existing token (with a client with which he is already connected). | ||||
Tags | No tags attached. | ||||