View Issue Details

IDProjectCategoryView StatusLast Update
0009342Talerlibeufin-bank webuipublic2026-08-31 21:46
ReporterAntoine A Assigned ToFlorian Dold  
PrioritynormalSeverityminorReproducibilityN/A
Status resolvedResolutionfixed 
Target Versionpost-1.0 
Summary0009342: Support locked account and token creation 2FA challenges
DescriptionIn the next version of libeufin-bank (API v7), 2FA challenges are required to create tokens using password authentication. For this to work, TAN endpoints are unauthenticated only for token creation challenges.

If a user fails TAN token creation challenges to many times, their account is locked. To unlock his account, he must contact the administrator or change his password using an existing token (with a client with which he is already connected).
Tagssecurity

Activities

Florian Dold

2026-08-31 21:46

manager   ~0029806

Looks like this is fixed, there's support for it both in the backend (libeufin-bank) and frontend (libeufin-bank-webui).

Issue History

Date Modified Username Field Change
2024-11-19 13:39 Antoine A New Issue
2024-11-19 13:39 Antoine A Status new => assigned
2024-11-19 13:39 Antoine A Assigned To => sebasjm
2025-02-25 00:19 Christian Grothoff Target Version 1.0 => 1.0 stretch goals
2025-04-17 22:16 Christian Grothoff Tag Attached: security
2025-04-17 22:16 Christian Grothoff Target Version 1.0 stretch goals => post-1.0
2025-04-24 00:29 Christian Grothoff Assigned To sebasjm =>
2025-04-24 00:29 Christian Grothoff Status assigned => confirmed
2026-08-23 16:18 Florian Dold Category libeufin-bank-ui (SPA) => libeufin-bank webui
2026-08-31 21:46 Florian Dold Assigned To => Florian Dold
2026-08-31 21:46 Florian Dold Status confirmed => resolved
2026-08-31 21:46 Florian Dold Resolution open => fixed
2026-08-31 21:46 Florian Dold Note Added: 0029806