| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009620 | Taler | mechant backend | public | 2025-03-13 13:27 | 2025-03-13 20:32 |
| Reporter | Dana Dram | Assigned To | |||
| Priority | high | Severity | feature | Reproducibility | always |
| Status | confirmed | Resolution | open | ||
| Product Version | 0.14 | ||||
| Target Version | 1.1 | ||||
| Summary | 0009620: Restrict public instance access and replace token-based authentication with username and password | ||||
| Description | Currently, the application includes a "Clear" button that makes the instance public, removing the need for a token to log in. This poses a significant security risk, as it allows unrestricted access to the instance without proper authentication. To address this issue, the feature proposes blocking the ability to make the instance public through the "Clear" button. Additionally, instead of relying solely on token-based authentication, the feature suggests replacing it with a more conventional and user-friendly authentication method: username and password. This change would enhance security by ensuring that access is tied to specific user credentials while maintaining ease of use for end-users | ||||
| Additional Information | To prevent making the instance public, it would be preferable to disable or remove the "Clear" button functionality. Additionally, implementing username and password-based authentication as the primary login method would enhance security | ||||
| Tags | No tags attached. | ||||
- Anonymous
