View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0010373 | Taler | merchant portal webui | public | 2025-09-06 18:25 | 2026-05-11 21:24 |
| Reporter | Christian Grothoff | Assigned To | sebasjm | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | urgent | Severity | feature | Reproducibility | N/A |
| Status | closed | Resolution | fixed | ||
| Platform | i7 | OS | Debian GNU/Linux | OS Version | squeeze |
| Product Version | git (master) | ||||
| Target Version | 1.1 | Fixed in Version | 1.1 | ||
| Summary | 0010373: implement MFA support in SPA | ||||
| Description | There are various endpoints that may now trigger MFA: - new "forgot-password" endpoint (0010181) - adding bank account - changing authentication - changing e-mail/phone number - deleting instance See "202 accepted" and the new section 1.4.6 on Two Factor authentication in the manual. The SPA needs to handle all of these, give the user a chance to trigger the transmission of one or more challenges, submit the solutions and re-try the requests with the new Taler-challenge-ids header set to the solved challenge codes. | ||||
| Tags | GLS | ||||
| child of | 0010224 | closed | Florian Dold | merchant backend self-provisioning [meta] [01sept] |
| Note that MFA is only triggered if email/phone number were validated, which also is only the case if the instance was self-provisioned. So probably do 0010374 first ;-). | |
| changing password doesn't trigger MFA | |
| delete current instances is not the in the current UI, adding it | |
| 78c6b7a6f..74cbf5e77 | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-09-06 18:25 | Christian Grothoff | New Issue | |
| 2025-09-06 18:25 | Christian Grothoff | Status | new => assigned |
| 2025-09-06 18:25 | Christian Grothoff | Assigned To | => sebasjm |
| 2025-09-06 18:26 | Christian Grothoff | Relationship added | child of 0010224 |
| 2025-09-06 18:30 | Christian Grothoff | Note Added: 0025845 | |
| 2025-09-06 18:31 | Christian Grothoff | Tag Attached: GLS | |
| 2025-09-15 13:10 | sebasjm | Note Added: 0025916 | |
| 2025-09-15 14:31 | sebasjm | Note Added: 0025917 | |
| 2025-09-15 14:47 | sebasjm | Status | assigned => informing |
| 2025-09-15 14:47 | sebasjm | Resolution | open => fixed |
| 2025-09-15 14:47 | sebasjm | Note Added: 0025918 | |
| 2025-10-18 22:51 | Christian Grothoff | Fixed in Version | => 1.1 |
| 2025-10-31 19:49 | Christian Grothoff | Status | informing => closed |
| 2026-08-23 14:18 | Florian Dold | Category | merchant backoffice SPA => merchant portal webui |