View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0011157 | Taler | merchant portal webui | public | 2026-02-25 09:22 | 2026-03-20 23:55 |
| Reporter | vecirex | Assigned To | sebasjm | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | high | Severity | tweak | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Target Version | 1.5 | Fixed in Version | 1.5 | ||
| Summary | 0011157: MFA: don't wait for the user to click any button | ||||
| Description | As seen in practice several times (and maybe already filed, but coulnd't find): in MFA contexts, anytime either an email or SMS auth code or both together is/are required, just send out any auth code immediately out. It can make sense to have a counter of like 30secs to allow to send out new auth codes; this then can be done for each auth code individually, because in such a case the user starts to more narrowly investigate what's on the screen, which often people don't do otherwise. | ||||
| Additional Information | Certainly, the workflow needs to be changed a bit, as usually upon request of a, e.g., the email auth code the window changes to an area to enter the code, then eventually going back to the button area, where upon request of the second / SMS auth code the window changes again to the area to enter that code then. | ||||
| Tags | No tags attached. | ||||
| 56031c345..d1a5c5fd4 now after Spa gets the Accept with the challenges if there is at least 1 immediately send a code (the first one) if request went ok then shows directly the verification code page | |
| d1a5c5fd4..21bcbab2a adds the same behavior after solving a challenge | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2026-02-25 09:22 | vecirex | New Issue | |
| 2026-02-25 09:22 | vecirex | Severity | trivial => tweak |
| 2026-02-25 09:23 | vecirex | Description Updated | |
| 2026-02-25 09:24 | vecirex | Description Updated | |
| 2026-02-25 14:33 | Christian Grothoff | Assigned To | => sebasjm |
| 2026-02-25 14:33 | Christian Grothoff | Status | new => assigned |
| 2026-02-25 14:33 | Christian Grothoff | Target Version | => 1.5 |
| 2026-03-02 19:47 | sebasjm | Note Added: 0027961 | |
| 2026-03-02 19:57 | sebasjm | Note Added: 0027962 | |
| 2026-03-02 19:57 | sebasjm | Status | assigned => informing |
| 2026-03-02 19:57 | sebasjm | Resolution | open => fixed |
| 2026-03-10 12:36 | Christian Grothoff | Fixed in Version | => 1.5 |
| 2026-03-20 23:55 | Christian Grothoff | Status | informing => closed |
| 2026-08-23 14:18 | Florian Dold | Category | merchant backoffice SPA => merchant portal webui |