View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009272 | Taler | libeufin-bank | public | 2024-10-15 16:29 | 2024-12-13 18:15 |
| Reporter | Antoine A | Assigned To | Antoine A | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | high | Severity | feature | Reproducibility | N/A |
| Status | closed | Resolution | fixed | ||
| Target Version | 0.14 | Fixed in Version | 0.14 | ||
| Summary | 0009272: Password recovery and account unlocking | ||||
| Description | We need users who have forgotten their password but whose 2fa is enabled to be able to change their current password. We already have an endpoint to change the password of a bank account at PATCH /accounts/$USERNAME/auth, this endpoint should reset the attempt counter and allow password change without entering the current password if 2fa is used. We can't do this at the moment, as the 2fa challenge access points are authenticated and disclose 2fa channel information (email or phone number). | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-10-15 16:29 | Antoine A | New Issue | |
| 2024-10-15 16:29 | Antoine A | Status | new => assigned |
| 2024-10-15 16:29 | Antoine A | Assigned To | => Antoine A |
| 2024-10-15 16:29 | Antoine A | Relationship added | child of 0009269 |
| 2024-10-15 16:29 | Antoine A | Relationship added | related to 0009271 |
| 2024-11-18 17:11 | Antoine A | Status | assigned => informing |
| 2024-11-18 17:11 | Antoine A | Resolution | open => fixed |
| 2024-11-18 17:11 | Antoine A | Note Added: 0023731 | |
| 2024-11-20 23:00 | Christian Grothoff | Fixed in Version | => 0.14 |
| 2024-11-20 23:00 | Christian Grothoff | Target Version | 1.0 => 0.14 |
| 2024-12-13 18:15 | Christian Grothoff | Status | informing => closed |