View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009342 | Taler | libeufin-bank webui | public | 2024-11-19 12:39 | 2026-09-19 14:40 |
| Reporter | Antoine A | Assigned To | Florian Dold | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | minor | Reproducibility | N/A |
| Status | informing | Resolution | fixed | ||
| Target Version | 1.6 | Fixed in Version | 1.6 | ||
| Summary | 0009342: Support locked account and token creation 2FA challenges | ||||
| Description | In the next version of libeufin-bank (API v7), 2FA challenges are required to create tokens using password authentication. For this to work, TAN endpoints are unauthenticated only for token creation challenges. If a user fails TAN token creation challenges to many times, their account is locked. To unlock his account, he must contact the administrator or change his password using an existing token (with a client with which he is already connected). | ||||
| Tags | security | ||||
| Looks like this is fixed, there's support for it both in the backend (libeufin-bank) and frontend (libeufin-bank-webui). | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2024-11-19 12:39 | Antoine A | New Issue | |
| 2024-11-19 12:39 | Antoine A | Status | new => assigned |
| 2024-11-19 12:39 | Antoine A | Assigned To | => sebasjm |
| 2025-02-24 23:19 | Christian Grothoff | Target Version | 1.0 => 1.0 stretch goals |
| 2025-04-17 20:16 | Christian Grothoff | Tag Attached: security | |
| 2025-04-17 20:16 | Christian Grothoff | Target Version | 1.0 stretch goals => post-1.0 |
| 2025-04-23 22:29 | Christian Grothoff | Assigned To | sebasjm => |
| 2025-04-23 22:29 | Christian Grothoff | Status | assigned => implementing |
| 2026-08-23 14:18 | Florian Dold | Category | libeufin-bank-ui (SPA) => libeufin-bank webui |
| 2026-08-31 19:46 | Florian Dold | Assigned To | => Florian Dold |
| 2026-08-31 19:46 | Florian Dold | Status | implementing => informing |
| 2026-08-31 19:46 | Florian Dold | Resolution | open => fixed |
| 2026-08-31 19:46 | Florian Dold | Note Added: 0029806 | |
| 2026-09-19 14:38 | Christian Grothoff | Target Version | post-1.0 => 1.6 |
| 2026-09-19 14:40 | Christian Grothoff | Fixed in Version | => 1.6 |