Implement 2FA #6

Open
opened 2024-05-04 16:21:09 +02:00 by adoralaura · 0 comments
Owner

Open TODOs:

  • Handle 2fa POST Request via JS, so that a message can be displayed when code was wrong
  • Rework scratch codes so that when they get used they get invalidated
  • Make it possible for the user to disable mfa
  • Make MFA Setup Flow more durable:
    • When reloading the setup page, scratch codes will be generated more than once
    • When you input a wrong TOTP code, Error message should be displayed inline. Also show busy submit button
    • mfakey cookie doesnt get deleted
    • when setting up 2fa, sometimes correct code is invalid and sometimes js doesnt do anything
  • Remove MFA cookie from setup flow OR attach it to session cookie (preferred)
Open TODOs: - [x] Handle 2fa POST Request via JS, so that a message can be displayed when code was wrong - [x] Rework scratch codes so that when they get used they get invalidated - [x] Make it possible for the user to disable mfa - [ ] Make MFA Setup Flow more durable: - [ ] When reloading the setup page, scratch codes will be generated more than once - [x] When you input a wrong TOTP code, Error message should be displayed inline. Also show busy submit button - [ ] mfakey cookie doesnt get deleted - [ ] when setting up 2fa, sometimes correct code is invalid and sometimes js doesnt do anything - [ ] Remove MFA cookie from setup flow OR attach it to session cookie (preferred)
adoralaura added the
enhancement
label 2024-05-04 16:21:15 +02:00
adoralaura added a new dependency 2024-05-04 16:23:42 +02:00
adoralaura removed a dependency 2024-05-04 16:23:51 +02:00
adoralaura self-assigned this 2024-05-04 17:30:52 +02:00
adoralaura added reference feature-2fa 2024-05-08 17:00:18 +02:00
adoralaura added this to the v0.2.0 milestone 2024-05-09 15:38:23 +02:00
Sign in to join this conversation.
No description provided.