Add app passwords #15

Chiuso
aperto 5 anni fa da skylarmt · 0 commenti
skylarmt 5 anni fa ha commentato
Proprietario

There is no good way to easily implement two-factor auth in app APIs that authenticate with a username and password.

We need to add a UI tool and database table for app passwords. It should work like Nextcloud's implementation, where a user can note what app/device the password is for, they see the password one time, and then in the future they can delete passwords if needed.

Modifying checkPassword() in User.lib.php should be enough to enable app passwords everywhere, although the web login flow should probably check for and refuse to accept app passwords.

There is no good way to easily implement two-factor auth in app APIs that authenticate with a username and password. We need to add a UI tool and database table for app passwords. It should work like Nextcloud's implementation, where a user can note what app/device the password is for, they see the password one time, and then in the future they can delete passwords if needed. Modifying `checkPassword()` in `User.lib.php` should be enough to enable app passwords everywhere, although the web login flow should probably check for and refuse to accept app passwords.
skylarmt aggiunta alle pietre miliari Version 2.2 5 anni fa
skylarmt 5 anni fa auto-assegnato
skylarmt ha aggiunto l'etichetta
enhancement
5 anni fa
skylarmt ha fatto riferimento a questa issue dal commit 5 anni fa
skylarmt chiuso questo probleam 5 anni fa
Effettua l'accesso per partecipare alla conversazione.
Nessuna milestone
Nessuna assegnatario
1 Partecipanti
Notifiche
Data di scadenza
La data di scadenza non è valida o fuori intervallo. Si prega di utilizzare il formato 'aaaa-mm-dd'.

Nessuna data di scadenza impostata.

Dipendenze

Nessuna dipendenza impostata.

Riferimento: Business/AccountHub#15
Caricamento…
Non ci sono ancora contenuti.