Skip to content

Clean pending 2FA authentication on password reset - #13869

Merged
rullzer merged 1 commit into
masterfrom
enh/clean_pending_2fa_session_on_password_change
Jan 29, 2019
Merged

Clean pending 2FA authentication on password reset#13869
rullzer merged 1 commit into
masterfrom
enh/clean_pending_2fa_session_on_password_change

Conversation

@rullzer

Copy link
Copy Markdown
Member

When a password is reste we should make sure that all users are properly
logged in. Pending states should be cleared. For example a session where
the 2FA code is not entered yet should be cleared.

The token is now removed so the session will be killed the next time
this is checked (within 5 minutes).

Signed-off-by: Roeland Jago Douma roeland@famdouma.nl

@rullzerrullzer added enhancement 3. to review Waiting for reviews labels Jan 28, 2019
@rullzerrullzer added this to the Nextcloud 16 milestone Jan 28, 2019

@ChristophWurstChristophWurst left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Makes sense!

@blizzzblizzz left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

makes sense

@rullzer

Copy link
Copy Markdown
MemberAuthor

/backport to stable15

@rullzer

Copy link
Copy Markdown
MemberAuthor

/backport to stable14

@rullzer

Copy link
Copy Markdown
MemberAuthor

/backport to stable13

@MorrisJobkeMorrisJobke added 4. to release Ready to be released and/or waiting for tests to finish and removed 3. to review Waiting for reviews labels Jan 28, 2019
@MorrisJobke

Copy link
Copy Markdown
Member

Quite some CI failures in the LostController

@MorrisJobkeMorrisJobke added 2. developing Work in progress and removed 4. to release Ready to be released and/or waiting for tests to finish labels Jan 28, 2019
@rullzer
rullzerforce-pushed the enh/clean_pending_2fa_session_on_password_change branch from 2e77a05 to a4648c6CompareJanuary 29, 2019 10:04
When a password is reste we should make sure that all users are properly
logged in. Pending states should be cleared. For example a session where
the 2FA code is not entered yet should be cleared.
The token is now removed so the session will be killed the next time
this is checked (within 5 minutes).
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
@rullzer
rullzerforce-pushed the enh/clean_pending_2fa_session_on_password_change branch from a4648c6 to ac8a6e2CompareJanuary 29, 2019 12:09
@rullzerrullzer added 4. to release Ready to be released and/or waiting for tests to finish and removed 2. developing Work in progress labels Jan 29, 2019
@rullzer
rullzer merged commit deb7d23 into masterJan 29, 2019
@rullzer
rullzer deleted the enh/clean_pending_2fa_session_on_password_change branch January 29, 2019 18:50
@backportbot-nextcloud

Copy link
Copy Markdown

The backport to stable15 failed. Please do this backport manually.

@backportbot-nextcloud

Copy link
Copy Markdown

The backport to stable14 failed. Please do this backport manually.

@backportbot-nextcloud

Copy link
Copy Markdown

The backport to stable13 failed. Please do this backport manually.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4. to releaseReady to be released and/or waiting for tests to finishenhancement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@rullzer@MorrisJobke@ChristophWurst@blizzz