Skip to content
This repository was archived by the owner on Mar 15, 2018. It is now read-only.

WIP: Multi-Token-Challenge: 2FA - #33

Open
pozylon wants to merge 26 commits into
masterfrom
totp
Open

WIP: Multi-Token-Challenge: 2FA#33
pozylon wants to merge 26 commits into
masterfrom
totp

Conversation

@pozylon

@pozylonpozylon commented Jan 30, 2018

Copy link
Copy Markdown
Contributor
  • Refactor the auth module to allow for token challenge type abstraction
  • DB: Entangle sessions from tokens
  • Add TOTP Challenge Type
  • Adjust the GraphQL API to allow multiple token challenge validation for 2FA
  • DB: Add Flag and Secret to User for 2FA
  • Add GraphQL Operations to manage 2FA activation (store shared secret, toggle 2fa login, ...)
  • Add token expiration logic & extend the error reporting so a UI can behave differently on "token expired", "2fa required", "token not found", "token burned" errors.
  • Tests

…er email address
affects: @orbiting/backend-modules-mail
affects: @orbiting/backend-modules-auth, @orbiting/backend-modules-mail
affects: @orbiting/backend-modules-auth
affects: @orbiting/backend-modules-auth, @orbiting/backend-modules-mail
affects: @orbiting/backend-modules-auth, @orbiting/backend-modules-base
affects: @orbiting/backend-modules-auth, @orbiting/backend-modules-base,
@orbiting/backend-modules-mail
BREAKING CHANGE:
mail, auth, base
* master: (30 commits)
chore(release): releasing component
fix(assets): remove unnecessary await
chore(release): releasing component
feat(assets): buffer instead of stream for content-length
chore(release): releasing component
fix(base): clear cf cookie
chore(release): releasing component
fix(documents): webp cap. check
chore(release): releasing component
chore(release): releasing component
chore(release): releasing component
feat(assets): repo.uploadImages: transfers images from github to AWS S3
feat(documents): add webp suffix to image urls in Document resolvers
feat(assets): add lib webp url suffixer
fix(documents): devide processRepoImageUrls in processRepoImageUrlsInContent and -InMeta
feat(documents): add lib processImageUrls (migrate from publikator-backend)
feat(assets): add size=WxH to portraitUrl in uploadPortrait
feat(assets): upload lib, cleanup convertImage
chore(assets): readme
fix(assets): readme
...
@pozylon

Copy link
Copy Markdown
ContributorAuthor

This is going to be a massive change

* fix-session-clear:
fix(auth): fix clearSession
* move-interests:
fix(auth): fix updateUserEmail
fix(auth): use the new moveNewsletterSubscriptions from mail
Revert "fix(auth): remove changeEmail, belongs to republik-backend"
feat(mail): adds method to move newsletter settings from one to another email address
Sign up for freeto subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@pozylon