| ID | Product | Comp | Assignee▲ | Status▲ | Resolution | Summary | Changed | 
|---|---|---|---|---|---|---|---|
| 29914 | Koha | Architec | jonathan.druart | RESOLVED | FIXE | check_cookie_auth not strict enough | 2025-06-23 | 
| 28785 | Koha | Architec | jonathan.druart | CLOSED | FIXE | Code in C4::Auth::checkauth is copy pasted | 2022-12-12 | 
| 28786 | Koha | Authenti | jonathan.druart | CLOSED | FIXE | Two-factor authentication for staff client - TOTP | 2024-07-04 | 
| 28998 | Koha | Architec | jonathan.druart | CLOSED | FIXE | Encrypt borrowers.secret | 2024-07-04 | 
| 29915 | Koha | Authenti | jonathan.druart | CLOSED | FIXE | Anonymous session generates 1 new session ID per hit | 2023-06-17 | 
| 30649 | Koha | Architec | kyle | CLOSED | FIXE | Vendor EDI account passwords should be encrypted in the database | 2024-12-23 | 
| 29873 | Koha | Authenti | m.de.rooy | CLOSED | FIXE | 2FA: Generate QR code without exposing secret via HTTP GET | 2023-06-08 | 
| 29894 | Koha | Architec | m.de.rooy | CLOSED | FIXE | 2FA: Add few validations, clear secret, send register notice | 2022-12-12 | 
| 29957 | Koha | Architec | m.de.rooy | CLOSED | FIXE | Cookies not removed after logout | 2025-02-26 |