Max Depth:

Bug 28998 depends on 7 bugs:

view as bug list

•    28998: Encrypt borrowers.secret [CLOSED FIXED; assigned to jonathan.druart]
  •    29894: 2FA: Add few validations, clear secret, send register notice [CLOSED FIXED; assigned to m.de.rooy]
    •    29873: 2FA: Generate QR code without exposing secret via HTTP GET [CLOSED FIXED; assigned to m.de.rooy]
      •    28786: Two-factor authentication for staff client - TOTP [CLOSED FIXED; assigned to jonathan.druart]
        •    28785: Code in C4::Auth::checkauth is copy pasted [CLOSED FIXED; assigned to jonathan.druart]
        •    29915: Anonymous session generates 1 new session ID per hit [CLOSED FIXED; assigned to jonathan.druart]
          •    29914: check_cookie_auth not strict enough [Pushed to oldoldoldstable; assigned to jonathan.druart]
        •    29957: Cookies not removed after logout [CLOSED FIXED; assigned to m.de.rooy]
          •    29914: check_cookie_auth not strict enough [Pushed to oldoldoldstable; assigned to jonathan.druart] (*)

Bug 28998 blocks 5 bugs:

view as bug list

•    28998: Encrypt borrowers.secret [CLOSED FIXED; assigned to jonathan.druart]
  •    30592: Move borrowers.secret to a new generic credentials table [NEW; assigned to tomascohen]
  •    30594: Package Crypt::CBC 2.35 or higher to increase security [In Discussion; assigned to koha-bugs]
  •    30649: Vendor EDI account passwords should be encrypted in the database [RESOLVED FIXED; assigned to kyle]
    •    34033: DB update problems from bug 30649 [RESOLVED FIXED; assigned to nick]
  •    33934: 'No encryption_key in koha-conf.xml' needs more detail [CLOSED FIXED; assigned to jonathan.druart]

Max Depth:

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    [x]
  • | Forgot Password
    Login: [x]