Max Depth:

Bug 29894 depends on 6 bugs:

view as bug list

•    29894: 2FA: Add few validations, clear secret, send register notice [CLOSED FIXED; assigned to m.de.rooy]
  •    29873: 2FA: Generate QR code without exposing secret via HTTP GET [CLOSED FIXED; assigned to m.de.rooy]
    •    28786: Two-factor authentication for staff client - TOTP [CLOSED FIXED; assigned to jonathan.druart]
      •    28785: Code in C4::Auth::checkauth is copy pasted [CLOSED FIXED; assigned to jonathan.druart]
      •    29915: Anonymous session generates 1 new session ID per hit [CLOSED FIXED; assigned to jonathan.druart]
        •    29914: check_cookie_auth not strict enough [Pushed to oldoldoldstable; assigned to jonathan.druart]
      •    29957: Cookies not removed after logout [CLOSED FIXED; assigned to m.de.rooy]
        •    29914: check_cookie_auth not strict enough [Pushed to oldoldoldstable; assigned to jonathan.druart] (*)

Bug 29894 blocks 17 bugs:

view as bug list

•    29894: 2FA: Add few validations, clear secret, send register notice [CLOSED FIXED; assigned to m.de.rooy]
  •    20476: Two factor authentication for the staff client - omnibus [NEW; assigned to koha-bugs]
    •    29836: 2FA - provide a REST API challenge route [NEW; assigned to koha-bugs]
    •    30724: Add ability for administrator to reset a users 2FA [NEW; assigned to koha-bugs]
    •    31118: Allow to send the TOTP token by email when enabling 2FA [NEW; assigned to koha-bugs]
    •    31912: When enforcing 2FA we should alert the user [NEW; assigned to jonathan.druart]
    •    33254: 2FA - Trust current device [NEW; assigned to koha-bugs]
    •    35210: 2FA: more flexibility [NEW; assigned to koha-bugs]
    •    35601: Cannot go into Cataloging->Export when 2FA is enabled [NEW; assigned to koha-bugs]
    •    36011: 2FA authentication failure is incorrectly logged as success [NEW; assigned to koha-bugs]
    •    36564: Koha staff interface logs out on homepage refresh with 2FA enforced [NEW; assigned to koha-bugs]
    •    33253: 2FA - Form not excluded from autofill [CLOSED FIXED; assigned to katrin.fischer]
  •    28998: Encrypt borrowers.secret [CLOSED FIXED; assigned to jonathan.druart]
    •    30592: Move borrowers.secret to a new generic credentials table [NEW; assigned to tomascohen]
    •    30594: Package Crypt::CBC 2.35 or higher to increase security [In Discussion; assigned to koha-bugs]
    •    30649: Vendor EDI account passwords should be encrypted in the database [RESOLVED FIXED; assigned to kyle]
      •    34033: DB update problems from bug 30649 [RESOLVED FIXED; assigned to nick]
    •    33934: 'No encryption_key in koha-conf.xml' needs more detail [CLOSED FIXED; assigned to jonathan.druart]

Max Depth:

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    [x]
  • | Forgot Password
    Login: [x]