Max Depth:

Bug 30592 depends on 8 bugs:

view as bug list

•    30592: Move borrowers.secret to a new generic credentials table [NEW; assigned to tomascohen]
  •    28998: Encrypt borrowers.secret [CLOSED FIXED; assigned to jonathan.druart]
    •    29894: 2FA: Add few validations, clear secret, send register notice [CLOSED FIXED; assigned to m.de.rooy]
      •    29873: 2FA: Generate QR code without exposing secret via HTTP GET [CLOSED FIXED; assigned to m.de.rooy]
        •    28786: Two-factor authentication for staff client - TOTP [CLOSED FIXED; assigned to jonathan.druart]
          •    28785: Code in C4::Auth::checkauth is copy pasted [CLOSED FIXED; assigned to jonathan.druart]
          •    29915: Anonymous session generates 1 new session ID per hit [CLOSED FIXED; assigned to jonathan.druart]
            •    29914: check_cookie_auth not strict enough [Pushed to oldoldoldstable; assigned to jonathan.druart]
          •    29957: Cookies not removed after logout [CLOSED FIXED; assigned to m.de.rooy]
            •    29914: check_cookie_auth not strict enough [Pushed to oldoldoldstable; assigned to jonathan.druart] (*)

Bug 30592 does not block any bugs.

Max Depth:

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    [x]
  • | Forgot Password
    Login: [x]