Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Require SMS recovery token authentication #290

Merged
merged 1 commit into from
Jun 2, 2023

Commits on May 25, 2023

  1. Require SMS recovery token authentication

    When recovering a SF token using your recovery token, the SMS option did
    not require an SMS authentication. That was fixed in this PR
    
    During registration, the SMS auth step is not required as you just
    registered the SMS recovery token in that case. And that is enough proof
    of possession at that point. But during recovery of a SF token, you are
    required to prove possession of your recovery token.
    
    For the safe-store RT that would already work.
    
    See: https://www.pivotaltracker.com/story/show/185099092
    MKodde committed May 25, 2023
    Configuration menu
    Copy the full SHA
    76548f0 View commit details
    Browse the repository at this point in the history