Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

2.1-BETA.1 : 2FA impossible - Utilisation d'une API externe depréciée #303

Open
yblatti opened this issue May 7, 2024 · 1 comment
Open

2.1-BETA.1 : 2FA impossible - Utilisation d'une API externe depréciée #303

yblatti opened this issue May 7, 2024 · 1 comment
Labels
bug Something isn't working
Milestone
v2.1

Comments

@yblatti
Copy link
Contributor

yblatti commented May 7, 2024

La BETA.1 d'Extract utilise une API google pour générer le QR code pour l'activation du 2FA/MFA.

Deux problèmes :

  • L'API utilise a été dépréciée en 2012, abandonnée en 2015, et décommissionnée en 2024. Il n'est plus possible de démarrer l'enregistrement 2FA sur Extract. https://developers.google.com/chart/image?hl=fr
  • La génération du QR code ne devrait jamais utiliser un service tiers, car le QR code contient le secret.

Solution : utiliser une lib de génération de QR code (Server side ou client side à choix)
@yblatti yblatti added the bug Something isn't working label May 7, 2024
@yblatti
Copy link
Contributor Author

yblatti commented May 8, 2024

Remonté pour correction : ticket interne FS#23418

arxit-ygr added a commit to arxit-ygr/extract that referenced this issue May 16, 2024
@arxit-ygr
asit-asso#303 - Géneration du QR code sans passer par l'API Image Charts
04a96d5
yblatti pushed a commit that referenced this issue May 16, 2024
@arxit-ygr @yblatti
#303 - Géneration du QR code sans passer par l'API Image Charts
ffb5ce8
@yblatti yblatti added this to the v2.1 milestone May 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
v2.1
Development

No branches or pull requests
1 participant
@yblatti