Skip to content

Authentication process should mark password as confirmed #23241

@pitbulk

Description

@pitbulk

There are several actions in the admin panel that require password confirmation due to security reasons.

The login process itself should be considered as an action that sets the password as confirmed. Right now, this is not the case, and we can have a bad UX when logging in to the platform, trying to execute a protected action, and we are asked to introduce the password again.

Enhancement request:

During the authentication process (authenticateAndRedirect) , call to setPasswordVerifiedCorrectly
as done at confirmPassword method

Metadata

Metadata

Assignees

No one assigned

    Labels

    EnhancementFor new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc.triaged

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions