Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🛂 Add alternative authentication method #131

Open
tjarbo opened this issue May 18, 2021 · 0 comments
Open

🛂 Add alternative authentication method #131

tjarbo opened this issue May 18, 2021 · 0 comments
Labels
✨ new feature New feature
Projects
Milestone

Comments

@tjarbo
Copy link
Owner

tjarbo commented May 18, 2021

⚠️ This user story is a draft and will be implemented only if it becomes really necessary. So give it a +1 if u need this!

As a User
I want to use the registration token for a onetime login
because I cannot use WebAuthn (Buy a freaking security stick, NOW!)

Description:

Maybe in a far away universe there will be the case when a user does not have the possibility to use WebAuthn. In this situation, the user should be able to use the registration token as a "one-time login token", to get access to the web interface without registration.

As this is not the primary authentication method, the access is a bit hidden. The idea is, to hove the registration button for more than 7 seconds, the switch to the

🟢 In scope:

  • Add new a endpoint
  • Delete reg token after the jwt has been generated
  • Update Frontend according to the description
  • Update documentation api and wiki

🔴 Not in scope:

  • replace webauthn

What should be the result?

GIVEN a user has a reg token
WHEN the user decided to use one-time login
THEN to reg token will become invalid and the user receives a normal jwt

GIVEN a user has a reg token
WHEN' the user hovers the reg button for more than 7 sec
THEN the button will changes its text to e.g "Use one-time login"

@tjarbo tjarbo added the ✨ new feature New feature label May 18, 2021
@tjarbo tjarbo added this to the Version 3.0 milestone May 18, 2021
@tjarbo tjarbo added this to To do in Version 3.0 via automation May 18, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
✨ new feature New feature
Projects
Development

No branches or pull requests

1 participant