Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

  •  
     
    story #14024 be able to recover my account when I have lost my TOTP device
Actions
Summary
user
be able to recover my account when I have lost my TOTP device
I can recover access to my account when I have lost my TOTP device.
When the user enroll itself, the possibility is given to download 10 recovery codes.

* A recovery code can be used instead of a TOTP code during the login process
* Each recovery code can be used only once
* There is a view in the account preferences to see how many recovery codes can still be used
* The recovery codes are stored in a way that make impossible to retrieve them (see the mechanism used for the personal access keys)
* The user can ask to generate new recovery codes








Open question: what to do when a user uses the last valid recovery code?
Empty
Empty
Status
Empty
Ready (stalled)
Development
  • [ ] Does it involves User Interface? 
  • [ ] Are there any mockups?
  • [ ] Are permissions checked?
  • [ ] Does it need Javascript development?
  • [ ] Does it need a forge upgrade bucket?
  • [ ] Does it need to execute things in system events?
  • [ ] Does it impact project creation (templates)?
  • [ ] Is it exploratory?
Empty
Details
#14024
Thomas Gerbet (tgerbet)
2019-10-18 17:54
2019-10-15 11:52
11991

References
Artifact links
Empty
Referencing story #14024

Artifact Tracker v5

epic #11648 Multi-Factor Authentication