0
Controller method annotation to be able to call a controller's method before verifying two factor challenge for 2FA
Source: nextcloud/server#29608 · opened by @RobertSecSign
Controller method annotation to be able to call a controller's method before verifying two factor challenge for 2FA: Is your feature request related to a problem? Please describe.
After logging in with with username and password, but before having verified the 2FA challenge, no API/Page controller method can be called by the page showing the 2FA challenge during TwoFactorChallengeController::showChallenge. All requests are redirected to "core.TwoFactorChallenge.selectChallenge". Meanwhile an anonymous user can call every controller method which is annotated with PublicPage.
After logging in with with username and password, but before having verified the 2FA challenge, no API/Page controller method can be called by the page showing the 2FA challenge during TwoFactorChallengeController::showChallenge. All requests are redirected to "core.TwoFactorChallenge.selectChallenge". Meanwhile an anonymous user can call every controller method which is annotated with PublicPage.
No pledges yet. Be the first to back this.
Comments
Similar requests
add function to select a primary 2FA provider/slim down 2FA dialog
3 votes · 0 comments
Add annotation to limit body size of incoming requests
0 votes · 0 comments
Issue 2FA challenge depending on the channel of access
6 votes · 0 comments
Possible to disable 2FA when 2FA is enforced
2 votes · 0 comments
Allow enforcing 2FA only if current admin has 2FA enabled
1 vote · 0 comments
No comments yet.