Project

General

Profile

Actions

Improvement #2475

closed

Adds further text to reset button of webdav digest

Added by liaham 6 months ago. Updated 6 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Start date:
09/28/2024
Due date:
10/03/2024
% Done:

100%

Estimated time:
Compatible Redmine Version:
5.1.z

Description

When a user has 2FA enabled the WebDAV digest won't be created on sign in.

The reason is in RedmineDmsf::Hooks::Controllers::AccountControllerHooks#controller_account_success_authentication_after where the digest will be created only if the controller parameter password is present. This works for a user authentication with login name and password. A user with 2fa enabled runs differently through the authentication process and crosses the hook not before the 2fa token was checked. Hence, there won't be a password parameter anymore.

Instead of manipulating controller params to provide the password I suggest only a slight change in the users preferences box on my account page:

When the user has 2FA enabled and no token is found the link should not show reset but add. This would make it more explicit that the token is not expected to exist and can be created if missing.

Actions

Also available in: Atom PDF