[
https://issues.apache.org/jira/browse/SYNCOPE-1887?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17955160#comment-17955160
]
ASF subversion and git services commented on SYNCOPE-1887:
----------------------------------------------------------
Commit 8f262b65ee1e6400f94f8784a33bcf06529dc756 in syncope's branch
refs/heads/master from Francesco Chicchiriccò
[ https://gitbox.apache.org/repos/asf?p=syncope.git;h=8f262b65ee ]
[SYNCOPE-1887] Require re-auth for sensitive features (#1097)
> Enduser: require re-authentication for sensitive features
> ---------------------------------------------------------
>
> Key: SYNCOPE-1887
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1887
> Project: Syncope
> Issue Type: Improvement
> Components: enduser
> Reporter: Francesco Chicchiriccò
> Assignee: Francesco Chicchiriccò
> Priority: Major
> Fix For: 4.1.0, 4.0.1
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Following [the
> suggestions|https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html#require-re-authentication-for-sensitive-features]
> of the OWASP Authentication Cheat Sheet, allow to configure Enduser to
> re-verify the user credentials before completing the following operations:
> * password change
> * profile update
> * MFA device or account removal
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
