Skip to content
This repository was archived by the owner on Mar 15, 2018. It is now read-only.

WIP: Multi-Token-Challenge: 2FA #33

Open
wants to merge 26 commits into
base: master
Choose a base branch
from
Open

WIP: Multi-Token-Challenge: 2FA #33

wants to merge 26 commits into from

Conversation

pozylon
Copy link
Contributor

@pozylon pozylon commented Jan 30, 2018

  • Refactor the auth module to allow for token challenge type abstraction
  • DB: Entangle sessions from tokens
  • Add TOTP Challenge Type
  • Adjust the GraphQL API to allow multiple token challenge validation for 2FA
  • DB: Add Flag and Secret to User for 2FA
  • Add GraphQL Operations to manage 2FA activation (store shared secret, toggle 2fa login, ...)
  • Add token expiration logic & extend the error reporting so a UI can behave differently on "token expired", "2fa required", "token not found", "token burned" errors.
  • Tests

…er email address

affects: @orbiting/backend-modules-mail
affects: @orbiting/backend-modules-auth, @orbiting/backend-modules-mail
affects: @orbiting/backend-modules-auth
affects: @orbiting/backend-modules-auth, @orbiting/backend-modules-mail
affects: @orbiting/backend-modules-auth, @orbiting/backend-modules-base
affects: @orbiting/backend-modules-auth, @orbiting/backend-modules-base,
@orbiting/backend-modules-mail

BREAKING CHANGE:
mail, auth, base
* master: (30 commits)
  chore(release): releasing component
  fix(assets): remove unnecessary await
  chore(release): releasing component
  feat(assets): buffer instead of stream for content-length
  chore(release): releasing component
  fix(base): clear cf cookie
  chore(release): releasing component
  fix(documents): webp cap. check
  chore(release): releasing component
  chore(release): releasing component
  chore(release): releasing component
  feat(assets): repo.uploadImages: transfers images from github to AWS S3
  feat(documents): add webp suffix to image urls in Document resolvers
  feat(assets): add lib webp url suffixer
  fix(documents): devide processRepoImageUrls in processRepoImageUrlsInContent and -InMeta
  feat(documents): add lib processImageUrls (migrate from publikator-backend)
  feat(assets): add size=WxH to portraitUrl in uploadPortrait
  feat(assets): upload lib, cleanup convertImage
  chore(assets): readme
  fix(assets): readme
  ...
@pozylon
Copy link
Contributor Author

pozylon commented Jan 30, 2018

This is going to be a massive change

* fix-session-clear:
  fix(auth): fix clearSession
* move-interests:
  fix(auth): fix updateUserEmail
  fix(auth): use the new moveNewsletterSubscriptions from mail
  Revert "fix(auth): remove changeEmail, belongs to republik-backend"
  feat(mail): adds method to move newsletter settings from one to another email address
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant