Skip to content
This repository has been archived by the owner on Jul 30, 2024. It is now read-only.

Enable token authentication for change_password() #479

Closed
wants to merge 2 commits into from
Closed

Enable token authentication for change_password() #479

wants to merge 2 commits into from

Conversation

tomazberisa
Copy link

Two changes:

  1. Enable changing password by providing token
  2. Provide new token in response to successful password change

Previously, only @login_required was used, therefore token authentication could not be used to change the user password.
This enables updating saved token upon changing password without having to (log out and) log in again in order to get new auth token.
@jirikuncar
Copy link
Contributor

moved to #785

@jirikuncar jirikuncar closed this Jul 1, 2018
jasco pushed a commit to jasco/flask-security that referenced this pull request Oct 3, 2023
These are single-use codes that a user can generate, download and store safely.

A new feature flag SECURITY_MULTI_FACTOR_RECOVERY_CODES enables this feature and causes the various views/forms to be registered.

The old two-factor rescue endpoint has been updated to present this option if available.
A new configuration option SECURITY_TWO_FACTOR_RESCUE_EMAIL (default True) allows the application to NOT allow a recovery code to be sent to the users email (this could be considered a security issue).

closes pallets-eco#479
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants