Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Recovery: No way to actually reset a password or passkey #3

Open
claudiodekker opened this issue Dec 11, 2022 · 0 comments · May be fixed by #62
Open

Recovery: No way to actually reset a password or passkey #3

claudiodekker opened this issue Dec 11, 2022 · 0 comments · May be fixed by #62
Labels
bug Something isn't working enhancement New feature or request
Milestone

Comments

@claudiodekker
Copy link
Owner

Due to an oversight, it's currently only possible to use recovery codes / account reset links to regain access to the account, but it not to reset your credentials once authenticated (as changing your password at that point requires your current password to be provided)

To solve this, I'll change the way account recovery works. Instead of directly authenticating the user and sending them to the account settings page, I will make it so that the user enters a "confirmed recovery state" (similar to the 2FA challenges) where the user can then (depending on the account type) either register a new passkey, or choose a new password.

Once a new credential has been registered and the recovery mode cleared, the user will be returned to the login page.

@claudiodekker claudiodekker added this to the 1.0.0 milestone Dec 11, 2022
@claudiodekker claudiodekker added the enhancement New feature or request label Dec 11, 2022
@claudiodekker claudiodekker moved this to Todo in Laravel Auth Dec 11, 2022
@claudiodekker claudiodekker added the bug Something isn't working label Dec 11, 2022
@claudiodekker claudiodekker moved this from Todo to In Progress in Laravel Auth Aug 5, 2023
@claudiodekker claudiodekker linked a pull request Aug 5, 2023 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working enhancement New feature or request
Projects
Status: In Progress
Development

Successfully merging a pull request may close this issue.

1 participant