Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NEW Log out all devices for members with no admin access #56

Closed

Conversation

emteknetnz
Copy link
Member

@emteknetnz emteknetnz commented Apr 9, 2021

Issue #58

@emteknetnz emteknetnz mentioned this pull request Apr 9, 2021
6 tasks
@emteknetnz emteknetnz marked this pull request as draft April 9, 2021 02:08
@emteknetnz emteknetnz force-pushed the pulls/1/revoke-single branch 2 times, most recently from d13d81d to 8d88367 Compare April 12, 2021 04:17
@emteknetnz emteknetnz changed the title FIX Do not logout all devices on revoke if logout_across_devices is true NEW Log out all devices for members with no admin access Apr 12, 2021
* @param Member $member
* @return bool
*/
private function hasAdminAccess(Member $member): bool
Copy link
Member Author

@emteknetnz emteknetnz Apr 12, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This function was copy pasted from https://github.com/silverstripe/silverstripe-mfa/blob/4/src/Service/EnforcementManager.php#L221

It's a little odd, though it works

It's a private function so easy to remove in the future if we add a function like this to core

@emteknetnz emteknetnz marked this pull request as ready for review April 12, 2021 04:21
@emteknetnz emteknetnz force-pushed the pulls/1/revoke-single branch from 8d88367 to 07a90af Compare April 12, 2021 05:22
@emteknetnz emteknetnz force-pushed the pulls/1/revoke-single branch from 07a90af to 1535bc2 Compare April 12, 2021 05:40
Copy link

@maxime-rainville maxime-rainville left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not clear to me that we should cater to users who do not have access to the CMS.

Most sites who allow users to register have very specific workflows in mind and will spent quite a bit of time thinking those through. If devs want to give allow users to log out from all devices, they can implement that feature in their front end.

In any case, this seems to be a completely different problem than what was initially raised in #46.

@emteknetnz
Copy link
Member Author

Yeah agree it's pretty different and since it's adding new functionality so should probably split

Makes more sense to have team discussion on the parent issue rather than this pull-request - would you be able to move your comments to there?

@emteknetnz emteknetnz mentioned this pull request Apr 13, 2021
1 task
@emteknetnz
Copy link
Member Author

emteknetnz commented Apr 13, 2021

I've split the parent issue to a new issue #58

@emteknetnz
Copy link
Member Author

Closing this PR for now as it's very unlikely to be merged. It can be reopened if there's a case for including it.

@emteknetnz emteknetnz closed this Apr 21, 2021
@maxime-rainville maxime-rainville deleted the pulls/1/revoke-single branch April 22, 2021 05:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants