Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SD-375] bypass tfa during pass reset use prlp #532

Open
wants to merge 4 commits into
base: develop
Choose a base branch
from

Conversation

MdNadimHossain
Copy link
Contributor

Jira

https://digital-vic.atlassian.net/browse/SD-375
https://digital-vic.atlassian.net/browse/SD-421

Problem/Motivation

The password reset workflow in our SDP projects, managed by the PRLP module, is being deprioritized due to a route subscriber defined in the TFA module. This conflict is disrupting the current password reset process for SDP projects.

Fix

  1. Override the TFA method and introduce a new route subscriber so that the password reset workflow is correctly handled by the PRLP module.
  2. If the PRLP module is not enabled, fall back to the default password reset functionality provided by the TFA module.
  3. By default, disable TFA for users with the previewer and secure_file_user roles.

Related PRs

Screenshots

TODO

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant