Add user verification on sensitive tasks
Open
size:M
task
- Dominant language
- JavaScript
- Stars
- 400
- Forks
- 89
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 149
Description
### Description
Currently a user can delete their account without any further verification of their identity. It would be better to do a secondary confirmation of their identify to ensure this hasn't been done by a bad-actor.
GitHub has 'sudo' mode where it prompts you for your password for certain areas of the settings. I'm not proposing anything that far, but, in terms of API design here, a solution that could one day be replicated in other sensitive parts of the API would be worth considering.
### Epic/Story
_No response_
### Have you provided an initial effort estimate for this issue?
I have provided an initial effort estimate
Contributor guide
Assessment
This issue has not been assessed yet.