OpenConext / OpenConext/Stepup-RA
RA can't see recovery methods
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 2
- Forks
- 2
- Avg merge
- 8d 23h
- Merged PRs (30d)
- 3
Description
This issue is imported from pivotal - Originaly created at Apr 13, 2023 by Peter Havekes
An user with the (S)RAA role can view the recoverytokens in the RA portal, an user with the RA sees no recovery methods
Search issue fixed in: https://github.com/OpenConext/Stepup-Middleware/commit/4307a5b75871cef0a88d9da8a6d85bc3711e0d17
Edit Michiel 18-4-2023 08:30
In addition to reading the RT as a RA. The RA was also not allowed to revoke a RA token. That was also fixed in this Story
Revoke issue fixed in: https://github.com/OpenConext/Stepup-Middleware/commit/5eb3493bc16649c2ce48d54f6d13f63ff494f1ac
Release target
5.0.10-test4
https://github.com/OpenConext/Stepup-Middleware/releases/tag/5.0.10-test4
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the two linked Stepup-Middleware commits, 4307a5b and 5eb3493, which the issue identifies as fixing recovery-token access and revocation for RA users. Check the 5.0.10-test4 release and related middleware behavior to confirm both fixes are already included; no further work is described here.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authorization
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 15/100