canonical / canonical/authd

Support device authentication when changing password

Open
#850 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
308
Forks
41
Avg merge
2d 4h
Merged PRs (30d)
58

Description

When a user executes `passwd` to change their password, the broker only allows local password authentication. We should also allow device authentication.

Refs: https://github.com/ubuntu/authd/issues/824#issuecomment-2706143808

Contributor guide

Open the contributing guide

Research direction

Start by tracing how passwd requests reach the broker and where authentication methods are selected. Read the linked discussion for the intended device-authentication behavior, then verify that password changes accept device authentication as well as local password authentication.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.