Support device authentication when changing password
Open
- Dominant language
- Go
- Stars
- 308
- Forks
- 41
- Avg merge
- 2d 4h
- Merged PRs (30d)
- 58
Description
When a user executes `passwd` to change their password, the broker only allows local password authentication. We should also allow device authentication.
Refs: https://github.com/ubuntu/authd/issues/824#issuecomment-2706143808
Contributor guide
Research direction
Start by tracing how passwd requests reach the broker and where authentication methods are selected. Read the linked discussion for the intended device-authentication behavior, then verify that password changes accept device authentication as well as local password authentication.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100