Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow certain MFA methods to make a session privileged #2284

Closed
4 of 6 tasks
aeneasr opened this issue Mar 3, 2022 · 0 comments
Closed
4 of 6 tasks

Allow certain MFA methods to make a session privileged #2284

aeneasr opened this issue Mar 3, 2022 · 0 comments
Labels
feat New feature or request.

Comments

@aeneasr
Copy link
Member

aeneasr commented Mar 3, 2022

Preflight checklist

Describe your problem

Currently, confirming privileged actions such as updating ones email requires a privileged session. Currently, only first factor authentication methods can be used to make the session privileged.

Describe your ideal solution

We would like some MFA methods to also be used to do this, for example hardware security keys. This would be similar to GitHub:

Screenshot 2022-03-03 at 22 06 15

Workarounds or alternatives

Not applicable

Version

master

Additional Context

No response
@aeneasr aeneasr added the feat New feature or request. label Mar 3, 2022
aeneasr added a commit that referenced this issue Mar 5, 2022
@aeneasr
feat(webauthn): implement refresh using webauth
00e95f4 
This change introduces the ability to refresh a session (for example when entering "sudo" mode") using WebAuthn credentials. In this case, it does not matter whether the WebAuthN credentials are for MFA or passwordless flows.

Closes #2284
aeneasr added a commit that referenced this issue Mar 6, 2022
@aeneasr
feat(webauthn): implement refresh using webauth
ea96096 
This change introduces the ability to refresh a session (for example when entering "sudo" mode") using WebAuthn credentials. In this case, it does not matter whether the WebAuthN credentials are for MFA or passwordless flows.

Closes #2284
aeneasr added a commit that referenced this issue Mar 6, 2022
@aeneasr
feat(webauthn): implement refresh using webauth
57f9c9f 
This change introduces the ability to refresh a session (for example when entering "sudo" mode") using WebAuthn credentials. In this case, it does not matter whether the WebAuthN credentials are for MFA or passwordless flows.

Closes #2284
@aeneasr aeneasr closed this as completed in bf10868 Mar 7, 2022
peturgeorgievv pushed a commit to senteca/kratos-fork that referenced this issue Jun 30, 2023
@aeneasr
feat(webauthn): implement refresh using webauth
4f5f197 
This change introduces the ability to refresh a session (for example when entering "sudo" mode") using WebAuthn credentials. In this case, it does not matter whether the WebAuthN credentials are for MFA or passwordless flows.

Closes ory#2284
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feat New feature or request.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@aeneasr