fix: invalidate all user sessions when MFA is enabled - Githubissues

DefGuard / defguard

The only _real_ 2FA MFA WireGuard Enterprise VPN with build-in SSO, hardware keys management and more!

https://defguard.net

Other

1.11k stars 35 forks source link

fix: invalidate all user sessions when MFA is enabled #644

Closed t-aleksander closed 3 months ago

t-aleksander commented 3 months ago

📖 Description

The issue has been described in more detail in #643

fixes #643

🛠️ Dev Branch Merge Checklist:

Documentation

[x] If testing requires changes in the environment or deployment, please update the documentation (https://defguard.gitbook.io) first and attach the link to the documentation section in this pool request
[x] I have commented on my code, particularly in hard-to-understand areas

Testing

[x] I have prepared end-to-end tests for all new functionalities
[x] I have performed end-to-end tests manually and they work
[x] New and existing unit tests pass locally with my changes

Deployment

[ ] If deployment is affected I have made corresponding/required changes to deployment (Docker, Kubernetes, one-line install)

🏚️ Main Branch Merge Checklist:

Testing

[ ] I have merged my changes before to dev and the dev checklist is done
[ ] I have tested all functionalities on the dev instance and they work

Documentation

[ ] I have made corresponding changes to the user & admin documentation and added new features documentation with screenshots for users/admins