Improve protection of destructive operations

OpenConext / OpenConext-myconext

A (guest) IdP for OpenConext

https://eduid.nl/

5 stars 8 forks source link

Improve protection of destructive operations #580

Open phavekes opened 2 months ago

phavekes commented 2 months ago

This issue is imported from pivotal

    If a user has MFA enabled, and wants to preform a destructive operation (listed below), require an extra authentication of the highest possible level

Delete account (under account)
Delete app under data and activity Expose this as an mobile api to