search

QuITAC / authentik

Docker compose files and Config for Authentik
0 stars 0 forks source link

Fix MFA bypass via password reset #16

Closed mikitsu closed 3 months ago

mikitsu commented 3 months ago

done by adding MFA stage to recovery flow

mikitsu commented 3 months ago

the stage is after the email verification to avoid user enumeration