Require password when changing 2FA config

WeblateOrg / weblate

Web based localization tool with tight version control integration.

https://weblate.org/

GNU General Public License v3.0

4.5k stars 992 forks source link

Require password when changing 2FA config #12250

Open orangesunny opened 1 month ago

orangesunny commented 1 month ago

Describe the problem

Changing 2FA configuration does not require re-entering password

Describe the solution you would like

User should know that they are setting something important and should be required to re-enter password to view/change 2FA settings.

also fix the line in the list of TOTP apps so app name is at the same line as Remove button (screenshot)

Describe alternatives you have considered

No response

Screenshots

Additional context

No response

orangesunny commented 1 month ago

showing a toast nofitication of 2FA method successfully added and 2FA method removed would be great. The reload without a notification after adding the app/security key scared me a bit.

orangesunny commented 1 month ago

The line in the screenshot is fixed already.