Matomo wants to verify my password, but I have none

dominik-th / matomo-plugin-LoginOIDC

external authentication services for matomo

https://plugins.matomo.org/LoginOIDC/

GNU General Public License v3.0

40 stars 29 forks source link

Matomo wants to verify my password, but I have none #20

Closed nogweii closed 3 years ago

nogweii commented 4 years ago

Various system administration tasks are set to require the user's password to have been verified recently. (All done via Piwik\Plugins\Login\PasswordVerifier)

Would it make sense to forcefully set $sessionNamespace->lastPasswordAuth on some ongoing basis? (Every page load, maybe?) Or can the plugin override the verification template and have it check that the user's session is still valid according to the upstream OIDC server?

dominik-th commented 3 years ago

In version 4.0.0 you have an extra button to do the authentication reverification via the plugin:

MagnoBooter commented 3 years ago

There is no such button on password verification required for setting superuser accces: Selection_389