search

nhost / hasura-auth

Authentication for Hasura.
https://nhost.io
MIT License
373 stars 111 forks source link

feat: added AUTH_REQUIRE_ELEVATED_CLAIM to require elevated permissions for certain actions #462

Closed dbarrosop closed 5 months ago

dbarrosop commented 5 months ago

Adds an option to require elevated permissions to perform certain actions: create PATs, change email and/or password, enable/disable MFA and add security keys.

If the option is set to recommended the claim check is only performed if the user has a security key attached. If it is set to required the only action that won't require the claim is setting a security key for the first time.

changeset-bot[bot] commented 5 months ago

🦋 Changeset detected

Latest commit: c99d24b5fe224f4813663373ed4d777277c594ff

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package | Name | Type | | ----------- | ----- | | hasura-auth | Minor |

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR