Branch: refs/heads/master
Home: https://github.com/postfixadmin/postfixadmin
Commit: d92137719d9f489cc5fd8c26d0760a715898ac21
https://github.com/postfixadmin/postfixadmin/commit/d92137719d9f489cc5fd8c26d0760a715898ac21
Author: Rodrigo Cortés Cano <384...@us...>
Date: 2026-09-02 (Wed, 02 Sep 2026)
Changed paths:
M public/users/totp.php
M tests/TotpPfTest.php
Log Message:
-----------
Require reauthentication for TOTP removal (#1129)
- require a completed user or admin role before opening TOTP management
- remove TOTP through the existing password-verifying change path
- keep configured post-change hooks active when a secret is removed
- add regression coverage proving an invalid password cannot remove the stored secret
This is the first focused change for #1128.
thanks @TrapoSAMA
To unsubscribe from these emails, change your notification settings at https://github.com/postfixadmin/postfixadmin/settings/notifications
|