John Dudmesh

icon indicating an email [email protected]

icon location Normandy, France icon location 25+yr freelance developer for hire. Currently focused on Go and React but have used a huge variety of tools and technologies over the years.

Results 2 comments of John Dudmesh

No validation for totp_code when unlinking TOTP 2FA method

I'd like to understand "_Removing the TOTP code requires a privileged session though_". At the moment I can link/unlink a TOTP app at AAL1 - this isn't a privileged session...

No validation for totp_code when unlinking TOTP 2FA method

Ah, that fixed it, thanks. I wonder if it would be possible for Ory to throw an error if the user has linked a TOTP app but the AAL requirement...