Skip to content

Add reset MFA button for admin s on user profile edit#6056

Open
clauvaldez wants to merge 1 commit intoBookStackApp:developmentfrom
clauvaldez:mfaReset
Open

Add reset MFA button for admin s on user profile edit#6056
clauvaldez wants to merge 1 commit intoBookStackApp:developmentfrom
clauvaldez:mfaReset

Conversation

@clauvaldez
Copy link

Summary

This pull request adds a Reset MFA button to the user profile edit page, allowing administrators to easily reset a user's multi-factor authentication configuration.

Motivation

If a user loses access to their MFA device or is unable to complete the authentication process, administrators currently have no quick way to reset MFA from the interface. This feature provides a simple and controlled way for admins to resolve such situations.

Changes

  • Added a Reset MFA button in the user profile edit view.
  • Implemented a controller method to handle MFA reset for the selected user.
  • Restricted the action to users with the appropriate UsersManage permission.
  • The reset operation removes the user's stored MFA values, forcing them to reconfigure MFA on next login.

Security

Only administrators with the UsersManage permission can perform this action.

Result

Administrators can quickly reset MFA for users who are locked out due to lost or misconfigured authentication devices, improving support and account recovery workflows.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant