View Issue Detail

ID	Project	Category	Submitted / Last Updated
00089	UserSpice	Security Code	2018-04-08 20:07:12 / 2018-04-25 13:25:46
Reported	Brandin Arsenault	Assigned To	Unassigned
Priority	low	Reported	4.3.18
Status	closed	Resolution Version and Commit
Summary	If Two FA Enabled and current Fingerprint Destroyed or does not exist, sign out/re-request twofa
Description	<p>This requires the user to reauthenticate since the user may have expired the fingerprint. We also want to make sure this doesn't impact manage2fa.php because if they destroy them, they will instantly get redirected and miss and success messages. We should probably put a "current session" warning and maybe not allow destroy for this one?</p>

November 2021

I've added the HTML attribute to remove this but haven't actually done any restrictions in us_helpers expireFingerprints function yet.
November 2021

We've created logic around fingerprinting for all areas with session tracking, we should tie these together.
November 2021

No longer an issue with session killing.