Require password to delete WebAuthn device

Eduardo Sanz Garcíarequested to merge
eduardosanz/disable-webauthn-devices-modal-2 into master

What does this MR do and why?

Require a valid password to delete a registered WebAuthn device.

Associated with Allow disabling the TOTP authenticator without... (#393419 - closed)

Changelog: changed

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Before After
image image

How to set up and validate locally

  1. Go to /-/profile/two_factor_auth
  2. Enable a WebAuthn device
  3. Disable it
Edited by Hannah Sutor

Merge request reports