Add support for session traps; make mfa challenge session trap; remove DMZ middleware

2020-05-22 09:29:13 -05:00
parent 8701df1acc
commit 64356d42d0
11 changed files with 49 additions and 51 deletions
--- a/TODO.text
+++ b/TODO.text
@@ -2,6 +2,7 @@
 - Forgot password handling
    - Admin password reset mechanism -> flag users as needing PW resets
 - OAuth2 -> support refresh tokens
- Traps -> support session traps; convert MFA challenge to use session trap
+- Traps
    - Allow setting user trap from web UI
    - Don't allow external logins if trap is set
+- Trust token page -> force username of current user