Skip to content

2FA basic auth notification email #13831

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 1, 2023
Merged

2FA basic auth notification email #13831

merged 3 commits into from
Jun 1, 2023

Conversation

di
Copy link
Member

@di di commented Jun 1, 2023

This updates #13830 so that the 2FA notification email on upload to still sends, with updated content.

@di di requested a review from a team as a code owner June 1, 2023 20:08
Copy link
Member

@ewdurbin ewdurbin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm iffy on breaking this out from BasicAuth policy, but for user ergonomics in the short term. Makes sense.

Approving conditionally. Let's open a PR that reestablishes enforcement via auth policy and drops the email. Merge it in a week or two?

@@ -2593,8 +2594,17 @@ def test_upload_succeeds_with_2fa_enabled(
IMetricsService: metrics,
}.get(svc)

legacy.file_upload(db_request)
with pytest.raises(BasicAuthTwoFactorEnabled) as excinfo:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

probably change name of this test now

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Eh? Is the change to test_basic_auth_upload_fails_with_2fa_enabled not sufficient?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

image

I guess weird folding in UI

@di
Copy link
Member Author

di commented Jun 1, 2023

Let's open a PR that reestablishes enforcement via auth policy and drops the email. Merge it in a week or two?

Agreed this should eventually be part of the policy, but I think that should probably happen when enforcement is global and not conditional for some users/projects.

@di di merged commit 7c6c4cf into pypi:main Jun 1, 2023
@di di deleted the 2fa-upload-email-update branch June 1, 2023 20:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants