Details
-
Improvement
-
Status: Development in progress
-
Minor
-
Resolution: Unresolved
-
Future Dev
-
None
Description
A stepping stone towards MDL-73088
The primary driver here is to make this page function as consistently as practical for admin users and non admin users, as well as improving the ease of auditing keys and revoking them.
So current state is:
- generates new keys for normal users but not admin users
- shows current services with keys but not admin users
- shows the keys for those services but not admin users
- allows revoking of keys but not admin users
Proposed state is: (changes in bold)
- generates new keys for normal users but not admin users (unchanged)
- shows current services with keys including admin users
- shows the redacted keys for those services including admin users
- allows revoking of keys including admin users
- Also show key creation date and last access date
Attachments
Issue Links
- has been marked as being related by
-
MDL-69801 Introduce a new generic private / public certificate + password / token manager api / Vault API
-
- Open
-
-
MDL-73088 Refactor /user/managetoken.php to allow all user keys to be managed and revoked
-
- Open
-
- will be (partly) resolved by
-
MDL-76656 All security tokens should be read-once
-
- Waiting for peer review
-