[General] Data and account security
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 25/100
- Issue 类型
- 功能
- 描述清晰度
- 基本清楚
- 活跃度
- 活跃
- 技术栈
- typescript
调研方向
This spans backend/src/modules/auth/, backend/src/modules/organization/, and frontend/src/pages/. Before starting, resolve with the client what email-based 2FA means for magic-link login and update the issue; it is blocked by #514. Then review the prototype and acceptance criteria; done means the listed security, account deletion, backup, and change-history requirements are met.
由索引模型根据 Issue 内容生成。
描述
Context
Account security:
- 2FA by email, on by default (not optional);
- change email address.
VIC 2.0 login is magic link + social login only (no passwords), so there is no "change password" option. Open question: with magic link login, confirm what 2FA means in practice (e.g. second factor only for admins, or on sensitive actions).
Data:
- full backup;
- change history.
Danger zone:
- delete the NGO account: permanently deletes the organization and all its data. This is a single, irreversible action; there is no separate "delete history" option.
Not needed here: exporting volunteer data, since the Volunteers section already has it.
Design
Prototype: https://perch-pic-08148752.figma.site/ → Setări > Date și securitate. The prototype is indicative; this issue's text wins where they differ.
Acceptance criteria
- 2FA by email is on for all NGO accounts and cannot be turned off.
- Admin can change their email after confirming the new address.
- Deleting the NGO account deletes the organization and all its data after a typed confirmation; VIC team is notified.
- Full backup and change history are available to the admin.
Dependencies
Phase 2. Blocked by #514.
Where to look
backend/src/modules/auth/backend/src/modules/organization/frontend/src/pages/
Before starting
Resolve the open question above with the client and update this issue first.
- 主要语言
- TypeScript
- 星标
- 3
- 派生
- 2
- 平均合并
- 18 分钟
- 30 天内合并 PR
- 118
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
code4romania/vic 的其他 Issue
-
难度 2/5 1-3 小时 新手友好度 68/100
code4romania/vic#638 ·
维护者通常 1 天内回复
-
难度 4/5 1-2 天 新手友好度 52/100
code4romania/vic#639 ·
维护者通常 1 天内回复
-
难度 4/5 3-5 天 新手友好度 45/100
code4romania/vic#637 ·
维护者通常 1 天内回复
-
needs-info vic-2.0
难度 4/5 半天 新手友好度 25/100
code4romania/vic#563 ·
维护者通常 1 天内回复
-
agent-ready devops enhancement :rocket: mobile-app vic-2.0
难度 4/5 3-5 天 新手友好度 15/100
code4romania/vic#513 ·
维护者通常 1 天内回复
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 72/100
nikoheikkila/nikoheikkila.fi#1131 ·
维护者通常 1 天内回复
-
Resources: Update work of urumqi可能已有人在做 关联的 PR 仍在进行中或已合并。 未关闭
难度 2/5 1-3 小时 新手友好度 65/100
railmapgen/rmp-gallery#4176 ·
维护者通常 2 天内回复
-
GraphQL custom headers duplicate differently cased default headers可能已有人在做 @yxr-2025 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 70/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 76/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 65/100
github/forgoodfirstissue#574 ·