Enable 2FA
In October 2017, npm officially announced support for two-factor authentication (2FA) for developers using the npm registry t...
For further actions, you may consider blocking this person and/or reporting abuse
Isn't it authentication? Not authorization? The user is permitted to do such actions, like changing their profile. BUT they need to authenticate themselves first. Just wondering because 2FA is Two Factor Authentication. And there is Authentication apps, like Google Authenticator. You're using authentication to authorize an action?
Sometimes I have troubles with authentication and authorization, not because the words are very similar but they kinda hold each other's hands.
Thanks Tari. The lingo of "Authorization-only" and such is as the official npm docs are describing it. See: docs.npmjs.com/about-two-factor-au...
I agree that this is somewhat confusing.
But hey! Thanks for the heads up. Nice article.