Error when (un)hiding user via listing

[brotkrueml]

When hiding or unhiding a user via the icon in the backend user listing an error occurs:

Oops, an error occurred! Event: b178fefbe77e45b6bfd25cbc78e02ef3
Session Verification required

Expected behaviour: The modal for password confirmation is shown.

TYPO3: 10.4.3
sudo_mode: 0.6.1

[ohader]

Confirmed, there's no handling of those AJAX calls yet - but it proves that the protection works ;)
I guess, I have to tackle that during the next few days. Thanks for the report!

[brotkrueml]

Addition: The same error occurs when deleting a user in the list and in the record itself.

[ohader]

I started to work on this missing feature / bug → see branch https://github.com/FriendsOfTYPO3/sudo-mode/tree/fix/issue-4
Still a couple of things are missing in AjaxDataHandler in the TYPO3 core.
For the v9 version, the handling of ext:rsaauth again might be challenging - the rest of the core expects server side rendering and processing in most times.

[ohader]

I've added a short screencast of TYPO3 v9.5 at https://forge.typo3.org/attachments/download/35434/Capto_Capture%202020-09-07_08-29-28_PM.mp4 (https://forge.typo3.org/issues/92199 is required for sudo_mode extension)