warp-tech/warpgate
[BUG] Login asks for OTP key when none is associated with the account.
オープン
#981 opened on 2024/04/16
area/uihelp wanted
Repository metrics
- Stars
- (7,061 個のスター)
- PR merge metrics
- (平均マージ 3d 5h) (30d で 70 merged PRs)
説明
I added an OTP key to a user then realised I couldn't add it (Bitwarden wouldn't scan the QR code and it didn't display the raw hash).
I then deleted the OTP key from the account and clicked update. If I check in the admin panel there is no OTP key associated with the account, but when I want to log in with that account in the web interface, it asks for an OTP value.
Reproduction:
- Log in as admin
- Add otp key to account
- Click next (why is there no confirmation for the OTP key?)
- Save the account, but stay on the page
- Delete the OTP key
- Save the account again
- Log out as admin
- Try to log in as the changed user. Warpgate asks for an OTP key after password, which it shouldn't
I'm on version v0.9.1