warp-tech/warpgate

[BUG] Login asks for OTP key when none is associated with the account.

開放

#981 建立於 2024年4月16日

 (1 則留言) (0 個反應) (0 位負責人)Rust (281 個分叉)github user discovery
area/uihelp wanted

倉庫指標

星標
 (7,061 顆星)
PR 合併指標
 (平均合併 3天 5小時) (30 天內合併 70 個 PR)

描述

I added an OTP key to a user then realised I couldn't add it (Bitwarden wouldn't scan the QR code and it didn't display the raw hash).

I then deleted the OTP key from the account and clicked update. If I check in the admin panel there is no OTP key associated with the account, but when I want to log in with that account in the web interface, it asks for an OTP value.

Reproduction:

  1. Log in as admin
  2. Add otp key to account
  3. Click next (why is there no confirmation for the OTP key?)
  4. Save the account, but stay on the page
  5. Delete the OTP key
  6. Save the account again
  7. Log out as admin
  8. Try to log in as the changed user. Warpgate asks for an OTP key after password, which it shouldn't

I'm on version v0.9.1

貢獻者指南