warp-tech/warpgate
[BUG] Login asks for OTP key when none is associated with the account.
开放
#981 创建于 2024年4月16日
area/uihelp wanted
仓库指标
- 星标
- (7,061 个星标)
- PR 合并指标
- (平均合并 3天 5小时) (30 天内合并 70 个 PR)
描述
I added an OTP key to a user then realised I couldn't add it (Bitwarden wouldn't scan the QR code and it didn't display the raw hash).
I then deleted the OTP key from the account and clicked update. If I check in the admin panel there is no OTP key associated with the account, but when I want to log in with that account in the web interface, it asks for an OTP value.
Reproduction:
- Log in as admin
- Add otp key to account
- Click next (why is there no confirmation for the OTP key?)
- Save the account, but stay on the page
- Delete the OTP key
- Save the account again
- Log out as admin
- Try to log in as the changed user. Warpgate asks for an OTP key after password, which it shouldn't
I'm on version v0.9.1