Looks like token is accepted, but i'm redirected to auth page again and again about apache_2fa HOT 6 CLOSED

When you get redirected to the auth cgi script, what does the full URL look like on the browser, can you paste it here?

from apache_2fa.

It is always like this: http://10.11.11.101/auth/auth?/%3f

from apache_2fa.

You are using http. This type of security would really only make sense when using https but I guess you know this.

With http, cookie may not be visible to the browser, depending on the browser you use. Try commenting out/removing these two lines in auth code:

  cookie['2FA_Auth']['secure'] = True
  cookie['2FA_Auth']['httponly'] = True

See if that makes a difference. That being said, you should really consider using https, even with a self signed certificate.

from apache_2fa.

That's right! Works on SSL (for testing purposes I wanted to save some minutes disregarding SSL configuration, and started testing your code on plain HTTP).
Thank you!

from apache_2fa.

Cool, glad to hear it. I will clarify the documentation so people don't get confused.

from apache_2fa.

Hi @itemir ,
I reopen this issue because I am currently facing the same problem with https enabled.
I tryed without and with https but I keep seeing the google authenticator form ... any idea ?

from apache_2fa.