Comments (7)
Looks as if there's a request against /2fa_check
when the user hasn't even completed the initial login yet.
Would you please post your security.yaml
configuration?
from 2fa.
Correct, I just did a POST using command line to /2fa_check and replicated the error in dev.
I can't post the whole yaml but here are relevant parts...
main:
pattern: /
host: "%manage_subdomain%.mysites.guru"
remember_me:
secret: '%kernel.secret%'
lifetime: 2592000 # 1 month in seconds
path: /
httponly: true
samesite: 'strict'
name: _rememberme
two_factor:
auth_form_path: 2fa_login
check_path: 2fa_login_check
custom_authenticators:
- Base\Security\Authenticator
lazy: true
provider: users
switch_user: { parameter: _switch_user }
logout:
path: app_logout
- { path: ^/2fa, role: IS_AUTHENTICATED_2FA_IN_PROGRESS }
from 2fa.
Just thought IS_AUTHENTICATED_2FA_IN_PROGRESS
should actually prevent that from happening, but then I remembered the authenticator is actually executed before access control. So it's running into this
2fa/src/bundle/Security/Http/Authenticator/TwoFactorAuthenticator.php
Lines 102 to 105 in cc7028a
and then further down a token is expected when it's actually null
.
I'll add a null check for that case.
from 2fa.
Sorry :) pleased it was a quick easy painless issue :)
from 2fa.
Released v5.4.2 with a fix
from 2fa.
Awesome - let me jump and test that for you....
from 2fa.
Perfect! Thanks for the quick fix. Works perfectly for me.
from 2fa.
Related Issues (20)
- Custom prepare trigger to enable selection of 2FA method at login HOT 2
- Custom form HOT 2
- Support Symfony 7 HOT 6
- Validate code before actual Google Authentication / Different BruteForce protection compared to documentation HOT 1
- Bundle version 7 todo list (Symfony 7 support) HOT 1
- symfony 5.4 firewall with custom_authenticator HOT 3
- Pass TwoFactorTokenInterface to PreferredProviderInterface HOT 1
- Infinite redirection loop problem HOT 2
- advice on taking this bundle to the next level HOT 3
- Unable to decode the secret. Is it correctly base32 encoded? HOT 1
- After login it is not redirecting me to the 2fa route HOT 2
- Reduce the secret length to 16 characters HOT 1
- 2FA not detected/working on my project HOT 8
- Increase performance by using CacheableVoterInterface HOT 2
- GitHub Sponsors (PayPal not possible) HOT 2
- Cache-control headers are set to private when using 2FA bundle HOT 1
- Symfony 7.1 Support
- Unrecognized option "trusted_device" under "scheb_two_factor" HOT 2
- Failover 2FA HOT 1
- How to ask for 2FA (TOTP code) when already logged in HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from 2fa.