Place Your Ad Here

Bug Login via Passkey sets remember but not tfa_trust cookie

There is a bug in this version
K

Kirby

Guest
When logging in with a Passkey, XenForo automatically sets cookie _user so th user stays "logged in" but it does not set cookie tfa_trust so for the next session a TFA verification is required - which can be performed with the same Passkey that was used to initially log in.

IMHO this doesn't make much sense and probably annoys & confuses users.

XenForo should either
  1. Always set user and tfa_trust cookies when logging in via Passkey
    Preferred
  2. Never...

Read more

Continue reading...
 
You must log in or register to reply here.

Similar threads

T
Solved Login via Passkey in Admin does not work
Replies
0
Views
123
XenForo General Discussions
TnT
T
T
Bug Login via Passkey in Admin does not work
Replies
0
Views
169
XenForo General Discussions
TnT
T
K
Bug Login via "Passkey" created on Yubikey 5 does not work
Replies
0
Views
157
XenForo General Discussions
Kirby
K
S
Ques/Help Best way to handle forced login via connected account?
Replies
0
Views
277
XenForo General Discussions
SpecialK
S
M
Solved Direct URL access to login/login vs. clicking on the login button via the tooltip gives different so
Replies
0
Views
477
XenForo General Discussions
Moshe1010
M
Top Bottom
Back