Two Factor Authentication not working?

[Giray]

Hi.

Anyone having trouble with two factor authentication? I'm on 4.6.4 and when the authentication window comes up (on the admin side) when I type in the response, it won't let me through. I had to authenticate via email. It has done this consistently since yesterday.

Thoughts anyone?

Thx!!

[Adriano Faria]

I can confirm. I'm using Security Questions and I'm having hard times to login. Sometimes I can, a lot of times, don't.

[Giray]

I've had to disable it now. It's permanently blocking me.

[Adriano Faria]

Mine seems crazy: if I type the answer directly in the input box, it won't let me login. Then I type somewhere else and paste in the input box, it works. 😄

[Daniel F]

A patch was released earlier today, resolving the MFA issue.

[Adriano Faria]

Where do I see the patches available in the new support page? Clear system caches won't show the patch when reloading the page.

[abobader]

2 hours ago, Adriano Faria said:

Where do I see the patches available in the new support page? Clear system caches won't show the patch when reloading the page.

Will show in here:

 

[Adriano Faria]

Just now, abobader said:

Will show in here:

 

The patch? Nothing appears to me beyond “Running latest version”.

[Nathan Explosion]

3 hours ago, Giray said:

Hi.

Anyone having trouble with two factor authentication? I'm on 4.6.4 and when the authentication window comes up (on the admin side) when I type in the response, it won't let me through. I had to authenticate via email. It has done this consistently since yesterday.

Thoughts anyone?

Thx!!

Don't press the enter/return key after typing your code - click the 'Verify Code' button instead.

No idea if it's an intentional change, but the addition of the X to close the box makes me think it is 'working as intended' in its current state.

Ignore, I see it's been patched.

Edited July 15, 2021 by Nathan Explosion

[abobader]

5 minutes ago, Adriano Faria said:

The patch? Nothing appears to me beyond “Running latest version”.

I jus login to the ACP and find a patch, so I update, maybe it take time or something for location (ISP update as example).

Edited July 15, 2021 by abobader

[Giray]

Found the patch update. Suggestion: even if it's optional, maybe put the update notice in yellow (orange?) like the other warnings?

[Adriano Faria]

2 hours ago, Giray said:

Found the patch update.

Me too:

It really should be more prominent.

The patch fixed it, btw.

[panzerscope]

Hmmm. As this essentially breaks the logins, or at the very least causes lots of confusion for those having trouble...this update should be far more obvious. Its not a cursory update.

[Giray]

Hi Adriano,

Before figuring out that the TFA problem was on Invision's side, I made the stupid mistake of trying to debug and uninstalled your TFA masking plugin. The problem is that now when I go to install it again, IPS asks for version and when I say 4.6 it won't let me 😞 Not sure if you have to simply add something on the ips side? Definitely not urgent!!

[Adriano Faria]

9 minutes ago, Giray said:

Hi Adriano,

Before figuring out that the TFA problem was on Invision's side, I made the stupid mistake of trying to debug and uninstalled your TFA masking plugin. The problem is that now when I go to install it again, IPS asks for version and when I say 4.6 it won't let me 😞 Not sure if you have to simply add something on the ips side? Definitely not urgent!!

Sorry @Giray, I don't have any of my free plugins, as I didn't keep them. As we, as developers, can't download not even our own files, this (and all other free or paid from TheJackal84) are now unsupported.

[Adriano Faria]

@Giray, you can make a template edit to accomplish that. Edit your theme and open the core -> global -> login -> securityQuestionsAuth template and find:

<input type="text" name="security_answer" autocomplete="off" {{if request.security_answer}}class="ipsField_error"{{endif}}>

And change to:

<input type="password" name="security_answer" autocomplete="off" {{if request.security_answer}}class="ipsField_error"{{endif}}>

 

[Giray]

And on the eighth day, God created Adriano.