Authenticator-Extension / Authenticator-Extension/Authenticator
QR Code is defective in particular circumstances
- Dominant language
- TypeScript
- Stars
- 4.7k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
### Describe the issue
In particular circumstances, the QR Code «export» for a TOTP credential is defective/invalid.
This QR Code cannot be imported in TOTP app (Google Authenticator, FreeOTP…).
After analysis the problem is at the beginning of the otpauth URL.
A normal otpauth URL starts with otpauth://totp/...
The invalid URL used to create the invalid QR Code in Authenticator-Extension starts with otpauth://1/...
How to reproduce:
- set up Authenticator-Extension
- set up a master password in Authenticator-Extension
- enrol a TOTP token
- display the corresponding QR Code in Authenticator-Extension
- try to enrol this QR Code in any other app
How to work around:
- remove password protection from Authenticator-Extension before enrolling a new token
- set up password protection again after enrolment
### Browser
Firefox
### Browser Version
135.x
### Extension Version
8.0.2
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.