WordPress / WordPress/two-factor

Pasting verification code no longer fires automatic login

Open Beginner friendly
#959 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
825
Forks
187
Avg merge
2d 11h
Merged PRs (30d)
17

Description

Describe the bug

In the past, copying and pasting the verification code into the presented verification field would auto submit the request, allowing the user to login. Now, the Verify button is greyed out. After pasting, user has to delete the last digit, put it in manually, and it then fires off.

Steps to Reproduce
  1. Go to login on website
  2. login with username and pass
  3. Copy verification code from received email
  4. Paste into website
  5. Verify button stays grey
  6. Delete the last number
  7. Reenter the number manually
  8. Login starts automatically
Screenshots, screen recording, code snippet

I was able to resolve the issue by using this as a plugin-mu:

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the login_enqueue_scripts hook and the two-factor-login-authcode script handling the authcode field; compare paste handling with the input and keyup behavior described in the report. Confirm that pasting a complete verification code enables the Verify button and automatically begins login using the reported reproduction steps.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, php
Domain
authentication
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
74/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.