nextcloud / nextcloud/twofactor_admin
Provider active despite expired code
Open
Nobody has claimed this yet.
1. to develop
bug
- Dominant language
- JavaScript
- Stars
- 18
- Forks
- 11
- Avg merge
- 10h 32m
- Merged PRs (30d)
- 2
Description
Steps to reproduce
- Generate a code for an admin user
- Wait for 48 hours
- The twofactor afmin support provider os still shown in the list of 2FA providers
Expected behaviour
The provider should expire as for usual users
Server configuration
Web server: Apache
Database: MySQL/Maria/SQLite/PostgreSQL
PHP version: 8.2
Nextcloud version: 30.0.10
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the admin 2FA provider's expiry and provider-listing entry points, comparing them with the usual-user expiry path. Reproduce with an admin-generated code after the 48-hour window and verify that the provider is no longer listed in the PHP 8.2 setup.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- apache, javascript, php
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100