owncloud / owncloud/android

[BUG] Re-login on servers with 2FA

Open
#4,835 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Authentication Contributions are welcome Type:bug
Dominant language
Kotlin
Stars
4.2k
Forks
3.1k
Avg merge
1d 12h
Merged PRs (30d)
7

Description

Actual behaviour

After the user has entered their username and password on a server with 2FA, the app requests an authentication code to proceed with the login. When the user leaves the app to retrieve this code from another application and then returns, the screen resets, forcing the user to re-enter their credentials.

Expected behaviour

The app should show the same screen (code to log in) when the user reopens the app to enter the 2FA code.

Steps to reproduce
  1. Log in to a server with 2FA
  2. Minimize the oC app to get the request code
  3. Reopen the app to enter the code

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files or tests are identified in the issue. Reproduce the login flow with a server using 2FA, then inspect the Android login and app-lifecycle entry points to find where the pending authentication state is lost; done means returning from another app preserves the 2FA code screen without re-entering credentials.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, kotlin
Domain
authentication, mobile
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.