[Bug]: Redis Insight desktop app cannot complete Google OAuth login when TOTP MFA is enabled
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 8.8k
- Forks
- 491
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 49
Description
Preconditions
- MFA is enabled on the Redis account.
- The account uses Google OAuth.
- Login to the Redis web app works correctly.
Steps to reproduce
- Open Redis Insight Desktop.
- Select Google OAuth login.
- Complete the login successfully in the browser.
- Return to Redis Insight Desktop.
- Observe that login fails with showing "Request failed with status code 429"
Actual behavior
Redis Insight Desktop fails to complete the login and repeatedly returns 401 user-mfa-required. After several attempts, it returns 429 mfa-quota-exceeded. (see .redis-insight logs below)
This makes the desktop app unusable for me.
Screenshots
Additional context
- Operating system: macOS 26.5.2
- Device: Apple Silicon Mac
- Redis Insight version: 3.6.0
- Authentication: Google OAuth
- MFA: TOTP enabled
- Redis web app login works correctly
Relevant errors:
7/21/2026, 10:15:25 AM | ERROR | CloudUserApiService | Unable to login user | {
error: {
type: 'CloudApiUnauthorizedException',
message: 'Request failed with status code 401',
stack: undefined,
cause: {
errors: {
timestamp: 1784621725427,
status: 401,
code: 'user-mfa-required',
message: 'user-mfa-required',
params: '{"smsFactorAvailable":false,"totpFactorAvailable":true}'
}
}
},
sessionMetadata: {
data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
userId: '1',
accountId: '1',
sessionId: '1',
correlationId: '93fb31bb-cc36-4187-a67e-a2e0a29adcba',
uniqueId: undefined
},
data: undefined
}
7/21/2026, 10:15:25 AM | ERROR | CloudUserApiService | Unable to sync user profile | {
error: {
type: 'CloudApiUnauthorizedException',
message: 'Request failed with status code 401',
stack: undefined,
cause: {
errors: {
timestamp: 1784621725427,
status: 401,
code: 'user-mfa-required',
message: 'user-mfa-required',
params: '{"smsFactorAvailable":false,"totpFactorAvailable":true}'
}
}
},
sessionMetadata: {
data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
userId: '1',
accountId: '1',
sessionId: '1',
correlationId: '93fb31bb-cc36-4187-a67e-a2e0a29adcba',
uniqueId: undefined
},
data: undefined
}
7/21/2026, 10:15:26 AM | ERROR | CloudUserApiService | Unable to login user | {
error: {
type: 'CloudApiUnauthorizedException',
message: 'Request failed with status code 401',
stack: undefined,
cause: {
errors: {
timestamp: 1784621726542,
status: 401,
code: 'user-mfa-required',
message: 'user-mfa-required',
params: '{"smsFactorAvailable":false,"totpFactorAvailable":true}'
}
}
},
sessionMetadata: {
data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
userId: '1',
accountId: '1',
sessionId: '1',
correlationId: '93fb31bb-cc36-4187-a67e-a2e0a29adcba',
uniqueId: undefined
},
data: undefined
}
7/21/2026, 10:15:26 AM | ERROR | CloudUserApiService | Unable to sync user profile | {
error: {
type: 'CloudApiUnauthorizedException',
message: 'Request failed with status code 401',
stack: undefined,
cause: {
errors: {
timestamp: 1784621726542,
status: 401,
code: 'user-mfa-required',
message: 'user-mfa-required',
params: '{"smsFactorAvailable":false,"totpFactorAvailable":true}'
}
}
},
sessionMetadata: {
data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
userId: '1',
accountId: '1',
sessionId: '1',
correlationId: '93fb31bb-cc36-4187-a67e-a2e0a29adcba',
uniqueId: undefined
},
data: undefined
}
7/21/2026, 10:15:40 AM | INFO | CloudAuthService | Handling a callback with a query having code,state keys | { error: undefined, data: undefined }
7/21/2026, 10:15:41 AM | ERROR | CloudUserApiService | Unable to login user | {
error: {
type: 'CloudApiInternalServerErrorException',
message: 'Request failed with status code 429',
stack: undefined,
cause: {
errors: {
timestamp: 1784621741804,
status: 429,
code: 'mfa-quota-exceeded',
message: '',
params: ''
}
}
},
sessionMetadata: {
data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
userId: '1',
accountId: '1',
sessionId: '1',
correlationId: 'a01a3600-168d-4f69-8573-1d3bae86f989',
uniqueId: undefined
},
data: undefined
}
7/21/2026, 10:15:41 AM | ERROR | CloudUserApiService | Unable to sync user profile | {
error: {
type: 'CloudApiInternalServerErrorException',
message: 'Request failed with status code 429',
stack: undefined,
cause: {
errors: {
timestamp: 1784621741804,
status: 429,
code: 'mfa-quota-exceeded',
message: '',
params: ''
}
}
},
sessionMetadata: {
data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
userId: '1',
accountId: '1',
sessionId: '1',
correlationId: 'a01a3600-168d-4f69-8573-1d3bae86f989',
uniqueId: undefined
},
data: undefined
}
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the Redis Insight Desktop OAuth callback through CloudAuthService, then follow how CloudUserApiService handles user-mfa-required and mfa-quota-exceeded responses. Reproduce the Google OAuth flow with TOTP MFA and verify that the desktop app completes login without repeated 401 or 429 errors.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- redis, typescript
- Domain
- authentication, desktop
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100