redis / redis/RedisInsight

[Bug]: Redis Insight desktop app cannot complete Google OAuth login when TOTP MFA is enabled

Open
#6,249 8 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
8.8k
Forks
491
Avg merge
1d 22h
Merged PRs (30d)
49

Description

Preconditions

  • MFA is enabled on the Redis account.
  • The account uses Google OAuth.
  • Login to the Redis web app works correctly.

Steps to reproduce

  1. Open Redis Insight Desktop.
  2. Select Google OAuth login.
  3. Complete the login successfully in the browser.
  4. Return to Redis Insight Desktop.
  5. Observe that login fails with showing "Request failed with status code 429"

Actual behavior

Redis Insight Desktop fails to complete the login and repeatedly returns 401 user-mfa-required. After several attempts, it returns 429 mfa-quota-exceeded. (see .redis-insight logs below)

This makes the desktop app unusable for me.

Screenshots

Image

Additional context

  • Operating system: macOS 26.5.2
  • Device: Apple Silicon Mac
  • Redis Insight version: 3.6.0
  • Authentication: Google OAuth
  • MFA: TOTP enabled
  • Redis web app login works correctly

Relevant errors:

7/21/2026, 10:15:25 AM | ERROR | CloudUserApiService | Unable to login user | {
  error: {
    type: 'CloudApiUnauthorizedException',
    message: 'Request failed with status code 401',
    stack: undefined,
    cause: {
      errors: {
        timestamp: 1784621725427,
        status: 401,
        code: 'user-mfa-required',
        message: 'user-mfa-required',
        params: '{"smsFactorAvailable":false,"totpFactorAvailable":true}'
      }
    }
  },
  sessionMetadata: {
    data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
    userId: '1',
    accountId: '1',
    sessionId: '1',
    correlationId: '93fb31bb-cc36-4187-a67e-a2e0a29adcba',
    uniqueId: undefined
  },
  data: undefined
}
7/21/2026, 10:15:25 AM | ERROR | CloudUserApiService | Unable to sync user profile | {
  error: {
    type: 'CloudApiUnauthorizedException',
    message: 'Request failed with status code 401',
    stack: undefined,
    cause: {
      errors: {
        timestamp: 1784621725427,
        status: 401,
        code: 'user-mfa-required',
        message: 'user-mfa-required',
        params: '{"smsFactorAvailable":false,"totpFactorAvailable":true}'
      }
    }
  },
  sessionMetadata: {
    data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
    userId: '1',
    accountId: '1',
    sessionId: '1',
    correlationId: '93fb31bb-cc36-4187-a67e-a2e0a29adcba',
    uniqueId: undefined
  },
  data: undefined
}
7/21/2026, 10:15:26 AM | ERROR | CloudUserApiService | Unable to login user | {
  error: {
    type: 'CloudApiUnauthorizedException',
    message: 'Request failed with status code 401',
    stack: undefined,
    cause: {
      errors: {
        timestamp: 1784621726542,
        status: 401,
        code: 'user-mfa-required',
        message: 'user-mfa-required',
        params: '{"smsFactorAvailable":false,"totpFactorAvailable":true}'
      }
    }
  },
  sessionMetadata: {
    data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
    userId: '1',
    accountId: '1',
    sessionId: '1',
    correlationId: '93fb31bb-cc36-4187-a67e-a2e0a29adcba',
    uniqueId: undefined
  },
  data: undefined
}
7/21/2026, 10:15:26 AM | ERROR | CloudUserApiService | Unable to sync user profile | {
  error: {
    type: 'CloudApiUnauthorizedException',
    message: 'Request failed with status code 401',
    stack: undefined,
    cause: {
      errors: {
        timestamp: 1784621726542,
        status: 401,
        code: 'user-mfa-required',
        message: 'user-mfa-required',
        params: '{"smsFactorAvailable":false,"totpFactorAvailable":true}'
      }
    }
  },
  sessionMetadata: {
    data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
    userId: '1',
    accountId: '1',
    sessionId: '1',
    correlationId: '93fb31bb-cc36-4187-a67e-a2e0a29adcba',
    uniqueId: undefined
  },
  data: undefined
}
7/21/2026, 10:15:40 AM | INFO | CloudAuthService | Handling a callback with a query having code,state keys | { error: undefined, data: undefined }
7/21/2026, 10:15:41 AM | ERROR | CloudUserApiService | Unable to login user | {
  error: {
    type: 'CloudApiInternalServerErrorException',
    message: 'Request failed with status code 429',
    stack: undefined,
    cause: {
      errors: {
        timestamp: 1784621741804,
        status: 429,
        code: 'mfa-quota-exceeded',
        message: '',
        params: ''
      }
    }
  },
  sessionMetadata: {
    data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
    userId: '1',
    accountId: '1',
    sessionId: '1',
    correlationId: 'a01a3600-168d-4f69-8573-1d3bae86f989',
    uniqueId: undefined
  },
  data: undefined
}
7/21/2026, 10:15:41 AM | ERROR | CloudUserApiService | Unable to sync user profile | {
  error: {
    type: 'CloudApiInternalServerErrorException',
    message: 'Request failed with status code 429',
    stack: undefined,
    cause: {
      errors: {
        timestamp: 1784621741804,
        status: 429,
        code: 'mfa-quota-exceeded',
        message: '',
        params: ''
      }
    }
  },
  sessionMetadata: {
    data: { data: undefined, requestMetadata: {}, uniqueId: undefined },
    userId: '1',
    accountId: '1',
    sessionId: '1',
    correlationId: 'a01a3600-168d-4f69-8573-1d3bae86f989',
    uniqueId: undefined
  },
  data: undefined
}

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the Redis Insight Desktop OAuth callback through CloudAuthService, then follow how CloudUserApiService handles user-mfa-required and mfa-quota-exceeded responses. Reproduce the Google OAuth flow with TOTP MFA and verify that the desktop app completes login without repeated 401 or 429 errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
redis, typescript
Domain
authentication, desktop
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.