Skip to content

2FA code insertion by AliasVault fails #484

Description

@Stephan-P

Describe the bug:

When I use AliasVault's auto insert of the 2FA code, the VoidAuth server issues the following error message:

{
  "error": "invalid_request",
  "error_description": "interaction session not found"
}

To Reproduce:

Enable MFA in the default admin account 'auth_admin' and copy its secret
Open the AliasVault password manager, edit the database item, add 2FA, paste the secret, save
Click the 2FA-code in AliasVault
The first digit is copied into the VoidAuth entry field(s)
VoidAuth chokes with the above error message

Expected behavior:

This is the first example where I've encountered issues with AliasVault's autofill 2FA codes feature.
The full 2FA code coming from AliasVault should have filled the full VoidAuth entry field.
Manual copy filled the entry field alright, however resulting into an Invalid code error message.
(Luckily I have a Passskey as alternative)

Database Driver:

postgres

Screenshots:

Image Image

Additional context:

Looking very carefully, I get the impression that the 2FA code coming from AliasVault is copied into the first digit of the VoidAuth entry field

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingreleased

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions