Unable to get 2FA to work

User Service
1

We are trying to set up 2FA on our app based on the instructions provided here

The plugin/feature was installed from Marketplace
image

The Users table has the additional columns

image

When we try to register a user using the register endpoint of the UserService.
We get the following response

  • the transaction id is not present,
  • the twoFA_secret and twoFA_qrURL is null.
  • Only twoFactorAuthentication is set to true

Without these we cant proceed to the next step.

Request

image

Response

image

Instead of Registering with 2FA we also tried enabling 2FA for an existing user using the /enable2fa PUT method

In the response we get the totpQR_Path and totpSecretKey and adding the key to the Authenticator works.

There is no transaction id provided here which is as per your documentation. But the user record in the database still has twoFactorAuthentication = False

image
image1358×366 13.4 KB

If we try to login as the user, the response does not have a transaction id that can use to carry out 2fa with the /auth POST endpoint as it requires the transaction id and the authenticator code.

We manually updated twoFactorAuthentication = True and tried to login again, it still does not provide a transaction id.

image
image1361×682 28.5 KB

Could you please let us know what are we doing incorrectly and what changes are needed to make this work on our app?

Thanks
Fabio

2

Hi @Fabio_Carvalho_FLRS,

We are currently looking into your issue and will answer as soon as possible.

Regards,
Bohdan

4

Hello @Fabio_Carvalho_FLRS,

could you please try renaming your columns:
twoFactorAuth → totpAuthEnabled
twoFA_qrURL → totpQR_Path
twoFA_secret → totpSecretKey

And try again after these changes.

Also, do you use the Twilio plugin in your app? Is it working fine for you or do you have the same issue?

5

Hi Stanislaw,

We changed the columns as you suggested. When calling the register endpoint we get the following error

Request:
image

Response:

image
image947×440 11.6 KB

Thanks
Fabio

7

Hello @Fabio_Carvalho_FLRS

I apologize for the inconvenience. An internal ticket for this problem has already been created. We will notify you as soon as the fix is available.

Regards,
Inna

8

The issue has been fixed. You need to uninstall and install 2FA Login service again. Please let me know if the fix helped you.

Regards,
Inna

9

Thanks guys for your help. We’ve tested the endpoints and are implementing the feature.

Thanks
Fabio

1 Like