[bug] invalid_token error when setting up TOTP #536

New issue

Closed

opened 2023-05-09 11:06:41 +00:00 by pswilde · 1 comment

pswilde commented

2023-05-09 11:06:41 +00:00

Your setup

Source

Extra details

Via Podman/Docker - built and run on Elixir-alpine container

Version

3.8.0-235-g145c7307-develop

PostgreSQL version

What were you trying to do?

Set up TOTP for user

What did you expect to happen?

once the backup codes and QR code are generated, the generated TOTP code should work

What actually happened?

after entering the TOTP code, password and clicking "Confirm & enable OTP the error "invalid_token" is shown and the user can go no further. Subsequent TOTP codes show the same error.

Logs

I cannot see any logs within Akkoma itself, but browser javascript logs show the following error:

XHRPOST
https://example.com/api/pleroma/accounts/mfa/confirm/totp
[HTTP/1.1 422 Unprocessable Entity 233ms]

	
POST
	https://example.com/api/pleroma/accounts/mfa/confirm/totp
Status
422
Unprocessable Entity
VersionHTTP/1.1
Transferred1.40 kB (25 B size)
Referrer Policyno-referrer
Request PriorityHighest

Severity

I can manage

Have you searched for this issue?

I have double-checked and have not found this issue mentioned anywhere.

### Your setup Source ### Extra details Via Podman/Docker - built and run on Elixir-alpine container ### Version 3.8.0-235-g145c7307-develop ### PostgreSQL version 14 ### What were you trying to do? Set up TOTP for user ### What did you expect to happen? once the backup codes and QR code are generated, the generated TOTP code should work ### What actually happened? after entering the TOTP code, password and clicking "Confirm & enable OTP the error "invalid_token" is shown and the user can go no further. Subsequent TOTP codes show the same error. ### Logs I cannot see any logs within Akkoma itself, but browser javascript logs show the following error: ````shell XHRPOST https://example.com/api/pleroma/accounts/mfa/confirm/totp [HTTP/1.1 422 Unprocessable Entity 233ms] POST https://example.com/api/pleroma/accounts/mfa/confirm/totp Status 422 Unprocessable Entity VersionHTTP/1.1 Transferred1.40 kB (25 B size) Referrer Policyno-referrer Request PriorityHighest ```` ### Severity I can manage ### Have you searched for this issue? - [x] I have double-checked and have not found this issue mentioned anywhere.