Auth challenge timeout, unable to go back

crumple · April 26, 2022, 4:49pm

Tested on Kirby 3.6.1 and 3.6.5

After getting “Authentication Challenge Timeout”, clicking < Back or refreshing the page doesn’t allow me to restart the process. It’s stuck on that screen with < Back and Login buttons, waiting for a valid auth code.

The only way to carry on and request a new code is to delete the Kirby cookies, but I can’t ask my non-technical users to do that I’m afraid.

Any clues as to what might be causing this? Happens on localhost as well as hosted.

texnixe · April 26, 2022, 5:18pm

I already created an issue a while ago:

github.com/getkirby/kirby

Login with timed-out code should throw user out

opened 02:14PM - 12 Jan 22 UTC

texnixe

type: bug 🐛

## Description When trying to log in via code and the code has timed out, there… is no way back to the login form (back button doesn't do anything) and no way to resend the code. The only way out for the user seems to be to kill the session manually. **Expected behavior** There should either be a "Resend code" button or the back button should bring the user back to the login form or the user would be redirected to the login form. ## To reproduce 1. Enable login with code in config 2. Go the `/panel/login` and request a code 3. Wait long enough for the code to time out 4. Try to log in with the timed-out code 5. See error message 6. Try the back button => nothing 7. Refresh page => you still get the form that requests the login code ## Your setup **Kirby 3.6.1.1** **Your system (please complete the following information)** - Device: MacBook Pro (14", 2021) - OS: macOS 12.1 - Browser: Firefox - Version: 95.0.2