Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-114330

Session expired can bypass OTP authentication

    Details

      Description

      Steps to reproduce:
      1. Login portal
      2. Navigate to Instance Settings>Multi-factor Authentication
      3. Checked Enabled and save
      4. Wait for login session expired, Refresh page
      5. Enter email and password, Click Sign In
      6. Click Sign In again
      7. Enter email and password, Click Sign In

      Actual result: Login successfully.

      Expected result: Go through OTP authentication.

        Attachments

          Activity

            People

            Assignee:
            della.wang Della Wang (Inactive)
            Reporter:
            della.wang Della Wang (Inactive)
            Participants of an Issue:
            Recent user:
            Della Wang (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              1 year, 34 weeks, 1 day ago

                Packages

                Version Package
                Master