Passwordless login flow does not work on WP Admin if the site requires 2FA - Githubissues

Automattic / wp-calypso

The JavaScript and API powered WordPress.com

https://developer.wordpress.com

GNU General Public License v2.0

12.42k stars 1.99k forks source link

Passwordless login flow does not work on WP Admin if the site requires 2FA #96634

Open mmtr opened 10 hours ago

mmtr commented 10 hours ago

Issue reported during walkthrough: p58i-iKo-p2

Steps to reproduce

Go to https://wordpress.com/settings/security/
Pick a WoA site with the default admin interface active
Activate the "Require two-step authentication" setting
Go to Users > All Users
Click on the "Add new team member" button
Invite someone who is not yet a WP.com user
Accept the invitation and sign up
Note that you've not entered any password, but you're logged in
Go to Posts > Add new post

Current behavior

I see a confusing login screen

Expected behavior

Like in Calypso, the passwordless login flow should allow me to enter WP Admin.

github-actions[bot] commented 10 hours ago

OpenAI suggested the following labels for this issue:

[Feature Group] User Management: The issue pertains to the process of managing users and their access, particularly related to the passwordless login feature and 2FA settings.
[Feature] Authentication: The problem specifically addresses the authentication process when trying to log in without a password, especially when 2FA is required.
[Feature] Signup & Account Creation: The issue involves the flow of inviting new users to the site and their registration experience without password entry.