search

FusionWowCMS / FusionCMS

A CMS for World of Warcraft private servers
GNU Affero General Public License v3.0
57 stars 34 forks source link

Two-Factor - 2FA - BUG in Azerothcore #66

Open htc16 opened 2 weeks ago

htc16 commented 2 weeks ago

The system does not work with the azerothcore core, if you activate the 2FA system the website works correctly but it is NOT possible to log into the game.

If you enable 2FA directly through the game, you will be able to enter the game, but you will NOT be able to log in to the website.

It seems to me that the azerothcore core expects encryption in totp_secret.

htc16 commented 2 weeks ago

In addition, Azerothcore has some 2FA commands that allow you to enable 2FA. https://www.azerothcore.org/wiki/gm-commands image

By enabling the azerothcore 2FA commands, it is possible to log into the game account but it is not possible to log into the website account.

And as stated above, if you enable 2FA through the website, the login is only for the website, but not for the game.

Nightprince commented 6 days ago

In addition, Azerothcore has some 2FA commands that allow you to enable 2FA.

Can you message me on Discord so we can look into this issue?

htc16 commented 6 days ago

I don't have a social network and my server is not online, as I mentioned to you earlier.

But this bug is easy for you to test, just install Azerothcore and fusioncms, activate the 2fa of fusioncms and try to access the server and you won't be able to. After that you deactivate the 2fa of the site and activate the azerothcore according to the commands I sent above and you will notice that it is not possible to log in to the site but only to the game.