OpenConext / Stepup-tiqr

tiqr IdP for step-up authentication
Apache License 2.0
3 stars 2 forks source link

Enrollment with incorrect pdo-storage settings #164

Closed tvdijen closed 1 year ago

tvdijen commented 1 year ago

This is probably an edge case, but it has proven really hard to debug.

Scenario:

Configure userstorage and usersecretstorage both with the pdo storage handler. Now for usersecretstorage you configure a table that does exist, but doesn't has the appropriate schema (in my case I accidentally set it to tiqrstate that is meant for statestorage). Next, try to enroll a token.. It silently succeeds, no errors in the logs! However, when you check the user-table the user doesn't have a secret set, and authentication will relentlessly fail when trying to use the token.

pmeulen commented 1 year ago

Fixed by https://github.com/Tiqr/tiqr-server-libphp/pull/47