On settings save, TOTP verification skipped the second time

ScottPeterJohnson / purelymail-issues

Issues repository for the Purelymail email service.

39 stars 0 forks source link

On settings save, TOTP verification skipped the second time #189

Open JVimes opened 12 months ago

JVimes commented 12 months ago

I created a TOTP entry, and when saving user settings I was asked to verify 6-digit code. I deleted the TOTP entry and created a new one, but was not asked to verify this time. Is this a bug? I don't recall clicking the "I know what I'm doing" checkbox. Thanks for Purelymail!

ScottPeterJohnson commented 12 months ago

I think this is an oversight- it's currently only checking for toggling from 2FA off to 2FA on for that prompt, it should probably check for that or any new 2FA methods.