bitwarden / clients

Bitwarden client apps (web, browser extension, desktop, and cli).
https://bitwarden.com
Other
9.17k stars 1.24k forks source link

'Unlock with PIN' checkbox not resetting after KDF iterations change #4593

Open MrPrayer opened 1 year ago

MrPrayer commented 1 year ago

Steps To Reproduce

  1. Set 'Unlock with PIN' to checked on extension's settings tab, enter new PIN
  2. (optional) Verify functionality by clicking 'Lock now', notice the prompt
  3. Go to 'Vault Settings, Security, Keys' (https://vault.bitwarden.com/#/settings/security/security-keys)
  4. Change Value of 'KDF iterations' field
  5. Enter Master password
  6. Click on 'Change KDF'
  7. Log in with extension again after it resets

Expected Result

If the forced logout meant to reset ALL user's settings, 'Unlock with PIN' should be reset after re-login. Otherwise extension should be aware of PIN set in Step 1.

Actual Result

'Unlock with PIN' checkbox on extension's settings tab is set to checked/on. After clicking on 'Lock now', extension prompts you to enter master password. Previously set PIN is not accepted.

Screenshots or Videos

No response

Additional Context

No response

Operating System

Windows

Operating System Version

10,11

Web Browser

Opera, Vivaldi

Browser Version

Opera GX: core: 93.0.4585.84, Vivaldi: 5.6.2867.58 (Stable channel) (Pending update 5.6.2867.62) (64-bit)

Build Version

2023.1.0

Issue Tracking Info

MrPrayer commented 1 year ago

Just checked, same thing applies to a simple log out. Apologies, should have tried it before posting. Nevertheless, bug still stands.

Greenderella commented 1 year ago

Hi there,

Thank you for your report! A member of our team has been able to reproduce this issue, and have flagged this to our engineering team for them to review. We (the Customer Success team) are not sure if this is in fact a bug or just us not having the ideal workflow for this, now is up to the engineering team to determine this.

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these.

Thanks once again!