born05 / craft-twofactorauthentication

Craft plugin for two-factor or two-step login using Time Based OTP.
MIT License
36 stars 26 forks source link

WIP: Fix for conflicts with new config option asyncCsrfInputs=true since craftcms 4.9 #97

Closed Tim-Wils closed 3 months ago

Tim-Wils commented 3 months ago

Hey! The new config option named asyncCsrfInputs that is out since CraftCMS 4.9 conflicts with this plugin that results in a Crsf Token input that couldn't be verified.

What happens?: The crsf-token could not be retrieved and it resolves in a undefined hidden input: image

Crsf Input that should be filled is undefined: image

With this fix the hidden Csrf input is properly set: image

Edit: Looks like this fix still work in progress as the actionLoginProcess() is now returning a Unable to verify your data submission.

Edit2: It now returns an error at validateRequest, I'm sorry I don't have time to look into it any deeper right now.

Tim-Wils commented 3 months ago

Closing this in favor of #98 :)