getsentry / sentry

Developer-first error tracking and performance monitoring
https://sentry.io
Other
38.82k stars 4.16k forks source link

Unable to setup U2F Token, 401 Unauthorized #27877

Open Lissy93 opened 3 years ago

Lissy93 commented 3 years ago

Environment

SaaS/ Hosted App

Priority

Low/ Medium

Steps to Reproduce

  1. Login to account
  2. Navigate to Settings --> Account --> Security
  3. Scroll down to Two-Factor Authentication, and click U2F (Universal 2nd Factor) --> Add
  4. A popup opens, prompting me for my account password
  5. I enter my correct password, and hit Confirm Password

The button then becomes disabled, and the page just loads forever. The console shows that the u2f/enroll endpoint is returning a 401 error.

Expected Result

Expected to be taken to the next screen, and prompted to insert and activate my U2F key.

My Environment

Actual Result

The page continuously loads, button remains disabled, and the console shows the following error: GET https://sentry.io/api/0/users/me/authenticators/u2f/enroll/ 401 (Unauthorized)

image

getsentry-release commented 3 years ago

Routing to @getsentry/enterprise for triage. ⏲️

leedongwei commented 3 years ago

Thanks for the bug report @Lissy93. I'm unable to replicate the issue, so I'm keeping this open to see if others encounter the same issue.

As a workaround, could you log out and back in again? That will renew your session so it skips the "confirm password" flow and you can setup U2F from there.

Lissy93 commented 3 years ago

Thanks for your reply @leedongwei - Logging out, and then in again fixed the issue, and I can now set up the hardware token. I feel a bit dumb for not thinking about that before! But it's all working now :) Thanks for your help!

leedongwei commented 3 years ago

@Lissy93 Glad that you're unblocked!

I'm reopening this issue because I've managed to replicate it. Definitely a bug on our end.