gravitee-io / issues

Gravitee.io - API Platform - Issues
65 stars 26 forks source link

MFA remember device does not work with true conditionals #10188

Closed exalate-issue-sync[bot] closed 1 day ago

exalate-issue-sync[bot] commented 2 days ago

Describe the bug :

describe-the-bug-

MFA remember device does not work with true conditionals

To Reproduce :

to-reproduce-

Steps to reproduce the behaviour:

  1. set up an application with mfa
  2. set the enrollment and challenge steps to "conditional" with the following EL: {#context.attributes['user']['additionalInformation']['skip_mfa'] == 'true'}
  3. Register a user and select to remember the device
  4. log out and back in and you will see an MFA challenge screen

Expected behaviour :

expected-behaviour-

The challenge should be skipped if the EL statement evaluates to true

Current behaviour :

current-behaviour-

The EL evaluates to true but the challenge is still shown

Desktop :

desktop-

* Please see Zendesk Support tab for further comments and attachments.