search

gyselroth / balloon-client-web

balloon web user interface
GNU General Public License v3.0
2 stars 5 forks source link

Verify 2fa code before activation #298

Open raffis opened 4 years ago

raffis commented 4 years ago

Describe the bug

Currently 2fs gets enabled without verifying the code. This might lead to account lockouts if the code can not be scanned for whatever reason.

To Reproduce

  1. Enable 2fa
  2. Don't scan code
  3. Restart browser
  4. Lockout

Expected behavior

Prompt for the code to verify 2fa.

Environment