joomla / joomla-cms

Home of the Joomla! Content Management System
https://www.joomla.org
GNU General Public License v2.0
4.73k stars 3.64k forks source link

Too many redirects error when password reset is active and MFA is required #43311

Open benyrfg opened 5 months ago

benyrfg commented 5 months ago

Steps to reproduce the issue

  1. Create new user with "Require Password Reset" option active, add user to "Registered" user group
  2. In the Users -> Options -> Multi-factor Authentication set "Enforce Multi-factor Authentication" for "Registered" user group like this: Screenshot - 2024-04-18T224615 701
  3. Go to the frontend and try to log-in

Expected result

User should by asked for new password and then set-up MFA method

Actual result

Error: Too_Many_Redirects In the URL is first displayed "/my-profile?view=methods", then "/my-profile?layout=edit" (it alternates when reload)

System information (as much as possible)

Joomla 5.1 Also tested on Joomla 5.0.3 Tested on Cassiopeia PHP 8.2.12 MariaDB 10.5.22 Linux www10 5.14.0-362.24.1.el9_3.0.1.x86_64

Additional comments

Quy commented 4 months ago

Duplicate #40729

Quy commented 4 months ago

Closing as duplicate. Thanks for the report.

benyrfg commented 4 months ago

@Quy I don't think it's a duplicate. I did not have this issue before update to Joomla 5. The #40729 was reported od J 4.3.2 and according to KeesZNL reproduction is related on missing "user profile" menu item. In my case, the menu item is created and enabled.

benyrfg commented 2 weeks ago

After updating to 5.1.4 this issue persists.