Disabling the 2FA from web while being in the 2FA screen in the client results in spinning state

[data-sync-user]

Important details: 

• the user can leave the screen by pressing the “Cancel” button;

• not reproducing if the user is in the Password screen when disabling the 2FA from web; 

• reproducing with 2.19 as well;

Version / build found in: 

• 2.20.0 (2.202401091608)

Reproducible on:

• All;

Prerequisites:

• Have Mozilla VPN app installed and open;

• Have a Mx account with 2FA enabled;

• Be in “Enter security code” screen;

Steps to reproduce:

1. While being in the “Enter security code” in the client, go to +https://accounts.stage.mozaws.net/+ and sign in with the account from prerequisites;
2. Disable the 2FA by pressing the “Disable” button from the “Security” section - “Two-step authentication” option;
3. Go back to the client, enter the security code provided by the 2FA app and press the “Verify” button;
4. Observe the behavior;

Expected result:

• User is able to sign in / The “Enter security code” screen is no longer displayed (?);

Actual result:

• The “Verify” button remains in spinning state (even after 10 mins);

Notes:

• See the attached video and logs;

┆Issue is synchronized with this Jira Bug ┆Reporter: Bianca Hidecuti

[data-sync-user]

➤ Santiago Andrigo commented:

Putting this as Low as it requires a race condition. Also, this may not need to be addressed once we move to FxA-hosted authentication.