multiOTP / multiotp

multiOTP open source strong two factor authentication PHP library, OATH certified, with TOTP, HOTP, Mobile-OTP, YubiKey, SMS, QRcode provisioning, etc.
http://www.multiOTP.net/
GNU Lesser General Public License v3.0
346 stars 74 forks source link

Ask for OTP (without2FA users) when show saved passwords in Edge/Chrome #196

Open szolnokit opened 1 week ago

szolnokit commented 1 week ago

I have some windows users, created with: multiotp -create my_user without2fa (Some other users use 2FA...)

Windows logins are good. These users can login without ask for OTP.

But if these users try unhide the saved password in Edge/Chrome, asked username/password (this is normal) and multiOTP ask for OTP too. But no 2FA enabled for these usres, and no OTP.

These users unable to show their saved passwords currently.

I think mutiOTP shouldn't ask for an OTP if the user has 2FA disabled.

multiOTPWithout2FA value in registry is 1.